Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts. 2026/01/03 17:42:10 parsed 1 programs [ 265.067128][ T24] audit: type=1400 audit(1767462130.710:64): avc: denied { node_bind } for pid=275 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 265.071087][ T24] audit: type=1400 audit(1767462130.710:65): avc: denied { create } for pid=275 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 265.075805][ T24] audit: type=1400 audit(1767462130.710:66): avc: denied { module_request } for pid=275 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 265.675191][ T24] audit: type=1400 audit(1767462131.320:67): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 265.676889][ T283] cgroup: Unknown subsys name 'net' [ 265.698461][ T24] audit: type=1400 audit(1767462131.320:68): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 265.725762][ T24] audit: type=1400 audit(1767462131.350:69): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 265.726093][ T283] cgroup: Unknown subsys name 'devices' [ 265.895127][ T283] cgroup: Unknown subsys name 'hugetlb' [ 265.900841][ T283] cgroup: Unknown subsys name 'rlimit' [ 266.048437][ T24] audit: type=1400 audit(1767462131.690:70): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.071718][ T24] audit: type=1400 audit(1767462131.690:71): avc: denied { create } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 266.092566][ T24] audit: type=1400 audit(1767462131.690:72): avc: denied { write } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 266.098604][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 266.113080][ T24] audit: type=1400 audit(1767462131.690:73): avc: denied { read } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 266.155526][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 266.507688][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 266.518254][ T287] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 266.722161][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.729373][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.736840][ T305] device bridge_slave_0 entered promiscuous mode [ 266.744542][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.751568][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.758961][ T305] device bridge_slave_1 entered promiscuous mode [ 266.794092][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.801138][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.808668][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.815799][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.836744][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.844427][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.855590][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.865798][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.874062][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.881364][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.890315][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.898628][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.905758][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.920579][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.929601][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.943427][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.954100][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.962374][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.970147][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.978738][ T305] device veth0_vlan entered promiscuous mode [ 266.992682][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 267.002406][ T305] device veth1_macvtap entered promiscuous mode [ 267.011825][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 267.023438][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 267.645462][ T50] device bridge_slave_1 left promiscuous mode [ 267.658069][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.666293][ T50] device bridge_slave_0 left promiscuous mode [ 267.672440][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.680919][ T50] device veth1_macvtap left promiscuous mode [ 267.687247][ T50] device veth0_vlan left promiscuous mode 2026/01/03 17:42:13 executed programs: 0 [ 267.826336][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.833530][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.841319][ T352] device bridge_slave_0 entered promiscuous mode [ 267.848253][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.855330][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.863064][ T352] device bridge_slave_1 entered promiscuous mode [ 267.904899][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.912022][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.919390][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.926419][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.946334][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.953891][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.961104][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.970142][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.978555][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.985790][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.994590][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.002881][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.009944][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.025872][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.035381][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.052239][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.063554][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.071526][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.079277][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.088376][ T352] device veth0_vlan entered promiscuous mode [ 268.101880][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.111337][ T352] device veth1_macvtap entered promiscuous mode [ 268.125873][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.135786][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 409.043004][ T26] INFO: task kworker/u4:2:50 blocked for more than 122 seconds. [ 409.050674][ T26] Not tainted syzkaller #0 [ 409.232937][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.241635][ T26] task:kworker/u4:2 state:D stack: 0 pid: 50 ppid: 2 flags:0x10004000 [ 409.672974][ T26] Workqueue: netns cleanup_net [ 409.677776][ T26] Call Trace: [ 409.681150][ T26] __schedule+0xb47/0x1310 [ 409.992929][ T26] ? release_firmware_map_entry+0x18d/0x18d [ 409.998951][ T26] ? kthread_data+0x50/0xc0 [ 410.243949][ T26] ? wq_worker_sleeping+0x60/0x200 [ 410.249231][ T26] schedule+0x13c/0x1d0 [ 410.503022][ T26] synchronize_rcu_expedited+0x474/0x5e0 [ 410.509025][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 410.792973][ T26] ? synchronize_rcu+0x110/0x110 [ 410.798023][ T26] ? kasan_set_track+0x5b/0x70 [ 410.802775][ T26] ? kasan_set_track+0x4a/0x70 [ 411.142949][ T26] ? kasan_set_free_info+0x23/0x40 [ 411.148095][ T26] ? ____kasan_slab_free+0x125/0x160 [ 411.392960][ T26] ? __kasan_slab_free+0x11/0x20 [ 411.397927][ T26] ? slab_free_freelist_hook+0xc5/0x190 [ 411.682999][ T26] ? kfree+0xc0/0x270 [ 411.687160][ T26] ? rcu_exp_handler+0x370/0x370 [ 411.692138][ T26] ? io_schedule+0xe0/0xe0 [ 411.993002][ T26] synchronize_rcu+0x88/0x110 [ 411.997714][ T26] ? kvfree_call_rcu+0x620/0x620 [ 412.002673][ T26] ? debug_smp_processor_id+0x17/0x20 [ 412.372934][ T26] ? __kasan_check_write+0x14/0x20 [ 412.378087][ T26] ? _raw_spin_lock_bh+0x8e/0xe0 [ 412.612930][ T26] ? _raw_spin_lock_irq+0xe0/0xe0 [ 412.618055][ T26] ? __kasan_check_read+0x11/0x20 [ 412.862975][ T26] synchronize_net+0x34/0x40 [ 412.867707][ T26] tipc_nametbl_stop+0x12d0/0x1340 [ 412.872865][ T26] ? tipc_bcast_stop+0xd1/0x100 [ 413.222980][ T26] tipc_exit_net+0x99/0x150 [ 413.227525][ T26] cleanup_net+0x586/0xb70 [ 413.231974][ T26] ? __kasan_check_write+0x14/0x20 [ 413.602940][ T26] ? ops_init+0x4a0/0x4a0 [ 413.607339][ T26] ? read_word_at_a_time+0x12/0x20 [ 413.612700][ T26] ? strscpy+0x9b/0x290 [ 413.942950][ T26] process_one_work+0x6e1/0xba0 [ 413.947849][ T26] worker_thread+0xa6a/0x13b0 [ 413.952533][ T26] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 414.322932][ T26] ? __kasan_check_read+0x11/0x20 [ 414.327993][ T26] kthread+0x346/0x3d0 [ 414.332063][ T26] ? worker_clr_flags+0x190/0x190 [ 414.662939][ T26] ? kthread_blkcg+0xd0/0xd0 [ 414.667689][ T26] ret_from_fork+0x1f/0x30 [ 414.893016][ T26] NMI backtrace for cpu 0 [ 414.897388][ T26] CPU: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 [ 414.904569][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 414.914693][ T26] Call Trace: [ 414.918046][ T26] __dump_stack+0x21/0x24 [ 414.922369][ T26] dump_stack_lvl+0x169/0x1d8 [ 414.927041][ T26] ? show_regs_print_info+0x18/0x18 [ 414.932484][ T26] ? sched_show_task+0x324/0x4a0 [ 414.937425][ T26] ? __rcu_read_unlock+0xa0/0xa0 [ 414.942442][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 414.948518][ T26] dump_stack+0x15/0x1c [ 414.952677][ T26] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 414.958663][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 414.964561][ T26] watchdog+0xe2e/0xf70 [ 414.968712][ T26] ? hungtask_pm_notify+0x50/0x50 [ 414.973721][ T26] ? __kasan_check_read+0x11/0x20 [ 414.978817][ T26] ? __kthread_parkme+0xb9/0x1c0 [ 414.983746][ T26] kthread+0x346/0x3d0 [ 414.987820][ T26] ? hungtask_pm_notify+0x50/0x50 [ 414.992887][ T26] ? kthread_blkcg+0xd0/0xd0 [ 414.997472][ T26] ret_from_fork+0x1f/0x30 [ 415.002013][ T26] Sending NMI from CPU 0 to CPUs 1: [ 415.007718][ C1] NMI backtrace for cpu 1 [ 415.007725][ C1] CPU: 1 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 415.007730][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 415.007734][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x10/0x90 [ 415.007744][ C1] Code: 18 4a 89 44 01 20 48 ff c2 48 89 11 5d c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 48 8b 45 08 65 48 8b 15 40 c5 9e 7e <65> 8b 0d 45 c5 9e 7e f7 c1 00 01 ff 00 74 11 f7 c1 00 01 00 00 74 [ 415.007754][ C1] RSP: 0018:ffffc90000df7b30 EFLAGS: 00000246 [ 415.007762][ C1] RAX: ffffffff81289a6a RBX: 00007ffca90d9780 RCX: ffff8881102f3b40 [ 415.007767][ C1] RDX: ffff8881102f3b40 RSI: 0000000000000000 RDI: 0000000000000000 [ 415.007771][ C1] RBP: ffffc90000df7b30 R08: 0000000000000000 R09: fffff520001bef90 [ 415.007776][ C1] R10: fffff520001bef90 R11: 1ffff920001bef8a R12: dffffc0000000000 [ 415.007781][ C1] R13: 0000000000000007 R14: ffff8881102f3b40 R15: 1ffff1102205e8ca [ 415.007785][ C1] FS: 0000555575512500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 415.007789][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.007794][ C1] CR2: 0000000000000000 CR3: 000000012a414000 CR4: 00000000003506a0 [ 415.007798][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 415.007802][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 415.007804][ C1] Call Trace: [ 415.007807][ C1] fpu__restore_sig+0x33a/0x1240 [ 415.007810][ C1] ? sysvec_irq_work+0xc8/0xd0 [ 415.007813][ C1] ? copy_fpstate_to_sigframe+0xb40/0xb40 [ 415.007817][ C1] ? __kasan_check_write+0x14/0x20 [ 415.007820][ C1] ? recalc_sigpending+0x1c4/0x230 [ 415.007822][ C1] ? __kasan_check_write+0x14/0x20 [ 415.007825][ C1] ? _copy_from_user+0x95/0xd0 [ 415.007828][ C1] __ia32_sys_rt_sigreturn+0x5d0/0x6c0 [ 415.007832][ C1] ? bpf_do_trace_printk+0x240/0x240 [ 415.007834][ C1] ? KSTK_ESP+0x60/0x60 [ 415.007837][ C1] ? __bpf_trace_sys_enter+0x62/0x70 [ 415.007841][ C1] ? syscall_trace_enter+0x108/0x170 [ 415.007844][ C1] do_syscall_64+0x31/0x40 [ 415.007847][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 415.007850][ C1] RIP: 0033:0x7f8e2fbf2749 [ 415.007859][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.007863][ C1] RSP: 002b:00007ffca90d9b78 EFLAGS: 00000246 [ 415.007869][ C1] RAX: 0000000000000000 RBX: 00007f8e2fe48fa8 RCX: 00007f8e2fbf2749 [ 415.007873][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8e2fe48fac [ 415.007877][ C1] RBP: 0000000000000000 R08: 000dfaff51d98710 R09: 00000007a90d9e6f [ 415.007882][ C1] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f8e2fe48fac [ 415.007886][ C1] R13: 00007f8e2fe48fa0 R14: 0000000000000095 R15: 0000000000000003 [ 438.483017][ T26] INFO: task kworker/u4:2:50 blocked for more than 152 seconds. [ 438.490874][ T26] Not tainted syzkaller #0 [ 438.642910][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.651725][ T26] task:kworker/u4:2 state:D stack: 0 pid: 50 ppid: 2 flags:0x10004000 [ 439.082979][ T26] Workqueue: netns cleanup_net [ 439.087888][ T26] Call Trace: [ 439.091176][ T26] __schedule+0xb47/0x1310 [ 439.422953][ T26] ? release_firmware_map_entry+0x18d/0x18d [ 439.429404][ T26] ? kthread_data+0x50/0xc0 [ 439.693191][ T26] ? wq_worker_sleeping+0x60/0x200 [ 439.698338][ T26] schedule+0x13c/0x1d0 [ 439.702489][ T26] synchronize_rcu_expedited+0x474/0x5e0 [ 440.072930][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 440.078763][ T26] ? synchronize_rcu+0x110/0x110 [ 440.322980][ T26] ? kasan_set_track+0x5b/0x70 [ 440.328077][ T26] ? kasan_set_track+0x4a/0x70 [ 440.562959][ T26] ? kasan_set_free_info+0x23/0x40 [ 440.568198][ T26] ? ____kasan_slab_free+0x125/0x160 [ 440.872940][ T26] ? __kasan_slab_free+0x11/0x20 [ 440.877916][ T26] ? slab_free_freelist_hook+0xc5/0x190 [ 441.092929][ T26] ? kfree+0xc0/0x270 [ 441.096951][ T26] ? rcu_exp_handler+0x370/0x370 [ 441.101968][ T26] ? io_schedule+0xe0/0xe0 [ 441.432928][ T26] synchronize_rcu+0x88/0x110 [ 441.437639][ T26] ? kvfree_call_rcu+0x620/0x620 [ 441.442665][ T26] ? debug_smp_processor_id+0x17/0x20 [ 441.772980][ T26] ? __kasan_check_write+0x14/0x20 [ 441.778132][ T26] ? _raw_spin_lock_bh+0x8e/0xe0 [ 442.062944][ T26] ? _raw_spin_lock_irq+0xe0/0xe0 [ 442.068206][ T26] ? __kasan_check_read+0x11/0x20 [ 442.312933][ T26] synchronize_net+0x34/0x40 [ 442.317561][ T26] tipc_nametbl_stop+0x12d0/0x1340 [ 442.322751][ T26] ? tipc_bcast_stop+0xd1/0x100 [ 442.672969][ T26] tipc_exit_net+0x99/0x150 [ 442.677670][ T26] cleanup_net+0x586/0xb70 [ 442.682162][ T26] ? __kasan_check_write+0x14/0x20 [ 443.032956][ T26] ? ops_init+0x4a0/0x4a0 [ 443.037439][ T26] ? read_word_at_a_time+0x12/0x20 [ 443.042541][ T26] ? strscpy+0x9b/0x290 [ 443.382943][ T26] process_one_work+0x6e1/0xba0 [ 443.387826][ T26] worker_thread+0xa6a/0x13b0 [ 443.392497][ T26] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 443.732956][ T26] ? __kasan_check_read+0x11/0x20 [ 443.738020][ T26] kthread+0x346/0x3d0 [ 443.742072][ T26] ? worker_clr_flags+0x190/0x190 [ 444.102928][ T26] ? kthread_blkcg+0xd0/0xd0 [ 444.107552][ T26] ret_from_fork+0x1f/0x30 [ 444.302948][ T26] INFO: task jbd2/sda1-8:58 blocked for more than 137 seconds. [ 444.310663][ T26] Not tainted syzkaller #0 [ 444.612908][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 444.621905][ T26] task:jbd2/sda1-8 state:D stack: 0 pid: 58 ppid: 2 flags:0x10004000 [ 445.062909][ T26] Call Trace: [ 445.066282][ T26] __schedule+0xb47/0x1310 [ 445.071039][ T26] ? release_firmware_map_entry+0x18d/0x18d [ 445.432942][ T26] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 445.438523][ T26] ? _raw_spin_lock+0xe0/0xe0 [ 445.653005][ T26] ? guard_bio_eod+0x11e/0x190 [ 445.657827][ T26] schedule+0x13c/0x1d0 [ 445.661970][ T26] io_schedule+0x84/0xe0 [ 446.002977][ T26] bit_wait_io+0x13/0xd0 [ 446.007258][ T26] out_of_line_wait_on_bit+0x15a/0x200 [ 446.012724][ T26] ? bit_wait+0xd0/0xd0 [ 446.323168][ T26] ? __wait_on_bit+0x180/0x180 [ 446.328088][ T26] ? bit_waitqueue+0x30/0x30 [ 446.332673][ T26] ? _raw_write_trylock+0x140/0x140 [ 446.683068][ T26] __wait_on_buffer+0x77/0x80 [ 446.687842][ T26] jbd2_journal_commit_transaction+0x36f2/0x5830 [ 446.992989][ T26] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 446.999813][ T26] ? compat_start_thread+0x80/0x80 [ 447.292978][ T26] ? __kasan_check_write+0x14/0x20 [ 447.298142][ T26] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 447.542938][ T26] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 447.548433][ T26] ? _raw_spin_lock+0xe0/0xe0 [ 447.782968][ T26] ? detach_if_pending+0xf4/0x300 [ 447.788129][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 448.052977][ T26] ? del_timer_sync+0x144/0x1a0 [ 448.057866][ T26] kjournald2+0x44c/0x860 [ 448.062190][ T26] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 448.412937][ T26] ? io_schedule+0xe0/0xe0 [ 448.417397][ T26] ? __kasan_check_read+0x11/0x20 [ 448.422413][ T26] ? __kthread_parkme+0xb9/0x1c0 [ 448.762972][ T26] kthread+0x346/0x3d0 [ 448.767258][ T26] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 448.772448][ T26] ? kthread_blkcg+0xd0/0xd0 [ 449.132939][ T26] ret_from_fork+0x1f/0x30 [ 449.232989][ T26] NMI backtrace for cpu 0 [ 449.237347][ T26] CPU: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 [ 449.244522][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 449.254695][ T26] Call Trace: [ 449.257989][ T26] __dump_stack+0x21/0x24 [ 449.262391][ T26] dump_stack_lvl+0x169/0x1d8 [ 449.267054][ T26] ? show_regs_print_info+0x18/0x18 [ 449.272238][ T26] ? sched_show_task+0x324/0x4a0 [ 449.277160][ T26] ? __rcu_read_unlock+0xa0/0xa0 [ 449.282091][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 449.288231][ T26] dump_stack+0x15/0x1c [ 449.292460][ T26] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 449.298438][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 449.304313][ T26] watchdog+0xe2e/0xf70 [ 449.308465][ T26] ? hungtask_pm_notify+0x50/0x50 [ 449.313571][ T26] ? __kasan_check_read+0x11/0x20 [ 449.318930][ T26] ? __kthread_parkme+0xb9/0x1c0 [ 449.323864][ T26] kthread+0x346/0x3d0 [ 449.327944][ T26] ? hungtask_pm_notify+0x50/0x50 [ 449.333039][ T26] ? kthread_blkcg+0xd0/0xd0 [ 449.337613][ T26] ret_from_fork+0x1f/0x30 [ 449.342176][ T26] Sending NMI from CPU 0 to CPUs 1: [ 449.348112][ C1] NMI backtrace for cpu 1 [ 449.348117][ C1] CPU: 1 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 449.348123][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 449.348127][ C1] RIP: 0010:update_stack_state+0x1b3/0x480 [ 449.348137][ C1] Code: 4d 8b 3e 48 8b 85 48 ff ff ff 42 80 3c 28 00 74 0c 48 8b bd 70 ff ff ff e8 2a db 6e 00 4c 8b 73 10 48 8b 45 b8 42 0f b6 04 28 <84> c0 0f 85 8c 00 00 00 49 89 dc 44 8b 2b 45 85 ed 0f 95 c0 48 8b [ 449.348141][ C1] RSP: 0018:ffffc900001706d8 EFLAGS: 00000046 [ 449.348149][ C1] RAX: 0000000000000000 RBX: ffffc90000170828 RCX: 1ffff9200002e107 [ 449.348153][ C1] RDX: 1ffff9200002e108 RSI: 1ffff9200002e106 RDI: ffffc90000170880 [ 449.348158][ C1] RBP: ffffc90000170798 R08: ffffc900001708f0 R09: ffffc900001708e8 [ 449.348162][ C1] R10: 0000000000000008 R11: 1ffff9200002e105 R12: 0000000000000000 [ 449.348167][ C1] R13: dffffc0000000000 R14: ffffc90000171000 R15: ffffc90000169000 [ 449.348172][ C1] FS: 0000555575512500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 449.348175][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 449.348180][ C1] CR2: 0000000000000000 CR3: 000000012a414000 CR4: 00000000003506a0 [ 449.348184][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 449.348189][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 449.348191][ C1] Call Trace: [ 449.348193][ C1] [ 449.348196][ C1] unwind_next_frame+0x3d5/0x700 [ 449.348199][ C1] ? stack_trace_save+0xe0/0xe0 [ 449.348202][ C1] arch_stack_walk+0x108/0x140 [ 449.348205][ C1] ? do_bpf_send_signal+0x82/0x150 [ 449.348208][ C1] stack_trace_save+0x98/0xe0 [ 449.348211][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 449.348213][ C1] ? memset+0x35/0x40 [ 449.348216][ C1] __kasan_slab_alloc+0xbd/0xf0 [ 449.348219][ C1] ? __kasan_slab_alloc+0xbd/0xf0 [ 449.348222][ C1] ? slab_post_alloc_hook+0x5d/0x2f0 [ 449.348225][ C1] ? kmem_cache_alloc+0x165/0x2e0 [ 449.348228][ C1] ? __sigqueue_alloc+0x185/0x2d0 [ 449.348231][ C1] ? __send_signal+0x1f2/0xb80 [ 449.348234][ C1] ? send_signal+0x479/0x5b0 [ 449.348237][ C1] ? do_send_sig_info+0xd6/0x210 [ 449.348240][ C1] ? group_send_sig_info+0x111/0x2a0 [ 449.348243][ C1] ? do_bpf_send_signal+0x82/0x150 [ 449.348246][ C1] slab_post_alloc_hook+0x5d/0x2f0 [ 449.348249][ C1] ? __sigqueue_alloc+0x185/0x2d0 [ 449.348252][ C1] ? __sigqueue_alloc+0x185/0x2d0 [ 449.348255][ C1] kmem_cache_alloc+0x165/0x2e0 [ 449.348258][ C1] ? __sigqueue_alloc+0x185/0x2d0 [ 449.348261][ C1] __sigqueue_alloc+0x185/0x2d0 [ 449.348263][ C1] __send_signal+0x1f2/0xb80 [ 449.348266][ C1] send_signal+0x479/0x5b0 [ 449.348269][ C1] do_send_sig_info+0xd6/0x210 [ 449.348272][ C1] group_send_sig_info+0x111/0x2a0 [ 449.348276][ C1] ? __lock_task_sighand+0x100/0x100 [ 449.348279][ C1] do_bpf_send_signal+0x82/0x150 [ 449.348282][ C1] irq_work_run_list+0x179/0x260 [ 449.348284][ C1] ? irq_work_run+0xf0/0xf0 [ 449.348287][ C1] irq_work_run+0x6a/0xf0 [ 449.348290][ C1] __sysvec_irq_work+0x66/0x1b0 [ 449.348293][ C1] asm_call_irq_on_stack+0xf/0x20 [ 449.348295][ C1] [ 449.348298][ C1] sysvec_irq_work+0x85/0xd0 [ 449.348301][ C1] asm_sysvec_irq_work+0x12/0x20 [ 449.348304][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 449.348314][ C1] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <0f> 1f 44 00 00 eb d6 89 f6 31 d2 e8 07 cf 27 01 5d c3 0f 1f 44 00 [ 449.348317][ C1] RSP: 0018:ffffc90000df7c20 EFLAGS: 00000246 [ 449.348323][ C1] RAX: 00000000000000f6 RBX: 00000000000000f6 RCX: 000000000000083f [ 449.348327][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 449.348332][ C1] RBP: ffffc90000df7c20 R08: dffffc0000000000 R09: ffffed103ee2a5f7 [ 449.348336][ C1] R10: ffffed103ee2a5f7 R11: 1ffff1103ee2a5f6 R12: 0000000000000000 [ 449.348340][ C1] R13: dffffc0000000001 R14: ffffffff859c5998 R15: dffffc0000000000 [ 449.348343][ C1] x2apic_send_IPI_self+0x5e/0x70 [ 449.348346][ C1] arch_irq_work_raise+0x86/0xd0 [ 449.348349][ C1] __irq_work_queue_local+0x115/0x190 [ 449.348352][ C1] irq_work_queue+0x9e/0x150 [ 449.348355][ C1] bpf_send_signal_common+0x2b2/0x420 [ 449.348358][ C1] ? bpf_do_trace_printk+0x240/0x240 [ 449.348361][ C1] bpf_send_signal+0x19/0x20 [ 449.348364][ C1] bpf_prog_7ba5217f62dcd359+0x38/0xa5c [ 449.348366][ C1] bpf_trace_run2+0xb3/0x200 [ 449.348369][ C1] ? bpf_trace_run1+0x200/0x200 [ 449.348371][ C1] __bpf_trace_sys_enter+0x62/0x70 [ 449.348373][ C1] trace_sys_enter+0x40/0x50 [ 449.348375][ C1] syscall_trace_enter+0x108/0x170 [ 449.348378][ C1] syscall_enter_from_user_mode+0x20/0x30 [ 449.348380][ C1] do_syscall_64+0x13/0x40 [ 449.348382][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 449.348384][ C1] RIP: 0033:0x7f8e2fb8e829 [ 449.348391][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 449.348394][ C1] RSP: 002b:00007ffca90d95c0 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 449.348400][ C1] RAX: ffffffffffffffda RBX: 00007f8e2fe48fa8 RCX: 00007f8e2fb8e829 [ 449.348403][ C1] RDX: 00007ffca90d95c0 RSI: 00007ffca90d96f0 RDI: 0000000000000011 [ 449.348406][ C1] RBP: 0000000000000000 R08: 000dfaff51d98710 R09: 00000007a90d9e6f [ 449.348410][ C1] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f8e2fe48fac [ 449.348413][ C1] R13: 00007f8e2fe48fa0 R14: 0000000000000095 R15: 0000000000000003 [ 473.042985][ T26] INFO: task kworker/u4:2:50 blocked for more than 186 seconds. [ 473.050660][ T26] Not tainted syzkaller #0 [ 473.252913][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.261705][ T26] task:kworker/u4:2 state:D stack: 0 pid: 50 ppid: 2 flags:0x10004000 [ 473.732992][ T26] Workqueue: netns cleanup_net [ 473.737798][ T26] Call Trace: [ 473.741262][ T26] __schedule+0xb47/0x1310 [ 474.082944][ T26] ? release_firmware_map_entry+0x18d/0x18d [ 474.088961][ T26] ? kthread_data+0x50/0xc0 [ 474.342936][ T26] ? wq_worker_sleeping+0x60/0x200 [ 474.348085][ T26] schedule+0x13c/0x1d0 [ 474.352236][ T26] synchronize_rcu_expedited+0x474/0x5e0 [ 474.722948][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 474.728886][ T26] ? synchronize_rcu+0x110/0x110 [ 475.012959][ T26] ? kasan_set_track+0x5b/0x70 [ 475.017758][ T26] ? kasan_set_track+0x4a/0x70 [ 475.022627][ T26] ? kasan_set_free_info+0x23/0x40 [ 475.412958][ T26] ? ____kasan_slab_free+0x125/0x160 [ 475.418369][ T26] ? __kasan_slab_free+0x11/0x20 [ 475.672985][ T26] ? slab_free_freelist_hook+0xc5/0x190 [ 475.678939][ T26] ? kfree+0xc0/0x270 [ 475.952933][ T26] ? rcu_exp_handler+0x370/0x370 [ 475.958061][ T26] ? io_schedule+0xe0/0xe0 [ 475.962481][ T26] synchronize_rcu+0x88/0x110 [ 476.322969][ T26] ? kvfree_call_rcu+0x620/0x620 [ 476.327950][ T26] ? debug_smp_processor_id+0x17/0x20 [ 476.582977][ T26] ? __kasan_check_write+0x14/0x20 [ 476.588210][ T26] ? _raw_spin_lock_bh+0x8e/0xe0 [ 476.882943][ T26] ? _raw_spin_lock_irq+0xe0/0xe0 [ 476.888005][ T26] ? __kasan_check_read+0x11/0x20 [ 477.142923][ T26] synchronize_net+0x34/0x40 [ 477.147631][ T26] tipc_nametbl_stop+0x12d0/0x1340 [ 477.152824][ T26] ? tipc_bcast_stop+0xd1/0x100 [ 477.512958][ T26] tipc_exit_net+0x99/0x150 [ 477.517670][ T26] cleanup_net+0x586/0xb70 [ 477.522079][ T26] ? __kasan_check_write+0x14/0x20 [ 477.882929][ T26] ? ops_init+0x4a0/0x4a0 [ 477.887298][ T26] ? read_word_at_a_time+0x12/0x20 [ 477.892483][ T26] ? strscpy+0x9b/0x290 [ 478.262963][ T26] process_one_work+0x6e1/0xba0 [ 478.267842][ T26] worker_thread+0xa6a/0x13b0 [ 478.272511][ T26] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 478.632935][ T26] ? __kasan_check_read+0x11/0x20 [ 478.638093][ T26] kthread+0x346/0x3d0 [ 478.642246][ T26] ? worker_clr_flags+0x190/0x190 [ 479.052940][ T26] ? kthread_blkcg+0xd0/0xd0 [ 479.057649][ T26] ret_from_fork+0x1f/0x30 [ 479.272931][ T26] INFO: task jbd2/sda1-8:58 blocked for more than 172 seconds. [ 479.280509][ T26] Not tainted syzkaller #0 [ 479.612909][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 479.621621][ T26] task:jbd2/sda1-8 state:D stack: 0 pid: 58 ppid: 2 flags:0x10004000 [ 480.083809][ T26] Call Trace: [ 480.087247][ T26] __schedule+0xb47/0x1310 [ 480.091655][ T26] ? release_firmware_map_entry+0x18d/0x18d [ 480.472958][ T26] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 480.478451][ T26] ? _raw_spin_lock+0xe0/0xe0 [ 480.692935][ T26] ? guard_bio_eod+0x11e/0x190 [ 480.698115][ T26] schedule+0x13c/0x1d0 [ 480.702274][ T26] io_schedule+0x84/0xe0 [ 481.092953][ T26] bit_wait_io+0x13/0xd0 [ 481.097258][ T26] out_of_line_wait_on_bit+0x15a/0x200 [ 481.352961][ T26] ? bit_wait+0xd0/0xd0 [ 481.357250][ T26] ? __wait_on_bit+0x180/0x180 [ 481.362019][ T26] ? bit_waitqueue+0x30/0x30 [ 481.732962][ T26] ? _raw_write_trylock+0x140/0x140 [ 481.738291][ T26] __wait_on_buffer+0x77/0x80 [ 481.972937][ T26] jbd2_journal_commit_transaction+0x36f2/0x5830 [ 481.979305][ T26] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 482.342951][ T26] ? compat_start_thread+0x80/0x80 [ 482.348110][ T26] ? __kasan_check_write+0x14/0x20 [ 482.582927][ T26] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 482.588520][ T26] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 482.882923][ T26] ? _raw_spin_lock+0xe0/0xe0 [ 482.887735][ T26] ? detach_if_pending+0xf4/0x300 [ 482.892756][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 483.292977][ T26] ? del_timer_sync+0x144/0x1a0 [ 483.298030][ T26] kjournald2+0x44c/0x860 [ 483.302351][ T26] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 483.672984][ T26] ? io_schedule+0xe0/0xe0 [ 483.677439][ T26] ? __kasan_check_read+0x11/0x20 [ 483.682449][ T26] ? __kthread_parkme+0xb9/0x1c0 [ 484.082936][ T26] kthread+0x346/0x3d0 [ 484.087046][ T26] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 484.092234][ T26] ? kthread_blkcg+0xd0/0xd0 [ 484.422943][ T26] ret_from_fork+0x1f/0x30 [ 484.553033][ T26] NMI backtrace for cpu 0 [ 484.557488][ T26] CPU: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 [ 484.564665][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 484.574708][ T26] Call Trace: [ 484.578065][ T26] __dump_stack+0x21/0x24 [ 484.582408][ T26] dump_stack_lvl+0x169/0x1d8 [ 484.587080][ T26] ? show_regs_print_info+0x18/0x18 [ 484.592365][ T26] ? sched_show_task+0x324/0x4a0 [ 484.597317][ T26] ? __rcu_read_unlock+0xa0/0xa0 [ 484.602348][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 484.608496][ T26] dump_stack+0x15/0x1c [ 484.612771][ T26] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 484.618758][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 484.624650][ T26] watchdog+0xe2e/0xf70 [ 484.628977][ T26] ? hungtask_pm_notify+0x50/0x50 [ 484.633991][ T26] ? __kasan_check_read+0x11/0x20 [ 484.639086][ T26] ? __kthread_parkme+0xb9/0x1c0 [ 484.644032][ T26] kthread+0x346/0x3d0 [ 484.648203][ T26] ? hungtask_pm_notify+0x50/0x50 [ 484.653431][ T26] ? kthread_blkcg+0xd0/0xd0 [ 484.658009][ T26] ret_from_fork+0x1f/0x30 [ 484.662511][ T26] Sending NMI from CPU 0 to CPUs 1: [ 484.668107][ C1] NMI backtrace for cpu 1 [ 484.668113][ C1] CPU: 1 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 484.668118][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 484.668122][ C1] RIP: 0010:native_apic_msr_eoi_write+0xf/0x20 [ 484.668132][ C1] Code: f0 03 00 00 89 de 41 ff 16 5b 41 5e 41 5f 5d c3 66 2e 0f 1f 84 00 00 00 00 00 90 55 48 89 e5 b9 0b 08 00 00 31 c0 31 d2 0f 30 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 89 e5 81 [ 484.668135][ C1] RSP: 0018:ffffc90000170fc8 EFLAGS: 00000046 [ 484.668143][ C1] RAX: 0000000000000000 RBX: ffffffff859c5988 RCX: 000000000000080b [ 484.668148][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000b0 [ 484.668152][ C1] RBP: ffffc90000170fc8 R08: ffffffff86c76048 R09: ffffffff86c76058 [ 484.668156][ C1] R10: ffffffff86c7605c R11: ffffffff86c76043 R12: 0000000000000000 [ 484.668161][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffc90000170ff8 [ 484.668165][ C1] FS: 0000555575512500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 484.668169][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 484.668173][ C1] CR2: 0000000000000000 CR3: 000000012a414000 CR4: 00000000003506a0 [ 484.668178][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 484.668182][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 484.668184][ C1] Call Trace: [ 484.668186][ C1] [ 484.668189][ C1] __sysvec_irq_work+0x55/0x1b0 [ 484.668192][ C1] asm_call_irq_on_stack+0xf/0x20 [ 484.668194][ C1] [ 484.668197][ C1] sysvec_irq_work+0x85/0xd0 [ 484.668200][ C1] asm_sysvec_irq_work+0x12/0x20 [ 484.668203][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 484.668213][ C1] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <0f> 1f 44 00 00 eb d6 89 f6 31 d2 e8 07 cf 27 01 5d c3 0f 1f 44 00 [ 484.668216][ C1] RSP: 0018:ffffc90000df7c20 EFLAGS: 00000246 [ 484.668222][ C1] RAX: 00000000000000f6 RBX: 00000000000000f6 RCX: 000000000000083f [ 484.668227][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 484.668231][ C1] RBP: ffffc90000df7c20 R08: dffffc0000000000 R09: ffffed103ee2a5f7 [ 484.668236][ C1] R10: ffffed103ee2a5f7 R11: 1ffff1103ee2a5f6 R12: 0000000000000000 [ 484.668240][ C1] R13: dffffc0000000001 R14: ffffffff859c5998 R15: dffffc0000000000 [ 484.668243][ C1] x2apic_send_IPI_self+0x5e/0x70 [ 484.668246][ C1] arch_irq_work_raise+0x86/0xd0 [ 484.668249][ C1] __irq_work_queue_local+0x115/0x190 [ 484.668252][ C1] irq_work_queue+0x9e/0x150 [ 484.668255][ C1] bpf_send_signal_common+0x2b2/0x420 [ 484.668258][ C1] ? bpf_do_trace_printk+0x240/0x240 [ 484.668261][ C1] bpf_send_signal+0x19/0x20 [ 484.668264][ C1] bpf_prog_7ba5217f62dcd359+0x38/0xa5c [ 484.668267][ C1] bpf_trace_run2+0xb3/0x200 [ 484.668270][ C1] ? bpf_trace_run1+0x200/0x200 [ 484.668273][ C1] __bpf_trace_sys_enter+0x62/0x70 [ 484.668276][ C1] trace_sys_enter+0x40/0x50 [ 484.668279][ C1] syscall_trace_enter+0x108/0x170 [ 484.668282][ C1] syscall_enter_from_user_mode+0x20/0x30 [ 484.668285][ C1] do_syscall_64+0x13/0x40 [ 484.668288][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 484.668291][ C1] RIP: 0033:0x7f8e2fb8e829 [ 484.668300][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 484.668304][ C1] RSP: 002b:00007ffca90d95c0 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 484.668311][ C1] RAX: ffffffffffffffda RBX: 00007f8e2fe48fa8 RCX: 00007f8e2fb8e829 [ 484.668316][ C1] RDX: 00007ffca90d95c0 RSI: 00007ffca90d96f0 RDI: 0000000000000011 [ 484.668320][ C1] RBP: 0000000000000000 R08: 000dfaff51d98710 R09: 00000007a90d9e6f [ 484.668324][ C1] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f8e2fe48fac [ 484.668329][ C1] R13: 00007f8e2fe48fa0 R14: 0000000000000095 R15: 0000000000000003 [ 508.252986][ T26] INFO: task kworker/u4:2:50 blocked for more than 222 seconds. [ 508.260793][ T26] Not tainted syzkaller #0 [ 508.452918][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 508.461649][ T26] task:kworker/u4:2 state:D stack: 0 pid: 50 ppid: 2 flags:0x10004000 [ 508.953166][ T26] Workqueue: netns cleanup_net [ 508.958047][ T26] Call Trace: [ 508.961359][ T26] __schedule+0xb47/0x1310 [ 509.292963][ T26] ? release_firmware_map_entry+0x18d/0x18d [ 509.298897][ T26] ? kthread_data+0x50/0xc0 [ 509.532964][ T26] ? wq_worker_sleeping+0x60/0x200 [ 509.538116][ T26] schedule+0x13c/0x1d0 [ 509.542364][ T26] synchronize_rcu_expedited+0x474/0x5e0 [ 509.922939][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 509.928873][ T26] ? synchronize_rcu+0x110/0x110 [ 510.232936][ T26] ? kasan_set_track+0x5b/0x70 [ 510.237920][ T26] ? kasan_set_track+0x4a/0x70 [ 510.242674][ T26] ? kasan_set_free_info+0x23/0x40 [ 510.622949][ T26] ? ____kasan_slab_free+0x125/0x160 [ 510.628260][ T26] ? __kasan_slab_free+0x11/0x20 [ 510.862921][ T26] ? slab_free_freelist_hook+0xc5/0x190 [ 510.868503][ T26] ? kfree+0xc0/0x270 [ 510.872478][ T26] ? rcu_exp_handler+0x370/0x370 [ 511.262942][ T26] ? io_schedule+0xe0/0xe0 [ 511.267479][ T26] synchronize_rcu+0x88/0x110 [ 511.272142][ T26] ? kvfree_call_rcu+0x620/0x620 [ 511.642986][ T26] ? debug_smp_processor_id+0x17/0x20 [ 511.648611][ T26] ? __kasan_check_write+0x14/0x20 [ 511.952979][ T26] ? _raw_spin_lock_bh+0x8e/0xe0 [ 511.957972][ T26] ? _raw_spin_lock_irq+0xe0/0xe0 [ 512.192956][ T26] ? __kasan_check_read+0x11/0x20 [ 512.198308][ T26] synchronize_net+0x34/0x40 [ 512.462940][ T26] tipc_nametbl_stop+0x12d0/0x1340 [ 512.468092][ T26] ? tipc_bcast_stop+0xd1/0x100 [ 512.732979][ T26] tipc_exit_net+0x99/0x150 [ 512.737555][ T26] cleanup_net+0x586/0xb70 [ 512.742204][ T26] ? __kasan_check_write+0x14/0x20 [ 513.092936][ T26] ? ops_init+0x4a0/0x4a0 [ 513.097389][ T26] ? read_word_at_a_time+0x12/0x20 [ 513.102493][ T26] ? strscpy+0x9b/0x290 [ 513.452944][ T26] process_one_work+0x6e1/0xba0 [ 513.457849][ T26] worker_thread+0xa6a/0x13b0 [ 513.462611][ T26] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 513.842937][ T26] ? __kasan_check_read+0x11/0x20 [ 513.848013][ T26] kthread+0x346/0x3d0 [ 513.852068][ T26] ? worker_clr_flags+0x190/0x190 [ 514.242949][ T26] ? kthread_blkcg+0xd0/0xd0 [ 514.247579][ T26] ret_from_fork+0x1f/0x30 [ 514.492948][ T26] INFO: task jbd2/sda1-8:58 blocked for more than 207 seconds. [ 514.500528][ T26] Not tainted syzkaller #0 [ 514.792914][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.801625][ T26] task:jbd2/sda1-8 state:D stack: 0 pid: 58 ppid: 2 flags:0x10004000 [ 515.262948][ T26] Call Trace: [ 515.266286][ T26] __schedule+0xb47/0x1310 [ 515.270778][ T26] ? release_firmware_map_entry+0x18d/0x18d [ 515.652945][ T26] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 515.658531][ T26] ? _raw_spin_lock+0xe0/0xe0 [ 515.902934][ T26] ? guard_bio_eod+0x11e/0x190 [ 515.907744][ T26] schedule+0x13c/0x1d0 [ 515.911894][ T26] io_schedule+0x84/0xe0 [ 516.292938][ T26] bit_wait_io+0x13/0xd0 [ 516.297215][ T26] out_of_line_wait_on_bit+0x15a/0x200 [ 516.302671][ T26] ? bit_wait+0xd0/0xd0 [ 516.652960][ T26] ? __wait_on_bit+0x180/0x180 [ 516.657770][ T26] ? bit_waitqueue+0x30/0x30 [ 516.662362][ T26] ? _raw_write_trylock+0x140/0x140 [ 517.012972][ T26] __wait_on_buffer+0x77/0x80 [ 517.017707][ T26] jbd2_journal_commit_transaction+0x36f2/0x5830 [ 517.312999][ T26] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 517.319989][ T26] ? compat_start_thread+0x80/0x80 [ 517.612964][ T26] ? __kasan_check_write+0x14/0x20 [ 517.618110][ T26] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 517.922955][ T26] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 517.928462][ T26] ? _raw_spin_lock+0xe0/0xe0 [ 518.212965][ T26] ? detach_if_pending+0xf4/0x300 [ 518.218024][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 518.482979][ T26] ? del_timer_sync+0x144/0x1a0 [ 518.487874][ T26] kjournald2+0x44c/0x860 [ 518.492201][ T26] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 518.862930][ T26] ? io_schedule+0xe0/0xe0 [ 518.867383][ T26] ? __kasan_check_read+0x11/0x20 [ 518.872506][ T26] ? __kthread_parkme+0xb9/0x1c0 [ 519.262929][ T26] kthread+0x346/0x3d0 [ 519.267039][ T26] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 519.272759][ T26] ? kthread_blkcg+0xd0/0xd0 [ 519.622944][ T26] ret_from_fork+0x1f/0x30 [ 519.762939][ T26] NMI backtrace for cpu 0 [ 519.767308][ T26] CPU: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 [ 519.774494][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 519.784532][ T26] Call Trace: [ 519.787814][ T26] __dump_stack+0x21/0x24 [ 519.792253][ T26] dump_stack_lvl+0x169/0x1d8 [ 519.796930][ T26] ? show_regs_print_info+0x18/0x18 [ 519.802123][ T26] ? sched_show_task+0x324/0x4a0 [ 519.807054][ T26] ? __rcu_read_unlock+0xa0/0xa0 [ 519.811991][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 519.818044][ T26] dump_stack+0x15/0x1c [ 519.822194][ T26] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 519.828161][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 519.834051][ T26] watchdog+0xe2e/0xf70 [ 519.838282][ T26] ? hungtask_pm_notify+0x50/0x50 [ 519.843292][ T26] ? __kasan_check_read+0x11/0x20 [ 519.848390][ T26] ? __kthread_parkme+0xb9/0x1c0 [ 519.853330][ T26] kthread+0x346/0x3d0 [ 519.857486][ T26] ? hungtask_pm_notify+0x50/0x50 [ 519.862538][ T26] ? kthread_blkcg+0xd0/0xd0 [ 519.867132][ T26] ret_from_fork+0x1f/0x30 [ 519.871635][ T26] Sending NMI from CPU 0 to CPUs 1: [ 519.877282][ C1] NMI backtrace for cpu 1 [ 519.877287][ C1] CPU: 1 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 519.877292][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 519.877296][ C1] RIP: 0010:update_stack_state+0x8/0x480 [ 519.877306][ C1] Code: 8c 70 fe ff ff e8 c8 dc 6e 00 e9 66 fe ff ff 0f 1f 00 55 48 89 e5 48 8b 07 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 41 56 <41> 55 41 54 53 48 81 ec 98 00 00 00 49 89 f7 48 89 fb 49 bd 00 00 [ 519.877310][ C1] RSP: 0018:ffffc90000df75e8 EFLAGS: 00000046 [ 519.877317][ C1] RAX: ffffc90000df7b78 RBX: ffffc90000df7688 RCX: 0000000000df7601 [ 519.877321][ C1] RDX: dffffc0000000000 RSI: ffffc90000df7b78 RDI: ffffc90000df7688 [ 519.877326][ C1] RBP: ffffc90000df75f8 R08: ffffc90000df7750 R09: ffffc90000df7748 [ 519.877330][ C1] R10: 0000000000000006 R11: 1ffff920001beed1 R12: 0000000000000000 [ 519.877334][ C1] R13: 1ffff920001beedc R14: ffffc90000df76e0 R15: ffffc90000df7b10 [ 519.877339][ C1] FS: 0000555575512500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 519.877343][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.877347][ C1] CR2: 0000000000000000 CR3: 000000012a414000 CR4: 00000000003506a0 [ 519.877351][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 519.877355][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 519.877358][ C1] Call Trace: [ 519.877361][ C1] unwind_next_frame+0x3d5/0x700 [ 519.877364][ C1] ? stack_trace_save+0xe0/0xe0 [ 519.877367][ C1] arch_stack_walk+0x108/0x140 [ 519.877370][ C1] ? __dequeue_signal+0x530/0x620 [ 519.877373][ C1] stack_trace_save+0x98/0xe0 [ 519.877376][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 519.877378][ C1] ? 0xffffffffa00245a4 [ 519.877381][ C1] ? memset+0x35/0x40 [ 519.877384][ C1] kasan_set_track+0x4a/0x70 [ 519.877387][ C1] ? kasan_set_track+0x4a/0x70 [ 519.877389][ C1] ? kasan_set_free_info+0x23/0x40 [ 519.877393][ C1] ? ____kasan_slab_free+0x125/0x160 [ 519.877396][ C1] ? __kasan_slab_free+0x11/0x20 [ 519.877399][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 519.877402][ C1] ? kmem_cache_free+0x100/0x2d0 [ 519.877405][ C1] ? __dequeue_signal+0x530/0x620 [ 519.877408][ C1] ? kmem_cache_free+0x100/0x2d0 [ 519.877411][ C1] kasan_set_free_info+0x23/0x40 [ 519.877414][ C1] ____kasan_slab_free+0x125/0x160 [ 519.877417][ C1] __kasan_slab_free+0x11/0x20 [ 519.877420][ C1] slab_free_freelist_hook+0xc5/0x190 [ 519.877423][ C1] ? __dequeue_signal+0x530/0x620 [ 519.877426][ C1] kmem_cache_free+0x100/0x2d0 [ 519.877429][ C1] __dequeue_signal+0x530/0x620 [ 519.877431][ C1] dequeue_signal+0xa0/0x440 [ 519.877434][ C1] get_signal+0x772/0x12e0 [ 519.877437][ C1] arch_do_signal_or_restart+0xbf/0x10f0 [ 519.877441][ C1] ? __ia32_sys_rt_sigreturn+0x5e7/0x6c0 [ 519.877444][ C1] ? bpf_do_trace_printk+0x240/0x240 [ 519.877446][ C1] ? KSTK_ESP+0x60/0x60 [ 519.877449][ C1] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 519.877452][ C1] ? __bpf_trace_sys_enter+0x62/0x70 [ 519.877456][ C1] exit_to_user_mode_loop+0xa2/0xe0 [ 519.877459][ C1] exit_to_user_mode_prepare+0x76/0xa0 [ 519.877462][ C1] syscall_exit_to_user_mode+0x1d/0x40 [ 519.877465][ C1] do_syscall_64+0x3d/0x40 [ 519.877468][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 519.877471][ C1] RIP: 0033:0x7f8e2fbf2749 [ 519.877480][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.877484][ C1] RSP: 002b:00007ffca90d9b78 EFLAGS: 00000246 [ 519.877490][ C1] RAX: 0000000000000000 RBX: 00007f8e2fe48fa8 RCX: 00007f8e2fbf2749 [ 519.877494][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8e2fe48fac [ 519.877499][ C1] RBP: 0000000000000000 R08: 000dfaff51d98710 R09: 00000007a90d9e6f [ 519.877503][ C1] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f8e2fe48fac [ 519.877507][ C1] R13: 00007f8e2fe48fa0 R14: 0000000000000095 R15: 0000000000000003 [ 543.442966][ T26] INFO: task kworker/u4:2:50 blocked for more than 257 seconds. [ 543.450647][ T26] Not tainted syzkaller #0 [ 543.652915][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 543.661622][ T26] task:kworker/u4:2 state:D stack: 0 pid: 50 ppid: 2 flags:0x10004000 [ 544.102963][ T26] Workqueue: netns cleanup_net [ 544.107763][ T26] Call Trace: [ 544.111059][ T26] __schedule+0xb47/0x1310 [ 544.432932][ T26] ? release_firmware_map_entry+0x18d/0x18d [ 544.438866][ T26] ? kthread_data+0x50/0xc0 [ 544.702946][ T26] ? wq_worker_sleeping+0x60/0x200 [ 544.708178][ T26] schedule+0x13c/0x1d0 [ 544.712324][ T26] synchronize_rcu_expedited+0x474/0x5e0 [ 545.132959][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 545.139323][ T26] ? synchronize_rcu+0x110/0x110 [ 545.392954][ T26] ? kasan_set_track+0x5b/0x70 [ 545.397741][ T26] ? kasan_set_track+0x4a/0x70 [ 545.402502][ T26] ? kasan_set_free_info+0x23/0x40 [ 545.792928][ T26] ? ____kasan_slab_free+0x125/0x160 [ 545.798255][ T26] ? __kasan_slab_free+0x11/0x20 [ 546.072936][ T26] ? slab_free_freelist_hook+0xc5/0x190 [ 546.078535][ T26] ? kfree+0xc0/0x270 [ 546.082508][ T26] ? rcu_exp_handler+0x370/0x370 [ 546.432930][ T26] ? io_schedule+0xe0/0xe0 [ 546.437478][ T26] synchronize_rcu+0x88/0x110 [ 546.442162][ T26] ? kvfree_call_rcu+0x620/0x620 [ 546.822957][ T26] ? debug_smp_processor_id+0x17/0x20 [ 546.828385][ T26] ? __kasan_check_write+0x14/0x20 [ 547.113017][ T26] ? _raw_spin_lock_bh+0x8e/0xe0 [ 547.118081][ T26] ? _raw_spin_lock_irq+0xe0/0xe0 [ 547.362931][ T26] ? __kasan_check_read+0x11/0x20 [ 547.368013][ T26] synchronize_net+0x34/0x40 [ 547.372594][ T26] tipc_nametbl_stop+0x12d0/0x1340 [ 547.782965][ T26] ? tipc_bcast_stop+0xd1/0x100 [ 547.787857][ T26] tipc_exit_net+0x99/0x150 [ 547.792349][ T26] cleanup_net+0x586/0xb70 [ 548.122967][ T26] ? __kasan_check_write+0x14/0x20 [ 548.128116][ T26] ? ops_init+0x4a0/0x4a0 [ 548.132443][ T26] ? read_word_at_a_time+0x12/0x20 [ 548.532977][ T26] ? strscpy+0x9b/0x290 [ 548.537271][ T26] process_one_work+0x6e1/0xba0 [ 548.542111][ T26] worker_thread+0xa6a/0x13b0 [ 548.882961][ T26] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 548.888459][ T26] ? __kasan_check_read+0x11/0x20 [ 549.162931][ T26] kthread+0x346/0x3d0 [ 549.167029][ T26] ? worker_clr_flags+0x190/0x190 [ 549.172138][ T26] ? kthread_blkcg+0xd0/0xd0 [ 549.502964][ T26] ret_from_fork+0x1f/0x30 [ 549.662968][ T26] INFO: task jbd2/sda1-8:58 blocked for more than 243 seconds. [ 549.670706][ T26] Not tainted syzkaller #0 [ 549.972913][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.981621][ T26] task:jbd2/sda1-8 state:D stack: 0 pid: 58 ppid: 2 flags:0x10004000 [ 550.432913][ T26] Call Trace: [ 550.436334][ T26] __schedule+0xb47/0x1310 [ 550.440739][ T26] ? release_firmware_map_entry+0x18d/0x18d [ 550.792930][ T26] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 550.798439][ T26] ? _raw_spin_lock+0xe0/0xe0 [ 551.072932][ T26] ? guard_bio_eod+0x11e/0x190 [ 551.077734][ T26] schedule+0x13c/0x1d0 [ 551.081884][ T26] io_schedule+0x84/0xe0 [ 551.412993][ T26] bit_wait_io+0x13/0xd0 [ 551.417283][ T26] out_of_line_wait_on_bit+0x15a/0x200 [ 551.422731][ T26] ? bit_wait+0xd0/0xd0 [ 551.822929][ T26] ? __wait_on_bit+0x180/0x180 [ 551.827828][ T26] ? bit_waitqueue+0x30/0x30 [ 551.832413][ T26] ? _raw_write_trylock+0x140/0x140 [ 552.182937][ T26] __wait_on_buffer+0x77/0x80 [ 552.187655][ T26] jbd2_journal_commit_transaction+0x36f2/0x5830 [ 552.472977][ T26] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 552.479787][ T26] ? compat_start_thread+0x80/0x80 [ 552.802944][ T26] ? __kasan_check_write+0x14/0x20 [ 552.808096][ T26] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 553.112945][ T26] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 553.118455][ T26] ? _raw_spin_lock+0xe0/0xe0 [ 553.343003][ T26] ? detach_if_pending+0xf4/0x300 [ 553.348175][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 553.652958][ T26] ? del_timer_sync+0x144/0x1a0 [ 553.657927][ T26] kjournald2+0x44c/0x860 [ 553.662264][ T26] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 554.053177][ T26] ? io_schedule+0xe0/0xe0 [ 554.057718][ T26] ? __kasan_check_read+0x11/0x20 [ 554.062818][ T26] ? __kthread_parkme+0xb9/0x1c0 [ 554.412962][ T26] kthread+0x346/0x3d0 [ 554.417062][ T26] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 554.422512][ T26] ? kthread_blkcg+0xd0/0xd0 [ 554.832932][ T26] ret_from_fork+0x1f/0x30 [ 554.903007][ T26] NMI backtrace for cpu 0 [ 554.907459][ T26] CPU: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 [ 554.914633][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 554.924667][ T26] Call Trace: [ 554.927950][ T26] __dump_stack+0x21/0x24 [ 554.932345][ T26] dump_stack_lvl+0x169/0x1d8 [ 554.937182][ T26] ? show_regs_print_info+0x18/0x18 [ 554.942370][ T26] ? sched_show_task+0x324/0x4a0 [ 554.947332][ T26] ? __rcu_read_unlock+0xa0/0xa0 [ 554.952344][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 554.958861][ T26] dump_stack+0x15/0x1c [ 554.963007][ T26] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 554.969093][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 554.975000][ T26] watchdog+0xe2e/0xf70 [ 554.979237][ T26] ? hungtask_pm_notify+0x50/0x50 [ 554.984352][ T26] ? __kasan_check_read+0x11/0x20 [ 554.989374][ T26] ? __kthread_parkme+0xb9/0x1c0 [ 554.994390][ T26] kthread+0x346/0x3d0 [ 554.998447][ T26] ? hungtask_pm_notify+0x50/0x50 [ 555.003484][ T26] ? kthread_blkcg+0xd0/0xd0 [ 555.008061][ T26] ret_from_fork+0x1f/0x30 [ 555.012572][ T26] Sending NMI from CPU 0 to CPUs 1: [ 555.018261][ C1] NMI backtrace for cpu 1 [ 555.018266][ C1] CPU: 1 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 555.018272][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 555.018275][ C1] RIP: 0010:unwind_next_frame+0x1e/0x700 [ 555.018285][ C1] Code: 91 66 2e 0f 1f 84 00 00 00 00 00 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 48 48 89 fb 48 ba 00 00 00 00 00 fc ff df <49> 89 fe 49 c1 ee 03 41 0f b6 04 16 84 c0 0f 85 03 06 00 00 83 3b [ 555.018289][ C1] RSP: 0018:ffffc90000df7608 EFLAGS: 00000092 [ 555.018297][ C1] RAX: 0000000000000001 RBX: ffffc90000df7688 RCX: 0000000000df7601 [ 555.018302][ C1] RDX: dffffc0000000000 RSI: ffffffff819d3ee5 RDI: ffffc90000df7688 [ 555.018306][ C1] RBP: ffffc90000df7678 R08: ffffc90000df7750 R09: ffffc90000df7748 [ 555.018310][ C1] R10: 0000000000000004 R11: 1ffff920001beed1 R12: ffff8881102f3b40 [ 555.018314][ C1] R13: 0000000000000000 R14: ffffffff8153a810 R15: ffffc90000df7688 [ 555.018319][ C1] FS: 0000555575512500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 555.018323][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 555.018327][ C1] CR2: 0000000000000000 CR3: 000000012a414000 CR4: 00000000003506a0 [ 555.018331][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 555.018342][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 555.018344][ C1] Call Trace: [ 555.018348][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 555.018351][ C1] ? stack_trace_save+0xe0/0xe0 [ 555.018353][ C1] arch_stack_walk+0x108/0x140 [ 555.018357][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 555.018360][ C1] stack_trace_save+0x98/0xe0 [ 555.018363][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 555.018365][ C1] ? 0xffffffffa00245a4 [ 555.018368][ C1] ? memset+0x35/0x40 [ 555.018371][ C1] kasan_set_track+0x4a/0x70 [ 555.018374][ C1] ? kasan_set_track+0x4a/0x70 [ 555.018377][ C1] ? kasan_set_free_info+0x23/0x40 [ 555.018381][ C1] ? ____kasan_slab_free+0x125/0x160 [ 555.018384][ C1] ? __kasan_slab_free+0x11/0x20 [ 555.018387][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 555.018390][ C1] ? kmem_cache_free+0x100/0x2d0 [ 555.018393][ C1] kasan_set_free_info+0x23/0x40 [ 555.018397][ C1] ____kasan_slab_free+0x125/0x160 [ 555.018400][ C1] __kasan_slab_free+0x11/0x20 [ 555.018403][ C1] slab_free_freelist_hook+0xc5/0x190 [ 555.018406][ C1] ? __dequeue_signal+0x530/0x620 [ 555.018409][ C1] kmem_cache_free+0x100/0x2d0 [ 555.018412][ C1] __dequeue_signal+0x530/0x620 [ 555.018415][ C1] dequeue_signal+0xa0/0x440 [ 555.018418][ C1] get_signal+0x772/0x12e0 [ 555.018421][ C1] arch_do_signal_or_restart+0xbf/0x10f0 [ 555.018424][ C1] ? __ia32_sys_rt_sigreturn+0x5e7/0x6c0 [ 555.018427][ C1] ? bpf_do_trace_printk+0x240/0x240 [ 555.018430][ C1] ? KSTK_ESP+0x60/0x60 [ 555.018433][ C1] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 555.018437][ C1] ? __bpf_trace_sys_enter+0x62/0x70 [ 555.018440][ C1] exit_to_user_mode_loop+0xa2/0xe0 [ 555.018443][ C1] exit_to_user_mode_prepare+0x76/0xa0 [ 555.018446][ C1] syscall_exit_to_user_mode+0x1d/0x40 [ 555.018449][ C1] do_syscall_64+0x3d/0x40 [ 555.018452][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 555.018455][ C1] RIP: 0033:0x7f8e2fbf2749 [ 555.018464][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.018467][ C1] RSP: 002b:00007ffca90d9b78 EFLAGS: 00000246 [ 555.018474][ C1] RAX: 0000000000000000 RBX: 00007f8e2fe48fa8 RCX: 00007f8e2fbf2749 [ 555.018478][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8e2fe48fac [ 555.018482][ C1] RBP: 0000000000000000 R08: 000dfaff51d98710 R09: 00000007a90d9e6f [ 555.018486][ C1] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f8e2fe48fac [ 555.018491][ C1] R13: 00007f8e2fe48fa0 R14: 0000000000000095 R15: 0000000000000003