Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. 2025/12/30 22:07:57 parsed 1 programs [ 257.807619][ T30] audit: type=1400 audit(1767132477.598:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 257.828312][ T30] audit: type=1400 audit(1767132477.598:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 258.456533][ T30] audit: type=1400 audit(1767132478.248:66): avc: denied { mounton } for pid=289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 258.457925][ T289] cgroup: Unknown subsys name 'net' [ 258.479199][ T30] audit: type=1400 audit(1767132478.248:67): avc: denied { mount } for pid=289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 258.506479][ T30] audit: type=1400 audit(1767132478.278:68): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 258.506737][ T289] cgroup: Unknown subsys name 'devices' [ 258.620762][ T289] cgroup: Unknown subsys name 'hugetlb' [ 258.626351][ T289] cgroup: Unknown subsys name 'rlimit' [ 258.827612][ T30] audit: type=1400 audit(1767132478.618:69): avc: denied { setattr } for pid=289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.850768][ T30] audit: type=1400 audit(1767132478.618:70): avc: denied { create } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 258.867883][ T292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 258.871413][ T30] audit: type=1400 audit(1767132478.618:71): avc: denied { write } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 258.899956][ T30] audit: type=1400 audit(1767132478.618:72): avc: denied { read } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 258.907571][ T289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 258.920526][ T30] audit: type=1400 audit(1767132478.628:73): avc: denied { mounton } for pid=289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 259.338776][ T294] request_module fs-gadgetfs succeeded, but still no fs? [ 259.790568][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.797619][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.805080][ T328] device bridge_slave_0 entered promiscuous mode [ 259.811899][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.818902][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.826266][ T328] device bridge_slave_1 entered promiscuous mode [ 259.878399][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.885459][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.892748][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.899775][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.920756][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.928350][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.935700][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.944349][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.952524][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.959550][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.967982][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.976276][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.983305][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.994585][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.007523][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.023334][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.034349][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.042338][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.049714][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.057642][ T328] device veth0_vlan entered promiscuous mode [ 260.066940][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.075682][ T328] device veth1_macvtap entered promiscuous mode [ 260.084334][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.094011][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 260.142070][ T328] syz-executor (328) used greatest stack depth: 21472 bytes left 2025/12/30 22:08:00 executed programs: 0 [ 260.588683][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.595819][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.603545][ T362] device bridge_slave_0 entered promiscuous mode [ 260.612400][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.619476][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.626911][ T362] device bridge_slave_1 entered promiscuous mode [ 260.669323][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.676349][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.683611][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.690642][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.707759][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.716049][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.723336][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.731985][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.740349][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.747368][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.755736][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.763876][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.770918][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.782249][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.791111][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.804525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.818831][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.826792][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.834244][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.842322][ T362] device veth0_vlan entered promiscuous mode [ 260.852301][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.864040][ T362] device veth1_macvtap entered promiscuous mode [ 260.872859][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.886227][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.339934][ T10] device bridge_slave_1 left promiscuous mode [ 261.346087][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.369391][ T10] device bridge_slave_0 left promiscuous mode [ 261.375527][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.420381][ T10] device veth1_macvtap left promiscuous mode [ 261.426407][ T10] device veth0_vlan left promiscuous mode [ 387.809237][ T31] INFO: task kworker/u4:1:10 blocked for more than 122 seconds. [ 387.816928][ T31] Not tainted syzkaller #0 [ 387.998918][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 388.007622][ T31] task:kworker/u4:1 state:D stack:24608 pid: 10 ppid: 2 flags:0x00004000 [ 388.318966][ T31] Workqueue: netns cleanup_net [ 388.323887][ T31] Call Trace: [ 388.327220][ T31] [ 388.330206][ T31] __schedule+0xb6e/0x14c0 [ 388.334754][ T31] ? release_firmware_map_entry+0x190/0x190 [ 388.340662][ T31] ? __switch_to_asm+0x3a/0x60 [ 388.345449][ T31] ? kthread_data+0x50/0xc0 [ 388.350027][ T31] ? wq_worker_sleeping+0x60/0x200 [ 388.355137][ T31] schedule+0x11e/0x1e0 [ 388.359294][ T31] schedule_timeout+0xa6/0x2e0 [ 388.364054][ T31] ? console_conditional_schedule+0x30/0x30 [ 388.369953][ T31] ? __prepare_to_swait+0xa8/0x130 [ 388.375125][ T31] wait_for_common+0x26b/0x420 [ 388.379889][ T31] ? __kasan_check_write+0x14/0x20 [ 388.385064][ T31] ? wait_for_completion+0x20/0x20 [ 388.390177][ T31] ? mutex_unlock+0x89/0x220 [ 388.394759][ T31] ? __mutex_lock_slowpath+0x10/0x10 [ 388.400041][ T31] ? flush_workqueue_prep_pwqs+0x424/0x480 [ 388.405846][ T31] ? check_flush_dependency+0xc4/0x370 [ 388.411307][ T31] wait_for_completion+0x18/0x20 [ 388.416238][ T31] flush_workqueue+0x5a6/0x12d0 [ 388.421092][ T31] ? flush_work+0x20/0x20 [ 388.425412][ T31] ? rcu_work_rcufn+0x50/0x50 [ 388.430113][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 388.435916][ T31] peer_remove_after_dead+0x98/0x1a0 [ 388.441315][ T31] wg_peer_remove_all+0x3e2/0x450 [ 388.446333][ T31] ? peer_remove_after_dead+0x1a0/0x1a0 [ 388.451902][ T31] wg_destruct+0x18e/0x300 [ 388.456319][ T31] ? wg_xmit+0xb20/0xb20 [ 388.460561][ T31] netdev_run_todo+0x773/0x990 [ 388.465353][ T31] ? netdev_refcnt_read+0x60/0x60 [ 388.470379][ T31] ? unregister_netdevice_queue+0x1aa/0x360 [ 388.476267][ T31] ? list_netdevice+0x4c0/0x4c0 [ 388.481118][ T31] rtnl_unlock+0xe/0x10 [ 388.485329][ T31] default_device_exit_batch+0x335/0x390 [ 388.490966][ T31] ? default_device_exit+0x360/0x360 [ 388.496242][ T31] ? wait_woken+0x170/0x170 [ 388.500748][ T31] ? rtnl_unlock+0xe/0x10 [ 388.505068][ T31] ? default_device_exit+0x360/0x360 [ 388.510354][ T31] cleanup_net+0x602/0xad0 [ 388.514764][ T31] ? ops_init+0x4a0/0x4a0 [ 388.519095][ T31] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 388.524463][ T31] process_one_work+0x6be/0xba0 [ 388.529327][ T31] worker_thread+0xa59/0x1200 [ 388.533999][ T31] ? __kthread_parkme+0xac/0x200 [ 388.538945][ T31] kthread+0x411/0x500 [ 388.543003][ T31] ? worker_clr_flags+0x190/0x190 [ 388.548023][ T31] ? kthread_blkcg+0xd0/0xd0 [ 388.552615][ T31] ret_from_fork+0x1f/0x30 [ 388.557028][ T31] [ 388.708986][ T31] NMI backtrace for cpu 1 [ 388.713352][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 388.720537][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 388.730579][ T31] Call Trace: [ 388.733846][ T31] [ 388.736766][ T31] __dump_stack+0x21/0x30 [ 388.741126][ T31] dump_stack_lvl+0xee/0x150 [ 388.745710][ T31] ? show_regs_print_info+0x20/0x20 [ 388.750903][ T31] dump_stack+0x15/0x20 [ 388.755062][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 388.760051][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 388.765657][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 388.771805][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 388.776744][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 388.782897][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 388.788970][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 388.794954][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 388.800849][ T31] watchdog+0xd64/0xea0 [ 388.805035][ T31] ? hungtask_pm_notify+0x50/0x50 [ 388.810052][ T31] ? __kasan_check_read+0x11/0x20 [ 388.815075][ T31] ? __kthread_parkme+0xac/0x200 [ 388.820012][ T31] ? preempt_count_add+0x90/0x1b0 [ 388.825130][ T31] kthread+0x411/0x500 [ 388.829199][ T31] ? hungtask_pm_notify+0x50/0x50 [ 388.834227][ T31] ? kthread_blkcg+0xd0/0xd0 [ 388.838817][ T31] ret_from_fork+0x1f/0x30 [ 388.843228][ T31] [ 388.846320][ T31] Sending NMI from CPU 1 to CPUs 0: [ 388.851557][ C0] NMI backtrace for cpu 0 [ 388.851566][ C0] CPU: 0 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 388.851580][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 388.851593][ C0] RIP: 0010:common_interrupt_return+0x1b/0x60 [ 388.851615][ C0] Code: 24 01 48 89 e7 e8 15 80 e3 ff e9 f0 02 00 00 66 90 b9 48 00 00 00 65 48 8b 14 25 a8 6d 02 00 83 e2 fe 89 d0 48 c1 ea 20 0f 30 <41> 5f 41 5e 41 5d 41 5c 5d 5b 41 5b 41 5a 41 59 41 58 58 59 5a 5e [ 388.851626][ C0] RSP: 0018:ffffc90000c27f58 EFLAGS: 00000046 [ 388.851701][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000048 [ 388.851710][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 388.851718][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed102201b769 [ 388.851727][ C0] R10: ffffed102201b769 R11: 00007f76f47b06e0 R12: 0000000000000000 [ 388.851737][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 388.851744][ C0] FS: 0000555564c47500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 388.851757][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.851766][ C0] CR2: 0000000000000000 CR3: 000000011d4fe000 CR4: 00000000003506b0 [ 388.851778][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 388.851786][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 388.851794][ C0] Call Trace: [ 388.851798][ C0] [ 388.851804][ C0] [ 412.768934][ T31] INFO: task kworker/u4:1:10 blocked for more than 147 seconds. [ 412.776609][ T31] Not tainted syzkaller #0 [ 412.978909][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.987609][ T31] task:kworker/u4:1 state:D stack:24608 pid: 10 ppid: 2 flags:0x00004000 [ 413.288955][ T31] Workqueue: netns cleanup_net [ 413.293773][ T31] Call Trace: [ 413.297040][ T31] [ 413.299982][ T31] __schedule+0xb6e/0x14c0 [ 413.304396][ T31] ? release_firmware_map_entry+0x190/0x190 [ 413.310306][ T31] ? __switch_to_asm+0x3a/0x60 [ 413.315067][ T31] ? kthread_data+0x50/0xc0 [ 413.319574][ T31] ? wq_worker_sleeping+0x60/0x200 [ 413.324676][ T31] schedule+0x11e/0x1e0 [ 413.328821][ T31] schedule_timeout+0xa6/0x2e0 [ 413.333595][ T31] ? console_conditional_schedule+0x30/0x30 [ 413.339506][ T31] ? __prepare_to_swait+0xa8/0x130 [ 413.344615][ T31] wait_for_common+0x26b/0x420 [ 413.349386][ T31] ? __kasan_check_write+0x14/0x20 [ 413.354495][ T31] ? wait_for_completion+0x20/0x20 [ 413.359606][ T31] ? mutex_unlock+0x89/0x220 [ 413.364185][ T31] ? __mutex_lock_slowpath+0x10/0x10 [ 413.369468][ T31] ? flush_workqueue_prep_pwqs+0x424/0x480 [ 413.375271][ T31] ? check_flush_dependency+0xc4/0x370 [ 413.380730][ T31] wait_for_completion+0x18/0x20 [ 413.385662][ T31] flush_workqueue+0x5a6/0x12d0 [ 413.390518][ T31] ? flush_work+0x20/0x20 [ 413.394839][ T31] ? rcu_work_rcufn+0x50/0x50 [ 413.399516][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 413.405316][ T31] peer_remove_after_dead+0x98/0x1a0 [ 413.410606][ T31] wg_peer_remove_all+0x3e2/0x450 [ 413.415623][ T31] ? peer_remove_after_dead+0x1a0/0x1a0 [ 413.421170][ T31] wg_destruct+0x18e/0x300 [ 413.425579][ T31] ? wg_xmit+0xb20/0xb20 [ 413.429823][ T31] netdev_run_todo+0x773/0x990 [ 413.434582][ T31] ? netdev_refcnt_read+0x60/0x60 [ 413.439624][ T31] ? unregister_netdevice_queue+0x1aa/0x360 [ 413.445508][ T31] ? list_netdevice+0x4c0/0x4c0 [ 413.450359][ T31] rtnl_unlock+0xe/0x10 [ 413.454514][ T31] default_device_exit_batch+0x335/0x390 [ 413.460151][ T31] ? default_device_exit+0x360/0x360 [ 413.465429][ T31] ? wait_woken+0x170/0x170 [ 413.469933][ T31] ? rtnl_unlock+0xe/0x10 [ 413.474254][ T31] ? default_device_exit+0x360/0x360 [ 413.479541][ T31] cleanup_net+0x602/0xad0 [ 413.483952][ T31] ? ops_init+0x4a0/0x4a0 [ 413.488271][ T31] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 413.493644][ T31] process_one_work+0x6be/0xba0 [ 413.498492][ T31] worker_thread+0xa59/0x1200 [ 413.503174][ T31] ? __kthread_parkme+0xac/0x200 [ 413.508101][ T31] kthread+0x411/0x500 [ 413.512169][ T31] ? worker_clr_flags+0x190/0x190 [ 413.517189][ T31] ? kthread_blkcg+0xd0/0xd0 [ 413.521779][ T31] ret_from_fork+0x1f/0x30 [ 413.526186][ T31] [ 413.678972][ T31] NMI backtrace for cpu 1 [ 413.683331][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 413.690527][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 413.700569][ T31] Call Trace: [ 413.703841][ T31] [ 413.706761][ T31] __dump_stack+0x21/0x30 [ 413.711090][ T31] dump_stack_lvl+0xee/0x150 [ 413.715676][ T31] ? show_regs_print_info+0x20/0x20 [ 413.720869][ T31] dump_stack+0x15/0x20 [ 413.725016][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 413.729949][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 413.735485][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 413.741633][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 413.746563][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 413.752621][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 413.758678][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 413.764652][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 413.770540][ T31] watchdog+0xd64/0xea0 [ 413.774692][ T31] ? hungtask_pm_notify+0x50/0x50 [ 413.779719][ T31] ? __kasan_check_read+0x11/0x20 [ 413.784734][ T31] ? __kthread_parkme+0xac/0x200 [ 413.789663][ T31] ? preempt_count_add+0x90/0x1b0 [ 413.794681][ T31] kthread+0x411/0x500 [ 413.798739][ T31] ? hungtask_pm_notify+0x50/0x50 [ 413.803754][ T31] ? kthread_blkcg+0xd0/0xd0 [ 413.808340][ T31] ret_from_fork+0x1f/0x30 [ 413.812750][ T31] [ 413.815824][ T31] Sending NMI from CPU 1 to CPUs 0: [ 413.821031][ C0] NMI backtrace for cpu 0 [ 413.821039][ C0] CPU: 0 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 413.821053][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 413.821060][ C0] RIP: 0010:kasan_check_range+0x7f/0x290 [ 413.821080][ C0] Code: 5c 37 ff 48 c1 eb 03 4e 8d 14 3b 4d 89 d6 4d 29 ce 49 83 fe 10 7f 26 4d 85 f6 0f 84 39 01 00 00 48 f7 d3 4c 01 db 41 80 39 00 <0f> 85 c2 01 00 00 49 ff c1 48 ff c3 75 ee e9 1c 01 00 00 44 89 cb [ 413.821097][ C0] RSP: 0018:ffffc90000c27ab0 EFLAGS: 00000246 [ 413.821110][ C0] RAX: ffffffff812b6e01 RBX: fffffffffffffffc RCX: ffffffff812b6f13 [ 413.821120][ C0] RDX: 0000000000000001 RSI: 0000000000000030 RDI: ffffc90000c27c10 [ 413.821129][ C0] RBP: ffffc90000c27ac8 R08: dffffc0000000000 R09: fffff52000184f84 [ 413.821139][ C0] R10: fffff52000184f88 R11: 1ffff92000184f82 R12: 00007ffdc3025dc0 [ 413.821150][ C0] R13: dffffc0000000000 R14: 0000000000000006 R15: dffffc0000000001 [ 413.821159][ C0] FS: 0000555564c47500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 413.821171][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 413.821181][ C0] CR2: 0000000000000000 CR3: 000000011d4fe000 CR4: 00000000003506b0 [ 413.821193][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 413.821200][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 413.821208][ C0] Call Trace: [ 413.821212][ C0] [ 413.821217][ C0] memset+0x23/0x40 [ 413.821231][ C0] fpu__restore_sig+0x193/0xde0 [ 413.821331][ C0] ? sysvec_irq_work+0x61/0xc0 [ 413.821380][ C0] ? copy_fpstate_to_sigframe+0x9a0/0x9a0 [ 413.821396][ C0] ? __kasan_check_write+0x14/0x20 [ 413.821410][ C0] ? recalc_sigpending+0x1c4/0x230 [ 413.821452][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 413.821468][ C0] ? __kasan_check_write+0x14/0x20 [ 413.821482][ C0] ? _copy_from_user+0x95/0xd0 [ 413.821521][ C0] __ia32_sys_rt_sigreturn+0x5d0/0x6c0 [ 413.821549][ C0] ? load_gs_index+0xb0/0xb0 [ 413.821564][ C0] ? sched_clock+0x9/0x10 [ 413.821575][ C0] ? sched_clock_cpu+0x18/0x3c0 [ 413.821590][ C0] ? __bpf_trace_sys_enter+0x62/0x70 [ 413.821626][ C0] ? trace_sys_enter+0x3d/0x50 [ 413.821639][ C0] x64_sys_call+0x4ab/0x9a0 [ 413.821652][ C0] do_syscall_64+0x4c/0xa0 [ 413.821666][ C0] ? clear_bhb_loop+0x50/0xa0 [ 413.821677][ C0] ? clear_bhb_loop+0x50/0xa0 [ 413.821689][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 413.821704][ C0] RIP: 0033:0x7f76f48f2749 [ 413.821717][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.821727][ C0] RSP: 002b:00007ffdc30261b8 EFLAGS: 00000246 [ 413.821738][ C0] RAX: 0000000000000000 RBX: 00007f76f4b48fa8 RCX: 00007f76f48f2749 [ 413.821747][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f76f4b48fac [ 413.821756][ C0] RBP: 0000000000000000 R08: 003b52da2b96ea66 R09: 00000007c30264af [ 413.821765][ C0] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f76f4b48fac [ 413.821774][ C0] R13: 00007f76f4b48fa0 R14: 0000000000000095 R15: 0000000000000003 [ 413.821785][ C0] [ 437.728916][ T31] INFO: task kworker/u4:1:10 blocked for more than 172 seconds. [ 437.736588][ T31] Not tainted syzkaller #0 [ 437.928901][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 437.937605][ T31] task:kworker/u4:1 state:D stack:24608 pid: 10 ppid: 2 flags:0x00004000 [ 438.298935][ T31] Workqueue: netns cleanup_net [ 438.303744][ T31] Call Trace: [ 438.307014][ T31] [ 438.309964][ T31] __schedule+0xb6e/0x14c0 [ 438.314384][ T31] ? release_firmware_map_entry+0x190/0x190 [ 438.320288][ T31] ? __switch_to_asm+0x3a/0x60 [ 438.325051][ T31] ? kthread_data+0x50/0xc0 [ 438.329556][ T31] ? wq_worker_sleeping+0x60/0x200 [ 438.334662][ T31] schedule+0x11e/0x1e0 [ 438.338810][ T31] schedule_timeout+0xa6/0x2e0 [ 438.343588][ T31] ? console_conditional_schedule+0x30/0x30 [ 438.349502][ T31] ? __prepare_to_swait+0xa8/0x130 [ 438.354611][ T31] wait_for_common+0x26b/0x420 [ 438.359381][ T31] ? __kasan_check_write+0x14/0x20 [ 438.364487][ T31] ? wait_for_completion+0x20/0x20 [ 438.369602][ T31] ? mutex_unlock+0x89/0x220 [ 438.374187][ T31] ? __mutex_lock_slowpath+0x10/0x10 [ 438.379474][ T31] ? flush_workqueue_prep_pwqs+0x424/0x480 [ 438.385275][ T31] ? check_flush_dependency+0xc4/0x370 [ 438.390736][ T31] wait_for_completion+0x18/0x20 [ 438.395664][ T31] flush_workqueue+0x5a6/0x12d0 [ 438.400517][ T31] ? flush_work+0x20/0x20 [ 438.404837][ T31] ? rcu_work_rcufn+0x50/0x50 [ 438.409514][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 438.415320][ T31] peer_remove_after_dead+0x98/0x1a0 [ 438.420609][ T31] wg_peer_remove_all+0x3e2/0x450 [ 438.425627][ T31] ? peer_remove_after_dead+0x1a0/0x1a0 [ 438.431180][ T31] wg_destruct+0x18e/0x300 [ 438.435589][ T31] ? wg_xmit+0xb20/0xb20 [ 438.439831][ T31] netdev_run_todo+0x773/0x990 [ 438.444593][ T31] ? netdev_refcnt_read+0x60/0x60 [ 438.449640][ T31] ? unregister_netdevice_queue+0x1aa/0x360 [ 438.455535][ T31] ? list_netdevice+0x4c0/0x4c0 [ 438.460391][ T31] rtnl_unlock+0xe/0x10 [ 438.464540][ T31] default_device_exit_batch+0x335/0x390 [ 438.470179][ T31] ? default_device_exit+0x360/0x360 [ 438.475458][ T31] ? wait_woken+0x170/0x170 [ 438.479971][ T31] ? rtnl_unlock+0xe/0x10 [ 438.484295][ T31] ? default_device_exit+0x360/0x360 [ 438.489587][ T31] cleanup_net+0x602/0xad0 [ 438.494001][ T31] ? ops_init+0x4a0/0x4a0 [ 438.498325][ T31] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 438.503703][ T31] process_one_work+0x6be/0xba0 [ 438.508550][ T31] worker_thread+0xa59/0x1200 [ 438.513240][ T31] ? __kthread_parkme+0xac/0x200 [ 438.518176][ T31] kthread+0x411/0x500 [ 438.522245][ T31] ? worker_clr_flags+0x190/0x190 [ 438.527267][ T31] ? kthread_blkcg+0xd0/0xd0 [ 438.531883][ T31] ret_from_fork+0x1f/0x30 [ 438.536295][ T31] [ 438.638941][ T31] NMI backtrace for cpu 1 [ 438.643296][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 438.650572][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 438.660615][ T31] Call Trace: [ 438.663882][ T31] [ 438.666801][ T31] __dump_stack+0x21/0x30 [ 438.671127][ T31] dump_stack_lvl+0xee/0x150 [ 438.675709][ T31] ? show_regs_print_info+0x20/0x20 [ 438.680899][ T31] dump_stack+0x15/0x20 [ 438.685044][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 438.689975][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 438.695519][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 438.701662][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 438.706592][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 438.712651][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 438.718713][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 438.724774][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 438.730659][ T31] watchdog+0xd64/0xea0 [ 438.734812][ T31] ? hungtask_pm_notify+0x50/0x50 [ 438.739829][ T31] ? __kasan_check_read+0x11/0x20 [ 438.744849][ T31] ? __kthread_parkme+0xac/0x200 [ 438.749780][ T31] ? preempt_count_add+0x90/0x1b0 [ 438.754798][ T31] kthread+0x411/0x500 [ 438.758857][ T31] ? hungtask_pm_notify+0x50/0x50 [ 438.763875][ T31] ? kthread_blkcg+0xd0/0xd0 [ 438.768456][ T31] ret_from_fork+0x1f/0x30 [ 438.772865][ T31] [ 438.775933][ T31] Sending NMI from CPU 1 to CPUs 0: [ 438.781137][ C0] NMI backtrace for cpu 0 [ 438.781145][ C0] CPU: 0 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 438.781158][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 438.781166][ C0] RIP: 0010:is_bpf_text_address+0x1/0x190 [ 438.781278][ C0] Code: 85 f6 75 cf e8 50 73 f2 ff 48 8b 5d d0 e8 97 82 e0 ff 48 89 d8 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 1f 44 00 00 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 50 48 89 fb 49 bc 00 00 00 00 [ 438.781289][ C0] RSP: 0018:ffffc90000c275e0 EFLAGS: 00000046 [ 438.781302][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 438.781311][ C0] RDX: dffffc0000000000 RSI: ffffffff85634920 RDI: 0000000000000000 [ 438.781320][ C0] RBP: ffffc90000c27610 R08: ffffc90000c27710 R09: ffffc90000c27708 [ 438.781330][ C0] R10: 000000000000000e R11: 1ffff92000184ec9 R12: ffff8881100dbb40 [ 438.781340][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000003901 [ 438.781348][ C0] FS: 0000555564c47500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 438.781360][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 438.781369][ C0] CR2: 0000000000000000 CR3: 000000011d4fe000 CR4: 00000000003506b0 [ 438.781381][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 438.781389][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 438.781397][ C0] Call Trace: [ 438.781401][ C0] [ 438.781406][ C0] ? __kernel_text_address+0xa0/0x100 [ 438.781420][ C0] unwind_get_return_address+0x4d/0x90 [ 438.781444][ C0] ? stack_trace_save+0xe0/0xe0 [ 438.781458][ C0] arch_stack_walk+0xee/0x140 [ 438.781475][ C0] stack_trace_save+0x98/0xe0 [ 438.781487][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 438.781500][ C0] ? 0xffffffffa0026138 [ 438.781509][ C0] ? is_bpf_text_address+0x177/0x190 [ 438.781523][ C0] ? memset+0x35/0x40 [ 438.781536][ C0] kasan_set_track+0x4a/0x70 [ 438.781548][ C0] ? kasan_set_track+0x4a/0x70 [ 438.781559][ C0] ? kasan_set_free_info+0x23/0x40 [ 438.781571][ C0] ? ____kasan_slab_free+0x125/0x160 [ 438.781584][ C0] ? __kasan_slab_free+0x11/0x20 [ 438.781595][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 438.781612][ C0] ? kmem_cache_free+0x100/0x320 [ 438.781625][ C0] ? __dequeue_signal+0x4ad/0x5c0 [ 438.781639][ C0] ? dequeue_signal+0xa0/0x440 [ 438.781651][ C0] ? get_signal+0x696/0x1480 [ 438.781664][ C0] ? arch_do_signal_or_restart+0xc1/0x10f0 [ 438.781678][ C0] ? exit_to_user_mode_loop+0xa7/0xe0 [ 438.781690][ C0] ? exit_to_user_mode_prepare+0x87/0xd0 [ 438.781702][ C0] ? syscall_exit_to_user_mode+0x1a/0x30 [ 438.781715][ C0] ? do_syscall_64+0x58/0xa0 [ 438.781729][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 438.781751][ C0] ? debug_smp_processor_id+0x17/0x20 [ 438.781763][ C0] ? kasan_quarantine_put+0x34/0x190 [ 438.781777][ C0] ? kmem_cache_free+0x100/0x320 [ 438.781790][ C0] kasan_set_free_info+0x23/0x40 [ 438.781803][ C0] ____kasan_slab_free+0x125/0x160 [ 438.781816][ C0] __kasan_slab_free+0x11/0x20 [ 438.781828][ C0] slab_free_freelist_hook+0xc2/0x190 [ 438.781843][ C0] ? __dequeue_signal+0x4ad/0x5c0 [ 438.781856][ C0] kmem_cache_free+0x100/0x320 [ 438.781871][ C0] __dequeue_signal+0x4ad/0x5c0 [ 438.781885][ C0] dequeue_signal+0xa0/0x440 [ 438.781898][ C0] get_signal+0x696/0x1480 [ 438.781914][ C0] arch_do_signal_or_restart+0xc1/0x10f0 [ 438.781929][ C0] ? load_gs_index+0xb0/0xb0 [ 438.781941][ C0] ? get_sigframe_size+0x10/0x10 [ 438.781955][ C0] ? sched_clock+0x9/0x10 [ 438.781967][ C0] ? sched_clock_cpu+0x18/0x3c0 [ 438.781980][ C0] exit_to_user_mode_loop+0xa7/0xe0 [ 438.781992][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 438.782005][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 438.782017][ C0] do_syscall_64+0x58/0xa0 [ 438.782030][ C0] ? clear_bhb_loop+0x50/0xa0 [ 438.782042][ C0] ? clear_bhb_loop+0x50/0xa0 [ 438.782053][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 438.782068][ C0] RIP: 0033:0x7f76f48f2749 [ 438.782080][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.782090][ C0] RSP: 002b:00007ffdc30261b8 EFLAGS: 00000246 [ 438.782100][ C0] RAX: 0000000000000000 RBX: 00007f76f4b48fa8 RCX: 00007f76f48f2749 [ 438.782109][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f76f4b48fac [ 438.782118][ C0] RBP: 0000000000000000 R08: 003b52da2b96ea66 R09: 00000007c30264af [ 438.782127][ C0] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f76f4b48fac [ 438.782135][ C0] R13: 00007f76f4b48fa0 R14: 0000000000000095 R15: 0000000000000003 [ 438.782146][ C0] [ 462.688906][ T31] INFO: task kworker/u4:1:10 blocked for more than 197 seconds. [ 462.696571][ T31] Not tainted syzkaller #0 [ 462.878906][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 462.887606][ T31] task:kworker/u4:1 state:D stack:24608 pid: 10 ppid: 2 flags:0x00004000 [ 463.298920][ T31] Workqueue: netns cleanup_net [ 463.303732][ T31] Call Trace: [ 463.307008][ T31] [ 463.309959][ T31] __schedule+0xb6e/0x14c0 [ 463.314376][ T31] ? release_firmware_map_entry+0x190/0x190 [ 463.320282][ T31] ? __switch_to_asm+0x3a/0x60 [ 463.325042][ T31] ? kthread_data+0x50/0xc0 [ 463.329571][ T31] ? wq_worker_sleeping+0x60/0x200 [ 463.334683][ T31] schedule+0x11e/0x1e0 [ 463.338840][ T31] schedule_timeout+0xa6/0x2e0 [ 463.343613][ T31] ? console_conditional_schedule+0x30/0x30 [ 463.349546][ T31] ? __prepare_to_swait+0xa8/0x130 [ 463.354658][ T31] wait_for_common+0x26b/0x420 [ 463.359427][ T31] ? __kasan_check_write+0x14/0x20 [ 463.364533][ T31] ? wait_for_completion+0x20/0x20 [ 463.369651][ T31] ? mutex_unlock+0x89/0x220 [ 463.374235][ T31] ? __mutex_lock_slowpath+0x10/0x10 [ 463.379521][ T31] ? flush_workqueue_prep_pwqs+0x424/0x480 [ 463.385328][ T31] ? check_flush_dependency+0xc4/0x370 [ 463.390794][ T31] wait_for_completion+0x18/0x20 [ 463.395725][ T31] flush_workqueue+0x5a6/0x12d0 [ 463.400581][ T31] ? flush_work+0x20/0x20 [ 463.404907][ T31] ? rcu_work_rcufn+0x50/0x50 [ 463.409592][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 463.415396][ T31] peer_remove_after_dead+0x98/0x1a0 [ 463.420687][ T31] wg_peer_remove_all+0x3e2/0x450 [ 463.425707][ T31] ? peer_remove_after_dead+0x1a0/0x1a0 [ 463.431271][ T31] wg_destruct+0x18e/0x300 [ 463.435682][ T31] ? wg_xmit+0xb20/0xb20 [ 463.439932][ T31] netdev_run_todo+0x773/0x990 [ 463.444696][ T31] ? netdev_refcnt_read+0x60/0x60 [ 463.449724][ T31] ? unregister_netdevice_queue+0x1aa/0x360 [ 463.455615][ T31] ? list_netdevice+0x4c0/0x4c0 [ 463.460479][ T31] rtnl_unlock+0xe/0x10 [ 463.464629][ T31] default_device_exit_batch+0x335/0x390 [ 463.470272][ T31] ? default_device_exit+0x360/0x360 [ 463.475553][ T31] ? wait_woken+0x170/0x170 [ 463.480065][ T31] ? rtnl_unlock+0xe/0x10 [ 463.484389][ T31] ? default_device_exit+0x360/0x360 [ 463.489681][ T31] cleanup_net+0x602/0xad0 [ 463.494094][ T31] ? ops_init+0x4a0/0x4a0 [ 463.498416][ T31] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 463.503795][ T31] process_one_work+0x6be/0xba0 [ 463.508645][ T31] worker_thread+0xa59/0x1200 [ 463.513329][ T31] ? __kthread_parkme+0xac/0x200 [ 463.518262][ T31] kthread+0x411/0x500 [ 463.522343][ T31] ? worker_clr_flags+0x190/0x190 [ 463.527362][ T31] ? kthread_blkcg+0xd0/0xd0 [ 463.531969][ T31] ret_from_fork+0x1f/0x30 [ 463.536386][ T31] [ 463.589380][ T31] NMI backtrace for cpu 1 [ 463.593733][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 463.600928][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 463.610976][ T31] Call Trace: [ 463.614251][ T31] [ 463.617173][ T31] __dump_stack+0x21/0x30 [ 463.621508][ T31] dump_stack_lvl+0xee/0x150 [ 463.626095][ T31] ? show_regs_print_info+0x20/0x20 [ 463.631291][ T31] dump_stack+0x15/0x20 [ 463.635444][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 463.640381][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 463.645934][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 463.652092][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 463.657027][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 463.663095][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 463.669160][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 463.675143][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 463.681037][ T31] watchdog+0xd64/0xea0 [ 463.685191][ T31] ? hungtask_pm_notify+0x50/0x50 [ 463.690215][ T31] ? __kasan_check_read+0x11/0x20 [ 463.695235][ T31] ? __kthread_parkme+0xac/0x200 [ 463.700170][ T31] ? preempt_count_add+0x90/0x1b0 [ 463.705192][ T31] kthread+0x411/0x500 [ 463.709254][ T31] ? hungtask_pm_notify+0x50/0x50 [ 463.714275][ T31] ? kthread_blkcg+0xd0/0xd0 [ 463.718858][ T31] ret_from_fork+0x1f/0x30 [ 463.723271][ T31] [ 463.726330][ T31] Sending NMI from CPU 1 to CPUs 0: [ 463.731543][ C0] NMI backtrace for cpu 0 [ 463.731551][ C0] CPU: 0 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 463.731564][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 463.731572][ C0] RIP: 0010:kasan_check_range+0x0/0x290 [ 463.731592][ C0] Code: 48 c1 ee 03 48 01 c6 48 89 c7 e8 1b d1 fc 02 31 c0 5d c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc 01 48 85 f6 0f 84 a9 01 00 00 55 48 89 e5 41 57 41 56 53 49 89 [ 463.731603][ C0] RSP: 0018:ffffc90000c27c70 EFLAGS: 00000293 [ 463.731615][ C0] RAX: ffffffff824c2f44 RBX: 00000000000000c0 RCX: ffffffff824c2f51 [ 463.731626][ C0] RDX: 0000000000000001 RSI: 00000000000000c0 RDI: ffffc90000c27d40 [ 463.731635][ C0] RBP: ffffc90000c27c78 R08: dffffc0000000000 R09: ffffc90000c27d40 [ 463.731645][ C0] R10: 0000000000000000 R11: 0000000000000020 R12: 00007ffffffff000 [ 463.731654][ C0] R13: 00007ffdc3025ce8 R14: ffffc90000c27d40 R15: 00007ffdc3025c28 [ 463.731664][ C0] FS: 0000555564c47500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 463.731676][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.731686][ C0] CR2: 0000000000000000 CR3: 000000011d4fe000 CR4: 00000000003506b0 [ 463.731697][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 463.731705][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 463.731713][ C0] Call Trace: [ 463.731717][ C0] [ 463.731721][ C0] ? __kasan_check_write+0x14/0x20 [ 463.731735][ C0] _copy_from_user+0x71/0xd0 [ 463.731748][ C0] __ia32_sys_rt_sigreturn+0x1b0/0x6c0 [ 463.731764][ C0] ? trace_raw_output_bpf_trace_printk+0xd0/0xd0 [ 463.731854][ C0] ? load_gs_index+0xb0/0xb0 [ 463.731870][ C0] ? __bpf_trace_sys_enter+0x62/0x70 [ 463.731884][ C0] ? trace_sys_enter+0x3d/0x50 [ 463.731896][ C0] x64_sys_call+0x4ab/0x9a0 [ 463.731909][ C0] do_syscall_64+0x4c/0xa0 [ 463.731924][ C0] ? clear_bhb_loop+0x50/0xa0 [ 463.731936][ C0] ? clear_bhb_loop+0x50/0xa0 [ 463.731947][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 463.731963][ C0] RIP: 0033:0x7f76f488e829 [ 463.731974][ C0] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 463.731985][ C0] RSP: 002b:00007ffdc3025c00 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 463.731998][ C0] RAX: ffffffffffffffda RBX: 00007f76f4b48fa8 RCX: 00007f76f488e829 [ 463.732008][ C0] RDX: 00007ffdc3025c00 RSI: 00007ffdc3025d30 RDI: 0000000000000011 [ 463.732017][ C0] RBP: 0000000000000000 R08: 003b52da2b96ea66 R09: 00000007c30264af [ 463.732026][ C0] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f76f4b48fac [ 463.732034][ C0] R13: 00007f76f4b48fa0 R14: 0000000000000095 R15: 0000000000000003 [ 463.732045][ C0] [ 487.648896][ T31] INFO: task kworker/u4:1:10 blocked for more than 222 seconds. [ 487.656565][ T31] Not tainted syzkaller #0 [ 487.828891][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 487.837587][ T31] task:kworker/u4:1 state:D stack:24608 pid: 10 ppid: 2 flags:0x00004000 [ 488.298881][ T31] Workqueue: netns cleanup_net [ 488.303690][ T31] Call Trace: [ 488.306962][ T31] [ 488.309957][ T31] __schedule+0xb6e/0x14c0 [ 488.314373][ T31] ? release_firmware_map_entry+0x190/0x190 [ 488.320270][ T31] ? __switch_to_asm+0x3a/0x60 [ 488.325040][ T31] ? kthread_data+0x50/0xc0 [ 488.329576][ T31] ? wq_worker_sleeping+0x60/0x200 [ 488.334687][ T31] schedule+0x11e/0x1e0 [ 488.338836][ T31] schedule_timeout+0xa6/0x2e0 [ 488.343611][ T31] ? console_conditional_schedule+0x30/0x30 [ 488.349512][ T31] ? __prepare_to_swait+0xa8/0x130 [ 488.354616][ T31] wait_for_common+0x26b/0x420 [ 488.359386][ T31] ? __kasan_check_write+0x14/0x20 [ 488.364494][ T31] ? wait_for_completion+0x20/0x20 [ 488.369608][ T31] ? mutex_unlock+0x89/0x220 [ 488.374188][ T31] ? __mutex_lock_slowpath+0x10/0x10 [ 488.379475][ T31] ? flush_workqueue_prep_pwqs+0x424/0x480 [ 488.385277][ T31] ? check_flush_dependency+0xc4/0x370 [ 488.390750][ T31] wait_for_completion+0x18/0x20 [ 488.395679][ T31] flush_workqueue+0x5a6/0x12d0 [ 488.400536][ T31] ? flush_work+0x20/0x20 [ 488.404857][ T31] ? rcu_work_rcufn+0x50/0x50 [ 488.409545][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 488.415347][ T31] peer_remove_after_dead+0x98/0x1a0 [ 488.420642][ T31] wg_peer_remove_all+0x3e2/0x450 [ 488.425658][ T31] ? peer_remove_after_dead+0x1a0/0x1a0 [ 488.431231][ T31] wg_destruct+0x18e/0x300 [ 488.435653][ T31] ? wg_xmit+0xb20/0xb20 [ 488.439898][ T31] netdev_run_todo+0x773/0x990 [ 488.444657][ T31] ? netdev_refcnt_read+0x60/0x60 [ 488.449690][ T31] ? unregister_netdevice_queue+0x1aa/0x360 [ 488.455580][ T31] ? list_netdevice+0x4c0/0x4c0 [ 488.460435][ T31] rtnl_unlock+0xe/0x10 [ 488.464585][ T31] default_device_exit_batch+0x335/0x390 [ 488.470230][ T31] ? default_device_exit+0x360/0x360 [ 488.475512][ T31] ? wait_woken+0x170/0x170 [ 488.480022][ T31] ? rtnl_unlock+0xe/0x10 [ 488.484345][ T31] ? default_device_exit+0x360/0x360 [ 488.489635][ T31] cleanup_net+0x602/0xad0 [ 488.494047][ T31] ? ops_init+0x4a0/0x4a0 [ 488.498368][ T31] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 488.503745][ T31] process_one_work+0x6be/0xba0 [ 488.508594][ T31] worker_thread+0xa59/0x1200 [ 488.513293][ T31] ? __kthread_parkme+0xac/0x200 [ 488.518223][ T31] kthread+0x411/0x500 [ 488.522298][ T31] ? worker_clr_flags+0x190/0x190 [ 488.527316][ T31] ? kthread_blkcg+0xd0/0xd0 [ 488.531952][ T31] ret_from_fork+0x1f/0x30 [ 488.536368][ T31] [ 488.808940][ T31] NMI backtrace for cpu 1 [ 488.813299][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 488.820494][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 488.830540][ T31] Call Trace: [ 488.833809][ T31] [ 488.836731][ T31] __dump_stack+0x21/0x30 [ 488.841059][ T31] dump_stack_lvl+0xee/0x150 [ 488.845646][ T31] ? show_regs_print_info+0x20/0x20 [ 488.850837][ T31] dump_stack+0x15/0x20 [ 488.854989][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 488.859922][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 488.865459][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 488.871602][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 488.876531][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 488.882589][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 488.888650][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 488.894625][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 488.900508][ T31] watchdog+0xd64/0xea0 [ 488.904658][ T31] ? hungtask_pm_notify+0x50/0x50 [ 488.909678][ T31] ? __kasan_check_read+0x11/0x20 [ 488.914692][ T31] ? __kthread_parkme+0xac/0x200 [ 488.919619][ T31] ? preempt_count_add+0x90/0x1b0 [ 488.924635][ T31] kthread+0x411/0x500 [ 488.928694][ T31] ? hungtask_pm_notify+0x50/0x50 [ 488.933711][ T31] ? kthread_blkcg+0xd0/0xd0 [ 488.938290][ T31] ret_from_fork+0x1f/0x30 [ 488.942704][ T31] [ 488.945796][ T31] Sending NMI from CPU 1 to CPUs 0: [ 488.951008][ C0] NMI backtrace for cpu 0 [ 488.951017][ C0] CPU: 0 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 488.951031][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 488.951038][ C0] RIP: 0010:__memset+0x0/0x30 [ 488.951131][ C0] Code: 66 44 8b 1e 66 44 8b 54 16 fe 66 44 89 1f 66 44 89 54 17 fe eb 0c 48 83 fa 01 72 06 44 8a 1e 44 88 1f c3 48 89 d1 f3 a4 c3 00 2e 0f 1f 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 [ 488.951142][ C0] RSP: 0018:ffffc90000007940 EFLAGS: 00000002 [ 488.951155][ C0] RAX: 0000000000000101 RBX: 0000000000000200 RCX: ffffffff81a720fe [ 488.951165][ C0] RDX: 0000000000000200 RSI: 0000000000000000 RDI: ffffc90000007970 [ 488.951174][ C0] RBP: ffffc90000007960 R08: dffffc0000000000 R09: fffff52000000f6e [ 488.951184][ C0] R10: 0000000000000000 R11: 0000000000000038 R12: ffff888112e8f6e0 [ 488.951193][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffc90000007970 [ 488.951202][ C0] FS: 0000555564c47500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 488.951214][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 488.951224][ C0] CR2: 0000000000000000 CR3: 000000011d4fe000 CR4: 00000000003506b0 [ 488.951236][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 488.951243][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 488.951251][ C0] Call Trace: [ 488.951255][ C0] [ 488.951260][ C0] ? memset+0x35/0x40 [ 488.951275][ C0] __kasan_slab_alloc+0xae/0xf0 [ 488.951287][ C0] ? __kasan_slab_alloc+0xbd/0xf0 [ 488.951299][ C0] ? slab_post_alloc_hook+0x4f/0x2b0 [ 488.951313][ C0] ? kmem_cache_alloc+0xf7/0x260 [ 488.951327][ C0] ? __sigqueue_alloc+0x137/0x210 [ 488.951341][ C0] ? __send_signal+0x212/0xc30 [ 488.951354][ C0] ? send_signal+0x422/0x580 [ 488.951366][ C0] ? do_send_sig_info+0xd6/0x210 [ 488.951379][ C0] ? group_send_sig_info+0x11a/0x3c0 [ 488.951392][ C0] ? do_bpf_send_signal+0x82/0x150 [ 488.951407][ C0] ? irq_work_run_list+0x169/0x240 [ 488.951421][ C0] ? irq_work_run+0x6a/0xf0 [ 488.951433][ C0] ? __sysvec_irq_work+0x63/0x1a0 [ 488.951449][ C0] ? sysvec_irq_work+0xa1/0xc0 [ 488.951464][ C0] ? asm_sysvec_irq_work+0x1b/0x20 [ 488.951480][ C0] ? native_apic_msr_write+0x39/0x50 [ 488.951497][ C0] ? x2apic_send_IPI_self+0x5e/0x70 [ 488.951511][ C0] ? arch_irq_work_raise+0x86/0xd0 [ 488.951525][ C0] ? __irq_work_queue_local+0x115/0x190 [ 488.951538][ C0] ? irq_work_queue+0x9e/0x150 [ 488.951551][ C0] ? bpf_send_signal_common+0x2b2/0x420 [ 488.951565][ C0] ? bpf_send_signal+0x19/0x20 [ 488.951578][ C0] ? bpf_prog_7ba5217f62dcd359+0x38/0xec8 [ 488.951589][ C0] ? bpf_trace_run2+0xb0/0x1b0 [ 488.951602][ C0] ? __bpf_trace_sys_enter+0x62/0x70 [ 488.951615][ C0] ? trace_sys_enter+0x3d/0x50 [ 488.951626][ C0] ? syscall_trace_enter+0x118/0x180 [ 488.951638][ C0] ? syscall_enter_from_user_mode+0x1f/0x30 [ 488.951650][ C0] ? do_syscall_64+0x24/0xa0 [ 488.951663][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 488.951683][ C0] slab_post_alloc_hook+0x4f/0x2b0 [ 488.951697][ C0] ? should_failslab+0x9/0x20 [ 488.951751][ C0] ? __sigqueue_alloc+0x137/0x210 [ 488.951765][ C0] kmem_cache_alloc+0xf7/0x260 [ 488.951779][ C0] __sigqueue_alloc+0x137/0x210 [ 488.951793][ C0] __send_signal+0x212/0xc30 [ 488.951805][ C0] ? __kasan_check_write+0x14/0x20 [ 488.951820][ C0] send_signal+0x422/0x580 [ 488.951832][ C0] ? __hrtimer_run_queues+0x97a/0x9e0 [ 488.951849][ C0] do_send_sig_info+0xd6/0x210 [ 488.951863][ C0] group_send_sig_info+0x11a/0x3c0 [ 488.951876][ C0] ? ktime_get+0x12f/0x160 [ 488.951887][ C0] ? __lock_task_sighand+0x100/0x100 [ 488.951902][ C0] do_bpf_send_signal+0x82/0x150 [ 488.951916][ C0] irq_work_run_list+0x169/0x240 [ 488.951929][ C0] ? irq_work_run+0xf0/0xf0 [ 488.951943][ C0] irq_work_run+0x6a/0xf0 [ 488.951955][ C0] __sysvec_irq_work+0x63/0x1a0 [ 488.951970][ C0] sysvec_irq_work+0xa1/0xc0 [ 488.951984][ C0] [ 488.951988][ C0] [ 488.951992][ C0] asm_sysvec_irq_work+0x1b/0x20 [ 488.952006][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 488.952022][ C0] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 eb d9 89 f6 31 d2 e8 fa 76 3a 01 5d c3 0f 1f 84 00 00 00 00 [ 488.952032][ C0] RSP: 0018:ffffc90000c27c20 EFLAGS: 00000246 [ 488.952044][ C0] RAX: 00000000000000f6 RBX: 00000000000000f6 RCX: 000000000000083f [ 488.952052][ C0] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 488.952066][ C0] RBP: ffffc90000c27c20 R08: dffffc0000000000 R09: ffffed103ee065e7 [ 488.952076][ C0] R10: ffffed103ee065e7 R11: 1ffff1103ee065e6 R12: 0000000000000000 [ 488.952085][ C0] R13: dffffc0000000001 R14: ffffffff85e659f8 R15: dffffc0000000000 [ 488.952097][ C0] x2apic_send_IPI_self+0x5e/0x70 [ 488.952113][ C0] arch_irq_work_raise+0x86/0xd0 [ 488.952127][ C0] __irq_work_queue_local+0x115/0x190 [ 488.952141][ C0] irq_work_queue+0x9e/0x150 [ 488.952154][ C0] bpf_send_signal_common+0x2b2/0x420 [ 488.952168][ C0] ? trace_raw_output_bpf_trace_printk+0xd0/0xd0 [ 488.952185][ C0] bpf_send_signal+0x19/0x20 [ 488.952197][ C0] bpf_prog_7ba5217f62dcd359+0x38/0xec8 [ 488.952208][ C0] bpf_trace_run2+0xb0/0x1b0 [ 488.952221][ C0] ? bpf_trace_run1+0x1b0/0x1b0 [ 488.952235][ C0] __bpf_trace_sys_enter+0x62/0x70 [ 488.952248][ C0] trace_sys_enter+0x3d/0x50 [ 488.952259][ C0] syscall_trace_enter+0x118/0x180 [ 488.952271][ C0] syscall_enter_from_user_mode+0x1f/0x30 [ 488.952284][ C0] do_syscall_64+0x24/0xa0 [ 488.952297][ C0] ? clear_bhb_loop+0x50/0xa0 [ 488.952308][ C0] ? clear_bhb_loop+0x50/0xa0 [ 488.952319][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 488.952334][ C0] RIP: 0033:0x7f76f488e829 [ 488.952345][ C0] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 488.952355][ C0] RSP: 002b:00007ffdc3025c00 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 488.952368][ C0] RAX: ffffffffffffffda RBX: 00007f76f4b48fa8 RCX: 00007f76f488e829 [ 488.952377][ C0] RDX: 00007ffdc3025c00 RSI: 00007ffdc3025d30 RDI: 0000000000000011 [ 488.952386][ C0] RBP: 0000000000000000 R08: 003b52da2b96ea66 R09: 00000007c30264af [ 488.952395][ C0] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f76f4b48fac [ 488.952404][ C0] R13: 00007f76f4b48fa0 R14: 0000000000000095 R15: 0000000000000003 [ 488.952414][ C0] [ 513.248881][ T31] INFO: task kworker/u4:1:10 blocked for more than 248 seconds. [ 513.256554][ T31] Not tainted syzkaller #0 [ 513.458868][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.467570][ T31] task:kworker/u4:1 state:D stack:24608 pid: 10 ppid: 2 flags:0x00004000 [ 513.848915][ T31] Workqueue: netns cleanup_net [ 513.853727][ T31] Call Trace: [ 513.856997][ T31] [ 513.859953][ T31] __schedule+0xb6e/0x14c0 [ 513.864369][ T31] ? release_firmware_map_entry+0x190/0x190 [ 513.870281][ T31] ? __switch_to_asm+0x3a/0x60 [ 513.875047][ T31] ? kthread_data+0x50/0xc0 [ 513.879555][ T31] ? wq_worker_sleeping+0x60/0x200 [ 513.884661][ T31] schedule+0x11e/0x1e0 [ 513.888809][ T31] schedule_timeout+0xa6/0x2e0 [ 513.893603][ T31] ? console_conditional_schedule+0x30/0x30 [ 513.899524][ T31] ? __prepare_to_swait+0xa8/0x130 [ 513.904634][ T31] wait_for_common+0x26b/0x420 [ 513.909411][ T31] ? __kasan_check_write+0x14/0x20 [ 513.914520][ T31] ? wait_for_completion+0x20/0x20 [ 513.919636][ T31] ? mutex_unlock+0x89/0x220 [ 513.924218][ T31] ? __mutex_lock_slowpath+0x10/0x10 [ 513.929509][ T31] ? flush_workqueue_prep_pwqs+0x424/0x480 [ 513.935311][ T31] ? check_flush_dependency+0xc4/0x370 [ 513.940778][ T31] wait_for_completion+0x18/0x20 [ 513.945711][ T31] flush_workqueue+0x5a6/0x12d0 [ 513.950576][ T31] ? flush_work+0x20/0x20 [ 513.954904][ T31] ? rcu_work_rcufn+0x50/0x50 [ 513.959585][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 513.965389][ T31] peer_remove_after_dead+0x98/0x1a0 [ 513.970684][ T31] wg_peer_remove_all+0x3e2/0x450 [ 513.975703][ T31] ? peer_remove_after_dead+0x1a0/0x1a0 [ 513.981257][ T31] wg_destruct+0x18e/0x300 [ 513.985666][ T31] ? wg_xmit+0xb20/0xb20 [ 513.989914][ T31] netdev_run_todo+0x773/0x990 [ 513.994676][ T31] ? netdev_refcnt_read+0x60/0x60 [ 513.999720][ T31] ? unregister_netdevice_queue+0x1aa/0x360 [ 514.005621][ T31] ? list_netdevice+0x4c0/0x4c0 [ 514.010504][ T31] rtnl_unlock+0xe/0x10 [ 514.014662][ T31] default_device_exit_batch+0x335/0x390 [ 514.020308][ T31] ? default_device_exit+0x360/0x360 [ 514.025596][ T31] ? wait_woken+0x170/0x170 [ 514.030114][ T31] ? rtnl_unlock+0xe/0x10 [ 514.034438][ T31] ? default_device_exit+0x360/0x360 [ 514.039751][ T31] cleanup_net+0x602/0xad0 [ 514.044164][ T31] ? ops_init+0x4a0/0x4a0 [ 514.048485][ T31] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 514.053861][ T31] process_one_work+0x6be/0xba0 [ 514.058709][ T31] worker_thread+0xa59/0x1200 [ 514.063395][ T31] ? __kthread_parkme+0xac/0x200 [ 514.068327][ T31] kthread+0x411/0x500 [ 514.072399][ T31] ? worker_clr_flags+0x190/0x190 [ 514.077417][ T31] ? kthread_blkcg+0xd0/0xd0 [ 514.082012][ T31] ret_from_fork+0x1f/0x30 [ 514.086425][ T31] [ 514.188909][ T31] NMI backtrace for cpu 1 [ 514.193269][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 514.200460][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 514.210508][ T31] Call Trace: [ 514.213779][ T31] [ 514.216701][ T31] __dump_stack+0x21/0x30 [ 514.221029][ T31] dump_stack_lvl+0xee/0x150 [ 514.225614][ T31] ? show_regs_print_info+0x20/0x20 [ 514.230810][ T31] dump_stack+0x15/0x20 [ 514.235076][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 514.240026][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 514.245577][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 514.251732][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 514.256679][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 514.262745][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 514.268813][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 514.274791][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 514.280679][ T31] watchdog+0xd64/0xea0 [ 514.284831][ T31] ? hungtask_pm_notify+0x50/0x50 [ 514.289845][ T31] ? __kasan_check_read+0x11/0x20 [ 514.294860][ T31] ? __kthread_parkme+0xac/0x200 [ 514.299789][ T31] ? preempt_count_add+0x90/0x1b0 [ 514.304817][ T31] kthread+0x411/0x500 [ 514.308878][ T31] ? hungtask_pm_notify+0x50/0x50 [ 514.313895][ T31] ? kthread_blkcg+0xd0/0xd0 [ 514.318475][ T31] ret_from_fork+0x1f/0x30 [ 514.322887][ T31] [ 514.325969][ T31] Sending NMI from CPU 1 to CPUs 0: [ 514.331179][ C0] NMI backtrace for cpu 0 [ 514.331188][ C0] CPU: 0 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 514.331202][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 514.331209][ C0] RIP: 0010:bpf_send_signal+0x19/0x20 [ 514.331229][ C0] Code: f7 fe ff ff 4c 89 ff e8 85 81 33 00 e9 ea fe ff ff 55 48 89 e5 53 48 89 fb e8 e3 fe f4 ff 89 df be 01 00 00 00 e8 87 50 00 00 <48> 98 5b 5d c3 66 90 55 48 89 e5 53 48 89 fb e8 c3 fe f4 ff 89 df [ 514.331240][ C0] RSP: 0018:ffffc90000c27da8 EFLAGS: 00000246 [ 514.331253][ C0] RAX: 0000000000000000 RBX: 0000000000000011 RCX: ea79b7af1ffba900 [ 514.331262][ C0] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 514.331271][ C0] RBP: ffffc90000c27db0 R08: dffffc0000000000 R09: ffffed103ee065e7 [ 514.331281][ C0] R10: ffffed103ee065e7 R11: 1ffff1103ee065e6 R12: ffffc90000c27f58 [ 514.331291][ C0] R13: 1ffff92000184fc0 R14: 0000000000000000 R15: dffffc0000000000 [ 514.331301][ C0] FS: 0000555564c47500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 514.331313][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 514.331322][ C0] CR2: 0000000000000000 CR3: 000000011d4fe000 CR4: 00000000003506b0 [ 514.331334][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 514.331342][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 514.331350][ C0] Call Trace: [ 514.331354][ C0] [ 514.331358][ C0] bpf_prog_7ba5217f62dcd359+0x38/0xec8 [ 514.331371][ C0] bpf_trace_run2+0xb0/0x1b0 [ 514.331385][ C0] ? bpf_trace_run1+0x1b0/0x1b0 [ 514.331399][ C0] ? sched_clock+0x9/0x10 [ 514.331411][ C0] ? sched_clock_cpu+0x18/0x3c0 [ 514.331425][ C0] __bpf_trace_sys_enter+0x62/0x70 [ 514.331438][ C0] trace_sys_enter+0x3d/0x50 [ 514.331450][ C0] syscall_trace_enter+0x118/0x180 [ 514.331463][ C0] syscall_enter_from_user_mode+0x1f/0x30 [ 514.331476][ C0] do_syscall_64+0x24/0xa0 [ 514.331490][ C0] ? clear_bhb_loop+0x50/0xa0 [ 514.331502][ C0] ? clear_bhb_loop+0x50/0xa0 [ 514.331513][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 514.331529][ C0] RIP: 0033:0x7f76f488e829 [ 514.331540][ C0] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 514.331550][ C0] RSP: 002b:00007ffdc3025c00 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 514.331563][ C0] RAX: ffffffffffffffda RBX: 00007f76f4b48fa8 RCX: 00007f76f488e829 [ 514.331573][ C0] RDX: 00007ffdc3025c00 RSI: 00007ffdc3025d30 RDI: 0000000000000011 [ 514.331582][ C0] RBP: 0000000000000000 R08: 003b52da2b96ea66 R09: 00000007c30264af [ 514.331591][ C0] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f76f4b48fac [ 514.331599][ C0] R13: 00007f76f4b48fa0 R14: 0000000000000095 R15: 0000000000000003 [ 514.331610][ C0] [ 538.209207][ T31] INFO: task kworker/u4:1:10 blocked for more than 273 seconds. [ 538.216879][ T31] Not tainted syzkaller #0 [ 538.378857][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 538.387554][ T31] task:kworker/u4:1 state:D stack:24608 pid: 10 ppid: 2 flags:0x00004000 [ 538.748901][ T31] Workqueue: netns cleanup_net [ 538.753713][ T31] Call Trace: [ 538.756986][ T31] [ 538.759933][ T31] __schedule+0xb6e/0x14c0 [ 538.764350][ T31] ? release_firmware_map_entry+0x190/0x190 [ 538.770304][ T31] ? __switch_to_asm+0x3a/0x60 [ 538.775076][ T31] ? kthread_data+0x50/0xc0 [ 538.779598][ T31] ? wq_worker_sleeping+0x60/0x200 [ 538.784710][ T31] schedule+0x11e/0x1e0 [ 538.788880][ T31] schedule_timeout+0xa6/0x2e0 [ 538.793639][ T31] ? console_conditional_schedule+0x30/0x30 [ 538.799539][ T31] ? __prepare_to_swait+0xa8/0x130 [ 538.804644][ T31] wait_for_common+0x26b/0x420 [ 538.809409][ T31] ? __kasan_check_write+0x14/0x20 [ 538.814518][ T31] ? wait_for_completion+0x20/0x20 [ 538.819631][ T31] ? mutex_unlock+0x89/0x220 [ 538.824212][ T31] ? __mutex_lock_slowpath+0x10/0x10 [ 538.829505][ T31] ? flush_workqueue_prep_pwqs+0x424/0x480 [ 538.835315][ T31] ? check_flush_dependency+0xc4/0x370 [ 538.840803][ T31] wait_for_completion+0x18/0x20 [ 538.845744][ T31] flush_workqueue+0x5a6/0x12d0 [ 538.850619][ T31] ? flush_work+0x20/0x20 [ 538.854948][ T31] ? rcu_work_rcufn+0x50/0x50 [ 538.859631][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 538.865437][ T31] peer_remove_after_dead+0x98/0x1a0 [ 538.870761][ T31] wg_peer_remove_all+0x3e2/0x450 [ 538.875781][ T31] ? peer_remove_after_dead+0x1a0/0x1a0 [ 538.881334][ T31] wg_destruct+0x18e/0x300 [ 538.885743][ T31] ? wg_xmit+0xb20/0xb20 [ 538.889989][ T31] netdev_run_todo+0x773/0x990 [ 538.894753][ T31] ? netdev_refcnt_read+0x60/0x60 [ 538.899795][ T31] ? unregister_netdevice_queue+0x1aa/0x360 [ 538.905684][ T31] ? list_netdevice+0x4c0/0x4c0 [ 538.910540][ T31] rtnl_unlock+0xe/0x10 [ 538.914690][ T31] default_device_exit_batch+0x335/0x390 [ 538.920327][ T31] ? default_device_exit+0x360/0x360 [ 538.925607][ T31] ? wait_woken+0x170/0x170 [ 538.930117][ T31] ? rtnl_unlock+0xe/0x10 [ 538.934444][ T31] ? default_device_exit+0x360/0x360 [ 538.939735][ T31] cleanup_net+0x602/0xad0 [ 538.944148][ T31] ? ops_init+0x4a0/0x4a0 [ 538.948470][ T31] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 538.953848][ T31] process_one_work+0x6be/0xba0 [ 538.958694][ T31] worker_thread+0xa59/0x1200 [ 538.963384][ T31] ? __kthread_parkme+0xac/0x200 [ 538.968314][ T31] kthread+0x411/0x500 [ 538.972398][ T31] ? worker_clr_flags+0x190/0x190 [ 538.977415][ T31] ? kthread_blkcg+0xd0/0xd0 [ 538.982010][ T31] ret_from_fork+0x1f/0x30 [ 538.986424][ T31] [ 539.098899][ T31] NMI backtrace for cpu 1 [ 539.103270][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 539.110461][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 539.120504][ T31] Call Trace: [ 539.123774][ T31] [ 539.126695][ T31] __dump_stack+0x21/0x30 [ 539.131023][ T31] dump_stack_lvl+0xee/0x150 [ 539.135607][ T31] ? show_regs_print_info+0x20/0x20 [ 539.140803][ T31] dump_stack+0x15/0x20 [ 539.144952][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 539.149884][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 539.155421][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 539.161568][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 539.166500][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 539.172559][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 539.178619][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 539.184596][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 539.190486][ T31] watchdog+0xd64/0xea0 [ 539.194636][ T31] ? hungtask_pm_notify+0x50/0x50 [ 539.199655][ T31] ? __kasan_check_read+0x11/0x20 [ 539.204675][ T31] ? __kthread_parkme+0xac/0x200 [ 539.209606][ T31] ? preempt_count_add+0x90/0x1b0 [ 539.214632][ T31] kthread+0x411/0x500 [ 539.218693][ T31] ? hungtask_pm_notify+0x50/0x50 [ 539.223709][ T31] ? kthread_blkcg+0xd0/0xd0 [ 539.228292][ T31] ret_from_fork+0x1f/0x30 [ 539.232705][ T31] [ 539.235792][ T31] Sending NMI from CPU 1 to CPUs 0: [ 539.241008][ C0] NMI backtrace for cpu 0 [ 539.241016][ C0] CPU: 0 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 539.241030][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 539.241038][ C0] RIP: 0010:unwind_next_frame+0xff/0x700 [ 539.241060][ C0] Code: 8d 73 28 4c 89 f0 48 c1 e8 03 48 89 45 a0 80 3c 10 00 74 12 4c 89 f7 e8 1f 0b 76 00 48 ba 00 00 00 00 00 fc ff df 4c 89 75 98 <49> 8b 06 48 89 45 a8 4c 8d 68 20 4c 89 e8 48 c1 e8 03 80 3c 10 00 [ 539.241071][ C0] RSP: 0018:ffffc90000c275c8 EFLAGS: 00000046 [ 539.241084][ C0] RAX: 1ffff92000184ece RBX: ffffc90000c27648 RCX: 0000000000c27601 [ 539.241094][ C0] RDX: dffffc0000000000 RSI: ffffffff81a7195a RDI: ffffc90000c27648 [ 539.241104][ C0] RBP: ffffc90000c27638 R08: ffffc90000c27710 R09: ffffc90000c27708 [ 539.241114][ C0] R10: 0000000000000000 R11: 1ffff92000184ec9 R12: 0000000000000000 [ 539.241123][ C0] R13: 1ffff92000184ed4 R14: ffffc90000c27670 R15: ffffc90000c27770 [ 539.241133][ C0] FS: 0000555564c47500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 539.241146][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 539.241155][ C0] CR2: 0000000000000000 CR3: 000000011d4fe000 CR4: 00000000003506b0 [ 539.241167][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 539.241175][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 539.241183][ C0] Call Trace: [ 539.241187][ C0] [ 539.241193][ C0] ? stack_trace_save+0xe0/0xe0 [ 539.241208][ C0] arch_stack_walk+0x108/0x140 [ 539.241224][ C0] ? kasan_set_track+0x4a/0x70 [ 539.241238][ C0] stack_trace_save+0x98/0xe0 [ 539.241254][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 539.241267][ C0] ? 0xffffffffa0026138 [ 539.241276][ C0] ? is_bpf_text_address+0x177/0x190 [ 539.241292][ C0] ? memset+0x35/0x40 [ 539.241305][ C0] kasan_set_track+0x4a/0x70 [ 539.241317][ C0] ? kasan_set_track+0x4a/0x70 [ 539.241334][ C0] ? debug_smp_processor_id+0x17/0x20 [ 539.241348][ C0] ? kasan_quarantine_put+0x34/0x190 [ 539.241361][ C0] ? kmem_cache_free+0x100/0x320 [ 539.241376][ C0] kasan_set_free_info+0x23/0x40 [ 539.241389][ C0] ____kasan_slab_free+0x125/0x160 [ 539.241402][ C0] __kasan_slab_free+0x11/0x20 [ 539.241414][ C0] slab_free_freelist_hook+0xc2/0x190 [ 539.241429][ C0] ? __dequeue_signal+0x4ad/0x5c0 [ 539.241443][ C0] kmem_cache_free+0x100/0x320 [ 539.241458][ C0] __dequeue_signal+0x4ad/0x5c0 [ 539.241472][ C0] dequeue_signal+0xa0/0x440 [ 539.241485][ C0] get_signal+0x696/0x1480 [ 539.241501][ C0] arch_do_signal_or_restart+0xc1/0x10f0 [ 539.241518][ C0] ? load_gs_index+0xb0/0xb0 [ 539.241530][ C0] ? get_sigframe_size+0x10/0x10 [ 539.241544][ C0] ? sched_clock+0x9/0x10 [ 539.241556][ C0] ? sched_clock_cpu+0x18/0x3c0 [ 539.241570][ C0] exit_to_user_mode_loop+0xa7/0xe0 [ 539.241582][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 539.241595][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 539.241607][ C0] do_syscall_64+0x58/0xa0 [ 539.241621][ C0] ? clear_bhb_loop+0x50/0xa0 [ 539.241633][ C0] ? clear_bhb_loop+0x50/0xa0 [ 539.241649][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 539.241665][ C0] RIP: 0033:0x7f76f48f2749 [ 539.241676][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.241686][ C0] RSP: 002b:00007ffdc30261b8 EFLAGS: 00000246 [ 539.241697][ C0] RAX: 0000000000000000 RBX: 00007f76f4b48fa8 RCX: 00007f76f48f2749 [ 539.241706][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f76f4b48fac [ 539.241715][ C0] RBP: 0000000000000000 R08: 003b52da2b96ea66 R09: 00000007c30264af [ 539.241724][ C0] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f76f4b48fac [ 539.241732][ C0] R13: 00007f76f4b48fa0 R14: 0000000000000095 R15: 0000000000000003 [ 539.241743][ C0] [ 563.808894][ T31] INFO: task kworker/u4:1:10 blocked for more than 298 seconds. [ 563.816558][ T31] Not tainted syzkaller #0 [ 563.978851][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.987548][ T31] task:kworker/u4:1 state:D stack:24608 pid: 10 ppid: 2 flags:0x00004000 [ 564.418917][ T31] Workqueue: netns cleanup_net [ 564.423744][ T31] Call Trace: [ 564.427015][ T31] [ 564.429970][ T31] __schedule+0xb6e/0x14c0 [ 564.434383][ T31] ? release_firmware_map_entry+0x190/0x190 [ 564.440294][ T31] ? __switch_to_asm+0x3a/0x60 [ 564.445059][ T31] ? kthread_data+0x50/0xc0 [ 564.449572][ T31] ? wq_worker_sleeping+0x60/0x200 [ 564.454682][ T31] schedule+0x11e/0x1e0 [ 564.458848][ T31] schedule_timeout+0xa6/0x2e0 [ 564.463609][ T31] ? console_conditional_schedule+0x30/0x30 [ 564.469526][ T31] ? __prepare_to_swait+0xa8/0x130 [ 564.474635][ T31] wait_for_common+0x26b/0x420 [ 564.479407][ T31] ? __kasan_check_write+0x14/0x20 [ 564.484602][ T31] ? wait_for_completion+0x20/0x20 [ 564.489724][ T31] ? mutex_unlock+0x89/0x220 [ 564.494310][ T31] ? __mutex_lock_slowpath+0x10/0x10 [ 564.499595][ T31] ? flush_workqueue_prep_pwqs+0x424/0x480 [ 564.505398][ T31] ? check_flush_dependency+0xc4/0x370 [ 564.510864][ T31] wait_for_completion+0x18/0x20 [ 564.515798][ T31] flush_workqueue+0x5a6/0x12d0 [ 564.520663][ T31] ? flush_work+0x20/0x20 [ 564.524994][ T31] ? rcu_work_rcufn+0x50/0x50 [ 564.529685][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 564.535488][ T31] peer_remove_after_dead+0x98/0x1a0 [ 564.540779][ T31] wg_peer_remove_all+0x3e2/0x450 [ 564.545819][ T31] ? peer_remove_after_dead+0x1a0/0x1a0 [ 564.551370][ T31] wg_destruct+0x18e/0x300 [ 564.555796][ T31] ? wg_xmit+0xb20/0xb20 [ 564.560042][ T31] netdev_run_todo+0x773/0x990 [ 564.564824][ T31] ? netdev_refcnt_read+0x60/0x60 [ 564.569866][ T31] ? unregister_netdevice_queue+0x1aa/0x360 [ 564.575762][ T31] ? list_netdevice+0x4c0/0x4c0 [ 564.580633][ T31] rtnl_unlock+0xe/0x10 [ 564.584786][ T31] default_device_exit_batch+0x335/0x390 [ 564.590570][ T31] ? default_device_exit+0x360/0x360 [ 564.595851][ T31] ? wait_woken+0x170/0x170 [ 564.600365][ T31] ? rtnl_unlock+0xe/0x10 [ 564.604687][ T31] ? default_device_exit+0x360/0x360 [ 564.609975][ T31] cleanup_net+0x602/0xad0 [ 564.614391][ T31] ? ops_init+0x4a0/0x4a0 [ 564.618715][ T31] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 564.624119][ T31] process_one_work+0x6be/0xba0 [ 564.628980][ T31] worker_thread+0xa59/0x1200 [ 564.633658][ T31] ? __kthread_parkme+0xac/0x200 [ 564.638588][ T31] kthread+0x411/0x500 [ 564.642661][ T31] ? worker_clr_flags+0x190/0x190 [ 564.647680][ T31] ? kthread_blkcg+0xd0/0xd0 [ 564.652270][ T31] ret_from_fork+0x1f/0x30 [ 564.656682][ T31] [ 564.718904][ T31] NMI backtrace for cpu 1 [ 564.723266][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 564.730455][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 564.740531][ T31] Call Trace: [ 564.743804][ T31] [ 564.746725][ T31] __dump_stack+0x21/0x30 [ 564.751055][ T31] dump_stack_lvl+0xee/0x150 [ 564.755644][ T31] ? show_regs_print_info+0x20/0x20 [ 564.760840][ T31] dump_stack+0x15/0x20 [ 564.764991][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 564.769925][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 564.775473][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 564.781622][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 564.786554][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 564.792618][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 564.798682][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 564.804673][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 564.810648][ T31] watchdog+0xd64/0xea0 [ 564.814809][ T31] ? hungtask_pm_notify+0x50/0x50 [ 564.819828][ T31] ? __kasan_check_read+0x11/0x20 [ 564.824848][ T31] ? __kthread_parkme+0xac/0x200 [ 564.829778][ T31] ? preempt_count_add+0x90/0x1b0 [ 564.834798][ T31] kthread+0x411/0x500 [ 564.838859][ T31] ? hungtask_pm_notify+0x50/0x50 [ 564.843877][ T31] ? kthread_blkcg+0xd0/0xd0 [ 564.848461][ T31] ret_from_fork+0x1f/0x30 [ 564.852873][ T31] [ 564.855949][ T31] Sending NMI from CPU 1 to CPUs 0: [ 564.861163][ C0] NMI backtrace for cpu 0 [ 564.861172][ C0] CPU: 0 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 564.861191][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 564.861199][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x1/0x60 [ 564.861222][ C0] Code: 00 00 0f 0b 0f 1f 44 00 00 55 48 89 e5 53 48 89 fb e8 13 00 00 00 48 8b 3d 3c 6c 80 05 48 89 de e8 74 c9 3d 00 5b 5d c3 00 55 <48> 89 e5 48 8b 45 08 65 48 8b 0d 20 ae 99 7e 65 8b 15 21 ae 99 7e [ 564.861233][ C0] RSP: 0018:ffffc90000c27af0 EFLAGS: 00000246 [ 564.861246][ C0] RAX: 0000000000000000 RBX: 00007ffdc3025f90 RCX: 0000000000000000 [ 564.861256][ C0] RDX: 0000000000000000 RSI: ffffffff85e65330 RDI: 00007ffdc3025fc0 [ 564.861265][ C0] RBP: ffffc90000c27c90 R08: 0000000000000000 R09: fffffbfff0bcca66 [ 564.861275][ C0] R10: fffffbfff0bcca66 R11: 1ffffffff0bcca60 R12: dffffc0000000000 [ 564.861285][ C0] R13: 00007ffdc3025dc0 R14: ffffc90000c27ba0 R15: 0000000000000000 [ 564.861294][ C0] FS: 0000555564c47500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 564.861307][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 564.861316][ C0] CR2: 0000000000000000 CR3: 000000011d4fe000 CR4: 00000000003506b0 [ 564.861328][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 564.861336][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 564.861344][ C0] Call Trace: [ 564.861348][ C0] [ 564.861352][ C0] ? copy_fpstate_to_sigframe+0x7aa/0x9a0 [ 564.861370][ C0] ? __kasan_check_write+0x14/0x20 [ 564.861387][ C0] ? fpregs_set+0x540/0x540 [ 564.861400][ C0] ? get_signal+0x13da/0x1480 [ 564.861416][ C0] ? fpu__alloc_mathframe+0x88/0x150 [ 564.861431][ C0] arch_do_signal_or_restart+0x5e3/0x10f0 [ 564.861447][ C0] ? load_gs_index+0xb0/0xb0 [ 564.861460][ C0] ? get_sigframe_size+0x10/0x10 [ 564.861475][ C0] exit_to_user_mode_loop+0xa7/0xe0 [ 564.861490][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 564.861503][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 564.861517][ C0] do_syscall_64+0x58/0xa0 [ 564.861531][ C0] ? clear_bhb_loop+0x50/0xa0 [ 564.861543][ C0] ? clear_bhb_loop+0x50/0xa0 [ 564.861554][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 564.861570][ C0] RIP: 0033:0x7f76f48f2749 [ 564.861582][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.861593][ C0] RSP: 002b:00007ffdc30261b8 EFLAGS: 00000246 [ 564.861603][ C0] RAX: 0000000000000000 RBX: 00007f76f4b48fa8 RCX: 00007f76f48f2749 [ 564.861612][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f76f4b48fac [ 564.861621][ C0] RBP: 0000000000000000 R08: 003b52da2b96ea66 R09: 00000007c30264af [ 564.861630][ C0] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f76f4b48fac [ 564.861638][ C0] R13: 00007f76f4b48fa0 R14: 0000000000000095 R15: 0000000000000003 [ 564.861649][ C0]