Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts. 2026/03/26 03:25:48 parsed 1 programs [ 262.966001][ T28] audit: type=1400 audit(1774495548.804:64): avc: denied { node_bind } for pid=282 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 262.987867][ T28] audit: type=1400 audit(1774495548.804:65): avc: denied { module_request } for pid=282 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 263.791589][ T28] audit: type=1400 audit(1774495549.634:66): avc: denied { mounton } for pid=288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 263.792748][ T288] cgroup: Unknown subsys name 'net' [ 263.814336][ T28] audit: type=1400 audit(1774495549.634:67): avc: denied { mount } for pid=288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 263.841708][ T28] audit: type=1400 audit(1774495549.664:68): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 263.841858][ T288] cgroup: Unknown subsys name 'devices' [ 263.981841][ T288] cgroup: Unknown subsys name 'hugetlb' [ 263.987529][ T288] cgroup: Unknown subsys name 'rlimit' [ 264.125839][ T28] audit: type=1400 audit(1774495549.964:69): avc: denied { setattr } for pid=288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 264.149030][ T28] audit: type=1400 audit(1774495549.964:70): avc: denied { create } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 264.163618][ T293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 264.170292][ T28] audit: type=1400 audit(1774495549.964:71): avc: denied { write } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.198235][ T28] audit: type=1400 audit(1774495549.964:72): avc: denied { read } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.209922][ T288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 264.218876][ T28] audit: type=1400 audit(1774495549.964:73): avc: denied { mounton } for pid=288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 264.966445][ T295] request_module fs-gadgetfs succeeded, but still no fs? [ 265.535379][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.542470][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.549861][ T338] device bridge_slave_0 entered promiscuous mode [ 265.556888][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.564136][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.571794][ T338] device bridge_slave_1 entered promiscuous mode [ 265.611068][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.618117][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.625431][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.632487][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.650787][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.658055][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.665905][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.673333][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.688568][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.696766][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.703802][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.712601][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.720815][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.727838][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.744066][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.753096][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.765849][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 265.777261][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.785483][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.793365][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.808094][ T338] device veth0_vlan entered promiscuous mode [ 265.818119][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 265.827230][ T338] device veth1_macvtap entered promiscuous mode [ 265.836453][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.850990][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/03/26 03:25:51 executed programs: 0 [ 266.136993][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.144180][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.151981][ T356] device bridge_slave_0 entered promiscuous mode [ 266.165591][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.172679][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.180281][ T356] device bridge_slave_1 entered promiscuous mode [ 266.218245][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.225330][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.232670][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.239826][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.266866][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.274590][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.281892][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.295046][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.303429][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.310579][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.319468][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.327883][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.335044][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.347146][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.356534][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.369615][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.381423][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.389490][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.397081][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.405219][ T356] device veth0_vlan entered promiscuous mode [ 266.414914][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.423998][ T356] device veth1_macvtap entered promiscuous mode [ 266.436072][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.446146][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.471037][ T361] loop2: detected capacity change from 0 to 16 [ 266.479439][ T361] erofs: (device loop2): mounted with root inode @ nid 36. [ 267.479690][ C1] sched: RT throttling activated [ 267.622928][ T43] device bridge_slave_1 left promiscuous mode [ 267.629274][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.637174][ T43] device bridge_slave_0 left promiscuous mode [ 267.643463][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.651885][ T43] device veth1_macvtap left promiscuous mode [ 267.657989][ T43] device veth0_vlan left promiscuous mode [ 281.517716][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.524939][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.533065][ T364] device bridge_slave_0 entered promiscuous mode [ 281.540600][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.547727][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.555814][ T364] device bridge_slave_1 entered promiscuous mode [ 281.624448][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.631557][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.638854][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.645914][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.698373][ T364] device veth0_vlan entered promiscuous mode [ 281.710104][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.718866][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.729400][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.737924][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.747473][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.756244][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.764835][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.772591][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.780445][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 281.787933][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 281.800301][ T364] device veth1_macvtap entered promiscuous mode [ 281.807347][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 281.821797][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.840980][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.876397][ T369] loop3: detected capacity change from 0 to 16 [ 281.884055][ T369] erofs: (device loop3): mounted with root inode @ nid 36. 2026/03/26 03:26:08 executed programs: 3 [ 298.488835][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.495917][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.503453][ T371] device bridge_slave_0 entered promiscuous mode [ 298.510359][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.517389][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.470688][ T371] device bridge_slave_1 entered promiscuous mode [ 299.509894][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.516938][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.524344][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.531495][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.889640][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 381.896707][ C1] (detected by 1, t=10002 jiffies, g=1753, q=1132 ncpus=2) [ 381.904057][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294975404-4294965401), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 381.917512][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g1753 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 381.928628][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 381.938600][ C1] rcu: RCU grace-period kthread stack dump: [ 381.944489][ C1] task:rcu_preempt state:R running task stack:28352 pid:14 ppid:2 flags:0x00004000 [ 381.955281][ C1] Call Trace: [ 381.958576][ C1] [ 381.961518][ C1] __schedule+0xba6/0x1500 [ 381.966069][ C1] ? release_firmware_map_entry+0x190/0x190 [ 381.971983][ C1] schedule+0xbd/0x170 [ 381.976094][ C1] schedule_timeout+0x159/0x340 [ 381.980992][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 381.986393][ C1] ? __cfi_process_timeout+0x10/0x10 [ 381.991753][ C1] ? prepare_to_swait_event+0x308/0x320 [ 381.997327][ C1] rcu_gp_fqs_loop+0x2e9/0x10c0 [ 382.002187][ C1] ? _raw_spin_unlock_irq+0x4d/0x70 [ 382.007405][ C1] ? rcu_gp_init+0xf30/0xf30 [ 382.012005][ C1] rcu_gp_kthread+0x99/0x390 [ 382.016602][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 382.021896][ C1] ? __kasan_check_read+0x11/0x20 [ 382.026962][ C1] ? __kthread_parkme+0x142/0x180 [ 382.032067][ C1] kthread+0x281/0x320 [ 382.036392][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 382.041605][ C1] ? __cfi_kthread+0x10/0x10 [ 382.046223][ C1] ret_from_fork+0x1f/0x30 [ 382.050804][ C1] [ 382.053919][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 382.060257][ C1] Sending NMI from CPU 1 to CPUs 0: [ 382.065570][ C0] NMI backtrace for cpu 0 [ 382.065633][ C0] CPU: 0 PID: 369 Comm: syz.3.18 Not tainted syzkaller #0 [ 382.065648][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 382.065655][ C0] RIP: 0010:erofs_bread+0xa1/0x4d0 [ 382.065712][ C0] Code: 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 8d 4e 82 ff 49 8b 07 48 89 45 b0 48 89 d8 48 c1 e8 03 <49> bf 00 00 00 00 00 fc ff df 48 89 45 c0 42 80 3c 38 00 74 08 48 [ 382.065724][ C0] RSP: 0018:ffffc90000a97518 EFLAGS: 00000a02 [ 382.065739][ C0] RAX: 1ffff92000152ec1 RBX: ffffc90000a97608 RCX: dffffc0000000000 [ 382.065751][ C0] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000040 [ 382.065760][ C0] RBP: ffffc90000a97568 R08: ffffc90000a9761f R09: ffffc90000a97608 [ 382.065771][ C0] R10: dffffc0000000000 R11: fffff52000152ec4 R12: 000000000ac08000 [ 382.065782][ C0] R13: dffffc0000000000 R14: 000000000000000c R15: ffff88810048b170 [ 382.065793][ C0] FS: 00005555930ae500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 382.065807][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.065818][ C0] CR2: 00007f50d1548060 CR3: 000000012fea3000 CR4: 00000000003506b0 [ 382.065834][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 382.065842][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 382.065852][ C0] Call Trace: [ 382.065856][ C0] [ 382.065862][ C0] erofs_map_blocks+0x45e/0x1870 [ 382.065886][ C0] erofs_iomap_begin+0x100/0x600 [ 382.065902][ C0] ? __cfi_erofs_iomap_begin+0x10/0x10 [ 382.065918][ C0] iomap_iter+0x5b7/0xb30 [ 382.065945][ C0] ? __cfi_erofs_iomap_begin+0x10/0x10 [ 382.065960][ C0] iomap_fiemap+0x393/0x540 [ 382.065983][ C0] ? __cfi_iomap_fiemap+0x10/0x10 [ 382.066005][ C0] erofs_fiemap+0x7a/0xa0 [ 382.066025][ C0] do_vfs_ioctl+0x13cb/0x1cd0 [ 382.066046][ C0] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 382.066063][ C0] ? __cfi_get_futex_key+0x10/0x10 [ 382.066100][ C0] ? futex_wake+0x5b7/0x8e0 [ 382.066115][ C0] ? ioctl_has_perm+0x1b8/0x4f0 [ 382.066133][ C0] ? ioctl_has_perm+0x3a6/0x4f0 [ 382.066150][ C0] ? has_cap_mac_admin+0x370/0x370 [ 382.066167][ C0] ? __kasan_slab_free+0x11/0x20 [ 382.066186][ C0] ? do_futex+0x2bf/0x430 [ 382.066199][ C0] ? selinux_file_ioctl+0x3a0/0x4d0 [ 382.066217][ C0] ? __cfi_do_futex+0x10/0x10 [ 382.066231][ C0] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 382.066251][ C0] ? security_file_ioctl+0x95/0xc0 [ 382.066269][ C0] __se_sys_ioctl+0x9f/0x1b0 [ 382.066284][ C0] __x64_sys_ioctl+0x7b/0x90 [ 382.066299][ C0] x64_sys_call+0x58b/0x9a0 [ 382.066338][ C0] do_syscall_64+0x4c/0xa0 [ 382.066374][ C0] ? clear_bhb_loop+0x30/0x80 [ 382.066391][ C0] ? clear_bhb_loop+0x30/0x80 [ 382.066406][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.066422][ C0] RIP: 0033:0x7fbe60f9c799 [ 382.066434][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.066446][ C0] RSP: 002b:00007ffc68bf7548 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.066461][ C0] RAX: ffffffffffffffda RBX: 00007fbe61215fa0 RCX: 00007fbe60f9c799 [ 382.066472][ C0] RDX: 0000200000000040 RSI: 00000000c020660b RDI: 0000000000000004 [ 382.066482][ C0] RBP: 00007fbe61032c99 R08: 0000000000000000 R09: 0000000000000000 [ 382.066492][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.066501][ C0] R13: 00007fbe61215fac R14: 00007fbe61215fa0 R15: 00007fbe61215fa0 [ 382.066514][ C0] [ 432.469648][ T29] INFO: task kworker/0:1:19 blocked for more than 126 seconds. [ 432.477245][ T29] Not tainted syzkaller #0 [ 432.482557][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.491392][ T29] task:kworker/0:1 state:D stack:25120 pid:19 ppid:2 flags:0x00004000 [ 432.500791][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 432.506944][ T29] Call Trace: [ 432.510283][ T29] [ 432.513221][ T29] __schedule+0xba6/0x1500 [ 432.517637][ T29] ? release_firmware_map_entry+0x190/0x190 [ 433.479908][ T29] ? __mutex_add_waiter+0xcc/0x280 [ 433.485096][ T29] ? __kasan_check_write+0x14/0x20 [ 433.490375][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 433.495612][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 433.500974][ T29] schedule+0xbd/0x170 [ 433.505057][ T29] schedule_preempt_disabled+0x13/0x20 [ 433.510562][ T29] __mutex_lock+0x82f/0x1790 [ 433.515179][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 434.471675][ T29] ? update_load_avg+0x4bf/0x13f0 [ 434.476767][ T29] ? kvm_sched_clock_read+0x18/0x40 [ 434.482341][ T29] ? sched_clock+0x9/0x10 [ 434.486766][ T29] ? sched_clock_cpu+0x6e/0x260 [ 434.491671][ T29] ? __cfi_sched_clock_cpu+0x10/0x10 [ 434.496966][ T29] __mutex_lock_slowpath+0xe/0x10 [ 434.502033][ T29] mutex_lock+0x10a/0x1b0 [ 434.506467][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 434.511365][ T29] rtnl_lock+0x15/0x20 [ 434.515484][ T29] addrconf_dad_work+0xca/0x14d0 [ 435.479916][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 435.484852][ T29] ? finish_task_switch+0x16b/0x7b0 [ 435.490205][ T29] ? __cfi_addrconf_dad_work+0x10/0x10 [ 435.495688][ T29] ? __schedule+0xbae/0x1500 [ 435.500343][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 435.505922][ T29] process_one_work+0x71f/0xc40 [ 435.510833][ T29] worker_thread+0xa29/0x11e0 [ 435.515539][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 436.470277][ T29] kthread+0x281/0x320 [ 436.474504][ T29] ? __cfi_worker_thread+0x10/0x10 [ 436.479725][ T29] ? __cfi_kthread+0x10/0x10 [ 436.484350][ T29] ret_from_fork+0x1f/0x30 [ 436.488803][ T29] [ 436.491887][ T29] INFO: task kworker/u4:2:43 blocked for more than 130 seconds. [ 436.499664][ T29] Not tainted syzkaller #0 [ 436.504651][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 436.513414][ T29] task:kworker/u4:2 state:D stack:21408 pid:43 ppid:2 flags:0x00004000 [ 437.469759][ T29] Workqueue: events_unbound linkwatch_event [ 437.475760][ T29] Call Trace: [ 437.479032][ T29] [ 437.482016][ T29] __schedule+0xba6/0x1500 [ 437.486553][ T29] ? __kasan_check_write+0x14/0x20 [ 437.491805][ T29] ? release_firmware_map_entry+0x190/0x190 [ 437.497734][ T29] ? kthread_data+0x50/0xc0 [ 437.502277][ T29] ? wq_worker_sleeping+0x64/0x280 [ 437.507442][ T29] schedule+0xbd/0x170 [ 437.511657][ T29] synchronize_rcu_expedited+0x773/0x880 [ 437.517305][ T29] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 438.470112][ T29] ? unwind_next_frame+0x3d5/0x700 [ 438.475323][ T29] ? __cfi_wait_rcu_exp_gp+0x10/0x10 [ 438.480887][ T29] ? __kasan_check_write+0x14/0x20 [ 438.486211][ T29] ? __this_cpu_preempt_check+0x13/0x20 [ 438.491836][ T29] ? __cfi_autoremove_wake_function+0x10/0x10 [ 438.497956][ T29] ? _raw_spin_lock+0x94/0xf0 [ 438.502685][ T29] ? __kasan_check_read+0x11/0x20 [ 438.507823][ T29] synchronize_net+0x28/0x40 [ 438.512524][ T29] dev_deactivate_many+0x6b6/0xbc0 [ 438.517734][ T29] ? dev_deactivate_many+0x2c6/0xbc0 [ 439.479970][ T29] dev_deactivate+0x114/0x1b0 [ 439.484754][ T29] ? __cfi_dev_deactivate+0x10/0x10 [ 439.490002][ T29] ? __cfi_veth_get_iflink+0x10/0x10 [ 439.495339][ T29] ? _raw_write_unlock+0x2b/0x60 [ 439.500317][ T29] linkwatch_do_dev+0x10d/0x160 [ 439.505174][ T29] __linkwatch_run_queue+0x410/0x660 [ 439.510500][ T29] ? linkwatch_run_queue+0x20/0x20 [ 439.515632][ T29] ? try_to_wake_up+0x613/0x1220 [ 440.469972][ T29] linkwatch_event+0x4c/0x60 [ 440.474675][ T29] process_one_work+0x71f/0xc40 [ 440.479645][ T29] worker_thread+0xa29/0x11e0 [ 440.484363][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 440.489893][ T29] kthread+0x281/0x320 [ 440.493989][ T29] ? __cfi_worker_thread+0x10/0x10 [ 440.499088][ T29] ? __cfi_kthread+0x10/0x10 [ 440.503741][ T29] ret_from_fork+0x1f/0x30 [ 440.508253][ T29] [ 440.511336][ T29] INFO: task syz-executor:371 blocked for more than 134 seconds. [ 440.519052][ T29] Not tainted syzkaller #0 [ 441.469815][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 441.478532][ T29] task:syz-executor state:D stack:22688 pid:371 ppid:1 flags:0x00004004 [ 441.487902][ T29] Call Trace: [ 441.491226][ T29] [ 441.494168][ T29] __schedule+0xba6/0x1500 [ 441.498585][ T29] ? release_firmware_map_entry+0x190/0x190 [ 441.504536][ T29] ? __mutex_add_waiter+0xcc/0x280 [ 441.509682][ T29] ? __kasan_check_write+0x14/0x20 [ 441.514889][ T29] ? trace_contention_begin+0xa0/0xa0 [ 442.469931][ T29] schedule+0xbd/0x170 [ 442.474078][ T29] schedule_preempt_disabled+0x13/0x20 [ 442.479558][ T29] __mutex_lock+0x82f/0x1790 [ 442.484271][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 442.491088][ T29] ? selinux_capable+0x2b6/0x3b0 [ 442.496077][ T29] ? __cfi_selinux_capable+0x10/0x10 [ 442.501389][ T29] ? is_bpf_text_address+0x177/0x190 [ 442.506711][ T29] ? cap_capable+0x1aa/0x230 [ 442.511381][ T29] __mutex_lock_slowpath+0xe/0x10 [ 442.516415][ T29] mutex_lock+0x10a/0x1b0 [ 443.469937][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 443.474935][ T29] ? ns_capable+0x8c/0xf0 [ 443.479355][ T29] ? netlink_net_capable+0x125/0x160 [ 443.484897][ T29] rtnetlink_rcv_msg+0x9fc/0xe00 [ 443.489941][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 443.495453][ T29] ? kernel_text_address+0xa0/0xd0 [ 443.500585][ T29] ? __kernel_text_address+0xd/0x30 [ 443.505805][ T29] ? avc_has_perm_noaudit+0x391/0x490 [ 443.511215][ T29] ? memcpy+0x56/0x70 [ 443.515232][ T29] ? avc_has_perm_noaudit+0x30b/0x490 [ 444.469882][ T29] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 444.475791][ T29] ? slab_post_alloc_hook+0x4f/0x2d0 [ 444.481528][ T29] ? avc_has_perm+0x163/0x250 [ 444.486240][ T29] ? __alloc_skb+0x236/0x4b0 [ 444.490900][ T29] ? netlink_sendmsg+0x635/0xbd0 [ 444.495936][ T29] ? __sys_sendto+0x4ac/0x660 [ 444.500696][ T29] ? __cfi_avc_has_perm+0x10/0x10 [ 444.505736][ T29] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 444.511160][ T29] netlink_rcv_skb+0x20f/0x460 [ 444.515935][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 445.469945][ T29] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 445.475315][ T29] ? __netlink_lookup+0x387/0x3b0 [ 445.480425][ T29] rtnetlink_rcv+0x1c/0x20 [ 445.484940][ T29] netlink_unicast+0x8ab/0xa30 [ 445.489787][ T29] netlink_sendmsg+0x8b9/0xbd0 [ 445.494602][ T29] ? __cfi_netlink_sendmsg+0x10/0x10 [ 445.499921][ T29] ? security_socket_sendmsg+0x93/0xb0 [ 445.505582][ T29] __sys_sendto+0x4ac/0x660 [ 445.510139][ T29] ? __cfi___sys_sendto+0x10/0x10 [ 445.515177][ T29] ? blkcg_maybe_throttle_current+0x1e0/0xa20 [ 446.471344][ T29] ? __cfi_blkcg_maybe_throttle_current+0x10/0x10 [ 446.477900][ T29] ? fput+0x15b/0x1a0 [ 446.482062][ T29] __x64_sys_sendto+0xe5/0x100 [ 446.486854][ T29] x64_sys_call+0x83/0x9a0 [ 446.491289][ T29] do_syscall_64+0x4c/0xa0 [ 446.495740][ T29] ? clear_bhb_loop+0x30/0x80 [ 446.500463][ T29] ? clear_bhb_loop+0x30/0x80 [ 446.505154][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.511066][ T29] RIP: 0033:0x7f2f95b57917 [ 446.515576][ T29] RSP: 002b:00007ffc04fb7f80 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 447.470068][ T29] RAX: ffffffffffffffda RBX: 000055558ca89500 RCX: 00007f2f95b57917 [ 447.478101][ T29] RDX: 0000000000000028 RSI: 00007f2f96944670 RDI: 0000000000000003 [ 447.486161][ T29] RBP: 0000000000000001 R08: 00007ffc04fb7fe4 R09: 000000000000000c [ 447.494287][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 447.502293][ T29] R13: 0000000000000000 R14: 00007f2f96944670 R15: 0000000000000000 [ 447.510369][ T29] [ 447.513397][ T29] NMI backtrace for cpu 1 [ 447.517809][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 447.525051][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 447.535094][ T29] Call Trace: [ 447.538360][ T29] [ 447.541280][ T29] __dump_stack+0x21/0x24 [ 447.545626][ T29] dump_stack_lvl+0x110/0x170 [ 447.550293][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 447.555308][ T29] dump_stack+0x15/0x24 [ 447.559477][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 447.564491][ T29] ? rcu_read_unlock_special+0xb2/0x440 [ 447.570064][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 447.575532][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 447.581702][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 447.587731][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 447.593701][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 447.599678][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 447.605562][ T29] watchdog+0xd68/0xeb0 [ 447.609704][ T29] ? __cfi_watchdog+0x10/0x10 [ 447.614385][ T29] ? __kasan_check_read+0x11/0x20 [ 447.619397][ T29] ? __kthread_parkme+0x142/0x180 [ 447.624414][ T29] kthread+0x281/0x320 [ 447.628497][ T29] ? __cfi_watchdog+0x10/0x10 [ 447.633280][ T29] ? __cfi_kthread+0x10/0x10 [ 447.637866][ T29] ret_from_fork+0x1f/0x30 [ 447.642274][ T29] [ 447.645408][ T29] Sending NMI from CPU 1 to CPUs 0: [ 447.650733][ C0] NMI backtrace for cpu 0 [ 447.650744][ C0] CPU: 0 PID: 369 Comm: syz.3.18 Not tainted syzkaller #0 [ 447.650759][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 447.650767][ C0] RIP: 0010:erofs_bread+0xb4/0x4d0 [ 447.650794][ C0] Code: 08 4c 89 ff e8 8d 4e 82 ff 49 8b 07 48 89 45 b0 48 89 d8 48 c1 e8 03 49 bf 00 00 00 00 00 fc ff df 48 89 45 c0 42 80 3c 38 00 <74> 08 48 89 df e8 62 4e 82 ff 4c 89 65 b8 4d 89 e5 49 c1 ed 0c 4c [ 447.650805][ C0] RSP: 0018:ffffc90000a97518 EFLAGS: 00000246 [ 447.650820][ C0] RAX: 1ffff92000152ec1 RBX: ffffc90000a97608 RCX: dffffc0000000000 [ 447.650831][ C0] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000040 [ 447.650841][ C0] RBP: ffffc90000a97568 R08: ffffc90000a9761f R09: ffffc90000a97608 [ 447.650851][ C0] R10: dffffc0000000000 R11: fffff52000152ec4 R12: 0000000011ad5000 [ 447.650861][ C0] R13: dffffc0000000000 R14: 000000000000000c R15: dffffc0000000000 [ 447.650872][ C0] FS: 00005555930ae500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 447.650885][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 447.650896][ C0] CR2: 00007fe78f545000 CR3: 000000012fea3000 CR4: 00000000003506b0 [ 447.650911][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 447.650920][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 447.650929][ C0] Call Trace: [ 447.650934][ C0] [ 447.650940][ C0] erofs_map_blocks+0x45e/0x1870 [ 447.650963][ C0] erofs_iomap_begin+0x100/0x600 [ 447.650977][ C0] ? __cfi_erofs_iomap_begin+0x10/0x10 [ 447.650993][ C0] iomap_iter+0x5b7/0xb30 [ 447.651008][ C0] ? __cfi_erofs_iomap_begin+0x10/0x10 [ 447.651021][ C0] iomap_fiemap+0x393/0x540 [ 447.651038][ C0] ? __cfi_iomap_fiemap+0x10/0x10 [ 447.651058][ C0] erofs_fiemap+0x7a/0xa0 [ 447.651078][ C0] do_vfs_ioctl+0x13cb/0x1cd0 [ 447.651106][ C0] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 447.651122][ C0] ? __cfi_get_futex_key+0x10/0x10 [ 447.651143][ C0] ? futex_wake+0x5b7/0x8e0 [ 447.651158][ C0] ? ioctl_has_perm+0x1b8/0x4f0 [ 447.651175][ C0] ? ioctl_has_perm+0x3a6/0x4f0 [ 447.651192][ C0] ? has_cap_mac_admin+0x370/0x370 [ 447.651209][ C0] ? __kasan_slab_free+0x11/0x20 [ 447.651226][ C0] ? do_futex+0x2bf/0x430 [ 447.651239][ C0] ? selinux_file_ioctl+0x3a0/0x4d0 [ 447.651256][ C0] ? __cfi_do_futex+0x10/0x10 [ 447.651268][ C0] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 447.651287][ C0] ? security_file_ioctl+0x95/0xc0 [ 447.651305][ C0] __se_sys_ioctl+0x9f/0x1b0 [ 447.651320][ C0] __x64_sys_ioctl+0x7b/0x90 [ 447.651334][ C0] x64_sys_call+0x58b/0x9a0 [ 447.651350][ C0] do_syscall_64+0x4c/0xa0 [ 447.651370][ C0] ? clear_bhb_loop+0x30/0x80 [ 447.651385][ C0] ? clear_bhb_loop+0x30/0x80 [ 447.651400][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.651414][ C0] RIP: 0033:0x7fbe60f9c799 [ 447.651427][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.651437][ C0] RSP: 002b:00007ffc68bf7548 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.651452][ C0] RAX: ffffffffffffffda RBX: 00007fbe61215fa0 RCX: 00007fbe60f9c799 [ 447.651462][ C0] RDX: 0000200000000040 RSI: 00000000c020660b RDI: 0000000000000004 [ 447.651471][ C0] RBP: 00007fbe61032c99 R08: 0000000000000000 R09: 0000000000000000 [ 447.651480][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.651489][ C0] R13: 00007fbe61215fac R14: 00007fbe61215fa0 R15: 00007fbe61215fa0 [ 447.651501][ C0] [ 470.470012][ T29] INFO: task kworker/0:1:19 blocked for more than 164 seconds. [ 470.477627][ T29] Not tainted syzkaller #0 [ 470.482673][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 470.491581][ T29] task:kworker/0:1 state:D stack:25120 pid:19 ppid:2 flags:0x00004000 [ 470.500874][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 470.506880][ T29] Call Trace: [ 470.510215][ T29] [ 470.513155][ T29] __schedule+0xba6/0x1500 [ 470.517566][ T29] ? release_firmware_map_entry+0x190/0x190 [ 471.479993][ T29] ? __mutex_add_waiter+0xcc/0x280 [ 471.485170][ T29] ? __kasan_check_write+0x14/0x20 [ 471.490349][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 471.495560][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 471.500972][ T29] schedule+0xbd/0x170 [ 471.505144][ T29] schedule_preempt_disabled+0x13/0x20 [ 471.510665][ T29] __mutex_lock+0x82f/0x1790 [ 471.515266][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 472.469840][ T29] ? update_load_avg+0x4bf/0x13f0 [ 472.475051][ T29] ? kvm_sched_clock_read+0x18/0x40 [ 472.480364][ T29] ? sched_clock+0x9/0x10 [ 472.484841][ T29] ? sched_clock_cpu+0x6e/0x260 [ 472.489811][ T29] ? __cfi_sched_clock_cpu+0x10/0x10 [ 472.495121][ T29] __mutex_lock_slowpath+0xe/0x10 [ 472.500260][ T29] mutex_lock+0x10a/0x1b0 [ 472.504607][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 472.509660][ T29] rtnl_lock+0x15/0x20 [ 472.513842][ T29] addrconf_dad_work+0xca/0x14d0 [ 472.518888][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 473.470008][ T29] ? finish_task_switch+0x16b/0x7b0 [ 473.475275][ T29] ? __cfi_addrconf_dad_work+0x10/0x10 [ 473.480872][ T29] ? __schedule+0xbae/0x1500 [ 473.485495][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 473.491115][ T29] process_one_work+0x71f/0xc40 [ 473.496002][ T29] worker_thread+0xa29/0x11e0 [ 473.500827][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 473.506329][ T29] kthread+0x281/0x320 [ 473.510425][ T29] ? __cfi_worker_thread+0x10/0x10 [ 473.515552][ T29] ? __cfi_kthread+0x10/0x10 [ 474.471256][ T29] ret_from_fork+0x1f/0x30 [ 474.475922][ T29] [ 474.478976][ T29] INFO: task kworker/u4:2:43 blocked for more than 168 seconds. [ 474.486752][ T29] Not tainted syzkaller #0 [ 474.491757][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.500550][ T29] task:kworker/u4:2 state:D stack:21408 pid:43 ppid:2 flags:0x00004000 [ 474.509891][ T29] Workqueue: events_unbound linkwatch_event [ 474.515866][ T29] Call Trace: [ 474.519232][ T29] [ 475.469805][ T29] __schedule+0xba6/0x1500 [ 475.474385][ T29] ? __kasan_check_write+0x14/0x20 [ 475.479737][ T29] ? release_firmware_map_entry+0x190/0x190 [ 475.485712][ T29] ? kthread_data+0x50/0xc0 [ 475.490486][ T29] ? wq_worker_sleeping+0x64/0x280 [ 475.495656][ T29] schedule+0xbd/0x170 [ 475.499759][ T29] synchronize_rcu_expedited+0x773/0x880 [ 475.505682][ T29] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 475.512111][ T29] ? unwind_next_frame+0x3d5/0x700 [ 475.517330][ T29] ? __cfi_wait_rcu_exp_gp+0x10/0x10 [ 476.469931][ T29] ? __kasan_check_write+0x14/0x20 [ 476.475151][ T29] ? __this_cpu_preempt_check+0x13/0x20 [ 476.480849][ T29] ? __cfi_autoremove_wake_function+0x10/0x10 [ 476.486980][ T29] ? _raw_spin_lock+0x94/0xf0 [ 476.491803][ T29] ? __kasan_check_read+0x11/0x20 [ 476.496838][ T29] synchronize_net+0x28/0x40 [ 476.501519][ T29] dev_deactivate_many+0x6b6/0xbc0 [ 476.506737][ T29] ? dev_deactivate_many+0x2c6/0xbc0 [ 476.512277][ T29] dev_deactivate+0x114/0x1b0 [ 476.517005][ T29] ? __cfi_dev_deactivate+0x10/0x10 [ 477.470316][ T29] ? __cfi_veth_get_iflink+0x10/0x10 [ 477.475679][ T29] ? _raw_write_unlock+0x2b/0x60 [ 477.480684][ T29] linkwatch_do_dev+0x10d/0x160 [ 477.485549][ T29] __linkwatch_run_queue+0x410/0x660 [ 477.490867][ T29] ? linkwatch_run_queue+0x20/0x20 [ 477.495990][ T29] ? try_to_wake_up+0x613/0x1220 [ 477.501088][ T29] linkwatch_event+0x4c/0x60 [ 477.505697][ T29] process_one_work+0x71f/0xc40 [ 477.510575][ T29] worker_thread+0xa29/0x11e0 [ 477.515289][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 478.471129][ T29] kthread+0x281/0x320 [ 478.475358][ T29] ? __cfi_worker_thread+0x10/0x10 [ 478.480668][ T29] ? __cfi_kthread+0x10/0x10 [ 478.485348][ T29] ret_from_fork+0x1f/0x30 [ 478.489824][ T29] [ 478.492870][ T29] INFO: task syz-executor:371 blocked for more than 172 seconds. [ 478.500625][ T29] Not tainted syzkaller #0 [ 478.505568][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 478.514344][ T29] task:syz-executor state:D stack:22688 pid:371 ppid:1 flags:0x00004004 [ 479.469776][ T29] Call Trace: [ 479.473265][ T29] [ 479.476303][ T29] __schedule+0xba6/0x1500 [ 479.481027][ T29] ? release_firmware_map_entry+0x190/0x190 [ 479.487050][ T29] ? __mutex_add_waiter+0xcc/0x280 [ 479.492452][ T29] ? __kasan_check_write+0x14/0x20 [ 479.497582][ T29] ? trace_contention_begin+0xa0/0xa0 [ 479.503073][ T29] schedule+0xbd/0x170 [ 479.507176][ T29] schedule_preempt_disabled+0x13/0x20 [ 479.512752][ T29] __mutex_lock+0x82f/0x1790 [ 479.517370][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 480.471172][ T29] ? selinux_capable+0x2b6/0x3b0 [ 480.476175][ T29] ? __cfi_selinux_capable+0x10/0x10 [ 480.481555][ T29] ? is_bpf_text_address+0x177/0x190 [ 480.486882][ T29] ? cap_capable+0x1aa/0x230 [ 480.491642][ T29] __mutex_lock_slowpath+0xe/0x10 [ 480.496847][ T29] mutex_lock+0x10a/0x1b0 [ 480.501216][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 480.506165][ T29] ? ns_capable+0x8c/0xf0 [ 480.510722][ T29] ? netlink_net_capable+0x125/0x160 [ 480.516203][ T29] rtnetlink_rcv_msg+0x9fc/0xe00 [ 481.469986][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 481.475623][ T29] ? kernel_text_address+0xa0/0xd0 [ 481.480815][ T29] ? __kernel_text_address+0xd/0x30 [ 481.486052][ T29] ? avc_has_perm_noaudit+0x391/0x490 [ 481.491619][ T29] ? memcpy+0x56/0x70 [ 481.495631][ T29] ? avc_has_perm_noaudit+0x30b/0x490 [ 481.501066][ T29] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 481.506804][ T29] ? slab_post_alloc_hook+0x4f/0x2d0 [ 481.512122][ T29] ? avc_has_perm+0x163/0x250 [ 481.516891][ T29] ? __alloc_skb+0x236/0x4b0 [ 482.470393][ T29] ? netlink_sendmsg+0x635/0xbd0 [ 482.475448][ T29] ? __sys_sendto+0x4ac/0x660 [ 482.480298][ T29] ? __cfi_avc_has_perm+0x10/0x10 [ 482.485362][ T29] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 482.490821][ T29] netlink_rcv_skb+0x20f/0x460 [ 482.495624][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 482.501323][ T29] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 482.506631][ T29] ? __netlink_lookup+0x387/0x3b0 [ 482.511750][ T29] rtnetlink_rcv+0x1c/0x20 [ 482.516193][ T29] netlink_unicast+0x8ab/0xa30 [ 483.470204][ T29] netlink_sendmsg+0x8b9/0xbd0 [ 483.475133][ T29] ? __cfi_netlink_sendmsg+0x10/0x10 [ 483.480495][ T29] ? security_socket_sendmsg+0x93/0xb0 [ 483.486059][ T29] __sys_sendto+0x4ac/0x660 [ 483.490591][ T29] ? __cfi___sys_sendto+0x10/0x10 [ 483.495831][ T29] ? blkcg_maybe_throttle_current+0x1e0/0xa20 [ 483.502058][ T29] ? __cfi_blkcg_maybe_throttle_current+0x10/0x10 [ 483.508577][ T29] ? fput+0x15b/0x1a0 [ 483.512707][ T29] __x64_sys_sendto+0xe5/0x100 [ 483.517494][ T29] x64_sys_call+0x83/0x9a0 [ 484.470337][ T29] do_syscall_64+0x4c/0xa0 [ 484.474992][ T29] ? clear_bhb_loop+0x30/0x80 [ 484.479959][ T29] ? clear_bhb_loop+0x30/0x80 [ 484.484695][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 484.490642][ T29] RIP: 0033:0x7f2f95b57917 [ 484.495155][ T29] RSP: 002b:00007ffc04fb7f80 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 484.503686][ T29] RAX: ffffffffffffffda RBX: 000055558ca89500 RCX: 00007f2f95b57917 [ 484.511685][ T29] RDX: 0000000000000028 RSI: 00007f2f96944670 RDI: 0000000000000003 [ 485.469941][ T29] RBP: 0000000000000001 R08: 00007ffc04fb7fe4 R09: 000000000000000c [ 485.478096][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 485.486254][ T29] R13: 0000000000000000 R14: 00007f2f96944670 R15: 0000000000000000 [ 485.494367][ T29] [ 485.497438][ T29] NMI backtrace for cpu 1 [ 485.501764][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 485.509295][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 485.519421][ T29] Call Trace: [ 485.522706][ T29] [ 485.525661][ T29] __dump_stack+0x21/0x24 [ 485.530097][ T29] dump_stack_lvl+0x110/0x170 [ 485.534782][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 485.539821][ T29] dump_stack+0x15/0x24 [ 485.544023][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 485.548982][ T29] ? rcu_read_unlock_special+0xb2/0x440 [ 485.554538][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 485.559994][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 485.566075][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 485.572225][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 485.578295][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 485.584267][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 485.590147][ T29] watchdog+0xd68/0xeb0 [ 485.594289][ T29] ? __cfi_watchdog+0x10/0x10 [ 485.598977][ T29] ? __kasan_check_read+0x11/0x20 [ 485.603995][ T29] ? __kthread_parkme+0x142/0x180 [ 485.609104][ T29] kthread+0x281/0x320 [ 485.613159][ T29] ? __cfi_watchdog+0x10/0x10 [ 485.618087][ T29] ? __cfi_kthread+0x10/0x10 [ 485.622663][ T29] ret_from_fork+0x1f/0x30 [ 485.627175][ T29] [ 485.630295][ T29] Sending NMI from CPU 1 to CPUs 0: [ 485.635600][ C0] NMI backtrace for cpu 0 [ 485.635611][ C0] CPU: 0 PID: 369 Comm: syz.3.18 Not tainted syzkaller #0 [ 485.635625][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 485.635633][ C0] RIP: 0010:__kasan_check_read+0x11/0x20 [ 485.635653][ C0] Code: 3f 03 45 31 ff eb d1 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 f1 16 b4 ef 55 48 89 e5 89 f6 48 8b 4d 08 31 d2 e8 cf e7 ff ff <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 [ 485.635665][ C0] RSP: 0018:ffffc90000a97480 EFLAGS: 00000256 [ 485.635679][ C0] RAX: ffffea0005471d01 RBX: ffff88810048b2d0 RCX: ffffffff819d5585 [ 485.635690][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0005471d40 [ 485.635700][ C0] RBP: ffffc90000a97480 R08: ffffea0005471d47 R09: 1ffffd4000a8e3a8 [ 485.635710][ C0] R10: dffffc0000000000 R11: fffff94000a8e3a9 R12: 0000000000015a5e [ 485.635720][ C0] R13: dffffc0000000000 R14: ffffea0005471d40 R15: 0000000000100cc0 [ 485.635730][ C0] FS: 00005555930ae500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 485.635743][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 485.635754][ C0] CR2: 00007f072e745000 CR3: 000000012fea3000 CR4: 00000000003506b0 [ 485.635769][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 485.635777][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 485.635787][ C0] Call Trace: [ 485.635791][ C0] [ 485.635796][ C0] do_read_cache_folio+0xd5/0x3f0 [ 485.635846][ C0] ? __cfi_blkdev_read_folio+0x10/0x10 [ 485.635875][ C0] read_cache_folio+0x50/0x70 [ 485.635889][ C0] erofs_bread+0x166/0x4d0 [ 485.635910][ C0] erofs_map_blocks+0x45e/0x1870 [ 485.635932][ C0] erofs_iomap_begin+0x100/0x600 [ 485.635944][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 485.635963][ C0] ? __cfi_erofs_iomap_begin+0x10/0x10 [ 485.635978][ C0] iomap_iter+0x5b7/0xb30 [ 485.635993][ C0] ? __cfi_erofs_iomap_begin+0x10/0x10 [ 485.636006][ C0] iomap_fiemap+0x393/0x540 [ 485.636022][ C0] ? __cfi_iomap_fiemap+0x10/0x10 [ 485.636043][ C0] erofs_fiemap+0x7a/0xa0 [ 485.636062][ C0] do_vfs_ioctl+0x13cb/0x1cd0 [ 485.636077][ C0] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 485.636093][ C0] ? __cfi_get_futex_key+0x10/0x10 [ 485.636114][ C0] ? futex_wake+0x5b7/0x8e0 [ 485.636128][ C0] ? ioctl_has_perm+0x1b8/0x4f0 [ 485.636146][ C0] ? ioctl_has_perm+0x3a6/0x4f0 [ 485.636162][ C0] ? has_cap_mac_admin+0x370/0x370 [ 485.636179][ C0] ? __kasan_slab_free+0x11/0x20 [ 485.636196][ C0] ? do_futex+0x2bf/0x430 [ 485.636209][ C0] ? selinux_file_ioctl+0x3a0/0x4d0 [ 485.636226][ C0] ? __cfi_do_futex+0x10/0x10 [ 485.636238][ C0] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 485.636257][ C0] ? security_file_ioctl+0x95/0xc0 [ 485.636274][ C0] __se_sys_ioctl+0x9f/0x1b0 [ 485.636289][ C0] __x64_sys_ioctl+0x7b/0x90 [ 485.636303][ C0] x64_sys_call+0x58b/0x9a0 [ 485.636319][ C0] do_syscall_64+0x4c/0xa0 [ 485.636338][ C0] ? clear_bhb_loop+0x30/0x80 [ 485.636352][ C0] ? clear_bhb_loop+0x30/0x80 [ 485.636367][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.636381][ C0] RIP: 0033:0x7fbe60f9c799 [ 485.636393][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.636404][ C0] RSP: 002b:00007ffc68bf7548 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.636419][ C0] RAX: ffffffffffffffda RBX: 00007fbe61215fa0 RCX: 00007fbe60f9c799 [ 485.636429][ C0] RDX: 0000200000000040 RSI: 00000000c020660b RDI: 0000000000000004 [ 485.636438][ C0] RBP: 00007fbe61032c99 R08: 0000000000000000 R09: 0000000000000000 [ 485.636447][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.636456][ C0] R13: 00007fbe61215fac R14: 00007fbe61215fa0 R15: 00007fbe61215fa0 [ 485.636468][ C0] [ 508.469617][ T29] INFO: task kworker/0:1:19 blocked for more than 202 seconds. [ 508.477216][ T29] Not tainted syzkaller #0 [ 508.482825][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 508.491746][ T29] task:kworker/0:1 state:D stack:25120 pid:19 ppid:2 flags:0x00004000 [ 508.501172][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 508.507374][ T29] Call Trace: [ 508.510941][ T29] [ 508.513899][ T29] __schedule+0xba6/0x1500 [ 508.518344][ T29] ? release_firmware_map_entry+0x190/0x190 [ 509.469728][ T29] ? __mutex_add_waiter+0xcc/0x280 [ 509.474986][ T29] ? __kasan_check_write+0x14/0x20 [ 509.480151][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 509.485371][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 509.490814][ T29] schedule+0xbd/0x170 [ 509.494969][ T29] schedule_preempt_disabled+0x13/0x20 [ 509.500528][ T29] __mutex_lock+0x82f/0x1790 [ 509.505179][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 509.512109][ T29] ? update_load_avg+0x4bf/0x13f0 [ 509.517321][ T29] ? kvm_sched_clock_read+0x18/0x40 [ 510.480145][ T29] ? sched_clock+0x9/0x10 [ 510.484900][ T29] ? sched_clock_cpu+0x6e/0x260 [ 510.489870][ T29] ? __cfi_sched_clock_cpu+0x10/0x10 [ 510.495172][ T29] __mutex_lock_slowpath+0xe/0x10 [ 510.500258][ T29] mutex_lock+0x10a/0x1b0 [ 510.504645][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 510.509502][ T29] rtnl_lock+0x15/0x20 [ 510.513632][ T29] addrconf_dad_work+0xca/0x14d0 [ 510.518581][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 511.470345][ T29] ? finish_task_switch+0x16b/0x7b0 [ 511.475622][ T29] ? __cfi_addrconf_dad_work+0x10/0x10 [ 511.481272][ T29] ? __schedule+0xbae/0x1500 [ 511.485888][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 511.491461][ T29] process_one_work+0x71f/0xc40 [ 511.496326][ T29] worker_thread+0xa29/0x11e0 [ 511.501134][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 511.506628][ T29] kthread+0x281/0x320 [ 511.510748][ T29] ? __cfi_worker_thread+0x10/0x10 [ 511.515888][ T29] ? __cfi_kthread+0x10/0x10 [ 512.470323][ T29] ret_from_fork+0x1f/0x30 [ 512.474887][ T29] [ 512.477905][ T29] INFO: task kworker/1:0:24 blocked for more than 122 seconds. [ 512.485549][ T29] Not tainted syzkaller #0 [ 512.490600][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 512.499541][ T29] task:kworker/1:0 state:D stack:26368 pid:24 ppid:2 flags:0x00004000 [ 512.508919][ T29] Workqueue: ipv6_addrconf addrconf_verify_work [ 512.515492][ T29] Call Trace: [ 512.518863][ T29] [ 513.469979][ T29] __schedule+0xba6/0x1500 [ 513.474465][ T29] ? release_firmware_map_entry+0x190/0x190 [ 513.480630][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 513.485989][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 513.491242][ T29] schedule+0xbd/0x170 [ 513.495351][ T29] schedule_preempt_disabled+0x13/0x20 [ 513.500912][ T29] __mutex_lock+0x82f/0x1790 [ 513.505519][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 513.512364][ T29] __mutex_lock_slowpath+0xe/0x10 [ 513.517449][ T29] mutex_lock+0x10a/0x1b0 [ 514.470003][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 514.474988][ T29] ? _raw_spin_lock_irq+0x95/0xf0 [ 514.480340][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 514.485935][ T29] ? try_to_wake_up+0x613/0x1220 [ 514.491099][ T29] rtnl_lock+0x15/0x20 [ 514.495182][ T29] addrconf_verify_work+0x19/0x30 [ 514.500268][ T29] process_one_work+0x71f/0xc40 [ 514.505145][ T29] worker_thread+0xa29/0x11e0 [ 514.509886][ T29] ? __kthread_parkme+0x142/0x180 [ 514.515009][ T29] kthread+0x281/0x320 [ 514.519068][ T29] ? __cfi_worker_thread+0x10/0x10 [ 515.479792][ T29] ? __cfi_kthread+0x10/0x10 [ 515.484499][ T29] ret_from_fork+0x1f/0x30 [ 515.488958][ T29] [ 515.492044][ T29] INFO: task kworker/u4:2:43 blocked for more than 209 seconds. [ 515.499746][ T29] Not tainted syzkaller #0 [ 515.504693][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.513422][ T29] task:kworker/u4:2 state:D stack:21408 pid:43 ppid:2 flags:0x00004000 [ 516.470124][ T29] Workqueue: events_unbound linkwatch_event [ 516.476287][ T29] Call Trace: [ 516.479658][ T29] [ 516.482608][ T29] __schedule+0xba6/0x1500 [ 516.487136][ T29] ? __kasan_check_write+0x14/0x20 [ 516.492405][ T29] ? release_firmware_map_entry+0x190/0x190 [ 516.498575][ T29] ? kthread_data+0x50/0xc0 [ 516.503117][ T29] ? wq_worker_sleeping+0x64/0x280 [ 516.508242][ T29] schedule+0xbd/0x170 [ 516.512443][ T29] synchronize_rcu_expedited+0x773/0x880 [ 516.518092][ T29] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 517.469749][ T29] ? unwind_next_frame+0x3d5/0x700 [ 517.475073][ T29] ? __cfi_wait_rcu_exp_gp+0x10/0x10 [ 517.480477][ T29] ? __kasan_check_write+0x14/0x20 [ 517.485714][ T29] ? __this_cpu_preempt_check+0x13/0x20 [ 517.491307][ T29] ? __cfi_autoremove_wake_function+0x10/0x10 [ 517.497374][ T29] ? _raw_spin_lock+0x94/0xf0 [ 517.502128][ T29] ? __kasan_check_read+0x11/0x20 [ 517.507161][ T29] synchronize_net+0x28/0x40 [ 517.511868][ T29] dev_deactivate_many+0x6b6/0xbc0 [ 517.517004][ T29] ? dev_deactivate_many+0x2c6/0xbc0 [ 518.480107][ T29] dev_deactivate+0x114/0x1b0 [ 518.485033][ T29] ? __cfi_dev_deactivate+0x10/0x10 [ 518.490416][ T29] ? __cfi_veth_get_iflink+0x10/0x10 [ 518.495732][ T29] ? _raw_write_unlock+0x2b/0x60 [ 518.500817][ T29] linkwatch_do_dev+0x10d/0x160 [ 518.505683][ T29] __linkwatch_run_queue+0x410/0x660 [ 518.511009][ T29] ? linkwatch_run_queue+0x20/0x20 [ 518.516129][ T29] ? try_to_wake_up+0x613/0x1220 [ 519.469852][ T29] linkwatch_event+0x4c/0x60 [ 519.474555][ T29] process_one_work+0x71f/0xc40 [ 519.479508][ T29] worker_thread+0xa29/0x11e0 [ 519.484232][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 519.489756][ T29] kthread+0x281/0x320 [ 519.493953][ T29] ? __cfi_worker_thread+0x10/0x10 [ 519.499080][ T29] ? __cfi_kthread+0x10/0x10 [ 519.503739][ T29] ret_from_fork+0x1f/0x30 [ 519.508184][ T29] [ 519.511281][ T29] INFO: task syz-executor:371 blocked for more than 213 seconds. [ 519.518997][ T29] Not tainted syzkaller #0 [ 520.480599][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 520.489652][ T29] task:syz-executor state:D stack:22688 pid:371 ppid:1 flags:0x00004004 [ 520.499022][ T29] Call Trace: [ 520.502385][ T29] [ 520.505330][ T29] __schedule+0xba6/0x1500 [ 520.509804][ T29] ? release_firmware_map_entry+0x190/0x190 [ 520.515712][ T29] ? __mutex_add_waiter+0xcc/0x280 [ 521.469828][ T29] ? __kasan_check_write+0x14/0x20 [ 521.475085][ T29] ? trace_contention_begin+0xa0/0xa0 [ 521.480563][ T29] schedule+0xbd/0x170 [ 521.484680][ T29] schedule_preempt_disabled+0x13/0x20 [ 521.490310][ T29] __mutex_lock+0x82f/0x1790 [ 521.494938][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 521.502013][ T29] ? selinux_capable+0x2b6/0x3b0 [ 521.506970][ T29] ? __cfi_selinux_capable+0x10/0x10 [ 521.512311][ T29] ? is_bpf_text_address+0x177/0x190 [ 521.517686][ T29] ? cap_capable+0x1aa/0x230 [ 522.469880][ T29] __mutex_lock_slowpath+0xe/0x10 [ 522.475129][ T29] mutex_lock+0x10a/0x1b0 [ 522.479535][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 522.484499][ T29] ? ns_capable+0x8c/0xf0 [ 522.488851][ T29] ? netlink_net_capable+0x125/0x160 [ 522.494222][ T29] rtnetlink_rcv_msg+0x9fc/0xe00 [ 522.499173][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 522.504698][ T29] ? kernel_text_address+0xa0/0xd0 [ 522.509950][ T29] ? __kernel_text_address+0xd/0x30 [ 522.515151][ T29] ? avc_has_perm_noaudit+0x391/0x490 [ 523.479663][ T29] ? memcpy+0x56/0x70 [ 523.483789][ T29] ? avc_has_perm_noaudit+0x30b/0x490 [ 523.489187][ T29] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 523.495062][ T29] ? slab_post_alloc_hook+0x4f/0x2d0 [ 523.500458][ T29] ? avc_has_perm+0x163/0x250 [ 523.505411][ T29] ? __alloc_skb+0x236/0x4b0 [ 523.510046][ T29] ? netlink_sendmsg+0x635/0xbd0 [ 523.515029][ T29] ? __sys_sendto+0x4ac/0x660 [ 524.470044][ T29] ? __cfi_avc_has_perm+0x10/0x10 [ 524.475169][ T29] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 524.480746][ T29] netlink_rcv_skb+0x20f/0x460 [ 524.485664][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 524.491285][ T29] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 524.496584][ T29] ? __netlink_lookup+0x387/0x3b0 [ 524.501717][ T29] rtnetlink_rcv+0x1c/0x20 [ 524.506174][ T29] netlink_unicast+0x8ab/0xa30 [ 524.510987][ T29] netlink_sendmsg+0x8b9/0xbd0 [ 524.515767][ T29] ? __cfi_netlink_sendmsg+0x10/0x10 [ 525.469973][ T29] ? security_socket_sendmsg+0x93/0xb0 [ 525.475482][ T29] __sys_sendto+0x4ac/0x660 [ 525.480122][ T29] ? __cfi___sys_sendto+0x10/0x10 [ 525.485163][ T29] ? blkcg_maybe_throttle_current+0x1e0/0xa20 [ 525.491460][ T29] ? __cfi_blkcg_maybe_throttle_current+0x10/0x10 [ 525.497891][ T29] ? fput+0x15b/0x1a0 [ 525.501932][ T29] __x64_sys_sendto+0xe5/0x100 [ 525.506724][ T29] x64_sys_call+0x83/0x9a0 [ 525.511188][ T29] do_syscall_64+0x4c/0xa0 [ 525.515617][ T29] ? clear_bhb_loop+0x30/0x80 [ 526.470223][ T29] ? clear_bhb_loop+0x30/0x80 [ 526.475036][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.481027][ T29] RIP: 0033:0x7f2f95b57917 [ 526.485449][ T29] RSP: 002b:00007ffc04fb7f80 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 526.493917][ T29] RAX: ffffffffffffffda RBX: 000055558ca89500 RCX: 00007f2f95b57917 [ 526.501961][ T29] RDX: 0000000000000028 RSI: 00007f2f96944670 RDI: 0000000000000003 [ 526.509988][ T29] RBP: 0000000000000001 R08: 00007ffc04fb7fe4 R09: 000000000000000c [ 526.517964][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 527.479703][ T29] R13: 0000000000000000 R14: 00007f2f96944670 R15: 0000000000000000 [ 527.487756][ T29] [ 527.490881][ T29] NMI backtrace for cpu 1 [ 527.495216][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 527.502656][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 527.512786][ T29] Call Trace: [ 527.516074][ T29] [ 527.518995][ T29] __dump_stack+0x21/0x24 [ 527.523492][ T29] dump_stack_lvl+0x110/0x170 [ 527.528242][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 527.533709][ T29] dump_stack+0x15/0x24 [ 527.537859][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 527.542784][ T29] ? rcu_read_unlock_special+0xb2/0x440 [ 527.548324][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 527.553766][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 527.559821][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 527.565833][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 527.571797][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 527.577767][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 527.583732][ T29] watchdog+0xd68/0xeb0 [ 527.587904][ T29] ? __cfi_watchdog+0x10/0x10 [ 527.592575][ T29] ? __kasan_check_read+0x11/0x20 [ 527.597599][ T29] ? __kthread_parkme+0x142/0x180 [ 527.602614][ T29] kthread+0x281/0x320 [ 527.606670][ T29] ? __cfi_watchdog+0x10/0x10 [ 527.611417][ T29] ? __cfi_kthread+0x10/0x10 [ 527.616088][ T29] ret_from_fork+0x1f/0x30 [ 527.620491][ T29] [ 527.623605][ T29] Sending NMI from CPU 1 to CPUs 0: [ 527.628913][ C0] NMI backtrace for cpu 0 [ 527.628923][ C0] CPU: 0 PID: 369 Comm: syz.3.18 Not tainted syzkaller #0 [ 527.628938][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 527.628946][ C0] RIP: 0010:fiemap_fill_next_extent+0x2c8/0x390 [ 527.628966][ C0] Code: 43 c6 44 3d 0a f8 48 c7 44 24 40 0e 36 e0 45 4b c7 44 3d 00 00 00 00 00 4b c7 44 3d 08 00 00 00 00 65 48 8b 0c 25 28 00 00 00 <48> 3b 8c 24 c0 00 00 00 75 4e 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 [ 527.628978][ C0] RSP: 0018:ffffc90000a97720 EFLAGS: 00000246 [ 527.628992][ C0] RAX: 0000000000000000 RBX: ffffc90000a97db4 RCX: c38394ab2c2dbc00 [ 527.629003][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 527.629012][ C0] RBP: ffffc90000a97830 R08: 0000000000000000 R09: 0000000000000004 [ 527.629021][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: 00000000067bfda2 [ 527.629030][ C0] R13: 1ffff92000152eec R14: 1ffff92000152fb6 R15: dffffc0000000000 [ 527.629047][ C0] FS: 00005555930ae500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 527.629060][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 527.629070][ C0] CR2: 00007f072e745000 CR3: 000000012fea3000 CR4: 00000000003506b0 [ 527.629085][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 527.629094][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 527.629103][ C0] Call Trace: [ 527.629107][ C0] [ 527.629113][ C0] ? __cfi_fiemap_fill_next_extent+0x10/0x10 [ 527.629129][ C0] ? iomap_iter+0x730/0xb30 [ 527.629144][ C0] ? __cfi_erofs_iomap_begin+0x10/0x10 [ 527.629159][ C0] iomap_fiemap+0x2b9/0x540 [ 527.629175][ C0] ? __cfi_iomap_fiemap+0x10/0x10 [ 527.629195][ C0] erofs_fiemap+0x7a/0xa0 [ 527.629215][ C0] do_vfs_ioctl+0x13cb/0x1cd0 [ 527.629230][ C0] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 527.629246][ C0] ? __cfi_get_futex_key+0x10/0x10 [ 527.629268][ C0] ? futex_wake+0x5b7/0x8e0 [ 527.629282][ C0] ? ioctl_has_perm+0x1b8/0x4f0 [ 527.629299][ C0] ? ioctl_has_perm+0x3a6/0x4f0 [ 527.629316][ C0] ? has_cap_mac_admin+0x370/0x370 [ 527.629333][ C0] ? __kasan_slab_free+0x11/0x20 [ 527.629350][ C0] ? do_futex+0x2bf/0x430 [ 527.629363][ C0] ? selinux_file_ioctl+0x3a0/0x4d0 [ 527.629380][ C0] ? __cfi_do_futex+0x10/0x10 [ 527.629392][ C0] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 527.629412][ C0] ? security_file_ioctl+0x95/0xc0 [ 527.629429][ C0] __se_sys_ioctl+0x9f/0x1b0 [ 527.629444][ C0] __x64_sys_ioctl+0x7b/0x90 [ 527.629458][ C0] x64_sys_call+0x58b/0x9a0 [ 527.629475][ C0] do_syscall_64+0x4c/0xa0 [ 527.629494][ C0] ? clear_bhb_loop+0x30/0x80 [ 527.629509][ C0] ? clear_bhb_loop+0x30/0x80 [ 527.629524][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.629539][ C0] RIP: 0033:0x7fbe60f9c799 [ 527.629551][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.629561][ C0] RSP: 002b:00007ffc68bf7548 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 527.629581][ C0] RAX: ffffffffffffffda RBX: 00007fbe61215fa0 RCX: 00007fbe60f9c799 [ 527.629592][ C0] RDX: 0000200000000040 RSI: 00000000c020660b RDI: 0000000000000004 [ 527.629602][ C0] RBP: 00007fbe61032c99 R08: 0000000000000000 R09: 0000000000000000 [ 527.629611][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.629619][ C0] R13: 00007fbe61215fac R14: 00007fbe61215fa0 R15: 00007fbe61215fa0 [ 527.629632][ C0]