Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. 2026/09/19 00:31:33 parsed 1 programs 2026/09/19 00:31:33 serving rpc on tcp://40053 [ 130.610844][ T28] audit: type=1400 audit(1789777893.207:64): avc: denied { node_bind } for pid=294 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 130.631608][ T28] audit: type=1400 audit(1789777893.207:65): avc: denied { module_request } for pid=294 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 131.673595][ T28] audit: type=1400 audit(1789777894.267:66): avc: denied { mounton } for pid=300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 131.676920][ T300] cgroup: Unknown subsys name 'net' [ 131.696313][ T28] audit: type=1400 audit(1789777894.267:67): avc: denied { mount } for pid=300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 131.723626][ T28] audit: type=1400 audit(1789777894.297:68): avc: denied { unmount } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 131.723976][ T300] cgroup: Unknown subsys name 'devices' [ 131.837072][ T300] cgroup: Unknown subsys name 'hugetlb' [ 131.842686][ T300] cgroup: Unknown subsys name 'rlimit' [ 131.982773][ T28] audit: type=1400 audit(1789777894.577:69): avc: denied { setattr } for pid=300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.006034][ T28] audit: type=1400 audit(1789777894.577:70): avc: denied { create } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.026422][ T28] audit: type=1400 audit(1789777894.577:71): avc: denied { write } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.046693][ T28] audit: type=1400 audit(1789777894.577:72): avc: denied { read } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.054196][ T304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 132.067227][ T28] audit: type=1400 audit(1789777894.587:73): avc: denied { mounton } for pid=300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 132.126159][ T300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 132.835770][ T315] request_module fs-gadgetfs succeeded, but still no fs? [ 132.835770][ T311] request_module fs-gadgetfs succeeded, but still no fs? [ 132.890861][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.905555][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.919215][ T314] device bridge_slave_0 entered promiscuous mode [ 132.945541][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.952727][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.978326][ T314] device bridge_slave_1 entered promiscuous mode [ 133.158032][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.165216][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.172515][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.179587][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.367194][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.375827][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.384436][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.392732][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.428365][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.447343][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.473109][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.489995][ T314] device veth0_vlan entered promiscuous mode [ 133.502160][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.510523][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.518357][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.533892][ T314] device veth1_macvtap entered promiscuous mode [ 133.547556][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.570547][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.592365][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/09/19 00:31:36 executed programs: 0 [ 133.758445][ T314] syz-executor (314) used greatest stack depth: 21152 bytes left [ 133.907386][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.914429][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.921991][ T374] device bridge_slave_0 entered promiscuous mode [ 133.929391][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.936483][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.943865][ T374] device bridge_slave_1 entered promiscuous mode [ 133.969807][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.976997][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.984361][ T380] device bridge_slave_0 entered promiscuous mode [ 133.992673][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.999777][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.007149][ T380] device bridge_slave_1 entered promiscuous mode [ 134.084196][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.091333][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.098784][ T379] device bridge_slave_0 entered promiscuous mode [ 134.108132][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.115275][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.122676][ T379] device bridge_slave_1 entered promiscuous mode [ 134.143781][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.150852][ T381] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.158249][ T381] device bridge_slave_0 entered promiscuous mode [ 134.167714][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.174749][ T381] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.182300][ T381] device bridge_slave_1 entered promiscuous mode [ 134.251869][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.259131][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.266559][ T375] device bridge_slave_0 entered promiscuous mode [ 134.297913][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.304960][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.312466][ T375] device bridge_slave_1 entered promiscuous mode [ 134.379856][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.386924][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.394188][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.401248][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.425245][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.432298][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.439612][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.446673][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.459017][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.466070][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.473317][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.480357][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.522151][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.529210][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.536478][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.543499][ T381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.563607][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.571002][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.578430][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.586037][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.593161][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.600791][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.608057][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.615379][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.622517][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.665280][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.672846][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.680716][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.717492][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.725893][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.732951][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.740793][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.749253][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.756361][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.763703][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.772140][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.779202][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.786604][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.794710][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.801775][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.809287][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.817284][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.825146][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.833364][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.840387][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.847793][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.855923][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.862933][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.873062][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.881049][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.903824][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.911379][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.918956][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.927250][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.940489][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.948877][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.963323][ T374] device veth0_vlan entered promiscuous mode [ 134.986193][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.994523][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.002939][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.011081][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.019293][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.028357][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.036356][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.044577][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.052993][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.060057][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.067541][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.075965][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.084043][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.091108][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.098512][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.106091][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.113428][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.121484][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.129433][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.137406][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.148063][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.155505][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.162955][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.170456][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.179358][ T379] device veth0_vlan entered promiscuous mode [ 135.187182][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.195927][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.204033][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.211121][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.224155][ T374] device veth1_macvtap entered promiscuous mode [ 135.234572][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.242197][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.250436][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.258740][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.266610][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.274855][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.283277][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.291439][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.305169][ T380] device veth0_vlan entered promiscuous mode [ 135.323398][ T379] device veth1_macvtap entered promiscuous mode [ 135.330340][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.338384][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.347005][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.355370][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.363592][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.371926][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.380309][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.388737][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.397124][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.405276][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.413339][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.421006][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.428928][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.437008][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.444406][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.451957][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.459478][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.467443][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.475900][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.484013][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.491069][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.502403][ T381] device veth0_vlan entered promiscuous mode [ 135.519925][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.530238][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.540433][ T380] device veth1_macvtap entered promiscuous mode [ 135.556363][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.564959][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.586417][ T381] device veth1_macvtap entered promiscuous mode [ 135.604519][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.618995][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.627841][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.636619][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.644981][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.653336][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.661952][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.670507][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.679056][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.721975][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.370213][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 283.628241][ T29] INFO: task kworker/0:1:19 blocked for more than 141 seconds. [ 284.468131][ T29] Not tainted syzkaller #0 [ 284.853246][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 284.928195][ T29] task:kworker/0:1 state:D stack:24584 pid:19 ppid:2 flags:0x00004000 [ 286.325124][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 286.928513][ T29] Call Trace: [ 286.933692][ T29] [ 287.021592][ T29] __schedule+0xcb3/0x1700 [ 287.032303][ T29] ? release_firmware_map_entry+0x190/0x190 [ 287.132429][ T29] ? __mutex_add_waiter+0xcd/0x280 [ 287.419641][ T29] ? __kasan_check_write+0x14/0x20 [ 287.484778][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 287.514263][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 287.535352][ T29] schedule+0xbd/0x170 [ 287.830440][ T29] schedule_preempt_disabled+0x13/0x20 [ 287.862832][ T29] __mutex_lock+0x833/0x1790 [ 287.960754][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 288.039067][ T29] ? kvm_sched_clock_read+0x18/0x40 [ 288.065960][ T29] ? xfd_validate_state+0x70/0x150 [ 288.072857][ T29] ? save_fpregs_to_fpstate+0x199/0x220 [ 288.112537][ T29] __mutex_lock_slowpath+0xe/0x10 [ 288.121752][ T29] mutex_lock+0x10a/0x1b0 [ 288.149787][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 288.163378][ T29] rtnl_lock+0x15/0x20 [ 288.183885][ T29] addrconf_dad_work+0xc4/0x14a0 [ 288.192377][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 288.198251][ T29] ? finish_task_switch+0x16b/0x7c0 [ 288.253706][ T29] ? __cfi_addrconf_dad_work+0x10/0x10 [ 288.378681][ T29] ? __schedule+0xcbb/0x1700 [ 288.409289][ T29] process_one_work+0x717/0xc30 [ 288.451957][ T29] worker_thread+0xa4d/0x11d0 [ 288.485813][ T29] kthread+0x281/0x320 [ 288.492779][ T29] ? __cfi_worker_thread+0x10/0x10 [ 288.499196][ T29] ? __cfi_kthread+0x10/0x10 [ 288.520928][ T29] ret_from_fork+0x1f/0x30 [ 288.559848][ T29] [ 292.893377][ T29] INFO: task kworker/1:0:24 blocked for more than 150 seconds. [ 293.591760][ T29] Not tainted syzkaller #0 [ 293.646315][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.644069][ T29] task:kworker/1:0 state:D stack:26344 pid:24 ppid:2 flags:0x00004000 [ 296.435826][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 297.204480][ T29] Call Trace: [ 297.715922][ T29] [ 298.461766][ T29] __schedule+0xcb3/0x1700 [ 299.450625][ T29] ? release_firmware_map_entry+0x190/0x190 [ 299.607093][ T29] ? try_to_wake_up+0x622/0x1250 [ 300.846108][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 302.049011][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 302.566514][ T29] schedule+0xbd/0x170 [ 303.004821][ T29] schedule_preempt_disabled+0x13/0x20 [ 303.473863][ T29] __mutex_lock+0x833/0x1790 [ 304.206021][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 306.349694][ T29] __mutex_lock_slowpath+0xe/0x10 [ 307.191096][ T29] mutex_lock+0x10a/0x1b0 [ 307.670865][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 310.145213][ T29] rtnl_lock+0x15/0x20 [ 310.399920][ T29] addrconf_dad_work+0xc4/0x14a0 [ 311.458469][ T29] ? __cfi_addrconf_dad_work+0x10/0x10 [ 312.500213][ T29] ? __kasan_check_write+0x14/0x20 [ 313.133665][ T29] ? _raw_spin_lock_irq+0x95/0xf0 [ 313.454283][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 314.513674][ T29] ? try_to_wake_up+0x622/0x1250 [ 315.875745][ T29] process_one_work+0x717/0xc30 [ 316.762522][ T29] worker_thread+0xa4d/0x11d0 [ 317.974641][ T29] kthread+0x281/0x320 [ 318.095853][ T29] ? __cfi_worker_thread+0x10/0x10 [ 318.871276][ T29] ? __cfi_kthread+0x10/0x10 [ 319.116736][ T29] ret_from_fork+0x1f/0x30 [ 319.488019][ T29] [ 327.981536][ T29] NMI backtrace for cpu 0 [ 327.986009][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 327.993212][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 328.003271][ T29] Call Trace: [ 328.006560][ T29] [ 328.009520][ T29] __dump_stack+0x21/0x24 [ 328.013884][ T29] dump_stack_lvl+0x110/0x170 [ 328.018576][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 328.023616][ T29] ? preempt_schedule_irq+0xca/0x120 [ 328.028911][ T29] dump_stack+0x15/0x24 [ 328.033089][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 328.038051][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 328.043521][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 328.049597][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 328.055592][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 328.061589][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 328.067579][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 328.073478][ T29] watchdog+0xde1/0xf30 [ 328.077645][ T29] ? __cfi_watchdog+0x10/0x10 [ 328.082334][ T29] ? __kasan_check_read+0x11/0x20 [ 328.087371][ T29] ? __kthread_parkme+0x13a/0x180 [ 328.092403][ T29] kthread+0x281/0x320 [ 328.096491][ T29] ? __cfi_watchdog+0x10/0x10 [ 328.101179][ T29] ? __cfi_kthread+0x10/0x10 [ 328.105781][ T29] ret_from_fork+0x1f/0x30 [ 328.110216][ T29] [ 328.113350][ T29] Sending NMI from CPU 0 to CPUs 1: [ 328.118604][ C1] NMI backtrace for cpu 1 [ 328.118612][ C1] CPU: 1 PID: 410 Comm: syz.6.19 Not tainted syzkaller #0 [ 328.118627][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 328.118638][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 328.118666][ C1] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 eb d9 89 f6 31 d2 e8 ea 44 5c 01 5d c3 0f 1f 84 00 00 00 00 [ 328.118678][ C1] RSP: 0018:ffffc90000a978c8 EFLAGS: 00000046 [ 328.118691][ C1] RAX: 00000000000000ef RBX: 00000000000000ef RCX: 0000000000000838 [ 328.118700][ C1] RDX: 0000000000000000 RSI: 00000000000000ef RDI: 0000000000000838 [ 328.118709][ C1] RBP: ffffc90000a978c8 R08: ffff88812f392880 R09: 0000000000000002 [ 328.118719][ C1] R10: 0000000000000000 R11: ffffffff8134adb0 R12: 0000000000000020 [ 328.118728][ C1] R13: dffffc0000000000 R14: ffffffff866d6b60 R15: dffffc0000000000 [ 328.118739][ C1] FS: 00007fc2e68b46c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 328.118752][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.118762][ C1] CR2: 0000001b33663fb3 CR3: 0000000117399000 CR4: 00000000003506a0 [ 328.118775][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 328.118783][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 328.118792][ C1] Call Trace: [ 328.118796][ C1] [ 328.118806][ C1] lapic_next_event+0x70/0x80 [ 328.118826][ C1] clockevents_program_event+0x1d9/0x330 [ 328.118841][ C1] tick_program_event+0xa3/0x120 [ 328.118859][ C1] hrtimer_reprogram+0x351/0x400 [ 328.118881][ C1] hrtimer_start_range_ns+0x8ef/0xc50 [ 328.118921][ C1] common_hrtimer_rearm+0x107/0x110 [ 328.118941][ C1] posixtimer_rearm+0x14a/0x340 [ 328.118955][ C1] dequeue_signal+0x1c2/0x4e0 [ 328.118976][ C1] get_signal+0x57e/0x1700 [ 328.119000][ C1] ? __cfi_get_signal+0x10/0x10 [ 328.119023][ C1] arch_do_signal_or_restart+0xd1/0x11c0 [ 328.119043][ C1] ? __ia32_sys_rt_sigreturn+0x636/0x730 [ 328.119062][ C1] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 328.119082][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 328.119105][ C1] exit_to_user_mode_loop+0x7a/0xb0 [ 328.119123][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 328.119140][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 328.119159][ C1] do_syscall_64+0x58/0xa0 [ 328.119180][ C1] ? clear_bhb_loop+0x30/0x80 [ 328.119197][ C1] ? clear_bhb_loop+0x30/0x80 [ 328.119224][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.119239][ C1] RIP: 0033:0x7fc2e599e157 [ 328.119257][ C1] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 328.119268][ C1] RSP: 002b:00007fc2e68b40e8 EFLAGS: 00000246 [ 328.119279][ C1] RAX: 00000000000000ca RBX: 00007fc2e5c25fa8 RCX: 00007fc2e599e159 [ 328.119289][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc2e5c25fa8 [ 328.119298][ C1] RBP: 00007fc2e5c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 328.119307][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.119316][ C1] R13: 00007fc2e5c26038 R14: 00007ffcaacf87d0 R15: 00007ffcaacf88b8 [ 328.119328][ C1] [ 359.743517][ T29] INFO: task kworker/0:1:19 blocked for more than 217 seconds. [ 360.501960][ T29] Not tainted syzkaller #0 [ 361.256731][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 362.067222][ T29] task:kworker/0:1 state:D stack:24584 pid:19 ppid:2 flags:0x00004000 [ 363.325071][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 363.591036][ T29] Call Trace: [ 363.639802][ T29] [ 363.726350][ T29] __schedule+0xcb3/0x1700 [ 363.802604][ T29] ? release_firmware_map_entry+0x190/0x190 [ 363.931067][ T29] ? __mutex_add_waiter+0xcd/0x280 [ 363.942873][ T29] ? __kasan_check_write+0x14/0x20 [ 364.025751][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 364.274843][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 364.398243][ T29] schedule+0xbd/0x170 [ 364.463303][ T29] schedule_preempt_disabled+0x13/0x20 [ 364.544496][ T29] __mutex_lock+0x833/0x1790 [ 364.675258][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 364.944694][ T29] ? kvm_sched_clock_read+0x18/0x40 [ 365.223977][ T29] ? xfd_validate_state+0x70/0x150 [ 365.701609][ T29] ? save_fpregs_to_fpstate+0x199/0x220 [ 365.749427][ T29] __mutex_lock_slowpath+0xe/0x10 [ 366.367535][ T29] mutex_lock+0x10a/0x1b0 [ 368.037053][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 368.053666][ T29] rtnl_lock+0x15/0x20 [ 368.096774][ T29] addrconf_dad_work+0xc4/0x14a0 [ 368.142291][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 368.156201][ T29] ? finish_task_switch+0x16b/0x7c0 [ 368.195062][ T29] ? __cfi_addrconf_dad_work+0x10/0x10 [ 368.203376][ T29] ? __schedule+0xcbb/0x1700 [ 368.226729][ T29] process_one_work+0x717/0xc30 [ 368.252110][ T29] worker_thread+0xa4d/0x11d0 [ 368.331629][ T29] kthread+0x281/0x320 [ 368.339240][ T29] ? __cfi_worker_thread+0x10/0x10 [ 368.464534][ T29] ? __cfi_kthread+0x10/0x10 [ 368.472929][ T29] ret_from_fork+0x1f/0x30 [ 368.545063][ T29] [ 369.477246][ T29] INFO: task kworker/1:0:24 blocked for more than 227 seconds. [ 370.119271][ T29] Not tainted syzkaller #0 [ 370.567275][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.301699][ T29] task:kworker/1:0 state:D stack:26344 pid:24 ppid:2 flags:0x00004000 [ 374.789208][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 374.797234][ T29] Call Trace: [ 374.803152][ T29] [ 374.808075][ T29] __schedule+0xcb3/0x1700 [ 374.815006][ T29] ? release_firmware_map_entry+0x190/0x190 [ 374.822678][ T29] ? try_to_wake_up+0x622/0x1250 [ 374.829145][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 374.835209][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 374.843490][ T29] schedule+0xbd/0x170 [ 374.849297][ T29] schedule_preempt_disabled+0x13/0x20 [ 374.856984][ T29] __mutex_lock+0x833/0x1790 [ 374.862790][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 374.872536][ T29] __mutex_lock_slowpath+0xe/0x10 [ 374.880660][ T29] mutex_lock+0x10a/0x1b0 [ 374.888990][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 374.897805][ T29] rtnl_lock+0x15/0x20 [ 374.905509][ T29] addrconf_dad_work+0xc4/0x14a0 [ 374.917507][ T29] ? __cfi_addrconf_dad_work+0x10/0x10 [ 374.926080][ T29] ? __kasan_check_write+0x14/0x20 [ 374.936440][ T29] ? _raw_spin_lock_irq+0x95/0xf0 [ 374.948629][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 374.967303][ T29] ? try_to_wake_up+0x622/0x1250 [ 374.975251][ T29] process_one_work+0x717/0xc30 [ 374.984770][ T29] worker_thread+0xa4d/0x11d0 [ 374.995193][ T29] kthread+0x281/0x320 [ 375.004339][ T29] ? __cfi_worker_thread+0x10/0x10 [ 375.009916][ T29] ? __cfi_kthread+0x10/0x10 [ 375.015812][ T29] ret_from_fork+0x1f/0x30 [ 375.025608][ T29] [ 378.898732][ T29] INFO: task syz-executor:375 blocked for more than 141 seconds. [ 379.417492][ T29] Not tainted syzkaller #0 [ 379.763408][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.419281][ T29] task:syz-executor state:D stack:23048 pid:375 ppid:373 flags:0x00004000 [ 381.810594][ T29] Call Trace: [ 382.121578][ T29] [ 382.445864][ T29] __schedule+0xcb3/0x1700 [ 383.067995][ T29] ? release_firmware_map_entry+0x190/0x190 [ 383.420557][ T29] ? __mutex_add_waiter+0xcd/0x280 [ 383.974715][ T29] ? __kasan_check_write+0x14/0x20 [ 384.513655][ T29] ? trace_contention_begin+0xa0/0xa0 [ 385.065190][ T29] schedule+0xbd/0x170 [ 385.072943][ T29] schedule_preempt_disabled+0x13/0x20 [ 385.108538][ T29] __mutex_lock+0x833/0x1790 [ 385.121133][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 385.180287][ T29] ? selinux_capable+0x2b6/0x3b0 [ 385.212423][ T29] ? __cfi_selinux_capable+0x10/0x10 [ 385.236035][ T29] ? cap_capable+0x1a6/0x230 [ 385.248741][ T29] __mutex_lock_slowpath+0xe/0x10 [ 385.258215][ T29] mutex_lock+0x10a/0x1b0 [ 385.276762][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 385.310136][ T29] ? ns_capable+0x8c/0xf0 [ 385.338892][ T29] ? netlink_net_capable+0x125/0x160 [ 385.348593][ T29] rtnetlink_rcv_msg+0x9ee/0xde0 [ 385.390878][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 385.397791][ T29] ? __kernel_text_address+0xd/0x30 [ 385.415371][ T29] ? avc_has_perm_noaudit+0x390/0x490 [ 385.421920][ T29] ? memcpy+0x56/0x70 [ 385.431728][ T29] ? avc_has_perm_noaudit+0x30a/0x490 [ 385.463944][ T29] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 385.498879][ T29] ? kasan_save_alloc_info+0x1f/0x30 [ 385.532607][ T29] ? avc_has_perm+0x163/0x250 [ 385.541116][ T29] ? __alloc_skb+0x226/0x4a0 [ 385.547019][ T29] ? netlink_sendmsg+0x635/0xbd0 [ 385.553937][ T29] ? __sys_sendto+0x4ac/0x660 [ 385.604666][ T29] ? __cfi_avc_has_perm+0x10/0x10 [ 385.614845][ T29] ? selinux_nlmsg_lookup+0x38f/0x440 [ 385.651003][ T29] netlink_rcv_skb+0x200/0x450 [ 385.676301][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 385.685826][ T29] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 385.708649][ T29] ? __netlink_lookup+0x387/0x3b0 [ 385.753765][ T29] rtnetlink_rcv+0x1c/0x20 [ 385.762689][ T29] netlink_unicast+0x8c1/0xa60 [ 385.851714][ T29] netlink_sendmsg+0x8b9/0xbd0 [ 385.878912][ T29] ? __cfi_netlink_sendmsg+0x10/0x10 [ 385.891135][ T29] ? security_socket_sendmsg+0x93/0xb0 [ 385.901449][ T29] __sys_sendto+0x4ac/0x660 [ 385.934916][ T29] ? __cfi___sys_sendto+0x10/0x10 [ 385.963178][ T29] ? blkcg_maybe_throttle_current+0x1e0/0xa20 [ 386.020762][ T29] ? __cfi_blkcg_maybe_throttle_current+0x10/0x10 [ 386.076844][ T29] ? fput+0x15b/0x1a0 [ 386.098989][ T29] __x64_sys_sendto+0xe5/0x100 [ 386.127764][ T29] x64_sys_call+0x83/0x9a0 [ 386.133315][ T29] do_syscall_64+0x4c/0xa0 [ 386.166030][ T29] ? clear_bhb_loop+0x30/0x80 [ 386.173187][ T29] ? clear_bhb_loop+0x30/0x80 [ 386.181967][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.297098][ T29] RIP: 0033:0x7fc21d5592d7 [ 386.314997][ T29] RSP: 002b:00007ffc664cb840 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 386.345348][ T29] RAX: ffffffffffffffda RBX: 0000555559c79500 RCX: 00007fc21d5592d7 [ 386.355271][ T29] RDX: 0000000000000028 RSI: 00007fc21e354670 RDI: 0000000000000003 [ 386.368865][ T29] RBP: 0000000000000001 R08: 00007ffc664cb8a4 R09: 000000000000000c [ 386.381617][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 386.391319][ T29] R13: 0000000000000000 R14: 00007fc21e354670 R15: 0000000000000000 [ 386.417020][ T29] [ 386.557817][ T29] INFO: task syz-executor:380 blocked for more than 149 seconds. [ 387.242931][ T29] Not tainted syzkaller #0 [ 387.659169][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 389.222871][ T29] task:syz-executor state:D stack:23048 pid:380 ppid:377 flags:0x00004000 [ 389.271605][ T29] Call Trace: [ 389.295054][ T29] [ 389.303499][ T29] __schedule+0xcb3/0x1700 [ 389.342262][ T29] ? release_firmware_map_entry+0x190/0x190 [ 389.382169][ T29] ? __mutex_add_waiter+0xcd/0x280 [ 389.393844][ T29] ? __kasan_check_write+0x14/0x20 [ 389.402320][ T29] ? trace_contention_begin+0xa0/0xa0 [ 389.446245][ T29] schedule+0xbd/0x170 [ 389.454721][ T29] schedule_preempt_disabled+0x13/0x20 [ 389.477062][ T29] __mutex_lock+0x833/0x1790 [ 389.491795][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 389.502059][ T29] ? selinux_capable+0x2b6/0x3b0 [ 389.534050][ T29] ? __cfi_selinux_capable+0x10/0x10 [ 389.606991][ T29] ? cap_capable+0x1a6/0x230 [ 389.674043][ T29] __mutex_lock_slowpath+0xe/0x10 [ 389.695965][ T29] mutex_lock+0x10a/0x1b0 [ 389.701854][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 389.730967][ T29] ? ns_capable+0x8c/0xf0 [ 389.742995][ T29] ? netlink_net_capable+0x125/0x160 [ 389.785022][ T29] rtnetlink_rcv_msg+0x9ee/0xde0 [ 389.857097][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 389.882169][ T29] ? __kernel_text_address+0xd/0x30 [ 389.890050][ T29] ? avc_has_perm_noaudit+0x390/0x490 [ 389.927687][ T29] ? memcpy+0x56/0x70 [ 389.998360][ T29] ? avc_has_perm_noaudit+0x30a/0x490 [ 390.086452][ T29] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 390.167226][ T29] ? kasan_save_alloc_info+0x1f/0x30 [ 390.264842][ T29] ? avc_has_perm+0x163/0x250 [ 390.276276][ T29] ? __alloc_skb+0x226/0x4a0 [ 390.291620][ T29] ? netlink_sendmsg+0x635/0xbd0 [ 390.315053][ T29] ? __sys_sendto+0x4ac/0x660 [ 390.381709][ T29] ? __cfi_avc_has_perm+0x10/0x10 [ 390.392579][ T29] ? selinux_nlmsg_lookup+0x38f/0x440 [ 390.454344][ T29] netlink_rcv_skb+0x200/0x450 [ 390.545054][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 390.574314][ T29] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 390.608185][ T29] ? __netlink_lookup+0x387/0x3b0 [ 390.671395][ T29] rtnetlink_rcv+0x1c/0x20 [ 390.725775][ T29] netlink_unicast+0x8c1/0xa60 [ 390.774512][ T29] netlink_sendmsg+0x8b9/0xbd0 [ 390.825210][ T29] ? __cfi_netlink_sendmsg+0x10/0x10 [ 390.840791][ T29] ? security_socket_sendmsg+0x93/0xb0 [ 390.934998][ T29] __sys_sendto+0x4ac/0x660 [ 391.085063][ T29] ? __cfi___sys_sendto+0x10/0x10 [ 391.187482][ T29] ? blkcg_maybe_throttle_current+0x1e0/0xa20 [ 391.250081][ T29] ? __cfi_blkcg_maybe_throttle_current+0x10/0x10 [ 391.320371][ T29] ? fput+0x15b/0x1a0 [ 391.409055][ T29] __x64_sys_sendto+0xe5/0x100 [ 391.424643][ T29] x64_sys_call+0x83/0x9a0 [ 391.453771][ T29] do_syscall_64+0x4c/0xa0 [ 391.480565][ T29] ? clear_bhb_loop+0x30/0x80 [ 391.506267][ T29] ? clear_bhb_loop+0x30/0x80 [ 391.516673][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.524718][ T29] RIP: 0033:0x7fce70f592d7 [ 391.531149][ T29] RSP: 002b:00007ffde187fec0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 391.557658][ T29] RAX: ffffffffffffffda RBX: 0000555569464500 RCX: 00007fce70f592d7 [ 391.581749][ T29] RDX: 0000000000000028 RSI: 00007fce71d54670 RDI: 0000000000000003 [ 391.593410][ T29] RBP: 0000000000000001 R08: 00007ffde187ff24 R09: 000000000000000c [ 391.613839][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 391.636772][ T29] R13: 0000000000000000 R14: 00007fce71d54670 R15: 0000000000000000 [ 391.850931][ T29] [ 392.837311][ T29] NMI backtrace for cpu 0 [ 392.841680][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 392.848889][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.858954][ T29] Call Trace: [ 392.862237][ T29] [ 392.865205][ T29] __dump_stack+0x21/0x24 [ 392.869565][ T29] dump_stack_lvl+0x110/0x170 [ 392.874261][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 392.879306][ T29] ? preempt_schedule_irq+0xca/0x120 [ 392.884618][ T29] ? debug_smp_processor_id+0x17/0x20 [ 392.890021][ T29] ? rcu_preempt_deferred_qs_irqrestore+0x47/0x960 [ 392.896554][ T29] dump_stack+0x15/0x24 [ 392.900732][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 392.905683][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 392.911152][ T29] ? nmi_trigger_cpumask_backtrace+0x31/0x3a0 [ 392.917227][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 392.923218][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 392.929212][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 392.935125][ T29] watchdog+0xde1/0xf30 [ 392.939292][ T29] ? __cfi_watchdog+0x10/0x10 [ 392.943978][ T29] ? __kasan_check_read+0x11/0x20 [ 392.949006][ T29] ? __kthread_parkme+0x13a/0x180 [ 392.954055][ T29] kthread+0x281/0x320 [ 392.958157][ T29] ? __cfi_watchdog+0x10/0x10 [ 392.962857][ T29] ? __cfi_kthread+0x10/0x10 [ 392.967477][ T29] ret_from_fork+0x1f/0x30 [ 392.971919][ T29] [ 392.975026][ T29] Sending NMI from CPU 0 to CPUs 1: [ 392.980265][ C1] NMI backtrace for cpu 1 [ 392.980274][ C1] CPU: 1 PID: 410 Comm: syz.6.19 Not tainted syzkaller #0 [ 392.980289][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.980298][ C1] RIP: 0010:check_preemption_disabled+0x0/0x120 [ 392.980322][ C1] Code: 90 90 90 90 90 b8 25 e5 7d 83 55 48 89 e5 48 c7 c7 40 6e ca 85 48 c7 c6 80 6e ca 85 e8 09 00 00 00 5d c3 0f 1f 80 00 00 00 00 <55> 48 89 e5 41 57 41 56 41 54 53 48 83 ec 10 65 48 8b 04 25 28 00 [ 392.980335][ C1] RSP: 0018:ffffc900001b0e70 EFLAGS: 00000006 [ 392.980349][ C1] RAX: ffffffff8166adb2 RBX: 0000005b7e3dc000 RCX: ffff88812f392880 [ 392.980361][ C1] RDX: 0000000000010000 RSI: ffffffff856b3640 RDI: ffffffff85ca6ea0 [ 392.980372][ C1] RBP: ffffc900001b0e78 R08: 0000000000000003 R09: 0000000000000004 [ 392.980382][ C1] R10: dffffc0000000000 R11: fffff520000361a0 R12: dffffc0000000000 [ 392.980393][ C1] R13: 7fffffffffffffff R14: 0000000000000000 R15: 0000005b7e3dc000 [ 392.980404][ C1] FS: 00007fc2e68b46c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 392.980418][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 392.980428][ C1] CR2: 0000001b33663fb3 CR3: 0000000117399000 CR4: 00000000003506a0 [ 392.980442][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 392.980451][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 392.980460][ C1] Call Trace: [ 392.980465][ C1] [ 392.980469][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 392.980489][ C1] tick_program_event+0x2e/0x120 [ 392.980510][ C1] hrtimer_interrupt+0x4f6/0x8c0 [ 392.980536][ C1] __sysvec_apic_timer_interrupt+0x11e/0x440 [ 392.980558][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 392.980581][ C1] [ 392.980585][ C1] [ 392.980590][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 392.980607][ C1] RIP: 0010:_raw_spin_unlock_irq+0x48/0x70 [ 392.980630][ C1] Code: 74 12 48 89 fb 48 c7 c7 c0 db 0d 87 e8 51 22 b5 fc 48 89 df 48 83 3d a6 08 0c 02 00 74 26 e8 13 0d 00 00 90 fb bf 01 00 00 00 13 c2 4a fc 65 8b 05 94 9a 00 7b 85 c0 74 03 5b 5d c3 e8 64 a9 [ 392.980642][ C1] RSP: 0018:ffffc90000a97b28 EFLAGS: 00000246 [ 392.980654][ C1] RAX: 0000000000000001 RBX: ffff8881134095a0 RCX: dffffc0000000000 [ 392.980665][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 392.980674][ C1] RBP: ffffc90000a97b30 R08: ffffc90000a97dff R09: 1ffff92000152fbf [ 392.980685][ C1] R10: dffffc0000000000 R11: fffff52000152fc0 R12: 0000000000000021 [ 392.980696][ C1] R13: dffffc0000000000 R14: 000000001c000004 R15: 0000000000000000 [ 392.980709][ C1] ? _raw_spin_unlock_irq+0x41/0x70 [ 392.980731][ C1] get_signal+0x12a5/0x1700 [ 392.980756][ C1] ? __cfi_get_signal+0x10/0x10 [ 392.980779][ C1] arch_do_signal_or_restart+0xd1/0x11c0 [ 392.980798][ C1] ? __ia32_sys_rt_sigreturn+0x636/0x730 [ 392.980818][ C1] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 392.980837][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 392.980860][ C1] exit_to_user_mode_loop+0x7a/0xb0 [ 392.980877][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 392.980894][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 392.980912][ C1] do_syscall_64+0x58/0xa0 [ 392.980933][ C1] ? clear_bhb_loop+0x30/0x80 [ 392.980950][ C1] ? clear_bhb_loop+0x30/0x80 [ 392.980966][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.980982][ C1] RIP: 0033:0x7fc2e599e157 [ 392.980993][ C1] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 392.981005][ C1] RSP: 002b:00007fc2e68b40e8 EFLAGS: 00000246 [ 392.981017][ C1] RAX: 00000000000000ca RBX: 00007fc2e5c25fa8 RCX: 00007fc2e599e159 [ 392.981027][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc2e5c25fa8 [ 392.981036][ C1] RBP: 00007fc2e5c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 392.981046][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.981055][ C1] R13: 00007fc2e5c26038 R14: 00007ffcaacf87d0 R15: 00007ffcaacf88b8 [ 392.981068][ C1] [ 394.268695][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 421.595123][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 423.757697][ T29] INFO: task kworker/u4:0:8 blocked for more than 164 seconds. [ 424.193654][ T29] Not tainted syzkaller #0 [ 424.357340][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 424.379874][ T29] task:kworker/u4:0 state:D stack:21512 pid:8 ppid:2 flags:0x00004000 [ 424.434801][ T29] Workqueue: netns cleanup_net [ 424.502708][ T29] Call Trace: [ 424.511103][ T29] [ 424.538575][ T29] __schedule+0xcb3/0x1700 [ 424.564583][ T29] ? release_firmware_map_entry+0x190/0x190 [ 424.618708][ T29] ? __mutex_add_waiter+0xcd/0x280 [ 424.630092][ T29] ? __kasan_check_write+0x14/0x20 [ 424.688525][ T29] ? kthread_data+0x50/0xc0 [ 424.695038][ T29] ? wq_worker_sleeping+0x64/0x280 [ 424.723961][ T29] schedule+0xbd/0x170 [ 424.740108][ T29] schedule_preempt_disabled+0x13/0x20 [ 424.747474][ T29] __mutex_lock+0x833/0x1790 [ 424.849674][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 424.894754][ T29] ? finish_task_switch+0x16b/0x7c0 [ 424.904391][ T29] ? switch_mm_irqs_off+0x32d/0x960 [ 424.995826][ T29] ? __schedule+0xcbb/0x1700 [ 425.068818][ T29] ? irqentry_exit+0x37/0x40 [ 425.089532][ T29] __mutex_lock_slowpath+0xe/0x10 [ 425.112792][ T29] mutex_lock+0x10a/0x1b0 [ 425.121445][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 425.131819][ T29] rtnl_lock+0x15/0x20 [ 425.186181][ T29] vti6_exit_batch_net+0xb8/0x2c0 [ 425.200946][ T29] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 425.228868][ T29] ? __cfi_vti6_exit_batch_net+0x10/0x10 [ 425.270189][ T29] ? cleanup_net+0x61b/0xb10 [ 425.341520][ T29] ? __cfi_vti6_exit_batch_net+0x10/0x10 [ 425.404440][ T29] cleanup_net+0x630/0xb10 [ 425.412289][ T29] ? __kasan_check_write+0x14/0x20 [ 425.473363][ T29] ? pwq_activate_inactive_work+0x2ea/0x3f0 [ 425.482289][ T29] ? __cfi_cleanup_net+0x10/0x10 [ 425.605008][ T29] process_one_work+0x717/0xc30 [ 425.646489][ T29] worker_thread+0xa4d/0x11d0 [ 425.673158][ T29] kthread+0x281/0x320 [ 425.692875][ T29] ? __cfi_worker_thread+0x10/0x10 [ 425.737687][ T29] ? __cfi_kthread+0x10/0x10 [ 425.750490][ T29] ret_from_fork+0x1f/0x30 [ 425.772863][ T29] [ 426.523034][ T29] INFO: task kworker/0:1:19 blocked for more than 284 seconds. [ 427.367108][ T29] Not tainted syzkaller #0 [ 427.427839][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.216405][ T29] task:kworker/0:1 state:D stack:24584 pid:19 ppid:2 flags:0x00004000 [ 431.844506][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 431.894637][ T29] Call Trace: [ 431.913696][ T29] [ 431.965037][ T29] __schedule+0xcb3/0x1700 [ 431.983021][ T29] ? release_firmware_map_entry+0x190/0x190 [ 432.026852][ T29] ? __mutex_add_waiter+0xcd/0x280 [ 432.035517][ T29] ? __kasan_check_write+0x14/0x20 [ 432.075856][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 432.104311][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 432.191856][ T29] schedule+0xbd/0x170 [ 432.211813][ T29] schedule_preempt_disabled+0x13/0x20 [ 432.222059][ T29] __mutex_lock+0x833/0x1790 [ 432.381084][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 432.423752][ T29] ? kvm_sched_clock_read+0x18/0x40 [ 432.461150][ T29] ? xfd_validate_state+0x70/0x150 [ 432.496982][ T29] ? save_fpregs_to_fpstate+0x199/0x220 [ 432.521865][ T29] __mutex_lock_slowpath+0xe/0x10 [ 432.535035][ T29] mutex_lock+0x10a/0x1b0 [ 432.566031][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 432.602268][ T29] rtnl_lock+0x15/0x20 [ 432.637509][ T29] addrconf_dad_work+0xc4/0x14a0 [ 432.671687][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 432.681402][ T29] ? finish_task_switch+0x16b/0x7c0 [ 432.689023][ T29] ? __cfi_addrconf_dad_work+0x10/0x10 [ 432.695198][ T29] ? __schedule+0xcbb/0x1700 [ 432.701729][ T29] process_one_work+0x717/0xc30 [ 432.707827][ T29] worker_thread+0xa4d/0x11d0 [ 432.715448][ T29] kthread+0x281/0x320 [ 432.720619][ T29] ? __cfi_worker_thread+0x10/0x10 [ 432.725940][ T29] ? __cfi_kthread+0x10/0x10 [ 432.736291][ T29] ret_from_fork+0x1f/0x30 [ 432.741317][ T29] [ 433.522436][ T29] INFO: task kworker/1:0:24 blocked for more than 291 seconds. [ 434.230244][ T29] Not tainted syzkaller #0 [ 434.685306][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.492966][ T29] task:kworker/1:0 state:D stack:26344 pid:24 ppid:2 flags:0x00004000 [ 436.638466][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 437.453653][ T29] Call Trace: [ 437.797368][ T29] [ 438.075268][ T29] __schedule+0xcb3/0x1700 [ 438.701771][ T29] ? release_firmware_map_entry+0x190/0x190 [ 438.786325][ T29] ? try_to_wake_up+0x622/0x1250 [ 439.124697][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 439.254208][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 439.417139][ T29] schedule+0xbd/0x170