Warning: Permanently added '10.128.1.144' (ED25519) to the list of known hosts. 2026/01/04 13:47:38 parsed 1 programs [ 418.285456][ T30] audit: type=1400 audit(1767534458.684:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 418.306469][ T30] audit: type=1400 audit(1767534458.684:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 419.297824][ T30] audit: type=1400 audit(1767534459.694:66): avc: denied { mounton } for pid=288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 419.302702][ T288] cgroup: Unknown subsys name 'net' [ 419.321314][ T30] audit: type=1400 audit(1767534459.694:67): avc: denied { mount } for pid=288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 419.347953][ T30] audit: type=1400 audit(1767534459.724:68): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 419.348563][ T288] cgroup: Unknown subsys name 'devices' [ 419.522632][ T288] cgroup: Unknown subsys name 'hugetlb' [ 419.528352][ T288] cgroup: Unknown subsys name 'rlimit' [ 419.706836][ T30] audit: type=1400 audit(1767534460.104:69): avc: denied { setattr } for pid=288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 419.730171][ T30] audit: type=1400 audit(1767534460.104:70): avc: denied { create } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 419.750593][ T30] audit: type=1400 audit(1767534460.104:71): avc: denied { write } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 419.771209][ T30] audit: type=1400 audit(1767534460.104:72): avc: denied { read } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 419.791602][ T30] audit: type=1400 audit(1767534460.114:73): avc: denied { mounton } for pid=288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 419.792188][ T291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 419.852621][ T288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 420.311709][ T294] request_module fs-gadgetfs succeeded, but still no fs? [ 420.652249][ T314] syz-executor (314) used greatest stack depth: 21728 bytes left [ 420.814671][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.821814][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.829212][ T328] device bridge_slave_0 entered promiscuous mode [ 420.836565][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.843691][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.851224][ T328] device bridge_slave_1 entered promiscuous mode [ 420.913444][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.920569][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.927853][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.934925][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.957622][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 420.965417][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.972877][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.982748][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 420.991088][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.998115][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.006945][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 421.015391][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.022497][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.035328][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 421.044911][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 421.063345][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 421.074882][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 421.083438][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 421.091539][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 421.099775][ T328] device veth0_vlan entered promiscuous mode [ 421.109927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 421.124988][ T328] device veth1_macvtap entered promiscuous mode [ 421.134871][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 421.153854][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/01/04 13:47:42 executed programs: 0 [ 421.717547][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.727978][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.735530][ T360] device bridge_slave_0 entered promiscuous mode [ 421.742529][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.749572][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.757393][ T360] device bridge_slave_1 entered promiscuous mode [ 421.821201][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.828268][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.835643][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.842713][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.862288][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 421.870051][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.877533][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.887813][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 421.896131][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.903194][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.916165][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 421.924489][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.931566][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.944106][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 421.961073][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 421.974883][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 421.986903][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 421.995305][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 422.003200][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 422.011836][ T360] device veth0_vlan entered promiscuous mode [ 422.029009][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 422.038337][ T360] device veth1_macvtap entered promiscuous mode [ 422.048401][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 422.063439][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 422.441794][ T45] device bridge_slave_1 left promiscuous mode [ 422.448173][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.455924][ T45] device bridge_slave_0 left promiscuous mode [ 422.462210][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.470269][ T45] device veth1_macvtap left promiscuous mode [ 422.476375][ T45] device veth0_vlan left promiscuous mode [ 437.154329][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.161454][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.168821][ T372] device bridge_slave_0 entered promiscuous mode [ 437.175898][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.183065][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.190520][ T372] device bridge_slave_1 entered promiscuous mode [ 437.248217][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.255294][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.262631][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.269680][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.291269][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.298604][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.306878][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 437.314649][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 437.323819][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 437.332042][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.339069][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.348063][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 437.356471][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.363729][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.377914][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 437.387543][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 437.401587][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 437.415826][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 437.424055][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 437.431857][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 437.440056][ T372] device veth0_vlan entered promiscuous mode 2026/01/04 13:47:57 executed programs: 3 [ 437.450475][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 437.459728][ T372] device veth1_macvtap entered promiscuous mode [ 437.469404][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 437.479798][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 562.680447][ T31] INFO: task syz.2.17:370 blocked for more than 122 seconds. [ 562.688035][ T31] Not tainted syzkaller #0 [ 562.693078][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 562.701787][ T31] task:syz.2.17 state:D stack:25536 pid: 370 ppid: 360 flags:0x00004000 [ 562.711083][ T31] Call Trace: [ 562.714471][ T31] [ 562.717469][ T31] __schedule+0xb6e/0x14c0 [ 562.722141][ T31] ? release_firmware_map_entry+0x190/0x190 [ 562.728079][ T31] ? __kasan_check_write+0x14/0x20 [ 562.733263][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 562.738317][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 562.743948][ T31] schedule+0x11e/0x1e0 [ 562.748135][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 562.753937][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 562.759860][ T31] ? dput+0x47/0x90 [ 562.763734][ T31] ? kasan_save_stack+0x49/0x60 [ 562.768613][ T31] ? kasan_save_stack+0x3a/0x60 [ 562.773564][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 562.779430][ T31] ? call_rcu+0x105/0xfe0 [ 562.783876][ T31] ? __fput+0x590/0x8b0 [ 562.788069][ T31] ? ____fput+0x15/0x20 [ 562.792430][ T31] ? task_work_run+0x121/0x190 [ 562.797241][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 562.802702][ T31] ? rwsem_write_trylock+0x130/0x300 [ 562.808046][ T31] ? clear_nonspinnable+0x60/0x60 [ 562.813134][ T31] ? perf_event_exit_event+0x520/0x520 [ 562.818647][ T31] ? mutex_unlock+0x89/0x220 [ 562.823320][ T31] down_write+0x29/0x30 [ 562.827505][ T31] exit_mmap+0x127/0x860 [ 562.831839][ T31] ? vm_brk+0x30/0x30 [ 562.835844][ T31] ? mutex_unlock+0x89/0x220 [ 562.840484][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 562.845724][ T31] __mmput+0x93/0x320 [ 562.849726][ T31] ? mmput+0x48/0x150 [ 562.853835][ T31] mmput+0x50/0x150 [ 562.857702][ T31] do_exit+0x9d2/0x27a0 [ 562.861938][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 562.868049][ T31] ? put_task_struct+0x90/0x90 [ 562.872886][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 562.878545][ T31] ? ____fput+0x15/0x20 [ 562.882769][ T31] do_group_exit+0x141/0x310 [ 562.887389][ T31] ? debug_smp_processor_id+0x17/0x20 [ 562.892831][ T31] __x64_sys_exit_group+0x3f/0x40 [ 562.897893][ T31] x64_sys_call+0x832/0x9a0 [ 562.902609][ T31] do_syscall_64+0x4c/0xa0 [ 562.907071][ T31] ? clear_bhb_loop+0x50/0xa0 [ 562.911820][ T31] ? clear_bhb_loop+0x50/0xa0 [ 562.916518][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 562.922499][ T31] RIP: 0033:0x7efff7a31749 [ 562.927011][ T31] RSP: 002b:00007ffcafe81898 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 562.935540][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efff7a31749 [ 562.943553][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 562.951581][ T31] RBP: 0000000000000003 R08: 00000005afe8198f R09: 00007efff7c56280 [ 562.959612][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 562.967653][ T31] R13: 00007efff7c56280 R14: 0000000000000003 R15: 00007ffcafe81950 [ 562.975681][ T31] [ 562.978713][ T31] INFO: task syz.3.18:382 blocked for more than 123 seconds. [ 562.986145][ T31] Not tainted syzkaller #0 [ 562.991121][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 562.999910][ T31] task:syz.3.18 state:D stack:25288 pid: 382 ppid: 372 flags:0x00004000 [ 563.009430][ T31] Call Trace: [ 563.012753][ T31] [ 563.015695][ T31] __schedule+0xb6e/0x14c0 [ 563.020123][ T31] ? release_firmware_map_entry+0x190/0x190 [ 563.026086][ T31] ? __kasan_check_write+0x14/0x20 [ 563.031247][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 563.036319][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 563.041992][ T31] schedule+0x11e/0x1e0 [ 563.046180][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 563.051977][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 563.057902][ T31] ? dput+0x47/0x90 [ 563.061816][ T31] ? kasan_save_stack+0x49/0x60 [ 563.066694][ T31] ? kasan_save_stack+0x3a/0x60 [ 563.071619][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 563.077282][ T31] ? call_rcu+0x105/0xfe0 [ 563.081823][ T31] ? __fput+0x590/0x8b0 [ 563.086018][ T31] ? ____fput+0x15/0x20 [ 563.090213][ T31] ? task_work_run+0x121/0x190 [ 563.095080][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 563.100517][ T31] ? rwsem_write_trylock+0x130/0x300 [ 563.105826][ T31] ? clear_nonspinnable+0x60/0x60 [ 563.111130][ T31] ? perf_event_exit_event+0x520/0x520 [ 563.116614][ T31] ? mutex_unlock+0x89/0x220 [ 563.121267][ T31] down_write+0x29/0x30 [ 563.125449][ T31] exit_mmap+0x127/0x860 [ 563.129701][ T31] ? vm_brk+0x30/0x30 [ 563.133766][ T31] ? mutex_unlock+0x89/0x220 [ 563.138397][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 563.143762][ T31] __mmput+0x93/0x320 [ 563.147767][ T31] ? mmput+0x48/0x150 [ 563.151874][ T31] mmput+0x50/0x150 [ 563.155734][ T31] do_exit+0x9d2/0x27a0 [ 563.159927][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 563.166084][ T31] ? put_task_struct+0x90/0x90 [ 563.170897][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 563.176534][ T31] ? ____fput+0x15/0x20 [ 563.180762][ T31] do_group_exit+0x141/0x310 [ 563.185378][ T31] ? debug_smp_processor_id+0x17/0x20 [ 563.190823][ T31] __x64_sys_exit_group+0x3f/0x40 [ 563.195875][ T31] x64_sys_call+0x832/0x9a0 [ 563.200456][ T31] do_syscall_64+0x4c/0xa0 [ 563.204906][ T31] ? clear_bhb_loop+0x50/0xa0 [ 563.209611][ T31] ? clear_bhb_loop+0x50/0xa0 [ 563.214478][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 563.220421][ T31] RIP: 0033:0x7f96fa9e6749 [ 563.224842][ T31] RSP: 002b:00007ffcde829738 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 563.233354][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f96fa9e6749 [ 563.241382][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 563.249369][ T31] RBP: 0000000000000003 R08: 00000005de82982f R09: 00007f96fac0b280 [ 563.257499][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 563.265516][ T31] R13: 00007f96fac0b280 R14: 0000000000000003 R15: 00007ffcde8297f0 [ 563.273571][ T31] [ 563.276629][ T31] NMI backtrace for cpu 1 [ 563.281013][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 563.288231][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 563.298297][ T31] Call Trace: [ 563.301573][ T31] [ 563.304506][ T31] __dump_stack+0x21/0x30 [ 563.308847][ T31] dump_stack_lvl+0xee/0x150 [ 563.313439][ T31] ? show_regs_print_info+0x20/0x20 [ 563.318653][ T31] dump_stack+0x15/0x20 [ 563.322808][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 563.327748][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 563.333305][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 563.339478][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 563.344428][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 563.350498][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 563.356567][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 563.362575][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 563.368481][ T31] watchdog+0xd64/0xea0 [ 563.372667][ T31] ? hungtask_pm_notify+0x50/0x50 [ 563.377696][ T31] ? __kasan_check_read+0x11/0x20 [ 563.382743][ T31] ? __kthread_parkme+0xac/0x200 [ 563.387692][ T31] ? preempt_count_add+0x90/0x1b0 [ 563.392716][ T31] kthread+0x411/0x500 [ 563.396785][ T31] ? hungtask_pm_notify+0x50/0x50 [ 563.401845][ T31] ? kthread_blkcg+0xd0/0xd0 [ 563.406451][ T31] ret_from_fork+0x1f/0x30 [ 563.410896][ T31] [ 563.414032][ T31] Sending NMI from CPU 1 to CPUs 0: [ 563.419303][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xf/0x20 [ 583.800444][ T31] INFO: task syz.2.17:370 blocked for more than 144 seconds. [ 583.807891][ T31] Not tainted syzkaller #0 [ 583.812916][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 583.821656][ T31] task:syz.2.17 state:D stack:25536 pid: 370 ppid: 360 flags:0x00004000 [ 583.831027][ T31] Call Trace: [ 583.834345][ T31] [ 583.837295][ T31] __schedule+0xb6e/0x14c0 [ 583.841954][ T31] ? release_firmware_map_entry+0x190/0x190 [ 583.847872][ T31] ? __kasan_check_write+0x14/0x20 [ 583.853052][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 583.858109][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 583.863765][ T31] schedule+0x11e/0x1e0 [ 583.867952][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 583.873752][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 583.879675][ T31] ? dput+0x47/0x90 [ 583.883562][ T31] ? kasan_save_stack+0x49/0x60 [ 583.888448][ T31] ? kasan_save_stack+0x3a/0x60 [ 583.893366][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 583.899031][ T31] ? call_rcu+0x105/0xfe0 [ 583.903467][ T31] ? __fput+0x590/0x8b0 [ 583.907647][ T31] ? ____fput+0x15/0x20 [ 583.911876][ T31] ? task_work_run+0x121/0x190 [ 583.916668][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 583.922134][ T31] ? rwsem_write_trylock+0x130/0x300 [ 583.927446][ T31] ? clear_nonspinnable+0x60/0x60 [ 583.932541][ T31] ? perf_event_exit_event+0x520/0x520 [ 583.938025][ T31] ? mutex_unlock+0x89/0x220 [ 583.942736][ T31] down_write+0x29/0x30 [ 583.946938][ T31] exit_mmap+0x127/0x860 [ 583.951255][ T31] ? vm_brk+0x30/0x30 [ 583.955273][ T31] ? mutex_unlock+0x89/0x220 [ 583.959868][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 583.965156][ T31] __mmput+0x93/0x320 [ 583.969178][ T31] ? mmput+0x48/0x150 [ 583.973298][ T31] mmput+0x50/0x150 [ 583.977119][ T31] do_exit+0x9d2/0x27a0 [ 583.981378][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 583.987477][ T31] ? put_task_struct+0x90/0x90 [ 583.992324][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 583.997986][ T31] ? ____fput+0x15/0x20 [ 584.002214][ T31] do_group_exit+0x141/0x310 [ 584.007236][ T31] ? debug_smp_processor_id+0x17/0x20 [ 584.012686][ T31] __x64_sys_exit_group+0x3f/0x40 [ 584.017742][ T31] x64_sys_call+0x832/0x9a0 [ 584.022330][ T31] do_syscall_64+0x4c/0xa0 [ 584.026775][ T31] ? clear_bhb_loop+0x50/0xa0 [ 584.031527][ T31] ? clear_bhb_loop+0x50/0xa0 [ 584.036227][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 584.042184][ T31] RIP: 0033:0x7efff7a31749 [ 584.046624][ T31] RSP: 002b:00007ffcafe81898 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 584.055103][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efff7a31749 [ 584.063118][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 584.071245][ T31] RBP: 0000000000000003 R08: 00000005afe8198f R09: 00007efff7c56280 [ 584.079245][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 584.087304][ T31] R13: 00007efff7c56280 R14: 0000000000000003 R15: 00007ffcafe81950 [ 584.095336][ T31] [ 584.098369][ T31] INFO: task syz.3.18:382 blocked for more than 144 seconds. [ 584.105804][ T31] Not tainted syzkaller #0 [ 584.110781][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 584.119447][ T31] task:syz.3.18 state:D stack:25288 pid: 382 ppid: 372 flags:0x00004000 [ 584.128756][ T31] Call Trace: [ 584.132082][ T31] [ 584.135038][ T31] __schedule+0xb6e/0x14c0 [ 584.139457][ T31] ? release_firmware_map_entry+0x190/0x190 [ 584.145420][ T31] ? __kasan_check_write+0x14/0x20 [ 584.150580][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 584.155621][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 584.161303][ T31] schedule+0x11e/0x1e0 [ 584.165495][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 584.171301][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 584.177221][ T31] ? dput+0x47/0x90 [ 584.181103][ T31] ? kasan_save_stack+0x49/0x60 [ 584.185976][ T31] ? kasan_save_stack+0x3a/0x60 [ 584.190890][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 584.196564][ T31] ? call_rcu+0x105/0xfe0 [ 584.200951][ T31] ? __fput+0x590/0x8b0 [ 584.205144][ T31] ? ____fput+0x15/0x20 [ 584.209300][ T31] ? task_work_run+0x121/0x190 [ 584.214130][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 584.219529][ T31] ? rwsem_write_trylock+0x130/0x300 [ 584.224900][ T31] ? clear_nonspinnable+0x60/0x60 [ 584.229944][ T31] ? perf_event_exit_event+0x520/0x520 [ 584.235472][ T31] ? mutex_unlock+0x89/0x220 [ 584.240087][ T31] down_write+0x29/0x30 [ 584.244334][ T31] exit_mmap+0x127/0x860 [ 584.248711][ T31] ? vm_brk+0x30/0x30 [ 584.252768][ T31] ? mutex_unlock+0x89/0x220 [ 584.257384][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 584.262652][ T31] __mmput+0x93/0x320 [ 584.266660][ T31] ? mmput+0x48/0x150 [ 584.270706][ T31] mmput+0x50/0x150 [ 584.274570][ T31] do_exit+0x9d2/0x27a0 [ 584.278738][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 584.284887][ T31] ? put_task_struct+0x90/0x90 [ 584.289677][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 584.295384][ T31] ? ____fput+0x15/0x20 [ 584.299570][ T31] do_group_exit+0x141/0x310 [ 584.304230][ T31] ? debug_smp_processor_id+0x17/0x20 [ 584.309635][ T31] __x64_sys_exit_group+0x3f/0x40 [ 584.314721][ T31] x64_sys_call+0x832/0x9a0 [ 584.319258][ T31] do_syscall_64+0x4c/0xa0 [ 584.323748][ T31] ? clear_bhb_loop+0x50/0xa0 [ 584.328451][ T31] ? clear_bhb_loop+0x50/0xa0 [ 584.333199][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 584.339125][ T31] RIP: 0033:0x7f96fa9e6749 [ 584.343592][ T31] RSP: 002b:00007ffcde829738 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 584.352077][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f96fa9e6749 [ 584.360071][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 584.368165][ T31] RBP: 0000000000000003 R08: 00000005de82982f R09: 00007f96fac0b280 [ 584.376195][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 584.384210][ T31] R13: 00007f96fac0b280 R14: 0000000000000003 R15: 00007ffcde8297f0 [ 584.392244][ T31] [ 584.395295][ T31] NMI backtrace for cpu 1 [ 584.399620][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 584.406813][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 584.416865][ T31] Call Trace: [ 584.420145][ T31] [ 584.423079][ T31] __dump_stack+0x21/0x30 [ 584.427413][ T31] dump_stack_lvl+0xee/0x150 [ 584.432011][ T31] ? show_regs_print_info+0x20/0x20 [ 584.437211][ T31] dump_stack+0x15/0x20 [ 584.441371][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 584.446311][ T31] ? sched_show_task+0x37a/0x540 [ 584.451255][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 584.457412][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 584.463482][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 584.469554][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 584.475538][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 584.481432][ T31] watchdog+0xd64/0xea0 [ 584.485592][ T31] ? hungtask_pm_notify+0x50/0x50 [ 584.490622][ T31] ? __kasan_check_read+0x11/0x20 [ 584.495651][ T31] ? __kthread_parkme+0xac/0x200 [ 584.500608][ T31] ? preempt_count_add+0x90/0x1b0 [ 584.505631][ T31] kthread+0x411/0x500 [ 584.509699][ T31] ? hungtask_pm_notify+0x50/0x50 [ 584.514725][ T31] ? kthread_blkcg+0xd0/0xd0 [ 584.519314][ T31] ret_from_fork+0x1f/0x30 [ 584.523732][ T31] [ 584.526884][ T31] Sending NMI from CPU 1 to CPUs 0: [ 584.532162][ C0] NMI backtrace for cpu 0 [ 584.532173][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 584.532189][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 584.532198][ C0] RIP: 0010:check_preemption_disabled+0x45/0x120 [ 584.532221][ C0] Code: d8 65 8b 05 45 7b 5e 7b 65 8b 0d 7e d7 5e 7b f7 c1 ff ff ff 7f 74 20 65 48 8b 0c 25 28 00 00 00 48 3b 4d d8 0f 85 cb 00 00 00 <48> 83 c4 10 5b 41 5c 41 5e 41 5f 5d c3 48 c7 45 d0 00 00 00 00 9c [ 584.532242][ C0] RSP: 0018:ffffc90000007f48 EFLAGS: 00000046 [ 584.532257][ C0] RAX: 0000000000000000 RBX: ffffffff8661c400 RCX: 0760d31388116000 [ 584.532269][ C0] RDX: 0000000000000000 RSI: ffffffff85634c60 RDI: ffffffff85634c20 [ 584.532280][ C0] RBP: ffffc90000007f78 R08: dffffc0000000000 R09: fffffbfff0cc3881 [ 584.532292][ C0] R10: fffffbfff0cc3881 R11: 1ffffffff0cc3880 R12: 0000000000000000 [ 584.532304][ C0] R13: 0000000000000000 R14: 0000000000007101 R15: 0000000000000000 [ 584.532314][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 584.532328][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 584.532339][ C0] CR2: 000000c006dbd010 CR3: 000000010dc0b000 CR4: 00000000003506b0 [ 584.532354][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 584.532363][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 584.532373][ C0] Call Trace: [ 584.532378][ C0] [ 584.532384][ C0] debug_smp_processor_id+0x17/0x20 [ 584.532399][ C0] tick_nohz_irq_exit+0x17/0x140 [ 584.532418][ C0] __irq_exit_rcu+0xaa/0xf0 [ 584.532435][ C0] irq_exit_rcu+0x9/0x10 [ 584.532451][ C0] sysvec_call_function_single+0xa6/0xc0 [ 584.532470][ C0] [ 584.532474][ C0] [ 584.532479][ C0] asm_sysvec_call_function_single+0x1b/0x20 [ 584.532498][ C0] RIP: 0010:default_idle+0xf/0x20 [ 584.532515][ C0] Code: e1 07 80 c1 03 38 c1 0f 8c 54 ff ff ff 4c 89 ff e8 b6 3c fe fc e9 47 ff ff ff 00 55 48 89 e5 66 90 0f 00 2d 63 5a 5c 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 89 e5 41 [ 584.532528][ C0] RSP: 0018:ffffffff86607d58 EFLAGS: 00000256 [ 584.532540][ C0] RAX: 00000000000071f0 RBX: ffffffff8661c400 RCX: 00000000000071f0 [ 584.532551][ C0] RDX: 0000000000000001 RSI: ffffffff85634c60 RDI: ffffffff85634c20 [ 584.532562][ C0] RBP: ffffffff86607d58 R08: dffffc0000000000 R09: ffffed103ee0718f [ 584.532574][ C0] R10: ffffed103ee0718f R11: 1ffff1103ee0718e R12: 0000000000000000 [ 584.532585][ C0] R13: 1ffffffff0cc3880 R14: 0000000000000000 R15: dffffc0000000000 [ 584.532599][ C0] arch_cpu_idle+0xa/0x10 [ 584.532615][ C0] default_idle_call+0x71/0x1d0 [ 584.532632][ C0] do_idle+0x1df/0x530 [ 584.532647][ C0] ? rcu_irq_exit+0x9/0x10 [ 584.532660][ C0] ? irqentry_exit+0x30/0x40 [ 584.532674][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 584.532691][ C0] cpu_startup_entry+0x18/0x20 [ 584.532706][ C0] rest_init+0x10a/0x130 [ 584.532719][ C0] ? time_init+0x40/0x40 [ 584.532764][ C0] arch_call_rest_init+0xe/0x10 [ 584.532781][ C0] start_kernel+0x46a/0x4e0 [ 584.532797][ C0] x86_64_start_reservations+0x2a/0x30 [ 584.532815][ C0] x86_64_start_kernel+0x5b/0x60 [ 584.532831][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 584.532851][ C0] [ 604.920515][ T31] INFO: task syz.2.17:370 blocked for more than 165 seconds. [ 604.927944][ T31] Not tainted syzkaller #0 [ 604.933052][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 604.942102][ T31] task:syz.2.17 state:D stack:25536 pid: 370 ppid: 360 flags:0x00004000 [ 604.951426][ T31] Call Trace: [ 604.954737][ T31] [ 604.957668][ T31] __schedule+0xb6e/0x14c0 [ 604.962152][ T31] ? release_firmware_map_entry+0x190/0x190 [ 604.968074][ T31] ? __kasan_check_write+0x14/0x20 [ 604.973386][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 604.978537][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 604.984216][ T31] schedule+0x11e/0x1e0 [ 604.988425][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 604.994224][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 605.000142][ T31] ? dput+0x47/0x90 [ 605.004055][ T31] ? kasan_save_stack+0x49/0x60 [ 605.008949][ T31] ? kasan_save_stack+0x3a/0x60 [ 605.013869][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 605.019528][ T31] ? call_rcu+0x105/0xfe0 [ 605.023932][ T31] ? __fput+0x590/0x8b0 [ 605.028110][ T31] ? ____fput+0x15/0x20 [ 605.032342][ T31] ? task_work_run+0x121/0x190 [ 605.037128][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 605.042593][ T31] ? rwsem_write_trylock+0x130/0x300 [ 605.047906][ T31] ? clear_nonspinnable+0x60/0x60 [ 605.053004][ T31] ? perf_event_exit_event+0x520/0x520 [ 605.058506][ T31] ? mutex_unlock+0x89/0x220 [ 605.063169][ T31] down_write+0x29/0x30 [ 605.067357][ T31] exit_mmap+0x127/0x860 [ 605.071673][ T31] ? vm_brk+0x30/0x30 [ 605.075677][ T31] ? mutex_unlock+0x89/0x220 [ 605.080342][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 605.085571][ T31] __mmput+0x93/0x320 [ 605.089559][ T31] ? mmput+0x48/0x150 [ 605.093613][ T31] mmput+0x50/0x150 [ 605.097445][ T31] do_exit+0x9d2/0x27a0 [ 605.101667][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 605.107759][ T31] ? put_task_struct+0x90/0x90 [ 605.112607][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 605.118267][ T31] ? ____fput+0x15/0x20 [ 605.122514][ T31] do_group_exit+0x141/0x310 [ 605.127131][ T31] ? debug_smp_processor_id+0x17/0x20 [ 605.132583][ T31] __x64_sys_exit_group+0x3f/0x40 [ 605.137632][ T31] x64_sys_call+0x832/0x9a0 [ 605.142222][ T31] do_syscall_64+0x4c/0xa0 [ 605.146705][ T31] ? clear_bhb_loop+0x50/0xa0 [ 605.151469][ T31] ? clear_bhb_loop+0x50/0xa0 [ 605.156166][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 605.162139][ T31] RIP: 0033:0x7efff7a31749 [ 605.166572][ T31] RSP: 002b:00007ffcafe81898 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 605.175054][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efff7a31749 [ 605.183074][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 605.191118][ T31] RBP: 0000000000000003 R08: 00000005afe8198f R09: 00007efff7c56280 [ 605.199116][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 605.207165][ T31] R13: 00007efff7c56280 R14: 0000000000000003 R15: 00007ffcafe81950 [ 605.215187][ T31] [ 605.218217][ T31] INFO: task syz.3.18:382 blocked for more than 165 seconds. [ 605.225659][ T31] Not tainted syzkaller #0 [ 605.230642][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 605.239309][ T31] task:syz.3.18 state:D stack:25288 pid: 382 ppid: 372 flags:0x00004000 [ 605.248588][ T31] Call Trace: [ 605.251920][ T31] [ 605.254856][ T31] __schedule+0xb6e/0x14c0 [ 605.259276][ T31] ? release_firmware_map_entry+0x190/0x190 [ 605.265237][ T31] ? __kasan_check_write+0x14/0x20 [ 605.270394][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 605.275436][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 605.281064][ T31] schedule+0x11e/0x1e0 [ 605.285244][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 605.291038][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 605.296974][ T31] ? dput+0x47/0x90 [ 605.300859][ T31] ? kasan_save_stack+0x49/0x60 [ 605.305741][ T31] ? kasan_save_stack+0x3a/0x60 [ 605.310670][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 605.316331][ T31] ? call_rcu+0x105/0xfe0 [ 605.320767][ T31] ? __fput+0x590/0x8b0 [ 605.325087][ T31] ? ____fput+0x15/0x20 [ 605.329465][ T31] ? task_work_run+0x121/0x190 [ 605.334440][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 605.339871][ T31] ? rwsem_write_trylock+0x130/0x300 [ 605.345288][ T31] ? clear_nonspinnable+0x60/0x60 [ 605.350377][ T31] ? perf_event_exit_event+0x520/0x520 [ 605.355847][ T31] ? mutex_unlock+0x89/0x220 [ 605.360509][ T31] down_write+0x29/0x30 [ 605.364694][ T31] exit_mmap+0x127/0x860 [ 605.368950][ T31] ? vm_brk+0x30/0x30 [ 605.373012][ T31] ? mutex_unlock+0x89/0x220 [ 605.377627][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 605.382885][ T31] __mmput+0x93/0x320 [ 605.386900][ T31] ? mmput+0x48/0x150 [ 605.390952][ T31] mmput+0x50/0x150 [ 605.394787][ T31] do_exit+0x9d2/0x27a0 [ 605.398948][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 605.405112][ T31] ? put_task_struct+0x90/0x90 [ 605.409905][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 605.415616][ T31] ? ____fput+0x15/0x20 [ 605.419801][ T31] do_group_exit+0x141/0x310 [ 605.424461][ T31] ? debug_smp_processor_id+0x17/0x20 [ 605.429865][ T31] __x64_sys_exit_group+0x3f/0x40 [ 605.434950][ T31] x64_sys_call+0x832/0x9a0 [ 605.439528][ T31] do_syscall_64+0x4c/0xa0 [ 605.444029][ T31] ? clear_bhb_loop+0x50/0xa0 [ 605.448737][ T31] ? clear_bhb_loop+0x50/0xa0 [ 605.453473][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 605.459510][ T31] RIP: 0033:0x7f96fa9e6749 [ 605.464032][ T31] RSP: 002b:00007ffcde829738 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 605.472536][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f96fa9e6749 [ 605.480566][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 605.488564][ T31] RBP: 0000000000000003 R08: 00000005de82982f R09: 00007f96fac0b280 [ 605.496667][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 605.504702][ T31] R13: 00007f96fac0b280 R14: 0000000000000003 R15: 00007ffcde8297f0 [ 605.512770][ T31] [ 605.515819][ T31] NMI backtrace for cpu 1 [ 605.520156][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 605.527362][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 605.537420][ T31] Call Trace: [ 605.540707][ T31] [ 605.543640][ T31] __dump_stack+0x21/0x30 [ 605.547978][ T31] dump_stack_lvl+0xee/0x150 [ 605.552566][ T31] ? show_regs_print_info+0x20/0x20 [ 605.557765][ T31] dump_stack+0x15/0x20 [ 605.561935][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 605.566882][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 605.572427][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 605.578592][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 605.583546][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 605.589639][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 605.595708][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 605.601693][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 605.607601][ T31] watchdog+0xd64/0xea0 [ 605.611769][ T31] ? hungtask_pm_notify+0x50/0x50 [ 605.616796][ T31] ? __kasan_check_read+0x11/0x20 [ 605.621819][ T31] ? __kthread_parkme+0xac/0x200 [ 605.626756][ T31] ? preempt_count_add+0x90/0x1b0 [ 605.631780][ T31] kthread+0x411/0x500 [ 605.636052][ T31] ? hungtask_pm_notify+0x50/0x50 [ 605.641081][ T31] ? kthread_blkcg+0xd0/0xd0 [ 605.645673][ T31] ret_from_fork+0x1f/0x30 [ 605.650117][ T31] [ 605.653284][ T31] Sending NMI from CPU 1 to CPUs 0: [ 605.658551][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xf/0x20 [ 626.040428][ T31] INFO: task syz.2.17:370 blocked for more than 186 seconds. [ 626.048012][ T31] Not tainted syzkaller #0 [ 626.053042][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 626.061791][ T31] task:syz.2.17 state:D stack:25536 pid: 370 ppid: 360 flags:0x00004000 [ 626.071120][ T31] Call Trace: [ 626.074431][ T31] [ 626.077378][ T31] __schedule+0xb6e/0x14c0 [ 626.081861][ T31] ? release_firmware_map_entry+0x190/0x190 [ 626.087776][ T31] ? __kasan_check_write+0x14/0x20 [ 626.092952][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 626.098007][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 626.103626][ T31] schedule+0x11e/0x1e0 [ 626.107829][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 626.113689][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 626.119629][ T31] ? dput+0x47/0x90 [ 626.123497][ T31] ? kasan_save_stack+0x49/0x60 [ 626.128371][ T31] ? kasan_save_stack+0x3a/0x60 [ 626.133334][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 626.138997][ T31] ? call_rcu+0x105/0xfe0 [ 626.143405][ T31] ? __fput+0x590/0x8b0 [ 626.147587][ T31] ? ____fput+0x15/0x20 [ 626.151843][ T31] ? task_work_run+0x121/0x190 [ 626.156641][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 626.162075][ T31] ? rwsem_write_trylock+0x130/0x300 [ 626.167387][ T31] ? clear_nonspinnable+0x60/0x60 [ 626.172474][ T31] ? perf_event_exit_event+0x520/0x520 [ 626.177953][ T31] ? mutex_unlock+0x89/0x220 [ 626.182613][ T31] down_write+0x29/0x30 [ 626.186787][ T31] exit_mmap+0x127/0x860 [ 626.191098][ T31] ? vm_brk+0x30/0x30 [ 626.195102][ T31] ? mutex_unlock+0x89/0x220 [ 626.199696][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 626.204960][ T31] __mmput+0x93/0x320 [ 626.208968][ T31] ? mmput+0x48/0x150 [ 626.213019][ T31] mmput+0x50/0x150 [ 626.216855][ T31] do_exit+0x9d2/0x27a0 [ 626.221078][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 626.227171][ T31] ? put_task_struct+0x90/0x90 [ 626.231996][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 626.237653][ T31] ? ____fput+0x15/0x20 [ 626.241885][ T31] do_group_exit+0x141/0x310 [ 626.246530][ T31] ? debug_smp_processor_id+0x17/0x20 [ 626.252069][ T31] __x64_sys_exit_group+0x3f/0x40 [ 626.257120][ T31] x64_sys_call+0x832/0x9a0 [ 626.261710][ T31] do_syscall_64+0x4c/0xa0 [ 626.266153][ T31] ? clear_bhb_loop+0x50/0xa0 [ 626.270889][ T31] ? clear_bhb_loop+0x50/0xa0 [ 626.275593][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 626.281579][ T31] RIP: 0033:0x7efff7a31749 [ 626.286031][ T31] RSP: 002b:00007ffcafe81898 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 626.294523][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efff7a31749 [ 626.302573][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 626.310972][ T31] RBP: 0000000000000003 R08: 00000005afe8198f R09: 00007efff7c56280 [ 626.318990][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 626.327051][ T31] R13: 00007efff7c56280 R14: 0000000000000003 R15: 00007ffcafe81950 [ 626.335097][ T31] [ 626.338126][ T31] INFO: task syz.3.18:382 blocked for more than 186 seconds. [ 626.345573][ T31] Not tainted syzkaller #0 [ 626.350546][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 626.359220][ T31] task:syz.3.18 state:D stack:25288 pid: 382 ppid: 372 flags:0x00004000 [ 626.368499][ T31] Call Trace: [ 626.371834][ T31] [ 626.374770][ T31] __schedule+0xb6e/0x14c0 [ 626.379209][ T31] ? release_firmware_map_entry+0x190/0x190 [ 626.385175][ T31] ? __kasan_check_write+0x14/0x20 [ 626.390337][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 626.395409][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 626.401029][ T31] schedule+0x11e/0x1e0 [ 626.405218][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 626.411023][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 626.416951][ T31] ? dput+0x47/0x90 [ 626.420854][ T31] ? kasan_save_stack+0x49/0x60 [ 626.425743][ T31] ? kasan_save_stack+0x3a/0x60 [ 626.430674][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 626.436336][ T31] ? call_rcu+0x105/0xfe0 [ 626.440717][ T31] ? __fput+0x590/0x8b0 [ 626.444894][ T31] ? ____fput+0x15/0x20 [ 626.449065][ T31] ? task_work_run+0x121/0x190 [ 626.453938][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 626.459334][ T31] ? rwsem_write_trylock+0x130/0x300 [ 626.464688][ T31] ? clear_nonspinnable+0x60/0x60 [ 626.469799][ T31] ? perf_event_exit_event+0x520/0x520 [ 626.475366][ T31] ? mutex_unlock+0x89/0x220 [ 626.479994][ T31] down_write+0x29/0x30 [ 626.484227][ T31] exit_mmap+0x127/0x860 [ 626.488676][ T31] ? vm_brk+0x30/0x30 [ 626.492771][ T31] ? mutex_unlock+0x89/0x220 [ 626.497391][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 626.502667][ T31] __mmput+0x93/0x320 [ 626.506675][ T31] ? mmput+0x48/0x150 [ 626.510720][ T31] mmput+0x50/0x150 [ 626.514558][ T31] do_exit+0x9d2/0x27a0 [ 626.519219][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 626.526418][ T31] ? put_task_struct+0x90/0x90 [ 626.531243][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 626.536898][ T31] ? ____fput+0x15/0x20 [ 626.541129][ T31] do_group_exit+0x141/0x310 [ 626.545917][ T31] ? debug_smp_processor_id+0x17/0x20 [ 626.551370][ T31] __x64_sys_exit_group+0x3f/0x40 [ 626.556528][ T31] x64_sys_call+0x832/0x9a0 [ 626.561114][ T31] do_syscall_64+0x4c/0xa0 [ 626.565826][ T31] ? clear_bhb_loop+0x50/0xa0 [ 626.570977][ T31] ? clear_bhb_loop+0x50/0xa0 [ 626.576212][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 626.582266][ T31] RIP: 0033:0x7f96fa9e6749 [ 626.586686][ T31] RSP: 002b:00007ffcde829738 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 626.595256][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f96fa9e6749 [ 626.603293][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 626.611338][ T31] RBP: 0000000000000003 R08: 00000005de82982f R09: 00007f96fac0b280 [ 626.619333][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 626.627368][ T31] R13: 00007f96fac0b280 R14: 0000000000000003 R15: 00007ffcde8297f0 [ 626.635391][ T31] [ 626.638420][ T31] NMI backtrace for cpu 0 [ 626.642766][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 626.649957][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 626.660093][ T31] Call Trace: [ 626.663370][ T31] [ 626.666302][ T31] __dump_stack+0x21/0x30 [ 626.670641][ T31] dump_stack_lvl+0xee/0x150 [ 626.675229][ T31] ? show_regs_print_info+0x20/0x20 [ 626.680526][ T31] dump_stack+0x15/0x20 [ 626.684695][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 626.689731][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 626.695284][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 626.701666][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 626.707075][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 626.713167][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 626.719245][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 626.725326][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 626.731237][ T31] watchdog+0xd64/0xea0 [ 626.735523][ T31] ? hungtask_pm_notify+0x50/0x50 [ 626.740559][ T31] ? __kasan_check_read+0x11/0x20 [ 626.745708][ T31] ? __kthread_parkme+0xac/0x200 [ 626.750656][ T31] ? preempt_count_add+0x90/0x1b0 [ 626.755680][ T31] kthread+0x411/0x500 [ 626.759757][ T31] ? hungtask_pm_notify+0x50/0x50 [ 626.764789][ T31] ? kthread_blkcg+0xd0/0xd0 [ 626.769539][ T31] ret_from_fork+0x1f/0x30 [ 626.773970][ T31] [ 626.777104][ T31] Sending NMI from CPU 0 to CPUs 1: [ 626.782370][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20 [ 647.160430][ T31] INFO: task syz.2.17:370 blocked for more than 207 seconds. [ 647.167826][ T31] Not tainted syzkaller #0 [ 647.173116][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 647.182014][ T31] task:syz.2.17 state:D stack:25536 pid: 370 ppid: 360 flags:0x00004000 [ 647.191307][ T31] Call Trace: [ 647.194606][ T31] [ 647.197546][ T31] __schedule+0xb6e/0x14c0 [ 647.202067][ T31] ? release_firmware_map_entry+0x190/0x190 [ 647.208008][ T31] ? __kasan_check_write+0x14/0x20 [ 647.213202][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 647.218252][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 647.223883][ T31] schedule+0x11e/0x1e0 [ 647.228095][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 647.233886][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 647.239814][ T31] ? dput+0x47/0x90 [ 647.243675][ T31] ? kasan_save_stack+0x49/0x60 [ 647.248546][ T31] ? kasan_save_stack+0x3a/0x60 [ 647.253481][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 647.259143][ T31] ? call_rcu+0x105/0xfe0 [ 647.263693][ T31] ? __fput+0x590/0x8b0 [ 647.268012][ T31] ? ____fput+0x15/0x20 [ 647.272366][ T31] ? task_work_run+0x121/0x190 [ 647.277159][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 647.282609][ T31] ? rwsem_write_trylock+0x130/0x300 [ 647.287934][ T31] ? clear_nonspinnable+0x60/0x60 [ 647.293040][ T31] ? perf_event_exit_event+0x520/0x520 [ 647.298522][ T31] ? mutex_unlock+0x89/0x220 [ 647.303191][ T31] down_write+0x29/0x30 [ 647.307365][ T31] exit_mmap+0x127/0x860 [ 647.311671][ T31] ? vm_brk+0x30/0x30 [ 647.315714][ T31] ? mutex_unlock+0x89/0x220 [ 647.320479][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 647.325703][ T31] __mmput+0x93/0x320 [ 647.329690][ T31] ? mmput+0x48/0x150 [ 647.333740][ T31] mmput+0x50/0x150 [ 647.337572][ T31] do_exit+0x9d2/0x27a0 [ 647.341809][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 647.347918][ T31] ? put_task_struct+0x90/0x90 [ 647.352753][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 647.358405][ T31] ? ____fput+0x15/0x20 [ 647.362641][ T31] do_group_exit+0x141/0x310 [ 647.367287][ T31] ? debug_smp_processor_id+0x17/0x20 [ 647.372754][ T31] __x64_sys_exit_group+0x3f/0x40 [ 647.377802][ T31] x64_sys_call+0x832/0x9a0 [ 647.382398][ T31] do_syscall_64+0x4c/0xa0 [ 647.386900][ T31] ? clear_bhb_loop+0x50/0xa0 [ 647.391816][ T31] ? clear_bhb_loop+0x50/0xa0 [ 647.396534][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 647.402506][ T31] RIP: 0033:0x7efff7a31749 [ 647.406938][ T31] RSP: 002b:00007ffcafe81898 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 647.415412][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efff7a31749 [ 647.423448][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 647.431483][ T31] RBP: 0000000000000003 R08: 00000005afe8198f R09: 00007efff7c56280 [ 647.439502][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 647.447520][ T31] R13: 00007efff7c56280 R14: 0000000000000003 R15: 00007ffcafe81950 [ 647.455567][ T31] [ 647.458612][ T31] INFO: task syz.3.18:382 blocked for more than 207 seconds. [ 647.466053][ T31] Not tainted syzkaller #0 [ 647.471035][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 647.479707][ T31] task:syz.3.18 state:D stack:25288 pid: 382 ppid: 372 flags:0x00004000 [ 647.489330][ T31] Call Trace: [ 647.492660][ T31] [ 647.495641][ T31] __schedule+0xb6e/0x14c0 [ 647.500061][ T31] ? release_firmware_map_entry+0x190/0x190 [ 647.506023][ T31] ? __kasan_check_write+0x14/0x20 [ 647.511186][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 647.516224][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 647.521892][ T31] schedule+0x11e/0x1e0 [ 647.526079][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 647.531884][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 647.537801][ T31] ? dput+0x47/0x90 [ 647.541695][ T31] ? kasan_save_stack+0x49/0x60 [ 647.546568][ T31] ? kasan_save_stack+0x3a/0x60 [ 647.551476][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 647.557132][ T31] ? call_rcu+0x105/0xfe0 [ 647.561568][ T31] ? __fput+0x590/0x8b0 [ 647.565762][ T31] ? ____fput+0x15/0x20 [ 647.569941][ T31] ? task_work_run+0x121/0x190 [ 647.574786][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 647.580253][ T31] ? rwsem_write_trylock+0x130/0x300 [ 647.585557][ T31] ? clear_nonspinnable+0x60/0x60 [ 647.590629][ T31] ? perf_event_exit_event+0x520/0x520 [ 647.596110][ T31] ? mutex_unlock+0x89/0x220 [ 647.600776][ T31] down_write+0x29/0x30 [ 647.604959][ T31] exit_mmap+0x127/0x860 [ 647.609211][ T31] ? vm_brk+0x30/0x30 [ 647.613259][ T31] ? mutex_unlock+0x89/0x220 [ 647.617875][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 647.623139][ T31] __mmput+0x93/0x320 [ 647.627149][ T31] ? mmput+0x48/0x150 [ 647.631197][ T31] mmput+0x50/0x150 [ 647.635029][ T31] do_exit+0x9d2/0x27a0 [ 647.639191][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 647.645342][ T31] ? put_task_struct+0x90/0x90 [ 647.650137][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 647.655830][ T31] ? ____fput+0x15/0x20 [ 647.660018][ T31] do_group_exit+0x141/0x310 [ 647.664680][ T31] ? debug_smp_processor_id+0x17/0x20 [ 647.670079][ T31] __x64_sys_exit_group+0x3f/0x40 [ 647.675172][ T31] x64_sys_call+0x832/0x9a0 [ 647.679699][ T31] do_syscall_64+0x4c/0xa0 [ 647.684182][ T31] ? clear_bhb_loop+0x50/0xa0 [ 647.688885][ T31] ? clear_bhb_loop+0x50/0xa0 [ 647.693667][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 647.699592][ T31] RIP: 0033:0x7f96fa9e6749 [ 647.704076][ T31] RSP: 002b:00007ffcde829738 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 647.712531][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f96fa9e6749 [ 647.720565][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 647.728557][ T31] RBP: 0000000000000003 R08: 00000005de82982f R09: 00007f96fac0b280 [ 647.736596][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 647.744609][ T31] R13: 00007f96fac0b280 R14: 0000000000000003 R15: 00007ffcde8297f0 [ 647.752650][ T31] [ 647.755696][ T31] NMI backtrace for cpu 0 [ 647.760027][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 647.767219][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 647.777290][ T31] Call Trace: [ 647.780582][ T31] [ 647.783511][ T31] __dump_stack+0x21/0x30 [ 647.787960][ T31] dump_stack_lvl+0xee/0x150 [ 647.792553][ T31] ? show_regs_print_info+0x20/0x20 [ 647.797757][ T31] dump_stack+0x15/0x20 [ 647.801920][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 647.806882][ T31] ? sched_show_task+0x37a/0x540 [ 647.811833][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 647.817992][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 647.824067][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 647.830142][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 647.836130][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 647.842066][ T31] watchdog+0xd64/0xea0 [ 647.846235][ T31] ? hungtask_pm_notify+0x50/0x50 [ 647.851263][ T31] ? __kasan_check_read+0x11/0x20 [ 647.856292][ T31] ? __kthread_parkme+0xac/0x200 [ 647.861230][ T31] ? preempt_count_add+0x90/0x1b0 [ 647.866259][ T31] kthread+0x411/0x500 [ 647.870338][ T31] ? hungtask_pm_notify+0x50/0x50 [ 647.875363][ T31] ? kthread_blkcg+0xd0/0xd0 [ 647.879954][ T31] ret_from_fork+0x1f/0x30 [ 647.884378][ T31] [ 647.887506][ T31] Sending NMI from CPU 0 to CPUs 1: [ 647.892780][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20