Warning: Permanently added '10.128.0.140' (ED25519) to the list of known hosts. 2026/01/12 12:50:38 parsed 1 programs [ 421.144353][ T30] audit: type=1400 audit(1768222238.250:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 421.165306][ T30] audit: type=1400 audit(1768222238.250:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 422.131081][ T30] audit: type=1400 audit(1768222239.240:66): avc: denied { mounton } for pid=289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 422.134859][ T289] cgroup: Unknown subsys name 'net' [ 422.153861][ T30] audit: type=1400 audit(1768222239.240:67): avc: denied { mount } for pid=289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 422.181196][ T30] audit: type=1400 audit(1768222239.270:68): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 422.181748][ T289] cgroup: Unknown subsys name 'devices' [ 422.419961][ T289] cgroup: Unknown subsys name 'hugetlb' [ 422.425584][ T289] cgroup: Unknown subsys name 'rlimit' [ 422.574008][ T30] audit: type=1400 audit(1768222239.680:69): avc: denied { setattr } for pid=289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 422.597678][ T30] audit: type=1400 audit(1768222239.680:70): avc: denied { create } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 422.618188][ T30] audit: type=1400 audit(1768222239.680:71): avc: denied { write } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 422.638646][ T30] audit: type=1400 audit(1768222239.680:72): avc: denied { read } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 422.658431][ T292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 422.659061][ T30] audit: type=1400 audit(1768222239.690:73): avc: denied { mounton } for pid=289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 422.722957][ T289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 423.175796][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.183345][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.191222][ T294] device bridge_slave_0 entered promiscuous mode [ 423.198667][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.205813][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.213549][ T294] device bridge_slave_1 entered promiscuous mode [ 423.308510][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.315560][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.322922][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.330102][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.351271][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.358744][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.366258][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 423.374054][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 423.383380][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 423.391634][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.398732][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.410279][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 423.418442][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.425548][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.438656][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 423.448105][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 423.461821][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 423.473819][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 423.482071][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 423.489976][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 423.498503][ T294] device veth0_vlan entered promiscuous mode [ 423.509168][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 423.518615][ T294] device veth1_macvtap entered promiscuous mode [ 423.530485][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 423.540699][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 423.559065][ T294] request_module fs-gadgetfs succeeded, but still no fs? [ 423.592376][ T294] syz-executor (294) used greatest stack depth: 21568 bytes left [ 423.939948][ T45] device bridge_slave_1 left promiscuous mode [ 423.946145][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.954152][ T45] device bridge_slave_0 left promiscuous mode [ 423.960382][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.968499][ T45] device veth1_macvtap left promiscuous mode [ 423.974508][ T45] device veth0_vlan left promiscuous mode 2026/01/12 12:50:41 executed programs: 0 [ 424.671260][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.678821][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.686320][ T363] device bridge_slave_0 entered promiscuous mode [ 424.694773][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.701890][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.709439][ T363] device bridge_slave_1 entered promiscuous mode [ 424.764560][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.771650][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.778959][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.786009][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.810466][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 424.818390][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.825704][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.840402][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 424.848648][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.855672][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.864530][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 424.872889][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.879951][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.897537][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 424.906888][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 424.920627][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 424.937515][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 424.945828][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 424.953274][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 424.961775][ T363] device veth0_vlan entered promiscuous mode [ 424.976717][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 424.986035][ T363] device veth1_macvtap entered promiscuous mode [ 424.995921][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 425.010800][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 440.084947][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.092056][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.099835][ T375] device bridge_slave_0 entered promiscuous mode [ 440.106680][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.113798][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.121247][ T375] device bridge_slave_1 entered promiscuous mode [ 440.168617][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.175754][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.183095][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.190166][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.209194][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.216477][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.223965][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 440.231578][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 440.240521][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 440.248725][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.255758][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.264391][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 440.272663][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.279754][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.292027][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 440.301171][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 440.314689][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 440.325835][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 440.333929][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 440.341459][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 440.350277][ T375] device veth0_vlan entered promiscuous mode [ 440.360732][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 2026/01/12 12:50:57 executed programs: 3 [ 440.370271][ T375] device veth1_macvtap entered promiscuous mode [ 440.380203][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 440.390058][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 565.147734][ T31] INFO: task syz.2.17:373 blocked for more than 122 seconds. [ 565.155145][ T31] Not tainted syzkaller #0 [ 565.160183][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 565.168909][ T31] task:syz.2.17 state:D stack:25824 pid: 373 ppid: 363 flags:0x00004000 [ 565.178441][ T31] Call Trace: [ 565.181737][ T31] [ 565.184680][ T31] __schedule+0xb6e/0x14c0 [ 565.189162][ T31] ? release_firmware_map_entry+0x190/0x190 [ 565.195089][ T31] ? __kasan_check_write+0x14/0x20 [ 565.200294][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 565.205339][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 565.210964][ T31] schedule+0x11e/0x1e0 [ 565.215144][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 565.220925][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 565.226848][ T31] ? dput+0x47/0x90 [ 565.230728][ T31] ? kasan_save_stack+0x49/0x60 [ 565.235593][ T31] ? kasan_save_stack+0x3a/0x60 [ 565.240511][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 565.246212][ T31] ? call_rcu+0x105/0xfe0 [ 565.250620][ T31] ? __fput+0x590/0x8b0 [ 565.254804][ T31] ? ____fput+0x15/0x20 [ 565.259027][ T31] ? task_work_run+0x121/0x190 [ 565.263842][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 565.269271][ T31] ? rwsem_write_trylock+0x130/0x300 [ 565.274740][ T31] ? clear_nonspinnable+0x60/0x60 [ 565.279869][ T31] ? perf_event_exit_event+0x520/0x520 [ 565.285349][ T31] ? mutex_unlock+0x89/0x220 [ 565.290003][ T31] down_write+0x29/0x30 [ 565.294179][ T31] exit_mmap+0x127/0x860 [ 565.298480][ T31] ? vm_brk+0x30/0x30 [ 565.302486][ T31] ? mutex_unlock+0x89/0x220 [ 565.307118][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 565.312411][ T31] __mmput+0x93/0x320 [ 565.316419][ T31] ? mmput+0x48/0x150 [ 565.320470][ T31] mmput+0x50/0x150 [ 565.324298][ T31] do_exit+0x9d2/0x27a0 [ 565.328506][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 565.334597][ T31] ? put_task_struct+0x90/0x90 [ 565.339455][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 565.345109][ T31] ? ____fput+0x15/0x20 [ 565.349505][ T31] do_group_exit+0x141/0x310 [ 565.354265][ T31] ? debug_smp_processor_id+0x17/0x20 [ 565.359729][ T31] __x64_sys_exit_group+0x3f/0x40 [ 565.364776][ T31] x64_sys_call+0x832/0x9a0 [ 565.369351][ T31] do_syscall_64+0x4c/0xa0 [ 565.373786][ T31] ? clear_bhb_loop+0x50/0xa0 [ 565.378524][ T31] ? clear_bhb_loop+0x50/0xa0 [ 565.383224][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 565.389314][ T31] RIP: 0033:0x7f4c48942749 [ 565.393760][ T31] RSP: 002b:00007fff34f81368 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 565.402254][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4c48942749 [ 565.410271][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 565.418299][ T31] RBP: 0000000000000003 R08: 0000000534f8145f R09: 00007f4c48b67280 [ 565.426290][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 565.434323][ T31] R13: 00007f4c48b67280 R14: 0000000000000003 R15: 00007fff34f81420 [ 565.442337][ T31] [ 565.445355][ T31] INFO: task syz.3.18:385 blocked for more than 123 seconds. [ 565.452798][ T31] Not tainted syzkaller #0 [ 565.457764][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 565.466628][ T31] task:syz.3.18 state:D stack:25528 pid: 385 ppid: 375 flags:0x00004000 [ 565.476092][ T31] Call Trace: [ 565.479467][ T31] [ 565.482413][ T31] __schedule+0xb6e/0x14c0 [ 565.486922][ T31] ? release_firmware_map_entry+0x190/0x190 [ 565.492876][ T31] ? __kasan_check_write+0x14/0x20 [ 565.498023][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 565.503050][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 565.508650][ T31] schedule+0x11e/0x1e0 [ 565.512822][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 565.518617][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 565.524528][ T31] ? dput+0x47/0x90 [ 565.528395][ T31] ? kasan_save_stack+0x49/0x60 [ 565.533266][ T31] ? kasan_save_stack+0x3a/0x60 [ 565.538165][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 565.543830][ T31] ? call_rcu+0x105/0xfe0 [ 565.548212][ T31] ? __fput+0x590/0x8b0 [ 565.552387][ T31] ? ____fput+0x15/0x20 [ 565.556534][ T31] ? task_work_run+0x121/0x190 [ 565.561344][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 565.566731][ T31] ? rwsem_write_trylock+0x130/0x300 [ 565.572067][ T31] ? clear_nonspinnable+0x60/0x60 [ 565.577110][ T31] ? perf_event_exit_event+0x520/0x520 [ 565.582630][ T31] ? mutex_unlock+0x89/0x220 [ 565.587265][ T31] down_write+0x29/0x30 [ 565.591473][ T31] exit_mmap+0x127/0x860 [ 565.595844][ T31] ? vm_brk+0x30/0x30 [ 565.599876][ T31] ? mutex_unlock+0x89/0x220 [ 565.604481][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 565.609740][ T31] __mmput+0x93/0x320 [ 565.613760][ T31] ? mmput+0x48/0x150 [ 565.617788][ T31] mmput+0x50/0x150 [ 565.621611][ T31] do_exit+0x9d2/0x27a0 [ 565.625759][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 565.631880][ T31] ? put_task_struct+0x90/0x90 [ 565.636686][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 565.642350][ T31] ? ____fput+0x15/0x20 [ 565.646517][ T31] do_group_exit+0x141/0x310 [ 565.651149][ T31] ? debug_smp_processor_id+0x17/0x20 [ 565.656534][ T31] __x64_sys_exit_group+0x3f/0x40 [ 565.661631][ T31] x64_sys_call+0x832/0x9a0 [ 565.666176][ T31] do_syscall_64+0x4c/0xa0 [ 565.670653][ T31] ? clear_bhb_loop+0x50/0xa0 [ 565.675371][ T31] ? clear_bhb_loop+0x50/0xa0 [ 565.680091][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 565.686000][ T31] RIP: 0033:0x7f2d2b06f749 [ 565.690545][ T31] RSP: 002b:00007fff80b61848 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 565.699008][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2d2b06f749 [ 565.707020][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 565.715192][ T31] RBP: 0000000000000003 R08: 0000000580b6193f R09: 00007f2d2b294280 [ 565.723252][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 565.731252][ T31] R13: 00007f2d2b294280 R14: 0000000000000003 R15: 00007fff80b61900 [ 565.739372][ T31] [ 565.742415][ T31] NMI backtrace for cpu 0 [ 565.746740][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 565.753927][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 565.764000][ T31] Call Trace: [ 565.767274][ T31] [ 565.770199][ T31] __dump_stack+0x21/0x30 [ 565.774524][ T31] dump_stack_lvl+0xee/0x150 [ 565.779127][ T31] ? show_regs_print_info+0x20/0x20 [ 565.784328][ T31] dump_stack+0x15/0x20 [ 565.788481][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 565.793416][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 565.798969][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 565.805132][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 565.810062][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 565.816123][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 565.822189][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 565.828188][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 565.834072][ T31] watchdog+0xd64/0xea0 [ 565.838222][ T31] ? hungtask_pm_notify+0x50/0x50 [ 565.843240][ T31] ? __kasan_check_read+0x11/0x20 [ 565.848271][ T31] ? __kthread_parkme+0xac/0x200 [ 565.853195][ T31] ? preempt_count_add+0x90/0x1b0 [ 565.858224][ T31] kthread+0x411/0x500 [ 565.862306][ T31] ? hungtask_pm_notify+0x50/0x50 [ 565.867330][ T31] ? kthread_blkcg+0xd0/0xd0 [ 565.871933][ T31] ret_from_fork+0x1f/0x30 [ 565.876350][ T31] [ 565.879871][ T31] Sending NMI from CPU 0 to CPUs 1: [ 565.885132][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20 [ 586.267620][ T31] INFO: task syz.2.17:373 blocked for more than 144 seconds. [ 586.275445][ T31] Not tainted syzkaller #0 [ 586.280469][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 586.289186][ T31] task:syz.2.17 state:D stack:25824 pid: 373 ppid: 363 flags:0x00004000 [ 586.298553][ T31] Call Trace: [ 586.301846][ T31] [ 586.304770][ T31] __schedule+0xb6e/0x14c0 [ 586.309289][ T31] ? release_firmware_map_entry+0x190/0x190 [ 586.315211][ T31] ? __kasan_check_write+0x14/0x20 [ 586.320511][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 586.325566][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 586.331190][ T31] schedule+0x11e/0x1e0 [ 586.335358][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 586.341129][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 586.347046][ T31] ? dput+0x47/0x90 [ 586.350939][ T31] ? kasan_save_stack+0x49/0x60 [ 586.355838][ T31] ? kasan_save_stack+0x3a/0x60 [ 586.360776][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 586.366443][ T31] ? call_rcu+0x105/0xfe0 [ 586.370845][ T31] ? __fput+0x590/0x8b0 [ 586.375015][ T31] ? ____fput+0x15/0x20 [ 586.379313][ T31] ? task_work_run+0x121/0x190 [ 586.384094][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 586.389531][ T31] ? rwsem_write_trylock+0x130/0x300 [ 586.394926][ T31] ? clear_nonspinnable+0x60/0x60 [ 586.400023][ T31] ? perf_event_exit_event+0x520/0x520 [ 586.405510][ T31] ? mutex_unlock+0x89/0x220 [ 586.410173][ T31] down_write+0x29/0x30 [ 586.414350][ T31] exit_mmap+0x127/0x860 [ 586.418666][ T31] ? vm_brk+0x30/0x30 [ 586.422666][ T31] ? mutex_unlock+0x89/0x220 [ 586.427255][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 586.432714][ T31] __mmput+0x93/0x320 [ 586.436716][ T31] ? mmput+0x48/0x150 [ 586.440753][ T31] mmput+0x50/0x150 [ 586.444578][ T31] do_exit+0x9d2/0x27a0 [ 586.448795][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 586.454893][ T31] ? put_task_struct+0x90/0x90 [ 586.459700][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 586.465349][ T31] ? ____fput+0x15/0x20 [ 586.469552][ T31] do_group_exit+0x141/0x310 [ 586.474158][ T31] ? debug_smp_processor_id+0x17/0x20 [ 586.479604][ T31] __x64_sys_exit_group+0x3f/0x40 [ 586.484698][ T31] x64_sys_call+0x832/0x9a0 [ 586.489248][ T31] do_syscall_64+0x4c/0xa0 [ 586.493683][ T31] ? clear_bhb_loop+0x50/0xa0 [ 586.498397][ T31] ? clear_bhb_loop+0x50/0xa0 [ 586.503089][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 586.509153][ T31] RIP: 0033:0x7f4c48942749 [ 586.513581][ T31] RSP: 002b:00007fff34f81368 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 586.522098][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4c48942749 [ 586.530106][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 586.538134][ T31] RBP: 0000000000000003 R08: 0000000534f8145f R09: 00007f4c48b67280 [ 586.546125][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 586.554154][ T31] R13: 00007f4c48b67280 R14: 0000000000000003 R15: 00007fff34f81420 [ 586.562160][ T31] [ 586.565269][ T31] INFO: task syz.3.18:385 blocked for more than 144 seconds. [ 586.572685][ T31] Not tainted syzkaller #0 [ 586.577644][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 586.586301][ T31] task:syz.3.18 state:D stack:25528 pid: 385 ppid: 375 flags:0x00004000 [ 586.595597][ T31] Call Trace: [ 586.598906][ T31] [ 586.601853][ T31] __schedule+0xb6e/0x14c0 [ 586.606281][ T31] ? release_firmware_map_entry+0x190/0x190 [ 586.612212][ T31] ? __kasan_check_write+0x14/0x20 [ 586.617342][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 586.622417][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 586.628002][ T31] schedule+0x11e/0x1e0 [ 586.632281][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 586.638060][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 586.643975][ T31] ? dput+0x47/0x90 [ 586.647847][ T31] ? kasan_save_stack+0x49/0x60 [ 586.652714][ T31] ? kasan_save_stack+0x3a/0x60 [ 586.657612][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 586.663262][ T31] ? call_rcu+0x105/0xfe0 [ 586.667630][ T31] ? __fput+0x590/0x8b0 [ 586.671810][ T31] ? ____fput+0x15/0x20 [ 586.675976][ T31] ? task_work_run+0x121/0x190 [ 586.680788][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 586.686185][ T31] ? rwsem_write_trylock+0x130/0x300 [ 586.691554][ T31] ? clear_nonspinnable+0x60/0x60 [ 586.696622][ T31] ? perf_event_exit_event+0x520/0x520 [ 586.702223][ T31] ? mutex_unlock+0x89/0x220 [ 586.706840][ T31] down_write+0x29/0x30 [ 586.711034][ T31] exit_mmap+0x127/0x860 [ 586.715294][ T31] ? vm_brk+0x30/0x30 [ 586.719348][ T31] ? mutex_unlock+0x89/0x220 [ 586.723964][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 586.729218][ T31] __mmput+0x93/0x320 [ 586.733225][ T31] ? mmput+0x48/0x150 [ 586.737205][ T31] mmput+0x50/0x150 [ 586.741072][ T31] do_exit+0x9d2/0x27a0 [ 586.745257][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 586.751389][ T31] ? put_task_struct+0x90/0x90 [ 586.756176][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 586.761886][ T31] ? ____fput+0x15/0x20 [ 586.766066][ T31] do_group_exit+0x141/0x310 [ 586.770711][ T31] ? debug_smp_processor_id+0x17/0x20 [ 586.776105][ T31] __x64_sys_exit_group+0x3f/0x40 [ 586.781184][ T31] x64_sys_call+0x832/0x9a0 [ 586.785706][ T31] do_syscall_64+0x4c/0xa0 [ 586.790172][ T31] ? clear_bhb_loop+0x50/0xa0 [ 586.794865][ T31] ? clear_bhb_loop+0x50/0xa0 [ 586.799591][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 586.805503][ T31] RIP: 0033:0x7f2d2b06f749 [ 586.809975][ T31] RSP: 002b:00007fff80b61848 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 586.818426][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2d2b06f749 [ 586.826396][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 586.834414][ T31] RBP: 0000000000000003 R08: 0000000580b6193f R09: 00007f2d2b294280 [ 586.842420][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 586.850437][ T31] R13: 00007f2d2b294280 R14: 0000000000000003 R15: 00007fff80b61900 [ 586.858461][ T31] [ 586.861486][ T31] NMI backtrace for cpu 0 [ 586.865801][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 586.872991][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 586.883036][ T31] Call Trace: [ 586.886308][ T31] [ 586.889249][ T31] __dump_stack+0x21/0x30 [ 586.893593][ T31] dump_stack_lvl+0xee/0x150 [ 586.898178][ T31] ? show_regs_print_info+0x20/0x20 [ 586.903374][ T31] dump_stack+0x15/0x20 [ 586.907543][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 586.912501][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 586.918045][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 586.924202][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 586.929145][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 586.935226][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 586.941303][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 586.947286][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 586.953179][ T31] watchdog+0xd64/0xea0 [ 586.957337][ T31] ? hungtask_pm_notify+0x50/0x50 [ 586.962360][ T31] ? __kasan_check_read+0x11/0x20 [ 586.967387][ T31] ? __kthread_parkme+0xac/0x200 [ 586.972318][ T31] ? preempt_count_add+0x90/0x1b0 [ 586.977338][ T31] kthread+0x411/0x500 [ 586.981424][ T31] ? hungtask_pm_notify+0x50/0x50 [ 586.986445][ T31] ? kthread_blkcg+0xd0/0xd0 [ 586.991039][ T31] ret_from_fork+0x1f/0x30 [ 586.995458][ T31] [ 586.998605][ T31] Sending NMI from CPU 0 to CPUs 1: [ 587.003857][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20 [ 607.387617][ T31] INFO: task syz.2.17:373 blocked for more than 165 seconds. [ 607.395017][ T31] Not tainted syzkaller #0 [ 607.400056][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 607.408761][ T31] task:syz.2.17 state:D stack:25824 pid: 373 ppid: 363 flags:0x00004000 [ 607.418051][ T31] Call Trace: [ 607.421345][ T31] [ 607.424271][ T31] __schedule+0xb6e/0x14c0 [ 607.428749][ T31] ? release_firmware_map_entry+0x190/0x190 [ 607.434662][ T31] ? __kasan_check_write+0x14/0x20 [ 607.439833][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 607.444880][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 607.450504][ T31] schedule+0x11e/0x1e0 [ 607.454674][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 607.460465][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 607.466368][ T31] ? dput+0x47/0x90 [ 607.470349][ T31] ? kasan_save_stack+0x49/0x60 [ 607.475231][ T31] ? kasan_save_stack+0x3a/0x60 [ 607.480167][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 607.485817][ T31] ? call_rcu+0x105/0xfe0 [ 607.490252][ T31] ? __fput+0x590/0x8b0 [ 607.494425][ T31] ? ____fput+0x15/0x20 [ 607.498652][ T31] ? task_work_run+0x121/0x190 [ 607.503434][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 607.508840][ T31] ? rwsem_write_trylock+0x130/0x300 [ 607.514150][ T31] ? clear_nonspinnable+0x60/0x60 [ 607.519230][ T31] ? perf_event_exit_event+0x520/0x520 [ 607.524700][ T31] ? mutex_unlock+0x89/0x220 [ 607.529395][ T31] down_write+0x29/0x30 [ 607.533570][ T31] exit_mmap+0x127/0x860 [ 607.537863][ T31] ? vm_brk+0x30/0x30 [ 607.542041][ T31] ? mutex_unlock+0x89/0x220 [ 607.546637][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 607.551888][ T31] __mmput+0x93/0x320 [ 607.555887][ T31] ? mmput+0x48/0x150 [ 607.559915][ T31] mmput+0x50/0x150 [ 607.563740][ T31] do_exit+0x9d2/0x27a0 [ 607.567945][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 607.574034][ T31] ? put_task_struct+0x90/0x90 [ 607.578926][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 607.584583][ T31] ? ____fput+0x15/0x20 [ 607.588823][ T31] do_group_exit+0x141/0x310 [ 607.593455][ T31] ? debug_smp_processor_id+0x17/0x20 [ 607.598888][ T31] __x64_sys_exit_group+0x3f/0x40 [ 607.603933][ T31] x64_sys_call+0x832/0x9a0 [ 607.608493][ T31] do_syscall_64+0x4c/0xa0 [ 607.612930][ T31] ? clear_bhb_loop+0x50/0xa0 [ 607.617660][ T31] ? clear_bhb_loop+0x50/0xa0 [ 607.622355][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 607.628300][ T31] RIP: 0033:0x7f4c48942749 [ 607.632749][ T31] RSP: 002b:00007fff34f81368 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 607.641216][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4c48942749 [ 607.649229][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 607.657194][ T31] RBP: 0000000000000003 R08: 0000000534f8145f R09: 00007f4c48b67280 [ 607.665248][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 607.673264][ T31] R13: 00007f4c48b67280 R14: 0000000000000003 R15: 00007fff34f81420 [ 607.681295][ T31] [ 607.684340][ T31] INFO: task syz.3.18:385 blocked for more than 165 seconds. [ 607.691748][ T31] Not tainted syzkaller #0 [ 607.696694][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 607.705420][ T31] task:syz.3.18 state:D stack:25528 pid: 385 ppid: 375 flags:0x00004000 [ 607.714662][ T31] Call Trace: [ 607.717989][ T31] [ 607.720933][ T31] __schedule+0xb6e/0x14c0 [ 607.725373][ T31] ? release_firmware_map_entry+0x190/0x190 [ 607.731324][ T31] ? __kasan_check_write+0x14/0x20 [ 607.736458][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 607.741569][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 607.747146][ T31] schedule+0x11e/0x1e0 [ 607.751370][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 607.757109][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 607.763051][ T31] ? dput+0x47/0x90 [ 607.766877][ T31] ? kasan_save_stack+0x49/0x60 [ 607.771765][ T31] ? kasan_save_stack+0x3a/0x60 [ 607.776632][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 607.782317][ T31] ? call_rcu+0x105/0xfe0 [ 607.786757][ T31] ? __fput+0x590/0x8b0 [ 607.790965][ T31] ? ____fput+0x15/0x20 [ 607.795141][ T31] ? task_work_run+0x121/0x190 [ 607.799946][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 607.805343][ T31] ? rwsem_write_trylock+0x130/0x300 [ 607.810697][ T31] ? clear_nonspinnable+0x60/0x60 [ 607.815736][ T31] ? perf_event_exit_event+0x520/0x520 [ 607.821258][ T31] ? mutex_unlock+0x89/0x220 [ 607.825865][ T31] down_write+0x29/0x30 [ 607.830065][ T31] exit_mmap+0x127/0x860 [ 607.834329][ T31] ? vm_brk+0x30/0x30 [ 607.838378][ T31] ? mutex_unlock+0x89/0x220 [ 607.842987][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 607.848290][ T31] __mmput+0x93/0x320 [ 607.852328][ T31] ? mmput+0x48/0x150 [ 607.856309][ T31] mmput+0x50/0x150 [ 607.860172][ T31] do_exit+0x9d2/0x27a0 [ 607.864346][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 607.870500][ T31] ? put_task_struct+0x90/0x90 [ 607.875286][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 607.880976][ T31] ? ____fput+0x15/0x20 [ 607.885165][ T31] do_group_exit+0x141/0x310 [ 607.889804][ T31] ? debug_smp_processor_id+0x17/0x20 [ 607.895212][ T31] __x64_sys_exit_group+0x3f/0x40 [ 607.900289][ T31] x64_sys_call+0x832/0x9a0 [ 607.904826][ T31] do_syscall_64+0x4c/0xa0 [ 607.909279][ T31] ? clear_bhb_loop+0x50/0xa0 [ 607.914013][ T31] ? clear_bhb_loop+0x50/0xa0 [ 607.918759][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 607.924672][ T31] RIP: 0033:0x7f2d2b06f749 [ 607.929155][ T31] RSP: 002b:00007fff80b61848 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 607.937637][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2d2b06f749 [ 607.945629][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 607.953677][ T31] RBP: 0000000000000003 R08: 0000000580b6193f R09: 00007f2d2b294280 [ 607.961713][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 607.969730][ T31] R13: 00007f2d2b294280 R14: 0000000000000003 R15: 00007fff80b61900 [ 607.977741][ T31] [ 607.980762][ T31] NMI backtrace for cpu 1 [ 607.985253][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 607.992439][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 608.002570][ T31] Call Trace: [ 608.005851][ T31] [ 608.008778][ T31] __dump_stack+0x21/0x30 [ 608.013112][ T31] dump_stack_lvl+0xee/0x150 [ 608.017700][ T31] ? show_regs_print_info+0x20/0x20 [ 608.022920][ T31] dump_stack+0x15/0x20 [ 608.027105][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 608.032199][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 608.037852][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 608.044027][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 608.048998][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 608.055081][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 608.061204][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 608.067204][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 608.073109][ T31] watchdog+0xd64/0xea0 [ 608.077274][ T31] ? hungtask_pm_notify+0x50/0x50 [ 608.082311][ T31] ? __kasan_check_read+0x11/0x20 [ 608.087344][ T31] ? __kthread_parkme+0xac/0x200 [ 608.092293][ T31] ? preempt_count_add+0x90/0x1b0 [ 608.097324][ T31] kthread+0x411/0x500 [ 608.101404][ T31] ? hungtask_pm_notify+0x50/0x50 [ 608.106442][ T31] ? kthread_blkcg+0xd0/0xd0 [ 608.111048][ T31] ret_from_fork+0x1f/0x30 [ 608.115476][ T31] [ 608.118635][ T31] Sending NMI from CPU 1 to CPUs 0: [ 608.123862][ C0] NMI backtrace for cpu 0 [ 608.123871][ C0] CPU: 0 PID: 45 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 608.123887][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 608.123897][ C0] Workqueue: events_unbound toggle_allocation_gate [ 608.123919][ C0] RIP: 0010:insn_get_modrm+0x4c3/0x790 [ 608.123940][ C0] Code: 18 89 de 81 e6 00 80 00 00 31 ff e8 27 72 f8 fe 81 e3 00 80 00 00 75 12 e8 6a 6e f8 fe 48 8b 5d c8 eb 2d e8 5f 6e f8 fe eb 26 58 6e f8 fe 49 83 c4 50 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 [ 608.123953][ C0] RSP: 0018:ffffc900002ef7e0 EFLAGS: 00000206 [ 608.123965][ C0] RAX: ffffffff827050d9 RBX: 0000000000008000 RCX: ffff8881055f13c0 [ 608.123982][ C0] RDX: 0000000000000000 RSI: 0000000000008000 RDI: 0000000000000000 [ 608.123991][ C0] RBP: ffffc900002ef858 R08: dffffc0000000000 R09: ffffc900002ef9e0 [ 608.124003][ C0] R10: fffff5200005df47 R11: 1ffff9200005df3c R12: ffffc900002ef9e0 [ 608.124015][ C0] R13: dffffc0000000000 R14: ffffc900002efa04 R15: 0000000000000001 [ 608.124026][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 608.124039][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 608.124050][ C0] CR2: 000000c005687010 CR3: 000000000660f000 CR4: 00000000003506b0 [ 608.124064][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 608.124073][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 608.124082][ C0] Call Trace: [ 608.124086][ C0] [ 608.124091][ C0] ? native_send_call_func_single_ipi+0x5e/0x70 [ 608.124111][ C0] insn_get_displacement+0x14f/0xa00 [ 608.124129][ C0] insn_get_immediate+0x342/0x1370 [ 608.124147][ C0] ? smp_call_function_many+0x40/0x40 [ 608.124165][ C0] insn_decode+0x387/0x520 [ 608.124181][ C0] ? kmem_cache_alloc+0x4c/0x260 [ 608.124198][ C0] __jump_label_patch+0xd8/0x430 [ 608.124215][ C0] ? __kasan_check_write+0x14/0x20 [ 608.124232][ C0] ? arch_jump_label_transform_queue+0xe0/0xe0 [ 608.124252][ C0] ? kmem_cache_alloc+0x4c/0x260 [ 608.124267][ C0] ? kmem_cache_alloc+0x5b/0x260 [ 608.124282][ C0] ? kmem_cache_alloc+0x4d/0x260 [ 608.124297][ C0] ? wait_for_completion_killable_timeout+0x10/0x10 [ 608.124314][ C0] ? mutex_unlock+0x89/0x220 [ 608.124328][ C0] ? __mutex_lock_slowpath+0x10/0x10 [ 608.124342][ C0] ? text_poke_queue+0xdf/0x180 [ 608.124357][ C0] arch_jump_label_transform_queue+0x4d/0xe0 [ 608.124375][ C0] __jump_label_update+0x180/0x3a0 [ 608.124391][ C0] jump_label_update+0x39b/0x450 [ 608.124409][ C0] static_key_disable_cpuslocked+0xc5/0x1a0 [ 608.124427][ C0] static_key_disable+0x1a/0x30 [ 608.124444][ C0] toggle_allocation_gate+0x36d/0x410 [ 608.124460][ C0] ? kfence_debugfs_init+0x70/0x70 [ 608.124475][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 608.124491][ C0] ? finish_task_switch+0x16b/0x780 [ 608.124507][ C0] ? __switch_to_asm+0x3a/0x60 [ 608.124523][ C0] ? __schedule+0xb76/0x14c0 [ 608.124538][ C0] process_one_work+0x6be/0xba0 [ 608.124557][ C0] worker_thread+0xa59/0x1200 [ 608.124574][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 608.124593][ C0] ? __kthread_parkme+0xac/0x200 [ 608.124609][ C0] kthread+0x411/0x500 [ 608.124623][ C0] ? worker_clr_flags+0x190/0x190 [ 608.124639][ C0] ? kthread_blkcg+0xd0/0xd0 [ 608.124654][ C0] ret_from_fork+0x1f/0x30 [ 608.124670][ C0] [ 628.507661][ T31] INFO: task syz.2.17:373 blocked for more than 186 seconds. [ 628.515083][ T31] Not tainted syzkaller #0 [ 628.520091][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 628.528785][ T31] task:syz.2.17 state:D stack:25824 pid: 373 ppid: 363 flags:0x00004000 [ 628.538039][ T31] Call Trace: [ 628.541353][ T31] [ 628.544280][ T31] __schedule+0xb6e/0x14c0 [ 628.548743][ T31] ? release_firmware_map_entry+0x190/0x190 [ 628.554654][ T31] ? __kasan_check_write+0x14/0x20 [ 628.559805][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 628.564850][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 628.570451][ T31] schedule+0x11e/0x1e0 [ 628.574621][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 628.580408][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 628.586318][ T31] ? dput+0x47/0x90 [ 628.590174][ T31] ? kasan_save_stack+0x49/0x60 [ 628.595040][ T31] ? kasan_save_stack+0x3a/0x60 [ 628.599924][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 628.605573][ T31] ? call_rcu+0x105/0xfe0 [ 628.609942][ T31] ? __fput+0x590/0x8b0 [ 628.614117][ T31] ? ____fput+0x15/0x20 [ 628.618332][ T31] ? task_work_run+0x121/0x190 [ 628.623119][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 628.628554][ T31] ? rwsem_write_trylock+0x130/0x300 [ 628.633865][ T31] ? clear_nonspinnable+0x60/0x60 [ 628.638935][ T31] ? perf_event_exit_event+0x520/0x520 [ 628.644407][ T31] ? mutex_unlock+0x89/0x220 [ 628.649044][ T31] down_write+0x29/0x30 [ 628.653215][ T31] exit_mmap+0x127/0x860 [ 628.657514][ T31] ? vm_brk+0x30/0x30 [ 628.661514][ T31] ? mutex_unlock+0x89/0x220 [ 628.666098][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 628.671341][ T31] __mmput+0x93/0x320 [ 628.675342][ T31] ? mmput+0x48/0x150 [ 628.679370][ T31] mmput+0x50/0x150 [ 628.683197][ T31] do_exit+0x9d2/0x27a0 [ 628.687357][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 628.693475][ T31] ? put_task_struct+0x90/0x90 [ 628.698270][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 628.703900][ T31] ? ____fput+0x15/0x20 [ 628.708113][ T31] do_group_exit+0x141/0x310 [ 628.712721][ T31] ? debug_smp_processor_id+0x17/0x20 [ 628.718141][ T31] __x64_sys_exit_group+0x3f/0x40 [ 628.723185][ T31] x64_sys_call+0x832/0x9a0 [ 628.727751][ T31] do_syscall_64+0x4c/0xa0 [ 628.732202][ T31] ? clear_bhb_loop+0x50/0xa0 [ 628.736876][ T31] ? clear_bhb_loop+0x50/0xa0 [ 628.741601][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 628.747523][ T31] RIP: 0033:0x7f4c48942749 [ 628.751931][ T31] RSP: 002b:00007fff34f81368 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 628.760390][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4c48942749 [ 628.768392][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 628.776358][ T31] RBP: 0000000000000003 R08: 0000000534f8145f R09: 00007f4c48b67280 [ 628.784369][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 628.792384][ T31] R13: 00007f4c48b67280 R14: 0000000000000003 R15: 00007fff34f81420 [ 628.800394][ T31] [ 628.803451][ T31] INFO: task syz.3.18:385 blocked for more than 186 seconds. [ 628.810870][ T31] Not tainted syzkaller #0 [ 628.815813][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 628.824517][ T31] task:syz.3.18 state:D stack:25528 pid: 385 ppid: 375 flags:0x00004000 [ 628.833747][ T31] Call Trace: [ 628.837023][ T31] [ 628.840027][ T31] __schedule+0xb6e/0x14c0 [ 628.844477][ T31] ? release_firmware_map_entry+0x190/0x190 [ 628.850693][ T31] ? __kasan_check_write+0x14/0x20 [ 628.855847][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 628.860939][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 628.866523][ T31] schedule+0x11e/0x1e0 [ 628.870734][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 628.876488][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 628.882444][ T31] ? dput+0x47/0x90 [ 628.886353][ T31] ? kasan_save_stack+0x49/0x60 [ 628.891274][ T31] ? kasan_save_stack+0x3a/0x60 [ 628.896153][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 628.901847][ T31] ? call_rcu+0x105/0xfe0 [ 628.906195][ T31] ? __fput+0x590/0x8b0 [ 628.910427][ T31] ? ____fput+0x15/0x20 [ 628.914715][ T31] ? task_work_run+0x121/0x190 [ 628.919536][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 628.924933][ T31] ? rwsem_write_trylock+0x130/0x300 [ 628.930277][ T31] ? clear_nonspinnable+0x60/0x60 [ 628.935323][ T31] ? perf_event_exit_event+0x520/0x520 [ 628.940821][ T31] ? mutex_unlock+0x89/0x220 [ 628.945430][ T31] down_write+0x29/0x30 [ 628.949633][ T31] exit_mmap+0x127/0x860 [ 628.953894][ T31] ? vm_brk+0x30/0x30 [ 628.957914][ T31] ? mutex_unlock+0x89/0x220 [ 628.962522][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 628.967760][ T31] __mmput+0x93/0x320 [ 628.971778][ T31] ? mmput+0x48/0x150 [ 628.975757][ T31] mmput+0x50/0x150 [ 628.979620][ T31] do_exit+0x9d2/0x27a0 [ 628.983790][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 628.989930][ T31] ? put_task_struct+0x90/0x90 [ 628.994710][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 629.000380][ T31] ? ____fput+0x15/0x20 [ 629.004557][ T31] do_group_exit+0x141/0x310 [ 629.009196][ T31] ? debug_smp_processor_id+0x17/0x20 [ 629.014596][ T31] __x64_sys_exit_group+0x3f/0x40 [ 629.019671][ T31] x64_sys_call+0x832/0x9a0 [ 629.024186][ T31] do_syscall_64+0x4c/0xa0 [ 629.028625][ T31] ? clear_bhb_loop+0x50/0xa0 [ 629.033318][ T31] ? clear_bhb_loop+0x50/0xa0 [ 629.038014][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 629.043913][ T31] RIP: 0033:0x7f2d2b06f749 [ 629.048370][ T31] RSP: 002b:00007fff80b61848 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 629.056795][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2d2b06f749 [ 629.064819][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 629.072818][ T31] RBP: 0000000000000003 R08: 0000000580b6193f R09: 00007f2d2b294280 [ 629.080840][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 629.088845][ T31] R13: 00007f2d2b294280 R14: 0000000000000003 R15: 00007fff80b61900 [ 629.096817][ T31] [ 629.099883][ T31] NMI backtrace for cpu 1 [ 629.104216][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 629.111403][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 629.121539][ T31] Call Trace: [ 629.124823][ T31] [ 629.127746][ T31] __dump_stack+0x21/0x30 [ 629.132072][ T31] dump_stack_lvl+0xee/0x150 [ 629.136742][ T31] ? show_regs_print_info+0x20/0x20 [ 629.141941][ T31] dump_stack+0x15/0x20 [ 629.146096][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 629.151331][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 629.156884][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 629.163038][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 629.167978][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 629.174046][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 629.180115][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 629.186097][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 629.192005][ T31] watchdog+0xd64/0xea0 [ 629.196168][ T31] ? hungtask_pm_notify+0x50/0x50 [ 629.201195][ T31] ? __kasan_check_read+0x11/0x20 [ 629.206212][ T31] ? __kthread_parkme+0xac/0x200 [ 629.211159][ T31] ? preempt_count_add+0x90/0x1b0 [ 629.216194][ T31] kthread+0x411/0x500 [ 629.220254][ T31] ? hungtask_pm_notify+0x50/0x50 [ 629.225271][ T31] ? kthread_blkcg+0xd0/0xd0 [ 629.229863][ T31] ret_from_fork+0x1f/0x30 [ 629.234274][ T31] [ 629.237424][ T31] Sending NMI from CPU 1 to CPUs 0: [ 629.242692][ C0] NMI backtrace for cpu 0 [ 629.242701][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 629.242716][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 629.242725][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x1/0x60 [ 629.242747][ C0] Code: 00 00 0f 0b 0f 1f 44 00 00 55 48 89 e5 53 48 89 fb e8 13 00 00 00 48 8b 3d 3c 6c 80 05 48 89 de e8 74 c9 3d 00 5b 5d c3 00 55 <48> 89 e5 48 8b 45 08 65 48 8b 0d 20 ae 99 7e 65 8b 15 21 ae 99 7e [ 629.242760][ C0] RSP: 0018:ffffffff86607c28 EFLAGS: 00000093 [ 629.242774][ C0] RAX: ffffffff8159f49a RBX: ffff8881f7029fc8 RCX: ffffffff8661c400 [ 629.242787][ C0] RDX: 000000000000000a RSI: ffff8881f7029a40 RDI: ffff8881f7029fc8 [ 629.242798][ C0] RBP: ffffffff86607c60 R08: 0000000000000004 R09: 0000000000000003 [ 629.242808][ C0] R10: fffffbfff0cc0f78 R11: 1ffffffff0cc0f78 R12: ffff8881f7029fc8 [ 629.242820][ C0] R13: dffffc0000000000 R14: ffff8881f7029a40 R15: 000000000000000a [ 629.242831][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 629.242844][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 629.242855][ C0] CR2: 000000c005687010 CR3: 000000010d7ee000 CR4: 00000000003506b0 [ 629.242869][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 629.242878][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 629.242887][ C0] Call Trace: [ 629.242892][ C0] [ 629.242896][ C0] ? enqueue_hrtimer+0x25/0x240 [ 629.242912][ C0] hrtimer_start_range_ns+0xa55/0xc00 [ 629.242932][ C0] tick_nohz_restart_sched_tick+0x15e/0x200 [ 629.242950][ C0] tick_nohz_idle_exit+0x172/0x400 [ 629.242966][ C0] do_idle+0x4b8/0x530 [ 629.242981][ C0] ? rcu_irq_exit+0x9/0x10 [ 629.242995][ C0] ? irqentry_exit+0x30/0x40 [ 629.243008][ C0] ? sysvec_call_function_single+0x61/0xc0 [ 629.243026][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 629.243042][ C0] ? do_idle+0x1/0x530 [ 629.243059][ C0] cpu_startup_entry+0x18/0x20 [ 629.243073][ C0] rest_init+0x10a/0x130 [ 629.243086][ C0] ? time_init+0x40/0x40 [ 629.243100][ C0] arch_call_rest_init+0xe/0x10 [ 629.243117][ C0] start_kernel+0x46a/0x4e0 [ 629.243134][ C0] x86_64_start_reservations+0x2a/0x30 [ 629.243150][ C0] x86_64_start_kernel+0x5b/0x60 [ 629.243166][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 629.243185][ C0] [ 649.627594][ T31] INFO: task syz.2.17:373 blocked for more than 207 seconds. [ 649.635011][ T31] Not tainted syzkaller #0 [ 649.640016][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 649.648724][ T31] task:syz.2.17 state:D stack:25824 pid: 373 ppid: 363 flags:0x00004000 [ 649.658069][ T31] Call Trace: [ 649.661367][ T31] [ 649.664296][ T31] __schedule+0xb6e/0x14c0 [ 649.668771][ T31] ? release_firmware_map_entry+0x190/0x190 [ 649.674677][ T31] ? __kasan_check_write+0x14/0x20 [ 649.679843][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 649.684886][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 649.690484][ T31] schedule+0x11e/0x1e0 [ 649.694652][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 649.700412][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 649.706320][ T31] ? dput+0x47/0x90 [ 649.710284][ T31] ? kasan_save_stack+0x49/0x60 [ 649.715265][ T31] ? kasan_save_stack+0x3a/0x60 [ 649.720180][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 649.725836][ T31] ? call_rcu+0x105/0xfe0 [ 649.730240][ T31] ? __fput+0x590/0x8b0 [ 649.734424][ T31] ? ____fput+0x15/0x20 [ 649.738626][ T31] ? task_work_run+0x121/0x190 [ 649.743416][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 649.748832][ T31] ? rwsem_write_trylock+0x130/0x300 [ 649.754227][ T31] ? clear_nonspinnable+0x60/0x60 [ 649.759476][ T31] ? perf_event_exit_event+0x520/0x520 [ 649.765039][ T31] ? mutex_unlock+0x89/0x220 [ 649.769688][ T31] down_write+0x29/0x30 [ 649.773860][ T31] exit_mmap+0x127/0x860 [ 649.778145][ T31] ? vm_brk+0x30/0x30 [ 649.782143][ T31] ? mutex_unlock+0x89/0x220 [ 649.786733][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 649.791980][ T31] __mmput+0x93/0x320 [ 649.795973][ T31] ? mmput+0x48/0x150 [ 649.800014][ T31] mmput+0x50/0x150 [ 649.804014][ T31] do_exit+0x9d2/0x27a0 [ 649.808222][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 649.814308][ T31] ? put_task_struct+0x90/0x90 [ 649.819217][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 649.824962][ T31] ? ____fput+0x15/0x20 [ 649.829161][ T31] do_group_exit+0x141/0x310 [ 649.833765][ T31] ? debug_smp_processor_id+0x17/0x20 [ 649.839188][ T31] __x64_sys_exit_group+0x3f/0x40 [ 649.844228][ T31] x64_sys_call+0x832/0x9a0 [ 649.848779][ T31] do_syscall_64+0x4c/0xa0 [ 649.853216][ T31] ? clear_bhb_loop+0x50/0xa0 [ 649.857943][ T31] ? clear_bhb_loop+0x50/0xa0 [ 649.862638][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 649.868610][ T31] RIP: 0033:0x7f4c48942749 [ 649.873033][ T31] RSP: 002b:00007fff34f81368 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 649.881525][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4c48942749 [ 649.889527][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 649.897573][ T31] RBP: 0000000000000003 R08: 0000000534f8145f R09: 00007f4c48b67280 [ 649.905560][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 649.913709][ T31] R13: 00007f4c48b67280 R14: 0000000000000003 R15: 00007fff34f81420 [ 649.921989][ T31] [ 649.925042][ T31] INFO: task syz.3.18:385 blocked for more than 207 seconds. [ 649.932493][ T31] Not tainted syzkaller #0 [ 649.937440][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 649.946176][ T31] task:syz.3.18 state:D stack:25528 pid: 385 ppid: 375 flags:0x00004000 [ 649.955439][ T31] Call Trace: [ 649.958853][ T31] [ 649.961793][ T31] __schedule+0xb6e/0x14c0 [ 649.966218][ T31] ? release_firmware_map_entry+0x190/0x190 [ 649.972149][ T31] ? __kasan_check_write+0x14/0x20 [ 649.977275][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 649.982356][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 649.987962][ T31] schedule+0x11e/0x1e0 [ 649.992120][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 649.997914][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 650.003957][ T31] ? dput+0x47/0x90 [ 650.007840][ T31] ? kasan_save_stack+0x49/0x60 [ 650.012706][ T31] ? kasan_save_stack+0x3a/0x60 [ 650.017612][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 650.023261][ T31] ? call_rcu+0x105/0xfe0 [ 650.027691][ T31] ? __fput+0x590/0x8b0 [ 650.031947][ T31] ? ____fput+0x15/0x20 [ 650.036096][ T31] ? task_work_run+0x121/0x190 [ 650.040906][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 650.046296][ T31] ? rwsem_write_trylock+0x130/0x300 [ 650.051637][ T31] ? clear_nonspinnable+0x60/0x60 [ 650.056674][ T31] ? perf_event_exit_event+0x520/0x520 [ 650.062355][ T31] ? mutex_unlock+0x89/0x220 [ 650.066969][ T31] down_write+0x29/0x30 [ 650.071197][ T31] exit_mmap+0x127/0x860 [ 650.075461][ T31] ? vm_brk+0x30/0x30 [ 650.079494][ T31] ? mutex_unlock+0x89/0x220 [ 650.084106][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 650.089376][ T31] __mmput+0x93/0x320 [ 650.093381][ T31] ? mmput+0x48/0x150 [ 650.097446][ T31] mmput+0x50/0x150 [ 650.101329][ T31] do_exit+0x9d2/0x27a0 [ 650.105488][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 650.111647][ T31] ? put_task_struct+0x90/0x90 [ 650.116426][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 650.122098][ T31] ? ____fput+0x15/0x20 [ 650.126267][ T31] do_group_exit+0x141/0x310 [ 650.130891][ T31] ? debug_smp_processor_id+0x17/0x20 [ 650.136285][ T31] __x64_sys_exit_group+0x3f/0x40 [ 650.141367][ T31] x64_sys_call+0x832/0x9a0 [ 650.145885][ T31] do_syscall_64+0x4c/0xa0 [ 650.150355][ T31] ? clear_bhb_loop+0x50/0xa0 [ 650.155058][ T31] ? clear_bhb_loop+0x50/0xa0 [ 650.159769][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 650.165684][ T31] RIP: 0033:0x7f2d2b06f749 [ 650.170134][ T31] RSP: 002b:00007fff80b61848 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 650.178598][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2d2b06f749 [ 650.186597][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 650.194635][ T31] RBP: 0000000000000003 R08: 0000000580b6193f R09: 00007f2d2b294280 [ 650.202637][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 650.210656][ T31] R13: 00007f2d2b294280 R14: 0000000000000003 R15: 00007fff80b61900 [ 650.218693][ T31] [ 650.221712][ T31] NMI backtrace for cpu 1 [ 650.226025][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 650.233212][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 650.243261][ T31] Call Trace: [ 650.246699][ T31] [ 650.249632][ T31] __dump_stack+0x21/0x30 [ 650.253991][ T31] dump_stack_lvl+0xee/0x150 [ 650.258575][ T31] ? show_regs_print_info+0x20/0x20 [ 650.263777][ T31] dump_stack+0x15/0x20 [ 650.267934][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 650.272867][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 650.278402][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 650.284558][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 650.289686][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 650.295782][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 650.301852][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 650.307938][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 650.313853][ T31] watchdog+0xd64/0xea0 [ 650.318116][ T31] ? hungtask_pm_notify+0x50/0x50 [ 650.323236][ T31] ? __kasan_check_read+0x11/0x20 [ 650.328272][ T31] ? __kthread_parkme+0xac/0x200 [ 650.333204][ T31] ? preempt_count_add+0x90/0x1b0 [ 650.338441][ T31] kthread+0x411/0x500 [ 650.342525][ T31] ? hungtask_pm_notify+0x50/0x50 [ 650.347559][ T31] ? kthread_blkcg+0xd0/0xd0 [ 650.352186][ T31] ret_from_fork+0x1f/0x30 [ 650.356613][ T31] [ 650.359718][ T31] Sending NMI from CPU 1 to CPUs 0: [ 650.364957][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xf/0x20