Warning: Permanently added '10.128.1.141' (ED25519) to the list of known hosts. 2025/10/09 18:26:42 parsed 1 programs [ 279.876185][ T30] audit: type=1400 audit(1760034402.990:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 279.900180][ T30] audit: type=1400 audit(1760034403.000:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 280.871645][ T30] audit: type=1400 audit(1760034403.990:66): avc: denied { mounton } for pid=290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 280.873996][ T290] cgroup: Unknown subsys name 'net' [ 280.895759][ T30] audit: type=1400 audit(1760034403.990:67): avc: denied { mount } for pid=290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 280.925049][ T30] audit: type=1400 audit(1760034404.020:68): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 280.925552][ T290] cgroup: Unknown subsys name 'devices' [ 281.159300][ T290] cgroup: Unknown subsys name 'hugetlb' [ 281.165145][ T290] cgroup: Unknown subsys name 'rlimit' [ 281.372241][ T30] audit: type=1400 audit(1760034404.490:69): avc: denied { setattr } for pid=290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 281.395839][ T30] audit: type=1400 audit(1760034404.490:70): avc: denied { create } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 281.403112][ T293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 281.416724][ T30] audit: type=1400 audit(1760034404.490:71): avc: denied { write } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 281.446795][ T30] audit: type=1400 audit(1760034404.490:72): avc: denied { read } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 281.468770][ T30] audit: type=1400 audit(1760034404.490:73): avc: denied { mounton } for pid=290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 281.498150][ T290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 281.967267][ T295] request_module fs-gadgetfs succeeded, but still no fs? [ 282.481353][ T326] syz-executor (326) used greatest stack depth: 21216 bytes left [ 282.495591][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.503379][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.511753][ T330] device bridge_slave_0 entered promiscuous mode [ 282.519688][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.527266][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.535277][ T330] device bridge_slave_1 entered promiscuous mode [ 282.601759][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.609096][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.616676][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.623983][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.645424][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 282.658632][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.666326][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.677116][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 282.685544][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.692822][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.702590][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.711679][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.719090][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.739675][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 282.749581][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 282.764089][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 282.784603][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 282.793724][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 282.807598][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 282.817955][ T330] device veth0_vlan entered promiscuous mode [ 282.833629][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 282.844533][ T330] device veth1_macvtap entered promiscuous mode [ 282.855089][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 282.867086][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 282.920387][ T330] syz-executor (330) used greatest stack depth: 21120 bytes left 2025/10/09 18:26:46 executed programs: 0 [ 283.485880][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.493282][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.501072][ T362] device bridge_slave_0 entered promiscuous mode [ 283.509112][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.516386][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.524652][ T362] device bridge_slave_1 entered promiscuous mode [ 283.598882][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.605937][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.613331][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.620542][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.643653][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.652859][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.661165][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.675439][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.684231][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.691439][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.702152][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.710789][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.718251][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.743110][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.753434][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.769839][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 283.782354][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.791529][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 283.800404][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 283.812970][ T362] device veth0_vlan entered promiscuous mode [ 283.827555][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 283.843467][ T362] device veth1_macvtap entered promiscuous mode [ 283.854243][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 283.867339][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 284.010567][ T8] device bridge_slave_1 left promiscuous mode [ 284.017792][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.026161][ T8] device bridge_slave_0 left promiscuous mode [ 284.032841][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.041747][ T8] device veth1_macvtap left promiscuous mode [ 284.048079][ T8] device veth0_vlan left promiscuous mode [ 298.972847][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.980016][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.987603][ T374] device bridge_slave_0 entered promiscuous mode [ 298.994495][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.002010][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.009696][ T374] device bridge_slave_1 entered promiscuous mode [ 299.073135][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.080785][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.088428][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.095613][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.118887][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.126842][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.134761][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.142493][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.152038][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.160504][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.167866][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.177365][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.185641][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.193152][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.205878][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.216865][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.233521][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.245848][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.254383][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 299.262900][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 2025/10/09 18:27:02 executed programs: 3 [ 299.271379][ T374] device veth0_vlan entered promiscuous mode [ 299.282458][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.291774][ T374] device veth1_macvtap entered promiscuous mode [ 299.301113][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.311378][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 423.827225][ T31] INFO: task syz.2.17:372 blocked for more than 122 seconds. [ 423.836030][ T31] Not tainted syzkaller #0 [ 423.841726][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.852775][ T31] task:syz.2.17 state:D stack:25064 pid: 372 ppid: 362 flags:0x00004000 [ 423.863079][ T31] Call Trace: [ 423.867089][ T31] [ 423.871312][ T31] __schedule+0xb6e/0x14c0 [ 423.877400][ T31] ? release_firmware_map_entry+0x190/0x190 [ 423.884072][ T31] ? __kasan_check_write+0x14/0x20 [ 423.890138][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 423.897643][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 423.904604][ T31] schedule+0x11e/0x1e0 [ 423.909456][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 423.915434][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 423.921840][ T31] ? dput+0x47/0x90 [ 423.926422][ T31] ? kasan_save_stack+0x49/0x60 [ 423.933088][ T31] ? kasan_save_stack+0x3a/0x60 [ 423.938962][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 423.945750][ T31] ? call_rcu+0x105/0xfe0 [ 423.950670][ T31] ? __fput+0x5d0/0x8b0 [ 423.955931][ T31] ? ____fput+0x15/0x20 [ 423.961058][ T31] ? task_work_run+0xa1/0x190 [ 423.966294][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 423.971796][ T31] ? rwsem_write_trylock+0x130/0x300 [ 423.977216][ T31] ? clear_nonspinnable+0x60/0x60 [ 423.982401][ T31] ? perf_event_exit_event+0x520/0x520 [ 423.988236][ T31] ? mutex_unlock+0x89/0x220 [ 423.993253][ T31] down_write+0x29/0x30 [ 423.998530][ T31] exit_mmap+0x127/0x860 [ 424.003169][ T31] ? vm_brk+0x30/0x30 [ 424.008163][ T31] ? mutex_unlock+0x89/0x220 [ 424.013148][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 424.018795][ T31] __mmput+0x93/0x320 [ 424.022835][ T31] ? mmput+0x48/0x150 [ 424.027211][ T31] mmput+0x50/0x150 [ 424.032398][ T31] do_exit+0x9d2/0x27a0 [ 424.036947][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 424.043766][ T31] ? put_task_struct+0x90/0x90 [ 424.049417][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 424.055748][ T31] ? ____fput+0x15/0x20 [ 424.060144][ T31] do_group_exit+0x141/0x310 [ 424.065253][ T31] ? debug_smp_processor_id+0x17/0x20 [ 424.070919][ T31] __x64_sys_exit_group+0x3f/0x40 [ 424.076436][ T31] x64_sys_call+0x832/0x9a0 [ 424.081545][ T31] do_syscall_64+0x4c/0xa0 [ 424.086259][ T31] ? clear_bhb_loop+0x50/0xa0 [ 424.091416][ T31] ? clear_bhb_loop+0x50/0xa0 [ 424.096573][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 424.102954][ T31] RIP: 0033:0x7f4414d75ec9 [ 424.109709][ T31] RSP: 002b:00007ffd221c6358 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 424.119291][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4414d75ec9 [ 424.127860][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 424.137754][ T31] RBP: 0000000000000003 R08: 00000005221c644f R09: 00007f4414f98280 [ 424.146225][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 424.155889][ T31] R13: 00007f4414f98280 R14: 0000000000000003 R15: 00007ffd221c6410 [ 424.165497][ T31] [ 424.169401][ T31] INFO: task syz.3.18:384 blocked for more than 123 seconds. [ 424.178001][ T31] Not tainted syzkaller #0 [ 424.183240][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 424.194136][ T31] task:syz.3.18 state:D stack:25528 pid: 384 ppid: 374 flags:0x00004000 [ 424.204904][ T31] Call Trace: [ 424.209139][ T31] [ 424.212197][ T31] __schedule+0xb6e/0x14c0 [ 424.217528][ T31] ? release_firmware_map_entry+0x190/0x190 [ 424.225246][ T31] ? __kasan_check_write+0x14/0x20 [ 424.231605][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 424.237471][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 424.243747][ T31] schedule+0x11e/0x1e0 [ 424.248169][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 424.254732][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 424.260945][ T31] ? dput+0x47/0x90 [ 424.265618][ T31] ? kasan_save_stack+0x49/0x60 [ 424.270790][ T31] ? kasan_save_stack+0x3a/0x60 [ 424.276043][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 424.282091][ T31] ? call_rcu+0x105/0xfe0 [ 424.286638][ T31] ? __fput+0x5d0/0x8b0 [ 424.291290][ T31] ? ____fput+0x15/0x20 [ 424.296764][ T31] ? task_work_run+0xa1/0x190 [ 424.301752][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 424.307884][ T31] ? rwsem_write_trylock+0x130/0x300 [ 424.314703][ T31] ? clear_nonspinnable+0x60/0x60 [ 424.320342][ T31] ? perf_event_exit_event+0x520/0x520 [ 424.326696][ T31] ? mutex_unlock+0x89/0x220 [ 424.331566][ T31] down_write+0x29/0x30 [ 424.335828][ T31] exit_mmap+0x127/0x860 [ 424.340352][ T31] ? vm_brk+0x30/0x30 [ 424.344715][ T31] ? mutex_unlock+0x89/0x220 [ 424.349412][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 424.354953][ T31] __mmput+0x93/0x320 [ 424.359167][ T31] ? mmput+0x48/0x150 [ 424.363264][ T31] mmput+0x50/0x150 [ 424.367147][ T31] do_exit+0x9d2/0x27a0 [ 424.371836][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 424.378099][ T31] ? put_task_struct+0x90/0x90 [ 424.383485][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 424.389554][ T31] do_group_exit+0x141/0x310 [ 424.394964][ T31] __x64_sys_exit_group+0x3f/0x40 [ 424.401457][ T31] x64_sys_call+0x832/0x9a0 [ 424.406431][ T31] do_syscall_64+0x4c/0xa0 [ 424.411244][ T31] ? clear_bhb_loop+0x50/0xa0 [ 424.416548][ T31] ? clear_bhb_loop+0x50/0xa0 [ 424.421409][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 424.427806][ T31] RIP: 0033:0x7fdeadcfdec9 [ 424.433777][ T31] RSP: 002b:00007ffe474613a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 424.447184][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdeadcfdec9 [ 424.455585][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 424.463814][ T31] RBP: 0000000000000003 R08: 000000054746149f R09: 00007fdeadf20280 [ 424.472240][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 424.480428][ T31] R13: 00007fdeadf20280 R14: 0000000000000003 R15: 00007ffe47461460 [ 424.488898][ T31] [ 424.492194][ T31] NMI backtrace for cpu 0 [ 424.496809][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 424.504638][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 424.515086][ T31] Call Trace: [ 424.518470][ T31] [ 424.521398][ T31] __dump_stack+0x21/0x30 [ 424.526149][ T31] dump_stack_lvl+0xee/0x150 [ 424.530866][ T31] ? show_regs_print_info+0x20/0x20 [ 424.536086][ T31] dump_stack+0x15/0x20 [ 424.540583][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 424.546217][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 424.552035][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 424.558468][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 424.563692][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 424.569905][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 424.576290][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 424.582746][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 424.589243][ T31] watchdog+0xd64/0xea0 [ 424.593940][ T31] ? hungtask_pm_notify+0x50/0x50 [ 424.599268][ T31] ? __kasan_check_read+0x11/0x20 [ 424.605047][ T31] ? __kthread_parkme+0xac/0x200 [ 424.610016][ T31] ? preempt_count_add+0x90/0x1b0 [ 424.616679][ T31] kthread+0x411/0x500 [ 424.621128][ T31] ? hungtask_pm_notify+0x50/0x50 [ 424.626386][ T31] ? kthread_blkcg+0xd0/0xd0 [ 424.631104][ T31] ret_from_fork+0x1f/0x30 [ 424.635538][ T31] [ 424.638754][ T31] Sending NMI from CPU 0 to CPUs 1: [ 424.644138][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20 [ 444.946594][ T31] INFO: task syz.2.17:372 blocked for more than 144 seconds. [ 444.954355][ T31] Not tainted syzkaller #0 [ 444.959604][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 444.968559][ T31] task:syz.2.17 state:D stack:25064 pid: 372 ppid: 362 flags:0x00004000 [ 444.978127][ T31] Call Trace: [ 444.981421][ T31] [ 444.984511][ T31] __schedule+0xb6e/0x14c0 [ 444.989176][ T31] ? release_firmware_map_entry+0x190/0x190 [ 444.996303][ T31] ? __kasan_check_write+0x14/0x20 [ 445.002825][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 445.008247][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 445.014290][ T31] schedule+0x11e/0x1e0 [ 445.018689][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 445.024458][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 445.030608][ T31] ? dput+0x47/0x90 [ 445.034683][ T31] ? kasan_save_stack+0x49/0x60 [ 445.039681][ T31] ? kasan_save_stack+0x3a/0x60 [ 445.044794][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 445.050976][ T31] ? call_rcu+0x105/0xfe0 [ 445.055421][ T31] ? __fput+0x5d0/0x8b0 [ 445.059796][ T31] ? ____fput+0x15/0x20 [ 445.064530][ T31] ? task_work_run+0xa1/0x190 [ 445.069832][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 445.075487][ T31] ? rwsem_write_trylock+0x130/0x300 [ 445.081109][ T31] ? clear_nonspinnable+0x60/0x60 [ 445.086166][ T31] ? perf_event_exit_event+0x520/0x520 [ 445.091827][ T31] ? mutex_unlock+0x89/0x220 [ 445.096480][ T31] down_write+0x29/0x30 [ 445.100742][ T31] exit_mmap+0x127/0x860 [ 445.104987][ T31] ? vm_brk+0x30/0x30 [ 445.109689][ T31] ? mutex_unlock+0x89/0x220 [ 445.114939][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 445.120633][ T31] __mmput+0x93/0x320 [ 445.125178][ T31] ? mmput+0x48/0x150 [ 445.130233][ T31] mmput+0x50/0x150 [ 445.134708][ T31] do_exit+0x9d2/0x27a0 [ 445.140201][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 445.146693][ T31] ? put_task_struct+0x90/0x90 [ 445.151930][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 445.157733][ T31] ? ____fput+0x15/0x20 [ 445.161928][ T31] do_group_exit+0x141/0x310 [ 445.166980][ T31] ? debug_smp_processor_id+0x17/0x20 [ 445.172480][ T31] __x64_sys_exit_group+0x3f/0x40 [ 445.177925][ T31] x64_sys_call+0x832/0x9a0 [ 445.182628][ T31] do_syscall_64+0x4c/0xa0 [ 445.187100][ T31] ? clear_bhb_loop+0x50/0xa0 [ 445.191800][ T31] ? clear_bhb_loop+0x50/0xa0 [ 445.196526][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 445.202626][ T31] RIP: 0033:0x7f4414d75ec9 [ 445.207325][ T31] RSP: 002b:00007ffd221c6358 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 445.215957][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4414d75ec9 [ 445.224211][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 445.232659][ T31] RBP: 0000000000000003 R08: 00000005221c644f R09: 00007f4414f98280 [ 445.241294][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 445.249418][ T31] R13: 00007f4414f98280 R14: 0000000000000003 R15: 00007ffd221c6410 [ 445.258135][ T31] [ 445.261306][ T31] INFO: task syz.3.18:384 blocked for more than 144 seconds. [ 445.268722][ T31] Not tainted syzkaller #0 [ 445.273693][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.283101][ T31] task:syz.3.18 state:D stack:25528 pid: 384 ppid: 374 flags:0x00004000 [ 445.292856][ T31] Call Trace: [ 445.296574][ T31] [ 445.299855][ T31] __schedule+0xb6e/0x14c0 [ 445.304468][ T31] ? release_firmware_map_entry+0x190/0x190 [ 445.310521][ T31] ? __kasan_check_write+0x14/0x20 [ 445.317545][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 445.322787][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 445.328915][ T31] schedule+0x11e/0x1e0 [ 445.333611][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 445.340236][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 445.346480][ T31] ? dput+0x47/0x90 [ 445.350485][ T31] ? kasan_save_stack+0x49/0x60 [ 445.355848][ T31] ? kasan_save_stack+0x3a/0x60 [ 445.361212][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 445.367175][ T31] ? call_rcu+0x105/0xfe0 [ 445.371513][ T31] ? __fput+0x5d0/0x8b0 [ 445.375666][ T31] ? ____fput+0x15/0x20 [ 445.380262][ T31] ? task_work_run+0xa1/0x190 [ 445.385187][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 445.390923][ T31] ? rwsem_write_trylock+0x130/0x300 [ 445.396532][ T31] ? clear_nonspinnable+0x60/0x60 [ 445.401668][ T31] ? perf_event_exit_event+0x520/0x520 [ 445.407208][ T31] ? mutex_unlock+0x89/0x220 [ 445.411842][ T31] down_write+0x29/0x30 [ 445.416136][ T31] exit_mmap+0x127/0x860 [ 445.420460][ T31] ? vm_brk+0x30/0x30 [ 445.424670][ T31] ? mutex_unlock+0x89/0x220 [ 445.429333][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 445.434918][ T31] __mmput+0x93/0x320 [ 445.439744][ T31] ? mmput+0x48/0x150 [ 445.444025][ T31] mmput+0x50/0x150 [ 445.448149][ T31] do_exit+0x9d2/0x27a0 [ 445.452351][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 445.458685][ T31] ? put_task_struct+0x90/0x90 [ 445.463857][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 445.469568][ T31] do_group_exit+0x141/0x310 [ 445.474221][ T31] __x64_sys_exit_group+0x3f/0x40 [ 445.479295][ T31] x64_sys_call+0x832/0x9a0 [ 445.484108][ T31] do_syscall_64+0x4c/0xa0 [ 445.488606][ T31] ? clear_bhb_loop+0x50/0xa0 [ 445.493536][ T31] ? clear_bhb_loop+0x50/0xa0 [ 445.498461][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 445.504644][ T31] RIP: 0033:0x7fdeadcfdec9 [ 445.509108][ T31] RSP: 002b:00007ffe474613a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 445.517704][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdeadcfdec9 [ 445.525806][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 445.534112][ T31] RBP: 0000000000000003 R08: 000000054746149f R09: 00007fdeadf20280 [ 445.542583][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 445.551877][ T31] R13: 00007fdeadf20280 R14: 0000000000000003 R15: 00007ffe47461460 [ 445.560419][ T31] [ 445.563629][ T31] NMI backtrace for cpu 0 [ 445.568080][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 445.576096][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 445.586411][ T31] Call Trace: [ 445.589862][ T31] [ 445.592889][ T31] __dump_stack+0x21/0x30 [ 445.598047][ T31] dump_stack_lvl+0xee/0x150 [ 445.602743][ T31] ? show_regs_print_info+0x20/0x20 [ 445.608755][ T31] dump_stack+0x15/0x20 [ 445.612965][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 445.618061][ T31] ? sched_show_task+0x37a/0x540 [ 445.623191][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 445.630167][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 445.636434][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 445.642738][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 445.648934][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 445.654847][ T31] watchdog+0xd64/0xea0 [ 445.659435][ T31] ? hungtask_pm_notify+0x50/0x50 [ 445.664907][ T31] ? __kasan_check_read+0x11/0x20 [ 445.670125][ T31] ? __kthread_parkme+0xac/0x200 [ 445.676042][ T31] ? preempt_count_add+0x90/0x1b0 [ 445.681362][ T31] kthread+0x411/0x500 [ 445.685637][ T31] ? hungtask_pm_notify+0x50/0x50 [ 445.690683][ T31] ? kthread_blkcg+0xd0/0xd0 [ 445.695826][ T31] ret_from_fork+0x1f/0x30 [ 445.700715][ T31] [ 445.704061][ T31] Sending NMI from CPU 0 to CPUs 1: [ 445.709479][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20 [ 466.066690][ T31] INFO: task syz.2.17:372 blocked for more than 165 seconds. [ 466.074201][ T31] Not tainted syzkaller #0 [ 466.079856][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 466.089478][ T31] task:syz.2.17 state:D stack:25064 pid: 372 ppid: 362 flags:0x00004000 [ 466.099115][ T31] Call Trace: [ 466.102450][ T31] [ 466.105497][ T31] __schedule+0xb6e/0x14c0 [ 466.111374][ T31] ? release_firmware_map_entry+0x190/0x190 [ 466.117726][ T31] ? __kasan_check_write+0x14/0x20 [ 466.124011][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 466.129414][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 466.135254][ T31] schedule+0x11e/0x1e0 [ 466.140222][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 466.146005][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 466.152149][ T31] ? dput+0x47/0x90 [ 466.156089][ T31] ? kasan_save_stack+0x49/0x60 [ 466.161215][ T31] ? kasan_save_stack+0x3a/0x60 [ 466.166519][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 466.172463][ T31] ? call_rcu+0x105/0xfe0 [ 466.177223][ T31] ? __fput+0x5d0/0x8b0 [ 466.181988][ T31] ? ____fput+0x15/0x20 [ 466.186559][ T31] ? task_work_run+0xa1/0x190 [ 466.191800][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 466.197551][ T31] ? rwsem_write_trylock+0x130/0x300 [ 466.203242][ T31] ? clear_nonspinnable+0x60/0x60 [ 466.209013][ T31] ? perf_event_exit_event+0x520/0x520 [ 466.215147][ T31] ? mutex_unlock+0x89/0x220 [ 466.220087][ T31] down_write+0x29/0x30 [ 466.224730][ T31] exit_mmap+0x127/0x860 [ 466.229293][ T31] ? vm_brk+0x30/0x30 [ 466.233363][ T31] ? mutex_unlock+0x89/0x220 [ 466.238191][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 466.243419][ T31] __mmput+0x93/0x320 [ 466.247546][ T31] ? mmput+0x48/0x150 [ 466.251655][ T31] mmput+0x50/0x150 [ 466.255485][ T31] do_exit+0x9d2/0x27a0 [ 466.259763][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 466.266199][ T31] ? put_task_struct+0x90/0x90 [ 466.271217][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 466.277429][ T31] ? ____fput+0x15/0x20 [ 466.282282][ T31] do_group_exit+0x141/0x310 [ 466.287388][ T31] ? debug_smp_processor_id+0x17/0x20 [ 466.293283][ T31] __x64_sys_exit_group+0x3f/0x40 [ 466.299417][ T31] x64_sys_call+0x832/0x9a0 [ 466.304694][ T31] do_syscall_64+0x4c/0xa0 [ 466.309207][ T31] ? clear_bhb_loop+0x50/0xa0 [ 466.314422][ T31] ? clear_bhb_loop+0x50/0xa0 [ 466.319422][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 466.325624][ T31] RIP: 0033:0x7f4414d75ec9 [ 466.330195][ T31] RSP: 002b:00007ffd221c6358 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 466.338869][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4414d75ec9 [ 466.348063][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 466.356268][ T31] RBP: 0000000000000003 R08: 00000005221c644f R09: 00007f4414f98280 [ 466.364388][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 466.372898][ T31] R13: 00007f4414f98280 R14: 0000000000000003 R15: 00007ffd221c6410 [ 466.381749][ T31] [ 466.385019][ T31] INFO: task syz.3.18:384 blocked for more than 165 seconds. [ 466.392738][ T31] Not tainted syzkaller #0 [ 466.397727][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 466.406885][ T31] task:syz.3.18 state:D stack:25528 pid: 384 ppid: 374 flags:0x00004000 [ 466.416658][ T31] Call Trace: [ 466.420128][ T31] [ 466.423087][ T31] __schedule+0xb6e/0x14c0 [ 466.427704][ T31] ? release_firmware_map_entry+0x190/0x190 [ 466.433733][ T31] ? __kasan_check_write+0x14/0x20 [ 466.439267][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 466.444527][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 466.450135][ T31] schedule+0x11e/0x1e0 [ 466.454336][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 466.460546][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 466.466955][ T31] ? dput+0x47/0x90 [ 466.470955][ T31] ? kasan_save_stack+0x49/0x60 [ 466.475807][ T31] ? kasan_save_stack+0x3a/0x60 [ 466.480973][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 466.486787][ T31] ? call_rcu+0x105/0xfe0 [ 466.491137][ T31] ? __fput+0x5d0/0x8b0 [ 466.495470][ T31] ? ____fput+0x15/0x20 [ 466.500069][ T31] ? task_work_run+0xa1/0x190 [ 466.504774][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 466.510397][ T31] ? rwsem_write_trylock+0x130/0x300 [ 466.515849][ T31] ? clear_nonspinnable+0x60/0x60 [ 466.521386][ T31] ? perf_event_exit_event+0x520/0x520 [ 466.527087][ T31] ? mutex_unlock+0x89/0x220 [ 466.531929][ T31] down_write+0x29/0x30 [ 466.536276][ T31] exit_mmap+0x127/0x860 [ 466.540975][ T31] ? vm_brk+0x30/0x30 [ 466.545184][ T31] ? mutex_unlock+0x89/0x220 [ 466.549898][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 466.555367][ T31] __mmput+0x93/0x320 [ 466.559579][ T31] ? mmput+0x48/0x150 [ 466.563755][ T31] mmput+0x50/0x150 [ 466.567626][ T31] do_exit+0x9d2/0x27a0 [ 466.572094][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 466.578318][ T31] ? put_task_struct+0x90/0x90 [ 466.583423][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 466.589352][ T31] do_group_exit+0x141/0x310 [ 466.594335][ T31] __x64_sys_exit_group+0x3f/0x40 [ 466.600053][ T31] x64_sys_call+0x832/0x9a0 [ 466.604680][ T31] do_syscall_64+0x4c/0xa0 [ 466.609370][ T31] ? clear_bhb_loop+0x50/0xa0 [ 466.614250][ T31] ? clear_bhb_loop+0x50/0xa0 [ 466.619521][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 466.625844][ T31] RIP: 0033:0x7fdeadcfdec9 [ 466.630343][ T31] RSP: 002b:00007ffe474613a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 466.639281][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdeadcfdec9 [ 466.647394][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 466.655398][ T31] RBP: 0000000000000003 R08: 000000054746149f R09: 00007fdeadf20280 [ 466.663709][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 466.672125][ T31] R13: 00007fdeadf20280 R14: 0000000000000003 R15: 00007ffe47461460 [ 466.680249][ T31] [ 466.683435][ T31] NMI backtrace for cpu 0 [ 466.687945][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 466.695699][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 466.705970][ T31] Call Trace: [ 466.709357][ T31] [ 466.712378][ T31] __dump_stack+0x21/0x30 [ 466.717322][ T31] dump_stack_lvl+0xee/0x150 [ 466.722606][ T31] ? show_regs_print_info+0x20/0x20 [ 466.728609][ T31] dump_stack+0x15/0x20 [ 466.732798][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 466.737900][ T31] ? sched_show_task+0x37a/0x540 [ 466.742943][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 466.749217][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 466.755598][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 466.761981][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 466.768222][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 466.774208][ T31] watchdog+0xd64/0xea0 [ 466.778743][ T31] ? hungtask_pm_notify+0x50/0x50 [ 466.784136][ T31] ? __kasan_check_read+0x11/0x20 [ 466.789400][ T31] ? __kthread_parkme+0xac/0x200 [ 466.795628][ T31] ? preempt_count_add+0x90/0x1b0 [ 466.801165][ T31] kthread+0x411/0x500 [ 466.805629][ T31] ? hungtask_pm_notify+0x50/0x50 [ 466.810799][ T31] ? kthread_blkcg+0xd0/0xd0 [ 466.815933][ T31] ret_from_fork+0x1f/0x30 [ 466.820462][ T31] [ 466.823819][ T31] Sending NMI from CPU 0 to CPUs 1: [ 466.829222][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20 [ 487.186657][ T31] INFO: task syz.2.17:372 blocked for more than 186 seconds. [ 487.194342][ T31] Not tainted syzkaller #0 [ 487.199712][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 487.208812][ T31] task:syz.2.17 state:D stack:25064 pid: 372 ppid: 362 flags:0x00004000 [ 487.218296][ T31] Call Trace: [ 487.221677][ T31] [ 487.224857][ T31] __schedule+0xb6e/0x14c0 [ 487.229417][ T31] ? release_firmware_map_entry+0x190/0x190 [ 487.235597][ T31] ? __kasan_check_write+0x14/0x20 [ 487.240955][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 487.246290][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 487.251913][ T31] schedule+0x11e/0x1e0 [ 487.256280][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 487.262065][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 487.268095][ T31] ? dput+0x47/0x90 [ 487.271913][ T31] ? kasan_save_stack+0x49/0x60 [ 487.277084][ T31] ? kasan_save_stack+0x3a/0x60 [ 487.282047][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 487.288159][ T31] ? call_rcu+0x105/0xfe0 [ 487.292683][ T31] ? __fput+0x5d0/0x8b0 [ 487.296996][ T31] ? ____fput+0x15/0x20 [ 487.302031][ T31] ? task_work_run+0xa1/0x190 [ 487.307024][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 487.313019][ T31] ? rwsem_write_trylock+0x130/0x300 [ 487.318414][ T31] ? clear_nonspinnable+0x60/0x60 [ 487.323588][ T31] ? perf_event_exit_event+0x520/0x520 [ 487.329414][ T31] ? mutex_unlock+0x89/0x220 [ 487.334328][ T31] down_write+0x29/0x30 [ 487.338740][ T31] exit_mmap+0x127/0x860 [ 487.343378][ T31] ? vm_brk+0x30/0x30 [ 487.347492][ T31] ? mutex_unlock+0x89/0x220 [ 487.352312][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 487.357741][ T31] __mmput+0x93/0x320 [ 487.362351][ T31] ? mmput+0x48/0x150 [ 487.366610][ T31] mmput+0x50/0x150 [ 487.370673][ T31] do_exit+0x9d2/0x27a0 [ 487.374964][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 487.381211][ T31] ? put_task_struct+0x90/0x90 [ 487.386011][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 487.392035][ T31] ? ____fput+0x15/0x20 [ 487.396228][ T31] do_group_exit+0x141/0x310 [ 487.401293][ T31] ? debug_smp_processor_id+0x17/0x20 [ 487.407104][ T31] __x64_sys_exit_group+0x3f/0x40 [ 487.412242][ T31] x64_sys_call+0x832/0x9a0 [ 487.417293][ T31] do_syscall_64+0x4c/0xa0 [ 487.422189][ T31] ? clear_bhb_loop+0x50/0xa0 [ 487.427271][ T31] ? clear_bhb_loop+0x50/0xa0 [ 487.432162][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 487.438509][ T31] RIP: 0033:0x7f4414d75ec9 [ 487.442956][ T31] RSP: 002b:00007ffd221c6358 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 487.451871][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4414d75ec9 [ 487.460161][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 487.468557][ T31] RBP: 0000000000000003 R08: 00000005221c644f R09: 00007f4414f98280 [ 487.477032][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 487.485341][ T31] R13: 00007f4414f98280 R14: 0000000000000003 R15: 00007ffd221c6410 [ 487.493395][ T31] [ 487.496860][ T31] INFO: task syz.3.18:384 blocked for more than 186 seconds. [ 487.507692][ T31] Not tainted syzkaller #0 [ 487.513598][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 487.522512][ T31] task:syz.3.18 state:D stack:25528 pid: 384 ppid: 374 flags:0x00004000 [ 487.532771][ T31] Call Trace: [ 487.536803][ T31] [ 487.540039][ T31] __schedule+0xb6e/0x14c0 [ 487.544745][ T31] ? release_firmware_map_entry+0x190/0x190 [ 487.550828][ T31] ? __kasan_check_write+0x14/0x20 [ 487.556032][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 487.561636][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 487.567671][ T31] schedule+0x11e/0x1e0 [ 487.571940][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 487.578061][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 487.585147][ T31] ? dput+0x47/0x90 [ 487.589221][ T31] ? kasan_save_stack+0x49/0x60 [ 487.594918][ T31] ? kasan_save_stack+0x3a/0x60 [ 487.600802][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 487.606963][ T31] ? call_rcu+0x105/0xfe0 [ 487.611495][ T31] ? __fput+0x5d0/0x8b0 [ 487.617076][ T31] ? ____fput+0x15/0x20 [ 487.622856][ T31] ? task_work_run+0xa1/0x190 [ 487.627840][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 487.633805][ T31] ? rwsem_write_trylock+0x130/0x300 [ 487.639543][ T31] ? clear_nonspinnable+0x60/0x60 [ 487.645086][ T31] ? perf_event_exit_event+0x520/0x520 [ 487.652089][ T31] ? mutex_unlock+0x89/0x220 [ 487.657658][ T31] down_write+0x29/0x30 [ 487.662279][ T31] exit_mmap+0x127/0x860 [ 487.667216][ T31] ? vm_brk+0x30/0x30 [ 487.671667][ T31] ? mutex_unlock+0x89/0x220 [ 487.677295][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 487.683506][ T31] __mmput+0x93/0x320 [ 487.688372][ T31] ? mmput+0x48/0x150 [ 487.693829][ T31] mmput+0x50/0x150 [ 487.698523][ T31] do_exit+0x9d2/0x27a0 [ 487.703907][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 487.712119][ T31] ? put_task_struct+0x90/0x90 [ 487.717189][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 487.723805][ T31] do_group_exit+0x141/0x310 [ 487.728671][ T31] __x64_sys_exit_group+0x3f/0x40 [ 487.734278][ T31] x64_sys_call+0x832/0x9a0 [ 487.738861][ T31] do_syscall_64+0x4c/0xa0 [ 487.743313][ T31] ? clear_bhb_loop+0x50/0xa0 [ 487.748209][ T31] ? clear_bhb_loop+0x50/0xa0 [ 487.753282][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 487.759920][ T31] RIP: 0033:0x7fdeadcfdec9 [ 487.764483][ T31] RSP: 002b:00007ffe474613a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 487.773497][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdeadcfdec9 [ 487.782111][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 487.790550][ T31] RBP: 0000000000000003 R08: 000000054746149f R09: 00007fdeadf20280 [ 487.798677][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 487.807708][ T31] R13: 00007fdeadf20280 R14: 0000000000000003 R15: 00007ffe47461460 [ 487.817045][ T31] [ 487.820261][ T31] NMI backtrace for cpu 0 [ 487.824599][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 487.832175][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 487.842832][ T31] Call Trace: [ 487.846527][ T31] [ 487.849572][ T31] __dump_stack+0x21/0x30 [ 487.854140][ T31] dump_stack_lvl+0xee/0x150 [ 487.858936][ T31] ? show_regs_print_info+0x20/0x20 [ 487.864662][ T31] dump_stack+0x15/0x20 [ 487.869466][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 487.874825][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 487.880639][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 487.887183][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 487.892237][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 487.898501][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 487.905051][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 487.911887][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 487.918337][ T31] watchdog+0xd64/0xea0 [ 487.922781][ T31] ? hungtask_pm_notify+0x50/0x50 [ 487.928173][ T31] ? __kasan_check_read+0x11/0x20 [ 487.933837][ T31] ? __kthread_parkme+0xac/0x200 [ 487.939081][ T31] ? preempt_count_add+0x90/0x1b0 [ 487.944470][ T31] kthread+0x411/0x500 [ 487.948553][ T31] ? hungtask_pm_notify+0x50/0x50 [ 487.953586][ T31] ? kthread_blkcg+0xd0/0xd0 [ 487.958268][ T31] ret_from_fork+0x1f/0x30 [ 487.962701][ T31] [ 487.966068][ T31] Sending NMI from CPU 0 to CPUs 1: [ 487.971403][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20 [ 508.306604][ T31] INFO: task syz.2.17:372 blocked for more than 207 seconds. [ 508.314690][ T31] Not tainted syzkaller #0 [ 508.321622][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 508.331931][ T31] task:syz.2.17 state:D stack:25064 pid: 372 ppid: 362 flags:0x00004000 [ 508.342813][ T31] Call Trace: [ 508.346575][ T31] [ 508.349622][ T31] __schedule+0xb6e/0x14c0 [ 508.354362][ T31] ? release_firmware_map_entry+0x190/0x190 [ 508.360957][ T31] ? __kasan_check_write+0x14/0x20 [ 508.366276][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 508.372050][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 508.378151][ T31] schedule+0x11e/0x1e0 [ 508.382772][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 508.388981][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 508.395454][ T31] ? dput+0x47/0x90 [ 508.400122][ T31] ? kasan_save_stack+0x49/0x60 [ 508.406064][ T31] ? kasan_save_stack+0x3a/0x60 [ 508.411517][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 508.418131][ T31] ? call_rcu+0x105/0xfe0 [ 508.422980][ T31] ? __fput+0x5d0/0x8b0 [ 508.428164][ T31] ? ____fput+0x15/0x20 [ 508.432660][ T31] ? task_work_run+0xa1/0x190 [ 508.438529][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 508.444771][ T31] ? rwsem_write_trylock+0x130/0x300 [ 508.450312][ T31] ? clear_nonspinnable+0x60/0x60 [ 508.455463][ T31] ? perf_event_exit_event+0x520/0x520 [ 508.462628][ T31] ? mutex_unlock+0x89/0x220 [ 508.467703][ T31] down_write+0x29/0x30 [ 508.473410][ T31] exit_mmap+0x127/0x860 [ 508.478236][ T31] ? vm_brk+0x30/0x30 [ 508.482471][ T31] ? mutex_unlock+0x89/0x220 [ 508.487374][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 508.493932][ T31] __mmput+0x93/0x320 [ 508.499272][ T31] ? mmput+0x48/0x150 [ 508.504093][ T31] mmput+0x50/0x150 [ 508.509190][ T31] do_exit+0x9d2/0x27a0 [ 508.514569][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 508.521734][ T31] ? put_task_struct+0x90/0x90 [ 508.527375][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 508.533892][ T31] ? ____fput+0x15/0x20 [ 508.538447][ T31] do_group_exit+0x141/0x310 [ 508.543188][ T31] ? debug_smp_processor_id+0x17/0x20 [ 508.548711][ T31] __x64_sys_exit_group+0x3f/0x40 [ 508.553958][ T31] x64_sys_call+0x832/0x9a0 [ 508.558679][ T31] do_syscall_64+0x4c/0xa0 [ 508.563122][ T31] ? clear_bhb_loop+0x50/0xa0 [ 508.567855][ T31] ? clear_bhb_loop+0x50/0xa0 [ 508.572838][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 508.579071][ T31] RIP: 0033:0x7f4414d75ec9 [ 508.583745][ T31] RSP: 002b:00007ffd221c6358 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 508.592623][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4414d75ec9 [ 508.601065][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 508.609389][ T31] RBP: 0000000000000003 R08: 00000005221c644f R09: 00007f4414f98280 [ 508.618479][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 508.626789][ T31] R13: 00007f4414f98280 R14: 0000000000000003 R15: 00007ffd221c6410 [ 508.634948][ T31] [ 508.638049][ T31] INFO: task syz.3.18:384 blocked for more than 207 seconds. [ 508.645904][ T31] Not tainted syzkaller #0 [ 508.650893][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 508.659899][ T31] task:syz.3.18 state:D stack:25528 pid: 384 ppid: 374 flags:0x00004000 [ 508.669348][ T31] Call Trace: [ 508.672818][ T31] [ 508.675880][ T31] __schedule+0xb6e/0x14c0 [ 508.680462][ T31] ? release_firmware_map_entry+0x190/0x190 [ 508.686488][ T31] ? __kasan_check_write+0x14/0x20 [ 508.691678][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 508.697014][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 508.702745][ T31] schedule+0x11e/0x1e0 [ 508.707062][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 508.716996][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 508.723226][ T31] ? dput+0x47/0x90 [ 508.727134][ T31] ? kasan_save_stack+0x49/0x60 [ 508.732459][ T31] ? kasan_save_stack+0x3a/0x60 [ 508.737467][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 508.743314][ T31] ? call_rcu+0x105/0xfe0 [ 508.747925][ T31] ? __fput+0x5d0/0x8b0 [ 508.752224][ T31] ? ____fput+0x15/0x20 [ 508.756564][ T31] ? task_work_run+0xa1/0x190 [ 508.761721][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 508.767311][ T31] ? rwsem_write_trylock+0x130/0x300 [ 508.772901][ T31] ? clear_nonspinnable+0x60/0x60 [ 508.778122][ T31] ? perf_event_exit_event+0x520/0x520 [ 508.783739][ T31] ? mutex_unlock+0x89/0x220 [ 508.788602][ T31] down_write+0x29/0x30 [ 508.793347][ T31] exit_mmap+0x127/0x860 [ 508.798357][ T31] ? vm_brk+0x30/0x30 [ 508.802609][ T31] ? mutex_unlock+0x89/0x220 [ 508.807279][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 508.812601][ T31] __mmput+0x93/0x320 [ 508.816737][ T31] ? mmput+0x48/0x150 [ 508.820983][ T31] mmput+0x50/0x150 [ 508.824920][ T31] do_exit+0x9d2/0x27a0 [ 508.829153][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 508.835384][ T31] ? put_task_struct+0x90/0x90 [ 508.840221][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 508.845895][ T31] do_group_exit+0x141/0x310 [ 508.850936][ T31] __x64_sys_exit_group+0x3f/0x40 [ 508.856392][ T31] x64_sys_call+0x832/0x9a0 [ 508.861303][ T31] do_syscall_64+0x4c/0xa0 [ 508.865846][ T31] ? clear_bhb_loop+0x50/0xa0 [ 508.870766][ T31] ? clear_bhb_loop+0x50/0xa0 [ 508.875631][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 508.882046][ T31] RIP: 0033:0x7fdeadcfdec9 [ 508.886710][ T31] RSP: 002b:00007ffe474613a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 508.896157][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdeadcfdec9 [ 508.904412][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 508.912536][ T31] RBP: 0000000000000003 R08: 000000054746149f R09: 00007fdeadf20280 [ 508.920644][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 508.928694][ T31] R13: 00007fdeadf20280 R14: 0000000000000003 R15: 00007ffe47461460 [ 508.936829][ T31] [ 508.940003][ T31] NMI backtrace for cpu 0 [ 508.944411][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 508.952080][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 508.962148][ T31] Call Trace: [ 508.965515][ T31] [ 508.968512][ T31] __dump_stack+0x21/0x30 [ 508.972947][ T31] dump_stack_lvl+0xee/0x150 [ 508.977812][ T31] ? show_regs_print_info+0x20/0x20 [ 508.983216][ T31] dump_stack+0x15/0x20 [ 508.987461][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 508.992574][ T31] ? sched_show_task+0x37a/0x540 [ 508.998074][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 509.004651][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 509.010908][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 509.016995][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 509.023072][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 509.028987][ T31] watchdog+0xd64/0xea0 [ 509.033433][ T31] ? hungtask_pm_notify+0x50/0x50 [ 509.038935][ T31] ? __kasan_check_read+0x11/0x20 [ 509.044147][ T31] ? __kthread_parkme+0xac/0x200 [ 509.049309][ T31] ? preempt_count_add+0x90/0x1b0 [ 509.054820][ T31] kthread+0x411/0x500 [ 509.059017][ T31] ? hungtask_pm_notify+0x50/0x50 [ 509.064358][ T31] ? kthread_blkcg+0xd0/0xd0 [ 509.069127][ T31] ret_from_fork+0x1f/0x30 [ 509.073565][ T31] [ 509.077024][ T31] Sending NMI from CPU 0 to CPUs 1: [ 509.082450][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20