Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts. 2026/01/10 15:57:18 parsed 1 programs [ 414.137973][ T30] audit: type=1400 audit(1768060638.010:64): avc: denied { node_bind } for pid=282 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 414.158870][ T30] audit: type=1400 audit(1768060638.010:65): avc: denied { module_request } for pid=282 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 415.140124][ T30] audit: type=1400 audit(1768060639.010:66): avc: denied { mounton } for pid=289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 415.144754][ T289] cgroup: Unknown subsys name 'net' [ 415.163826][ T30] audit: type=1400 audit(1768060639.010:67): avc: denied { mount } for pid=289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 415.190272][ T30] audit: type=1400 audit(1768060639.040:68): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 415.190840][ T289] cgroup: Unknown subsys name 'devices' [ 415.398706][ T289] cgroup: Unknown subsys name 'hugetlb' [ 415.404324][ T289] cgroup: Unknown subsys name 'rlimit' [ 415.641015][ T30] audit: type=1400 audit(1768060639.510:69): avc: denied { setattr } for pid=289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 415.664352][ T30] audit: type=1400 audit(1768060639.510:70): avc: denied { create } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 415.685100][ T30] audit: type=1400 audit(1768060639.510:71): avc: denied { write } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 415.704750][ T292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 415.705701][ T30] audit: type=1400 audit(1768060639.510:72): avc: denied { read } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 415.734256][ T30] audit: type=1400 audit(1768060639.510:73): avc: denied { mounton } for pid=289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 415.766374][ T289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 416.188409][ T294] request_module fs-gadgetfs succeeded, but still no fs? [ 416.748143][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.755203][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.762737][ T331] device bridge_slave_0 entered promiscuous mode [ 416.769751][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.776885][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.784228][ T331] device bridge_slave_1 entered promiscuous mode [ 416.839057][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.846180][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.853668][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.860800][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.882288][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.889798][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.897623][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 416.905082][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 416.914116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 416.922338][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.929397][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.938110][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 416.946341][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.953499][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.965779][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 416.978580][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 416.992088][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 417.003313][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 417.011603][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 417.019147][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 417.032214][ T331] device veth0_vlan entered promiscuous mode [ 417.049239][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 417.062331][ T331] device veth1_macvtap entered promiscuous mode [ 417.071743][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 417.081459][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 417.124430][ T331] syz-executor (331) used greatest stack depth: 21664 bytes left 2026/01/10 15:57:21 executed programs: 0 [ 417.663491][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.670822][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.678378][ T363] device bridge_slave_0 entered promiscuous mode [ 417.685730][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.692864][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.700353][ T363] device bridge_slave_1 entered promiscuous mode [ 417.774865][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 417.782355][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 417.796418][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 417.804768][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 417.813678][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.820759][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.828638][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 417.838212][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 417.846780][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 417.854891][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.862052][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.880683][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 417.888874][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 417.897776][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 417.905898][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 417.928022][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 417.936406][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 417.954983][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 417.962974][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 417.971203][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 417.978857][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 417.988595][ T363] device veth0_vlan entered promiscuous mode [ 417.998971][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 418.007255][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 418.016568][ T363] device veth1_macvtap entered promiscuous mode [ 418.025389][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 418.035427][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 418.043957][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 418.053242][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 418.061515][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 418.277280][ T45] device bridge_slave_1 left promiscuous mode [ 418.283517][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.291488][ T45] device bridge_slave_0 left promiscuous mode [ 418.297951][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.306562][ T45] device veth1_macvtap left promiscuous mode [ 418.312614][ T45] device veth0_vlan left promiscuous mode [ 433.149819][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.157116][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.164478][ T375] device bridge_slave_0 entered promiscuous mode [ 433.171624][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.178707][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.186197][ T375] device bridge_slave_1 entered promiscuous mode [ 433.241060][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.248158][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.255416][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.262494][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.283767][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.291097][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.298958][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 433.306600][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 433.315568][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 433.323898][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.330951][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.340275][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 433.348612][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.355681][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.368388][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 433.377967][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 433.393848][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 433.405694][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 433.414052][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 433.421767][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 433.430161][ T375] device veth0_vlan entered promiscuous mode 2026/01/10 15:57:37 executed programs: 3 [ 433.440725][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 433.449885][ T375] device veth1_macvtap entered promiscuous mode [ 433.462053][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 433.472160][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 448.557540][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.564623][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.572069][ T388] device bridge_slave_0 entered promiscuous mode [ 448.578956][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.585986][ T388] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.593631][ T388] device bridge_slave_1 entered promiscuous mode [ 448.653708][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.660824][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.668158][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.675225][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.696720][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.704145][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.711925][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 448.719714][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 448.729108][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 448.737488][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.744522][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.753534][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 448.761770][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.768874][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.781461][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 448.790756][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 448.806939][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 448.822435][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 448.830723][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 448.838475][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 448.847239][ T388] device veth0_vlan entered promiscuous mode 2026/01/10 15:57:52 executed programs: 4 [ 448.857737][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 448.867209][ T388] device veth1_macvtap entered promiscuous mode [ 448.877326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 448.887724][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 558.156167][ T31] INFO: task syz.2.17:373 blocked for more than 122 seconds. [ 558.163565][ T31] Not tainted syzkaller #0 [ 558.168588][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 558.177348][ T31] task:syz.2.17 state:D stack:25824 pid: 373 ppid: 363 flags:0x00004000 [ 558.186656][ T31] Call Trace: [ 558.189949][ T31] [ 558.192878][ T31] __schedule+0xb6e/0x14c0 [ 558.197361][ T31] ? release_firmware_map_entry+0x190/0x190 [ 558.203274][ T31] ? __kasan_check_write+0x14/0x20 [ 558.208436][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 558.213480][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 558.219075][ T31] schedule+0x11e/0x1e0 [ 558.223246][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 558.229112][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 558.235017][ T31] ? dput+0x47/0x90 [ 558.238862][ T31] ? kasan_save_stack+0x49/0x60 [ 558.243723][ T31] ? kasan_save_stack+0x3a/0x60 [ 558.248752][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 558.254438][ T31] ? call_rcu+0x105/0xfe0 [ 558.258845][ T31] ? __fput+0x590/0x8b0 [ 558.263031][ T31] ? ____fput+0x15/0x20 [ 558.267249][ T31] ? task_work_run+0x121/0x190 [ 558.272036][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 558.277473][ T31] ? rwsem_write_trylock+0x130/0x300 [ 558.282787][ T31] ? clear_nonspinnable+0x60/0x60 [ 558.287868][ T31] ? perf_event_exit_event+0x520/0x520 [ 558.293344][ T31] ? mutex_unlock+0x89/0x220 [ 558.298146][ T31] down_write+0x29/0x30 [ 558.302332][ T31] exit_mmap+0x127/0x860 [ 558.306641][ T31] ? vm_brk+0x30/0x30 [ 558.310647][ T31] ? mutex_unlock+0x89/0x220 [ 558.315242][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 558.320516][ T31] __mmput+0x93/0x320 [ 558.324523][ T31] ? mmput+0x48/0x150 [ 558.328557][ T31] mmput+0x50/0x150 [ 558.332379][ T31] do_exit+0x9d2/0x27a0 [ 558.336584][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 558.342789][ T31] ? put_task_struct+0x90/0x90 [ 558.347605][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 558.353250][ T31] ? ____fput+0x15/0x20 [ 558.357461][ T31] do_group_exit+0x141/0x310 [ 558.362343][ T31] ? debug_smp_processor_id+0x17/0x20 [ 558.367757][ T31] __x64_sys_exit_group+0x3f/0x40 [ 558.372821][ T31] x64_sys_call+0x832/0x9a0 [ 558.377394][ T31] do_syscall_64+0x4c/0xa0 [ 558.381836][ T31] ? clear_bhb_loop+0x50/0xa0 [ 558.386566][ T31] ? clear_bhb_loop+0x50/0xa0 [ 558.391346][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 558.397412][ T31] RIP: 0033:0x7f9b058e8749 [ 558.401846][ T31] RSP: 002b:00007ffefdb1ff68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 558.410310][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b058e8749 [ 558.418394][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 558.426401][ T31] RBP: 0000000000000003 R08: 00000005fdb2005f R09: 00007f9b05b0d280 [ 558.434388][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 558.442411][ T31] R13: 00007f9b05b0d280 R14: 0000000000000003 R15: 00007ffefdb20020 [ 558.450417][ T31] [ 558.453437][ T31] INFO: task syz.3.18:385 blocked for more than 123 seconds. [ 558.460857][ T31] Not tainted syzkaller #0 [ 558.465822][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 558.474532][ T31] task:syz.3.18 state:D stack:25528 pid: 385 ppid: 375 flags:0x00004000 [ 558.484059][ T31] Call Trace: [ 558.487429][ T31] [ 558.490393][ T31] __schedule+0xb6e/0x14c0 [ 558.494858][ T31] ? release_firmware_map_entry+0x190/0x190 [ 558.500825][ T31] ? __kasan_check_write+0x14/0x20 [ 558.505960][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 558.511151][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 558.516741][ T31] schedule+0x11e/0x1e0 [ 558.520994][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 558.526776][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 558.532689][ T31] ? dput+0x47/0x90 [ 558.536546][ T31] ? kasan_save_stack+0x49/0x60 [ 558.541407][ T31] ? kasan_save_stack+0x3a/0x60 [ 558.546303][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 558.551955][ T31] ? call_rcu+0x105/0xfe0 [ 558.556338][ T31] ? __fput+0x590/0x8b0 [ 558.560539][ T31] ? ____fput+0x15/0x20 [ 558.564687][ T31] ? task_work_run+0x121/0x190 [ 558.569541][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 558.575055][ T31] ? rwsem_write_trylock+0x130/0x300 [ 558.580417][ T31] ? clear_nonspinnable+0x60/0x60 [ 558.585465][ T31] ? perf_event_exit_event+0x520/0x520 [ 558.591024][ T31] ? mutex_unlock+0x89/0x220 [ 558.595733][ T31] down_write+0x29/0x30 [ 558.599951][ T31] exit_mmap+0x127/0x860 [ 558.604222][ T31] ? vm_brk+0x30/0x30 [ 558.608273][ T31] ? mutex_unlock+0x89/0x220 [ 558.612983][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 558.618244][ T31] __mmput+0x93/0x320 [ 558.622249][ T31] ? mmput+0x48/0x150 [ 558.626280][ T31] mmput+0x50/0x150 [ 558.630108][ T31] do_exit+0x9d2/0x27a0 [ 558.634283][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 558.640406][ T31] ? put_task_struct+0x90/0x90 [ 558.645193][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 558.650889][ T31] do_group_exit+0x141/0x310 [ 558.655501][ T31] __x64_sys_exit_group+0x3f/0x40 [ 558.660582][ T31] x64_sys_call+0x832/0x9a0 [ 558.665110][ T31] do_syscall_64+0x4c/0xa0 [ 558.669626][ T31] ? clear_bhb_loop+0x50/0xa0 [ 558.674522][ T31] ? clear_bhb_loop+0x50/0xa0 [ 558.679309][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 558.685225][ T31] RIP: 0033:0x7fa1d36c5749 [ 558.689917][ T31] RSP: 002b:00007ffcd2395ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 558.698435][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa1d36c5749 [ 558.706462][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 558.714436][ T31] RBP: 0000000000000003 R08: 00000005d2395bdf R09: 00007fa1d38ea280 [ 558.722669][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 558.730695][ T31] R13: 00007fa1d38ea280 R14: 0000000000000003 R15: 00007ffcd2395ba0 [ 558.738736][ T31] [ 558.741792][ T31] NMI backtrace for cpu 1 [ 558.746118][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 558.753304][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 558.763352][ T31] Call Trace: [ 558.766631][ T31] [ 558.769556][ T31] __dump_stack+0x21/0x30 [ 558.773885][ T31] dump_stack_lvl+0xee/0x150 [ 558.778477][ T31] ? show_regs_print_info+0x20/0x20 [ 558.783671][ T31] dump_stack+0x15/0x20 [ 558.787821][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 558.792879][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 558.798437][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 558.804594][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 558.809532][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 558.815761][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 558.821833][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 558.827815][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 558.833703][ T31] watchdog+0xd64/0xea0 [ 558.837864][ T31] ? hungtask_pm_notify+0x50/0x50 [ 558.842890][ T31] ? __kasan_check_read+0x11/0x20 [ 558.847962][ T31] ? __kthread_parkme+0xac/0x200 [ 558.852902][ T31] ? preempt_count_add+0x90/0x1b0 [ 558.857932][ T31] kthread+0x411/0x500 [ 558.862002][ T31] ? hungtask_pm_notify+0x50/0x50 [ 558.867023][ T31] ? kthread_blkcg+0xd0/0xd0 [ 558.871611][ T31] ret_from_fork+0x1f/0x30 [ 558.876051][ T31] [ 558.879157][ T31] Sending NMI from CPU 1 to CPUs 0: [ 558.884424][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xf/0x20 [ 579.276335][ T31] INFO: task syz.2.17:373 blocked for more than 144 seconds. [ 579.283753][ T31] Not tainted syzkaller #0 [ 579.288982][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 579.297736][ T31] task:syz.2.17 state:D stack:25824 pid: 373 ppid: 363 flags:0x00004000 [ 579.307000][ T31] Call Trace: [ 579.310299][ T31] [ 579.313240][ T31] __schedule+0xb6e/0x14c0 [ 579.317726][ T31] ? release_firmware_map_entry+0x190/0x190 [ 579.323636][ T31] ? __kasan_check_write+0x14/0x20 [ 579.328797][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 579.333842][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 579.339436][ T31] schedule+0x11e/0x1e0 [ 579.343605][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 579.349382][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 579.355294][ T31] ? dput+0x47/0x90 [ 579.359200][ T31] ? kasan_save_stack+0x49/0x60 [ 579.364078][ T31] ? kasan_save_stack+0x3a/0x60 [ 579.369030][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 579.374730][ T31] ? call_rcu+0x105/0xfe0 [ 579.379121][ T31] ? __fput+0x590/0x8b0 [ 579.383303][ T31] ? ____fput+0x15/0x20 [ 579.387560][ T31] ? task_work_run+0x121/0x190 [ 579.392376][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 579.397806][ T31] ? rwsem_write_trylock+0x130/0x300 [ 579.403109][ T31] ? clear_nonspinnable+0x60/0x60 [ 579.408305][ T31] ? perf_event_exit_event+0x520/0x520 [ 579.413802][ T31] ? mutex_unlock+0x89/0x220 [ 579.418460][ T31] down_write+0x29/0x30 [ 579.422634][ T31] exit_mmap+0x127/0x860 [ 579.427038][ T31] ? vm_brk+0x30/0x30 [ 579.431036][ T31] ? mutex_unlock+0x89/0x220 [ 579.435627][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 579.440902][ T31] __mmput+0x93/0x320 [ 579.444910][ T31] ? mmput+0x48/0x150 [ 579.448973][ T31] mmput+0x50/0x150 [ 579.452803][ T31] do_exit+0x9d2/0x27a0 [ 579.457020][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 579.463279][ T31] ? put_task_struct+0x90/0x90 [ 579.468143][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 579.473810][ T31] ? ____fput+0x15/0x20 [ 579.478035][ T31] do_group_exit+0x141/0x310 [ 579.482646][ T31] ? debug_smp_processor_id+0x17/0x20 [ 579.488142][ T31] __x64_sys_exit_group+0x3f/0x40 [ 579.493215][ T31] x64_sys_call+0x832/0x9a0 [ 579.497993][ T31] do_syscall_64+0x4c/0xa0 [ 579.502440][ T31] ? clear_bhb_loop+0x50/0xa0 [ 579.507186][ T31] ? clear_bhb_loop+0x50/0xa0 [ 579.511919][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 579.517915][ T31] RIP: 0033:0x7f9b058e8749 [ 579.522467][ T31] RSP: 002b:00007ffefdb1ff68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 579.530967][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b058e8749 [ 579.538973][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 579.546998][ T31] RBP: 0000000000000003 R08: 00000005fdb2005f R09: 00007f9b05b0d280 [ 579.555000][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 579.563024][ T31] R13: 00007f9b05b0d280 R14: 0000000000000003 R15: 00007ffefdb20020 [ 579.571038][ T31] [ 579.574063][ T31] INFO: task syz.3.18:385 blocked for more than 144 seconds. [ 579.581470][ T31] Not tainted syzkaller #0 [ 579.586436][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 579.595102][ T31] task:syz.3.18 state:D stack:25528 pid: 385 ppid: 375 flags:0x00004000 [ 579.604358][ T31] Call Trace: [ 579.607679][ T31] [ 579.610610][ T31] __schedule+0xb6e/0x14c0 [ 579.615025][ T31] ? release_firmware_map_entry+0x190/0x190 [ 579.620983][ T31] ? __kasan_check_write+0x14/0x20 [ 579.626131][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 579.631157][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 579.636752][ T31] schedule+0x11e/0x1e0 [ 579.640922][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 579.646695][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 579.652636][ T31] ? dput+0x47/0x90 [ 579.656512][ T31] ? kasan_save_stack+0x49/0x60 [ 579.661383][ T31] ? kasan_save_stack+0x3a/0x60 [ 579.666302][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 579.671952][ T31] ? call_rcu+0x105/0xfe0 [ 579.676339][ T31] ? __fput+0x590/0x8b0 [ 579.680518][ T31] ? ____fput+0x15/0x20 [ 579.684676][ T31] ? task_work_run+0x121/0x190 [ 579.689510][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 579.694914][ T31] ? rwsem_write_trylock+0x130/0x300 [ 579.700257][ T31] ? clear_nonspinnable+0x60/0x60 [ 579.705303][ T31] ? perf_event_exit_event+0x520/0x520 [ 579.710813][ T31] ? mutex_unlock+0x89/0x220 [ 579.715421][ T31] down_write+0x29/0x30 [ 579.719646][ T31] exit_mmap+0x127/0x860 [ 579.723913][ T31] ? vm_brk+0x30/0x30 [ 579.727974][ T31] ? mutex_unlock+0x89/0x220 [ 579.732587][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 579.737846][ T31] __mmput+0x93/0x320 [ 579.741846][ T31] ? mmput+0x48/0x150 [ 579.745827][ T31] mmput+0x50/0x150 [ 579.749691][ T31] do_exit+0x9d2/0x27a0 [ 579.753866][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 579.760142][ T31] ? put_task_struct+0x90/0x90 [ 579.764931][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 579.770616][ T31] do_group_exit+0x141/0x310 [ 579.775234][ T31] __x64_sys_exit_group+0x3f/0x40 [ 579.780302][ T31] x64_sys_call+0x832/0x9a0 [ 579.784823][ T31] do_syscall_64+0x4c/0xa0 [ 579.789293][ T31] ? clear_bhb_loop+0x50/0xa0 [ 579.793985][ T31] ? clear_bhb_loop+0x50/0xa0 [ 579.798693][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 579.804624][ T31] RIP: 0033:0x7fa1d36c5749 [ 579.809092][ T31] RSP: 002b:00007ffcd2395ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 579.817622][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa1d36c5749 [ 579.825622][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 579.833680][ T31] RBP: 0000000000000003 R08: 00000005d2395bdf R09: 00007fa1d38ea280 [ 579.841689][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 579.849763][ T31] R13: 00007fa1d38ea280 R14: 0000000000000003 R15: 00007ffcd2395ba0 [ 579.857801][ T31] [ 579.860829][ T31] INFO: task syz.4.19:398 blocked for more than 124 seconds. [ 579.868263][ T31] Not tainted syzkaller #0 [ 579.873217][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 579.881951][ T31] task:syz.4.19 state:D stack:25288 pid: 398 ppid: 388 flags:0x00004000 [ 579.891201][ T31] Call Trace: [ 579.894507][ T31] [ 579.897503][ T31] __schedule+0xb6e/0x14c0 [ 579.901946][ T31] ? release_firmware_map_entry+0x190/0x190 [ 579.907905][ T31] ? __kasan_check_write+0x14/0x20 [ 579.913043][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 579.918189][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 579.923825][ T31] schedule+0x11e/0x1e0 [ 579.928049][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 579.933818][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 579.939794][ T31] ? dput+0x47/0x90 [ 579.943631][ T31] ? kasan_save_stack+0x49/0x60 [ 579.948544][ T31] ? kasan_save_stack+0x3a/0x60 [ 579.953416][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 579.959104][ T31] ? call_rcu+0x105/0xfe0 [ 579.963450][ T31] ? __fput+0x590/0x8b0 [ 579.967659][ T31] ? ____fput+0x15/0x20 [ 579.971832][ T31] ? task_work_run+0x121/0x190 [ 579.976648][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 579.982130][ T31] ? rwsem_write_trylock+0x130/0x300 [ 579.987474][ T31] ? clear_nonspinnable+0x60/0x60 [ 579.992523][ T31] ? perf_event_exit_event+0x520/0x520 [ 579.998026][ T31] ? mutex_unlock+0x89/0x220 [ 580.002640][ T31] down_write+0x29/0x30 [ 580.006980][ T31] exit_mmap+0x127/0x860 [ 580.011260][ T31] ? vm_brk+0x30/0x30 [ 580.015241][ T31] ? mutex_unlock+0x89/0x220 [ 580.019914][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 580.025136][ T31] __mmput+0x93/0x320 [ 580.029193][ T31] ? mmput+0x48/0x150 [ 580.033201][ T31] mmput+0x50/0x150 [ 580.037074][ T31] do_exit+0x9d2/0x27a0 [ 580.041268][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 580.047400][ T31] ? put_task_struct+0x90/0x90 [ 580.052183][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 580.057879][ T31] ? ____fput+0x15/0x20 [ 580.062056][ T31] do_group_exit+0x141/0x310 [ 580.066698][ T31] ? debug_smp_processor_id+0x17/0x20 [ 580.072087][ T31] __x64_sys_exit_group+0x3f/0x40 [ 580.077258][ T31] x64_sys_call+0x832/0x9a0 [ 580.081783][ T31] do_syscall_64+0x4c/0xa0 [ 580.086282][ T31] ? clear_bhb_loop+0x50/0xa0 [ 580.090974][ T31] ? clear_bhb_loop+0x50/0xa0 [ 580.095651][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 580.101611][ T31] RIP: 0033:0x7f6c9aa35749 [ 580.106060][ T31] RSP: 002b:00007ffff5fd1818 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 580.114472][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c9aa35749 [ 580.122495][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 580.130500][ T31] RBP: 0000000000000003 R08: 00000005f5fd190f R09: 00007f6c9ac5a280 [ 580.138528][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 580.146539][ T31] R13: 00007f6c9ac5a280 R14: 0000000000000003 R15: 00007ffff5fd18d0 [ 580.154862][ T31] [ 580.157941][ T31] NMI backtrace for cpu 1 [ 580.162280][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 580.169470][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 580.179519][ T31] Call Trace: [ 580.182790][ T31] [ 580.185735][ T31] __dump_stack+0x21/0x30 [ 580.190062][ T31] dump_stack_lvl+0xee/0x150 [ 580.194654][ T31] ? show_regs_print_info+0x20/0x20 [ 580.199876][ T31] dump_stack+0x15/0x20 [ 580.204027][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 580.208962][ T31] ? sched_show_task+0x37a/0x540 [ 580.213894][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 580.220052][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 580.226113][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 580.232177][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 580.238165][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 580.244055][ T31] watchdog+0xd64/0xea0 [ 580.248205][ T31] ? hungtask_pm_notify+0x50/0x50 [ 580.253245][ T31] ? __kasan_check_read+0x11/0x20 [ 580.258265][ T31] ? __kthread_parkme+0xac/0x200 [ 580.263195][ T31] ? preempt_count_add+0x90/0x1b0 [ 580.268229][ T31] kthread+0x411/0x500 [ 580.272289][ T31] ? hungtask_pm_notify+0x50/0x50 [ 580.277304][ T31] ? kthread_blkcg+0xd0/0xd0 [ 580.281903][ T31] ret_from_fork+0x1f/0x30 [ 580.286322][ T31] [ 580.289419][ T31] Sending NMI from CPU 1 to CPUs 0: [ 580.294663][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xf/0x20 [ 600.396173][ T31] INFO: task syz.2.17:373 blocked for more than 165 seconds. [ 600.403576][ T31] Not tainted syzkaller #0 [ 600.408594][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 600.417305][ T31] task:syz.2.17 state:D stack:25824 pid: 373 ppid: 363 flags:0x00004000 [ 600.426576][ T31] Call Trace: [ 600.429883][ T31] [ 600.432817][ T31] __schedule+0xb6e/0x14c0 [ 600.437293][ T31] ? release_firmware_map_entry+0x190/0x190 [ 600.443226][ T31] ? __kasan_check_write+0x14/0x20 [ 600.448596][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 600.453712][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 600.459347][ T31] schedule+0x11e/0x1e0 [ 600.463528][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 600.469359][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 600.475289][ T31] ? dput+0x47/0x90 [ 600.479372][ T31] ? kasan_save_stack+0x49/0x60 [ 600.484256][ T31] ? kasan_save_stack+0x3a/0x60 [ 600.489269][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 600.495017][ T31] ? call_rcu+0x105/0xfe0 [ 600.499453][ T31] ? __fput+0x590/0x8b0 [ 600.503641][ T31] ? ____fput+0x15/0x20 [ 600.507855][ T31] ? task_work_run+0x121/0x190 [ 600.512640][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 600.518087][ T31] ? rwsem_write_trylock+0x130/0x300 [ 600.523396][ T31] ? clear_nonspinnable+0x60/0x60 [ 600.528471][ T31] ? perf_event_exit_event+0x520/0x520 [ 600.533946][ T31] ? mutex_unlock+0x89/0x220 [ 600.538599][ T31] down_write+0x29/0x30 [ 600.542776][ T31] exit_mmap+0x127/0x860 [ 600.547099][ T31] ? vm_brk+0x30/0x30 [ 600.551106][ T31] ? mutex_unlock+0x89/0x220 [ 600.555701][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 600.561134][ T31] __mmput+0x93/0x320 [ 600.565149][ T31] ? mmput+0x48/0x150 [ 600.569211][ T31] mmput+0x50/0x150 [ 600.573047][ T31] do_exit+0x9d2/0x27a0 [ 600.577294][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 600.583389][ T31] ? put_task_struct+0x90/0x90 [ 600.588475][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 600.594262][ T31] ? ____fput+0x15/0x20 [ 600.598507][ T31] do_group_exit+0x141/0x310 [ 600.603138][ T31] ? debug_smp_processor_id+0x17/0x20 [ 600.608579][ T31] __x64_sys_exit_group+0x3f/0x40 [ 600.613648][ T31] x64_sys_call+0x832/0x9a0 [ 600.618214][ T31] do_syscall_64+0x4c/0xa0 [ 600.622678][ T31] ? clear_bhb_loop+0x50/0xa0 [ 600.627425][ T31] ? clear_bhb_loop+0x50/0xa0 [ 600.632130][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 600.638100][ T31] RIP: 0033:0x7f9b058e8749 [ 600.642531][ T31] RSP: 002b:00007ffefdb1ff68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 600.651014][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b058e8749 [ 600.659021][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 600.667052][ T31] RBP: 0000000000000003 R08: 00000005fdb2005f R09: 00007f9b05b0d280 [ 600.675053][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 600.683076][ T31] R13: 00007f9b05b0d280 R14: 0000000000000003 R15: 00007ffefdb20020 [ 600.691361][ T31] [ 600.694432][ T31] INFO: task syz.3.18:385 blocked for more than 165 seconds. [ 600.701875][ T31] Not tainted syzkaller #0 [ 600.706853][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 600.715517][ T31] task:syz.3.18 state:D stack:25528 pid: 385 ppid: 375 flags:0x00004000 [ 600.724772][ T31] Call Trace: [ 600.728082][ T31] [ 600.731015][ T31] __schedule+0xb6e/0x14c0 [ 600.735430][ T31] ? release_firmware_map_entry+0x190/0x190 [ 600.741378][ T31] ? __kasan_check_write+0x14/0x20 [ 600.746530][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 600.751555][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 600.757170][ T31] schedule+0x11e/0x1e0 [ 600.761349][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 600.767139][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 600.773058][ T31] ? dput+0x47/0x90 [ 600.776913][ T31] ? kasan_save_stack+0x49/0x60 [ 600.781782][ T31] ? kasan_save_stack+0x3a/0x60 [ 600.786690][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 600.792341][ T31] ? call_rcu+0x105/0xfe0 [ 600.796728][ T31] ? __fput+0x590/0x8b0 [ 600.800903][ T31] ? ____fput+0x15/0x20 [ 600.805054][ T31] ? task_work_run+0x121/0x190 [ 600.809866][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 600.815260][ T31] ? rwsem_write_trylock+0x130/0x300 [ 600.820615][ T31] ? clear_nonspinnable+0x60/0x60 [ 600.825675][ T31] ? perf_event_exit_event+0x520/0x520 [ 600.831180][ T31] ? mutex_unlock+0x89/0x220 [ 600.835881][ T31] down_write+0x29/0x30 [ 600.840173][ T31] exit_mmap+0x127/0x860 [ 600.844443][ T31] ? vm_brk+0x30/0x30 [ 600.848490][ T31] ? mutex_unlock+0x89/0x220 [ 600.853118][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 600.858383][ T31] __mmput+0x93/0x320 [ 600.862386][ T31] ? mmput+0x48/0x150 [ 600.866446][ T31] mmput+0x50/0x150 [ 600.870275][ T31] do_exit+0x9d2/0x27a0 [ 600.874429][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 600.880554][ T31] ? put_task_struct+0x90/0x90 [ 600.885449][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 600.891144][ T31] do_group_exit+0x141/0x310 [ 600.895758][ T31] __x64_sys_exit_group+0x3f/0x40 [ 600.900833][ T31] x64_sys_call+0x832/0x9a0 [ 600.905352][ T31] do_syscall_64+0x4c/0xa0 [ 600.909809][ T31] ? clear_bhb_loop+0x50/0xa0 [ 600.914506][ T31] ? clear_bhb_loop+0x50/0xa0 [ 600.919226][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 600.925170][ T31] RIP: 0033:0x7fa1d36c5749 [ 600.929638][ T31] RSP: 002b:00007ffcd2395ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 600.938095][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa1d36c5749 [ 600.946122][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 600.954115][ T31] RBP: 0000000000000003 R08: 00000005d2395bdf R09: 00007fa1d38ea280 [ 600.962158][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 600.970176][ T31] R13: 00007fa1d38ea280 R14: 0000000000000003 R15: 00007ffcd2395ba0 [ 600.978213][ T31] [ 600.981251][ T31] INFO: task syz.4.19:398 blocked for more than 145 seconds. [ 600.988747][ T31] Not tainted syzkaller #0 [ 600.993692][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 601.002407][ T31] task:syz.4.19 state:D stack:25288 pid: 398 ppid: 388 flags:0x00004000 [ 601.011646][ T31] Call Trace: [ 601.014920][ T31] [ 601.017900][ T31] __schedule+0xb6e/0x14c0 [ 601.022342][ T31] ? release_firmware_map_entry+0x190/0x190 [ 601.028287][ T31] ? __kasan_check_write+0x14/0x20 [ 601.033418][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 601.038581][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 601.044180][ T31] schedule+0x11e/0x1e0 [ 601.048480][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 601.054227][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 601.060184][ T31] ? dput+0x47/0x90 [ 601.064011][ T31] ? kasan_save_stack+0x49/0x60 [ 601.068994][ T31] ? kasan_save_stack+0x3a/0x60 [ 601.073898][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 601.079713][ T31] ? call_rcu+0x105/0xfe0 [ 601.084073][ T31] ? __fput+0x590/0x8b0 [ 601.088337][ T31] ? ____fput+0x15/0x20 [ 601.092518][ T31] ? task_work_run+0x121/0x190 [ 601.097565][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 601.102966][ T31] ? rwsem_write_trylock+0x130/0x300 [ 601.108316][ T31] ? clear_nonspinnable+0x60/0x60 [ 601.113360][ T31] ? perf_event_exit_event+0x520/0x520 [ 601.118954][ T31] ? mutex_unlock+0x89/0x220 [ 601.123671][ T31] down_write+0x29/0x30 [ 601.127946][ T31] exit_mmap+0x127/0x860 [ 601.132262][ T31] ? vm_brk+0x30/0x30 [ 601.136313][ T31] ? mutex_unlock+0x89/0x220 [ 601.141108][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 601.146394][ T31] __mmput+0x93/0x320 [ 601.150425][ T31] ? mmput+0x48/0x150 [ 601.154408][ T31] mmput+0x50/0x150 [ 601.158275][ T31] do_exit+0x9d2/0x27a0 [ 601.162454][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 601.168587][ T31] ? put_task_struct+0x90/0x90 [ 601.173384][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 601.179081][ T31] ? ____fput+0x15/0x20 [ 601.183261][ T31] do_group_exit+0x141/0x310 [ 601.187898][ T31] ? debug_smp_processor_id+0x17/0x20 [ 601.193313][ T31] __x64_sys_exit_group+0x3f/0x40 [ 601.198412][ T31] x64_sys_call+0x832/0x9a0 [ 601.203042][ T31] do_syscall_64+0x4c/0xa0 [ 601.207499][ T31] ? clear_bhb_loop+0x50/0xa0 [ 601.212192][ T31] ? clear_bhb_loop+0x50/0xa0 [ 601.216932][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 601.222865][ T31] RIP: 0033:0x7f6c9aa35749 [ 601.227348][ T31] RSP: 002b:00007ffff5fd1818 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 601.235873][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c9aa35749 [ 601.244024][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 601.252086][ T31] RBP: 0000000000000003 R08: 00000005f5fd190f R09: 00007f6c9ac5a280 [ 601.260110][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 601.268126][ T31] R13: 00007f6c9ac5a280 R14: 0000000000000003 R15: 00007ffff5fd18d0 [ 601.276143][ T31] [ 601.279167][ T31] NMI backtrace for cpu 0 [ 601.283483][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 601.290676][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 601.300729][ T31] Call Trace: [ 601.304024][ T31] [ 601.306962][ T31] __dump_stack+0x21/0x30 [ 601.311294][ T31] dump_stack_lvl+0xee/0x150 [ 601.315878][ T31] ? show_regs_print_info+0x20/0x20 [ 601.321075][ T31] dump_stack+0x15/0x20 [ 601.325228][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 601.330162][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 601.335792][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 601.341952][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 601.346894][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 601.352965][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 601.359135][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 601.365114][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 601.371003][ T31] watchdog+0xd64/0xea0 [ 601.375176][ T31] ? hungtask_pm_notify+0x50/0x50 [ 601.380214][ T31] ? __kasan_check_read+0x11/0x20 [ 601.385238][ T31] ? __kthread_parkme+0xac/0x200 [ 601.390169][ T31] ? preempt_count_add+0x90/0x1b0 [ 601.395189][ T31] kthread+0x411/0x500 [ 601.399253][ T31] ? hungtask_pm_notify+0x50/0x50 [ 601.404273][ T31] ? kthread_blkcg+0xd0/0xd0 [ 601.408856][ T31] ret_from_fork+0x1f/0x30 [ 601.413278][ T31] [ 601.416390][ T31] Sending NMI from CPU 0 to CPUs 1: [ 601.421651][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20 [ 621.516221][ T31] INFO: task syz.2.17:373 blocked for more than 186 seconds. [ 621.523651][ T31] Not tainted syzkaller #0 [ 621.528713][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 621.537456][ T31] task:syz.2.17 state:D stack:25824 pid: 373 ppid: 363 flags:0x00004000 [ 621.546774][ T31] Call Trace: [ 621.550090][ T31] [ 621.553031][ T31] __schedule+0xb6e/0x14c0 [ 621.557524][ T31] ? release_firmware_map_entry+0x190/0x190 [ 621.563440][ T31] ? __kasan_check_write+0x14/0x20 [ 621.568623][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 621.573674][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 621.579297][ T31] schedule+0x11e/0x1e0 [ 621.583507][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 621.589393][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 621.595309][ T31] ? dput+0x47/0x90 [ 621.599207][ T31] ? kasan_save_stack+0x49/0x60 [ 621.604082][ T31] ? kasan_save_stack+0x3a/0x60 [ 621.608985][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 621.614674][ T31] ? call_rcu+0x105/0xfe0 [ 621.619120][ T31] ? __fput+0x590/0x8b0 [ 621.623307][ T31] ? ____fput+0x15/0x20 [ 621.627551][ T31] ? task_work_run+0x121/0x190 [ 621.632338][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 621.637787][ T31] ? rwsem_write_trylock+0x130/0x300 [ 621.643277][ T31] ? clear_nonspinnable+0x60/0x60 [ 621.648416][ T31] ? perf_event_exit_event+0x520/0x520 [ 621.653901][ T31] ? mutex_unlock+0x89/0x220 [ 621.658566][ T31] down_write+0x29/0x30 [ 621.662747][ T31] exit_mmap+0x127/0x860 [ 621.667057][ T31] ? vm_brk+0x30/0x30 [ 621.671069][ T31] ? mutex_unlock+0x89/0x220 [ 621.675696][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 621.681054][ T31] __mmput+0x93/0x320 [ 621.685089][ T31] ? mmput+0x48/0x150 [ 621.689164][ T31] mmput+0x50/0x150 [ 621.693001][ T31] do_exit+0x9d2/0x27a0 [ 621.697238][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 621.703331][ T31] ? put_task_struct+0x90/0x90 [ 621.708201][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 621.713860][ T31] ? ____fput+0x15/0x20 [ 621.718098][ T31] do_group_exit+0x141/0x310 [ 621.722709][ T31] ? debug_smp_processor_id+0x17/0x20 [ 621.728147][ T31] __x64_sys_exit_group+0x3f/0x40 [ 621.733195][ T31] x64_sys_call+0x832/0x9a0 [ 621.737760][ T31] do_syscall_64+0x4c/0xa0 [ 621.742199][ T31] ? clear_bhb_loop+0x50/0xa0 [ 621.746946][ T31] ? clear_bhb_loop+0x50/0xa0 [ 621.751640][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 621.757609][ T31] RIP: 0033:0x7f9b058e8749 [ 621.762046][ T31] RSP: 002b:00007ffefdb1ff68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 621.770528][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b058e8749 [ 621.778537][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 621.786572][ T31] RBP: 0000000000000003 R08: 00000005fdb2005f R09: 00007f9b05b0d280 [ 621.794567][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 621.802627][ T31] R13: 00007f9b05b0d280 R14: 0000000000000003 R15: 00007ffefdb20020 [ 621.810740][ T31] [ 621.813784][ T31] INFO: task syz.3.18:385 blocked for more than 186 seconds. [ 621.821198][ T31] Not tainted syzkaller #0 [ 621.826186][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 621.834859][ T31] task:syz.3.18 state:D stack:25528 pid: 385 ppid: 375 flags:0x00004000 [ 621.844163][ T31] Call Trace: [ 621.847476][ T31] [ 621.850403][ T31] __schedule+0xb6e/0x14c0 [ 621.854852][ T31] ? release_firmware_map_entry+0x190/0x190 [ 621.860829][ T31] ? __kasan_check_write+0x14/0x20 [ 621.866084][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 621.871128][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 621.876736][ T31] schedule+0x11e/0x1e0 [ 621.880913][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 621.886703][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 621.892617][ T31] ? dput+0x47/0x90 [ 621.896486][ T31] ? kasan_save_stack+0x49/0x60 [ 621.901358][ T31] ? kasan_save_stack+0x3a/0x60 [ 621.906259][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 621.911909][ T31] ? call_rcu+0x105/0xfe0 [ 621.916638][ T31] ? __fput+0x590/0x8b0 [ 621.920829][ T31] ? ____fput+0x15/0x20 [ 621.924985][ T31] ? task_work_run+0x121/0x190 [ 621.929815][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 621.935336][ T31] ? rwsem_write_trylock+0x130/0x300 [ 621.940780][ T31] ? clear_nonspinnable+0x60/0x60 [ 621.945827][ T31] ? perf_event_exit_event+0x520/0x520 [ 621.951465][ T31] ? mutex_unlock+0x89/0x220 [ 621.956098][ T31] down_write+0x29/0x30 [ 621.960260][ T31] exit_mmap+0x127/0x860 [ 621.964523][ T31] ? vm_brk+0x30/0x30 [ 621.968569][ T31] ? mutex_unlock+0x89/0x220 [ 621.973202][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 621.978785][ T31] __mmput+0x93/0x320 [ 621.982791][ T31] ? mmput+0x48/0x150 [ 621.986832][ T31] mmput+0x50/0x150 [ 621.990673][ T31] do_exit+0x9d2/0x27a0 [ 621.994833][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 622.000950][ T31] ? put_task_struct+0x90/0x90 [ 622.005746][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 622.011448][ T31] do_group_exit+0x141/0x310 [ 622.016171][ T31] __x64_sys_exit_group+0x3f/0x40 [ 622.021294][ T31] x64_sys_call+0x832/0x9a0 [ 622.025793][ T31] do_syscall_64+0x4c/0xa0 [ 622.030267][ T31] ? clear_bhb_loop+0x50/0xa0 [ 622.034961][ T31] ? clear_bhb_loop+0x50/0xa0 [ 622.039712][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 622.045726][ T31] RIP: 0033:0x7fa1d36c5749 [ 622.050415][ T31] RSP: 002b:00007ffcd2395ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 622.058917][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa1d36c5749 [ 622.066933][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 622.074905][ T31] RBP: 0000000000000003 R08: 00000005d2395bdf R09: 00007fa1d38ea280 [ 622.082943][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 622.090970][ T31] R13: 00007fa1d38ea280 R14: 0000000000000003 R15: 00007ffcd2395ba0 [ 622.099011][ T31] [ 622.102080][ T31] NMI backtrace for cpu 1 [ 622.106495][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 622.113692][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 622.123834][ T31] Call Trace: [ 622.127114][ T31] [ 622.130038][ T31] __dump_stack+0x21/0x30 [ 622.134374][ T31] dump_stack_lvl+0xee/0x150 [ 622.138966][ T31] ? show_regs_print_info+0x20/0x20 [ 622.144169][ T31] dump_stack+0x15/0x20 [ 622.148323][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 622.153261][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 622.158813][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 622.164996][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 622.169933][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 622.175996][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 622.182058][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 622.188072][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 622.193970][ T31] watchdog+0xd64/0xea0 [ 622.198148][ T31] ? hungtask_pm_notify+0x50/0x50 [ 622.203174][ T31] ? __kasan_check_read+0x11/0x20 [ 622.208200][ T31] ? __kthread_parkme+0xac/0x200 [ 622.213132][ T31] ? preempt_count_add+0x90/0x1b0 [ 622.218154][ T31] kthread+0x411/0x500 [ 622.222221][ T31] ? hungtask_pm_notify+0x50/0x50 [ 622.227241][ T31] ? kthread_blkcg+0xd0/0xd0 [ 622.231831][ T31] ret_from_fork+0x1f/0x30 [ 622.236253][ T31] [ 622.239441][ T31] Sending NMI from CPU 1 to CPUs 0: [ 622.244691][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xf/0x20