Warning: Permanently added '10.128.0.57' (ED25519) to the list of known hosts. 2025/11/24 04:08:11 parsed 1 programs [ 411.566918][ T30] audit: type=1400 audit(1763957291.956:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 411.587929][ T30] audit: type=1400 audit(1763957291.956:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 412.525713][ T30] audit: type=1400 audit(1763957292.916:66): avc: denied { mounton } for pid=288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 412.527609][ T288] cgroup: Unknown subsys name 'net' [ 412.548471][ T30] audit: type=1400 audit(1763957292.916:67): avc: denied { mount } for pid=288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 412.575814][ T30] audit: type=1400 audit(1763957292.946:68): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 412.576476][ T288] cgroup: Unknown subsys name 'devices' [ 412.781356][ T288] cgroup: Unknown subsys name 'hugetlb' [ 412.787004][ T288] cgroup: Unknown subsys name 'rlimit' [ 412.995138][ T30] audit: type=1400 audit(1763957293.386:69): avc: denied { setattr } for pid=288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 413.018370][ T30] audit: type=1400 audit(1763957293.386:70): avc: denied { create } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 413.038799][ T30] audit: type=1400 audit(1763957293.386:71): avc: denied { write } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 413.059158][ T30] audit: type=1400 audit(1763957293.386:72): avc: denied { read } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 413.066585][ T291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 413.079643][ T30] audit: type=1400 audit(1763957293.386:73): avc: denied { mounton } for pid=288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 413.174640][ T288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 413.609344][ T294] request_module fs-gadgetfs succeeded, but still no fs? [ 413.844275][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.851402][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.858815][ T307] device bridge_slave_0 entered promiscuous mode [ 413.867745][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.874970][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.882615][ T307] device bridge_slave_1 entered promiscuous mode [ 413.942564][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.949647][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.956943][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.964015][ T307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.983198][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.990655][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.998104][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 414.005830][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 414.015970][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 414.024235][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.031301][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.040110][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 414.048497][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.055560][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.068283][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 414.078601][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 414.094975][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 414.107722][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 414.116275][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 414.123748][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 414.132325][ T307] device veth0_vlan entered promiscuous mode [ 414.143856][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 414.154114][ T307] device veth1_macvtap entered promiscuous mode [ 414.168359][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 414.181482][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 414.222706][ T307] syz-executor (307) used greatest stack depth: 20704 bytes left 2025/11/24 04:08:15 executed programs: 0 [ 415.073800][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.080910][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.088479][ T364] device bridge_slave_0 entered promiscuous mode [ 415.095729][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.102849][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.110380][ T364] device bridge_slave_1 entered promiscuous mode [ 415.180718][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.187776][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.195095][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.202154][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.232019][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 415.240197][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.247463][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.259824][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 415.268078][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.275161][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.285954][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 415.294347][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.301415][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.314460][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 415.328947][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 415.346183][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 415.357692][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 415.366187][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 415.373952][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 415.382371][ T364] device veth0_vlan entered promiscuous mode [ 415.405138][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 415.414371][ T364] device veth1_macvtap entered promiscuous mode [ 415.424129][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 415.434700][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 415.545050][ T45] device bridge_slave_1 left promiscuous mode [ 415.551412][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.559599][ T45] device bridge_slave_0 left promiscuous mode [ 415.565899][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.574503][ T45] device veth1_macvtap left promiscuous mode [ 415.580621][ T45] device veth0_vlan left promiscuous mode [ 430.529778][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.536853][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.544371][ T376] device bridge_slave_0 entered promiscuous mode [ 430.551388][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.558415][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.565876][ T376] device bridge_slave_1 entered promiscuous mode [ 430.622769][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.629858][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.637218][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.644265][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.667631][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.675148][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.683026][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 430.690636][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 430.700122][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 430.708335][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.715416][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.724550][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 430.732857][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.739905][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.752099][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 430.761323][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 430.775317][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 430.788451][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 430.796775][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 430.804655][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 430.816101][ T376] device veth0_vlan entered promiscuous mode 2025/11/24 04:08:31 executed programs: 3 [ 430.826816][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 430.835965][ T376] device veth1_macvtap entered promiscuous mode [ 430.845843][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 430.856087][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 445.943598][ T389] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.950678][ T389] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.958098][ T389] device bridge_slave_0 entered promiscuous mode [ 445.965104][ T389] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.972154][ T389] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.979574][ T389] device bridge_slave_1 entered promiscuous mode [ 446.039628][ T389] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.046693][ T389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.054012][ T389] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.061070][ T389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.081962][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.089672][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.097194][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 446.105063][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 446.114143][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 446.122386][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.129446][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.141274][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 446.149466][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.156488][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.169382][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 446.179557][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 446.194008][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 446.205620][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 446.213918][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 446.221345][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 446.232360][ T389] device veth0_vlan entered promiscuous mode 2025/11/24 04:08:46 executed programs: 4 [ 446.242887][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 446.252189][ T389] device veth1_macvtap entered promiscuous mode [ 446.264879][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 446.276232][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 461.361485][ T401] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.368551][ T401] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.376397][ T401] device bridge_slave_0 entered promiscuous mode [ 461.386076][ T401] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.393203][ T401] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.400821][ T401] device bridge_slave_1 entered promiscuous mode [ 461.459504][ T401] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.466655][ T401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.473959][ T401] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.481029][ T401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.502990][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.510442][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.517903][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 461.525758][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 461.534919][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 461.543116][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.550158][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.559004][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 461.567286][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.574467][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.587325][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 461.596821][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 461.610662][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 461.624160][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 461.632330][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 461.640523][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 461.648797][ T401] device veth0_vlan entered promiscuous mode 2025/11/24 04:09:02 executed programs: 5 [ 461.659506][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 461.668724][ T401] device veth1_macvtap entered promiscuous mode [ 461.679216][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 461.689576][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 476.775195][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.782311][ T413] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.789826][ T413] device bridge_slave_0 entered promiscuous mode [ 476.796730][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.803832][ T413] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.811475][ T413] device bridge_slave_1 entered promiscuous mode [ 476.870400][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.877457][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.884759][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.891811][ T413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.915444][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.923315][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.931730][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 476.939430][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 476.948621][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 476.957018][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.964200][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.973106][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 476.981428][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.988491][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.001495][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 477.014089][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 477.028186][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 477.041222][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 477.049517][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 477.057032][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 2025/11/24 04:09:17 executed programs: 6 [ 477.068348][ T413] device veth0_vlan entered promiscuous mode [ 477.079144][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 477.088470][ T413] device veth1_macvtap entered promiscuous mode [ 477.102257][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 477.112483][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 555.599167][ T31] INFO: task syz.2.17:374 blocked for more than 122 seconds. [ 555.606582][ T31] Not tainted syzkaller #0 [ 555.611560][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 555.620257][ T31] task:syz.2.17 state:D stack:25824 pid: 374 ppid: 364 flags:0x00004000 [ 555.629500][ T31] Call Trace: [ 555.632868][ T31] [ 555.635833][ T31] __schedule+0xb6e/0x14c0 [ 555.640422][ T31] ? release_firmware_map_entry+0x190/0x190 [ 555.646374][ T31] ? __kasan_check_write+0x14/0x20 [ 555.651576][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 555.656743][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 555.662379][ T31] schedule+0x11e/0x1e0 [ 555.666555][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 555.672310][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 555.678242][ T31] ? dput+0x47/0x90 [ 555.682128][ T31] ? kasan_save_stack+0x49/0x60 [ 555.686991][ T31] ? kasan_save_stack+0x3a/0x60 [ 555.691914][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 555.697597][ T31] ? call_rcu+0x105/0xfe0 [ 555.702078][ T31] ? __fput+0x600/0x8b0 [ 555.706290][ T31] ? ____fput+0x15/0x20 [ 555.710488][ T31] ? task_work_run+0x91/0x190 [ 555.715275][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 555.720723][ T31] ? rwsem_write_trylock+0x130/0x300 [ 555.726072][ T31] ? clear_nonspinnable+0x60/0x60 [ 555.731128][ T31] ? perf_event_exit_event+0x520/0x520 [ 555.736638][ T31] ? mutex_unlock+0x89/0x220 [ 555.741258][ T31] down_write+0x29/0x30 [ 555.745435][ T31] exit_mmap+0x127/0x860 [ 555.749794][ T31] ? vm_brk+0x30/0x30 [ 555.753789][ T31] ? mutex_unlock+0x89/0x220 [ 555.758441][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 555.763713][ T31] __mmput+0x93/0x320 [ 555.767903][ T31] ? mmput+0x48/0x150 [ 555.771931][ T31] mmput+0x50/0x150 [ 555.775754][ T31] do_exit+0x9d2/0x27a0 [ 555.779939][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 555.786110][ T31] ? put_task_struct+0x90/0x90 [ 555.790904][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 555.796550][ T31] ? ____fput+0x15/0x20 [ 555.800729][ T31] do_group_exit+0x141/0x310 [ 555.805349][ T31] ? debug_smp_processor_id+0x17/0x20 [ 555.810786][ T31] __x64_sys_exit_group+0x3f/0x40 [ 555.815826][ T31] x64_sys_call+0x832/0x9a0 [ 555.820451][ T31] do_syscall_64+0x4c/0xa0 [ 555.824904][ T31] ? clear_bhb_loop+0x50/0xa0 [ 555.829611][ T31] ? clear_bhb_loop+0x50/0xa0 [ 555.834302][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 555.840247][ T31] RIP: 0033:0x7ffb4b473749 [ 555.844749][ T31] RSP: 002b:00007ffd0153f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 555.853345][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffb4b473749 [ 555.861393][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 555.869406][ T31] RBP: 0000000000000003 R08: 000000050153f30f R09: 00007ffb4b698280 [ 555.877412][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 555.885462][ T31] R13: 00007ffb4b698280 R14: 0000000000000003 R15: 00007ffd0153f2d0 [ 555.893488][ T31] [ 555.896518][ T31] INFO: task syz.3.18:386 blocked for more than 123 seconds. [ 555.903929][ T31] Not tainted syzkaller #0 [ 555.908876][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 555.917573][ T31] task:syz.3.18 state:D stack:25824 pid: 386 ppid: 376 flags:0x00004000 [ 555.926995][ T31] Call Trace: [ 555.930352][ T31] [ 555.933329][ T31] __schedule+0xb6e/0x14c0 [ 555.937773][ T31] ? release_firmware_map_entry+0x190/0x190 [ 555.943707][ T31] ? __kasan_check_write+0x14/0x20 [ 555.948845][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 555.953939][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 555.959557][ T31] schedule+0x11e/0x1e0 [ 555.963748][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 555.969613][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 555.975531][ T31] ? dput+0x47/0x90 [ 555.979433][ T31] ? kasan_save_stack+0x49/0x60 [ 555.984312][ T31] ? kasan_save_stack+0x3a/0x60 [ 555.989317][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 555.994998][ T31] ? call_rcu+0x105/0xfe0 [ 555.999432][ T31] ? __fput+0x600/0x8b0 [ 556.003603][ T31] ? ____fput+0x15/0x20 [ 556.007898][ T31] ? task_work_run+0x91/0x190 [ 556.012869][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 556.018256][ T31] ? rwsem_write_trylock+0x130/0x300 [ 556.023588][ T31] ? clear_nonspinnable+0x60/0x60 [ 556.028633][ T31] ? perf_event_exit_event+0x520/0x520 [ 556.034118][ T31] ? mutex_unlock+0x89/0x220 [ 556.038740][ T31] down_write+0x29/0x30 [ 556.042924][ T31] exit_mmap+0x127/0x860 [ 556.047176][ T31] ? vm_brk+0x30/0x30 [ 556.051177][ T31] ? mutex_unlock+0x89/0x220 [ 556.055792][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 556.061011][ T31] __mmput+0x93/0x320 [ 556.065008][ T31] ? mmput+0x48/0x150 [ 556.069061][ T31] mmput+0x50/0x150 [ 556.072910][ T31] do_exit+0x9d2/0x27a0 [ 556.077069][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 556.083184][ T31] ? put_task_struct+0x90/0x90 [ 556.087964][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 556.093634][ T31] do_group_exit+0x141/0x310 [ 556.098248][ T31] __x64_sys_exit_group+0x3f/0x40 [ 556.103302][ T31] x64_sys_call+0x832/0x9a0 [ 556.107817][ T31] do_syscall_64+0x4c/0xa0 [ 556.112259][ T31] ? clear_bhb_loop+0x50/0xa0 [ 556.116950][ T31] ? clear_bhb_loop+0x50/0xa0 [ 556.121646][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 556.127557][ T31] RIP: 0033:0x7fb042a63749 [ 556.132010][ T31] RSP: 002b:00007ffc8653a7c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 556.140646][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb042a63749 [ 556.148614][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 556.156610][ T31] RBP: 0000000000000003 R08: 000000058653a8bf R09: 00007fb042c88280 [ 556.164610][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 556.172606][ T31] R13: 00007fb042c88280 R14: 0000000000000003 R15: 00007ffc8653a880 [ 556.180621][ T31] [ 556.183661][ T31] NMI backtrace for cpu 0 [ 556.187983][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 556.195176][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 556.205309][ T31] Call Trace: [ 556.208577][ T31] [ 556.211498][ T31] __dump_stack+0x21/0x30 [ 556.215824][ T31] dump_stack_lvl+0xee/0x150 [ 556.220418][ T31] ? show_regs_print_info+0x20/0x20 [ 556.225608][ T31] dump_stack+0x15/0x20 [ 556.229756][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 556.234755][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 556.240294][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 556.246440][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 556.251371][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 556.257487][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 556.263549][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 556.269523][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 556.275412][ T31] watchdog+0xd64/0xea0 [ 556.279580][ T31] ? hungtask_pm_notify+0x50/0x50 [ 556.284638][ T31] ? __kasan_check_read+0x11/0x20 [ 556.289691][ T31] ? __kthread_parkme+0xac/0x200 [ 556.294639][ T31] ? preempt_count_add+0x90/0x1b0 [ 556.299750][ T31] kthread+0x411/0x500 [ 556.303819][ T31] ? hungtask_pm_notify+0x50/0x50 [ 556.308856][ T31] ? kthread_blkcg+0xd0/0xd0 [ 556.313437][ T31] ret_from_fork+0x1f/0x30 [ 556.317846][ T31] [ 556.320924][ T31] Sending NMI from CPU 0 to CPUs 1: [ 556.326176][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20 [ 576.719182][ T31] INFO: task syz.2.17:374 blocked for more than 144 seconds. [ 576.726644][ T31] Not tainted syzkaller #0 [ 576.731628][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 576.740324][ T31] task:syz.2.17 state:D stack:25824 pid: 374 ppid: 364 flags:0x00004000 [ 576.749551][ T31] Call Trace: [ 576.752837][ T31] [ 576.755760][ T31] __schedule+0xb6e/0x14c0 [ 576.760204][ T31] ? release_firmware_map_entry+0x190/0x190 [ 576.766109][ T31] ? __kasan_check_write+0x14/0x20 [ 576.771272][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 576.776334][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 576.781924][ T31] schedule+0x11e/0x1e0 [ 576.786096][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 576.791874][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 576.797782][ T31] ? dput+0x47/0x90 [ 576.801618][ T31] ? kasan_save_stack+0x49/0x60 [ 576.806598][ T31] ? kasan_save_stack+0x3a/0x60 [ 576.811475][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 576.817123][ T31] ? call_rcu+0x105/0xfe0 [ 576.821489][ T31] ? __fput+0x600/0x8b0 [ 576.825668][ T31] ? ____fput+0x15/0x20 [ 576.829868][ T31] ? task_work_run+0x91/0x190 [ 576.834576][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 576.839985][ T31] ? rwsem_write_trylock+0x130/0x300 [ 576.845294][ T31] ? clear_nonspinnable+0x60/0x60 [ 576.850340][ T31] ? perf_event_exit_event+0x520/0x520 [ 576.855933][ T31] ? mutex_unlock+0x89/0x220 [ 576.860553][ T31] down_write+0x29/0x30 [ 576.864717][ T31] exit_mmap+0x127/0x860 [ 576.868957][ T31] ? vm_brk+0x30/0x30 [ 576.872962][ T31] ? mutex_unlock+0x89/0x220 [ 576.877571][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 576.882824][ T31] __mmput+0x93/0x320 [ 576.886832][ T31] ? mmput+0x48/0x150 [ 576.890876][ T31] mmput+0x50/0x150 [ 576.894702][ T31] do_exit+0x9d2/0x27a0 [ 576.898860][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 576.904965][ T31] ? put_task_struct+0x90/0x90 [ 576.909761][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 576.915388][ T31] ? ____fput+0x15/0x20 [ 576.919561][ T31] do_group_exit+0x141/0x310 [ 576.924165][ T31] ? debug_smp_processor_id+0x17/0x20 [ 576.929558][ T31] __x64_sys_exit_group+0x3f/0x40 [ 576.934604][ T31] x64_sys_call+0x832/0x9a0 [ 576.939130][ T31] do_syscall_64+0x4c/0xa0 [ 576.943560][ T31] ? clear_bhb_loop+0x50/0xa0 [ 576.948226][ T31] ? clear_bhb_loop+0x50/0xa0 [ 576.952920][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 576.958827][ T31] RIP: 0033:0x7ffb4b473749 [ 576.963307][ T31] RSP: 002b:00007ffd0153f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 576.971821][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffb4b473749 [ 576.979855][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 576.987836][ T31] RBP: 0000000000000003 R08: 000000050153f30f R09: 00007ffb4b698280 [ 576.995965][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 577.003982][ T31] R13: 00007ffb4b698280 R14: 0000000000000003 R15: 00007ffd0153f2d0 [ 577.011984][ T31] [ 577.015151][ T31] INFO: task syz.3.18:386 blocked for more than 144 seconds. [ 577.022540][ T31] Not tainted syzkaller #0 [ 577.027481][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.036174][ T31] task:syz.3.18 state:D stack:25824 pid: 386 ppid: 376 flags:0x00004000 [ 577.045411][ T31] Call Trace: [ 577.048685][ T31] [ 577.051642][ T31] __schedule+0xb6e/0x14c0 [ 577.056077][ T31] ? release_firmware_map_entry+0x190/0x190 [ 577.062023][ T31] ? __kasan_check_write+0x14/0x20 [ 577.067165][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 577.072226][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 577.077798][ T31] schedule+0x11e/0x1e0 [ 577.081989][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 577.087743][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 577.093663][ T31] ? dput+0x47/0x90 [ 577.097513][ T31] ? kasan_save_stack+0x49/0x60 [ 577.102390][ T31] ? kasan_save_stack+0x3a/0x60 [ 577.107249][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 577.112920][ T31] ? call_rcu+0x105/0xfe0 [ 577.117263][ T31] ? __fput+0x600/0x8b0 [ 577.121441][ T31] ? ____fput+0x15/0x20 [ 577.125609][ T31] ? task_work_run+0x91/0x190 [ 577.130313][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 577.135699][ T31] ? rwsem_write_trylock+0x130/0x300 [ 577.141012][ T31] ? clear_nonspinnable+0x60/0x60 [ 577.146056][ T31] ? perf_event_exit_event+0x520/0x520 [ 577.151556][ T31] ? mutex_unlock+0x89/0x220 [ 577.156168][ T31] down_write+0x29/0x30 [ 577.160363][ T31] exit_mmap+0x127/0x860 [ 577.164645][ T31] ? vm_brk+0x30/0x30 [ 577.168655][ T31] ? mutex_unlock+0x89/0x220 [ 577.173315][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 577.178543][ T31] __mmput+0x93/0x320 [ 577.182584][ T31] ? mmput+0x48/0x150 [ 577.186585][ T31] mmput+0x50/0x150 [ 577.190426][ T31] do_exit+0x9d2/0x27a0 [ 577.194601][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 577.200846][ T31] ? put_task_struct+0x90/0x90 [ 577.205640][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 577.211402][ T31] do_group_exit+0x141/0x310 [ 577.216046][ T31] __x64_sys_exit_group+0x3f/0x40 [ 577.221102][ T31] x64_sys_call+0x832/0x9a0 [ 577.225647][ T31] do_syscall_64+0x4c/0xa0 [ 577.230100][ T31] ? clear_bhb_loop+0x50/0xa0 [ 577.234792][ T31] ? clear_bhb_loop+0x50/0xa0 [ 577.239490][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 577.245412][ T31] RIP: 0033:0x7fb042a63749 [ 577.249853][ T31] RSP: 002b:00007ffc8653a7c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 577.258279][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb042a63749 [ 577.266280][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 577.274285][ T31] RBP: 0000000000000003 R08: 000000058653a8bf R09: 00007fb042c88280 [ 577.282273][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 577.290448][ T31] R13: 00007fb042c88280 R14: 0000000000000003 R15: 00007ffc8653a880 [ 577.298421][ T31] [ 577.301479][ T31] INFO: task syz.4.19:399 blocked for more than 124 seconds. [ 577.308853][ T31] Not tainted syzkaller #0 [ 577.313832][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.322523][ T31] task:syz.4.19 state:D stack:25824 pid: 399 ppid: 389 flags:0x00004000 [ 577.331765][ T31] Call Trace: [ 577.335051][ T31] [ 577.337981][ T31] __schedule+0xb6e/0x14c0 [ 577.342433][ T31] ? release_firmware_map_entry+0x190/0x190 [ 577.348338][ T31] ? __kasan_check_write+0x14/0x20 [ 577.353485][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 577.358524][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 577.365387][ T31] schedule+0x11e/0x1e0 [ 577.370406][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 577.376162][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 577.382105][ T31] ? dput+0x47/0x90 [ 577.385930][ T31] ? kasan_save_stack+0x49/0x60 [ 577.390841][ T31] ? kasan_save_stack+0x3a/0x60 [ 577.395701][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 577.401361][ T31] ? call_rcu+0x105/0xfe0 [ 577.405710][ T31] ? __fput+0x600/0x8b0 [ 577.409915][ T31] ? ____fput+0x15/0x20 [ 577.414085][ T31] ? task_work_run+0x91/0x190 [ 577.418784][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 577.424195][ T31] ? rwsem_write_trylock+0x130/0x300 [ 577.429530][ T31] ? clear_nonspinnable+0x60/0x60 [ 577.434551][ T31] ? perf_event_exit_event+0x520/0x520 [ 577.440047][ T31] ? mutex_unlock+0x89/0x220 [ 577.444650][ T31] down_write+0x29/0x30 [ 577.448799][ T31] exit_mmap+0x127/0x860 [ 577.453106][ T31] ? vm_brk+0x30/0x30 [ 577.457100][ T31] ? mutex_unlock+0x89/0x220 [ 577.461716][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 577.466934][ T31] __mmput+0x93/0x320 [ 577.470976][ T31] ? mmput+0x48/0x150 [ 577.474982][ T31] mmput+0x50/0x150 [ 577.478803][ T31] do_exit+0x9d2/0x27a0 [ 577.483016][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 577.489151][ T31] ? put_task_struct+0x90/0x90 [ 577.493920][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 577.499678][ T31] ? ____fput+0x15/0x20 [ 577.503852][ T31] do_group_exit+0x141/0x310 [ 577.508438][ T31] ? debug_smp_processor_id+0x17/0x20 [ 577.513866][ T31] __x64_sys_exit_group+0x3f/0x40 [ 577.518905][ T31] x64_sys_call+0x832/0x9a0 [ 577.523444][ T31] do_syscall_64+0x4c/0xa0 [ 577.527872][ T31] ? clear_bhb_loop+0x50/0xa0 [ 577.532641][ T31] ? clear_bhb_loop+0x50/0xa0 [ 577.537333][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 577.543273][ T31] RIP: 0033:0x7fd61ca1d749 [ 577.547727][ T31] RSP: 002b:00007ffea10ba3e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 577.556409][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd61ca1d749 [ 577.564426][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 577.572457][ T31] RBP: 0000000000000003 R08: 00000005a10ba4df R09: 00007fd61cc42280 [ 577.580464][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 577.588435][ T31] R13: 00007fd61cc42280 R14: 0000000000000003 R15: 00007ffea10ba4a0 [ 577.596469][ T31] [ 577.599547][ T31] NMI backtrace for cpu 0 [ 577.603867][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 577.611054][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 577.621097][ T31] Call Trace: [ 577.624368][ T31] [ 577.627292][ T31] __dump_stack+0x21/0x30 [ 577.631619][ T31] dump_stack_lvl+0xee/0x150 [ 577.636201][ T31] ? show_regs_print_info+0x20/0x20 [ 577.641394][ T31] dump_stack+0x15/0x20 [ 577.645544][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 577.650478][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 577.656044][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 577.662194][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 577.667249][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 577.673316][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 577.679392][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 577.685382][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 577.691299][ T31] watchdog+0xd64/0xea0 [ 577.695529][ T31] ? hungtask_pm_notify+0x50/0x50 [ 577.700778][ T31] ? __kasan_check_read+0x11/0x20 [ 577.705852][ T31] ? __kthread_parkme+0xac/0x200 [ 577.710804][ T31] ? preempt_count_add+0x90/0x1b0 [ 577.715843][ T31] kthread+0x411/0x500 [ 577.719922][ T31] ? hungtask_pm_notify+0x50/0x50 [ 577.724960][ T31] ? kthread_blkcg+0xd0/0xd0 [ 577.729706][ T31] ret_from_fork+0x1f/0x30 [ 577.734147][ T31] [ 577.737270][ T31] Sending NMI from CPU 0 to CPUs 1: [ 577.742524][ C1] NMI backtrace for cpu 1 [ 577.742538][ C1] CPU: 1 PID: 45 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 577.742556][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 577.742566][ C1] Workqueue: events_unbound toggle_allocation_gate [ 577.742589][ C1] RIP: 0010:insn_get_displacement+0x60/0xa00 [ 577.742697][ C1] Code: 85 25 07 00 00 45 0f b6 3c 24 45 31 ed 31 ff 44 89 fe e8 83 6c f8 fe 45 85 ff 74 0a e8 e9 69 f8 fe e9 4d 04 00 00 4c 89 65 c0 <4d> 8d 66 2c 4c 89 e0 48 c1 e8 03 49 bf 00 00 00 00 00 fc ff df 48 [ 577.742711][ C1] RSP: 0018:ffffc900002ef868 EFLAGS: 00000246 [ 577.742725][ C1] RAX: ffffffff827054ed RBX: 1ffff9200005df42 RCX: ffff8881053f3b40 [ 577.742744][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 577.742753][ C1] RBP: ffffc900002ef8c0 R08: dffffc0000000000 R09: ffffc900002ef9e0 [ 577.742765][ C1] R10: fffff5200005df47 R11: 1ffff9200005df3c R12: ffffc900002efa14 [ 577.742778][ C1] R13: 0000000000000000 R14: ffffc900002ef9e0 R15: 0000000000000000 [ 577.742788][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 577.742806][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 577.742818][ C1] CR2: 000000c006bfb010 CR3: 000000000660f000 CR4: 00000000003506a0 [ 577.742832][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 577.742841][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 577.742851][ C1] Call Trace: [ 577.742857][ C1] [ 577.742864][ C1] insn_get_immediate+0x342/0x1370 [ 577.742884][ C1] ? smp_call_function_many+0x40/0x40 [ 577.742952][ C1] insn_decode+0x387/0x520 [ 577.742970][ C1] ? kmem_cache_alloc+0x4c/0x260 [ 577.742996][ C1] __jump_label_patch+0xd8/0x430 [ 577.743058][ C1] ? __kasan_check_write+0x14/0x20 [ 577.743079][ C1] ? arch_jump_label_transform_queue+0xe0/0xe0 [ 577.743100][ C1] ? kmem_cache_alloc+0x4c/0x260 [ 577.743116][ C1] ? kmem_cache_alloc+0x5b/0x260 [ 577.743132][ C1] ? kmem_cache_alloc+0x4c/0x260 [ 577.743148][ C1] ? wait_for_completion_killable_timeout+0x10/0x10 [ 577.743167][ C1] ? mutex_unlock+0x89/0x220 [ 577.743181][ C1] ? __mutex_lock_slowpath+0x10/0x10 [ 577.743196][ C1] ? text_poke_queue+0xdf/0x180 [ 577.743213][ C1] arch_jump_label_transform_queue+0x4d/0xe0 [ 577.743232][ C1] __jump_label_update+0x180/0x3a0 [ 577.743273][ C1] jump_label_update+0x39b/0x450 [ 577.743292][ C1] static_key_disable_cpuslocked+0xc5/0x1a0 [ 577.743311][ C1] static_key_disable+0x1a/0x30 [ 577.743329][ C1] toggle_allocation_gate+0x36d/0x410 [ 577.743346][ C1] ? kfence_debugfs_init+0x70/0x70 [ 577.743362][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 577.743379][ C1] ? finish_task_switch+0x16b/0x780 [ 577.743398][ C1] ? __switch_to_asm+0x3a/0x60 [ 577.743414][ C1] ? __schedule+0xb76/0x14c0 [ 577.743434][ C1] process_one_work+0x6be/0xba0 [ 577.743476][ C1] worker_thread+0xa59/0x1200 [ 577.743493][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 577.743515][ C1] kthread+0x411/0x500 [ 577.743530][ C1] ? worker_clr_flags+0x190/0x190 [ 577.743547][ C1] ? kthread_blkcg+0xd0/0xd0 [ 577.743563][ C1] ret_from_fork+0x1f/0x30 [ 577.743580][ C1] [ 597.840109][ T31] INFO: task syz.2.17:374 blocked for more than 165 seconds. [ 597.847540][ T31] Not tainted syzkaller #0 [ 597.852574][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 597.861385][ T31] task:syz.2.17 state:D stack:25824 pid: 374 ppid: 364 flags:0x00004000 [ 597.870613][ T31] Call Trace: [ 597.873905][ T31] [ 597.876833][ T31] __schedule+0xb6e/0x14c0 [ 597.881279][ T31] ? release_firmware_map_entry+0x190/0x190 [ 597.887189][ T31] ? __kasan_check_write+0x14/0x20 [ 597.892332][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 597.897375][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 597.902954][ T31] schedule+0x11e/0x1e0 [ 597.907120][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 597.912872][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 597.918786][ T31] ? dput+0x47/0x90 [ 597.922634][ T31] ? kasan_save_stack+0x49/0x60 [ 597.927523][ T31] ? kasan_save_stack+0x3a/0x60 [ 597.932424][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 597.938080][ T31] ? call_rcu+0x105/0xfe0 [ 597.942451][ T31] ? __fput+0x600/0x8b0 [ 597.946622][ T31] ? ____fput+0x15/0x20 [ 597.950811][ T31] ? task_work_run+0x91/0x190 [ 597.955523][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 597.961011][ T31] ? rwsem_write_trylock+0x130/0x300 [ 597.966311][ T31] ? clear_nonspinnable+0x60/0x60 [ 597.971363][ T31] ? perf_event_exit_event+0x520/0x520 [ 597.976837][ T31] ? mutex_unlock+0x89/0x220 [ 597.981497][ T31] down_write+0x29/0x30 [ 597.985670][ T31] exit_mmap+0x127/0x860 [ 597.989947][ T31] ? vm_brk+0x30/0x30 [ 597.993944][ T31] ? mutex_unlock+0x89/0x220 [ 597.998573][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 598.003802][ T31] __mmput+0x93/0x320 [ 598.007806][ T31] ? mmput+0x48/0x150 [ 598.011827][ T31] mmput+0x50/0x150 [ 598.015661][ T31] do_exit+0x9d2/0x27a0 [ 598.019846][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 598.025935][ T31] ? put_task_struct+0x90/0x90 [ 598.030722][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 598.036372][ T31] ? ____fput+0x15/0x20 [ 598.040587][ T31] do_group_exit+0x141/0x310 [ 598.045192][ T31] ? debug_smp_processor_id+0x17/0x20 [ 598.050650][ T31] __x64_sys_exit_group+0x3f/0x40 [ 598.055822][ T31] x64_sys_call+0x832/0x9a0 [ 598.060392][ T31] do_syscall_64+0x4c/0xa0 [ 598.064829][ T31] ? clear_bhb_loop+0x50/0xa0 [ 598.069543][ T31] ? clear_bhb_loop+0x50/0xa0 [ 598.074251][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 598.080184][ T31] RIP: 0033:0x7ffb4b473749 [ 598.084613][ T31] RSP: 002b:00007ffd0153f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 598.093056][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffb4b473749 [ 598.101061][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 598.109065][ T31] RBP: 0000000000000003 R08: 000000050153f30f R09: 00007ffb4b698280 [ 598.117046][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 598.125060][ T31] R13: 00007ffb4b698280 R14: 0000000000000003 R15: 00007ffd0153f2d0 [ 598.133066][ T31] [ 598.136138][ T31] INFO: task syz.3.18:386 blocked for more than 165 seconds. [ 598.143617][ T31] Not tainted syzkaller #0 [ 598.148560][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 598.157248][ T31] task:syz.3.18 state:D stack:25824 pid: 386 ppid: 376 flags:0x00004000 [ 598.166489][ T31] Call Trace: [ 598.169803][ T31] [ 598.172754][ T31] __schedule+0xb6e/0x14c0 [ 598.177173][ T31] ? release_firmware_map_entry+0x190/0x190 [ 598.183199][ T31] ? __kasan_check_write+0x14/0x20 [ 598.188327][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 598.193383][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 598.198949][ T31] schedule+0x11e/0x1e0 [ 598.203151][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 598.208898][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 598.214826][ T31] ? dput+0x47/0x90 [ 598.218648][ T31] ? kasan_save_stack+0x49/0x60 [ 598.223545][ T31] ? kasan_save_stack+0x3a/0x60 [ 598.228404][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 598.234075][ T31] ? call_rcu+0x105/0xfe0 [ 598.238455][ T31] ? __fput+0x600/0x8b0 [ 598.242636][ T31] ? ____fput+0x15/0x20 [ 598.246801][ T31] ? task_work_run+0x91/0x190 [ 598.251506][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 598.256894][ T31] ? rwsem_write_trylock+0x130/0x300 [ 598.262201][ T31] ? clear_nonspinnable+0x60/0x60 [ 598.267500][ T31] ? perf_event_exit_event+0x520/0x520 [ 598.273005][ T31] ? mutex_unlock+0x89/0x220 [ 598.277713][ T31] down_write+0x29/0x30 [ 598.281990][ T31] exit_mmap+0x127/0x860 [ 598.286250][ T31] ? vm_brk+0x30/0x30 [ 598.290260][ T31] ? mutex_unlock+0x89/0x220 [ 598.294867][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 598.300179][ T31] __mmput+0x93/0x320 [ 598.304176][ T31] ? mmput+0x48/0x150 [ 598.308157][ T31] mmput+0x50/0x150 [ 598.311994][ T31] do_exit+0x9d2/0x27a0 [ 598.316169][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 598.322445][ T31] ? put_task_struct+0x90/0x90 [ 598.327237][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 598.332910][ T31] do_group_exit+0x141/0x310 [ 598.337521][ T31] __x64_sys_exit_group+0x3f/0x40 [ 598.342614][ T31] x64_sys_call+0x832/0x9a0 [ 598.347135][ T31] do_syscall_64+0x4c/0xa0 [ 598.351805][ T31] ? clear_bhb_loop+0x50/0xa0 [ 598.356517][ T31] ? clear_bhb_loop+0x50/0xa0 [ 598.361226][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 598.367139][ T31] RIP: 0033:0x7fb042a63749 [ 598.371577][ T31] RSP: 002b:00007ffc8653a7c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 598.380026][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb042a63749 [ 598.387997][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 598.396010][ T31] RBP: 0000000000000003 R08: 000000058653a8bf R09: 00007fb042c88280 [ 598.404021][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 598.412009][ T31] R13: 00007fb042c88280 R14: 0000000000000003 R15: 00007ffc8653a880 [ 598.420043][ T31] [ 598.423068][ T31] INFO: task syz.4.19:399 blocked for more than 145 seconds. [ 598.430455][ T31] Not tainted syzkaller #0 [ 598.435396][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 598.444094][ T31] task:syz.4.19 state:D stack:25824 pid: 399 ppid: 389 flags:0x00004000 [ 598.453340][ T31] Call Trace: [ 598.456613][ T31] [ 598.459565][ T31] __schedule+0xb6e/0x14c0 [ 598.464001][ T31] ? release_firmware_map_entry+0x190/0x190 [ 598.469922][ T31] ? __kasan_check_write+0x14/0x20 [ 598.475139][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 598.480188][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 598.485769][ T31] schedule+0x11e/0x1e0 [ 598.489999][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 598.495735][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 598.501670][ T31] ? dput+0x47/0x90 [ 598.505498][ T31] ? kasan_save_stack+0x49/0x60 [ 598.510384][ T31] ? kasan_save_stack+0x3a/0x60 [ 598.515250][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 598.520908][ T31] ? call_rcu+0x105/0xfe0 [ 598.525248][ T31] ? __fput+0x600/0x8b0 [ 598.529422][ T31] ? ____fput+0x15/0x20 [ 598.533590][ T31] ? task_work_run+0x91/0x190 [ 598.538258][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 598.543651][ T31] ? rwsem_write_trylock+0x130/0x300 [ 598.548949][ T31] ? clear_nonspinnable+0x60/0x60 [ 598.554007][ T31] ? perf_event_exit_event+0x520/0x520 [ 598.559741][ T31] ? mutex_unlock+0x89/0x220 [ 598.564362][ T31] down_write+0x29/0x30 [ 598.568512][ T31] exit_mmap+0x127/0x860 [ 598.572792][ T31] ? vm_brk+0x30/0x30 [ 598.576790][ T31] ? mutex_unlock+0x89/0x220 [ 598.581412][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 598.586632][ T31] __mmput+0x93/0x320 [ 598.590641][ T31] ? mmput+0x48/0x150 [ 598.594636][ T31] mmput+0x50/0x150 [ 598.598442][ T31] do_exit+0x9d2/0x27a0 [ 598.602632][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 598.608712][ T31] ? put_task_struct+0x90/0x90 [ 598.613536][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 598.619200][ T31] ? ____fput+0x15/0x20 [ 598.623353][ T31] do_group_exit+0x141/0x310 [ 598.627935][ T31] ? debug_smp_processor_id+0x17/0x20 [ 598.633333][ T31] __x64_sys_exit_group+0x3f/0x40 [ 598.638370][ T31] x64_sys_call+0x832/0x9a0 [ 598.643022][ T31] do_syscall_64+0x4c/0xa0 [ 598.647483][ T31] ? clear_bhb_loop+0x50/0xa0 [ 598.652196][ T31] ? clear_bhb_loop+0x50/0xa0 [ 598.656890][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 598.662813][ T31] RIP: 0033:0x7fd61ca1d749 [ 598.667239][ T31] RSP: 002b:00007ffea10ba3e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 598.675773][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd61ca1d749 [ 598.683780][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 598.691774][ T31] RBP: 0000000000000003 R08: 00000005a10ba4df R09: 00007fd61cc42280 [ 598.699775][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 598.709708][ T31] R13: 00007fd61cc42280 R14: 0000000000000003 R15: 00007ffea10ba4a0 [ 598.717792][ T31] [ 598.720856][ T31] INFO: task syz.5.20:411 blocked for more than 125 seconds. [ 598.728235][ T31] Not tainted syzkaller #0 [ 598.733196][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 598.741886][ T31] task:syz.5.20 state:D stack:25824 pid: 411 ppid: 401 flags:0x00004000 [ 598.751129][ T31] Call Trace: [ 598.754419][ T31] [ 598.757347][ T31] __schedule+0xb6e/0x14c0 [ 598.761832][ T31] ? release_firmware_map_entry+0x190/0x190 [ 598.767909][ T31] ? __kasan_check_write+0x14/0x20 [ 598.773081][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 598.778250][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 598.783830][ T31] schedule+0x11e/0x1e0 [ 598.788002][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 598.793838][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 598.799764][ T31] ? dput+0x47/0x90 [ 598.803571][ T31] ? kasan_save_stack+0x49/0x60 [ 598.808422][ T31] ? kasan_save_stack+0x3a/0x60 [ 598.813303][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 598.818956][ T31] ? call_rcu+0x105/0xfe0 [ 598.823364][ T31] ? __fput+0x600/0x8b0 [ 598.827543][ T31] ? ____fput+0x15/0x20 [ 598.831840][ T31] ? task_work_run+0x91/0x190 [ 598.836543][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 598.841950][ T31] ? rwsem_write_trylock+0x130/0x300 [ 598.847255][ T31] ? clear_nonspinnable+0x60/0x60 [ 598.852330][ T31] ? perf_event_exit_event+0x520/0x520 [ 598.857806][ T31] ? mutex_unlock+0x89/0x220 [ 598.862647][ T31] down_write+0x29/0x30 [ 598.867086][ T31] exit_mmap+0x127/0x860 [ 598.871372][ T31] ? vm_brk+0x30/0x30 [ 598.875370][ T31] ? mutex_unlock+0x89/0x220 [ 598.880217][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 598.885449][ T31] __mmput+0x93/0x320 [ 598.889473][ T31] ? mmput+0x48/0x150 [ 598.893470][ T31] mmput+0x50/0x150 [ 598.897275][ T31] do_exit+0x9d2/0x27a0 [ 598.901500][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 598.907583][ T31] ? put_task_struct+0x90/0x90 [ 598.912382][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 598.918033][ T31] do_group_exit+0x141/0x310 [ 598.922654][ T31] __x64_sys_exit_group+0x3f/0x40 [ 598.927727][ T31] x64_sys_call+0x832/0x9a0 [ 598.932258][ T31] do_syscall_64+0x4c/0xa0 [ 598.936688][ T31] ? clear_bhb_loop+0x50/0xa0 [ 598.941385][ T31] ? clear_bhb_loop+0x50/0xa0 [ 598.946162][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 598.952097][ T31] RIP: 0033:0x7fd8a438a749 [ 598.956524][ T31] RSP: 002b:00007fff1b80a9d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 598.965003][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd8a438a749 [ 598.973279][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 598.981298][ T31] RBP: 0000000000000003 R08: 000000051b80aacf R09: 00007fd8a45af280 [ 598.989300][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 598.997263][ T31] R13: 00007fd8a45af280 R14: 0000000000000003 R15: 00007fff1b80aa90 [ 599.005284][ T31] [ 599.008319][ T31] NMI backtrace for cpu 0 [ 599.012642][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 599.019866][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 599.029958][ T31] Call Trace: [ 599.033243][ T31] [ 599.036170][ T31] __dump_stack+0x21/0x30 [ 599.040500][ T31] dump_stack_lvl+0xee/0x150 [ 599.045082][ T31] ? show_regs_print_info+0x20/0x20 [ 599.050293][ T31] dump_stack+0x15/0x20 [ 599.054458][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 599.059497][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 599.065044][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 599.071202][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 599.076146][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 599.082240][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 599.088314][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 599.094291][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 599.100186][ T31] watchdog+0xd64/0xea0 [ 599.104360][ T31] ? hungtask_pm_notify+0x50/0x50 [ 599.109616][ T31] ? __kasan_check_read+0x11/0x20 [ 599.114745][ T31] ? __kthread_parkme+0xac/0x200 [ 599.119691][ T31] ? preempt_count_add+0x90/0x1b0 [ 599.124804][ T31] kthread+0x411/0x500 [ 599.128899][ T31] ? hungtask_pm_notify+0x50/0x50 [ 599.133919][ T31] ? kthread_blkcg+0xd0/0xd0 [ 599.138501][ T31] ret_from_fork+0x1f/0x30 [ 599.142916][ T31] [ 599.146015][ T31] Sending NMI from CPU 0 to CPUs 1: [ 599.151414][ C1] NMI backtrace for cpu 1 [ 599.151426][ C1] CPU: 1 PID: 90 Comm: klogd Not tainted syzkaller #0 [ 599.151443][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 599.151452][ C1] RIP: 0010:copy_user_enhanced_fast_string+0x0/0x40 [ 599.151478][ C1] Code: 8a 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 <0f> 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 f3 a4 31 c0 0f 01 ca c3 [ 599.151492][ C1] RSP: 0018:ffffc900009c7918 EFLAGS: 00000256 [ 599.151507][ C1] RAX: ffffffff824a5801 RBX: ffff88811bd4c000 RCX: ffffffff824a5858 [ 599.151520][ C1] RDX: 0000000000000050 RSI: 00007ffeae341f20 RDI: ffff88811bd4c000 [ 599.151531][ C1] RBP: ffffc900009c7a80 R08: dffffc0000000000 R09: ffffed10237a980a [ 599.151544][ C1] R10: ffffed10237a980a R11: 1ffff110237a9800 R12: 00007ffeae341f70 [ 599.151556][ C1] R13: 0000000000000050 R14: 00007ffeae341f20 R15: 0000000000000000 [ 599.151566][ C1] FS: 00007f1d91017c80(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 599.151581][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 599.151592][ C1] CR2: 000000c006bfb010 CR3: 000000010d141000 CR4: 00000000003506a0 [ 599.151607][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 599.151617][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 599.151627][ C1] Call Trace: [ 599.151631][ C1] [ 599.151636][ C1] ? _copy_from_iter+0x296/0x1050 [ 599.151669][ C1] ? __kasan_check_write+0x14/0x20 [ 599.151689][ C1] ? copy_mc_pipe_to_iter+0x770/0x770 [ 599.151706][ C1] ? check_stack_object+0x81/0x140 [ 599.151751][ C1] ? __check_object_size+0x2f4/0x3c0 [ 599.151825][ C1] skb_copy_datagram_from_iter+0xfa/0x6b0 [ 599.151895][ C1] ? _raw_spin_trylock_bh+0x130/0x130 [ 599.151915][ C1] ? skb_put+0x10e/0x1f0 [ 599.151974][ C1] unix_dgram_sendmsg+0x85c/0x1880 [ 599.152028][ C1] ? unix_dgram_poll+0x6b0/0x6b0 [ 599.152045][ C1] ? security_socket_sendmsg+0x82/0xa0 [ 599.152131][ C1] __sys_sendto+0x423/0x580 [ 599.152176][ C1] ? __ia32_sys_getpeername+0x90/0x90 [ 599.152200][ C1] ? __kasan_check_write+0x14/0x20 [ 599.152217][ C1] __x64_sys_sendto+0xe5/0x100 [ 599.152235][ C1] x64_sys_call+0x178/0x9a0 [ 599.152251][ C1] do_syscall_64+0x4c/0xa0 [ 599.152269][ C1] ? clear_bhb_loop+0x50/0xa0 [ 599.152284][ C1] ? clear_bhb_loop+0x50/0xa0 [ 599.152297][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 599.152316][ C1] RIP: 0033:0x7f1d91167407 [ 599.152330][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 599.152344][ C1] RSP: 002b:00007ffeae341de0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 599.152360][ C1] RAX: ffffffffffffffda RBX: 00007f1d91017c80 RCX: 00007f1d91167407 [ 599.152372][ C1] RDX: 0000000000000050 RSI: 00007ffeae341f20 RDI: 0000000000000003 [ 599.152382][ C1] RBP: 00007ffeae342350 R08: 0000000000000000 R09: 0000000000000000 [ 599.152393][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffeae342368 [ 599.152404][ C1] R13: 00007ffeae341f20 R14: 0000000000000035 R15: 00007ffeae341f20 [ 599.152417][ C1] [ 619.599118][ T31] INFO: task syz.2.17:374 blocked for more than 186 seconds. [ 619.606513][ T31] Not tainted syzkaller #0 [ 619.611492][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 619.620187][ T31] task:syz.2.17 state:D stack:25824 pid: 374 ppid: 364 flags:0x00004000 [ 619.629477][ T31] Call Trace: [ 619.632779][ T31] [ 619.635705][ T31] __schedule+0xb6e/0x14c0 [ 619.640169][ T31] ? release_firmware_map_entry+0x190/0x190 [ 619.646079][ T31] ? __kasan_check_write+0x14/0x20 [ 619.651226][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 619.656264][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 619.661837][ T31] schedule+0x11e/0x1e0 [ 619.666003][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 619.671797][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 619.677725][ T31] ? dput+0x47/0x90 [ 619.681839][ T31] ? kasan_save_stack+0x49/0x60 [ 619.686785][ T31] ? kasan_save_stack+0x3a/0x60 [ 619.691689][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 619.697339][ T31] ? call_rcu+0x105/0xfe0 [ 619.701690][ T31] ? __fput+0x600/0x8b0 [ 619.705856][ T31] ? ____fput+0x15/0x20 [ 619.710034][ T31] ? task_work_run+0x91/0x190 [ 619.714724][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 619.720122][ T31] ? rwsem_write_trylock+0x130/0x300 [ 619.725419][ T31] ? clear_nonspinnable+0x60/0x60 [ 619.730486][ T31] ? perf_event_exit_event+0x520/0x520 [ 619.735952][ T31] ? mutex_unlock+0x89/0x220 [ 619.740576][ T31] down_write+0x29/0x30 [ 619.744759][ T31] exit_mmap+0x127/0x860 [ 619.749169][ T31] ? vm_brk+0x30/0x30 [ 619.753166][ T31] ? mutex_unlock+0x89/0x220 [ 619.757750][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 619.763017][ T31] __mmput+0x93/0x320 [ 619.767093][ T31] ? mmput+0x48/0x150 [ 619.771120][ T31] mmput+0x50/0x150 [ 619.774945][ T31] do_exit+0x9d2/0x27a0 [ 619.779124][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 619.785205][ T31] ? put_task_struct+0x90/0x90 [ 619.789990][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 619.795639][ T31] ? ____fput+0x15/0x20 [ 619.799821][ T31] do_group_exit+0x141/0x310 [ 619.804426][ T31] ? debug_smp_processor_id+0x17/0x20 [ 619.809834][ T31] __x64_sys_exit_group+0x3f/0x40 [ 619.814879][ T31] x64_sys_call+0x832/0x9a0 [ 619.819411][ T31] do_syscall_64+0x4c/0xa0 [ 619.823882][ T31] ? clear_bhb_loop+0x50/0xa0 [ 619.828559][ T31] ? clear_bhb_loop+0x50/0xa0 [ 619.833264][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 619.839186][ T31] RIP: 0033:0x7ffb4b473749 [ 619.843591][ T31] RSP: 002b:00007ffd0153f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 619.852043][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffb4b473749 [ 619.860039][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 619.868007][ T31] RBP: 0000000000000003 R08: 000000050153f30f R09: 00007ffb4b698280 [ 619.876012][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 619.884010][ T31] R13: 00007ffb4b698280 R14: 0000000000000003 R15: 00007ffd0153f2d0 [ 619.892030][ T31] [ 619.895081][ T31] NMI backtrace for cpu 0 [ 619.899398][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 619.906585][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 619.916644][ T31] Call Trace: [ 619.919918][ T31] [ 619.922865][ T31] __dump_stack+0x21/0x30 [ 619.927203][ T31] dump_stack_lvl+0xee/0x150 [ 619.931801][ T31] ? show_regs_print_info+0x20/0x20 [ 619.936991][ T31] dump_stack+0x15/0x20 [ 619.941139][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 619.946067][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 619.951602][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 619.957747][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 619.962676][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 619.968735][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 619.974792][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 619.980784][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 619.986669][ T31] watchdog+0xd64/0xea0 [ 619.990817][ T31] ? hungtask_pm_notify+0x50/0x50 [ 619.995833][ T31] ? __kasan_check_read+0x11/0x20 [ 620.000855][ T31] ? __kthread_parkme+0xac/0x200 [ 620.005788][ T31] ? preempt_count_add+0x90/0x1b0 [ 620.010806][ T31] kthread+0x411/0x500 [ 620.014865][ T31] ? hungtask_pm_notify+0x50/0x50 [ 620.019886][ T31] ? kthread_blkcg+0xd0/0xd0 [ 620.024468][ T31] ret_from_fork+0x1f/0x30 [ 620.028879][ T31] [ 620.032150][ T31] Sending NMI from CPU 0 to CPUs 1: [ 620.037395][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20