INFO: task syz.1.1089:3484 blocked for more than 122 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.1089 state:D stack:0 pid:3484 tgid:3484 ppid:292 flags:0x00004002
Call Trace:
context_switch kernel/sched/core.c:5945 [inline]
__schedule+0x1322/0x1df0 kernel/sched/core.c:7791
__schedule_loop kernel/sched/core.c:7872 [inline]
schedule+0xc6/0x240 kernel/sched/core.c:7887
schedule_timeout+0xb2/0x3a0 kernel/time/timer.c:2595
do_wait_for_common kernel/sched/completion.c:95 [inline]
__wait_for_common kernel/sched/completion.c:116 [inline]
wait_for_common+0x359/0x630 kernel/sched/completion.c:127
wait_for_completion+0x1c/0x40 kernel/sched/completion.c:148
rcu_barrier+0x415/0x530 kernel/rcu/tree.c:4657
kvm_mmu_uninit_tdp_mmu+0x1df/0x210 arch/x86/kvm/mmu/tdp_mmu.c:51
kvm_mmu_uninit_vm+0x27/0x60 arch/x86/kvm/mmu/mmu.c:6572
kvm_arch_destroy_vm+0x383/0x410 arch/x86/kvm/x86.c:12923
kvm_destroy_vm virt/kvm/kvm_main.c:1355 [inline]
kvm_put_kvm+0xb04/0x12c0 virt/kvm/kvm_main.c:1392
kvm_vm_release+0x47/0x70 virt/kvm/kvm_main.c:1415
__fput+0x1fb/0xa00 fs/file_table.c:429
____fput+0x20/0x30 fs/file_table.c:457
task_work_run+0x1e0/0x250 kernel/task_work.c:240
exit_task_work include/linux/task_work.h:43 [inline]
do_exit+0x9bc/0x2630 kernel/exit.c:953
do_group_exit+0x22a/0x300 kernel/exit.c:1095
__do_sys_exit_group kernel/exit.c:1106 [inline]
__se_sys_exit_group kernel/exit.c:1104 [inline]
__x64_sys_exit_group+0x43/0x50 kernel/exit.c:1104
x64_sys_call+0x2ed2/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:232
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f6aa838efc9
RSP: 002b:00007ffdcb65b7b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f6aa838efc9
RDX: 00007f6aa83464b7 RSI: 0000000000000000 RDI: 000000000000000b
RBP: 0000000000000003 R08: 00007ffdcb65bc37 R09: 000000000000000b
R10: 00007f6aa85e5fa0 R11: 0000000000000246 R12: 00007f6aa85e627c
R13: 00007f6aa85e6270 R14: 00000000000007e9 R15: 0000000000000003
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
Call Trace:
__dump_stack+0x21/0x30 lib/dump_stack.c:94
dump_stack_lvl+0x10c/0x190 lib/dump_stack.c:120
dump_stack+0x19/0x20 lib/dump_stack.c:129
nmi_cpu_backtrace+0x2bf/0x2d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x142/0x2c0 lib/nmi_backtrace.c:62
arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:41
trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:267 [inline]
watchdog+0xd8f/0xed0 kernel/hung_task.c:423
kthread+0x2ca/0x370 kernel/kthread.c:389
ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 3515 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
RIP: 0010:rdtsc_ordered arch/x86/include/asm/msr.h:217 [inline]
RIP: 0010:delay_tsc+0x5c/0xa0 arch/x86/lib/delay.c:72
Code: 48 29 f2 48 39 fa 73 44 65 ff 0d 07 8a 78 7a 74 1d f3 90 65 ff 05 fc 89 78 7a 65 44 8b 0d f8 89 78 7a 45 39 c8 75 0e 0f 01 f9 <66> 90 eb cb e8 8b 99 7d fb eb dc 48 29 d7 0f 01 f9 66 90 48 89 d6
RSP: 0018:ffffc9000d466998 EFLAGS: 00000046
RAX: 00000000f0ab0af9 RBX: ffffffff88998c00 RCX: 0000000000000000
RDX: 0000000000000081 RSI: 00000081f0ab0989 RDI: 0000000000000899
RBP: ffffc9000d466998 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: ffffffff858c60c0 R12: ffffffff889f5fe0
R13: 00000000000026d1 R14: ffffffff88998c40 R15: 0000000000000000
FS: 0000555579611500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f38367b11b8 CR3: 000000015a4ea000 CR4: 00000000003526b0
Call Trace:
__delay arch/x86/lib/delay.c:203 [inline]
__const_udelay+0x7a/0x90 arch/x86/lib/delay.c:217
wait_for_lsr drivers/tty/serial/8250/8250_port.c:2075 [inline]
fifo_wait_for_lsr drivers/tty/serial/8250/8250_port.c:3314 [inline]
serial8250_console_fifo_write drivers/tty/serial/8250/8250_port.c:3336 [inline]
serial8250_console_write+0x141c/0x2130 drivers/tty/serial/8250/8250_port.c:3421
univ8250_console_write+0x6f/0xb0 drivers/tty/serial/8250/8250_core.c:396
console_emit_next_record kernel/printk/printk.c:3151 [inline]
console_flush_all+0x5e6/0xaa0 kernel/printk/printk.c:3239
__console_flush_and_unlock kernel/printk/printk.c:3298 [inline]
console_unlock+0xe9/0x270 kernel/printk/printk.c:3338
vprintk_emit+0x27c/0x640 kernel/printk/printk.c:2462
vprintk_default+0x2a/0x40 kernel/printk/printk.c:2477
vprintk+0x93/0xa0 kernel/printk/printk_safe.c:73
_printk+0xd0/0x120 kernel/printk/printk.c:2487
br_set_state+0x2d1/0x480 net/bridge/br_stp.c:57
new_nbp+0x304/0x500 net/bridge/br_if.c:443
br_add_if+0x292/0xe90 net/bridge/br_if.c:599
br_add_slave+0x30/0x40 net/bridge/br_device.c:373
do_set_master net/core/rtnetlink.c:2733 [inline]
do_setlink+0xd9b/0x4010 net/core/rtnetlink.c:2939
__rtnl_newlink net/core/rtnetlink.c:3728 [inline]
rtnl_newlink+0x172c/0x2130 net/core/rtnetlink.c:3775
rtnetlink_rcv_msg+0x882/0xa00 net/core/rtnetlink.c:6678
netlink_rcv_skb+0x22b/0x4a0 net/netlink/af_netlink.c:2545
rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6696
netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline]
netlink_unicast+0x8c0/0xa60 net/netlink/af_netlink.c:1339
netlink_sendmsg+0x7f0/0xaf0 net/netlink/af_netlink.c:1889
sock_sendmsg_nosec net/socket.c:730 [inline]
__sock_sendmsg net/socket.c:745 [inline]
__sys_sendto+0x66d/0x6f0 net/socket.c:2217
__do_sys_sendto net/socket.c:2229 [inline]
__se_sys_sendto net/socket.c:2225 [inline]
__x64_sys_sendto+0xe9/0x100 net/socket.c:2225
x64_sys_call+0x2c2c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:45
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f60fcb90e03
Code: 64 89 02 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 80 3d 61 77 22 00 00 41 89 ca 74 14 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 75 c3 0f 1f 40 00 55 48 83 ec 30 44 89 4c 24
RSP: 002b:00007ffc35541928 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f60fd914620 RCX: 00007f60fcb90e03
RDX: 0000000000000028 RSI: 00007f60fd914670 RDI: 0000000000000003
RBP: 0000000000000001 R08: 00007ffc35541944 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003
R13: 0000000000000000 R14: 00007f60fd914670 R15: 0000000000000000
net_ratelimit: 107112 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:fd:08:ad:2a:95, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:fd:08:ad:2a:95, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
net_ratelimit: 118013 callbacks suppressed
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:fd:08:ad:2a:95, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:fd:08:ad:2a:95, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)