./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3320157514 <...> Warning: Permanently added '10.128.1.13' (ED25519) to the list of known hosts. execve("./syz-executor3320157514", ["./syz-executor3320157514"], 0x7ffc9605e270 /* 10 vars */) = 0 brk(NULL) = 0x55556928f000 brk(0x55556928fd00) = 0x55556928fd00 arch_prctl(ARCH_SET_FS, 0x55556928f380) = 0 set_tid_address(0x55556928f650) = 5870 set_robust_list(0x55556928f660, 24) = 0 rseq(0x55556928fca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3320157514", 4096) = 28 getrandom("\xba\x55\x4f\xce\xd0\x26\xe4\x1e", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556928fd00 brk(0x5555692b0d00) = 0x5555692b0d00 brk(0x5555692b1000) = 0x5555692b1000 mprotect(0x7f369efcc000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5871 attached , child_tidptr=0x55556928f650) = 5871 [pid 5871] set_robust_list(0x55556928f660, 24) = 0 [pid 5871] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5871] setpgid(0, 0) = 0 [pid 5871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5871] write(3, "1000", 4) = 4 [pid 5871] close(3) = 0 [pid 5871] write(1, "executing program\n", 18executing program ) = 18 [ 131.685427][ T30] audit: type=1400 audit(1754534398.214:63): avc: denied { execmem } for pid=5870 comm="syz-executor332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 5871] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5871] ioctl(3, USB_RAW_IOCTL_INIT, 0x7fff7e531af0) = 0 [pid 5871] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [ 131.741412][ T30] audit: type=1400 audit(1754534398.274:64): avc: denied { read write } for pid=5871 comm="syz-executor332" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.767235][ T30] audit: type=1400 audit(1754534398.274:65): avc: denied { open } for pid=5871 comm="syz-executor332" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff7e531af0) = 0 [ 131.791180][ T30] audit: type=1400 audit(1754534398.274:66): avc: denied { ioctl } for pid=5871 comm="syz-executor332" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff7e531af0) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff7e531af0) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff7e531af0) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff7e530ae0) = 18 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff7e531af0) = 0 [ 132.000731][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff7e531af0) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff7e531af0) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff7e530ae0) = 18 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff7e531af0) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff7e530ae0) = 9 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff7e531af0) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff7e530ae0) = 18 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff7e531af0) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff7e530ae0) = 4 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff7e531af0) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff7e530ae0) = 8 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff7e531af0) = 0 [ 132.150595][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 132.167523][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 132.175647][ T10] usb 1-1: config 0 has no interface number 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff7e530ae0) = 8 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff7e531af0) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff7e530ae0) = 8 [pid 5871] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff7e531af0) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5871] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff7e530ae0) = 0 [ 132.238868][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 132.248033][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.256096][ T10] usb 1-1: Product: syz [ 132.260248][ T10] usb 1-1: Manufacturer: syz [ 132.264866][ T10] usb 1-1: SerialNumber: syz [ 132.271971][ T10] usb 1-1: config 0 descriptor?? [ 132.291460][ T10] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 132.300248][ T10] usb 1-1: selecting invalid altsetting 1 [ 132.306338][ T10] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 132.315733][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 132.326214][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 132.334527][ T10] usb 1-1: media controller created [ 132.347378][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [pid 5871] openat(AT_FDCWD, "/dev/i2c-1", O_RDWR|O_APPEND) = 4 [pid 5871] creat("./file0", 000) = 5 [pid 5871] close(5) = 0 [pid 5871] socketpair(AF_UNIX, SOCK_SEQPACKET, 0, [5, 6]) = 0 [ 132.500640][ T30] audit: type=1400 audit(1754534399.024:67): avc: denied { append } for pid=5871 comm="syz-executor332" name="i2c-1" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.544766][ T30] audit: type=1400 audit(1754534399.074:68): avc: denied { mounton } for pid=5871 comm="syz-executor332" path="/root/file0" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 133.401136][ T10] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 133.408259][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [pid 5871] mount(NULL, "./file0", "9p", MS_SILENT|MS_RELATIME, "trans=fd,rfdno=0x0000000000000005,wfdno=0x0000000000000005," [pid 5870] kill(-5871, SIGKILL) = 0 [pid 5870] kill(5871, SIGKILL) = 0 [pid 5870] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5870] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5870] getdents64(3, 0x5555692906f0 /* 2 entries */, 32768) = 48 [pid 5870] getdents64(3, 0x5555692906f0 /* 0 entries */, 32768) = 0 [pid 5870] close(3) = 0 [ 193.502799][ T5218] udevd[5218]: worker [5873] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 285.960635][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 285.968212][ T31] Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 [ 285.975571][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.984331][ T31] task:kworker/0:1 state:D stack:22616 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 285.996395][ T31] Workqueue: usb_hub_wq hub_event [ 286.001465][ T31] Call Trace: [ 286.004735][ T31] [ 286.007646][ T31] __schedule+0x1190/0x5de0 [ 286.012187][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 286.017124][ T31] ? __pfx___schedule+0x10/0x10 [ 286.021985][ T31] ? find_held_lock+0x2b/0x80 [ 286.026652][ T31] ? schedule+0x2d7/0x3a0 [ 286.031007][ T31] schedule+0xe7/0x3a0 [ 286.035078][ T31] schedule_timeout+0x257/0x290 [ 286.039914][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 286.045294][ T31] ? mark_held_locks+0x49/0x80 [ 286.050052][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.055287][ T31] __wait_for_common+0x2fc/0x4e0 [ 286.060230][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 286.065607][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 286.071081][ T31] ? __pfx_device_del+0x10/0x10 [ 286.075921][ T31] ? kobject_put+0xab/0x5a0 [ 286.080404][ T31] i2c_del_adapter+0x546/0x6f0 [ 286.085177][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 286.090518][ T31] ? kfree+0x2b4/0x4d0 [ 286.094583][ T31] ? media_device_cleanup+0x53/0x80 [ 286.099777][ T31] ? dvb_usbv2_exit.isra.0+0x3c6/0x9f0 [ 286.105252][ T31] dvb_usbv2_exit.isra.0+0x45b/0x9f0 [ 286.110575][ T31] dvb_usbv2_probe+0x1f61/0x3e50 [ 286.115521][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 286.120830][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.126021][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 286.131859][ T31] ? __pm_runtime_set_status+0x13c/0xa80 [ 286.137482][ T31] usb_probe_interface+0x303/0xa40 [ 286.142604][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 286.148236][ T31] really_probe+0x241/0xa90 [ 286.152764][ T31] __driver_probe_device+0x1de/0x440 [ 286.158057][ T31] driver_probe_device+0x4c/0x1b0 [ 286.163100][ T31] __device_attach_driver+0x1df/0x310 [ 286.168470][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 286.174398][ T31] bus_for_each_drv+0x159/0x1e0 [ 286.179243][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 286.184631][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.189834][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 286.195717][ T31] __device_attach+0x1e4/0x4b0 [ 286.200517][ T31] ? __pfx___device_attach+0x10/0x10 [ 286.205793][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 286.211017][ T31] bus_probe_device+0x17f/0x1c0 [ 286.215875][ T31] device_add+0x1148/0x1aa0 [ 286.220354][ T31] ? __pfx_device_add+0x10/0x10 [ 286.225219][ T31] ? mark_held_locks+0x49/0x80 [ 286.229982][ T31] usb_set_configuration+0x1187/0x1e20 [ 286.235504][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 286.241592][ T31] usb_generic_driver_probe+0xb1/0x110 [ 286.247054][ T31] usb_probe_device+0xec/0x3e0 [ 286.251858][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 286.257231][ T31] really_probe+0x241/0xa90 [ 286.261762][ T31] __driver_probe_device+0x1de/0x440 [ 286.267058][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 286.272587][ T31] driver_probe_device+0x4c/0x1b0 [ 286.277614][ T31] __device_attach_driver+0x1df/0x310 [ 286.283009][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 286.288911][ T31] bus_for_each_drv+0x159/0x1e0 [ 286.293792][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 286.299172][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.304393][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 286.310210][ T31] __device_attach+0x1e4/0x4b0 [ 286.314995][ T31] ? __pfx___device_attach+0x10/0x10 [ 286.320288][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 286.325596][ T31] bus_probe_device+0x17f/0x1c0 [ 286.330452][ T31] device_add+0x1148/0x1aa0 [ 286.334983][ T31] ? __pfx_device_add+0x10/0x10 [ 286.339809][ T31] ? add_device_randomness+0xb7/0xf0 [ 286.345099][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 286.351022][ T31] usb_new_device+0xd07/0x1a60 [ 286.355763][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 286.360822][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 286.366015][ T31] ? mark_held_locks+0x49/0x80 [ 286.370817][ T31] hub_event+0x2f34/0x4fe0 [ 286.375236][ T31] ? __pfx_hub_event+0x10/0x10 [ 286.379983][ T31] ? __free_object+0x360/0x410 [ 286.384763][ T31] ? rcu_is_watching+0x12/0xc0 [ 286.389521][ T31] process_one_work+0x9cc/0x1b70 [ 286.394495][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 286.399776][ T31] ? __pfx_process_one_work+0x10/0x10 [ 286.405171][ T31] ? assign_work+0x1a0/0x250 [ 286.409754][ T31] worker_thread+0x6c8/0xf10 [ 286.414435][ T31] ? __pfx_worker_thread+0x10/0x10 [ 286.419552][ T31] kthread+0x3c5/0x780 [ 286.423654][ T31] ? __pfx_kthread+0x10/0x10 [ 286.428235][ T31] ? rcu_is_watching+0x12/0xc0 [ 286.433030][ T31] ? __pfx_kthread+0x10/0x10 [ 286.437613][ T31] ret_from_fork+0x5d4/0x6f0 [ 286.442208][ T31] ? __pfx_kthread+0x10/0x10 [ 286.446788][ T31] ret_from_fork_asm+0x1a/0x30 [ 286.451584][ T31] [ 286.454663][ T31] [ 286.454663][ T31] Showing all locks held in the system: [ 286.462386][ T31] 5 locks held by kworker/0:1/10: [ 286.467397][ T31] #0: ffff8881442d3548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 286.478219][ T31] #1: ffffc900000f7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 286.489474][ T31] #2: ffff888029d20198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 286.498378][ T31] #3: ffff8880252bc198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 286.507615][ T31] #4: ffff8880252bf160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 286.516869][ T31] 1 lock held by khungtaskd/31: [ 286.521730][ T31] #0: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 286.531636][ T31] 2 locks held by getty/5608: [ 286.536292][ T31] #0: ffff88814dfe80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 286.546034][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 286.556158][ T31] 4 locks held by udevd/5873: [ 286.560829][ T31] #0: ffff888078ae8d58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 286.569695][ T31] #1: ffff888023aa7888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4d/0x240 [ 286.579107][ T31] #2: ffff888034e142d8 (kn->active#29){.+.+}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 286.588619][ T31] #3: ffff8880252bc198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 286.597950][ T31] [ 286.600259][ T31] ============================================= [ 286.600259][ T31] [ 286.608724][ T31] NMI backtrace for cpu 0 [ 286.608737][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 286.608756][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.608766][ T31] Call Trace: [ 286.608777][ T31] [ 286.608783][ T31] dump_stack_lvl+0x116/0x1f0 [ 286.608812][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 286.608834][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 286.608861][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 286.608883][ T31] watchdog+0xf0e/0x1260 [ 286.608908][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.608925][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.608953][ T31] ? __kthread_parkme+0x19e/0x250 [ 286.608980][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.608998][ T31] kthread+0x3c5/0x780 [ 286.609016][ T31] ? __pfx_kthread+0x10/0x10 [ 286.609034][ T31] ? rcu_is_watching+0x12/0xc0 [ 286.609055][ T31] ? __pfx_kthread+0x10/0x10 [ 286.609073][ T31] ret_from_fork+0x5d4/0x6f0 [ 286.609089][ T31] ? __pfx_kthread+0x10/0x10 [ 286.609106][ T31] ret_from_fork_asm+0x1a/0x30 [ 286.609139][ T31] [ 286.609145][ T31] Sending NMI from CPU 0 to CPUs 1: [ 286.726417][ C1] NMI backtrace for cpu 1 [ 286.726431][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 286.726447][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.726455][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 286.726478][ C1] Code: 4c 63 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 82 17 00 fb f4 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 286.726491][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 286.726502][ C1] RAX: 000000000008bab9 RBX: 0000000000000001 RCX: ffffffff8b928c29 [ 286.726510][ C1] RDX: 0000000000000000 RSI: ffffffff8de4d731 RDI: ffffffff8c161100 [ 286.726522][ C1] RBP: ffffed1003c5d488 R08: 0000000000000001 R09: ffffed10170a6655 [ 286.726530][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 286.726538][ C1] R13: ffff88801e2ea440 R14: ffffffff90aaf390 R15: 0000000000000000 [ 286.726546][ C1] FS: 0000000000000000(0000) GS:ffff8881247c6000(0000) knlGS:0000000000000000 [ 286.726559][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.726567][ C1] CR2: 0000561297f2f660 CR3: 000000000e380000 CR4: 00000000003526f0 [ 286.726576][ C1] Call Trace: [ 286.726582][ C1] [ 286.726586][ C1] default_idle+0x13/0x20 [ 286.726600][ C1] default_idle_call+0x6d/0xb0 [ 286.726612][ C1] do_idle+0x391/0x510 [ 286.726630][ C1] ? __pfx_do_idle+0x10/0x10 [ 286.726645][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 286.726660][ C1] cpu_startup_entry+0x4f/0x60 [ 286.726676][ C1] start_secondary+0x21d/0x2b0 [ 286.726695][ C1] ? __pfx_start_secondary+0x10/0x10 [ 286.726715][ C1] common_startup_64+0x13e/0x148 [ 286.726734][ C1] [ 286.727444][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 286.905614][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 286.917049][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.927083][ T31] Call Trace: [ 286.930343][ T31] [ 286.933254][ T31] dump_stack_lvl+0x3d/0x1f0 [ 286.937835][ T31] vpanic+0x6e8/0x7a0 [ 286.941802][ T31] ? __pfx_vpanic+0x10/0x10 [ 286.946289][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 286.952262][ T31] panic+0xca/0xd0 [ 286.955967][ T31] ? __pfx_panic+0x10/0x10 [ 286.960367][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 286.965722][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 286.971856][ T31] ? watchdog+0xd78/0x1260 [ 286.976250][ T31] ? watchdog+0xd6b/0x1260 [ 286.980644][ T31] watchdog+0xd89/0x1260 [ 286.984874][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.989527][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.994708][ T31] ? __kthread_parkme+0x19e/0x250 [ 286.999720][ T31] ? __pfx_watchdog+0x10/0x10 [ 287.004378][ T31] kthread+0x3c5/0x780 [ 287.008426][ T31] ? __pfx_kthread+0x10/0x10 [ 287.012994][ T31] ? rcu_is_watching+0x12/0xc0 [ 287.017739][ T31] ? __pfx_kthread+0x10/0x10 [ 287.022312][ T31] ret_from_fork+0x5d4/0x6f0 [ 287.026881][ T31] ? __pfx_kthread+0x10/0x10 [ 287.031451][ T31] ret_from_fork_asm+0x1a/0x30 [ 287.036207][ T31] [ 287.039416][ T31] Kernel Offset: disabled [ 287.043716][ T31] Rebooting in 86400 seconds..