Warning: Permanently added '10.128.1.2' (ED25519) to the list of known hosts. 2025/12/07 01:24:55 parsed 1 programs [ 405.815960][ T30] audit: type=1400 audit(1765070695.369:64): avc: denied { node_bind } for pid=283 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 405.836726][ T30] audit: type=1400 audit(1765070695.369:65): avc: denied { module_request } for pid=283 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 406.440045][ T30] audit: type=1400 audit(1765070695.999:66): avc: denied { mounton } for pid=290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 406.441443][ T290] cgroup: Unknown subsys name 'net' [ 406.462701][ T30] audit: type=1400 audit(1765070695.999:67): avc: denied { mount } for pid=290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 406.489980][ T30] audit: type=1400 audit(1765070696.029:68): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 406.490202][ T290] cgroup: Unknown subsys name 'devices' [ 406.630744][ T290] cgroup: Unknown subsys name 'hugetlb' [ 406.636336][ T290] cgroup: Unknown subsys name 'rlimit' [ 406.898064][ T30] audit: type=1400 audit(1765070696.449:69): avc: denied { setattr } for pid=290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.921388][ T30] audit: type=1400 audit(1765070696.449:70): avc: denied { create } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 406.926836][ T293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 406.941989][ T30] audit: type=1400 audit(1765070696.449:71): avc: denied { write } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 406.970610][ T30] audit: type=1400 audit(1765070696.449:72): avc: denied { read } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 406.990930][ T30] audit: type=1400 audit(1765070696.459:73): avc: denied { mounton } for pid=290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 407.018434][ T290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 407.420074][ T295] request_module fs-gadgetfs succeeded, but still no fs? [ 407.741934][ T317] syz-executor (317) used greatest stack depth: 20640 bytes left [ 407.753885][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.760941][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.768228][ T322] device bridge_slave_0 entered promiscuous mode [ 407.775128][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.782154][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.789488][ T322] device bridge_slave_1 entered promiscuous mode [ 407.836767][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.843821][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.851092][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.858096][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.875484][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 407.883219][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.890813][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.903996][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 407.912142][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.919164][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.927889][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 407.936077][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.943093][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.958803][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 407.967987][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 407.980893][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 407.993042][ T322] device veth0_vlan entered promiscuous mode [ 408.003347][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 408.011555][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 408.022677][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 408.033170][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 408.042088][ T322] device veth1_macvtap entered promiscuous mode [ 408.050779][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 408.060898][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/12/07 01:24:58 executed programs: 0 [ 408.562735][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.569894][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.579854][ T365] device bridge_slave_0 entered promiscuous mode [ 408.586941][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.594058][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.601474][ T365] device bridge_slave_1 entered promiscuous mode [ 408.673870][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.680940][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.688199][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.695242][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.719900][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 408.727522][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.735103][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.745147][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 408.753773][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 408.762032][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.769076][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.781650][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 408.789992][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 408.798101][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.805129][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.815563][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 408.823684][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 408.832410][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 408.840736][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 408.853184][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 408.861510][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 408.871969][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 408.879903][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 408.887817][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 408.895435][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 408.903480][ T365] device veth0_vlan entered promiscuous mode [ 408.912687][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 408.920809][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 408.932921][ T365] device veth1_macvtap entered promiscuous mode [ 408.941982][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 408.949751][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 408.957909][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 408.967278][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 408.975807][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 409.561022][ T266] device bridge_slave_1 left promiscuous mode [ 409.567164][ T266] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.574802][ T266] device bridge_slave_0 left promiscuous mode [ 409.581014][ T266] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.588746][ T266] device veth1_macvtap left promiscuous mode [ 409.594770][ T266] device veth0_vlan left promiscuous mode [ 424.051175][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.058212][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.065578][ T377] device bridge_slave_0 entered promiscuous mode [ 424.072281][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.079342][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.086671][ T377] device bridge_slave_1 entered promiscuous mode [ 424.128573][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.135619][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.142915][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.149936][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.169390][ T266] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.176640][ T266] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.184211][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 424.191724][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 424.200556][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 424.208679][ T266] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.215708][ T266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.224314][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 424.232600][ T266] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.239634][ T266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.254290][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 424.263368][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 424.276248][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 424.290675][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 424.298693][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 424.306299][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 424.314510][ T377] device veth0_vlan entered promiscuous mode 2025/12/07 01:25:13 executed programs: 3 [ 424.324301][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 424.333247][ T377] device veth1_macvtap entered promiscuous mode [ 424.342371][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 424.352271][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 549.729016][ T31] INFO: task syz.2.17:375 blocked for more than 122 seconds. [ 549.736410][ T31] Not tainted syzkaller #0 [ 549.741359][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.750041][ T31] task:syz.2.17 state:D stack:25824 pid: 375 ppid: 365 flags:0x00004000 [ 549.759262][ T31] Call Trace: [ 549.762606][ T31] [ 549.765545][ T31] __schedule+0xb6e/0x14c0 [ 549.770082][ T31] ? release_firmware_map_entry+0x190/0x190 [ 549.776012][ T31] ? __kasan_check_write+0x14/0x20 [ 549.781190][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 549.786211][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 549.791763][ T31] schedule+0x11e/0x1e0 [ 549.795907][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 549.801624][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 549.807512][ T31] ? dput+0x47/0x90 [ 549.811333][ T31] ? kasan_save_stack+0x49/0x60 [ 549.816173][ T31] ? kasan_save_stack+0x3a/0x60 [ 549.821018][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 549.826639][ T31] ? call_rcu+0x105/0xfe0 [ 549.831035][ T31] ? __fput+0x600/0x8b0 [ 549.835213][ T31] ? ____fput+0x15/0x20 [ 549.839390][ T31] ? task_work_run+0x91/0x190 [ 549.844125][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 549.849526][ T31] ? rwsem_write_trylock+0x130/0x300 [ 549.854831][ T31] ? clear_nonspinnable+0x60/0x60 [ 549.859851][ T31] ? perf_event_exit_event+0x520/0x520 [ 549.865321][ T31] ? mutex_unlock+0x89/0x220 [ 549.869908][ T31] down_write+0x29/0x30 [ 549.874048][ T31] exit_mmap+0x127/0x860 [ 549.878324][ T31] ? vm_brk+0x30/0x30 [ 549.882300][ T31] ? mutex_unlock+0x89/0x220 [ 549.886877][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 549.892120][ T31] __mmput+0x93/0x320 [ 549.896221][ T31] ? mmput+0x48/0x150 [ 549.900204][ T31] mmput+0x50/0x150 [ 549.903998][ T31] do_exit+0x9d2/0x27a0 [ 549.908127][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 549.914260][ T31] ? put_task_struct+0x90/0x90 [ 549.919036][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 549.924659][ T31] ? ____fput+0x15/0x20 [ 549.928801][ T31] do_group_exit+0x141/0x310 [ 549.933390][ T31] ? debug_smp_processor_id+0x17/0x20 [ 549.938789][ T31] __x64_sys_exit_group+0x3f/0x40 [ 549.943847][ T31] x64_sys_call+0x832/0x9a0 [ 549.948408][ T31] do_syscall_64+0x4c/0xa0 [ 549.952836][ T31] ? clear_bhb_loop+0x50/0xa0 [ 549.957500][ T31] ? clear_bhb_loop+0x50/0xa0 [ 549.962171][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 549.968062][ T31] RIP: 0033:0x7f4107d27749 [ 549.972525][ T31] RSP: 002b:00007ffd7f7b08b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 549.980980][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4107d27749 [ 549.988950][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 549.996906][ T31] RBP: 0000000000000003 R08: 000000057f7b09af R09: 00007f4107f4c280 [ 550.004879][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 550.012856][ T31] R13: 00007f4107f4c280 R14: 0000000000000003 R15: 00007ffd7f7b0970 [ 550.020825][ T31] [ 550.023836][ T31] INFO: task syz.3.18:387 blocked for more than 123 seconds. [ 550.031200][ T31] Not tainted syzkaller #0 [ 550.036121][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 550.044788][ T31] task:syz.3.18 state:D stack:25528 pid: 387 ppid: 377 flags:0x00004000 [ 550.054023][ T31] Call Trace: [ 550.057276][ T31] [ 550.060204][ T31] __schedule+0xb6e/0x14c0 [ 550.064616][ T31] ? release_firmware_map_entry+0x190/0x190 [ 550.070507][ T31] ? __kasan_check_write+0x14/0x20 [ 550.075609][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 550.080628][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 550.086169][ T31] schedule+0x11e/0x1e0 [ 550.090326][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 550.096038][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 550.101922][ T31] ? dput+0x47/0x90 [ 550.105716][ T31] ? kasan_save_stack+0x49/0x60 [ 550.110560][ T31] ? kasan_save_stack+0x3a/0x60 [ 550.115395][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 550.121019][ T31] ? call_rcu+0x105/0xfe0 [ 550.125334][ T31] ? __fput+0x600/0x8b0 [ 550.129479][ T31] ? ____fput+0x15/0x20 [ 550.133621][ T31] ? task_work_run+0x91/0x190 [ 550.138268][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 550.143633][ T31] ? rwsem_write_trylock+0x130/0x300 [ 550.148908][ T31] ? clear_nonspinnable+0x60/0x60 [ 550.153945][ T31] ? perf_event_exit_event+0x520/0x520 [ 550.159400][ T31] ? mutex_unlock+0x89/0x220 [ 550.163979][ T31] down_write+0x29/0x30 [ 550.168110][ T31] exit_mmap+0x127/0x860 [ 550.172354][ T31] ? vm_brk+0x30/0x30 [ 550.176323][ T31] ? mutex_unlock+0x89/0x220 [ 550.180905][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 550.186095][ T31] __mmput+0x93/0x320 [ 550.190072][ T31] ? mmput+0x48/0x150 [ 550.194048][ T31] mmput+0x50/0x150 [ 550.197829][ T31] do_exit+0x9d2/0x27a0 [ 550.201977][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 550.208028][ T31] ? put_task_struct+0x90/0x90 [ 550.212790][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 550.218412][ T31] ? ____fput+0x15/0x20 [ 550.222572][ T31] do_group_exit+0x141/0x310 [ 550.227150][ T31] ? debug_smp_processor_id+0x17/0x20 [ 550.232519][ T31] __x64_sys_exit_group+0x3f/0x40 [ 550.237530][ T31] x64_sys_call+0x832/0x9a0 [ 550.242023][ T31] do_syscall_64+0x4c/0xa0 [ 550.246426][ T31] ? clear_bhb_loop+0x50/0xa0 [ 550.251100][ T31] ? clear_bhb_loop+0x50/0xa0 [ 550.255760][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 550.261648][ T31] RIP: 0033:0x7ff040058749 [ 550.266046][ T31] RSP: 002b:00007fffd9b09c28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 550.274460][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff040058749 [ 550.282436][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 550.290830][ T31] RBP: 0000000000000003 R08: 00000005d9b09d1f R09: 00007ff04027d280 [ 550.298784][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 550.306748][ T31] R13: 00007ff04027d280 R14: 0000000000000003 R15: 00007fffd9b09ce0 [ 550.314720][ T31] [ 550.317724][ T31] NMI backtrace for cpu 0 [ 550.322024][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 550.329186][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 550.339208][ T31] Call Trace: [ 550.342461][ T31] [ 550.345365][ T31] __dump_stack+0x21/0x30 [ 550.349669][ T31] dump_stack_lvl+0xee/0x150 [ 550.354226][ T31] ? show_regs_print_info+0x20/0x20 [ 550.359393][ T31] dump_stack+0x15/0x20 [ 550.363516][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 550.368497][ T31] ? sched_show_task+0x37a/0x540 [ 550.373450][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 550.379572][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 550.385642][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 550.391676][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 550.397626][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 550.403486][ T31] watchdog+0xd64/0xea0 [ 550.407629][ T31] ? hungtask_pm_notify+0x50/0x50 [ 550.412621][ T31] ? __kasan_check_read+0x11/0x20 [ 550.417615][ T31] ? __kthread_parkme+0xac/0x200 [ 550.422521][ T31] ? preempt_count_add+0x90/0x1b0 [ 550.427516][ T31] kthread+0x411/0x500 [ 550.431553][ T31] ? hungtask_pm_notify+0x50/0x50 [ 550.436544][ T31] ? kthread_blkcg+0xd0/0xd0 [ 550.441106][ T31] ret_from_fork+0x1f/0x30 [ 550.445502][ T31] [ 550.448612][ T31] Sending NMI from CPU 0 to CPUs 1: [ 550.453858][ C1] NMI backtrace for cpu 1 [ 550.453867][ C1] CPU: 1 PID: 266 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 550.453883][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 550.453898][ C1] Workqueue: events_unbound toggle_allocation_gate [ 550.453919][ C1] RIP: 0010:smp_call_function_many_cond+0x8c3/0x9f0 [ 550.454027][ C1] Code: 84 c0 0f 85 9d 00 00 00 41 8b 1f 89 de 83 e6 01 31 ff e8 90 37 0a 00 83 e3 01 48 8b 5c 24 10 75 07 e8 d1 33 0a 00 eb 42 f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 75 10 41 f7 [ 550.454039][ C1] RSP: 0018:ffffc90000967860 EFLAGS: 00000293 [ 550.454051][ C1] RAX: ffffffff815e8b35 RBX: ffff8881f7138e80 RCX: ffff88811d418000 [ 550.454062][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 550.454070][ C1] RBP: ffffc90000967978 R08: dffffc0000000000 R09: ffffed103ee271d3 [ 550.454081][ C1] R10: ffffed103ee271d3 R11: 1ffff1103ee271d2 R12: 1ffff1103ee271d0 [ 550.454092][ C1] R13: 1ffff1103ee07af9 R14: 0000000000000000 R15: ffff8881f703d7c8 [ 550.454101][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 550.454114][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 550.454124][ C1] CR2: 000000c0056bf010 CR3: 000000000660f000 CR4: 00000000003506a0 [ 550.454138][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 550.454146][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 550.454155][ C1] Call Trace: [ 550.454159][ C1] [ 550.454165][ C1] ? text_poke_sync+0x30/0x30 [ 550.454203][ C1] ? smp_call_function_many+0x40/0x40 [ 550.454218][ C1] ? __kmalloc_track_caller+0x74/0x2c0 [ 550.454242][ C1] ? text_poke+0x20/0x20 [ 550.454254][ C1] ? text_poke_loc_init+0x349/0x570 [ 550.454267][ C1] ? text_poke_sync+0x30/0x30 [ 550.454280][ C1] on_each_cpu_cond_mask+0x43/0x80 [ 550.454295][ C1] text_poke_bp_batch+0x51a/0x5a0 [ 550.454314][ C1] ? __kmalloc_track_caller+0x75/0x2c0 [ 550.454329][ C1] ? text_poke_loc_init+0x570/0x570 [ 550.454342][ C1] ? __kasan_check_write+0x14/0x20 [ 550.454356][ C1] ? mutex_lock+0x95/0x1a0 [ 550.454370][ C1] ? wait_for_common_io+0x2bf/0x2c0 [ 550.454383][ C1] ? text_poke_queue+0xdf/0x180 [ 550.454398][ C1] text_poke_finish+0x1a/0x30 [ 550.454410][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 550.454482][ C1] __jump_label_update+0x37c/0x3a0 [ 550.454521][ C1] jump_label_update+0x39b/0x450 [ 550.454537][ C1] static_key_disable_cpuslocked+0xc5/0x1a0 [ 550.454554][ C1] static_key_disable+0x1a/0x30 [ 550.454569][ C1] toggle_allocation_gate+0x36d/0x410 [ 550.454584][ C1] ? kfence_debugfs_init+0x70/0x70 [ 550.454598][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 550.454613][ C1] ? finish_task_switch+0x16b/0x780 [ 550.454629][ C1] ? __switch_to_asm+0x3a/0x60 [ 550.454643][ C1] ? __schedule+0xb76/0x14c0 [ 550.454656][ C1] process_one_work+0x6be/0xba0 [ 550.454698][ C1] worker_thread+0xa59/0x1200 [ 550.454713][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 550.454730][ C1] ? __kthread_parkme+0xac/0x200 [ 550.454745][ C1] kthread+0x411/0x500 [ 550.454758][ C1] ? worker_clr_flags+0x190/0x190 [ 550.454773][ C1] ? kthread_blkcg+0xd0/0xd0 [ 550.454786][ C1] ret_from_fork+0x1f/0x30 [ 550.454801][ C1] [ 570.849097][ T31] INFO: task syz.2.17:375 blocked for more than 144 seconds. [ 570.856485][ T31] Not tainted syzkaller #0 [ 570.861549][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 570.870227][ T31] task:syz.2.17 state:D stack:25824 pid: 375 ppid: 365 flags:0x00004000 [ 570.879424][ T31] Call Trace: [ 570.882686][ T31] [ 570.885592][ T31] __schedule+0xb6e/0x14c0 [ 570.890011][ T31] ? release_firmware_map_entry+0x190/0x190 [ 570.895891][ T31] ? __kasan_check_write+0x14/0x20 [ 570.901007][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 570.906020][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 570.911567][ T31] schedule+0x11e/0x1e0 [ 570.915708][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 570.921423][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 570.927304][ T31] ? dput+0x47/0x90 [ 570.931233][ T31] ? kasan_save_stack+0x49/0x60 [ 570.936088][ T31] ? kasan_save_stack+0x3a/0x60 [ 570.940939][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 570.946559][ T31] ? call_rcu+0x105/0xfe0 [ 570.950884][ T31] ? __fput+0x600/0x8b0 [ 570.955033][ T31] ? ____fput+0x15/0x20 [ 570.959180][ T31] ? task_work_run+0x91/0x190 [ 570.963843][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 570.969229][ T31] ? rwsem_write_trylock+0x130/0x300 [ 570.974505][ T31] ? clear_nonspinnable+0x60/0x60 [ 570.979526][ T31] ? perf_event_exit_event+0x520/0x520 [ 570.984971][ T31] ? mutex_unlock+0x89/0x220 [ 570.989556][ T31] down_write+0x29/0x30 [ 570.993698][ T31] exit_mmap+0x127/0x860 [ 570.997913][ T31] ? vm_brk+0x30/0x30 [ 571.001895][ T31] ? mutex_unlock+0x89/0x220 [ 571.006500][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 571.011696][ T31] __mmput+0x93/0x320 [ 571.015665][ T31] ? mmput+0x48/0x150 [ 571.019685][ T31] mmput+0x50/0x150 [ 571.023488][ T31] do_exit+0x9d2/0x27a0 [ 571.027620][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 571.033683][ T31] ? put_task_struct+0x90/0x90 [ 571.038435][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 571.044085][ T31] ? ____fput+0x15/0x20 [ 571.048231][ T31] do_group_exit+0x141/0x310 [ 571.052828][ T31] ? debug_smp_processor_id+0x17/0x20 [ 571.058189][ T31] __x64_sys_exit_group+0x3f/0x40 [ 571.063209][ T31] x64_sys_call+0x832/0x9a0 [ 571.067701][ T31] do_syscall_64+0x4c/0xa0 [ 571.072115][ T31] ? clear_bhb_loop+0x50/0xa0 [ 571.076778][ T31] ? clear_bhb_loop+0x50/0xa0 [ 571.081449][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 571.087329][ T31] RIP: 0033:0x7f4107d27749 [ 571.091742][ T31] RSP: 002b:00007ffd7f7b08b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 571.100157][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4107d27749 [ 571.108104][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 571.116068][ T31] RBP: 0000000000000003 R08: 000000057f7b09af R09: 00007f4107f4c280 [ 571.124047][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 571.132011][ T31] R13: 00007f4107f4c280 R14: 0000000000000003 R15: 00007ffd7f7b0970 [ 571.139979][ T31] [ 571.142979][ T31] INFO: task syz.3.18:387 blocked for more than 144 seconds. [ 571.150335][ T31] Not tainted syzkaller #0 [ 571.155252][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.163906][ T31] task:syz.3.18 state:D stack:25528 pid: 387 ppid: 377 flags:0x00004000 [ 571.173114][ T31] Call Trace: [ 571.176368][ T31] [ 571.179293][ T31] __schedule+0xb6e/0x14c0 [ 571.183704][ T31] ? release_firmware_map_entry+0x190/0x190 [ 571.189588][ T31] ? __kasan_check_write+0x14/0x20 [ 571.194688][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 571.199707][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 571.205241][ T31] schedule+0x11e/0x1e0 [ 571.209388][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 571.215094][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 571.220981][ T31] ? dput+0x47/0x90 [ 571.224776][ T31] ? kasan_save_stack+0x49/0x60 [ 571.229620][ T31] ? kasan_save_stack+0x3a/0x60 [ 571.234453][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 571.240086][ T31] ? call_rcu+0x105/0xfe0 [ 571.244404][ T31] ? __fput+0x600/0x8b0 [ 571.248533][ T31] ? ____fput+0x15/0x20 [ 571.252679][ T31] ? task_work_run+0x91/0x190 [ 571.257367][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 571.262739][ T31] ? rwsem_write_trylock+0x130/0x300 [ 571.268015][ T31] ? clear_nonspinnable+0x60/0x60 [ 571.273034][ T31] ? perf_event_exit_event+0x520/0x520 [ 571.278488][ T31] ? mutex_unlock+0x89/0x220 [ 571.283073][ T31] down_write+0x29/0x30 [ 571.287218][ T31] exit_mmap+0x127/0x860 [ 571.291452][ T31] ? vm_brk+0x30/0x30 [ 571.295419][ T31] ? mutex_unlock+0x89/0x220 [ 571.300013][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 571.305208][ T31] __mmput+0x93/0x320 [ 571.309187][ T31] ? mmput+0x48/0x150 [ 571.313154][ T31] mmput+0x50/0x150 [ 571.316934][ T31] do_exit+0x9d2/0x27a0 [ 571.321083][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 571.327139][ T31] ? put_task_struct+0x90/0x90 [ 571.331897][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 571.337516][ T31] ? ____fput+0x15/0x20 [ 571.341666][ T31] do_group_exit+0x141/0x310 [ 571.346245][ T31] ? debug_smp_processor_id+0x17/0x20 [ 571.351613][ T31] __x64_sys_exit_group+0x3f/0x40 [ 571.356625][ T31] x64_sys_call+0x832/0x9a0 [ 571.361190][ T31] do_syscall_64+0x4c/0xa0 [ 571.365602][ T31] ? clear_bhb_loop+0x50/0xa0 [ 571.370273][ T31] ? clear_bhb_loop+0x50/0xa0 [ 571.374933][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 571.380821][ T31] RIP: 0033:0x7ff040058749 [ 571.385221][ T31] RSP: 002b:00007fffd9b09c28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 571.393627][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff040058749 [ 571.401600][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 571.409564][ T31] RBP: 0000000000000003 R08: 00000005d9b09d1f R09: 00007ff04027d280 [ 571.417519][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 571.425493][ T31] R13: 00007ff04027d280 R14: 0000000000000003 R15: 00007fffd9b09ce0 [ 571.433475][ T31] [ 571.436476][ T31] NMI backtrace for cpu 1 [ 571.440770][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 571.447936][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 571.457978][ T31] Call Trace: [ 571.461232][ T31] [ 571.464136][ T31] __dump_stack+0x21/0x30 [ 571.468439][ T31] dump_stack_lvl+0xee/0x150 [ 571.473007][ T31] ? show_regs_print_info+0x20/0x20 [ 571.478179][ T31] dump_stack+0x15/0x20 [ 571.482323][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 571.487234][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 571.492750][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 571.498882][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 571.503811][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 571.509862][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 571.515913][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 571.521866][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 571.527732][ T31] watchdog+0xd64/0xea0 [ 571.531863][ T31] ? hungtask_pm_notify+0x50/0x50 [ 571.536858][ T31] ? __kasan_check_read+0x11/0x20 [ 571.541852][ T31] ? __kthread_parkme+0xac/0x200 [ 571.546756][ T31] ? preempt_count_add+0x90/0x1b0 [ 571.551754][ T31] kthread+0x411/0x500 [ 571.555789][ T31] ? hungtask_pm_notify+0x50/0x50 [ 571.560792][ T31] ? kthread_blkcg+0xd0/0xd0 [ 571.565376][ T31] ret_from_fork+0x1f/0x30 [ 571.569780][ T31] [ 571.572930][ T31] Sending NMI from CPU 1 to CPUs 0: [ 571.578133][ C0] NMI backtrace for cpu 0 [ 571.578143][ C0] CPU: 0 PID: 266 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 571.578158][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 571.578167][ C0] Workqueue: events_unbound toggle_allocation_gate [ 571.578195][ C0] RIP: 0010:insn_get_modrm+0x227/0x790 [ 571.578287][ C0] Code: 84 c0 48 8b 5d c8 48 89 55 a8 0f 85 11 04 00 00 44 0f b6 3a 31 ff 44 89 fe e8 b5 77 f8 fe 45 85 ff 74 3e e8 1b 75 f8 fe eb 44 <4c> 89 e7 e8 41 f3 ff ff 41 89 c7 31 ff 89 c6 e8 b5 78 f8 fe 45 85 [ 571.578299][ C0] RSP: 0018:ffffc900009677e0 EFLAGS: 00000246 [ 571.578311][ C0] RAX: ffffffff8270482a RBX: 1ffff9200012cf40 RCX: ffff88811d418000 [ 571.578322][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 571.578331][ C0] RBP: ffffc90000967858 R08: dffffc0000000000 R09: ffffc900009679e0 [ 571.578341][ C0] R10: fffff5200012cf47 R11: 1ffff9200012cf3c R12: ffffc900009679e0 [ 571.578352][ C0] R13: dffffc0000000000 R14: ffffc90000967a04 R15: 0000000000000000 [ 571.578362][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 571.578374][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 571.578384][ C0] CR2: 00007f04cec9e000 CR3: 000000000660f000 CR4: 00000000003506b0 [ 571.578397][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 571.578406][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 571.578414][ C0] Call Trace: [ 571.578418][ C0] [ 571.578424][ C0] ? native_send_call_func_single_ipi+0x5e/0x70 [ 571.578443][ C0] insn_get_displacement+0x14f/0xa00 [ 571.578459][ C0] insn_get_immediate+0x342/0x1370 [ 571.578475][ C0] ? smp_call_function_many+0x40/0x40 [ 571.578493][ C0] insn_decode+0x387/0x520 [ 571.578507][ C0] ? kmem_cache_alloc+0x4c/0x260 [ 571.578523][ C0] __jump_label_patch+0xd8/0x430 [ 571.578540][ C0] ? __kasan_check_write+0x14/0x20 [ 571.578554][ C0] ? arch_jump_label_transform_queue+0xe0/0xe0 [ 571.578572][ C0] ? kmem_cache_alloc+0x4c/0x260 [ 571.578585][ C0] ? kmem_cache_alloc+0x5b/0x260 [ 571.578599][ C0] ? kmem_cache_alloc+0x4c/0x260 [ 571.578613][ C0] ? wait_for_completion_killable_timeout+0x10/0x10 [ 571.578629][ C0] ? mutex_unlock+0x89/0x220 [ 571.578642][ C0] ? __mutex_lock_slowpath+0x10/0x10 [ 571.578655][ C0] ? text_poke_queue+0xdf/0x180 [ 571.578668][ C0] arch_jump_label_transform_queue+0x4d/0xe0 [ 571.578685][ C0] __jump_label_update+0x180/0x3a0 [ 571.578699][ C0] jump_label_update+0x39b/0x450 [ 571.578715][ C0] static_key_disable_cpuslocked+0xc5/0x1a0 [ 571.578732][ C0] static_key_disable+0x1a/0x30 [ 571.578747][ C0] toggle_allocation_gate+0x36d/0x410 [ 571.578761][ C0] ? kfence_debugfs_init+0x70/0x70 [ 571.578775][ C0] ? preempt_schedule+0xa7/0xb0 [ 571.578787][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 571.578800][ C0] ? ttwu_do_activate+0x174/0x280 [ 571.578815][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 571.578830][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 571.578846][ C0] process_one_work+0x6be/0xba0 [ 571.578863][ C0] worker_thread+0xa59/0x1200 [ 571.578878][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 571.578895][ C0] ? __kthread_parkme+0xac/0x200 [ 571.578910][ C0] kthread+0x411/0x500 [ 571.578925][ C0] ? worker_clr_flags+0x190/0x190 [ 571.578939][ C0] ? kthread_blkcg+0xd0/0xd0 [ 571.578952][ C0] ret_from_fork+0x1f/0x30 [ 571.578966][ C0] [ 591.968975][ T31] INFO: task syz.2.17:375 blocked for more than 165 seconds. [ 591.976357][ T31] Not tainted syzkaller #0 [ 591.981301][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 591.990000][ T31] task:syz.2.17 state:D stack:25824 pid: 375 ppid: 365 flags:0x00004000 [ 591.999213][ T31] Call Trace: [ 592.002476][ T31] [ 592.005385][ T31] __schedule+0xb6e/0x14c0 [ 592.009797][ T31] ? release_firmware_map_entry+0x190/0x190 [ 592.015673][ T31] ? __kasan_check_write+0x14/0x20 [ 592.020786][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 592.025799][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 592.031351][ T31] schedule+0x11e/0x1e0 [ 592.035497][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 592.041243][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 592.047140][ T31] ? dput+0x47/0x90 [ 592.050968][ T31] ? kasan_save_stack+0x49/0x60 [ 592.055807][ T31] ? kasan_save_stack+0x3a/0x60 [ 592.060681][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 592.066320][ T31] ? call_rcu+0x105/0xfe0 [ 592.070760][ T31] ? __fput+0x600/0x8b0 [ 592.074910][ T31] ? ____fput+0x15/0x20 [ 592.079074][ T31] ? task_work_run+0x91/0x190 [ 592.083739][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 592.089125][ T31] ? rwsem_write_trylock+0x130/0x300 [ 592.094402][ T31] ? clear_nonspinnable+0x60/0x60 [ 592.099429][ T31] ? perf_event_exit_event+0x520/0x520 [ 592.104873][ T31] ? mutex_unlock+0x89/0x220 [ 592.109466][ T31] down_write+0x29/0x30 [ 592.113607][ T31] exit_mmap+0x127/0x860 [ 592.117858][ T31] ? vm_brk+0x30/0x30 [ 592.121844][ T31] ? mutex_unlock+0x89/0x220 [ 592.126445][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 592.131640][ T31] __mmput+0x93/0x320 [ 592.135612][ T31] ? mmput+0x48/0x150 [ 592.139590][ T31] mmput+0x50/0x150 [ 592.143389][ T31] do_exit+0x9d2/0x27a0 [ 592.147517][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 592.153588][ T31] ? put_task_struct+0x90/0x90 [ 592.158340][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 592.163973][ T31] ? ____fput+0x15/0x20 [ 592.168117][ T31] do_group_exit+0x141/0x310 [ 592.172702][ T31] ? debug_smp_processor_id+0x17/0x20 [ 592.178061][ T31] __x64_sys_exit_group+0x3f/0x40 [ 592.183083][ T31] x64_sys_call+0x832/0x9a0 [ 592.187582][ T31] do_syscall_64+0x4c/0xa0 [ 592.192027][ T31] ? clear_bhb_loop+0x50/0xa0 [ 592.196702][ T31] ? clear_bhb_loop+0x50/0xa0 [ 592.201404][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 592.207304][ T31] RIP: 0033:0x7f4107d27749 [ 592.211764][ T31] RSP: 002b:00007ffd7f7b08b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 592.220212][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4107d27749 [ 592.228176][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 592.236176][ T31] RBP: 0000000000000003 R08: 000000057f7b09af R09: 00007f4107f4c280 [ 592.244176][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 592.252168][ T31] R13: 00007f4107f4c280 R14: 0000000000000003 R15: 00007ffd7f7b0970 [ 592.260151][ T31] [ 592.263172][ T31] INFO: task syz.3.18:387 blocked for more than 165 seconds. [ 592.270542][ T31] Not tainted syzkaller #0 [ 592.275461][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 592.284121][ T31] task:syz.3.18 state:D stack:25528 pid: 387 ppid: 377 flags:0x00004000 [ 592.293337][ T31] Call Trace: [ 592.296593][ T31] [ 592.299562][ T31] __schedule+0xb6e/0x14c0 [ 592.303972][ T31] ? release_firmware_map_entry+0x190/0x190 [ 592.309874][ T31] ? __kasan_check_write+0x14/0x20 [ 592.314975][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 592.319997][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 592.325530][ T31] schedule+0x11e/0x1e0 [ 592.329693][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 592.335402][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 592.341289][ T31] ? dput+0x47/0x90 [ 592.345086][ T31] ? kasan_save_stack+0x49/0x60 [ 592.349938][ T31] ? kasan_save_stack+0x3a/0x60 [ 592.354774][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 592.360401][ T31] ? call_rcu+0x105/0xfe0 [ 592.364719][ T31] ? __fput+0x600/0x8b0 [ 592.368849][ T31] ? ____fput+0x15/0x20 [ 592.373047][ T31] ? task_work_run+0x91/0x190 [ 592.377859][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 592.383266][ T31] ? rwsem_write_trylock+0x130/0x300 [ 592.388542][ T31] ? clear_nonspinnable+0x60/0x60 [ 592.393564][ T31] ? perf_event_exit_event+0x520/0x520 [ 592.399022][ T31] ? mutex_unlock+0x89/0x220 [ 592.403585][ T31] down_write+0x29/0x30 [ 592.407711][ T31] exit_mmap+0x127/0x860 [ 592.411945][ T31] ? vm_brk+0x30/0x30 [ 592.415918][ T31] ? mutex_unlock+0x89/0x220 [ 592.420502][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 592.425696][ T31] __mmput+0x93/0x320 [ 592.429728][ T31] ? mmput+0x48/0x150 [ 592.433703][ T31] mmput+0x50/0x150 [ 592.437487][ T31] do_exit+0x9d2/0x27a0 [ 592.441661][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 592.447723][ T31] ? put_task_struct+0x90/0x90 [ 592.452494][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 592.458116][ T31] ? ____fput+0x15/0x20 [ 592.462280][ T31] do_group_exit+0x141/0x310 [ 592.466864][ T31] ? debug_smp_processor_id+0x17/0x20 [ 592.472270][ T31] __x64_sys_exit_group+0x3f/0x40 [ 592.477312][ T31] x64_sys_call+0x832/0x9a0 [ 592.481840][ T31] do_syscall_64+0x4c/0xa0 [ 592.486254][ T31] ? clear_bhb_loop+0x50/0xa0 [ 592.490937][ T31] ? clear_bhb_loop+0x50/0xa0 [ 592.495604][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 592.501511][ T31] RIP: 0033:0x7ff040058749 [ 592.505918][ T31] RSP: 002b:00007fffd9b09c28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 592.514334][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff040058749 [ 592.522308][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 592.530272][ T31] RBP: 0000000000000003 R08: 00000005d9b09d1f R09: 00007ff04027d280 [ 592.538228][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 592.546204][ T31] R13: 00007ff04027d280 R14: 0000000000000003 R15: 00007fffd9b09ce0 [ 592.554177][ T31] [ 592.557177][ T31] NMI backtrace for cpu 0 [ 592.561473][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 592.568635][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 592.578662][ T31] Call Trace: [ 592.581922][ T31] [ 592.584833][ T31] __dump_stack+0x21/0x30 [ 592.589169][ T31] dump_stack_lvl+0xee/0x150 [ 592.593736][ T31] ? show_regs_print_info+0x20/0x20 [ 592.598908][ T31] dump_stack+0x15/0x20 [ 592.603037][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 592.607945][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 592.613517][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 592.619642][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 592.624549][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 592.630584][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 592.636619][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 592.642567][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 592.648434][ T31] watchdog+0xd64/0xea0 [ 592.652562][ T31] ? hungtask_pm_notify+0x50/0x50 [ 592.657676][ T31] ? __kasan_check_read+0x11/0x20 [ 592.662688][ T31] ? __kthread_parkme+0xac/0x200 [ 592.667607][ T31] ? preempt_count_add+0x90/0x1b0 [ 592.672605][ T31] kthread+0x411/0x500 [ 592.676651][ T31] ? hungtask_pm_notify+0x50/0x50 [ 592.681653][ T31] ? kthread_blkcg+0xd0/0xd0 [ 592.686219][ T31] ret_from_fork+0x1f/0x30 [ 592.690610][ T31] [ 592.693692][ T31] Sending NMI from CPU 0 to CPUs 1: [ 592.698898][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20 [ 613.089064][ T31] INFO: task syz.2.17:375 blocked for more than 186 seconds. [ 613.096462][ T31] Not tainted syzkaller #0 [ 613.101722][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 613.110429][ T31] task:syz.2.17 state:D stack:25824 pid: 375 ppid: 365 flags:0x00004000 [ 613.119645][ T31] Call Trace: [ 613.122905][ T31] [ 613.125809][ T31] __schedule+0xb6e/0x14c0 [ 613.130221][ T31] ? release_firmware_map_entry+0x190/0x190 [ 613.136099][ T31] ? __kasan_check_write+0x14/0x20 [ 613.141222][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 613.146240][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 613.151785][ T31] schedule+0x11e/0x1e0 [ 613.155928][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 613.161676][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 613.167568][ T31] ? dput+0x47/0x90 [ 613.171521][ T31] ? kasan_save_stack+0x49/0x60 [ 613.176372][ T31] ? kasan_save_stack+0x3a/0x60 [ 613.181264][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 613.186893][ T31] ? call_rcu+0x105/0xfe0 [ 613.191225][ T31] ? __fput+0x600/0x8b0 [ 613.195369][ T31] ? ____fput+0x15/0x20 [ 613.199532][ T31] ? task_work_run+0x91/0x190 [ 613.204195][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 613.209566][ T31] ? rwsem_write_trylock+0x130/0x300 [ 613.214837][ T31] ? clear_nonspinnable+0x60/0x60 [ 613.219869][ T31] ? perf_event_exit_event+0x520/0x520 [ 613.225319][ T31] ? mutex_unlock+0x89/0x220 [ 613.229912][ T31] down_write+0x29/0x30 [ 613.234052][ T31] exit_mmap+0x127/0x860 [ 613.238269][ T31] ? vm_brk+0x30/0x30 [ 613.242255][ T31] ? mutex_unlock+0x89/0x220 [ 613.246832][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 613.252024][ T31] __mmput+0x93/0x320 [ 613.255999][ T31] ? mmput+0x48/0x150 [ 613.259980][ T31] mmput+0x50/0x150 [ 613.263775][ T31] do_exit+0x9d2/0x27a0 [ 613.267904][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 613.273963][ T31] ? put_task_struct+0x90/0x90 [ 613.278710][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 613.284336][ T31] ? ____fput+0x15/0x20 [ 613.288480][ T31] do_group_exit+0x141/0x310 [ 613.293074][ T31] ? debug_smp_processor_id+0x17/0x20 [ 613.298434][ T31] __x64_sys_exit_group+0x3f/0x40 [ 613.303463][ T31] x64_sys_call+0x832/0x9a0 [ 613.307953][ T31] do_syscall_64+0x4c/0xa0 [ 613.312373][ T31] ? clear_bhb_loop+0x50/0xa0 [ 613.317037][ T31] ? clear_bhb_loop+0x50/0xa0 [ 613.321707][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 613.327589][ T31] RIP: 0033:0x7f4107d27749 [ 613.331996][ T31] RSP: 002b:00007ffd7f7b08b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 613.340417][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4107d27749 [ 613.348360][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 613.356327][ T31] RBP: 0000000000000003 R08: 000000057f7b09af R09: 00007f4107f4c280 [ 613.364303][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 613.372265][ T31] R13: 00007f4107f4c280 R14: 0000000000000003 R15: 00007ffd7f7b0970 [ 613.380232][ T31] [ 613.383231][ T31] INFO: task syz.3.18:387 blocked for more than 186 seconds. [ 613.390587][ T31] Not tainted syzkaller #0 [ 613.395499][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 613.404158][ T31] task:syz.3.18 state:D stack:25528 pid: 387 ppid: 377 flags:0x00004000 [ 613.413363][ T31] Call Trace: [ 613.416616][ T31] [ 613.419547][ T31] __schedule+0xb6e/0x14c0 [ 613.423957][ T31] ? release_firmware_map_entry+0x190/0x190 [ 613.429863][ T31] ? __kasan_check_write+0x14/0x20 [ 613.434967][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 613.439992][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 613.445529][ T31] schedule+0x11e/0x1e0 [ 613.449680][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 613.455388][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 613.461279][ T31] ? dput+0x47/0x90 [ 613.465074][ T31] ? kasan_save_stack+0x49/0x60 [ 613.469922][ T31] ? kasan_save_stack+0x3a/0x60 [ 613.474760][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 613.480406][ T31] ? call_rcu+0x105/0xfe0 [ 613.484721][ T31] ? __fput+0x600/0x8b0 [ 613.488847][ T31] ? ____fput+0x15/0x20 [ 613.492996][ T31] ? task_work_run+0x91/0x190 [ 613.497661][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 613.503034][ T31] ? rwsem_write_trylock+0x130/0x300 [ 613.508305][ T31] ? clear_nonspinnable+0x60/0x60 [ 613.513321][ T31] ? perf_event_exit_event+0x520/0x520 [ 613.518765][ T31] ? mutex_unlock+0x89/0x220 [ 613.523347][ T31] down_write+0x29/0x30 [ 613.527488][ T31] exit_mmap+0x127/0x860 [ 613.531730][ T31] ? vm_brk+0x30/0x30 [ 613.535697][ T31] ? mutex_unlock+0x89/0x220 [ 613.540287][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 613.545475][ T31] __mmput+0x93/0x320 [ 613.549452][ T31] ? mmput+0x48/0x150 [ 613.553421][ T31] mmput+0x50/0x150 [ 613.557204][ T31] do_exit+0x9d2/0x27a0 [ 613.561352][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 613.567406][ T31] ? put_task_struct+0x90/0x90 [ 613.572196][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 613.577878][ T31] ? ____fput+0x15/0x20 [ 613.582043][ T31] do_group_exit+0x141/0x310 [ 613.586623][ T31] ? debug_smp_processor_id+0x17/0x20 [ 613.591989][ T31] __x64_sys_exit_group+0x3f/0x40 [ 613.597010][ T31] x64_sys_call+0x832/0x9a0 [ 613.601516][ T31] do_syscall_64+0x4c/0xa0 [ 613.605920][ T31] ? clear_bhb_loop+0x50/0xa0 [ 613.610589][ T31] ? clear_bhb_loop+0x50/0xa0 [ 613.615251][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 613.621148][ T31] RIP: 0033:0x7ff040058749 [ 613.625552][ T31] RSP: 002b:00007fffd9b09c28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 613.633971][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff040058749 [ 613.641945][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 613.649916][ T31] RBP: 0000000000000003 R08: 00000005d9b09d1f R09: 00007ff04027d280 [ 613.657862][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 613.665828][ T31] R13: 00007ff04027d280 R14: 0000000000000003 R15: 00007fffd9b09ce0 [ 613.673799][ T31] [ 613.676795][ T31] NMI backtrace for cpu 0 [ 613.681089][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 613.688252][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 613.698274][ T31] Call Trace: [ 613.701525][ T31] [ 613.704427][ T31] __dump_stack+0x21/0x30 [ 613.708731][ T31] dump_stack_lvl+0xee/0x150 [ 613.713288][ T31] ? show_regs_print_info+0x20/0x20 [ 613.718454][ T31] dump_stack+0x15/0x20 [ 613.722580][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 613.727497][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 613.733031][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 613.739166][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 613.744080][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 613.750117][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 613.756159][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 613.762112][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 613.767974][ T31] watchdog+0xd64/0xea0 [ 613.772103][ T31] ? hungtask_pm_notify+0x50/0x50 [ 613.777097][ T31] ? __kasan_check_read+0x11/0x20 [ 613.782093][ T31] ? __kthread_parkme+0xac/0x200 [ 613.787001][ T31] ? preempt_count_add+0x90/0x1b0 [ 613.791994][ T31] kthread+0x411/0x500 [ 613.796031][ T31] ? hungtask_pm_notify+0x50/0x50 [ 613.801033][ T31] ? kthread_blkcg+0xd0/0xd0 [ 613.805591][ T31] ret_from_fork+0x1f/0x30 [ 613.809978][ T31] [ 613.813054][ T31] Sending NMI from CPU 0 to CPUs 1: [ 613.818261][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20 [ 634.209044][ T31] INFO: task syz.2.17:375 blocked for more than 207 seconds. [ 634.216424][ T31] Not tainted syzkaller #0 [ 634.221393][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.230059][ T31] task:syz.2.17 state:D stack:25824 pid: 375 ppid: 365 flags:0x00004000 [ 634.239294][ T31] Call Trace: [ 634.242569][ T31] [ 634.245474][ T31] __schedule+0xb6e/0x14c0 [ 634.249899][ T31] ? release_firmware_map_entry+0x190/0x190 [ 634.255785][ T31] ? __kasan_check_write+0x14/0x20 [ 634.260897][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 634.265915][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 634.271465][ T31] schedule+0x11e/0x1e0 [ 634.275604][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 634.281323][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 634.287201][ T31] ? dput+0x47/0x90 [ 634.291006][ T31] ? kasan_save_stack+0x49/0x60 [ 634.295841][ T31] ? kasan_save_stack+0x3a/0x60 [ 634.300685][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 634.306306][ T31] ? call_rcu+0x105/0xfe0 [ 634.310644][ T31] ? __fput+0x600/0x8b0 [ 634.314788][ T31] ? ____fput+0x15/0x20 [ 634.318938][ T31] ? task_work_run+0x91/0x190 [ 634.323599][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 634.328970][ T31] ? rwsem_write_trylock+0x130/0x300 [ 634.334242][ T31] ? clear_nonspinnable+0x60/0x60 [ 634.339262][ T31] ? perf_event_exit_event+0x520/0x520 [ 634.344705][ T31] ? mutex_unlock+0x89/0x220 [ 634.349289][ T31] down_write+0x29/0x30 [ 634.353431][ T31] exit_mmap+0x127/0x860 [ 634.357648][ T31] ? vm_brk+0x30/0x30 [ 634.361628][ T31] ? mutex_unlock+0x89/0x220 [ 634.366205][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 634.371412][ T31] __mmput+0x93/0x320 [ 634.375383][ T31] ? mmput+0x48/0x150 [ 634.379362][ T31] mmput+0x50/0x150 [ 634.383156][ T31] do_exit+0x9d2/0x27a0 [ 634.387284][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 634.393355][ T31] ? put_task_struct+0x90/0x90 [ 634.398105][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 634.403738][ T31] ? ____fput+0x15/0x20 [ 634.407879][ T31] do_group_exit+0x141/0x310 [ 634.412468][ T31] ? debug_smp_processor_id+0x17/0x20 [ 634.417826][ T31] __x64_sys_exit_group+0x3f/0x40 [ 634.422853][ T31] x64_sys_call+0x832/0x9a0 [ 634.427347][ T31] do_syscall_64+0x4c/0xa0 [ 634.431768][ T31] ? clear_bhb_loop+0x50/0xa0 [ 634.436430][ T31] ? clear_bhb_loop+0x50/0xa0 [ 634.441105][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 634.446986][ T31] RIP: 0033:0x7f4107d27749 [ 634.451397][ T31] RSP: 002b:00007ffd7f7b08b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 634.459831][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4107d27749 [ 634.467787][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 634.475794][ T31] RBP: 0000000000000003 R08: 000000057f7b09af R09: 00007f4107f4c280 [ 634.483780][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 634.491759][ T31] R13: 00007f4107f4c280 R14: 0000000000000003 R15: 00007ffd7f7b0970 [ 634.499760][ T31] [ 634.502769][ T31] INFO: task syz.3.18:387 blocked for more than 207 seconds. [ 634.510137][ T31] Not tainted syzkaller #0 [ 634.515054][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.523721][ T31] task:syz.3.18 state:D stack:25528 pid: 387 ppid: 377 flags:0x00004000 [ 634.532932][ T31] Call Trace: [ 634.536189][ T31] [ 634.539113][ T31] __schedule+0xb6e/0x14c0 [ 634.543522][ T31] ? release_firmware_map_entry+0x190/0x190 [ 634.549418][ T31] ? __kasan_check_write+0x14/0x20 [ 634.554520][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 634.559541][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 634.565077][ T31] schedule+0x11e/0x1e0 [ 634.569227][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 634.574938][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 634.580826][ T31] ? dput+0x47/0x90 [ 634.584623][ T31] ? kasan_save_stack+0x49/0x60 [ 634.589472][ T31] ? kasan_save_stack+0x3a/0x60 [ 634.594304][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 634.599931][ T31] ? call_rcu+0x105/0xfe0 [ 634.604246][ T31] ? __fput+0x600/0x8b0 [ 634.608374][ T31] ? ____fput+0x15/0x20 [ 634.612527][ T31] ? task_work_run+0x91/0x190 [ 634.617193][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 634.622572][ T31] ? rwsem_write_trylock+0x130/0x300 [ 634.627845][ T31] ? clear_nonspinnable+0x60/0x60 [ 634.632866][ T31] ? perf_event_exit_event+0x520/0x520 [ 634.638309][ T31] ? mutex_unlock+0x89/0x220 [ 634.642896][ T31] down_write+0x29/0x30 [ 634.647037][ T31] exit_mmap+0x127/0x860 [ 634.651275][ T31] ? vm_brk+0x30/0x30 [ 634.655243][ T31] ? mutex_unlock+0x89/0x220 [ 634.659828][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 634.665017][ T31] __mmput+0x93/0x320 [ 634.669006][ T31] ? mmput+0x48/0x150 [ 634.672976][ T31] mmput+0x50/0x150 [ 634.676756][ T31] do_exit+0x9d2/0x27a0 [ 634.680908][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 634.686960][ T31] ? put_task_struct+0x90/0x90 [ 634.691720][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 634.697338][ T31] ? ____fput+0x15/0x20 [ 634.701605][ T31] do_group_exit+0x141/0x310 [ 634.706192][ T31] ? debug_smp_processor_id+0x17/0x20 [ 634.711600][ T31] __x64_sys_exit_group+0x3f/0x40 [ 634.716631][ T31] x64_sys_call+0x832/0x9a0 [ 634.721193][ T31] do_syscall_64+0x4c/0xa0 [ 634.725603][ T31] ? clear_bhb_loop+0x50/0xa0 [ 634.730388][ T31] ? clear_bhb_loop+0x50/0xa0 [ 634.735062][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 634.740971][ T31] RIP: 0033:0x7ff040058749 [ 634.745375][ T31] RSP: 002b:00007fffd9b09c28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 634.753805][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff040058749 [ 634.761801][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 634.769780][ T31] RBP: 0000000000000003 R08: 00000005d9b09d1f R09: 00007ff04027d280 [ 634.777743][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 634.785732][ T31] R13: 00007ff04027d280 R14: 0000000000000003 R15: 00007fffd9b09ce0 [ 634.793717][ T31] [ 634.796727][ T31] NMI backtrace for cpu 1 [ 634.801022][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 634.808186][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 634.818215][ T31] Call Trace: [ 634.821469][ T31] [ 634.824380][ T31] __dump_stack+0x21/0x30 [ 634.828699][ T31] dump_stack_lvl+0xee/0x150 [ 634.833269][ T31] ? show_regs_print_info+0x20/0x20 [ 634.838446][ T31] dump_stack+0x15/0x20 [ 634.842578][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 634.847497][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 634.853020][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 634.859152][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 634.864060][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 634.870122][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 634.876158][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 634.882108][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 634.887969][ T31] watchdog+0xd64/0xea0 [ 634.892098][ T31] ? hungtask_pm_notify+0x50/0x50 [ 634.897093][ T31] ? __kasan_check_read+0x11/0x20 [ 634.902093][ T31] ? __kthread_parkme+0xac/0x200 [ 634.907004][ T31] ? preempt_count_add+0x90/0x1b0 [ 634.911997][ T31] kthread+0x411/0x500 [ 634.916036][ T31] ? hungtask_pm_notify+0x50/0x50 [ 634.921029][ T31] ? kthread_blkcg+0xd0/0xd0 [ 634.925586][ T31] ret_from_fork+0x1f/0x30 [ 634.929979][ T31] [ 634.933042][ T31] Sending NMI from CPU 1 to CPUs 0: [ 634.938252][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xf/0x20