Warning: Permanently added '10.128.10.6' (ED25519) to the list of known hosts. 2025/10/12 10:51:57 parsed 1 programs [ 420.589221][ T30] audit: type=1400 audit(1760266317.278:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 420.610358][ T30] audit: type=1400 audit(1760266317.278:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 421.565668][ T30] audit: type=1400 audit(1760266318.258:66): avc: denied { mounton } for pid=288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 421.567751][ T288] cgroup: Unknown subsys name 'net' [ 421.588444][ T30] audit: type=1400 audit(1760266318.258:67): avc: denied { mount } for pid=288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 421.616188][ T30] audit: type=1400 audit(1760266318.288:68): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 421.616526][ T288] cgroup: Unknown subsys name 'devices' [ 421.824941][ T288] cgroup: Unknown subsys name 'hugetlb' [ 421.830714][ T288] cgroup: Unknown subsys name 'rlimit' [ 421.980716][ T30] audit: type=1400 audit(1760266318.668:69): avc: denied { setattr } for pid=288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 422.004154][ T30] audit: type=1400 audit(1760266318.668:70): avc: denied { create } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 422.011560][ T291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 422.024979][ T30] audit: type=1400 audit(1760266318.668:71): avc: denied { write } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 422.053762][ T30] audit: type=1400 audit(1760266318.668:72): avc: denied { read } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 422.074410][ T30] audit: type=1400 audit(1760266318.678:73): avc: denied { mounton } for pid=288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 422.103670][ T288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 422.547465][ T294] request_module fs-gadgetfs succeeded, but still no fs? [ 423.349332][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.356459][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.364081][ T346] device bridge_slave_0 entered promiscuous mode [ 423.371008][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.378174][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.385753][ T346] device bridge_slave_1 entered promiscuous mode [ 423.399133][ T342] syz-executor (342) used greatest stack depth: 21952 bytes left [ 423.459423][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.466662][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.474026][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.481070][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.507872][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 423.515881][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.523351][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.540000][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 423.548255][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.555315][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.564124][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 423.572336][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.579406][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.599163][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 423.608745][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 423.622432][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 423.643533][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 423.651759][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 423.659495][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 423.667694][ T346] device veth0_vlan entered promiscuous mode [ 423.678126][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 423.687216][ T346] device veth1_macvtap entered promiscuous mode [ 423.702224][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 423.712631][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 423.754426][ T346] syz-executor (346) used greatest stack depth: 21120 bytes left 2025/10/12 10:52:00 executed programs: 0 [ 424.036589][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.043961][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.051615][ T364] device bridge_slave_0 entered promiscuous mode [ 424.063986][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.071153][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.078895][ T364] device bridge_slave_1 entered promiscuous mode [ 424.152192][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.159450][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.166761][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.173819][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.197640][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 424.205477][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.213203][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.227181][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 424.235426][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.242755][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.258736][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 424.266982][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.274163][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.286884][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 424.300902][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 424.315776][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 424.324265][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 424.345041][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 424.353093][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 424.361241][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 424.369173][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 424.377630][ T364] device veth0_vlan entered promiscuous mode [ 424.394478][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 424.402920][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 424.412656][ T364] device veth1_macvtap entered promiscuous mode [ 424.421776][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 424.433093][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 424.441360][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 424.459448][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 424.467912][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 424.504507][ T8] device bridge_slave_1 left promiscuous mode [ 424.510738][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.518836][ T8] device bridge_slave_0 left promiscuous mode [ 424.525247][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.533872][ T8] device veth1_macvtap left promiscuous mode [ 424.539915][ T8] device veth0_vlan left promiscuous mode [ 439.551057][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.558472][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.566210][ T377] device bridge_slave_0 entered promiscuous mode [ 439.573367][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.580525][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.588248][ T377] device bridge_slave_1 entered promiscuous mode [ 439.648048][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.655376][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.662728][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.669904][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.688688][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.696045][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.703653][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 439.711378][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 439.720793][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 439.729433][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.736604][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.745869][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 439.754209][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.761367][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.776760][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 439.786294][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 439.801130][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 439.816470][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 439.824797][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 439.832371][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 439.840843][ T377] device veth0_vlan entered promiscuous mode 2025/10/12 10:52:16 executed programs: 3 [ 439.851716][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 439.861268][ T377] device veth1_macvtap entered promiscuous mode [ 439.871340][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 439.881904][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 564.542635][ T31] INFO: task syz.2.17:374 blocked for more than 122 seconds. [ 564.550179][ T31] Not tainted syzkaller #0 [ 564.555330][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.564164][ T31] task:syz.2.17 state:D stack:25824 pid: 374 ppid: 364 flags:0x00004000 [ 564.573462][ T31] Call Trace: [ 564.576830][ T31] [ 564.579794][ T31] __schedule+0xb6e/0x14c0 [ 564.584382][ T31] ? release_firmware_map_entry+0x190/0x190 [ 564.590445][ T31] ? __kasan_check_write+0x14/0x20 [ 564.595688][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 564.600784][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 564.606625][ T31] schedule+0x11e/0x1e0 [ 564.610992][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 564.616979][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 564.623047][ T31] ? dput+0x47/0x90 [ 564.626887][ T31] ? kasan_save_stack+0x49/0x60 [ 564.631740][ T31] ? kasan_save_stack+0x3a/0x60 [ 564.636644][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 564.642495][ T31] ? call_rcu+0x105/0xfe0 [ 564.647018][ T31] ? __fput+0x5d0/0x8b0 [ 564.651191][ T31] ? ____fput+0x15/0x20 [ 564.655380][ T31] ? task_work_run+0xa1/0x190 [ 564.660148][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 564.665612][ T31] ? rwsem_write_trylock+0x130/0x300 [ 564.671350][ T31] ? clear_nonspinnable+0x60/0x60 [ 564.676430][ T31] ? perf_event_exit_event+0x520/0x520 [ 564.681981][ T31] ? mutex_unlock+0x89/0x220 [ 564.686607][ T31] down_write+0x29/0x30 [ 564.690789][ T31] exit_mmap+0x127/0x860 [ 564.695131][ T31] ? vm_brk+0x30/0x30 [ 564.699131][ T31] ? mutex_unlock+0x89/0x220 [ 564.703863][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 564.709255][ T31] __mmput+0x93/0x320 [ 564.713539][ T31] ? mmput+0x48/0x150 [ 564.717675][ T31] mmput+0x50/0x150 [ 564.721597][ T31] do_exit+0x9d2/0x27a0 [ 564.725942][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 564.732080][ T31] ? put_task_struct+0x90/0x90 [ 564.736883][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 564.742564][ T31] ? ____fput+0x15/0x20 [ 564.746732][ T31] do_group_exit+0x141/0x310 [ 564.751321][ T31] ? debug_smp_processor_id+0x17/0x20 [ 564.756831][ T31] __x64_sys_exit_group+0x3f/0x40 [ 564.761955][ T31] x64_sys_call+0x832/0x9a0 [ 564.766763][ T31] do_syscall_64+0x4c/0xa0 [ 564.771318][ T31] ? clear_bhb_loop+0x50/0xa0 [ 564.776099][ T31] ? clear_bhb_loop+0x50/0xa0 [ 564.780920][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 564.786910][ T31] RIP: 0033:0x7f689104cec9 [ 564.791685][ T31] RSP: 002b:00007ffc52be3d58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 564.800726][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f689104cec9 [ 564.808770][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 564.816987][ T31] RBP: 0000000000000003 R08: 0000000552be3e4f R09: 00007f689126f280 [ 564.825517][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 564.834201][ T31] R13: 00007f689126f280 R14: 0000000000000003 R15: 00007ffc52be3e10 [ 564.842836][ T31] [ 564.846008][ T31] INFO: task syz.3.18:387 blocked for more than 123 seconds. [ 564.853595][ T31] Not tainted syzkaller #0 [ 564.858573][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.867776][ T31] task:syz.3.18 state:D stack:25528 pid: 387 ppid: 377 flags:0x00004000 [ 564.877153][ T31] Call Trace: [ 564.880469][ T31] [ 564.883481][ T31] __schedule+0xb6e/0x14c0 [ 564.887936][ T31] ? release_firmware_map_entry+0x190/0x190 [ 564.893882][ T31] ? __kasan_check_write+0x14/0x20 [ 564.899076][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 564.904433][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 564.910451][ T31] schedule+0x11e/0x1e0 [ 564.914657][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 564.920489][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 564.926536][ T31] ? dput+0x47/0x90 [ 564.930367][ T31] ? kasan_save_stack+0x49/0x60 [ 564.935262][ T31] ? kasan_save_stack+0x3a/0x60 [ 564.940125][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 564.945946][ T31] ? call_rcu+0x105/0xfe0 [ 564.950315][ T31] ? __fput+0x5d0/0x8b0 [ 564.954507][ T31] ? ____fput+0x15/0x20 [ 564.958678][ T31] ? task_work_run+0xa1/0x190 [ 564.963526][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 564.969506][ T31] ? rwsem_write_trylock+0x130/0x300 [ 564.975022][ T31] ? clear_nonspinnable+0x60/0x60 [ 564.980107][ T31] ? perf_event_exit_event+0x520/0x520 [ 564.985932][ T31] ? mutex_unlock+0x89/0x220 [ 564.990618][ T31] down_write+0x29/0x30 [ 564.995110][ T31] exit_mmap+0x127/0x860 [ 564.999913][ T31] ? vm_brk+0x30/0x30 [ 565.004144][ T31] ? mutex_unlock+0x89/0x220 [ 565.008811][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 565.014137][ T31] __mmput+0x93/0x320 [ 565.018671][ T31] ? mmput+0x48/0x150 [ 565.022744][ T31] mmput+0x50/0x150 [ 565.026590][ T31] do_exit+0x9d2/0x27a0 [ 565.030850][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 565.037022][ T31] ? put_task_struct+0x90/0x90 [ 565.041944][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 565.047721][ T31] ? ____fput+0x15/0x20 [ 565.052338][ T31] do_group_exit+0x141/0x310 [ 565.056997][ T31] ? debug_smp_processor_id+0x17/0x20 [ 565.062396][ T31] __x64_sys_exit_group+0x3f/0x40 [ 565.067485][ T31] x64_sys_call+0x832/0x9a0 [ 565.072004][ T31] do_syscall_64+0x4c/0xa0 [ 565.076533][ T31] ? clear_bhb_loop+0x50/0xa0 [ 565.081233][ T31] ? clear_bhb_loop+0x50/0xa0 [ 565.085961][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 565.092088][ T31] RIP: 0033:0x7fc16e2a6ec9 [ 565.096571][ T31] RSP: 002b:00007ffd58d500e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 565.105027][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc16e2a6ec9 [ 565.113032][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 565.121018][ T31] RBP: 0000000000000003 R08: 0000000558d501df R09: 00007fc16e4c9280 [ 565.129025][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 565.137126][ T31] R13: 00007fc16e4c9280 R14: 0000000000000003 R15: 00007ffd58d501a0 [ 565.145207][ T31] [ 565.148256][ T31] NMI backtrace for cpu 0 [ 565.152703][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 565.160027][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 565.170219][ T31] Call Trace: [ 565.173507][ T31] [ 565.176435][ T31] __dump_stack+0x21/0x30 [ 565.180788][ T31] dump_stack_lvl+0xee/0x150 [ 565.185653][ T31] ? show_regs_print_info+0x20/0x20 [ 565.190872][ T31] dump_stack+0x15/0x20 [ 565.195074][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 565.200174][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 565.205733][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 565.212066][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 565.217026][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 565.223198][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 565.229274][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 565.235584][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 565.241517][ T31] watchdog+0xd64/0xea0 [ 565.245759][ T31] ? hungtask_pm_notify+0x50/0x50 [ 565.250786][ T31] ? __kasan_check_read+0x11/0x20 [ 565.255811][ T31] ? __kthread_parkme+0xac/0x200 [ 565.260919][ T31] ? preempt_count_add+0x90/0x1b0 [ 565.266114][ T31] kthread+0x411/0x500 [ 565.270196][ T31] ? hungtask_pm_notify+0x50/0x50 [ 565.275229][ T31] ? kthread_blkcg+0xd0/0xd0 [ 565.279844][ T31] ret_from_fork+0x1f/0x30 [ 565.284302][ T31] [ 565.287397][ T31] Sending NMI from CPU 0 to CPUs 1: [ 565.292682][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20 [ 585.662574][ T31] INFO: task syz.2.17:374 blocked for more than 144 seconds. [ 585.669968][ T31] Not tainted syzkaller #0 [ 585.675017][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 585.683714][ T31] task:syz.2.17 state:D stack:25824 pid: 374 ppid: 364 flags:0x00004000 [ 585.692971][ T31] Call Trace: [ 585.696262][ T31] [ 585.699368][ T31] __schedule+0xb6e/0x14c0 [ 585.703826][ T31] ? release_firmware_map_entry+0x190/0x190 [ 585.709765][ T31] ? __kasan_check_write+0x14/0x20 [ 585.715256][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 585.720485][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 585.726294][ T31] schedule+0x11e/0x1e0 [ 585.730490][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 585.736288][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 585.742307][ T31] ? dput+0x47/0x90 [ 585.746300][ T31] ? kasan_save_stack+0x49/0x60 [ 585.751186][ T31] ? kasan_save_stack+0x3a/0x60 [ 585.756186][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 585.761986][ T31] ? call_rcu+0x105/0xfe0 [ 585.766390][ T31] ? __fput+0x5d0/0x8b0 [ 585.770700][ T31] ? ____fput+0x15/0x20 [ 585.775005][ T31] ? task_work_run+0xa1/0x190 [ 585.779795][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 585.785576][ T31] ? rwsem_write_trylock+0x130/0x300 [ 585.790895][ T31] ? clear_nonspinnable+0x60/0x60 [ 585.795975][ T31] ? perf_event_exit_event+0x520/0x520 [ 585.801455][ T31] ? mutex_unlock+0x89/0x220 [ 585.806117][ T31] down_write+0x29/0x30 [ 585.810293][ T31] exit_mmap+0x127/0x860 [ 585.814578][ T31] ? vm_brk+0x30/0x30 [ 585.818582][ T31] ? mutex_unlock+0x89/0x220 [ 585.823228][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 585.828454][ T31] __mmput+0x93/0x320 [ 585.832504][ T31] ? mmput+0x48/0x150 [ 585.836506][ T31] mmput+0x50/0x150 [ 585.840319][ T31] do_exit+0x9d2/0x27a0 [ 585.844522][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 585.850698][ T31] ? put_task_struct+0x90/0x90 [ 585.855627][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 585.861286][ T31] ? ____fput+0x15/0x20 [ 585.865490][ T31] do_group_exit+0x141/0x310 [ 585.870114][ T31] ? debug_smp_processor_id+0x17/0x20 [ 585.875744][ T31] __x64_sys_exit_group+0x3f/0x40 [ 585.880803][ T31] x64_sys_call+0x832/0x9a0 [ 585.885420][ T31] do_syscall_64+0x4c/0xa0 [ 585.889860][ T31] ? clear_bhb_loop+0x50/0xa0 [ 585.894594][ T31] ? clear_bhb_loop+0x50/0xa0 [ 585.899290][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 585.905233][ T31] RIP: 0033:0x7f689104cec9 [ 585.909660][ T31] RSP: 002b:00007ffc52be3d58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 585.918208][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f689104cec9 [ 585.926324][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 585.934365][ T31] RBP: 0000000000000003 R08: 0000000552be3e4f R09: 00007f689126f280 [ 585.942535][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 585.950636][ T31] R13: 00007f689126f280 R14: 0000000000000003 R15: 00007ffc52be3e10 [ 585.958749][ T31] [ 585.961798][ T31] INFO: task syz.3.18:387 blocked for more than 144 seconds. [ 585.969315][ T31] Not tainted syzkaller #0 [ 585.974279][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 585.983045][ T31] task:syz.3.18 state:D stack:25528 pid: 387 ppid: 377 flags:0x00004000 [ 585.992270][ T31] Call Trace: [ 585.995592][ T31] [ 585.998531][ T31] __schedule+0xb6e/0x14c0 [ 586.002985][ T31] ? release_firmware_map_entry+0x190/0x190 [ 586.008896][ T31] ? __kasan_check_write+0x14/0x20 [ 586.014055][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 586.019279][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 586.024872][ T31] schedule+0x11e/0x1e0 [ 586.029055][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 586.034917][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 586.040844][ T31] ? dput+0x47/0x90 [ 586.044702][ T31] ? kasan_save_stack+0x49/0x60 [ 586.049568][ T31] ? kasan_save_stack+0x3a/0x60 [ 586.054449][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 586.060118][ T31] ? call_rcu+0x105/0xfe0 [ 586.064487][ T31] ? __fput+0x5d0/0x8b0 [ 586.068658][ T31] ? ____fput+0x15/0x20 [ 586.072858][ T31] ? task_work_run+0xa1/0x190 [ 586.077549][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 586.083060][ T31] ? rwsem_write_trylock+0x130/0x300 [ 586.088361][ T31] ? clear_nonspinnable+0x60/0x60 [ 586.093683][ T31] ? perf_event_exit_event+0x520/0x520 [ 586.099160][ T31] ? mutex_unlock+0x89/0x220 [ 586.103850][ T31] down_write+0x29/0x30 [ 586.108197][ T31] exit_mmap+0x127/0x860 [ 586.112492][ T31] ? vm_brk+0x30/0x30 [ 586.116554][ T31] ? mutex_unlock+0x89/0x220 [ 586.121157][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 586.126417][ T31] __mmput+0x93/0x320 [ 586.130415][ T31] ? mmput+0x48/0x150 [ 586.134523][ T31] mmput+0x50/0x150 [ 586.138346][ T31] do_exit+0x9d2/0x27a0 [ 586.142533][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 586.148615][ T31] ? put_task_struct+0x90/0x90 [ 586.153452][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 586.159153][ T31] ? ____fput+0x15/0x20 [ 586.163483][ T31] do_group_exit+0x141/0x310 [ 586.168090][ T31] ? debug_smp_processor_id+0x17/0x20 [ 586.173498][ T31] __x64_sys_exit_group+0x3f/0x40 [ 586.178546][ T31] x64_sys_call+0x832/0x9a0 [ 586.183087][ T31] do_syscall_64+0x4c/0xa0 [ 586.187539][ T31] ? clear_bhb_loop+0x50/0xa0 [ 586.192210][ T31] ? clear_bhb_loop+0x50/0xa0 [ 586.196952][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 586.202895][ T31] RIP: 0033:0x7fc16e2a6ec9 [ 586.207311][ T31] RSP: 002b:00007ffd58d500e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 586.215785][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc16e2a6ec9 [ 586.224022][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 586.232007][ T31] RBP: 0000000000000003 R08: 0000000558d501df R09: 00007fc16e4c9280 [ 586.240134][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 586.248155][ T31] R13: 00007fc16e4c9280 R14: 0000000000000003 R15: 00007ffd58d501a0 [ 586.256196][ T31] [ 586.259236][ T31] NMI backtrace for cpu 0 [ 586.263715][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 586.270914][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 586.280969][ T31] Call Trace: [ 586.284506][ T31] [ 586.287443][ T31] __dump_stack+0x21/0x30 [ 586.291798][ T31] dump_stack_lvl+0xee/0x150 [ 586.296401][ T31] ? show_regs_print_info+0x20/0x20 [ 586.301622][ T31] dump_stack+0x15/0x20 [ 586.305794][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 586.310743][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 586.316388][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 586.322541][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 586.327482][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 586.333548][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 586.339615][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 586.345596][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 586.351574][ T31] watchdog+0xd64/0xea0 [ 586.355733][ T31] ? hungtask_pm_notify+0x50/0x50 [ 586.360758][ T31] ? __kasan_check_read+0x11/0x20 [ 586.365839][ T31] ? __kthread_parkme+0xac/0x200 [ 586.370790][ T31] ? preempt_count_add+0x90/0x1b0 [ 586.375826][ T31] kthread+0x411/0x500 [ 586.379899][ T31] ? hungtask_pm_notify+0x50/0x50 [ 586.385043][ T31] ? kthread_blkcg+0xd0/0xd0 [ 586.389641][ T31] ret_from_fork+0x1f/0x30 [ 586.394064][ T31] [ 586.397184][ T31] Sending NMI from CPU 0 to CPUs 1: [ 586.402464][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20 [ 606.782525][ T31] INFO: task syz.2.17:374 blocked for more than 165 seconds. [ 606.790026][ T31] Not tainted syzkaller #0 [ 606.795024][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 606.803735][ T31] task:syz.2.17 state:D stack:25824 pid: 374 ppid: 364 flags:0x00004000 [ 606.813215][ T31] Call Trace: [ 606.816519][ T31] [ 606.819463][ T31] __schedule+0xb6e/0x14c0 [ 606.823928][ T31] ? release_firmware_map_entry+0x190/0x190 [ 606.829846][ T31] ? __kasan_check_write+0x14/0x20 [ 606.835004][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 606.840061][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 606.845740][ T31] schedule+0x11e/0x1e0 [ 606.849923][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 606.855679][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 606.861586][ T31] ? dput+0x47/0x90 [ 606.865427][ T31] ? kasan_save_stack+0x49/0x60 [ 606.870389][ T31] ? kasan_save_stack+0x3a/0x60 [ 606.875266][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 606.880913][ T31] ? call_rcu+0x105/0xfe0 [ 606.885277][ T31] ? __fput+0x5d0/0x8b0 [ 606.889552][ T31] ? ____fput+0x15/0x20 [ 606.893775][ T31] ? task_work_run+0xa1/0x190 [ 606.898495][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 606.903936][ T31] ? rwsem_write_trylock+0x130/0x300 [ 606.909242][ T31] ? clear_nonspinnable+0x60/0x60 [ 606.914309][ T31] ? perf_event_exit_event+0x520/0x520 [ 606.919807][ T31] ? mutex_unlock+0x89/0x220 [ 606.924458][ T31] down_write+0x29/0x30 [ 606.928634][ T31] exit_mmap+0x127/0x860 [ 606.932937][ T31] ? vm_brk+0x30/0x30 [ 606.936945][ T31] ? mutex_unlock+0x89/0x220 [ 606.941625][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 606.946913][ T31] __mmput+0x93/0x320 [ 606.950917][ T31] ? mmput+0x48/0x150 [ 606.954983][ T31] mmput+0x50/0x150 [ 606.958927][ T31] do_exit+0x9d2/0x27a0 [ 606.963180][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 606.969275][ T31] ? put_task_struct+0x90/0x90 [ 606.974106][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 606.979760][ T31] ? ____fput+0x15/0x20 [ 606.983979][ T31] do_group_exit+0x141/0x310 [ 606.988603][ T31] ? debug_smp_processor_id+0x17/0x20 [ 606.994015][ T31] __x64_sys_exit_group+0x3f/0x40 [ 606.999059][ T31] x64_sys_call+0x832/0x9a0 [ 607.003623][ T31] do_syscall_64+0x4c/0xa0 [ 607.008163][ T31] ? clear_bhb_loop+0x50/0xa0 [ 607.012903][ T31] ? clear_bhb_loop+0x50/0xa0 [ 607.017613][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 607.023564][ T31] RIP: 0033:0x7f689104cec9 [ 607.027991][ T31] RSP: 002b:00007ffc52be3d58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 607.036451][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f689104cec9 [ 607.044498][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 607.052502][ T31] RBP: 0000000000000003 R08: 0000000552be3e4f R09: 00007f689126f280 [ 607.060592][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 607.068593][ T31] R13: 00007f689126f280 R14: 0000000000000003 R15: 00007ffc52be3e10 [ 607.076738][ T31] [ 607.080006][ T31] INFO: task syz.3.18:387 blocked for more than 165 seconds. [ 607.087452][ T31] Not tainted syzkaller #0 [ 607.092510][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 607.101173][ T31] task:syz.3.18 state:D stack:25528 pid: 387 ppid: 377 flags:0x00004000 [ 607.110514][ T31] Call Trace: [ 607.113833][ T31] [ 607.116772][ T31] __schedule+0xb6e/0x14c0 [ 607.121187][ T31] ? release_firmware_map_entry+0x190/0x190 [ 607.127117][ T31] ? __kasan_check_write+0x14/0x20 [ 607.132251][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 607.137504][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 607.143256][ T31] schedule+0x11e/0x1e0 [ 607.147454][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 607.153247][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 607.159258][ T31] ? dput+0x47/0x90 [ 607.163120][ T31] ? kasan_save_stack+0x49/0x60 [ 607.168038][ T31] ? kasan_save_stack+0x3a/0x60 [ 607.173044][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 607.178705][ T31] ? call_rcu+0x105/0xfe0 [ 607.183140][ T31] ? __fput+0x5d0/0x8b0 [ 607.187492][ T31] ? ____fput+0x15/0x20 [ 607.191654][ T31] ? task_work_run+0xa1/0x190 [ 607.196395][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 607.201798][ T31] ? rwsem_write_trylock+0x130/0x300 [ 607.207140][ T31] ? clear_nonspinnable+0x60/0x60 [ 607.212184][ T31] ? perf_event_exit_event+0x520/0x520 [ 607.217776][ T31] ? mutex_unlock+0x89/0x220 [ 607.222444][ T31] down_write+0x29/0x30 [ 607.226612][ T31] exit_mmap+0x127/0x860 [ 607.230870][ T31] ? vm_brk+0x30/0x30 [ 607.234919][ T31] ? mutex_unlock+0x89/0x220 [ 607.239543][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 607.244792][ T31] __mmput+0x93/0x320 [ 607.248797][ T31] ? mmput+0x48/0x150 [ 607.252846][ T31] mmput+0x50/0x150 [ 607.256676][ T31] do_exit+0x9d2/0x27a0 [ 607.260841][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 607.266956][ T31] ? put_task_struct+0x90/0x90 [ 607.271738][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 607.277449][ T31] ? ____fput+0x15/0x20 [ 607.281625][ T31] do_group_exit+0x141/0x310 [ 607.286252][ T31] ? debug_smp_processor_id+0x17/0x20 [ 607.291641][ T31] __x64_sys_exit_group+0x3f/0x40 [ 607.296701][ T31] x64_sys_call+0x832/0x9a0 [ 607.301226][ T31] do_syscall_64+0x4c/0xa0 [ 607.305724][ T31] ? clear_bhb_loop+0x50/0xa0 [ 607.310425][ T31] ? clear_bhb_loop+0x50/0xa0 [ 607.315246][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 607.321182][ T31] RIP: 0033:0x7fc16e2a6ec9 [ 607.325783][ T31] RSP: 002b:00007ffd58d500e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 607.334259][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc16e2a6ec9 [ 607.342243][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 607.350326][ T31] RBP: 0000000000000003 R08: 0000000558d501df R09: 00007fc16e4c9280 [ 607.358348][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 607.366355][ T31] R13: 00007fc16e4c9280 R14: 0000000000000003 R15: 00007ffd58d501a0 [ 607.374547][ T31] [ 607.377606][ T31] NMI backtrace for cpu 0 [ 607.382020][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 607.389292][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 607.399488][ T31] Call Trace: [ 607.402768][ T31] [ 607.405703][ T31] __dump_stack+0x21/0x30 [ 607.410265][ T31] dump_stack_lvl+0xee/0x150 [ 607.414868][ T31] ? show_regs_print_info+0x20/0x20 [ 607.420070][ T31] dump_stack+0x15/0x20 [ 607.424223][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 607.429178][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 607.434719][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 607.440923][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 607.445900][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 607.451979][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 607.458055][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 607.464036][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 607.469927][ T31] watchdog+0xd64/0xea0 [ 607.474081][ T31] ? hungtask_pm_notify+0x50/0x50 [ 607.479108][ T31] ? __kasan_check_read+0x11/0x20 [ 607.484258][ T31] ? __kthread_parkme+0xac/0x200 [ 607.489190][ T31] ? preempt_count_add+0x90/0x1b0 [ 607.494381][ T31] kthread+0x411/0x500 [ 607.498448][ T31] ? hungtask_pm_notify+0x50/0x50 [ 607.503489][ T31] ? kthread_blkcg+0xd0/0xd0 [ 607.508087][ T31] ret_from_fork+0x1f/0x30 [ 607.512512][ T31] [ 607.515641][ T31] Sending NMI from CPU 0 to CPUs 1: [ 607.520878][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20 [ 627.902568][ T31] INFO: task syz.2.17:374 blocked for more than 186 seconds. [ 627.909989][ T31] Not tainted syzkaller #0 [ 627.915111][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 627.923837][ T31] task:syz.2.17 state:D stack:25824 pid: 374 ppid: 364 flags:0x00004000 [ 627.933426][ T31] Call Trace: [ 627.936799][ T31] [ 627.939816][ T31] __schedule+0xb6e/0x14c0 [ 627.944382][ T31] ? release_firmware_map_entry+0x190/0x190 [ 627.950300][ T31] ? __kasan_check_write+0x14/0x20 [ 627.955451][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 627.960495][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 627.966089][ T31] schedule+0x11e/0x1e0 [ 627.970260][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 627.976104][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 627.982010][ T31] ? dput+0x47/0x90 [ 627.985891][ T31] ? kasan_save_stack+0x49/0x60 [ 627.990764][ T31] ? kasan_save_stack+0x3a/0x60 [ 627.995658][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 628.001321][ T31] ? call_rcu+0x105/0xfe0 [ 628.005924][ T31] ? __fput+0x5d0/0x8b0 [ 628.010107][ T31] ? ____fput+0x15/0x20 [ 628.014310][ T31] ? task_work_run+0xa1/0x190 [ 628.019030][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 628.024537][ T31] ? rwsem_write_trylock+0x130/0x300 [ 628.029885][ T31] ? clear_nonspinnable+0x60/0x60 [ 628.035124][ T31] ? perf_event_exit_event+0x520/0x520 [ 628.040597][ T31] ? mutex_unlock+0x89/0x220 [ 628.045243][ T31] down_write+0x29/0x30 [ 628.049416][ T31] exit_mmap+0x127/0x860 [ 628.053698][ T31] ? vm_brk+0x30/0x30 [ 628.057733][ T31] ? mutex_unlock+0x89/0x220 [ 628.062352][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 628.067610][ T31] __mmput+0x93/0x320 [ 628.071635][ T31] ? mmput+0x48/0x150 [ 628.075917][ T31] mmput+0x50/0x150 [ 628.079741][ T31] do_exit+0x9d2/0x27a0 [ 628.084043][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 628.090304][ T31] ? put_task_struct+0x90/0x90 [ 628.095105][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 628.100759][ T31] ? ____fput+0x15/0x20 [ 628.104981][ T31] do_group_exit+0x141/0x310 [ 628.109595][ T31] ? debug_smp_processor_id+0x17/0x20 [ 628.115035][ T31] __x64_sys_exit_group+0x3f/0x40 [ 628.120085][ T31] x64_sys_call+0x832/0x9a0 [ 628.124638][ T31] do_syscall_64+0x4c/0xa0 [ 628.129174][ T31] ? clear_bhb_loop+0x50/0xa0 [ 628.133920][ T31] ? clear_bhb_loop+0x50/0xa0 [ 628.138750][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 628.144731][ T31] RIP: 0033:0x7f689104cec9 [ 628.149163][ T31] RSP: 002b:00007ffc52be3d58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 628.157666][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f689104cec9 [ 628.165755][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 628.173796][ T31] RBP: 0000000000000003 R08: 0000000552be3e4f R09: 00007f689126f280 [ 628.181884][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 628.190004][ T31] R13: 00007f689126f280 R14: 0000000000000003 R15: 00007ffc52be3e10 [ 628.198044][ T31] [ 628.201088][ T31] INFO: task syz.3.18:387 blocked for more than 186 seconds. [ 628.208630][ T31] Not tainted syzkaller #0 [ 628.213763][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 628.222633][ T31] task:syz.3.18 state:D stack:25528 pid: 387 ppid: 377 flags:0x00004000 [ 628.231955][ T31] Call Trace: [ 628.235281][ T31] [ 628.238227][ T31] __schedule+0xb6e/0x14c0 [ 628.242692][ T31] ? release_firmware_map_entry+0x190/0x190 [ 628.248658][ T31] ? __kasan_check_write+0x14/0x20 [ 628.253960][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 628.259012][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 628.264603][ T31] schedule+0x11e/0x1e0 [ 628.268778][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 628.274534][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 628.280425][ T31] ? dput+0x47/0x90 [ 628.284287][ T31] ? kasan_save_stack+0x49/0x60 [ 628.289295][ T31] ? kasan_save_stack+0x3a/0x60 [ 628.294207][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 628.299963][ T31] ? call_rcu+0x105/0xfe0 [ 628.304361][ T31] ? __fput+0x5d0/0x8b0 [ 628.308575][ T31] ? ____fput+0x15/0x20 [ 628.312807][ T31] ? task_work_run+0xa1/0x190 [ 628.317536][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 628.322951][ T31] ? rwsem_write_trylock+0x130/0x300 [ 628.328255][ T31] ? clear_nonspinnable+0x60/0x60 [ 628.333314][ T31] ? perf_event_exit_event+0x520/0x520 [ 628.338785][ T31] ? mutex_unlock+0x89/0x220 [ 628.343407][ T31] down_write+0x29/0x30 [ 628.347577][ T31] exit_mmap+0x127/0x860 [ 628.351831][ T31] ? vm_brk+0x30/0x30 [ 628.355854][ T31] ? mutex_unlock+0x89/0x220 [ 628.360461][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 628.365786][ T31] __mmput+0x93/0x320 [ 628.369791][ T31] ? mmput+0x48/0x150 [ 628.373857][ T31] mmput+0x50/0x150 [ 628.377783][ T31] do_exit+0x9d2/0x27a0 [ 628.382366][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 628.388535][ T31] ? put_task_struct+0x90/0x90 [ 628.393361][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 628.399011][ T31] ? ____fput+0x15/0x20 [ 628.403202][ T31] do_group_exit+0x141/0x310 [ 628.407860][ T31] ? debug_smp_processor_id+0x17/0x20 [ 628.413276][ T31] __x64_sys_exit_group+0x3f/0x40 [ 628.418320][ T31] x64_sys_call+0x832/0x9a0 [ 628.422857][ T31] do_syscall_64+0x4c/0xa0 [ 628.427307][ T31] ? clear_bhb_loop+0x50/0xa0 [ 628.432147][ T31] ? clear_bhb_loop+0x50/0xa0 [ 628.437019][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 628.443008][ T31] RIP: 0033:0x7fc16e2a6ec9 [ 628.447461][ T31] RSP: 002b:00007ffd58d500e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 628.455914][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc16e2a6ec9 [ 628.463935][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 628.471905][ T31] RBP: 0000000000000003 R08: 0000000558d501df R09: 00007fc16e4c9280 [ 628.479925][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 628.488095][ T31] R13: 00007fc16e4c9280 R14: 0000000000000003 R15: 00007ffd58d501a0 [ 628.496196][ T31] [ 628.499243][ T31] NMI backtrace for cpu 1 [ 628.503724][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 628.510923][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 628.520982][ T31] Call Trace: [ 628.524259][ T31] [ 628.527183][ T31] __dump_stack+0x21/0x30 [ 628.531510][ T31] dump_stack_lvl+0xee/0x150 [ 628.536092][ T31] ? show_regs_print_info+0x20/0x20 [ 628.541305][ T31] dump_stack+0x15/0x20 [ 628.545467][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 628.550412][ T31] ? sched_show_task+0x37a/0x540 [ 628.555414][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 628.561570][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 628.567650][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 628.573728][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 628.579825][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 628.585736][ T31] watchdog+0xd64/0xea0 [ 628.589892][ T31] ? hungtask_pm_notify+0x50/0x50 [ 628.594908][ T31] ? __kasan_check_read+0x11/0x20 [ 628.599923][ T31] ? __kthread_parkme+0xac/0x200 [ 628.604870][ T31] ? preempt_count_add+0x90/0x1b0 [ 628.609895][ T31] kthread+0x411/0x500 [ 628.613988][ T31] ? hungtask_pm_notify+0x50/0x50 [ 628.619018][ T31] ? kthread_blkcg+0xd0/0xd0 [ 628.623602][ T31] ret_from_fork+0x1f/0x30 [ 628.628104][ T31] [ 628.631218][ T31] Sending NMI from CPU 1 to CPUs 0: [ 628.636549][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xf/0x20 [ 649.022604][ T31] INFO: task syz.2.17:374 blocked for more than 207 seconds. [ 649.030467][ T31] Not tainted syzkaller #0 [ 649.035580][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 649.044377][ T31] task:syz.2.17 state:D stack:25824 pid: 374 ppid: 364 flags:0x00004000 [ 649.053909][ T31] Call Trace: [ 649.057218][ T31] [ 649.060178][ T31] __schedule+0xb6e/0x14c0 [ 649.064666][ T31] ? release_firmware_map_entry+0x190/0x190 [ 649.070665][ T31] ? __kasan_check_write+0x14/0x20 [ 649.075824][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 649.080881][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 649.086465][ T31] schedule+0x11e/0x1e0 [ 649.090633][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 649.096732][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 649.104788][ T31] ? dput+0x47/0x90 [ 649.108603][ T31] ? kasan_save_stack+0x49/0x60 [ 649.113506][ T31] ? kasan_save_stack+0x3a/0x60 [ 649.118373][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 649.124064][ T31] ? call_rcu+0x105/0xfe0 [ 649.128407][ T31] ? __fput+0x5d0/0x8b0 [ 649.132589][ T31] ? ____fput+0x15/0x20 [ 649.136771][ T31] ? task_work_run+0xa1/0x190 [ 649.141445][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 649.146854][ T31] ? rwsem_write_trylock+0x130/0x300 [ 649.152159][ T31] ? clear_nonspinnable+0x60/0x60 [ 649.157305][ T31] ? perf_event_exit_event+0x520/0x520 [ 649.162907][ T31] ? mutex_unlock+0x89/0x220 [ 649.167507][ T31] down_write+0x29/0x30 [ 649.171744][ T31] exit_mmap+0x127/0x860 [ 649.176017][ T31] ? vm_brk+0x30/0x30 [ 649.180021][ T31] ? mutex_unlock+0x89/0x220 [ 649.184657][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 649.189879][ T31] __mmput+0x93/0x320 [ 649.194123][ T31] ? mmput+0x48/0x150 [ 649.198423][ T31] mmput+0x50/0x150 [ 649.202252][ T31] do_exit+0x9d2/0x27a0 [ 649.206442][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 649.212717][ T31] ? put_task_struct+0x90/0x90 [ 649.217566][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 649.223220][ T31] ? ____fput+0x15/0x20 [ 649.227389][ T31] do_group_exit+0x141/0x310 [ 649.231985][ T31] ? debug_smp_processor_id+0x17/0x20 [ 649.237411][ T31] __x64_sys_exit_group+0x3f/0x40 [ 649.242470][ T31] x64_sys_call+0x832/0x9a0 [ 649.246974][ T31] do_syscall_64+0x4c/0xa0 [ 649.251389][ T31] ? clear_bhb_loop+0x50/0xa0 [ 649.256208][ T31] ? clear_bhb_loop+0x50/0xa0 [ 649.260898][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 649.266965][ T31] RIP: 0033:0x7f689104cec9 [ 649.271587][ T31] RSP: 002b:00007ffc52be3d58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 649.280141][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f689104cec9 [ 649.288203][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 649.296233][ T31] RBP: 0000000000000003 R08: 0000000552be3e4f R09: 00007f689126f280 [ 649.304339][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 649.312310][ T31] R13: 00007f689126f280 R14: 0000000000000003 R15: 00007ffc52be3e10 [ 649.320333][ T31] [ 649.323398][ T31] INFO: task syz.3.18:387 blocked for more than 207 seconds. [ 649.331123][ T31] Not tainted syzkaller #0 [ 649.336116][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 649.344808][ T31] task:syz.3.18 state:D stack:25528 pid: 387 ppid: 377 flags:0x00004000 [ 649.354049][ T31] Call Trace: [ 649.357356][ T31] [ 649.360285][ T31] __schedule+0xb6e/0x14c0 [ 649.364750][ T31] ? release_firmware_map_entry+0x190/0x190 [ 649.370664][ T31] ? __kasan_check_write+0x14/0x20 [ 649.375864][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 649.380913][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 649.386617][ T31] schedule+0x11e/0x1e0 [ 649.390812][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 649.396606][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 649.402558][ T31] ? dput+0x47/0x90 [ 649.406384][ T31] ? kasan_save_stack+0x49/0x60 [ 649.411421][ T31] ? kasan_save_stack+0x3a/0x60 [ 649.416300][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 649.421959][ T31] ? call_rcu+0x105/0xfe0 [ 649.426329][ T31] ? __fput+0x5d0/0x8b0 [ 649.430505][ T31] ? ____fput+0x15/0x20 [ 649.434690][ T31] ? task_work_run+0xa1/0x190 [ 649.439379][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 649.444806][ T31] ? rwsem_write_trylock+0x130/0x300 [ 649.450111][ T31] ? clear_nonspinnable+0x60/0x60 [ 649.455170][ T31] ? perf_event_exit_event+0x520/0x520 [ 649.460648][ T31] ? mutex_unlock+0x89/0x220 [ 649.465451][ T31] down_write+0x29/0x30 [ 649.469711][ T31] exit_mmap+0x127/0x860 [ 649.474079][ T31] ? vm_brk+0x30/0x30 [ 649.478084][ T31] ? mutex_unlock+0x89/0x220 [ 649.482707][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 649.487930][ T31] __mmput+0x93/0x320 [ 649.491956][ T31] ? mmput+0x48/0x150 [ 649.496154][ T31] mmput+0x50/0x150 [ 649.500043][ T31] do_exit+0x9d2/0x27a0 [ 649.504261][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 649.510355][ T31] ? put_task_struct+0x90/0x90 [ 649.515160][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 649.520812][ T31] ? ____fput+0x15/0x20 [ 649.525011][ T31] do_group_exit+0x141/0x310 [ 649.529707][ T31] ? debug_smp_processor_id+0x17/0x20 [ 649.535206][ T31] __x64_sys_exit_group+0x3f/0x40 [ 649.540268][ T31] x64_sys_call+0x832/0x9a0 [ 649.544930][ T31] do_syscall_64+0x4c/0xa0 [ 649.549434][ T31] ? clear_bhb_loop+0x50/0xa0 [ 649.554186][ T31] ? clear_bhb_loop+0x50/0xa0 [ 649.558896][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 649.564847][ T31] RIP: 0033:0x7fc16e2a6ec9 [ 649.569279][ T31] RSP: 002b:00007ffd58d500e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 649.577831][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc16e2a6ec9 [ 649.586032][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 649.594271][ T31] RBP: 0000000000000003 R08: 0000000558d501df R09: 00007fc16e4c9280 [ 649.602494][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 649.610472][ T31] R13: 00007fc16e4c9280 R14: 0000000000000003 R15: 00007ffd58d501a0 [ 649.618497][ T31] [ 649.621532][ T31] NMI backtrace for cpu 0 [ 649.625853][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 649.633049][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 649.643207][ T31] Call Trace: [ 649.646508][ T31] [ 649.649449][ T31] __dump_stack+0x21/0x30 [ 649.653781][ T31] dump_stack_lvl+0xee/0x150 [ 649.658367][ T31] ? show_regs_print_info+0x20/0x20 [ 649.663561][ T31] dump_stack+0x15/0x20 [ 649.667796][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 649.672730][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 649.678516][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 649.684683][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 649.689636][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 649.695723][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 649.701946][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 649.708005][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 649.713913][ T31] watchdog+0xd64/0xea0 [ 649.718101][ T31] ? hungtask_pm_notify+0x50/0x50 [ 649.723133][ T31] ? __kasan_check_read+0x11/0x20 [ 649.728342][ T31] ? __kthread_parkme+0xac/0x200 [ 649.733287][ T31] ? preempt_count_add+0x90/0x1b0 [ 649.738324][ T31] kthread+0x411/0x500 [ 649.742411][ T31] ? hungtask_pm_notify+0x50/0x50 [ 649.747593][ T31] ? kthread_blkcg+0xd0/0xd0 [ 649.752249][ T31] ret_from_fork+0x1f/0x30 [ 649.756687][ T31] [ 649.759960][ T31] Sending NMI from CPU 0 to CPUs 1: [ 649.765407][ C1] NMI backtrace for cpu 1 [ 649.765420][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 649.765437][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 649.765447][ C1] RIP: 0010:asm_sysvec_call_function_single+0x0/0x20 [ 649.765475][ C1] Code: e8 85 5f e3 ff e9 10 04 00 00 0f 01 ca fc 6a ff e8 15 03 00 00 48 89 c4 48 8d 6c 24 01 48 89 e7 e8 85 59 e3 ff e9 f0 03 00 00 <0f> 01 ca fc 6a ff e8 f5 02 00 00 48 89 c4 48 8d 6c 24 01 48 89 e7 [ 649.765490][ C1] RSP: 0018:ffffc90000157d68 EFLAGS: 00000042 [ 649.765504][ C1] RAX: 000000000000846e RBX: ffff88810030bb40 RCX: 000000000000846e [ 649.765516][ C1] RDX: 0000000000000001 RSI: ffffffff856340e0 RDI: ffffffff856340a0 [ 649.765528][ C1] RBP: ffffc90000157d98 R08: dffffc0000000000 R09: ffffed103ee2718f [ 649.765540][ C1] R10: ffffed103ee2718f R11: 1ffff1103ee2718e R12: 0000000000000001 [ 649.765552][ C1] R13: 1ffff11020061768 R14: 0000000000000000 R15: dffffc0000000000 [ 649.765563][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 649.765577][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 649.765588][ C1] CR2: 00007f8f33ee8280 CR3: 00000001061d3000 CR4: 00000000003506a0 [ 649.765603][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 649.765612][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 649.765622][ C1] Call Trace: [ 649.765628][ C1] [ 649.765633][ C1] ? default_idle+0xf/0x20 [ 649.765651][ C1] arch_cpu_idle+0xa/0x10 [ 649.765747][ C1] default_idle_call+0x71/0x1d0 [ 649.765763][ C1] do_idle+0x1df/0x530 [ 649.765779][ C1] ? rcu_irq_exit+0x9/0x10 [ 649.765793][ C1] ? irqentry_exit+0x30/0x40 [ 649.765807][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 649.765824][ C1] cpu_startup_entry+0x18/0x20 [ 649.765839][ C1] start_secondary+0x2e6/0x3a0 [ 649.765856][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 649.765895][ C1]