./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1569905201 <...> Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. execve("./syz-executor1569905201", ["./syz-executor1569905201"], 0x7ffc67cfe600 /* 10 vars */) = 0 brk(NULL) = 0x55557ace2000 brk(0x55557ace2d40) = 0x55557ace2d40 arch_prctl(ARCH_SET_FS, 0x55557ace23c0) = 0 set_tid_address(0x55557ace2690) = 5852 set_robust_list(0x55557ace26a0, 24) = 0 rseq(0x55557ace2ce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1569905201", 4096) = 28 getrandom("\xa3\xb7\x40\x9b\x78\x68\xe2\x5f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557ace2d40 brk(0x55557ad03d40) = 0x55557ad03d40 brk(0x55557ad04000) = 0x55557ad04000 mprotect(0x7f8382c68000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5853 attached , child_tidptr=0x55557ace2690) = 5853 [pid 5853] set_robust_list(0x55557ace26a0, 24) = 0 [pid 5853] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5853] setpgid(0, 0) = 0 [ 134.053088][ T30] audit: type=1400 audit(1751787149.962:63): avc: denied { execmem } for pid=5852 comm="syz-executor156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 5853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5853] write(3, "1000", 4) = 4 [pid 5853] close(3) = 0 [pid 5853] write(1, "executing program\n", 18executing program ) = 18 [pid 5853] futex(0x7f8382c6e32c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5853] rt_sigaction(SIGRT_1, {sa_handler=0x7f8382c0a3e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8382bfba60}, NULL, 8) = 0 [pid 5853] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5853] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8382b7d000 [pid 5853] mprotect(0x7f8382b7e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5853] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5853] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8382b9d990, parent_tid=0x7f8382b9d990, exit_signal=0, stack=0x7f8382b7d000, stack_size=0x20300, tls=0x7f8382b9d6c0}./strace-static-x86_64: Process 5854 attached => {parent_tid=[5854]}, 88) = 5854 [pid 5854] rseq(0x7f8382b9dfe0, 0x20, 0, 0x53053053) = 0 [pid 5853] rt_sigprocmask(SIG_SETMASK, [], [pid 5854] set_robust_list(0x7f8382b9d9a0, 24 [pid 5853] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5854] <... set_robust_list resumed>) = 0 [pid 5853] futex(0x7f8382c6e328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5854] rt_sigprocmask(SIG_SETMASK, [], [pid 5853] <... futex resumed>) = 0 [pid 5854] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5853] futex(0x7f8382c6e32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5854] io_uring_setup(15642, {flags=0x10000 /* IORING_SETUP_??? */, sq_thread_cpu=0x2, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE|0x3e000, sq_off={head=0, tail=4, ring_mask=16, ring_entries=24, flags=36, dropped=32, array=0}, cq_off={head=8, tail=12, ring_mask=20, ring_entries=28, overflow=44, cqes=64, flags=40}}) = 3 [pid 5854] mmap(NULL, 524352, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_POPULATE, 3, 0) = 0x7f8382afc000 [pid 5854] mmap(NULL, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_POPULATE, 3, 0x10000000) = 0x7f83829fc000 [pid 5854] futex(0x7f8382c6e32c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5853] <... futex resumed>) = 0 [pid 5854] futex(0x7f8382c6e328, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5853] futex(0x7f8382c6e328, FUTEX_WAKE_PRIVATE, 1000000 [pid 5854] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5854] io_uring_enter(3, 0, 9052, IORING_ENTER_GETEVENTS|IORING_ENTER_SQ_WAKEUP, NULL, 0 [pid 5853] <... futex resumed>) = 0 [ 134.207175][ T30] audit: type=1400 audit(1751787150.122:64): avc: denied { allowed } for pid=5853 comm="syz-executor156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 134.226825][ T30] audit: type=1400 audit(1751787150.122:65): avc: denied { create } for pid=5853 comm="syz-executor156" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [pid 5853] futex(0x7f8382c6e32c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5853] futex(0x7f8382c6e33c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5853] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f83829db000 [pid 5853] mprotect(0x7f83829dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5853] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5853] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f83829fb990, parent_tid=0x7f83829fb990, exit_signal=0, stack=0x7f83829db000, stack_size=0x20300, tls=0x7f83829fb6c0}./strace-static-x86_64: Process 5855 attached [ 134.248371][ T30] audit: type=1400 audit(1751787150.132:66): avc: denied { map } for pid=5853 comm="syz-executor156" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 134.272716][ T30] audit: type=1400 audit(1751787150.132:67): avc: denied { read write } for pid=5853 comm="syz-executor156" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [pid 5855] rseq(0x7f83829fbfe0, 0x20, 0, 0x53053053) = 0 [pid 5853] <... clone3 resumed> => {parent_tid=[5855]}, 88) = 5855 [pid 5855] set_robust_list(0x7f83829fb9a0, 24 [pid 5853] rt_sigprocmask(SIG_SETMASK, [], [pid 5855] <... set_robust_list resumed>) = 0 [pid 5853] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5855] rt_sigprocmask(SIG_SETMASK, [], [pid 5853] futex(0x7f8382c6e338, FUTEX_WAKE_PRIVATE, 1000000 [pid 5855] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5853] <... futex resumed>) = 0 [pid 5855] io_uring_enter(3, 18426, 0, 0, NULL, 0 [pid 5853] futex(0x7f8382c6e33c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5855] <... io_uring_enter resumed>) = 1 [pid 5855] futex(0x7f8382c6e33c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5853] <... futex resumed>) = 0 [pid 5855] futex(0x7f8382c6e338, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5853] futex(0x7f8382c6e338, FUTEX_WAKE_PRIVATE, 1000000 [pid 5855] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5855] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5853] <... futex resumed>) = 0 [pid 5855] <... open resumed>) = 4 [pid 5853] futex(0x7f8382c6e33c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5855] futex(0x7f8382c6e33c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5853] <... futex resumed>) = 0 [pid 5853] futex(0x7f8382c6e338, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5855] mmap(0x200000000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5853] futex(0x7f8382c6e33c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5855] <... mmap resumed>) = 0x200000000000 [pid 5855] futex(0x7f8382c6e33c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5853] <... futex resumed>) = 0 [pid 5855] futex(0x7f8382c6e338, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5853] futex(0x7f8382c6e338, FUTEX_WAKE_PRIVATE, 1000000 [pid 5855] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5853] <... futex resumed>) = 0 [pid 5855] prctl(PR_SET_SYSCALL_USER_DISPATCH, PR_SYS_DISPATCH_ON, 0x2, 0x2, NULL [pid 5853] futex(0x7f8382c6e33c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5855] <... prctl resumed>) = 0 [pid 5855] --- SIGSYS {si_signo=SIGSYS, si_code=SYS_USER_DISPATCH, si_call_addr=0x7f8382be44a9, si_syscall=__NR_futex, si_arch=AUDIT_ARCH_X86_64} --- [pid 5852] kill(-5853, SIGKILL) = 0 [pid 5852] kill(5853, SIGKILL) = 0 [pid 5852] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x55557ace3730 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(3, 0x55557ace3730 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [ 285.943851][ T31] INFO: task syz-executor156:5855 blocked for more than 143 seconds. [ 285.951950][ T31] Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 [ 285.959853][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.968829][ T31] task:syz-executor156 state:D stack:26984 pid:5855 tgid:5853 ppid:5852 task_flags:0x400740 flags:0x00004006 [ 285.980866][ T31] Call Trace: [ 285.984247][ T31] [ 285.987180][ T31] __schedule+0x116a/0x5de0 [ 285.991716][ T31] ? __lock_acquire+0x622/0x1c90 [ 285.996861][ T31] ? __pfx___schedule+0x10/0x10 [ 286.001723][ T31] ? find_held_lock+0x2b/0x80 [ 286.006531][ T31] ? schedule+0x2d7/0x3a0 [ 286.010871][ T31] schedule+0xe7/0x3a0 [ 286.015082][ T31] schedule_timeout+0x257/0x290 [ 286.019941][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 286.025457][ T31] ? rcu_is_watching+0x12/0xc0 [ 286.030227][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.035560][ T31] __wait_for_common+0x2ff/0x4e0 [ 286.040507][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 286.046047][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 286.051516][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 286.057076][ T31] wait_for_completion_state+0x1c/0x40 [ 286.062546][ T31] do_coredump+0x8fa/0x4f10 [ 286.067206][ T31] ? lock_acquire+0x130/0x350 [ 286.071889][ T31] ? __pfx_do_coredump+0x10/0x10 [ 286.077328][ T31] ? find_held_lock+0x2b/0x80 [ 286.082024][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 286.087100][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 286.092052][ T31] ? lock_acquire+0x179/0x350 [ 286.096857][ T31] ? find_held_lock+0x2b/0x80 [ 286.101627][ T31] ? finish_task_switch.isra.0+0x21c/0xc10 [ 286.107573][ T31] ? rcu_is_watching+0x12/0xc0 [ 286.112341][ T31] ? finish_task_switch.isra.0+0x221/0xc10 [ 286.118323][ T31] ? __schedule+0x1181/0x5de0 [ 286.123015][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 286.128130][ T31] ? proc_coredump_connector+0x2d1/0x4f0 [ 286.133902][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 286.139893][ T31] ? rcu_is_watching+0x12/0xc0 [ 286.144787][ T31] get_signal+0x22e3/0x26d0 [ 286.149307][ T31] ? __pfx_get_signal+0x10/0x10 [ 286.154292][ T31] ? trace_signal_generate+0x18b/0x200 [ 286.160453][ T31] ? find_held_lock+0x2b/0x80 [ 286.165275][ T31] arch_do_signal_or_restart+0x8f/0x7d0 [ 286.170825][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 286.176763][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 286.182918][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 286.189242][ T31] ? syscall_user_dispatch+0x10c/0x140 [ 286.194817][ T31] exit_to_user_mode_loop+0x84/0x110 [ 286.200105][ T31] do_syscall_64+0x3f6/0x4c0 [ 286.204864][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.210756][ T31] RIP: 0033:0x7f8382be44a9 [ 286.215326][ T31] RSP: 002b:00007f83829fb218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 286.223845][ T31] RAX: 00000000000000ca RBX: 00007f8382c6e338 RCX: 00007f8382be44a9 [ 286.231817][ T31] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8382c6e33c [ 286.239917][ T31] RBP: 00007f8382c6e330 R08: 0000000000000000 R09: 0000000000000000 [ 286.248010][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8382c3b074 [ 286.256083][ T31] R13: 000000000000006e R14: 00007fff94b16610 R15: 00007fff94b166f8 [ 286.264208][ T31] [ 286.267226][ T31] [ 286.267226][ T31] Showing all locks held in the system: [ 286.275141][ T31] 1 lock held by khungtaskd/31: [ 286.279996][ T31] #0: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 286.290023][ T31] 2 locks held by getty/5591: [ 286.295138][ T31] #0: ffff8880377220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 286.305001][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 286.315215][ T31] 1 lock held by syz-executor156/5854: [ 286.320667][ T31] [ 286.322982][ T31] ============================================= [ 286.322982][ T31] [ 286.331601][ T31] NMI backtrace for cpu 1 [ 286.331613][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 286.331634][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.331645][ T31] Call Trace: [ 286.331650][ T31] [ 286.331657][ T31] dump_stack_lvl+0x116/0x1f0 [ 286.331686][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 286.331707][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 286.331734][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 286.331756][ T31] watchdog+0xf70/0x12c0 [ 286.331781][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.331800][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.331825][ T31] ? __kthread_parkme+0x19e/0x250 [ 286.331851][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.331871][ T31] kthread+0x3c2/0x780 [ 286.331887][ T31] ? __pfx_kthread+0x10/0x10 [ 286.331906][ T31] ? rcu_is_watching+0x12/0xc0 [ 286.331929][ T31] ? __pfx_kthread+0x10/0x10 [ 286.331947][ T31] ret_from_fork+0x5d4/0x6f0 [ 286.331973][ T31] ? __pfx_kthread+0x10/0x10 [ 286.331990][ T31] ret_from_fork_asm+0x1a/0x30 [ 286.332021][ T31] [ 286.332027][ T31] Sending NMI from CPU 1 to CPUs 0: [ 286.449734][ C0] NMI backtrace for cpu 0 [ 286.449747][ C0] CPU: 0 UID: 0 PID: 5854 Comm: syz-executor156 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 286.449764][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.449772][ C0] RIP: 0010:prepare_to_wait_exclusive+0xbe/0x2b0 [ 286.449796][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 4c 8d 3d 00 00 00 00 80 3c 02 00 0f 85 78 01 00 00 4c 89 bb 88 17 00 00 66 90 04 00 00 00 65 48 8b 1d 5d f1 3b 12 48 8d 7b 18 e8 8c 45 8e 00 [ 286.449808][ C0] RSP: 0018:ffffc90003d3fb90 EFLAGS: 00000046 [ 286.449819][ C0] RAX: dffffc0000000000 RBX: ffff888023ba8000 RCX: ffffffff8198c6ec [ 286.449828][ C0] RDX: 1ffff110047752f1 RSI: 0000000000000004 RDI: ffff888023ba9788 [ 286.449836][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: fffff520007a7f60 [ 286.449844][ C0] R10: 0000000000000003 R11: 0000000000000001 R12: ffff88807726e320 [ 286.449852][ C0] R13: 0000000000000202 R14: 0000000000000000 R15: ffffffff8194be9b [ 286.449860][ C0] FS: 00007f8382b9d6c0(0000) GS:ffff888124715000(0000) knlGS:0000000000000000 [ 286.449873][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.449881][ C0] CR2: 000055abda79d168 CR3: 0000000071a0d000 CR4: 00000000003526f0 [ 286.449897][ C0] Call Trace: [ 286.449902][ C0] [ 286.449909][ C0] io_cqring_wait+0xc3e/0x18e0 [ 286.449927][ C0] ? __pfx_io_cqring_wait+0x10/0x10 [ 286.449939][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 286.449952][ C0] ? __pfx_io_wake_function+0x10/0x10 [ 286.449975][ C0] ? __fget_files+0x20e/0x3c0 [ 286.449994][ C0] __do_sys_io_uring_enter+0xef8/0x1630 [ 286.450010][ C0] ? ptrace_do_notify+0x228/0x2d0 [ 286.450026][ C0] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 286.450041][ C0] ? find_held_lock+0x2b/0x80 [ 286.450057][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.450075][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 286.450090][ C0] ? ptrace_notify+0xf1/0x130 [ 286.450106][ C0] do_syscall_64+0xcd/0x4c0 [ 286.450124][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.450136][ C0] RIP: 0033:0x7f8382be44a9 [ 286.450146][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 286.450157][ C0] RSP: 002b:00007f8382b9d208 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 286.450168][ C0] RAX: ffffffffffffffda RBX: 00007f8382c6e328 RCX: 00007f8382be44a9 [ 286.450176][ C0] RDX: 000000000000235c RSI: 0000000000000000 RDI: 0000000000000003 [ 286.450183][ C0] RBP: 00007f8382c6e320 R08: 0000000000000000 R09: 0000000000000000 [ 286.450190][ C0] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f8382c3b074 [ 286.450198][ C0] R13: 0000000000000003 R14: 0000000000003d1a R15: 0000200000000480 [ 286.450210][ C0] [ 286.450900][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 286.732114][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 286.743903][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.753942][ T31] Call Trace: [ 286.757204][ T31] [ 286.760119][ T31] dump_stack_lvl+0x3d/0x1f0 [ 286.764710][ T31] panic+0x71c/0x800 [ 286.768599][ T31] ? __pfx_panic+0x10/0x10 [ 286.773006][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 286.778370][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 286.784345][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 286.789706][ T31] ? watchdog+0xdda/0x12c0 [ 286.794111][ T31] ? watchdog+0xdcd/0x12c0 [ 286.798518][ T31] watchdog+0xdeb/0x12c0 [ 286.802751][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.807415][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.812605][ T31] ? __kthread_parkme+0x19e/0x250 [ 286.817619][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.822283][ T31] kthread+0x3c2/0x780 [ 286.826336][ T31] ? __pfx_kthread+0x10/0x10 [ 286.830911][ T31] ? rcu_is_watching+0x12/0xc0 [ 286.835679][ T31] ? __pfx_kthread+0x10/0x10 [ 286.840277][ T31] ret_from_fork+0x5d4/0x6f0 [ 286.844883][ T31] ? __pfx_kthread+0x10/0x10 [ 286.849462][ T31] ret_from_fork_asm+0x1a/0x30 [ 286.854222][ T31] [ 286.857412][ T31] Kernel Offset: disabled [ 286.861714][ T31] Rebooting in 86400 seconds..