Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. 2025/10/07 21:11:15 parsed 1 programs [ 459.235021][ T30] audit: type=1400 audit(1759871475.076:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 459.255828][ T30] audit: type=1400 audit(1759871475.086:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 460.207960][ T30] audit: type=1400 audit(1759871476.056:66): avc: denied { mounton } for pid=289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 460.209709][ T289] cgroup: Unknown subsys name 'net' [ 460.230663][ T30] audit: type=1400 audit(1759871476.056:67): avc: denied { mount } for pid=289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 460.258137][ T30] audit: type=1400 audit(1759871476.086:68): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 460.258457][ T289] cgroup: Unknown subsys name 'devices' [ 460.367926][ T289] cgroup: Unknown subsys name 'hugetlb' [ 460.373565][ T289] cgroup: Unknown subsys name 'rlimit' [ 460.522118][ T30] audit: type=1400 audit(1759871476.366:69): avc: denied { setattr } for pid=289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 460.545336][ T30] audit: type=1400 audit(1759871476.366:70): avc: denied { create } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 460.565883][ T30] audit: type=1400 audit(1759871476.366:71): avc: denied { write } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 460.573571][ T292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 460.586241][ T30] audit: type=1400 audit(1759871476.366:72): avc: denied { read } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 460.615007][ T30] audit: type=1400 audit(1759871476.366:73): avc: denied { mounton } for pid=289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 460.657412][ T289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 461.191896][ T296] request_module fs-gadgetfs succeeded, but still no fs? [ 461.365023][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.372355][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.380061][ T311] device bridge_slave_0 entered promiscuous mode [ 461.387759][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.394818][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.402342][ T311] device bridge_slave_1 entered promiscuous mode [ 461.457186][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.464505][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.471830][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.478890][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.500963][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.508298][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.515908][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 461.523511][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 461.537001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 461.545332][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.552394][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.561164][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 461.569455][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.576528][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.589456][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 461.599896][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 461.613907][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 461.626771][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 461.634810][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 461.642518][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 461.653922][ T311] device veth0_vlan entered promiscuous mode [ 461.669253][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 461.678852][ T311] device veth1_macvtap entered promiscuous mode [ 461.689114][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 461.699386][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 461.733934][ T311] syz-executor (311) used greatest stack depth: 21216 bytes left 2025/10/07 21:11:18 executed programs: 0 [ 462.429095][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.436259][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.443615][ T362] device bridge_slave_0 entered promiscuous mode [ 462.450523][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.457604][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.464917][ T362] device bridge_slave_1 entered promiscuous mode [ 462.532056][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.539140][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.546433][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.553465][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.580744][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 462.588591][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.595912][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.613213][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 462.621542][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.628685][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.643294][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 462.651686][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.658737][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.672743][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 462.682219][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 462.696227][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 462.712460][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 462.720615][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 462.728226][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 462.739584][ T362] device veth0_vlan entered promiscuous mode [ 462.749604][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 462.766659][ T362] device veth1_macvtap entered promiscuous mode [ 462.775987][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 462.787204][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 462.916594][ T45] device bridge_slave_1 left promiscuous mode [ 462.922823][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.930732][ T45] device bridge_slave_0 left promiscuous mode [ 462.937006][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.945184][ T45] device veth1_macvtap left promiscuous mode [ 462.951509][ T45] device veth0_vlan left promiscuous mode [ 477.878954][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.886549][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.893908][ T374] device bridge_slave_0 entered promiscuous mode [ 477.900930][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.908043][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.915379][ T374] device bridge_slave_1 entered promiscuous mode [ 477.960237][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.967412][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.974776][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.981820][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.999954][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.007407][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.014827][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 478.022328][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 478.031119][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 478.039329][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.046375][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.054953][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 478.063355][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.070414][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.082034][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 478.091547][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 478.107797][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 478.119221][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 478.127385][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 478.134771][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 478.143128][ T374] device veth0_vlan entered promiscuous mode [ 478.152930][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 2025/10/07 21:11:34 executed programs: 3 [ 478.161986][ T374] device veth1_macvtap entered promiscuous mode [ 478.171263][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 478.181159][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 493.268994][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.276189][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.283648][ T387] device bridge_slave_0 entered promiscuous mode [ 493.290555][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.297617][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.305041][ T387] device bridge_slave_1 entered promiscuous mode [ 493.360301][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.367376][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.374641][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.381692][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.402314][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.409918][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.417611][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 493.425119][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 493.434291][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 493.442656][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.449757][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.458657][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 493.466898][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.473949][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.486593][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 493.496147][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 493.510407][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 493.521978][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 493.530160][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 493.537849][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 493.546069][ T387] device veth0_vlan entered promiscuous mode 2025/10/07 21:11:49 executed programs: 4 [ 493.556899][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 493.566173][ T387] device veth1_macvtap entered promiscuous mode [ 493.575365][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 493.585242][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 603.575519][ T31] INFO: task syz.2.17:372 blocked for more than 122 seconds. [ 603.582932][ T31] Not tainted syzkaller #0 [ 603.587956][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 603.596670][ T31] task:syz.2.17 state:D stack:25824 pid: 372 ppid: 362 flags:0x00004000 [ 603.605990][ T31] Call Trace: [ 603.609282][ T31] [ 603.612208][ T31] __schedule+0xb6e/0x14c0 [ 603.616665][ T31] ? release_firmware_map_entry+0x190/0x190 [ 603.622569][ T31] ? __kasan_check_write+0x14/0x20 [ 603.627707][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 603.632748][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 603.638331][ T31] schedule+0x11e/0x1e0 [ 603.642498][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 603.648413][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 603.654332][ T31] ? dput+0x47/0x90 [ 603.658164][ T31] ? kasan_save_stack+0x49/0x60 [ 603.663032][ T31] ? kasan_save_stack+0x3a/0x60 [ 603.667926][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 603.673575][ T31] ? call_rcu+0x105/0xfe0 [ 603.677928][ T31] ? __fput+0x540/0x8b0 [ 603.682104][ T31] ? ____fput+0x15/0x20 [ 603.686295][ T31] ? task_work_run+0xe1/0x190 [ 603.690982][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 603.696384][ T31] ? rwsem_write_trylock+0x130/0x300 [ 603.701683][ T31] ? clear_nonspinnable+0x60/0x60 [ 603.706737][ T31] ? perf_event_exit_event+0x520/0x520 [ 603.712293][ T31] ? mutex_unlock+0x89/0x220 [ 603.716905][ T31] down_write+0x29/0x30 [ 603.721080][ T31] exit_mmap+0x127/0x860 [ 603.725324][ T31] ? vm_brk+0x30/0x30 [ 603.729426][ T31] ? mutex_unlock+0x89/0x220 [ 603.734025][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 603.739339][ T31] __mmput+0x93/0x320 [ 603.743335][ T31] ? mmput+0x48/0x150 [ 603.747339][ T31] mmput+0x50/0x150 [ 603.751162][ T31] do_exit+0x9d2/0x27a0 [ 603.755311][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 603.761402][ T31] ? put_task_struct+0x90/0x90 [ 603.766201][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 603.771827][ T31] do_group_exit+0x141/0x310 [ 603.776435][ T31] __x64_sys_exit_group+0x3f/0x40 [ 603.781470][ T31] x64_sys_call+0x832/0x9a0 [ 603.785990][ T31] do_syscall_64+0x4c/0xa0 [ 603.790419][ T31] ? clear_bhb_loop+0x50/0xa0 [ 603.795106][ T31] ? clear_bhb_loop+0x50/0xa0 [ 603.799808][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 603.805750][ T31] RIP: 0033:0x7fda2de2dec9 [ 603.810167][ T31] RSP: 002b:00007ffd9d86c728 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 603.818757][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda2de2dec9 [ 603.826773][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 603.834753][ T31] RBP: 0000000000000003 R08: 000000059d86c81f R09: 00007fda2e050280 [ 603.842743][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 603.850737][ T31] R13: 00007fda2e050280 R14: 0000000000000003 R15: 00007ffd9d86c7e0 [ 603.858734][ T31] [ 603.861764][ T31] INFO: task syz.3.18:384 blocked for more than 123 seconds. [ 603.869145][ T31] Not tainted syzkaller #0 [ 603.874080][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 603.882783][ T31] task:syz.3.18 state:D stack:25824 pid: 384 ppid: 374 flags:0x00004000 [ 603.892015][ T31] Call Trace: [ 603.895292][ T31] [ 603.898326][ T31] __schedule+0xb6e/0x14c0 [ 603.902831][ T31] ? release_firmware_map_entry+0x190/0x190 [ 603.908874][ T31] ? __kasan_check_write+0x14/0x20 [ 603.914005][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 603.919060][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 603.924639][ T31] schedule+0x11e/0x1e0 [ 603.928856][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 603.934743][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 603.940775][ T31] ? dput+0x47/0x90 [ 603.944600][ T31] ? kasan_save_stack+0x49/0x60 [ 603.949582][ T31] ? kasan_save_stack+0x3a/0x60 [ 603.954428][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 603.960133][ T31] ? call_rcu+0x105/0xfe0 [ 603.964475][ T31] ? __fput+0x540/0x8b0 [ 603.968678][ T31] ? ____fput+0x15/0x20 [ 603.972845][ T31] ? task_work_run+0xe1/0x190 [ 603.977543][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 603.982929][ T31] ? rwsem_write_trylock+0x130/0x300 [ 603.988261][ T31] ? clear_nonspinnable+0x60/0x60 [ 603.993297][ T31] ? perf_event_exit_event+0x520/0x520 [ 603.998782][ T31] ? mutex_unlock+0x89/0x220 [ 604.003382][ T31] down_write+0x29/0x30 [ 604.007581][ T31] exit_mmap+0x127/0x860 [ 604.011837][ T31] ? vm_brk+0x30/0x30 [ 604.015846][ T31] ? mutex_unlock+0x89/0x220 [ 604.020447][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 604.025690][ T31] __mmput+0x93/0x320 [ 604.029685][ T31] ? mmput+0x48/0x150 [ 604.033663][ T31] mmput+0x50/0x150 [ 604.037506][ T31] do_exit+0x9d2/0x27a0 [ 604.041766][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 604.047871][ T31] ? put_task_struct+0x90/0x90 [ 604.052672][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 604.058329][ T31] ? ____fput+0x15/0x20 [ 604.062513][ T31] do_group_exit+0x141/0x310 [ 604.067165][ T31] ? debug_smp_processor_id+0x17/0x20 [ 604.072550][ T31] __x64_sys_exit_group+0x3f/0x40 [ 604.077596][ T31] x64_sys_call+0x832/0x9a0 [ 604.082109][ T31] do_syscall_64+0x4c/0xa0 [ 604.086568][ T31] ? clear_bhb_loop+0x50/0xa0 [ 604.091259][ T31] ? clear_bhb_loop+0x50/0xa0 [ 604.095961][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 604.101871][ T31] RIP: 0033:0x7f2e329d1ec9 [ 604.106325][ T31] RSP: 002b:00007ffe4520eca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 604.114749][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2e329d1ec9 [ 604.122746][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 604.130780][ T31] RBP: 0000000000000003 R08: 000000054520ed9f R09: 00007f2e32bf4280 [ 604.138869][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 604.146881][ T31] R13: 00007f2e32bf4280 R14: 0000000000000003 R15: 00007ffe4520ed60 [ 604.154858][ T31] [ 604.158041][ T31] NMI backtrace for cpu 1 [ 604.162382][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 604.169580][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 604.179633][ T31] Call Trace: [ 604.182919][ T31] [ 604.185841][ T31] __dump_stack+0x21/0x30 [ 604.190170][ T31] dump_stack_lvl+0xee/0x150 [ 604.194749][ T31] ? show_regs_print_info+0x20/0x20 [ 604.199942][ T31] dump_stack+0x15/0x20 [ 604.204092][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 604.209024][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 604.214562][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 604.220797][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 604.225728][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 604.231892][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 604.237973][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 604.243962][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 604.249859][ T31] watchdog+0xd64/0xea0 [ 604.254013][ T31] ? hungtask_pm_notify+0x50/0x50 [ 604.259036][ T31] ? __kasan_check_read+0x11/0x20 [ 604.264058][ T31] ? __kthread_parkme+0xac/0x200 [ 604.268992][ T31] ? preempt_count_add+0x90/0x1b0 [ 604.274014][ T31] kthread+0x411/0x500 [ 604.278103][ T31] ? hungtask_pm_notify+0x50/0x50 [ 604.283121][ T31] ? kthread_blkcg+0xd0/0xd0 [ 604.287704][ T31] ret_from_fork+0x1f/0x30 [ 604.292112][ T31] [ 604.295238][ T31] Sending NMI from CPU 1 to CPUs 0: [ 604.300520][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xf/0x20 [ 624.695610][ T31] INFO: task syz.2.17:372 blocked for more than 144 seconds. [ 624.703035][ T31] Not tainted syzkaller #0 [ 624.708005][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 624.716709][ T31] task:syz.2.17 state:D stack:25824 pid: 372 ppid: 362 flags:0x00004000 [ 624.727660][ T31] Call Trace: [ 624.730952][ T31] [ 624.733889][ T31] __schedule+0xb6e/0x14c0 [ 624.738361][ T31] ? release_firmware_map_entry+0x190/0x190 [ 624.744269][ T31] ? __kasan_check_write+0x14/0x20 [ 624.749413][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 624.754455][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 624.760030][ T31] schedule+0x11e/0x1e0 [ 624.764215][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 624.770211][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 624.776137][ T31] ? dput+0x47/0x90 [ 624.779958][ T31] ? kasan_save_stack+0x49/0x60 [ 624.784814][ T31] ? kasan_save_stack+0x3a/0x60 [ 624.789690][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 624.795339][ T31] ? call_rcu+0x105/0xfe0 [ 624.799715][ T31] ? __fput+0x540/0x8b0 [ 624.803866][ T31] ? ____fput+0x15/0x20 [ 624.808044][ T31] ? task_work_run+0xe1/0x190 [ 624.812733][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 624.818133][ T31] ? rwsem_write_trylock+0x130/0x300 [ 624.823432][ T31] ? clear_nonspinnable+0x60/0x60 [ 624.828550][ T31] ? perf_event_exit_event+0x520/0x520 [ 624.834021][ T31] ? mutex_unlock+0x89/0x220 [ 624.838629][ T31] down_write+0x29/0x30 [ 624.842797][ T31] exit_mmap+0x127/0x860 [ 624.847061][ T31] ? vm_brk+0x30/0x30 [ 624.851060][ T31] ? mutex_unlock+0x89/0x220 [ 624.855674][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 624.860898][ T31] __mmput+0x93/0x320 [ 624.864874][ T31] ? mmput+0x48/0x150 [ 624.868882][ T31] mmput+0x50/0x150 [ 624.872704][ T31] do_exit+0x9d2/0x27a0 [ 624.876881][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 624.882962][ T31] ? put_task_struct+0x90/0x90 [ 624.887749][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 624.893415][ T31] do_group_exit+0x141/0x310 [ 624.898023][ T31] __x64_sys_exit_group+0x3f/0x40 [ 624.903069][ T31] x64_sys_call+0x832/0x9a0 [ 624.907601][ T31] do_syscall_64+0x4c/0xa0 [ 624.912026][ T31] ? clear_bhb_loop+0x50/0xa0 [ 624.916720][ T31] ? clear_bhb_loop+0x50/0xa0 [ 624.921422][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 624.927369][ T31] RIP: 0033:0x7fda2de2dec9 [ 624.931812][ T31] RSP: 002b:00007ffd9d86c728 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 624.940393][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda2de2dec9 [ 624.948393][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 624.956396][ T31] RBP: 0000000000000003 R08: 000000059d86c81f R09: 00007fda2e050280 [ 624.964388][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 624.972381][ T31] R13: 00007fda2e050280 R14: 0000000000000003 R15: 00007ffd9d86c7e0 [ 624.980382][ T31] [ 624.983401][ T31] INFO: task syz.3.18:384 blocked for more than 144 seconds. [ 624.990775][ T31] Not tainted syzkaller #0 [ 624.995722][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 625.004374][ T31] task:syz.3.18 state:D stack:25824 pid: 384 ppid: 374 flags:0x00004000 [ 625.013606][ T31] Call Trace: [ 625.016915][ T31] [ 625.019838][ T31] __schedule+0xb6e/0x14c0 [ 625.024248][ T31] ? release_firmware_map_entry+0x190/0x190 [ 625.030153][ T31] ? __kasan_check_write+0x14/0x20 [ 625.035276][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 625.040333][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 625.046253][ T31] schedule+0x11e/0x1e0 [ 625.050403][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 625.056262][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 625.062197][ T31] ? dput+0x47/0x90 [ 625.066068][ T31] ? kasan_save_stack+0x49/0x60 [ 625.070947][ T31] ? kasan_save_stack+0x3a/0x60 [ 625.075831][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 625.081475][ T31] ? call_rcu+0x105/0xfe0 [ 625.085843][ T31] ? __fput+0x540/0x8b0 [ 625.090025][ T31] ? ____fput+0x15/0x20 [ 625.094183][ T31] ? task_work_run+0xe1/0x190 [ 625.098883][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 625.104269][ T31] ? rwsem_write_trylock+0x130/0x300 [ 625.109589][ T31] ? clear_nonspinnable+0x60/0x60 [ 625.114640][ T31] ? perf_event_exit_event+0x520/0x520 [ 625.120124][ T31] ? mutex_unlock+0x89/0x220 [ 625.124729][ T31] down_write+0x29/0x30 [ 625.129144][ T31] exit_mmap+0x127/0x860 [ 625.133412][ T31] ? vm_brk+0x30/0x30 [ 625.137411][ T31] ? mutex_unlock+0x89/0x220 [ 625.142016][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 625.147254][ T31] __mmput+0x93/0x320 [ 625.151250][ T31] ? mmput+0x48/0x150 [ 625.155235][ T31] mmput+0x50/0x150 [ 625.159075][ T31] do_exit+0x9d2/0x27a0 [ 625.163250][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 625.169422][ T31] ? put_task_struct+0x90/0x90 [ 625.174215][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 625.180078][ T31] ? ____fput+0x15/0x20 [ 625.184349][ T31] do_group_exit+0x141/0x310 [ 625.188986][ T31] ? debug_smp_processor_id+0x17/0x20 [ 625.194388][ T31] __x64_sys_exit_group+0x3f/0x40 [ 625.199445][ T31] x64_sys_call+0x832/0x9a0 [ 625.203964][ T31] do_syscall_64+0x4c/0xa0 [ 625.208408][ T31] ? clear_bhb_loop+0x50/0xa0 [ 625.213102][ T31] ? clear_bhb_loop+0x50/0xa0 [ 625.217813][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 625.223723][ T31] RIP: 0033:0x7f2e329d1ec9 [ 625.228158][ T31] RSP: 002b:00007ffe4520eca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 625.236598][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2e329d1ec9 [ 625.244566][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 625.252563][ T31] RBP: 0000000000000003 R08: 000000054520ed9f R09: 00007f2e32bf4280 [ 625.260560][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 625.268549][ T31] R13: 00007f2e32bf4280 R14: 0000000000000003 R15: 00007ffe4520ed60 [ 625.276561][ T31] [ 625.279598][ T31] INFO: task syz.4.19:397 blocked for more than 124 seconds. [ 625.286979][ T31] Not tainted syzkaller #0 [ 625.291929][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 625.300646][ T31] task:syz.4.19 state:D stack:25528 pid: 397 ppid: 387 flags:0x00004000 [ 625.309992][ T31] Call Trace: [ 625.313273][ T31] [ 625.316229][ T31] __schedule+0xb6e/0x14c0 [ 625.320667][ T31] ? release_firmware_map_entry+0x190/0x190 [ 625.326585][ T31] ? __kasan_check_write+0x14/0x20 [ 625.331723][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 625.336770][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 625.342331][ T31] schedule+0x11e/0x1e0 [ 625.346714][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 625.352459][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 625.358417][ T31] ? dput+0x47/0x90 [ 625.362235][ T31] ? kasan_save_stack+0x49/0x60 [ 625.367106][ T31] ? kasan_save_stack+0x3a/0x60 [ 625.371964][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 625.377616][ T31] ? call_rcu+0x105/0xfe0 [ 625.382061][ T31] ? __fput+0x540/0x8b0 [ 625.386275][ T31] ? ____fput+0x15/0x20 [ 625.390437][ T31] ? task_work_run+0xe1/0x190 [ 625.395116][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 625.400507][ T31] ? rwsem_write_trylock+0x130/0x300 [ 625.405820][ T31] ? clear_nonspinnable+0x60/0x60 [ 625.410926][ T31] ? perf_event_exit_event+0x520/0x520 [ 625.416397][ T31] ? mutex_unlock+0x89/0x220 [ 625.421002][ T31] down_write+0x29/0x30 [ 625.425159][ T31] exit_mmap+0x127/0x860 [ 625.429458][ T31] ? vm_brk+0x30/0x30 [ 625.433477][ T31] ? mutex_unlock+0x89/0x220 [ 625.438097][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 625.443316][ T31] __mmput+0x93/0x320 [ 625.447328][ T31] ? mmput+0x48/0x150 [ 625.451324][ T31] mmput+0x50/0x150 [ 625.455131][ T31] do_exit+0x9d2/0x27a0 [ 625.459308][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 625.465414][ T31] ? put_task_struct+0x90/0x90 [ 625.470422][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 625.476078][ T31] ? ____fput+0x15/0x20 [ 625.480258][ T31] do_group_exit+0x141/0x310 [ 625.484845][ T31] ? debug_smp_processor_id+0x17/0x20 [ 625.490244][ T31] __x64_sys_exit_group+0x3f/0x40 [ 625.495285][ T31] x64_sys_call+0x832/0x9a0 [ 625.499812][ T31] do_syscall_64+0x4c/0xa0 [ 625.504250][ T31] ? clear_bhb_loop+0x50/0xa0 [ 625.508962][ T31] ? clear_bhb_loop+0x50/0xa0 [ 625.513663][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 625.519578][ T31] RIP: 0033:0x7fdef30c3ec9 [ 625.524011][ T31] RSP: 002b:00007fffc9330998 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 625.532456][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdef30c3ec9 [ 625.540596][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 625.548786][ T31] RBP: 0000000000000003 R08: 00000005c9330a8f R09: 00007fdef32e6280 [ 625.556792][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 625.564763][ T31] R13: 00007fdef32e6280 R14: 0000000000000003 R15: 00007fffc9330a50 [ 625.572761][ T31] [ 625.576699][ T31] NMI backtrace for cpu 0 [ 625.581020][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 625.588219][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 625.598265][ T31] Call Trace: [ 625.601533][ T31] [ 625.604454][ T31] __dump_stack+0x21/0x30 [ 625.608791][ T31] dump_stack_lvl+0xee/0x150 [ 625.613373][ T31] ? show_regs_print_info+0x20/0x20 [ 625.618577][ T31] dump_stack+0x15/0x20 [ 625.622726][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 625.627658][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 625.633201][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 625.639354][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 625.644282][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 625.650355][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 625.656431][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 625.662414][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 625.668301][ T31] watchdog+0xd64/0xea0 [ 625.672449][ T31] ? hungtask_pm_notify+0x50/0x50 [ 625.677475][ T31] ? __kasan_check_read+0x11/0x20 [ 625.682491][ T31] ? __kthread_parkme+0xac/0x200 [ 625.687417][ T31] ? preempt_count_add+0x90/0x1b0 [ 625.692432][ T31] kthread+0x411/0x500 [ 625.696499][ T31] ? hungtask_pm_notify+0x50/0x50 [ 625.701515][ T31] ? kthread_blkcg+0xd0/0xd0 [ 625.706099][ T31] ret_from_fork+0x1f/0x30 [ 625.710506][ T31] [ 625.713587][ T31] Sending NMI from CPU 0 to CPUs 1: [ 625.718823][ C1] NMI backtrace for cpu 1 [ 625.718833][ C1] CPU: 1 PID: 45 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 625.718849][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 625.718859][ C1] Workqueue: events_unbound toggle_allocation_gate [ 625.718881][ C1] RIP: 0010:x2apic_send_IPI+0x73/0xd0 [ 625.718903][ C1] Code: f0 48 c1 e8 03 42 0f b6 04 20 84 c0 75 40 41 0f b7 16 0f ae f0 0f ae e8 83 fb 02 b8 00 04 00 00 0f 45 c3 b9 30 08 00 00 0f 30 <66> 90 5b 41 5c 41 5e 41 5f 5d c3 89 fe 41 89 fe 48 c7 c7 e0 06 6d [ 625.718917][ C1] RSP: 0018:ffffc900002ef7d8 EFLAGS: 00000206 [ 625.718930][ C1] RAX: 00000000000000fb RBX: 00000000000000fb RCX: 0000000000000830 [ 625.718940][ C1] RDX: 0000000000000000 RSI: 00000000000000fb RDI: 0000000000000000 [ 625.718950][ C1] RBP: ffffc900002ef7f8 R08: dffffc0000000000 R09: ffffed103ee271d3 [ 625.718963][ C1] R10: ffffed103ee271d3 R11: 1ffff1103ee271d2 R12: dffffc0000000000 [ 625.718975][ C1] R13: ffff8881f7138e90 R14: ffff8881f7021158 R15: ffffffff85e64840 [ 625.718988][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 625.719002][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 625.719013][ C1] CR2: 000055555b23b4a8 CR3: 000000000660f000 CR4: 00000000003506a0 [ 625.719028][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 625.719037][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 625.719047][ C1] Call Trace: [ 625.719051][ C1] [ 625.719057][ C1] native_send_call_func_single_ipi+0x5e/0x70 [ 625.719076][ C1] send_call_function_single_ipi+0xdd/0x180 [ 625.719094][ C1] smp_call_function_many_cond+0x6cb/0x9f0 [ 625.719115][ C1] ? text_poke_sync+0x30/0x30 [ 625.719130][ C1] ? smp_call_function_many+0x40/0x40 [ 625.719147][ C1] ? __kmalloc_track_caller+0x74/0x2c0 [ 625.719166][ C1] ? text_poke+0x20/0x20 [ 625.719179][ C1] ? text_poke_loc_init+0xd6/0x570 [ 625.719194][ C1] ? text_poke_sync+0x30/0x30 [ 625.719214][ C1] on_each_cpu_cond_mask+0x43/0x80 [ 625.719232][ C1] text_poke_bp_batch+0x51a/0x5a0 [ 625.719247][ C1] ? __kmalloc_track_caller+0x75/0x2c0 [ 625.719265][ C1] ? text_poke_loc_init+0x570/0x570 [ 625.719280][ C1] ? __kasan_check_write+0x14/0x20 [ 625.719296][ C1] ? mutex_lock+0x95/0x1a0 [ 625.719310][ C1] ? mutex_lock+0x39/0x1a0 [ 625.719324][ C1] ? text_poke_queue+0xdf/0x180 [ 625.719339][ C1] text_poke_finish+0x1a/0x30 [ 625.719354][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 625.719373][ C1] __jump_label_update+0x37c/0x3a0 [ 625.719389][ C1] jump_label_update+0x39b/0x450 [ 625.719408][ C1] static_key_enable_cpuslocked+0x126/0x240 [ 625.719427][ C1] static_key_enable+0x1a/0x30 [ 625.719444][ C1] toggle_allocation_gate+0xb4/0x410 [ 625.719461][ C1] ? kfence_debugfs_init+0x70/0x70 [ 625.719477][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 625.719492][ C1] ? finish_task_switch+0x16b/0x780 [ 625.719509][ C1] ? __switch_to_asm+0x3a/0x60 [ 625.719525][ C1] ? __schedule+0xb76/0x14c0 [ 625.719541][ C1] process_one_work+0x6be/0xba0 [ 625.719562][ C1] worker_thread+0xa59/0x1200 [ 625.719579][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 625.719600][ C1] kthread+0x411/0x500 [ 625.719614][ C1] ? worker_clr_flags+0x190/0x190 [ 625.719631][ C1] ? kthread_blkcg+0xd0/0xd0 [ 625.719659][ C1] ret_from_fork+0x1f/0x30 [ 625.719675][ C1] [ 645.815542][ T31] INFO: task syz.2.17:372 blocked for more than 165 seconds. [ 645.822966][ T31] Not tainted syzkaller #0 [ 645.827983][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 645.836867][ T31] task:syz.2.17 state:D stack:25824 pid: 372 ppid: 362 flags:0x00004000 [ 645.846136][ T31] Call Trace: [ 645.849425][ T31] [ 645.852359][ T31] __schedule+0xb6e/0x14c0 [ 645.856806][ T31] ? release_firmware_map_entry+0x190/0x190 [ 645.862740][ T31] ? __kasan_check_write+0x14/0x20 [ 645.867874][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 645.872930][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 645.878509][ T31] schedule+0x11e/0x1e0 [ 645.882750][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 645.888494][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 645.894405][ T31] ? dput+0x47/0x90 [ 645.898412][ T31] ? kasan_save_stack+0x49/0x60 [ 645.903288][ T31] ? kasan_save_stack+0x3a/0x60 [ 645.908211][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 645.913956][ T31] ? call_rcu+0x105/0xfe0 [ 645.918342][ T31] ? __fput+0x540/0x8b0 [ 645.922534][ T31] ? ____fput+0x15/0x20 [ 645.926717][ T31] ? task_work_run+0xe1/0x190 [ 645.931406][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 645.936816][ T31] ? rwsem_write_trylock+0x130/0x300 [ 645.942114][ T31] ? clear_nonspinnable+0x60/0x60 [ 645.947161][ T31] ? perf_event_exit_event+0x520/0x520 [ 645.952652][ T31] ? mutex_unlock+0x89/0x220 [ 645.957263][ T31] down_write+0x29/0x30 [ 645.961433][ T31] exit_mmap+0x127/0x860 [ 645.965696][ T31] ? vm_brk+0x30/0x30 [ 645.969710][ T31] ? mutex_unlock+0x89/0x220 [ 645.974294][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 645.979525][ T31] __mmput+0x93/0x320 [ 645.983545][ T31] ? mmput+0x48/0x150 [ 645.987564][ T31] mmput+0x50/0x150 [ 645.991386][ T31] do_exit+0x9d2/0x27a0 [ 645.995563][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 646.001642][ T31] ? put_task_struct+0x90/0x90 [ 646.006426][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 646.012179][ T31] do_group_exit+0x141/0x310 [ 646.016882][ T31] __x64_sys_exit_group+0x3f/0x40 [ 646.021915][ T31] x64_sys_call+0x832/0x9a0 [ 646.026436][ T31] do_syscall_64+0x4c/0xa0 [ 646.030871][ T31] ? clear_bhb_loop+0x50/0xa0 [ 646.035586][ T31] ? clear_bhb_loop+0x50/0xa0 [ 646.040274][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 646.046191][ T31] RIP: 0033:0x7fda2de2dec9 [ 646.050615][ T31] RSP: 002b:00007ffd9d86c728 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 646.059077][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda2de2dec9 [ 646.067082][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 646.075047][ T31] RBP: 0000000000000003 R08: 000000059d86c81f R09: 00007fda2e050280 [ 646.083039][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 646.091038][ T31] R13: 00007fda2e050280 R14: 0000000000000003 R15: 00007ffd9d86c7e0 [ 646.099041][ T31] [ 646.102076][ T31] INFO: task syz.3.18:384 blocked for more than 165 seconds. [ 646.109595][ T31] Not tainted syzkaller #0 [ 646.114549][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 646.123233][ T31] task:syz.3.18 state:D stack:25824 pid: 384 ppid: 374 flags:0x00004000 [ 646.132486][ T31] Call Trace: [ 646.135780][ T31] [ 646.138735][ T31] __schedule+0xb6e/0x14c0 [ 646.143169][ T31] ? release_firmware_map_entry+0x190/0x190 [ 646.149089][ T31] ? __kasan_check_write+0x14/0x20 [ 646.154217][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 646.159270][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 646.164839][ T31] schedule+0x11e/0x1e0 [ 646.169187][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 646.174922][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 646.180841][ T31] ? dput+0x47/0x90 [ 646.184667][ T31] ? kasan_save_stack+0x49/0x60 [ 646.189553][ T31] ? kasan_save_stack+0x3a/0x60 [ 646.194414][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 646.200086][ T31] ? call_rcu+0x105/0xfe0 [ 646.204457][ T31] ? __fput+0x540/0x8b0 [ 646.208660][ T31] ? ____fput+0x15/0x20 [ 646.212842][ T31] ? task_work_run+0xe1/0x190 [ 646.217558][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 646.222948][ T31] ? rwsem_write_trylock+0x130/0x300 [ 646.228267][ T31] ? clear_nonspinnable+0x60/0x60 [ 646.233325][ T31] ? perf_event_exit_event+0x520/0x520 [ 646.238814][ T31] ? mutex_unlock+0x89/0x220 [ 646.243434][ T31] down_write+0x29/0x30 [ 646.247608][ T31] exit_mmap+0x127/0x860 [ 646.251867][ T31] ? vm_brk+0x30/0x30 [ 646.255880][ T31] ? mutex_unlock+0x89/0x220 [ 646.260484][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 646.265728][ T31] __mmput+0x93/0x320 [ 646.269727][ T31] ? mmput+0x48/0x150 [ 646.273712][ T31] mmput+0x50/0x150 [ 646.277637][ T31] do_exit+0x9d2/0x27a0 [ 646.281890][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 646.287975][ T31] ? put_task_struct+0x90/0x90 [ 646.292777][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 646.298529][ T31] ? ____fput+0x15/0x20 [ 646.302720][ T31] do_group_exit+0x141/0x310 [ 646.307370][ T31] ? debug_smp_processor_id+0x17/0x20 [ 646.312772][ T31] __x64_sys_exit_group+0x3f/0x40 [ 646.317816][ T31] x64_sys_call+0x832/0x9a0 [ 646.322328][ T31] do_syscall_64+0x4c/0xa0 [ 646.326766][ T31] ? clear_bhb_loop+0x50/0xa0 [ 646.331460][ T31] ? clear_bhb_loop+0x50/0xa0 [ 646.336207][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 646.342111][ T31] RIP: 0033:0x7f2e329d1ec9 [ 646.346651][ T31] RSP: 002b:00007ffe4520eca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 646.355084][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2e329d1ec9 [ 646.363076][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 646.371080][ T31] RBP: 0000000000000003 R08: 000000054520ed9f R09: 00007f2e32bf4280 [ 646.379085][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 646.387077][ T31] R13: 00007f2e32bf4280 R14: 0000000000000003 R15: 00007ffe4520ed60 [ 646.395220][ T31] [ 646.398271][ T31] INFO: task syz.4.19:397 blocked for more than 145 seconds. [ 646.405659][ T31] Not tainted syzkaller #0 [ 646.410600][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 646.419292][ T31] task:syz.4.19 state:D stack:25528 pid: 397 ppid: 387 flags:0x00004000 [ 646.428525][ T31] Call Trace: [ 646.431797][ T31] [ 646.434720][ T31] __schedule+0xb6e/0x14c0 [ 646.439250][ T31] ? release_firmware_map_entry+0x190/0x190 [ 646.445155][ T31] ? __kasan_check_write+0x14/0x20 [ 646.450291][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 646.455325][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 646.461084][ T31] schedule+0x11e/0x1e0 [ 646.465260][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 646.471006][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 646.476950][ T31] ? dput+0x47/0x90 [ 646.480860][ T31] ? kasan_save_stack+0x49/0x60 [ 646.485738][ T31] ? kasan_save_stack+0x3a/0x60 [ 646.490595][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 646.496246][ T31] ? call_rcu+0x105/0xfe0 [ 646.500586][ T31] ? __fput+0x540/0x8b0 [ 646.504736][ T31] ? ____fput+0x15/0x20 [ 646.508910][ T31] ? task_work_run+0xe1/0x190 [ 646.513598][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 646.518995][ T31] ? rwsem_write_trylock+0x130/0x300 [ 646.524299][ T31] ? clear_nonspinnable+0x60/0x60 [ 646.529559][ T31] ? perf_event_exit_event+0x520/0x520 [ 646.535040][ T31] ? mutex_unlock+0x89/0x220 [ 646.539661][ T31] down_write+0x29/0x30 [ 646.543832][ T31] exit_mmap+0x127/0x860 [ 646.548138][ T31] ? vm_brk+0x30/0x30 [ 646.552164][ T31] ? mutex_unlock+0x89/0x220 [ 646.556805][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 646.562019][ T31] __mmput+0x93/0x320 [ 646.566024][ T31] ? mmput+0x48/0x150 [ 646.570021][ T31] mmput+0x50/0x150 [ 646.573824][ T31] do_exit+0x9d2/0x27a0 [ 646.578009][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 646.584088][ T31] ? put_task_struct+0x90/0x90 [ 646.588905][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 646.594547][ T31] ? ____fput+0x15/0x20 [ 646.598725][ T31] do_group_exit+0x141/0x310 [ 646.603328][ T31] ? debug_smp_processor_id+0x17/0x20 [ 646.608744][ T31] __x64_sys_exit_group+0x3f/0x40 [ 646.613781][ T31] x64_sys_call+0x832/0x9a0 [ 646.618334][ T31] do_syscall_64+0x4c/0xa0 [ 646.622859][ T31] ? clear_bhb_loop+0x50/0xa0 [ 646.627560][ T31] ? clear_bhb_loop+0x50/0xa0 [ 646.632250][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 646.638170][ T31] RIP: 0033:0x7fdef30c3ec9 [ 646.642592][ T31] RSP: 002b:00007fffc9330998 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 646.651022][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdef30c3ec9 [ 646.659022][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 646.667017][ T31] RBP: 0000000000000003 R08: 00000005c9330a8f R09: 00007fdef32e6280 [ 646.675022][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 646.683101][ T31] R13: 00007fdef32e6280 R14: 0000000000000003 R15: 00007fffc9330a50 [ 646.691194][ T31] [ 646.694212][ T31] NMI backtrace for cpu 1 [ 646.698527][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 646.705721][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 646.715770][ T31] Call Trace: [ 646.719051][ T31] [ 646.721980][ T31] __dump_stack+0x21/0x30 [ 646.726316][ T31] dump_stack_lvl+0xee/0x150 [ 646.730906][ T31] ? show_regs_print_info+0x20/0x20 [ 646.736104][ T31] dump_stack+0x15/0x20 [ 646.740260][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 646.745198][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 646.750741][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 646.756907][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 646.761853][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 646.767923][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 646.773999][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 646.779976][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 646.785870][ T31] watchdog+0xd64/0xea0 [ 646.790031][ T31] ? hungtask_pm_notify+0x50/0x50 [ 646.795062][ T31] ? __kasan_check_read+0x11/0x20 [ 646.800099][ T31] ? __kthread_parkme+0xac/0x200 [ 646.805038][ T31] ? preempt_count_add+0x90/0x1b0 [ 646.810064][ T31] kthread+0x411/0x500 [ 646.814141][ T31] ? hungtask_pm_notify+0x50/0x50 [ 646.819167][ T31] ? kthread_blkcg+0xd0/0xd0 [ 646.823756][ T31] ret_from_fork+0x1f/0x30 [ 646.828174][ T31] [ 646.831269][ T31] Sending NMI from CPU 1 to CPUs 0: [ 646.836504][ C0] NMI backtrace for cpu 0 [ 646.836514][ C0] CPU: 0 PID: 45 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 646.836530][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 646.836540][ C0] Workqueue: events_unbound toggle_allocation_gate [ 646.836562][ C0] RIP: 0010:kasan_check_range+0x7f/0x290 [ 646.836581][ C0] Code: 5c 37 ff 48 c1 eb 03 4e 8d 14 3b 4d 89 d6 4d 29 ce 49 83 fe 10 7f 26 4d 85 f6 0f 84 39 01 00 00 48 f7 d3 4c 01 db 41 80 39 00 <0f> 85 c2 01 00 00 49 ff c1 48 ff c3 75 ee e9 1c 01 00 00 44 89 cb [ 646.836594][ C0] RSP: 0018:ffffc900002ef950 EFLAGS: 00000246 [ 646.836607][ C0] RAX: 0000000000000001 RBX: fffffffffffffff7 RCX: ffffffff8129fb53 [ 646.836619][ C0] RDX: 0000000000000001 RSI: 0000000000000070 RDI: ffffc900002ef9e0 [ 646.836630][ C0] RBP: ffffc900002ef968 R08: dffffc0000000000 R09: fffff5200005df41 [ 646.836642][ C0] R10: fffff5200005df4a R11: 1ffff9200005df3c R12: ffffffff85e80d04 [ 646.836654][ C0] R13: ffffffff85e80d00 R14: 000000000000000e R15: dffffc0000000001 [ 646.836666][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 646.836679][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 646.836691][ C0] CR2: 00007f0d81d677c0 CR3: 000000000660f000 CR4: 00000000003506b0 [ 646.836705][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 646.836714][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 646.836724][ C0] Call Trace: [ 646.836728][ C0] [ 646.836734][ C0] memset+0x23/0x40 [ 646.836749][ C0] ? kmem_cache_alloc+0x4c/0x260 [ 646.836767][ C0] __jump_label_patch+0xc3/0x430 [ 646.836786][ C0] ? __kasan_check_write+0x14/0x20 [ 646.836802][ C0] ? arch_jump_label_transform_queue+0xe0/0xe0 [ 646.836821][ C0] ? __kmalloc_track_caller+0x75/0x2c0 [ 646.836839][ C0] ? __kasan_check_write+0x14/0x20 [ 646.836855][ C0] ? mutex_lock+0x95/0x1a0 [ 646.836870][ C0] ? wait_for_completion_killable_timeout+0x10/0x10 [ 646.836886][ C0] ? mutex_unlock+0x89/0x220 [ 646.836900][ C0] ? __mutex_lock_slowpath+0x10/0x10 [ 646.836915][ C0] ? text_poke_queue+0xdf/0x180 [ 646.836930][ C0] arch_jump_label_transform_queue+0x4d/0xe0 [ 646.836949][ C0] __jump_label_update+0x180/0x3a0 [ 646.836966][ C0] jump_label_update+0x39b/0x450 [ 646.836984][ C0] static_key_disable_cpuslocked+0xc5/0x1a0 [ 646.837003][ C0] static_key_disable+0x1a/0x30 [ 646.837021][ C0] toggle_allocation_gate+0x36d/0x410 [ 646.837038][ C0] ? kfence_debugfs_init+0x70/0x70 [ 646.837054][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 646.837070][ C0] ? finish_task_switch+0x16b/0x780 [ 646.837089][ C0] ? __switch_to_asm+0x3a/0x60 [ 646.837105][ C0] ? __schedule+0xb76/0x14c0 [ 646.837120][ C0] process_one_work+0x6be/0xba0 [ 646.837142][ C0] worker_thread+0xa59/0x1200 [ 646.837159][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 646.837180][ C0] kthread+0x411/0x500 [ 646.837195][ C0] ? worker_clr_flags+0x190/0x190 [ 646.837212][ C0] ? kthread_blkcg+0xd0/0xd0 [ 646.837228][ C0] ret_from_fork+0x1f/0x30 [ 646.837245][ C0] [ 666.935695][ T31] INFO: task syz.2.17:372 blocked for more than 186 seconds. [ 666.943126][ T31] Not tainted syzkaller #0 [ 666.948152][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 666.956854][ T31] task:syz.2.17 state:D stack:25824 pid: 372 ppid: 362 flags:0x00004000 [ 666.966085][ T31] Call Trace: [ 666.969417][ T31] [ 666.972360][ T31] __schedule+0xb6e/0x14c0 [ 666.976827][ T31] ? release_firmware_map_entry+0x190/0x190 [ 666.982733][ T31] ? __kasan_check_write+0x14/0x20 [ 666.987866][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 666.992904][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 666.998944][ T31] schedule+0x11e/0x1e0 [ 667.003124][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 667.008880][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 667.014811][ T31] ? dput+0x47/0x90 [ 667.018707][ T31] ? kasan_save_stack+0x49/0x60 [ 667.023587][ T31] ? kasan_save_stack+0x3a/0x60 [ 667.028588][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 667.034250][ T31] ? call_rcu+0x105/0xfe0 [ 667.038614][ T31] ? __fput+0x540/0x8b0 [ 667.042820][ T31] ? ____fput+0x15/0x20 [ 667.047031][ T31] ? task_work_run+0xe1/0x190 [ 667.051744][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 667.057164][ T31] ? rwsem_write_trylock+0x130/0x300 [ 667.062565][ T31] ? clear_nonspinnable+0x60/0x60 [ 667.067617][ T31] ? perf_event_exit_event+0x520/0x520 [ 667.073089][ T31] ? mutex_unlock+0x89/0x220 [ 667.077714][ T31] down_write+0x29/0x30 [ 667.081883][ T31] exit_mmap+0x127/0x860 [ 667.086166][ T31] ? vm_brk+0x30/0x30 [ 667.090176][ T31] ? mutex_unlock+0x89/0x220 [ 667.094760][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 667.099983][ T31] __mmput+0x93/0x320 [ 667.103980][ T31] ? mmput+0x48/0x150 [ 667.107990][ T31] mmput+0x50/0x150 [ 667.111811][ T31] do_exit+0x9d2/0x27a0 [ 667.115998][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 667.122078][ T31] ? put_task_struct+0x90/0x90 [ 667.126864][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 667.132508][ T31] do_group_exit+0x141/0x310 [ 667.137123][ T31] __x64_sys_exit_group+0x3f/0x40 [ 667.142200][ T31] x64_sys_call+0x832/0x9a0 [ 667.146724][ T31] do_syscall_64+0x4c/0xa0 [ 667.151154][ T31] ? clear_bhb_loop+0x50/0xa0 [ 667.155862][ T31] ? clear_bhb_loop+0x50/0xa0 [ 667.160553][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 667.166464][ T31] RIP: 0033:0x7fda2de2dec9 [ 667.170885][ T31] RSP: 002b:00007ffd9d86c728 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 667.179323][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda2de2dec9 [ 667.187328][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 667.195295][ T31] RBP: 0000000000000003 R08: 000000059d86c81f R09: 00007fda2e050280 [ 667.203295][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 667.211296][ T31] R13: 00007fda2e050280 R14: 0000000000000003 R15: 00007ffd9d86c7e0 [ 667.219304][ T31] [ 667.222342][ T31] INFO: task syz.3.18:384 blocked for more than 186 seconds. [ 667.229737][ T31] Not tainted syzkaller #0 [ 667.234780][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 667.243467][ T31] task:syz.3.18 state:D stack:25824 pid: 384 ppid: 374 flags:0x00004000 [ 667.252699][ T31] Call Trace: [ 667.255992][ T31] [ 667.258946][ T31] __schedule+0xb6e/0x14c0 [ 667.263392][ T31] ? release_firmware_map_entry+0x190/0x190 [ 667.269314][ T31] ? __kasan_check_write+0x14/0x20 [ 667.274439][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 667.279491][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 667.285060][ T31] schedule+0x11e/0x1e0 [ 667.289235][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 667.294969][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 667.300892][ T31] ? dput+0x47/0x90 [ 667.304727][ T31] ? kasan_save_stack+0x49/0x60 [ 667.309597][ T31] ? kasan_save_stack+0x3a/0x60 [ 667.314473][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 667.320127][ T31] ? call_rcu+0x105/0xfe0 [ 667.324477][ T31] ? __fput+0x540/0x8b0 [ 667.328668][ T31] ? ____fput+0x15/0x20 [ 667.332834][ T31] ? task_work_run+0xe1/0x190 [ 667.337529][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 667.342912][ T31] ? rwsem_write_trylock+0x130/0x300 [ 667.348219][ T31] ? clear_nonspinnable+0x60/0x60 [ 667.353260][ T31] ? perf_event_exit_event+0x520/0x520 [ 667.358762][ T31] ? mutex_unlock+0x89/0x220 [ 667.363369][ T31] down_write+0x29/0x30 [ 667.367552][ T31] exit_mmap+0x127/0x860 [ 667.371901][ T31] ? vm_brk+0x30/0x30 [ 667.375915][ T31] ? mutex_unlock+0x89/0x220 [ 667.380518][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 667.385746][ T31] __mmput+0x93/0x320 [ 667.389743][ T31] ? mmput+0x48/0x150 [ 667.393722][ T31] mmput+0x50/0x150 [ 667.397572][ T31] do_exit+0x9d2/0x27a0 [ 667.401745][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 667.407847][ T31] ? put_task_struct+0x90/0x90 [ 667.412628][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 667.418310][ T31] ? ____fput+0x15/0x20 [ 667.422479][ T31] do_group_exit+0x141/0x310 [ 667.427093][ T31] ? debug_smp_processor_id+0x17/0x20 [ 667.432507][ T31] __x64_sys_exit_group+0x3f/0x40 [ 667.437568][ T31] x64_sys_call+0x832/0x9a0 [ 667.442082][ T31] do_syscall_64+0x4c/0xa0 [ 667.446521][ T31] ? clear_bhb_loop+0x50/0xa0 [ 667.451215][ T31] ? clear_bhb_loop+0x50/0xa0 [ 667.455913][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 667.461824][ T31] RIP: 0033:0x7f2e329d1ec9 [ 667.466258][ T31] RSP: 002b:00007ffe4520eca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 667.474783][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2e329d1ec9 [ 667.482776][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 667.490791][ T31] RBP: 0000000000000003 R08: 000000054520ed9f R09: 00007f2e32bf4280 [ 667.498877][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 667.507017][ T31] R13: 00007f2e32bf4280 R14: 0000000000000003 R15: 00007ffe4520ed60 [ 667.515092][ T31] [ 667.518179][ T31] NMI backtrace for cpu 0 [ 667.522538][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 667.529812][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 667.539857][ T31] Call Trace: [ 667.543131][ T31] [ 667.546155][ T31] __dump_stack+0x21/0x30 [ 667.550485][ T31] dump_stack_lvl+0xee/0x150 [ 667.555072][ T31] ? show_regs_print_info+0x20/0x20 [ 667.560272][ T31] dump_stack+0x15/0x20 [ 667.564422][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 667.569355][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 667.574892][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 667.581045][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 667.585975][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 667.592047][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 667.598111][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 667.604082][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 667.609978][ T31] watchdog+0xd64/0xea0 [ 667.614145][ T31] ? hungtask_pm_notify+0x50/0x50 [ 667.619168][ T31] ? __kasan_check_read+0x11/0x20 [ 667.624203][ T31] ? __kthread_parkme+0xac/0x200 [ 667.629478][ T31] ? preempt_count_add+0x90/0x1b0 [ 667.634496][ T31] kthread+0x411/0x500 [ 667.638554][ T31] ? hungtask_pm_notify+0x50/0x50 [ 667.643576][ T31] ? kthread_blkcg+0xd0/0xd0 [ 667.648157][ T31] ret_from_fork+0x1f/0x30 [ 667.652565][ T31] [ 667.655610][ T31] Sending NMI from CPU 0 to CPUs 1: [ 667.660876][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20