syzkaller syzkaller login: [ 7.897239][ T107] udevd (107) used greatest stack depth: 22912 bytes left [ 13.420844][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 13.420858][ T30] audit: type=1400 audit(1758729500.876:59): avc: denied { transition } for pid=223 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.426151][ T30] audit: type=1400 audit(1758729500.876:60): avc: denied { noatsecure } for pid=223 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.430840][ T30] audit: type=1400 audit(1758729500.886:61): avc: denied { write } for pid=223 comm="sh" path="pipe:[14485]" dev="pipefs" ino=14485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 13.436063][ T30] audit: type=1400 audit(1758729500.886:62): avc: denied { rlimitinh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.439335][ T30] audit: type=1400 audit(1758729500.886:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 384.689430][ T269] sftp-server (269) used greatest stack depth: 22208 bytes left Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. 2025/09/24 16:04:39 parsed 1 programs [ 392.061203][ T30] audit: type=1400 audit(1758729879.516:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 392.082328][ T30] audit: type=1400 audit(1758729879.516:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 392.719173][ T30] audit: type=1400 audit(1758729880.176:66): avc: denied { mounton } for pid=290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 392.720754][ T290] cgroup: Unknown subsys name 'net' [ 392.741991][ T30] audit: type=1400 audit(1758729880.176:67): avc: denied { mount } for pid=290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 392.769249][ T30] audit: type=1400 audit(1758729880.216:68): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 392.769479][ T290] cgroup: Unknown subsys name 'devices' [ 392.914089][ T290] cgroup: Unknown subsys name 'hugetlb' [ 392.919693][ T290] cgroup: Unknown subsys name 'rlimit' [ 393.091992][ T30] audit: type=1400 audit(1758729880.546:69): avc: denied { setattr } for pid=290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 393.115150][ T30] audit: type=1400 audit(1758729880.556:70): avc: denied { create } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 393.135511][ T30] audit: type=1400 audit(1758729880.556:71): avc: denied { write } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 393.155873][ T30] audit: type=1400 audit(1758729880.556:72): avc: denied { read } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 393.161406][ T292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 393.176089][ T30] audit: type=1400 audit(1758729880.556:73): avc: denied { mounton } for pid=290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 393.215313][ T290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 393.614017][ T294] request_module fs-gadgetfs succeeded, but still no fs? [ 393.898488][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.905553][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.913613][ T314] device bridge_slave_0 entered promiscuous mode [ 393.921331][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.928611][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.936089][ T314] device bridge_slave_1 entered promiscuous mode [ 393.987164][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.994247][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.001608][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.008667][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.026558][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.033811][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.041213][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 394.049189][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 394.058874][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 394.067066][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.074094][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.085363][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 394.093698][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.100865][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.113479][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 394.122629][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 394.137267][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 394.149416][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 394.157720][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 394.165351][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 394.174438][ T314] device veth0_vlan entered promiscuous mode [ 394.186468][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 394.195333][ T314] device veth1_macvtap entered promiscuous mode [ 394.211559][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 394.221353][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 394.260535][ T314] syz-executor (314) used greatest stack depth: 21728 bytes left 2025/09/24 16:04:42 executed programs: 0 [ 394.848962][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.856147][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.863812][ T364] device bridge_slave_0 entered promiscuous mode [ 394.870728][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.877924][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.885538][ T364] device bridge_slave_1 entered promiscuous mode [ 394.941872][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.949174][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.956546][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.963624][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.971633][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.979157][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.995856][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 395.003255][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 395.011655][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 395.020088][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 395.028222][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.035253][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.043935][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 395.052352][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 395.060564][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.067605][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.077912][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 395.086022][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 395.098581][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 395.106621][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 395.119049][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 395.127960][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 395.139058][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 395.147279][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 395.155268][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 395.162767][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 395.170799][ T364] device veth0_vlan entered promiscuous mode [ 395.179696][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 395.187913][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 395.197301][ T364] device veth1_macvtap entered promiscuous mode [ 395.206490][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 395.214242][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 395.222580][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 395.237517][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 395.245892][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 395.758667][ T45] device bridge_slave_1 left promiscuous mode [ 395.764890][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.772523][ T45] device bridge_slave_0 left promiscuous mode [ 395.778619][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.786487][ T45] device veth1_macvtap left promiscuous mode [ 395.792516][ T45] device veth0_vlan left promiscuous mode [ 410.315671][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.322923][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.330176][ T376] device bridge_slave_0 entered promiscuous mode [ 410.337069][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.344129][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.351386][ T376] device bridge_slave_1 entered promiscuous mode [ 410.388526][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.395579][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.402872][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.409883][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.425533][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.432741][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.439946][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 410.447381][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 410.456066][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 410.464246][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.471260][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.479664][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 410.487885][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.494929][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.506823][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 410.515855][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 410.528049][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 410.538958][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 410.547106][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 410.554772][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 410.563097][ T376] device veth0_vlan entered promiscuous mode [ 410.571873][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 410.580841][ T376] device veth1_macvtap entered promiscuous mode 2025/09/24 16:04:58 executed programs: 3 [ 410.589528][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 410.598997][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 535.682340][ T31] INFO: task syz.2.17:374 blocked for more than 122 seconds. [ 535.690129][ T31] Not tainted syzkaller #0 [ 535.695115][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 535.703837][ T31] task:syz.2.17 state:D stack:25824 pid: 374 ppid: 364 flags:0x00004000 [ 535.713169][ T31] Call Trace: [ 535.716441][ T31] [ 535.719353][ T31] __schedule+0xb6e/0x14c0 [ 535.723807][ T31] ? release_firmware_map_entry+0x190/0x190 [ 535.729803][ T31] ? __kasan_check_write+0x14/0x20 [ 535.734933][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 535.739951][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 535.745504][ T31] schedule+0x11e/0x1e0 [ 535.749654][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 535.755385][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 535.761268][ T31] ? dput+0x47/0x90 [ 535.765217][ T31] ? kasan_save_stack+0x49/0x60 [ 535.770080][ T31] ? kasan_save_stack+0x3a/0x60 [ 535.774968][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 535.780620][ T31] ? call_rcu+0x105/0xfe0 [ 535.785059][ T31] ? __fput+0x560/0x8b0 [ 535.789214][ T31] ? ____fput+0x15/0x20 [ 535.793383][ T31] ? task_work_run+0x101/0x190 [ 535.798136][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 535.803512][ T31] ? rwsem_write_trylock+0x130/0x300 [ 535.808786][ T31] ? clear_nonspinnable+0x60/0x60 [ 535.813820][ T31] ? perf_event_exit_event+0x520/0x520 [ 535.819270][ T31] ? mutex_unlock+0x89/0x220 [ 535.823953][ T31] down_write+0x29/0x30 [ 535.828096][ T31] exit_mmap+0x127/0x860 [ 535.832348][ T31] ? vm_brk+0x30/0x30 [ 535.836320][ T31] ? mutex_unlock+0x89/0x220 [ 535.840904][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 535.846147][ T31] __mmput+0x93/0x320 [ 535.850281][ T31] ? mmput+0x48/0x150 [ 535.854293][ T31] mmput+0x50/0x150 [ 535.858096][ T31] do_exit+0x9d2/0x27a0 [ 535.862273][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 535.868348][ T31] ? put_task_struct+0x90/0x90 [ 535.873113][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 535.878738][ T31] ? ____fput+0x15/0x20 [ 535.882893][ T31] do_group_exit+0x141/0x310 [ 535.887471][ T31] ? debug_smp_processor_id+0x17/0x20 [ 535.892852][ T31] __x64_sys_exit_group+0x3f/0x40 [ 535.897884][ T31] x64_sys_call+0x832/0x9a0 [ 535.902400][ T31] do_syscall_64+0x4c/0xa0 [ 535.906891][ T31] ? clear_bhb_loop+0x50/0xa0 [ 535.911544][ T31] ? clear_bhb_loop+0x50/0xa0 [ 535.916256][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 535.922190][ T31] RIP: 0033:0x7f1e2cc37ec9 [ 535.926590][ T31] RSP: 002b:00007fff57855428 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 535.935023][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1e2cc37ec9 [ 535.943020][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 535.950971][ T31] RBP: 0000000000000003 R08: 000000055785551f R09: 00007f1e2ce5a280 [ 535.959011][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 535.967003][ T31] R13: 00007f1e2ce5a280 R14: 0000000000000003 R15: 00007fff578554e0 [ 535.974980][ T31] [ 535.978143][ T31] INFO: task syz.3.18:386 blocked for more than 123 seconds. [ 535.985542][ T31] Not tainted syzkaller #0 [ 535.990582][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 535.999259][ T31] task:syz.3.18 state:D stack:25528 pid: 386 ppid: 376 flags:0x00004000 [ 536.008482][ T31] Call Trace: [ 536.011759][ T31] [ 536.014708][ T31] __schedule+0xb6e/0x14c0 [ 536.019135][ T31] ? release_firmware_map_entry+0x190/0x190 [ 536.025040][ T31] ? __kasan_check_write+0x14/0x20 [ 536.030157][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 536.035190][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 536.040727][ T31] schedule+0x11e/0x1e0 [ 536.044917][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 536.050646][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 536.056560][ T31] ? dput+0x47/0x90 [ 536.060362][ T31] ? kasan_save_stack+0x49/0x60 [ 536.065258][ T31] ? kasan_save_stack+0x3a/0x60 [ 536.070110][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 536.075773][ T31] ? call_rcu+0x105/0xfe0 [ 536.080095][ T31] ? __fput+0x560/0x8b0 [ 536.084254][ T31] ? ____fput+0x15/0x20 [ 536.088400][ T31] ? task_work_run+0x101/0x190 [ 536.093172][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 536.098567][ T31] ? rwsem_write_trylock+0x130/0x300 [ 536.103915][ T31] ? clear_nonspinnable+0x60/0x60 [ 536.108962][ T31] ? perf_event_exit_event+0x520/0x520 [ 536.114466][ T31] ? mutex_unlock+0x89/0x220 [ 536.119066][ T31] down_write+0x29/0x30 [ 536.123246][ T31] exit_mmap+0x127/0x860 [ 536.127500][ T31] ? vm_brk+0x30/0x30 [ 536.131459][ T31] ? mutex_unlock+0x89/0x220 [ 536.136080][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 536.141361][ T31] __mmput+0x93/0x320 [ 536.145361][ T31] ? mmput+0x48/0x150 [ 536.149334][ T31] mmput+0x50/0x150 [ 536.153200][ T31] do_exit+0x9d2/0x27a0 [ 536.157368][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 536.163443][ T31] ? put_task_struct+0x90/0x90 [ 536.168198][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 536.173924][ T31] ? ____fput+0x15/0x20 [ 536.178069][ T31] do_group_exit+0x141/0x310 [ 536.182660][ T31] ? debug_smp_processor_id+0x17/0x20 [ 536.188025][ T31] __x64_sys_exit_group+0x3f/0x40 [ 536.193071][ T31] x64_sys_call+0x832/0x9a0 [ 536.197566][ T31] do_syscall_64+0x4c/0xa0 [ 536.201959][ T31] ? clear_bhb_loop+0x50/0xa0 [ 536.206642][ T31] ? clear_bhb_loop+0x50/0xa0 [ 536.211342][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 536.217251][ T31] RIP: 0033:0x7fa734423ec9 [ 536.221655][ T31] RSP: 002b:00007ffe9273cc88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 536.230080][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa734423ec9 [ 536.238069][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 536.246086][ T31] RBP: 0000000000000003 R08: 000000059273cd7f R09: 00007fa734646280 [ 536.254089][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 536.262061][ T31] R13: 00007fa734646280 R14: 0000000000000003 R15: 00007ffe9273cd40 [ 536.270034][ T31] [ 536.273080][ T31] NMI backtrace for cpu 1 [ 536.277396][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 536.284579][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 536.294604][ T31] Call Trace: [ 536.297951][ T31] [ 536.300853][ T31] __dump_stack+0x21/0x30 [ 536.305176][ T31] dump_stack_lvl+0xee/0x150 [ 536.309737][ T31] ? show_regs_print_info+0x20/0x20 [ 536.314909][ T31] dump_stack+0x15/0x20 [ 536.319034][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 536.323944][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 536.329463][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 536.335592][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 536.340499][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 536.346544][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 536.352599][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 536.358552][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 536.364418][ T31] watchdog+0xd64/0xea0 [ 536.368553][ T31] ? hungtask_pm_notify+0x50/0x50 [ 536.373553][ T31] ? __kasan_check_read+0x11/0x20 [ 536.378570][ T31] ? __kthread_parkme+0xac/0x200 [ 536.383529][ T31] ? preempt_count_add+0x90/0x1b0 [ 536.388528][ T31] kthread+0x411/0x500 [ 536.392572][ T31] ? hungtask_pm_notify+0x50/0x50 [ 536.397570][ T31] ? kthread_blkcg+0xd0/0xd0 [ 536.402133][ T31] ret_from_fork+0x1f/0x30 [ 536.406585][ T31] [ 536.409940][ T31] Sending NMI from CPU 1 to CPUs 0: [ 536.415505][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xf/0x20 [ 556.802299][ T31] INFO: task syz.2.17:374 blocked for more than 144 seconds. [ 556.809703][ T31] Not tainted syzkaller #0 [ 556.815206][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 556.823925][ T31] task:syz.2.17 state:D stack:25824 pid: 374 ppid: 364 flags:0x00004000 [ 556.833286][ T31] Call Trace: [ 556.836558][ T31] [ 556.839473][ T31] __schedule+0xb6e/0x14c0 [ 556.843914][ T31] ? release_firmware_map_entry+0x190/0x190 [ 556.849821][ T31] ? __kasan_check_write+0x14/0x20 [ 556.854943][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 556.859967][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 556.865557][ T31] schedule+0x11e/0x1e0 [ 556.869700][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 556.875440][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 556.881322][ T31] ? dput+0x47/0x90 [ 556.885137][ T31] ? kasan_save_stack+0x49/0x60 [ 556.889977][ T31] ? kasan_save_stack+0x3a/0x60 [ 556.894841][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 556.900461][ T31] ? call_rcu+0x105/0xfe0 [ 556.904792][ T31] ? __fput+0x560/0x8b0 [ 556.909039][ T31] ? ____fput+0x15/0x20 [ 556.913205][ T31] ? task_work_run+0x101/0x190 [ 556.917974][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 556.923394][ T31] ? rwsem_write_trylock+0x130/0x300 [ 556.928681][ T31] ? clear_nonspinnable+0x60/0x60 [ 556.933737][ T31] ? perf_event_exit_event+0x520/0x520 [ 556.940307][ T31] ? mutex_unlock+0x89/0x220 [ 556.944945][ T31] down_write+0x29/0x30 [ 556.949097][ T31] exit_mmap+0x127/0x860 [ 556.953389][ T31] ? vm_brk+0x30/0x30 [ 556.957365][ T31] ? mutex_unlock+0x89/0x220 [ 556.961952][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 556.967171][ T31] __mmput+0x93/0x320 [ 556.971145][ T31] ? mmput+0x48/0x150 [ 556.975140][ T31] mmput+0x50/0x150 [ 556.978939][ T31] do_exit+0x9d2/0x27a0 [ 556.983145][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 556.989414][ T31] ? put_task_struct+0x90/0x90 [ 556.994236][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 556.999862][ T31] ? ____fput+0x15/0x20 [ 557.004054][ T31] do_group_exit+0x141/0x310 [ 557.008647][ T31] ? debug_smp_processor_id+0x17/0x20 [ 557.014060][ T31] __x64_sys_exit_group+0x3f/0x40 [ 557.019162][ T31] x64_sys_call+0x832/0x9a0 [ 557.023686][ T31] do_syscall_64+0x4c/0xa0 [ 557.028116][ T31] ? clear_bhb_loop+0x50/0xa0 [ 557.032851][ T31] ? clear_bhb_loop+0x50/0xa0 [ 557.037559][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 557.043618][ T31] RIP: 0033:0x7f1e2cc37ec9 [ 557.048052][ T31] RSP: 002b:00007fff57855428 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 557.056534][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1e2cc37ec9 [ 557.064548][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 557.072537][ T31] RBP: 0000000000000003 R08: 000000055785551f R09: 00007f1e2ce5a280 [ 557.080508][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 557.088671][ T31] R13: 00007f1e2ce5a280 R14: 0000000000000003 R15: 00007fff578554e0 [ 557.096688][ T31] [ 557.099737][ T31] INFO: task syz.3.18:386 blocked for more than 144 seconds. [ 557.107132][ T31] Not tainted syzkaller #0 [ 557.112075][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 557.120826][ T31] task:syz.3.18 state:D stack:25528 pid: 386 ppid: 376 flags:0x00004000 [ 557.130058][ T31] Call Trace: [ 557.133352][ T31] [ 557.136265][ T31] __schedule+0xb6e/0x14c0 [ 557.140662][ T31] ? release_firmware_map_entry+0x190/0x190 [ 557.146566][ T31] ? __kasan_check_write+0x14/0x20 [ 557.151669][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 557.156709][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 557.162269][ T31] schedule+0x11e/0x1e0 [ 557.166407][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 557.172148][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 557.178144][ T31] ? dput+0x47/0x90 [ 557.182067][ T31] ? kasan_save_stack+0x49/0x60 [ 557.186925][ T31] ? kasan_save_stack+0x3a/0x60 [ 557.191752][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 557.197394][ T31] ? call_rcu+0x105/0xfe0 [ 557.201714][ T31] ? __fput+0x560/0x8b0 [ 557.205980][ T31] ? ____fput+0x15/0x20 [ 557.210150][ T31] ? task_work_run+0x101/0x190 [ 557.214954][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 557.220333][ T31] ? rwsem_write_trylock+0x130/0x300 [ 557.225652][ T31] ? clear_nonspinnable+0x60/0x60 [ 557.230693][ T31] ? perf_event_exit_event+0x520/0x520 [ 557.236168][ T31] ? mutex_unlock+0x89/0x220 [ 557.240757][ T31] down_write+0x29/0x30 [ 557.244939][ T31] exit_mmap+0x127/0x860 [ 557.249251][ T31] ? vm_brk+0x30/0x30 [ 557.253248][ T31] ? mutex_unlock+0x89/0x220 [ 557.257835][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 557.263061][ T31] __mmput+0x93/0x320 [ 557.267039][ T31] ? mmput+0x48/0x150 [ 557.271069][ T31] mmput+0x50/0x150 [ 557.274899][ T31] do_exit+0x9d2/0x27a0 [ 557.279048][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 557.285128][ T31] ? put_task_struct+0x90/0x90 [ 557.290123][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 557.295793][ T31] ? ____fput+0x15/0x20 [ 557.299947][ T31] do_group_exit+0x141/0x310 [ 557.304573][ T31] ? debug_smp_processor_id+0x17/0x20 [ 557.309943][ T31] __x64_sys_exit_group+0x3f/0x40 [ 557.314991][ T31] x64_sys_call+0x832/0x9a0 [ 557.319491][ T31] do_syscall_64+0x4c/0xa0 [ 557.324089][ T31] ? clear_bhb_loop+0x50/0xa0 [ 557.328787][ T31] ? clear_bhb_loop+0x50/0xa0 [ 557.333512][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 557.339504][ T31] RIP: 0033:0x7fa734423ec9 [ 557.343933][ T31] RSP: 002b:00007ffe9273cc88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 557.352747][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa734423ec9 [ 557.361517][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 557.369548][ T31] RBP: 0000000000000003 R08: 000000059273cd7f R09: 00007fa734646280 [ 557.377536][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 557.385509][ T31] R13: 00007fa734646280 R14: 0000000000000003 R15: 00007ffe9273cd40 [ 557.393488][ T31] [ 557.396585][ T31] NMI backtrace for cpu 0 [ 557.400883][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 557.408058][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 557.418086][ T31] Call Trace: [ 557.421343][ T31] [ 557.424307][ T31] __dump_stack+0x21/0x30 [ 557.428618][ T31] dump_stack_lvl+0xee/0x150 [ 557.433215][ T31] ? show_regs_print_info+0x20/0x20 [ 557.438513][ T31] dump_stack+0x15/0x20 [ 557.442670][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 557.447589][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 557.453230][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 557.459373][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 557.464287][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 557.470328][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 557.476373][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 557.482360][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 557.488241][ T31] watchdog+0xd64/0xea0 [ 557.492382][ T31] ? hungtask_pm_notify+0x50/0x50 [ 557.497390][ T31] ? __kasan_check_read+0x11/0x20 [ 557.502404][ T31] ? __kthread_parkme+0xac/0x200 [ 557.507324][ T31] ? preempt_count_add+0x90/0x1b0 [ 557.512360][ T31] kthread+0x411/0x500 [ 557.516403][ T31] ? hungtask_pm_notify+0x50/0x50 [ 557.521460][ T31] ? kthread_blkcg+0xd0/0xd0 [ 557.526021][ T31] ret_from_fork+0x1f/0x30 [ 557.530413][ T31] [ 557.533506][ T31] Sending NMI from CPU 0 to CPUs 1: [ 557.538716][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20 [ 577.922222][ T31] INFO: task syz.2.17:374 blocked for more than 165 seconds. [ 577.929599][ T31] Not tainted syzkaller #0 [ 577.934970][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.943673][ T31] task:syz.2.17 state:D stack:25824 pid: 374 ppid: 364 flags:0x00004000 [ 577.952901][ T31] Call Trace: [ 577.956160][ T31] [ 577.959065][ T31] __schedule+0xb6e/0x14c0 [ 577.963498][ T31] ? release_firmware_map_entry+0x190/0x190 [ 577.969385][ T31] ? __kasan_check_write+0x14/0x20 [ 577.974529][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 577.979548][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 577.985098][ T31] schedule+0x11e/0x1e0 [ 577.989252][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 577.994994][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 578.000874][ T31] ? dput+0x47/0x90 [ 578.004723][ T31] ? kasan_save_stack+0x49/0x60 [ 578.009664][ T31] ? kasan_save_stack+0x3a/0x60 [ 578.014549][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 578.020189][ T31] ? call_rcu+0x105/0xfe0 [ 578.024559][ T31] ? __fput+0x560/0x8b0 [ 578.028712][ T31] ? ____fput+0x15/0x20 [ 578.032899][ T31] ? task_work_run+0x101/0x190 [ 578.037653][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 578.043039][ T31] ? rwsem_write_trylock+0x130/0x300 [ 578.048319][ T31] ? clear_nonspinnable+0x60/0x60 [ 578.053356][ T31] ? perf_event_exit_event+0x520/0x520 [ 578.058832][ T31] ? mutex_unlock+0x89/0x220 [ 578.063498][ T31] down_write+0x29/0x30 [ 578.067649][ T31] exit_mmap+0x127/0x860 [ 578.071958][ T31] ? vm_brk+0x30/0x30 [ 578.075951][ T31] ? mutex_unlock+0x89/0x220 [ 578.080532][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 578.085736][ T31] __mmput+0x93/0x320 [ 578.089845][ T31] ? mmput+0x48/0x150 [ 578.093858][ T31] mmput+0x50/0x150 [ 578.097688][ T31] do_exit+0x9d2/0x27a0 [ 578.101825][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 578.107905][ T31] ? put_task_struct+0x90/0x90 [ 578.112672][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 578.118288][ T31] ? ____fput+0x15/0x20 [ 578.122457][ T31] do_group_exit+0x141/0x310 [ 578.127045][ T31] ? debug_smp_processor_id+0x17/0x20 [ 578.132499][ T31] __x64_sys_exit_group+0x3f/0x40 [ 578.137498][ T31] x64_sys_call+0x832/0x9a0 [ 578.142025][ T31] do_syscall_64+0x4c/0xa0 [ 578.146429][ T31] ? clear_bhb_loop+0x50/0xa0 [ 578.151081][ T31] ? clear_bhb_loop+0x50/0xa0 [ 578.155760][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 578.161679][ T31] RIP: 0033:0x7f1e2cc37ec9 [ 578.166113][ T31] RSP: 002b:00007fff57855428 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 578.174543][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1e2cc37ec9 [ 578.182543][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 578.190512][ T31] RBP: 0000000000000003 R08: 000000055785551f R09: 00007f1e2ce5a280 [ 578.198489][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 578.206473][ T31] R13: 00007f1e2ce5a280 R14: 0000000000000003 R15: 00007fff578554e0 [ 578.214453][ T31] [ 578.217464][ T31] INFO: task syz.3.18:386 blocked for more than 165 seconds. [ 578.224828][ T31] Not tainted syzkaller #0 [ 578.229746][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.238412][ T31] task:syz.3.18 state:D stack:25528 pid: 386 ppid: 376 flags:0x00004000 [ 578.247633][ T31] Call Trace: [ 578.250897][ T31] [ 578.253821][ T31] __schedule+0xb6e/0x14c0 [ 578.258228][ T31] ? release_firmware_map_entry+0x190/0x190 [ 578.264127][ T31] ? __kasan_check_write+0x14/0x20 [ 578.269231][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 578.274254][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 578.279793][ T31] schedule+0x11e/0x1e0 [ 578.283953][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 578.289661][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 578.295555][ T31] ? dput+0x47/0x90 [ 578.299360][ T31] ? kasan_save_stack+0x49/0x60 [ 578.304232][ T31] ? kasan_save_stack+0x3a/0x60 [ 578.309072][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 578.314706][ T31] ? call_rcu+0x105/0xfe0 [ 578.319026][ T31] ? __fput+0x560/0x8b0 [ 578.323184][ T31] ? ____fput+0x15/0x20 [ 578.327326][ T31] ? task_work_run+0x101/0x190 [ 578.332128][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 578.337494][ T31] ? rwsem_write_trylock+0x130/0x300 [ 578.342800][ T31] ? clear_nonspinnable+0x60/0x60 [ 578.347813][ T31] ? perf_event_exit_event+0x520/0x520 [ 578.353274][ T31] ? mutex_unlock+0x89/0x220 [ 578.357853][ T31] down_write+0x29/0x30 [ 578.361985][ T31] exit_mmap+0x127/0x860 [ 578.366255][ T31] ? vm_brk+0x30/0x30 [ 578.370217][ T31] ? mutex_unlock+0x89/0x220 [ 578.374811][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 578.380030][ T31] __mmput+0x93/0x320 [ 578.384079][ T31] ? mmput+0x48/0x150 [ 578.388065][ T31] mmput+0x50/0x150 [ 578.391869][ T31] do_exit+0x9d2/0x27a0 [ 578.396037][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 578.402114][ T31] ? put_task_struct+0x90/0x90 [ 578.406856][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 578.412485][ T31] ? ____fput+0x15/0x20 [ 578.416694][ T31] do_group_exit+0x141/0x310 [ 578.421263][ T31] ? debug_smp_processor_id+0x17/0x20 [ 578.426641][ T31] __x64_sys_exit_group+0x3f/0x40 [ 578.431673][ T31] x64_sys_call+0x832/0x9a0 [ 578.436183][ T31] do_syscall_64+0x4c/0xa0 [ 578.440589][ T31] ? clear_bhb_loop+0x50/0xa0 [ 578.445265][ T31] ? clear_bhb_loop+0x50/0xa0 [ 578.449940][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 578.455864][ T31] RIP: 0033:0x7fa734423ec9 [ 578.460294][ T31] RSP: 002b:00007ffe9273cc88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 578.468722][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa734423ec9 [ 578.476847][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 578.484989][ T31] RBP: 0000000000000003 R08: 000000059273cd7f R09: 00007fa734646280 [ 578.492987][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 578.500950][ T31] R13: 00007fa734646280 R14: 0000000000000003 R15: 00007ffe9273cd40 [ 578.508941][ T31] [ 578.511954][ T31] NMI backtrace for cpu 1 [ 578.516252][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 578.523419][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 578.533447][ T31] Call Trace: [ 578.536700][ T31] [ 578.539608][ T31] __dump_stack+0x21/0x30 [ 578.543919][ T31] dump_stack_lvl+0xee/0x150 [ 578.548481][ T31] ? show_regs_print_info+0x20/0x20 [ 578.553653][ T31] dump_stack+0x15/0x20 [ 578.557780][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 578.562692][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 578.568211][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 578.574352][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 578.579266][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 578.585308][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 578.591434][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 578.597386][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 578.603250][ T31] watchdog+0xd64/0xea0 [ 578.607379][ T31] ? hungtask_pm_notify+0x50/0x50 [ 578.612375][ T31] ? __kasan_check_read+0x11/0x20 [ 578.617370][ T31] ? __kthread_parkme+0xac/0x200 [ 578.622286][ T31] ? preempt_count_add+0x90/0x1b0 [ 578.627458][ T31] kthread+0x411/0x500 [ 578.631586][ T31] ? hungtask_pm_notify+0x50/0x50 [ 578.636584][ T31] ? kthread_blkcg+0xd0/0xd0 [ 578.641180][ T31] ret_from_fork+0x1f/0x30 [ 578.645581][ T31] [ 578.648638][ T31] Sending NMI from CPU 1 to CPUs 0: [ 578.653849][ C0] NMI backtrace for cpu 0 [ 578.653857][ C0] CPU: 0 PID: 10 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 578.653873][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 578.653890][ C0] Workqueue: events_unbound toggle_allocation_gate [ 578.653911][ C0] RIP: 0010:preempt_count_add+0xbb/0x1b0 [ 578.653930][ C0] Code: c0 74 1f 48 8b 45 00 48 8b 58 08 48 89 df e8 fc 1a 08 00 85 c0 74 0b 48 8b 45 00 48 8b 00 48 8b 58 08 65 4c 8b 35 d5 5e bb 7e <49> 81 c6 b0 0a 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c [ 578.653942][ C0] RSP: 0018:ffffc900000a7798 EFLAGS: 00000246 [ 578.653992][ C0] RAX: 0000000000000000 RBX: ffffffff819cba9e RCX: ffffffff870c6f00 [ 578.654003][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff819cba9e [ 578.654012][ C0] RBP: ffffc900000a77b0 R08: dffffc0000000000 R09: fffff9400000d359 [ 578.654023][ C0] R10: fffff9400000d359 R11: 1ffffd400000d358 R12: dffffc0000000000 [ 578.654033][ C0] R13: ffffea0004001968 R14: ffff888100273b40 R15: dffffc0000000000 [ 578.654044][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 578.654057][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 578.654068][ C0] CR2: 00007f89892b7080 CR3: 000000000660f000 CR4: 00000000003506b0 [ 578.654081][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 578.654089][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 578.654098][ C0] Call Trace: [ 578.654102][ C0] [ 578.654107][ C0] _raw_spin_lock+0x6c/0xe0 [ 578.654124][ C0] ? _raw_spin_trylock_bh+0x130/0x130 [ 578.654138][ C0] ? cpumask_any_but+0x1d0/0x210 [ 578.654154][ C0] __get_locked_pte+0x28e/0x350 [ 578.654169][ C0] __text_poke+0x2a8/0x640 [ 578.654183][ C0] ? __kmalloc_track_caller+0x74/0x2c0 [ 578.654199][ C0] ? text_poke+0x20/0x20 [ 578.654212][ C0] ? text_poke_loc_init+0x349/0x570 [ 578.654225][ C0] ? __kmalloc_track_caller+0x74/0x2c0 [ 578.654240][ C0] ? __kmalloc_track_caller+0x74/0x2c0 [ 578.654255][ C0] text_poke_bp_batch+0x130/0x5a0 [ 578.654269][ C0] ? text_poke_loc_init+0x570/0x570 [ 578.654283][ C0] ? __kasan_check_write+0x14/0x20 [ 578.654297][ C0] ? mutex_lock+0x95/0x1a0 [ 578.654309][ C0] ? wait_for_completion_killable_timeout+0x10/0x10 [ 578.654324][ C0] ? text_poke_queue+0xdf/0x180 [ 578.654338][ C0] text_poke_finish+0x1a/0x30 [ 578.654350][ C0] arch_jump_label_transform_apply+0x15/0x30 [ 578.654368][ C0] __jump_label_update+0x37c/0x3a0 [ 578.654385][ C0] jump_label_update+0x39b/0x450 [ 578.654401][ C0] static_key_disable_cpuslocked+0xc5/0x1a0 [ 578.654418][ C0] static_key_disable+0x1a/0x30 [ 578.654433][ C0] toggle_allocation_gate+0x36d/0x410 [ 578.654484][ C0] ? kfence_debugfs_init+0x70/0x70 [ 578.654499][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 578.654513][ C0] ? finish_task_switch+0x16b/0x780 [ 578.654527][ C0] ? __switch_to_asm+0x3a/0x60 [ 578.654542][ C0] ? __schedule+0xb76/0x14c0 [ 578.654556][ C0] process_one_work+0x6be/0xba0 [ 578.654574][ C0] worker_thread+0xa59/0x1200 [ 578.654592][ C0] ? __kthread_parkme+0xac/0x200 [ 578.654607][ C0] kthread+0x411/0x500 [ 578.654620][ C0] ? worker_clr_flags+0x190/0x190 [ 578.654635][ C0] ? kthread_blkcg+0xd0/0xd0 [ 578.654649][ C0] ret_from_fork+0x1f/0x30 [ 578.654664][ C0] [ 599.042190][ T31] INFO: task syz.2.17:374 blocked for more than 186 seconds. [ 599.049574][ T31] Not tainted syzkaller #0 [ 599.054544][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 599.063249][ T31] task:syz.2.17 state:D stack:25824 pid: 374 ppid: 364 flags:0x00004000 [ 599.072460][ T31] Call Trace: [ 599.075748][ T31] [ 599.078782][ T31] __schedule+0xb6e/0x14c0 [ 599.083235][ T31] ? release_firmware_map_entry+0x190/0x190 [ 599.089142][ T31] ? __kasan_check_write+0x14/0x20 [ 599.094273][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 599.099290][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 599.104846][ T31] schedule+0x11e/0x1e0 [ 599.108991][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 599.114732][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 599.120615][ T31] ? dput+0x47/0x90 [ 599.124561][ T31] ? kasan_save_stack+0x49/0x60 [ 599.129412][ T31] ? kasan_save_stack+0x3a/0x60 [ 599.134273][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 599.139899][ T31] ? call_rcu+0x105/0xfe0 [ 599.144261][ T31] ? __fput+0x560/0x8b0 [ 599.148409][ T31] ? ____fput+0x15/0x20 [ 599.152595][ T31] ? task_work_run+0x101/0x190 [ 599.157357][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 599.162765][ T31] ? rwsem_write_trylock+0x130/0x300 [ 599.168046][ T31] ? clear_nonspinnable+0x60/0x60 [ 599.173107][ T31] ? perf_event_exit_event+0x520/0x520 [ 599.178566][ T31] ? mutex_unlock+0x89/0x220 [ 599.183170][ T31] down_write+0x29/0x30 [ 599.187319][ T31] exit_mmap+0x127/0x860 [ 599.191550][ T31] ? vm_brk+0x30/0x30 [ 599.195542][ T31] ? mutex_unlock+0x89/0x220 [ 599.200127][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 599.205336][ T31] __mmput+0x93/0x320 [ 599.209386][ T31] ? mmput+0x48/0x150 [ 599.213380][ T31] mmput+0x50/0x150 [ 599.217180][ T31] do_exit+0x9d2/0x27a0 [ 599.221313][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 599.227420][ T31] ? put_task_struct+0x90/0x90 [ 599.232188][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 599.237816][ T31] ? ____fput+0x15/0x20 [ 599.241950][ T31] do_group_exit+0x141/0x310 [ 599.246545][ T31] ? debug_smp_processor_id+0x17/0x20 [ 599.251906][ T31] __x64_sys_exit_group+0x3f/0x40 [ 599.256934][ T31] x64_sys_call+0x832/0x9a0 [ 599.261436][ T31] do_syscall_64+0x4c/0xa0 [ 599.265885][ T31] ? clear_bhb_loop+0x50/0xa0 [ 599.270554][ T31] ? clear_bhb_loop+0x50/0xa0 [ 599.275238][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 599.281121][ T31] RIP: 0033:0x7f1e2cc37ec9 [ 599.285577][ T31] RSP: 002b:00007fff57855428 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 599.294045][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1e2cc37ec9 [ 599.302094][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 599.310076][ T31] RBP: 0000000000000003 R08: 000000055785551f R09: 00007f1e2ce5a280 [ 599.318139][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 599.326127][ T31] R13: 00007f1e2ce5a280 R14: 0000000000000003 R15: 00007fff578554e0 [ 599.334099][ T31] [ 599.337103][ T31] INFO: task syz.3.18:386 blocked for more than 186 seconds. [ 599.344462][ T31] Not tainted syzkaller #0 [ 599.349379][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 599.358044][ T31] task:syz.3.18 state:D stack:25528 pid: 386 ppid: 376 flags:0x00004000 [ 599.367253][ T31] Call Trace: [ 599.370510][ T31] [ 599.373431][ T31] __schedule+0xb6e/0x14c0 [ 599.377837][ T31] ? release_firmware_map_entry+0x190/0x190 [ 599.383741][ T31] ? __kasan_check_write+0x14/0x20 [ 599.388847][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 599.393878][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 599.399414][ T31] schedule+0x11e/0x1e0 [ 599.403574][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 599.409283][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 599.415185][ T31] ? dput+0x47/0x90 [ 599.418987][ T31] ? kasan_save_stack+0x49/0x60 [ 599.423859][ T31] ? kasan_save_stack+0x3a/0x60 [ 599.428698][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 599.434336][ T31] ? call_rcu+0x105/0xfe0 [ 599.438656][ T31] ? __fput+0x560/0x8b0 [ 599.442816][ T31] ? ____fput+0x15/0x20 [ 599.446971][ T31] ? task_work_run+0x101/0x190 [ 599.451761][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 599.457144][ T31] ? rwsem_write_trylock+0x130/0x300 [ 599.462511][ T31] ? clear_nonspinnable+0x60/0x60 [ 599.467540][ T31] ? perf_event_exit_event+0x520/0x520 [ 599.473018][ T31] ? mutex_unlock+0x89/0x220 [ 599.477599][ T31] down_write+0x29/0x30 [ 599.481730][ T31] exit_mmap+0x127/0x860 [ 599.485982][ T31] ? vm_brk+0x30/0x30 [ 599.489977][ T31] ? mutex_unlock+0x89/0x220 [ 599.494576][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 599.499767][ T31] __mmput+0x93/0x320 [ 599.503783][ T31] ? mmput+0x48/0x150 [ 599.507771][ T31] mmput+0x50/0x150 [ 599.511554][ T31] do_exit+0x9d2/0x27a0 [ 599.515716][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 599.521801][ T31] ? put_task_struct+0x90/0x90 [ 599.526573][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 599.532354][ T31] ? ____fput+0x15/0x20 [ 599.536494][ T31] do_group_exit+0x141/0x310 [ 599.541083][ T31] ? debug_smp_processor_id+0x17/0x20 [ 599.546487][ T31] __x64_sys_exit_group+0x3f/0x40 [ 599.551513][ T31] x64_sys_call+0x832/0x9a0 [ 599.556055][ T31] do_syscall_64+0x4c/0xa0 [ 599.560467][ T31] ? clear_bhb_loop+0x50/0xa0 [ 599.565189][ T31] ? clear_bhb_loop+0x50/0xa0 [ 599.569856][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 599.575759][ T31] RIP: 0033:0x7fa734423ec9 [ 599.580163][ T31] RSP: 002b:00007ffe9273cc88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 599.588580][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa734423ec9 [ 599.596556][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 599.604526][ T31] RBP: 0000000000000003 R08: 000000059273cd7f R09: 00007fa734646280 [ 599.612500][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 599.620465][ T31] R13: 00007fa734646280 R14: 0000000000000003 R15: 00007ffe9273cd40 [ 599.628448][ T31] [ 599.631462][ T31] NMI backtrace for cpu 0 [ 599.635764][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 599.642932][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 599.652990][ T31] Call Trace: [ 599.656249][ T31] [ 599.659153][ T31] __dump_stack+0x21/0x30 [ 599.663474][ T31] dump_stack_lvl+0xee/0x150 [ 599.668056][ T31] ? show_regs_print_info+0x20/0x20 [ 599.673228][ T31] dump_stack+0x15/0x20 [ 599.677404][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 599.682316][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 599.687912][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 599.694049][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 599.698957][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 599.705042][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 599.711081][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 599.717044][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 599.722936][ T31] watchdog+0xd64/0xea0 [ 599.727066][ T31] ? hungtask_pm_notify+0x50/0x50 [ 599.732081][ T31] ? __kasan_check_read+0x11/0x20 [ 599.737093][ T31] ? __kthread_parkme+0xac/0x200 [ 599.742100][ T31] ? preempt_count_add+0x90/0x1b0 [ 599.747096][ T31] kthread+0x411/0x500 [ 599.751134][ T31] ? hungtask_pm_notify+0x50/0x50 [ 599.756130][ T31] ? kthread_blkcg+0xd0/0xd0 [ 599.760706][ T31] ret_from_fork+0x1f/0x30 [ 599.765098][ T31] [ 599.768171][ T31] Sending NMI from CPU 0 to CPUs 1: [ 599.773390][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20 [ 620.162168][ T31] INFO: task syz.2.17:374 blocked for more than 207 seconds. [ 620.169569][ T31] Not tainted syzkaller #0 [ 620.174523][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 620.183198][ T31] task:syz.2.17 state:D stack:25824 pid: 374 ppid: 364 flags:0x00004000 [ 620.192411][ T31] Call Trace: [ 620.195676][ T31] [ 620.198610][ T31] __schedule+0xb6e/0x14c0 [ 620.203032][ T31] ? release_firmware_map_entry+0x190/0x190 [ 620.208939][ T31] ? __kasan_check_write+0x14/0x20 [ 620.214082][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 620.219108][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 620.224667][ T31] schedule+0x11e/0x1e0 [ 620.228830][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 620.234558][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 620.240448][ T31] ? dput+0x47/0x90 [ 620.244279][ T31] ? kasan_save_stack+0x49/0x60 [ 620.249146][ T31] ? kasan_save_stack+0x3a/0x60 [ 620.253999][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 620.259639][ T31] ? call_rcu+0x105/0xfe0 [ 620.263976][ T31] ? __fput+0x560/0x8b0 [ 620.268122][ T31] ? ____fput+0x15/0x20 [ 620.272281][ T31] ? task_work_run+0x101/0x190 [ 620.277036][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 620.282503][ T31] ? rwsem_write_trylock+0x130/0x300 [ 620.287780][ T31] ? clear_nonspinnable+0x60/0x60 [ 620.292897][ T31] ? perf_event_exit_event+0x520/0x520 [ 620.298345][ T31] ? mutex_unlock+0x89/0x220 [ 620.302938][ T31] down_write+0x29/0x30 [ 620.307171][ T31] exit_mmap+0x127/0x860 [ 620.311394][ T31] ? vm_brk+0x30/0x30 [ 620.315382][ T31] ? mutex_unlock+0x89/0x220 [ 620.319985][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 620.325275][ T31] __mmput+0x93/0x320 [ 620.329281][ T31] ? mmput+0x48/0x150 [ 620.333267][ T31] mmput+0x50/0x150 [ 620.337064][ T31] do_exit+0x9d2/0x27a0 [ 620.341210][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 620.347303][ T31] ? put_task_struct+0x90/0x90 [ 620.352070][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 620.357684][ T31] ? ____fput+0x15/0x20 [ 620.361811][ T31] do_group_exit+0x141/0x310 [ 620.366399][ T31] ? debug_smp_processor_id+0x17/0x20 [ 620.371762][ T31] __x64_sys_exit_group+0x3f/0x40 [ 620.376812][ T31] x64_sys_call+0x832/0x9a0 [ 620.381304][ T31] do_syscall_64+0x4c/0xa0 [ 620.385721][ T31] ? clear_bhb_loop+0x50/0xa0 [ 620.390388][ T31] ? clear_bhb_loop+0x50/0xa0 [ 620.395069][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 620.400955][ T31] RIP: 0033:0x7f1e2cc37ec9 [ 620.405378][ T31] RSP: 002b:00007fff57855428 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 620.413810][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1e2cc37ec9 [ 620.421757][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 620.429726][ T31] RBP: 0000000000000003 R08: 000000055785551f R09: 00007f1e2ce5a280 [ 620.437704][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 620.445673][ T31] R13: 00007f1e2ce5a280 R14: 0000000000000003 R15: 00007fff578554e0 [ 620.453650][ T31] [ 620.456671][ T31] INFO: task syz.3.18:386 blocked for more than 207 seconds. [ 620.464063][ T31] Not tainted syzkaller #0 [ 620.469065][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 620.477732][ T31] task:syz.3.18 state:D stack:25528 pid: 386 ppid: 376 flags:0x00004000 [ 620.486944][ T31] Call Trace: [ 620.490204][ T31] [ 620.493131][ T31] __schedule+0xb6e/0x14c0 [ 620.497542][ T31] ? release_firmware_map_entry+0x190/0x190 [ 620.503442][ T31] ? __kasan_check_write+0x14/0x20 [ 620.508546][ T31] ? _raw_spin_lock_irq+0x8f/0xe0 [ 620.513573][ T31] ? _raw_spin_lock_irqsave+0x110/0x110 [ 620.519121][ T31] schedule+0x11e/0x1e0 [ 620.523284][ T31] rwsem_down_write_slowpath+0xae5/0x1930 [ 620.529002][ T31] ? rwsem_down_read_slowpath+0x1230/0x1230 [ 620.534998][ T31] ? dput+0x47/0x90 [ 620.538795][ T31] ? kasan_save_stack+0x49/0x60 [ 620.543665][ T31] ? kasan_save_stack+0x3a/0x60 [ 620.548528][ T31] ? __kasan_record_aux_stack+0xd2/0x100 [ 620.554164][ T31] ? call_rcu+0x105/0xfe0 [ 620.558485][ T31] ? __fput+0x560/0x8b0 [ 620.562650][ T31] ? ____fput+0x15/0x20 [ 620.566792][ T31] ? task_work_run+0x101/0x190 [ 620.571594][ T31] ? exit_to_user_mode_loop+0xd0/0xe0 [ 620.576970][ T31] ? rwsem_write_trylock+0x130/0x300 [ 620.582263][ T31] ? clear_nonspinnable+0x60/0x60 [ 620.587265][ T31] ? perf_event_exit_event+0x520/0x520 [ 620.592740][ T31] ? mutex_unlock+0x89/0x220 [ 620.597322][ T31] down_write+0x29/0x30 [ 620.601468][ T31] exit_mmap+0x127/0x860 [ 620.605725][ T31] ? vm_brk+0x30/0x30 [ 620.609684][ T31] ? mutex_unlock+0x89/0x220 [ 620.614266][ T31] ? uprobe_clear_state+0x2c1/0x320 [ 620.619457][ T31] __mmput+0x93/0x320 [ 620.623443][ T31] ? mmput+0x48/0x150 [ 620.627419][ T31] mmput+0x50/0x150 [ 620.631218][ T31] do_exit+0x9d2/0x27a0 [ 620.635394][ T31] ? blkcg_maybe_throttle_current+0x1df/0x9e0 [ 620.641454][ T31] ? put_task_struct+0x90/0x90 [ 620.646222][ T31] ? __blkcg_punt_bio_submit+0x170/0x170 [ 620.651850][ T31] ? ____fput+0x15/0x20 [ 620.656071][ T31] do_group_exit+0x141/0x310 [ 620.660686][ T31] ? debug_smp_processor_id+0x17/0x20 [ 620.666078][ T31] __x64_sys_exit_group+0x3f/0x40 [ 620.671095][ T31] x64_sys_call+0x832/0x9a0 [ 620.675607][ T31] do_syscall_64+0x4c/0xa0 [ 620.680014][ T31] ? clear_bhb_loop+0x50/0xa0 [ 620.684689][ T31] ? clear_bhb_loop+0x50/0xa0 [ 620.689356][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 620.695252][ T31] RIP: 0033:0x7fa734423ec9 [ 620.699654][ T31] RSP: 002b:00007ffe9273cc88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 620.708172][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa734423ec9 [ 620.716147][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 620.724112][ T31] RBP: 0000000000000003 R08: 000000059273cd7f R09: 00007fa734646280 [ 620.732090][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 620.740058][ T31] R13: 00007fa734646280 R14: 0000000000000003 R15: 00007ffe9273cd40 [ 620.748042][ T31] [ 620.751049][ T31] NMI backtrace for cpu 0 [ 620.755350][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 620.762606][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 620.772640][ T31] Call Trace: [ 620.775894][ T31] [ 620.778799][ T31] __dump_stack+0x21/0x30 [ 620.783103][ T31] dump_stack_lvl+0xee/0x150 [ 620.787665][ T31] ? show_regs_print_info+0x20/0x20 [ 620.792831][ T31] dump_stack+0x15/0x20 [ 620.796966][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 620.801965][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 620.807481][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 620.813692][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 620.818655][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 620.824694][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 620.830750][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 620.836716][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 620.842579][ T31] watchdog+0xd64/0xea0 [ 620.846706][ T31] ? hungtask_pm_notify+0x50/0x50 [ 620.851698][ T31] ? __kasan_check_read+0x11/0x20 [ 620.856691][ T31] ? __kthread_parkme+0xac/0x200 [ 620.861598][ T31] ? preempt_count_add+0x90/0x1b0 [ 620.866594][ T31] kthread+0x411/0x500 [ 620.870632][ T31] ? hungtask_pm_notify+0x50/0x50 [ 620.875627][ T31] ? kthread_blkcg+0xd0/0xd0 [ 620.880189][ T31] ret_from_fork+0x1f/0x30 [ 620.884599][ T31] [ 620.887636][ T31] Sending NMI from CPU 0 to CPUs 1: [ 620.892851][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20