INFO: task syz-executor402:6207 blocked for more than 143 seconds. Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor402 state:D stack:26344 pid:6207 tgid:6204 ppid:5873 task_flags:0x400548 flags:0x00024002 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] schedule+0x165/0x360 kernel/sched/core.c:7058 schedule_timeout+0x9a/0x270 kernel/time/sleep_timeout.c:75 do_wait_for_common kernel/sched/completion.c:100 [inline] __wait_for_common kernel/sched/completion.c:121 [inline] wait_for_common kernel/sched/completion.c:132 [inline] wait_for_completion+0x2bf/0x5d0 kernel/sched/completion.c:153 io_wq_exit_workers io_uring/io-wq.c:1327 [inline] io_wq_put_and_exit+0x316/0x650 io_uring/io-wq.c:1355 io_uring_clean_tctx+0x11f/0x1a0 io_uring/tctx.c:203 io_uring_cancel_generic+0x6ca/0x7d0 io_uring/io_uring.c:3272 io_uring_files_cancel include/linux/io_uring.h:19 [inline] do_exit+0x345/0x2300 kernel/exit.c:907 do_group_exit+0x21c/0x2d0 kernel/exit.c:1102 get_signal+0x1286/0x1340 kernel/signal.c:3034 arch_do_signal_or_restart+0x9a/0x750 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop+0x75/0x110 kernel/entry/common.c:40 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline] do_syscall_64+0x2bd/0x3b0 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f10d8a45fc9 RSP: 002b:00007f10d89fa178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f10d8acd3e8 RCX: 00007f10d8a45fc9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f10d8acd3e8 RBP: 00007f10d8acd3e0 R08: 00007f10d89fa6c0 R09: 00007f10d89fa6c0 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10d8acd3ec R13: 0000000000000016 R14: 00007ffffb919940 R15: 00007ffffb919a28 INFO: task syz-executor402:6458 blocked for more than 145 seconds. Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor402 state:D stack:25384 pid:6458 tgid:6451 ppid:5870 task_flags:0x400548 flags:0x00024002 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] schedule+0x165/0x360 kernel/sched/core.c:7058 schedule_timeout+0x9a/0x270 kernel/time/sleep_timeout.c:75 do_wait_for_common kernel/sched/completion.c:100 [inline] __wait_for_common kernel/sched/completion.c:121 [inline] wait_for_common kernel/sched/completion.c:132 [inline] wait_for_completion+0x2bf/0x5d0 kernel/sched/completion.c:153 io_wq_exit_workers io_uring/io-wq.c:1327 [inline] io_wq_put_and_exit+0x316/0x650 io_uring/io-wq.c:1355 io_uring_clean_tctx+0x11f/0x1a0 io_uring/tctx.c:203 io_uring_cancel_generic+0x6ca/0x7d0 io_uring/io_uring.c:3272 io_uring_files_cancel include/linux/io_uring.h:19 [inline] do_exit+0x345/0x2300 kernel/exit.c:907 do_group_exit+0x21c/0x2d0 kernel/exit.c:1102 get_signal+0x1286/0x1340 kernel/signal.c:3034 arch_do_signal_or_restart+0x9a/0x750 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop+0x75/0x110 kernel/entry/common.c:40 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline] do_syscall_64+0x2bd/0x3b0 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f10d8a45fc9 RSP: 002b:00007f10d89d9178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f10d8acd3f8 RCX: 00007f10d8a45fc9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f10d8acd3f8 RBP: 00007f10d8acd3f0 R08: 00007f10d89d96c0 R09: 00007f10d89d96c0 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10d8acd3fc R13: 000000000000006e R14: 00007ffffb919940 R15: 00007ffffb919a28 INFO: task syz-executor402:6457 blocked for more than 147 seconds. Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor402 state:D stack:28072 pid:6457 tgid:6455 ppid:5875 task_flags:0x400548 flags:0x00024002 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] schedule+0x165/0x360 kernel/sched/core.c:7058 schedule_timeout+0x9a/0x270 kernel/time/sleep_timeout.c:75 do_wait_for_common kernel/sched/completion.c:100 [inline] __wait_for_common kernel/sched/completion.c:121 [inline] wait_for_common kernel/sched/completion.c:132 [inline] wait_for_completion+0x2bf/0x5d0 kernel/sched/completion.c:153 io_wq_exit_workers io_uring/io-wq.c:1327 [inline] io_wq_put_and_exit+0x316/0x650 io_uring/io-wq.c:1355 io_uring_clean_tctx+0x11f/0x1a0 io_uring/tctx.c:203 io_uring_cancel_generic+0x6ca/0x7d0 io_uring/io_uring.c:3272 io_uring_files_cancel include/linux/io_uring.h:19 [inline] do_exit+0x345/0x2300 kernel/exit.c:907 do_group_exit+0x21c/0x2d0 kernel/exit.c:1102 get_signal+0x1286/0x1340 kernel/signal.c:3034 arch_do_signal_or_restart+0x9a/0x750 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop+0x75/0x110 kernel/entry/common.c:40 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline] do_syscall_64+0x2bd/0x3b0 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f10d8a45fc9 RSP: 002b:00007f10d89fa178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f10d8acd3e8 RCX: 00007f10d8a45fc9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f10d8acd3e8 RBP: 00007f10d8acd3e0 R08: 00007f10d89fa6c0 R09: 00007f10d89fa6c0 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10d8acd3ec R13: 0000000000000016 R14: 00007ffffb919940 R15: 00007ffffb919a28 INFO: lockdep is turned off. NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:332 [inline] watchdog+0xf60/0xfa0 kernel/hung_task.c:495 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 6808 Comm: iou-wrk-6807 Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:_copy_to_user+0x90/0xb0 lib/usercopy.c:26 Code: 39 ec 77 38 e8 f1 b8 f5 fc 4c 89 f7 89 de e8 47 39 59 fd 0f 01 cb 4c 89 ff 48 89 d9 4c 89 f6 e8 56 95 b0 06 48 89 cb 0f 01 ca <48> 89 d8 5b 41 5c 41 5d 41 5e 41 5f e9 0f a0 b4 06 cc e8 b9 b8 f5 RSP: 0018:ffffc9000b1c76d0 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffc9000b1c7768 RDI: 0000200000b45458 RBP: ffffc9000b1c77e0 R08: ffffc9000b1c7767 R09: 1ffff92001638eec R10: dffffc0000000000 R11: fffff52001638eed R12: 0000200000b45458 R13: 00007ffffffff000 R14: ffffc9000b1c7760 R15: 0000200000b45450 FS: 00007f10d89d96c0(0000) GS:ffff888125c0f000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00002000000a1000 CR3: 00000000708b2000 CR4: 00000000003526f0 Call Trace: copy_to_user include/linux/uaccess.h:225 [inline] msr_read+0x177/0x250 arch/x86/kernel/msr.c:69 loop_rw_iter+0x425/0x660 include/linux/uio.h:-1 io_iter_do_read io_uring/rw.c:830 [inline] __io_read+0x1326/0x14f0 io_uring/rw.c:941 io_read+0x1c/0x60 io_uring/rw.c:1020 __io_issue_sqe+0x17e/0x4b0 io_uring/io_uring.c:1773 io_issue_sqe+0x165/0xfd0 io_uring/io_uring.c:1796 io_wq_submit_work+0x6e9/0xb90 io_uring/io_uring.c:1908 io_worker_handle_work+0x7cd/0x1180 io_uring/io-wq.c:650 io_wq_worker+0x42f/0xeb0 io_uring/io-wq.c:704 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245