INFO: task syz.4.17:515 blocked for more than 122 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.17 state:D stack:0 pid:515 tgid:512 ppid:471 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5945 [inline] __schedule+0x1322/0x1df0 kernel/sched/core.c:7791 __schedule_loop kernel/sched/core.c:7872 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7887 schedule_timeout+0xb2/0x3a0 kernel/time/timer.c:2595 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common+0x359/0x630 kernel/sched/completion.c:127 wait_for_completion_state+0x19/0x40 kernel/sched/completion.c:264 coredump_wait fs/coredump.c:419 [inline] do_coredump+0x7cf/0x2bd0 fs/coredump.c:581 get_signal+0x11fd/0x14f0 kernel/signal.c:2918 arch_do_signal_or_restart+0x96/0x720 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x58/0xb0 kernel/entry/common.c:218 do_syscall_64+0x64/0xf0 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f948ef8e929 RSP: 002b:00007f948fd570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 00000000000000ca RBX: 00007f948f1b6088 RCX: 00007f948ef8e929 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f948f1b608c RBP: 00007f948f1b6080 R08: 7fffffffffffffff R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f948f1b608c R13: 0000000000000000 R14: 00007ffd5ab1d610 R15: 00007ffd5ab1d6f8 INFO: task syz.2.18:522 blocked for more than 123 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.18 state:D stack:0 pid:522 tgid:516 ppid:473 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5945 [inline] __schedule+0x1322/0x1df0 kernel/sched/core.c:7791 __schedule_loop kernel/sched/core.c:7872 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7887 schedule_timeout+0xb2/0x3a0 kernel/time/timer.c:2595 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common+0x359/0x630 kernel/sched/completion.c:127 wait_for_completion_state+0x19/0x40 kernel/sched/completion.c:264 coredump_wait fs/coredump.c:419 [inline] do_coredump+0x7cf/0x2bd0 fs/coredump.c:581 get_signal+0x11fd/0x14f0 kernel/signal.c:2918 arch_do_signal_or_restart+0x96/0x720 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x58/0xb0 kernel/entry/common.c:218 do_syscall_64+0x64/0xf0 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f6b9398e929 RSP: 002b:00007f6b937ca0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 00000000000000ca RBX: 00007f6b93bb6088 RCX: 00007f6b9398e929 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6b93bb608c RBP: 00007f6b93bb6080 R08: 7fffffffffffffff R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6b93bb608c R13: 0000000000000000 R14: 00007ffebf0863d0 R15: 00007ffebf0864b8 INFO: task syz.0.16:524 blocked for more than 123 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.16 state:D stack:0 pid:524 tgid:518 ppid:469 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5945 [inline] __schedule+0x1322/0x1df0 kernel/sched/core.c:7791 __schedule_loop kernel/sched/core.c:7872 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7887 schedule_timeout+0xb2/0x3a0 kernel/time/timer.c:2595 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common+0x359/0x630 kernel/sched/completion.c:127 wait_for_completion_state+0x19/0x40 kernel/sched/completion.c:264 coredump_wait fs/coredump.c:419 [inline] do_coredump+0x7cf/0x2bd0 fs/coredump.c:581 get_signal+0x11fd/0x14f0 kernel/signal.c:2918 arch_do_signal_or_restart+0x96/0x720 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x58/0xb0 kernel/entry/common.c:218 do_syscall_64+0x64/0xf0 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7fe63eb8e929 RSP: 002b:00007fe63f9a80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 00000000000000ca RBX: 00007fe63edb6088 RCX: 00007fe63eb8e929 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe63edb608c RBP: 00007fe63edb6080 R08: 7fffffffffffffff R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe63edb608c R13: 0000000000000000 R14: 00007ffd51da5020 R15: 00007ffd51da5108 INFO: task syz.5.19:523 blocked for more than 123 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.5.19 state:D stack:0 pid:523 tgid:520 ppid:474 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5945 [inline] __schedule+0x1322/0x1df0 kernel/sched/core.c:7791 __schedule_loop kernel/sched/core.c:7872 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7887 schedule_timeout+0xb2/0x3a0 kernel/time/timer.c:2595 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common+0x359/0x630 kernel/sched/completion.c:127 wait_for_completion_state+0x19/0x40 kernel/sched/completion.c:264 coredump_wait fs/coredump.c:419 [inline] do_coredump+0x7cf/0x2bd0 fs/coredump.c:581 get_signal+0x11fd/0x14f0 kernel/signal.c:2918 arch_do_signal_or_restart+0x96/0x720 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x58/0xb0 kernel/entry/common.c:218 do_syscall_64+0x64/0xf0 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f11a2d8e929 RSP: 002b:00007f11a3c230e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 00000000000000ca RBX: 00007f11a2fb6088 RCX: 00007f11a2d8e929 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f11a2fb608c RBP: 00007f11a2fb6080 R08: 7fffffffffffffff R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f11a2fb608c R13: 0000000000000000 R14: 00007ffe291a7f50 R15: 00007ffe291a8038 NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 0ae09b657164b78ab684e1b351b28bd31f79cd2f Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:94 dump_stack_lvl+0x10c/0x190 lib/dump_stack.c:120 dump_stack+0x19/0x20 lib/dump_stack.c:129 nmi_cpu_backtrace+0x2bf/0x2d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x142/0x2c0 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:41 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:267 [inline] watchdog+0xd8f/0xed0 kernel/hung_task.c:423 kthread+0x2c7/0x370 kernel/kthread.c:389 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 0ae09b657164b78ab684e1b351b28bd31f79cd2f Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:update_group_capacity+0x12e/0x9f0 kernel/sched/fair.c:10308 Code: c0 b9 20 87 e8 f3 6e 7e 00 48 be 00 00 00 00 00 fc ff df 49 8d 5d 18 48 89 d8 48 c1 e8 03 4c 03 35 f7 1e c3 05 48 89 44 24 20 <80> 3c 30 00 74 12 48 89 df e8 c4 6e 7e 00 48 be 00 00 00 00 00 fc RSP: 0018:ffffc90000007740 EFLAGS: 00000206 RAX: 1ffff110207ca2f3 RBX: ffff888103e51798 RCX: 000000000000000a RDX: 0000000000000100 RSI: dffffc0000000000 RDI: 0000000000000000 RBP: ffffc90000007810 R08: ffff888103e517af R09: 1ffff110207ca2f5 R10: dffffc0000000000 R11: ffffed10207ca2f6 R12: 0000000000000000 R13: ffff888103e51780 R14: 00000000ffffd5bb R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555564d904a8 CR3: 000000010bf38000 CR4: 00000000003526b0 Call Trace: update_sd_lb_stats kernel/sched/fair.c:11331 [inline] sched_balance_find_src_group kernel/sched/fair.c:11594 [inline] sched_balance_rq+0x89b/0x5060 kernel/sched/fair.c:12041 sched_balance_domains+0x4b4/0xa10 kernel/sched/fair.c:12507 _nohz_idle_balance+0x3e3/0x5a0 kernel/sched/fair.c:12958 nohz_idle_balance kernel/sched/fair.c:13001 [inline] sched_balance_softirq+0x8a/0x170 kernel/sched/fair.c:13229 handle_softirqs+0x1ab/0x630 kernel/softirq.c:621 __do_softirq kernel/softirq.c:659 [inline] invoke_softirq kernel/softirq.c:476 [inline] __irq_exit_rcu+0x48/0xc0 kernel/softirq.c:708 irq_exit_rcu+0xd/0x30 kernel/softirq.c:720 instr_sysvec_call_function_single arch/x86/kernel/smp.c:266 [inline] sysvec_call_function_single+0x7f/0x90 arch/x86/kernel/smp.c:266 asm_sysvec_call_function_single+0x1f/0x30 arch/x86/include/asm/idtentry.h:709 RIP: 0010:pv_native_safe_halt+0x17/0x20 arch/x86/kernel/paravirt.c:106 Code: cc cc cc b8 ea 50 f2 49 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 91 3b 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 RSP: 0018:ffffffff87207da0 EFLAGS: 000002c6 RAX: ffff8881f6e00000 RBX: ffffffff87215540 RCX: ffffffff858bc09e RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000004b914 RBP: ffffffff87207da0 R08: ffff8881f6e39733 R09: 1ffff1103edc72e6 R10: dffffc0000000000 R11: ffffed103edc72e7 R12: 1ffffffff0e42aa8 R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87cadba8 arch_safe_halt arch/x86/include/asm/paravirt.h:112 [inline] default_idle+0x17/0x30 arch/x86/kernel/process.c:754 arch_cpu_idle+0xd/0x20 arch/x86/kernel/process.c:791 default_idle_call+0x3f/0x80 kernel/sched/idle.c:117 cpuidle_idle_call kernel/sched/idle.c:185 [inline] do_idle+0x1a0/0x470 kernel/sched/idle.c:326 cpu_startup_entry+0x48/0x70 kernel/sched/idle.c:424 rest_init+0x10b/0x130 init/main.c:748 start_kernel+0x46a/0x4bb init/main.c:1135 x86_64_start_reservations+0x2e/0x30 arch/x86/kernel/head64.c:507 x86_64_start_kernel+0x6a/0x7b arch/x86/kernel/head64.c:488 common_startup_64+0x13b/0x157