INFO: task syz.4.20:507 blocked for more than 122 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.20 state:D stack:0 pid:507 tgid:506 ppid:493 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:6060 [inline] __schedule+0x1496/0x20b0 kernel/sched/core.c:7880 __schedule_loop kernel/sched/core.c:7957 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7972 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8029 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x902/0x1b90 kernel/locking/mutex.c:806 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1136 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:911 [inline] usbdev_do_ioctl drivers/usb/core/devio.c:2608 [inline] usbdev_ioctl+0x13e/0x2120 drivers/usb/core/devio.c:2824 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0x135/0x1b0 fs/ioctl.c:893 __x64_sys_ioctl+0x7f/0xa0 fs/ioctl.c:893 x64_sys_call+0x1878/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f3c0819de59 RSP: 002b:00007f3c0911a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f3c08425fa0 RCX: 00007f3c0819de59 RDX: 0000200000000000 RSI: 000000008008551c RDI: 0000000000000003 RBP: 00007f3c08233e6f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f3c08426038 R14: 00007f3c08425fa0 R15: 00007ffc232f8c28 INFO: task syz.5.18:511 blocked for more than 123 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.5.18 state:D stack:0 pid:511 tgid:510 ppid:489 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:6060 [inline] __schedule+0x1496/0x20b0 kernel/sched/core.c:7880 __schedule_loop kernel/sched/core.c:7957 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7972 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8029 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x902/0x1b90 kernel/locking/mutex.c:806 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1136 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:911 [inline] usbdev_do_ioctl drivers/usb/core/devio.c:2608 [inline] usbdev_ioctl+0x13e/0x2120 drivers/usb/core/devio.c:2824 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0x135/0x1b0 fs/ioctl.c:893 __x64_sys_ioctl+0x7f/0xa0 fs/ioctl.c:893 x64_sys_call+0x1878/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f9de519de59 RSP: 002b:00007f9de60c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f9de5425fa0 RCX: 00007f9de519de59 RDX: 0000200000000000 RSI: 000000008008551c RDI: 0000000000000003 RBP: 00007f9de5233e6f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f9de5426038 R14: 00007f9de5425fa0 R15: 00007ffd9e92f9d8 INFO: task syz.2.19:513 blocked for more than 123 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.19 state:D stack:0 pid:513 tgid:512 ppid:491 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:6060 [inline] __schedule+0x1496/0x20b0 kernel/sched/core.c:7880 __schedule_loop kernel/sched/core.c:7957 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7972 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8029 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x902/0x1b90 kernel/locking/mutex.c:806 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1136 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:911 [inline] usbdev_do_ioctl drivers/usb/core/devio.c:2608 [inline] usbdev_ioctl+0x13e/0x2120 drivers/usb/core/devio.c:2824 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0x135/0x1b0 fs/ioctl.c:893 __x64_sys_ioctl+0x7f/0xa0 fs/ioctl.c:893 x64_sys_call+0x1878/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f5bda59de59 RSP: 002b:00007f5bdb4ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f5bda825fa0 RCX: 00007f5bda59de59 RDX: 0000200000000000 RSI: 000000008008551c RDI: 0000000000000003 RBP: 00007f5bda633e6f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f5bda826038 R14: 00007f5bda825fa0 R15: 00007ffd2174a628 INFO: task syz.0.17:515 blocked for more than 123 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.17 state:D stack:0 pid:515 tgid:514 ppid:488 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:6060 [inline] __schedule+0x1496/0x20b0 kernel/sched/core.c:7880 __schedule_loop kernel/sched/core.c:7957 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7972 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8029 __mutex_lock_common kernel/locking/mutex.c:707 [inline] __mutex_lock+0x902/0x1b90 kernel/locking/mutex.c:806 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1136 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285 device_lock include/linux/device.h:911 [inline] usbdev_do_ioctl drivers/usb/core/devio.c:2608 [inline] usbdev_ioctl+0x13e/0x2120 drivers/usb/core/devio.c:2824 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0x135/0x1b0 fs/ioctl.c:893 __x64_sys_ioctl+0x7f/0xa0 fs/ioctl.c:893 x64_sys_call+0x1878/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f94bdf9de59 RSP: 002b:00007f94bef17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f94be225fa0 RCX: 00007f94bdf9de59 RDX: 0000200000000000 RSI: 000000008008551c RDI: 0000000000000003 RBP: 00007f94be033e6f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f94be226038 R14: 00007f94be225fa0 R15: 00007fff2c8018b8 NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 1627376dba3df3ce9722cd7006b282bbb501536c Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:94 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120 dump_stack+0x19/0x20 lib/dump_stack.c:129 nmi_cpu_backtrace+0x2ba/0x2d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x142/0x2c0 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:41 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:267 [inline] watchdog+0xe45/0xf90 kernel/hung_task.c:423 kthread+0x2c7/0x360 kernel/kthread.c:389 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 1627376dba3df3ce9722cd7006b282bbb501536c Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:116 Code: cc cc cc cc cc cc cc b8 aa 26 6f 37 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 c9 42 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2 RAX: ffff8881f6f00000 RBX: ffff888103668000 RCX: ffffffff85a494fd RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000d55124 RBP: ffffc900001a7e00 R08: ffff8881f6f395eb R09: 1ffff1103ede72bd R10: dffffc0000000000 R11: ffffed103ede72be R12: 0000000000000000 R13: 1ffff110206cd000 R14: dffffc0000000000 R15: ffffffff87ecc9a8 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f88f4b31340 CR3: 000000010cfcc000 CR4: 00000000003526b0 Call Trace: arch_safe_halt arch/x86/include/asm/paravirt.h:-1 [inline] default_idle+0x17/0x30 arch/x86/kernel/process.c:754 arch_cpu_idle+0xd/0x20 arch/x86/kernel/process.c:791 default_idle_call+0x3e/0x80 kernel/sched/idle.c:117 cpuidle_idle_call kernel/sched/idle.c:193 [inline] do_idle+0x1df/0x570 kernel/sched/idle.c:346 cpu_startup_entry+0x47/0x60 kernel/sched/idle.c:445 start_secondary+0x12e/0x140 arch/x86/kernel/smpboot.c:314 common_startup_64+0x13b/0x157