[ 81.413568][ T48] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. 2025/12/12 15:12:00 ignoring optional flag "type"="gce" 2025/12/12 15:12:00 parsed 1 programs 2025/12/12 15:12:00 executed programs: 0 [ 84.931765][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.939660][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.948905][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.957205][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.964790][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.078985][ T6008] chnl_net:caif_netlink_parms(): no params data found [ 85.131613][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.138904][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.146195][ T6008] bridge_slave_0: entered allmulticast mode [ 85.153130][ T6008] bridge_slave_0: entered promiscuous mode [ 85.160499][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.167711][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.175087][ T6008] bridge_slave_1: entered allmulticast mode [ 85.181841][ T6008] bridge_slave_1: entered promiscuous mode [ 85.206432][ T6008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.217380][ T6008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.242028][ T6008] team0: Port device team_slave_0 added [ 85.249352][ T6008] team0: Port device team_slave_1 added [ 85.270986][ T6008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.278207][ T6008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.304430][ T6008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.316948][ T6008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.323971][ T6008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.349963][ T6008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.382977][ T6008] hsr_slave_0: entered promiscuous mode [ 85.389032][ T6008] hsr_slave_1: entered promiscuous mode [ 85.824814][ T6008] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.838187][ T6008] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.848543][ T6008] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.860385][ T6008] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.907772][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.914940][ T6008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.922493][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.929609][ T6008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.999708][ T6008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.017287][ T3865] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.026116][ T3865] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.043827][ T6008] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.076026][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.083186][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.144423][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.151555][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.406756][ T6008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.458714][ T6008] veth0_vlan: entered promiscuous mode [ 86.471445][ T6008] veth1_vlan: entered promiscuous mode [ 86.503156][ T6008] veth0_macvtap: entered promiscuous mode [ 86.513977][ T6008] veth1_macvtap: entered promiscuous mode [ 86.534952][ T6008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.547905][ T6008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.564819][ T3909] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.575410][ T3909] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.592463][ T3909] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.601321][ T3909] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.827930][ T6075] nbd0: detected capacity change from 0 to 63 [ 87.013465][ T52] Bluetooth: hci0: command tx timeout [ 87.507789][ T5819] block nbd0: Receive control failed (result -104) [ 89.092764][ T5819] Bluetooth: hci0: command tx timeout [ 91.172420][ T5819] Bluetooth: hci0: command tx timeout [ 93.252368][ T5819] Bluetooth: hci0: command tx timeout [ 117.254271][ T25] block nbd0: Possible stuck request ffff888026070000: control (read@0,4096B). Runtime 30 seconds [ 132.615000][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.621286][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 2025/12/12 15:12:57 executed programs: 1 [ 142.698784][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 142.706638][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 142.714981][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 142.723288][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 142.730839][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 142.843172][ T6206] chnl_net:caif_netlink_parms(): no params data found [ 142.896271][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.903461][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.910568][ T6206] bridge_slave_0: entered allmulticast mode [ 142.917699][ T6206] bridge_slave_0: entered promiscuous mode [ 142.925168][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.932394][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.939519][ T6206] bridge_slave_1: entered allmulticast mode [ 142.946429][ T6206] bridge_slave_1: entered promiscuous mode [ 142.969749][ T6206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.981174][ T6206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.007598][ T6206] team0: Port device team_slave_0 added [ 143.014900][ T6206] team0: Port device team_slave_1 added [ 143.035614][ T6206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.042890][ T6206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.068778][ T6206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.080421][ T6206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.087406][ T6206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.113432][ T6206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.148121][ T6206] hsr_slave_0: entered promiscuous mode [ 143.154253][ T6206] hsr_slave_1: entered promiscuous mode [ 143.160134][ T6206] debugfs: 'hsr0' already exists in 'hsr' [ 143.166937][ T6206] Cannot create hsr debugfs directory [ 143.244601][ T6206] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.302881][ T6206] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.362415][ T6206] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.422858][ T6206] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.531777][ T6206] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 143.541120][ T6206] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 143.555667][ T6206] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 143.565116][ T6206] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 143.588610][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.595741][ T6206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.603156][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.610236][ T6206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.649857][ T6206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.664426][ T4546] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.672154][ T4546] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.686195][ T6206] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.698277][ T3909] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.705416][ T3909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.718040][ T4546] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.725189][ T4546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.857794][ T6206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.896128][ T6206] veth0_vlan: entered promiscuous mode [ 143.906713][ T6206] veth1_vlan: entered promiscuous mode [ 143.928151][ T6206] veth0_macvtap: entered promiscuous mode [ 143.937062][ T6206] veth1_macvtap: entered promiscuous mode [ 143.951704][ T6206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.966598][ T6206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.979103][ T3909] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.987898][ T3909] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.997045][ T3909] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.006508][ T3909] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.783149][ T5819] Bluetooth: hci1: command tx timeout [ 146.852345][ T5819] Bluetooth: hci1: command tx timeout [ 147.067413][ T5185] udevd[5185]: worker [5997] /devices/virtual/block/nbd0 is taking a long time [ 147.342396][ T11] block nbd0: Possible stuck request ffff888026070000: control (read@0,4096B). Runtime 60 seconds [ 148.932527][ T5819] Bluetooth: hci1: command tx timeout [ 151.012414][ T5819] Bluetooth: hci1: command tx timeout [ 177.432467][ T25] block nbd0: Possible stuck request ffff888026070000: control (read@0,4096B). Runtime 90 seconds [ 194.055475][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.061834][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 2025/12/12 15:13:55 executed programs: 2 [ 200.087815][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 200.095802][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.103496][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.111441][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.119721][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 200.235820][ T6234] chnl_net:caif_netlink_parms(): no params data found [ 200.289876][ T6234] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.297465][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.304982][ T6234] bridge_slave_0: entered allmulticast mode [ 200.311731][ T6234] bridge_slave_0: entered promiscuous mode [ 200.319607][ T6234] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.326809][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.334083][ T6234] bridge_slave_1: entered allmulticast mode [ 200.340860][ T6234] bridge_slave_1: entered promiscuous mode [ 200.363743][ T6234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.374672][ T6234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.400802][ T6234] team0: Port device team_slave_0 added [ 200.408464][ T6234] team0: Port device team_slave_1 added [ 200.428807][ T6234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.436072][ T6234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.462122][ T6234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.473761][ T6234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.480696][ T6234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.507676][ T6234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.542959][ T6234] hsr_slave_0: entered promiscuous mode [ 200.549068][ T6234] hsr_slave_1: entered promiscuous mode [ 200.555226][ T6234] debugfs: 'hsr0' already exists in 'hsr' [ 200.561030][ T6234] Cannot create hsr debugfs directory [ 200.639467][ T6234] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.703023][ T6234] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.761818][ T6234] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.854230][ T6234] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.960350][ T6234] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 200.975770][ T6234] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 200.985012][ T6234] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 200.994320][ T6234] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.015210][ T6234] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.022328][ T6234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.029849][ T6234] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.036990][ T6234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.080754][ T6234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.095680][ T3909] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.105667][ T3909] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.118725][ T6234] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.130397][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.137495][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.149061][ T3909] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.156144][ T3909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.286378][ T6234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.316253][ T6234] veth0_vlan: entered promiscuous mode [ 201.328194][ T6234] veth1_vlan: entered promiscuous mode [ 201.351053][ T6234] veth0_macvtap: entered promiscuous mode [ 201.360024][ T6234] veth1_macvtap: entered promiscuous mode [ 201.374528][ T6234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.388451][ T6234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.400620][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.410760][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.420723][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.431120][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.222389][ T5819] Bluetooth: hci2: command tx timeout [ 204.302844][ T5819] Bluetooth: hci2: command tx timeout [ 206.372762][ T5819] Bluetooth: hci2: command tx timeout [ 207.493127][ T11] block nbd0: Possible stuck request ffff888026070000: control (read@0,4096B). Runtime 120 seconds [ 208.452381][ T5819] Bluetooth: hci2: command tx timeout [ 211.492408][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 237.592480][ T25] block nbd0: Possible stuck request ffff888026070000: control (read@0,4096B). Runtime 150 seconds [ 246.532497][ T31] INFO: task syz-executor.0:6071 blocked for more than 143 seconds. [ 246.540517][ T31] Not tainted syzkaller #0 [ 246.545525][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 246.554307][ T31] task:syz-executor.0 state:D stack:27656 pid:6071 tgid:6070 ppid:6008 task_flags:0x400140 flags:0x00080802 [ 246.566280][ T31] Call Trace: [ 246.569549][ T31] [ 246.572577][ T31] ? __schedule+0x10b9/0x6150 [ 246.577396][ T31] __schedule+0x1139/0x6150 [ 246.581884][ T31] ? __lock_acquire+0x436/0x2890 [ 246.586894][ T31] ? __pfx___schedule+0x10/0x10 [ 246.591743][ T31] ? find_held_lock+0x2b/0x80 [ 246.596475][ T31] ? schedule+0x2d7/0x3a0 [ 246.600811][ T31] schedule+0xe7/0x3a0 [ 246.604935][ T31] schedule_preempt_disabled+0x13/0x30 [ 246.610387][ T31] __mutex_lock+0xc69/0x1ca0 [ 246.615073][ T31] ? bdev_release+0x15a/0x6d0 [ 246.619774][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 246.624852][ T31] ? find_held_lock+0x2b/0x80 [ 246.629534][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 246.634765][ T31] ? bdev_release+0x15a/0x6d0 [ 246.639527][ T31] bdev_release+0x15a/0x6d0 [ 246.644068][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 246.649263][ T31] blkdev_release+0x15/0x20 [ 246.653816][ T31] __fput+0x402/0xb70 [ 246.657795][ T31] task_work_run+0x150/0x240 [ 246.662423][ T31] ? __pfx_task_work_run+0x10/0x10 [ 246.667528][ T31] ? selinux_file_ioctl+0x180/0x270 [ 246.672841][ T31] exit_to_user_mode_loop+0xfb/0x540 [ 246.678128][ T31] do_syscall_64+0x4ee/0xf80 [ 246.682833][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.688723][ T31] RIP: 0033:0x7f104e87c859 [ 246.693192][ T31] RSP: 002b:00007f104f5af0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.701872][ T31] RAX: 0000000000000000 RBX: 00007f104e99bf80 RCX: 00007f104e87c859 [ 246.709923][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 246.717948][ T31] RBP: 00007f104e8d8ad0 R08: 0000000000000000 R09: 0000000000000000 [ 246.725971][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.733966][ T31] R13: 000000000000000b R14: 00007f104e99bf80 R15: 00007fff7a2cdbc8 [ 246.741950][ T31] [ 246.745022][ T31] [ 246.745022][ T31] Showing all locks held in the system: [ 246.752737][ T31] 1 lock held by khungtaskd/31: [ 246.757589][ T31] #0: ffffffff8e3c9620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 246.767490][ T31] 2 locks held by getty/5572: [ 246.772147][ T31] #0: ffff888036ba50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 246.782467][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 246.792698][ T31] 1 lock held by udevd/5997: [ 246.797273][ T31] #0: ffff888025fdd358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 246.806607][ T31] 1 lock held by syz-executor.0/6071: [ 246.811961][ T31] #0: ffff888025fdd358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 246.821552][ T31] 1 lock held by syz-executor.0/6225: [ 246.826938][ T31] #0: ffff888025fdd358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 246.836350][ T31] 1 lock held by syz-executor.0/6253: [ 246.841725][ T31] #0: ffff888025fdd358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 246.851076][ T31] [ 246.854062][ T31] ============================================= [ 246.854062][ T31] [ 246.862522][ T31] NMI backtrace for cpu 1 [ 246.862549][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 246.862566][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.862575][ T31] Call Trace: [ 246.862580][ T31] [ 246.862586][ T31] dump_stack_lvl+0x116/0x1f0 [ 246.862607][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 246.862631][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 246.862652][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 246.862677][ T31] sys_info+0x133/0x180 [ 246.862694][ T31] watchdog+0xe66/0x1180 [ 246.862715][ T31] ? rcu_is_watching+0x12/0xc0 [ 246.862729][ T31] ? __pfx_watchdog+0x10/0x10 [ 246.862743][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 246.862759][ T31] ? __kthread_parkme+0x19e/0x250 [ 246.862774][ T31] ? __pfx_watchdog+0x10/0x10 [ 246.862789][ T31] kthread+0x3c5/0x780 [ 246.862805][ T31] ? __pfx_kthread+0x10/0x10 [ 246.862822][ T31] ? rcu_is_watching+0x12/0xc0 [ 246.862834][ T31] ? __pfx_kthread+0x10/0x10 [ 246.862851][ T31] ret_from_fork+0x983/0xb10 [ 246.862867][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 246.862883][ T31] ? __switch_to+0x7af/0x10d0 [ 246.862901][ T31] ? __pfx_kthread+0x10/0x10 [ 246.862918][ T31] ret_from_fork_asm+0x1a/0x30 [ 246.862948][ T31] [ 246.862956][ T31] Sending NMI from CPU 1 to CPUs 0: [ 246.996721][ C0] NMI backtrace for cpu 0 [ 246.996735][ C0] CPU: 0 UID: 0 PID: 50 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 246.996756][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.996767][ C0] Workqueue: events_unbound toggle_allocation_gate [ 246.996793][ C0] RIP: 0010:mark_held_locks+0x4d/0x80 [ 246.996815][ C0] Code: 8d 04 80 49 8d 74 c5 00 0f b6 46 22 89 c2 83 e2 03 80 fa 01 44 89 e2 83 da ff a8 04 74 0c 48 89 ef e8 b7 f5 ff ff 85 c0 74 10 <83> c3 01 39 9d 28 0b 00 00 7f c7 b8 01 00 00 00 5b 5d 41 5c 41 5d [ 246.996832][ C0] RSP: 0018:ffffc90000bb7878 EFLAGS: 00000002 [ 246.996844][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000002 [ 246.996855][ C0] RDX: 0000000000000000 RSI: ffff8880216dd4d8 RDI: ffff8880216dc980 [ 246.996866][ C0] RBP: ffff8880216dc980 R08: 0000000000000000 R09: 0000000000000001 [ 246.996877][ C0] R10: ffffffff908880d7 R11: ffff8880216dd4b0 R12: 0000000000000002 [ 246.996888][ C0] R13: ffff8880216dd4b0 R14: 0000000000000001 R15: 8000000000000063 [ 246.996900][ C0] FS: 0000000000000000(0000) GS:ffff8881248fb000(0000) knlGS:0000000000000000 [ 246.996916][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.996927][ C0] CR2: 000055f97f415660 CR3: 000000000e184000 CR4: 00000000003526f0 [ 246.996939][ C0] Call Trace: [ 246.996945][ C0] [ 246.996952][ C0] ? kmem_cache_alloc_node_noprof+0x9b/0x800 [ 246.996970][ C0] lockdep_hardirqs_on_prepare+0xb8/0x1b0 [ 246.996991][ C0] trace_hardirqs_on+0x36/0x40 [ 246.997011][ C0] __text_poke+0x76f/0xb00 [ 246.997033][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 246.997057][ C0] ? __pfx___text_poke+0x10/0x10 [ 246.997079][ C0] ? kmem_cache_alloc_node_noprof+0x9b/0x800 [ 246.997098][ C0] smp_text_poke_batch_finish+0x652/0xdb0 [ 246.997126][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 246.997153][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 246.997183][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 246.997209][ C0] jump_label_update+0x376/0x550 [ 246.997231][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 246.997254][ C0] static_key_enable+0x1a/0x20 [ 246.997273][ C0] toggle_allocation_gate+0xfa/0x280 [ 246.997294][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 246.997317][ C0] ? rcu_is_watching+0x12/0xc0 [ 246.997335][ C0] process_one_work+0x9ba/0x1b20 [ 246.997361][ C0] ? __pfx_process_one_work+0x10/0x10 [ 246.997386][ C0] ? assign_work+0x1a0/0x250 [ 246.997407][ C0] worker_thread+0x6c8/0xf10 [ 246.997433][ C0] ? __pfx_worker_thread+0x10/0x10 [ 246.997454][ C0] kthread+0x3c5/0x780 [ 246.997474][ C0] ? __pfx_kthread+0x10/0x10 [ 246.997495][ C0] ? rcu_is_watching+0x12/0xc0 [ 246.997510][ C0] ? __pfx_kthread+0x10/0x10 [ 246.997529][ C0] ret_from_fork+0x983/0xb10 [ 246.997548][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 246.997567][ C0] ? __switch_to+0x7af/0x10d0 [ 246.997589][ C0] ? __pfx_kthread+0x10/0x10 [ 246.997609][ C0] ret_from_fork_asm+0x1a/0x30 [ 246.997641][ C0] [ 247.290577][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 247.297425][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 247.306507][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 247.316531][ T31] Call Trace: [ 247.319790][ T31] [ 247.322694][ T31] dump_stack_lvl+0x3d/0x1f0 [ 247.327259][ T31] vpanic+0x640/0x6f0 [ 247.331219][ T31] panic+0xca/0xd0 [ 247.334909][ T31] ? __pfx_panic+0x10/0x10 [ 247.339292][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 247.345241][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 247.351364][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 247.357578][ T31] ? watchdog+0xe83/0x1180 [ 247.361965][ T31] ? watchdog+0xe76/0x1180 [ 247.366349][ T31] watchdog+0xe94/0x1180 [ 247.370565][ T31] ? rcu_is_watching+0x12/0xc0 [ 247.375294][ T31] ? __pfx_watchdog+0x10/0x10 [ 247.379945][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 247.385121][ T31] ? __kthread_parkme+0x19e/0x250 [ 247.390112][ T31] ? __pfx_watchdog+0x10/0x10 [ 247.394761][ T31] kthread+0x3c5/0x780 [ 247.398802][ T31] ? __pfx_kthread+0x10/0x10 [ 247.403361][ T31] ? rcu_is_watching+0x12/0xc0 [ 247.408090][ T31] ? __pfx_kthread+0x10/0x10 [ 247.412679][ T31] ret_from_fork+0x983/0xb10 [ 247.417329][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 247.422434][ T31] ? __switch_to+0x7af/0x10d0 [ 247.427083][ T31] ? __pfx_kthread+0x10/0x10 [ 247.431646][ T31] ret_from_fork_asm+0x1a/0x30 [ 247.436393][ T31] [ 247.439716][ T31] Kernel Offset: disabled [ 247.444023][ T31] Rebooting in 86400 seconds..