Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. 2026/03/03 17:26:53 ignoring optional flag "type"="gce" 2026/03/03 17:26:54 parsed 1 programs 2026/03/03 17:26:54 executed programs: 0 [ 90.843093][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.850592][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.858326][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.866220][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.873753][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.018288][ T6009] chnl_net:caif_netlink_parms(): no params data found [ 91.092327][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.099570][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.106838][ T6009] bridge_slave_0: entered allmulticast mode [ 91.114034][ T6009] bridge_slave_0: entered promiscuous mode [ 91.122460][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.129719][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.137485][ T6009] bridge_slave_1: entered allmulticast mode [ 91.144968][ T6009] bridge_slave_1: entered promiscuous mode [ 91.176219][ T6009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.188447][ T6009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.220704][ T6009] team0: Port device team_slave_0 added [ 91.229498][ T6009] team0: Port device team_slave_1 added [ 91.257291][ T6009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.264246][ T6009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.290634][ T6009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.303006][ T6009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.309983][ T6009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.335957][ T6009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.378935][ T6009] hsr_slave_0: entered promiscuous mode [ 91.386674][ T6009] hsr_slave_1: entered promiscuous mode [ 91.921225][ T6009] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.936265][ T6009] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.948487][ T6009] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.961342][ T6009] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.005665][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.012877][ T6009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.020403][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.027625][ T6009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.047464][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.055371][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.147948][ T6009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.182967][ T6009] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.199681][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.206942][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.238429][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.245639][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.498941][ T6009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.571143][ T6009] veth0_vlan: entered promiscuous mode [ 92.588357][ T6009] veth1_vlan: entered promiscuous mode [ 92.641669][ T6009] veth0_macvtap: entered promiscuous mode [ 92.657679][ T6009] veth1_macvtap: entered promiscuous mode [ 92.691358][ T6009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.713467][ T6009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.740619][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.751814][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.779932][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.789715][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.915157][ T51] Bluetooth: hci0: command tx timeout [ 92.954815][ T6073] nbd0: detected capacity change from 0 to 502 [ 93.699878][ T5139] block nbd0: Receive control failed (result -104) [ 94.994395][ T5139] Bluetooth: hci0: command tx timeout [ 97.074475][ T5139] Bluetooth: hci0: command tx timeout [ 99.154430][ T5139] Bluetooth: hci0: command tx timeout [ 123.077055][ T11] block nbd0: Possible stuck request ffff8880281e8000: control (read@0,4096B). Runtime 30 seconds [ 132.677859][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.684150][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 2026/03/03 17:27:52 executed programs: 1 [ 149.962192][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.969881][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.977678][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.985541][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.993054][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.142558][ T6206] chnl_net:caif_netlink_parms(): no params data found [ 150.213007][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.220418][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.227764][ T6206] bridge_slave_0: entered allmulticast mode [ 150.235793][ T6206] bridge_slave_0: entered promiscuous mode [ 150.243591][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.250995][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.258573][ T6206] bridge_slave_1: entered allmulticast mode [ 150.266032][ T6206] bridge_slave_1: entered promiscuous mode [ 150.297815][ T6206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.310079][ T6206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.343671][ T6206] team0: Port device team_slave_0 added [ 150.353538][ T6206] team0: Port device team_slave_1 added [ 150.381410][ T6206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.389016][ T6206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.414941][ T6206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.427263][ T6206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.434193][ T6206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.460121][ T6206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.504840][ T6206] hsr_slave_0: entered promiscuous mode [ 150.511516][ T6206] hsr_slave_1: entered promiscuous mode [ 150.518317][ T6206] debugfs: 'hsr0' already exists in 'hsr' [ 150.524122][ T6206] Cannot create hsr debugfs directory [ 150.637391][ T6206] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.716844][ T6206] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.767053][ T6206] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.868396][ T6206] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.998179][ T6206] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 151.008783][ T6206] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 151.018456][ T6206] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 151.028383][ T6206] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 151.054455][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.061587][ T6206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.069089][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.076219][ T6206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.132998][ T6206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.151094][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.160255][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.178782][ T6206] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.192603][ T130] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.199741][ T130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.213454][ T130] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.220571][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.391552][ T6206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.440999][ T6206] veth0_vlan: entered promiscuous mode [ 151.453408][ T6206] veth1_vlan: entered promiscuous mode [ 151.485255][ T6206] veth0_macvtap: entered promiscuous mode [ 151.495413][ T6206] veth1_macvtap: entered promiscuous mode [ 151.517997][ T6206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.534001][ T6206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.551770][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.560815][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.572994][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.583571][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.044488][ T5139] Bluetooth: hci1: command tx timeout [ 153.167238][ T11] block nbd0: Possible stuck request ffff8880281e8000: control (read@0,4096B). Runtime 60 seconds [ 154.114365][ T5139] Bluetooth: hci1: command tx timeout [ 154.658642][ T5188] udevd[5188]: worker [6011] /devices/virtual/block/nbd0 is taking a long time [ 156.194821][ T5139] Bluetooth: hci1: command tx timeout [ 158.274491][ T5139] Bluetooth: hci1: command tx timeout [ 183.235204][ T11] block nbd0: Possible stuck request ffff8880281e8000: control (read@0,4096B). Runtime 90 seconds [ 194.117764][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.124052][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 2026/03/03 17:28:51 executed programs: 2 [ 208.683546][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.691639][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.699363][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.707194][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.715257][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.865575][ T6234] chnl_net:caif_netlink_parms(): no params data found [ 208.936262][ T6234] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.943499][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.950766][ T6234] bridge_slave_0: entered allmulticast mode [ 208.958539][ T6234] bridge_slave_0: entered promiscuous mode [ 208.967349][ T6234] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.974660][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.981814][ T6234] bridge_slave_1: entered allmulticast mode [ 208.989349][ T6234] bridge_slave_1: entered promiscuous mode [ 209.020749][ T6234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.032969][ T6234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.066940][ T6234] team0: Port device team_slave_0 added [ 209.075371][ T6234] team0: Port device team_slave_1 added [ 209.103433][ T6234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.110424][ T6234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.136714][ T6234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.149194][ T6234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.156688][ T6234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.182702][ T6234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.226632][ T6234] hsr_slave_0: entered promiscuous mode [ 209.233370][ T6234] hsr_slave_1: entered promiscuous mode [ 209.240097][ T6234] debugfs: 'hsr0' already exists in 'hsr' [ 209.245874][ T6234] Cannot create hsr debugfs directory [ 209.359265][ T6234] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.426864][ T6234] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.497353][ T6234] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.547429][ T6234] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.666260][ T6234] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 209.677591][ T6234] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 209.687192][ T6234] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 209.697707][ T6234] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 209.727346][ T6234] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.734560][ T6234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.741952][ T6234] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.749155][ T6234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.809090][ T6234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.826749][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.834934][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.850846][ T6234] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.864562][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.871661][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.887457][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.894625][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.058346][ T6234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.109500][ T6234] veth0_vlan: entered promiscuous mode [ 210.122818][ T6234] veth1_vlan: entered promiscuous mode [ 210.156874][ T6234] veth0_macvtap: entered promiscuous mode [ 210.168053][ T6234] veth1_macvtap: entered promiscuous mode [ 210.189767][ T6234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.204868][ T6234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.220529][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.229333][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.239198][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.249196][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.754873][ T5139] Bluetooth: hci2: command tx timeout [ 212.844420][ T5139] Bluetooth: hci2: command tx timeout [ 213.314844][ T11] block nbd0: Possible stuck request ffff8880281e8000: control (read@0,4096B). Runtime 120 seconds [ 214.914884][ T51] Bluetooth: hci2: command tx timeout [ 216.674947][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 216.995021][ T5139] Bluetooth: hci2: command tx timeout [ 243.395415][ T11] block nbd0: Possible stuck request ffff8880281e8000: control (read@0,4096B). Runtime 150 seconds [ 251.714478][ T31] INFO: task syz-executor.0:6073 blocked for more than 143 seconds. [ 251.722547][ T31] Not tainted syzkaller #0 [ 251.727546][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 251.736262][ T31] task:syz-executor.0 state:D stack:27272 pid:6073 tgid:6072 ppid:6009 task_flags:0x400140 flags:0x00080803 [ 251.748251][ T31] Call Trace: [ 251.751527][ T31] [ 251.754504][ T31] __schedule+0x1665/0x5590 [ 251.759008][ T31] ? check_path+0x21/0x40 [ 251.763320][ T31] ? check_noncircular+0xda/0x150 [ 251.768403][ T31] ? __pfx___schedule+0x10/0x10 [ 251.773255][ T31] ? schedule+0x90/0x360 [ 251.777540][ T31] schedule+0x164/0x360 [ 251.781703][ T31] schedule_preempt_disabled+0x13/0x30 [ 251.787215][ T31] __mutex_lock+0x7fe/0x1300 [ 251.791809][ T31] ? __mutex_lock+0x5ac/0x1300 [ 251.796704][ T31] ? bdev_release+0x1a9/0x650 [ 251.801412][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 251.806574][ T31] ? __asan_memset+0x22/0x50 [ 251.811167][ T31] ? __fsnotify_parent+0x267/0x620 [ 251.816360][ T31] ? __pfx___fsnotify_parent+0x10/0x10 [ 251.821832][ T31] bdev_release+0x1a9/0x650 [ 251.826437][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 251.831641][ T31] blkdev_release+0x15/0x20 [ 251.836196][ T31] __fput+0x44f/0xa70 [ 251.840187][ T31] task_work_run+0x1d9/0x270 [ 251.844835][ T31] ? __pfx_task_work_run+0x10/0x10 [ 251.849952][ T31] get_signal+0x11eb/0x1330 [ 251.854506][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 251.860053][ T31] ? __pfx_task_work_add+0x10/0x10 [ 251.865206][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 251.871368][ T31] ? __fput_deferred+0x216/0x380 [ 251.876408][ T31] exit_to_user_mode_loop+0x86/0x480 [ 251.881697][ T31] ? rcu_is_watching+0x15/0xb0 [ 251.886535][ T31] do_syscall_64+0x32d/0xf80 [ 251.891123][ T31] ? trace_irq_disable+0x3b/0x150 [ 251.896170][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.902242][ T31] ? clear_bhb_loop+0x40/0x90 [ 251.906970][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.912862][ T31] RIP: 0033:0x7f0f1de6b0e9 [ 251.917410][ T31] RSP: 002b:00007f0f1eefe078 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.925885][ T31] RAX: 0000000000000000 RBX: 00007f0f1df9bf80 RCX: 00007f0f1de6b0e9 [ 251.933865][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 251.941884][ T31] RBP: 00007f0f1dee040f R08: 0000000000000000 R09: 0000000000000000 [ 251.949912][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.957933][ T31] R13: 000000000000000b R14: 00007f0f1df9bf80 R15: 00007ffc3e982598 [ 251.966082][ T31] [ 251.969159][ T31] [ 251.969159][ T31] Showing all locks held in the system: [ 251.976906][ T31] 1 lock held by khungtaskd/31: [ 251.981746][ T31] #0: ffffffff8e760560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 251.991663][ T31] 2 locks held by getty/5576: [ 251.996383][ T31] #0: ffff888032da00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 252.006167][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 252.016313][ T31] 1 lock held by udevd/6011: [ 252.020897][ T31] #0: ffff888028145358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 252.030168][ T31] 1 lock held by syz-executor.0/6073: [ 252.035666][ T31] #0: ffff888028145358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 252.045379][ T31] 1 lock held by syz-executor.0/6225: [ 252.050786][ T31] #0: ffff888028145358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 252.060058][ T31] 1 lock held by syz-executor.0/6254: [ 252.065474][ T31] #0: ffff888028145358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 252.075013][ T31] [ 252.077359][ T31] ============================================= [ 252.077359][ T31] [ 252.086044][ T31] NMI backtrace for cpu 0 [ 252.086066][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 252.086084][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.086094][ T31] Call Trace: [ 252.086101][ T31] [ 252.086108][ T31] dump_stack_lvl+0xe8/0x150 [ 252.086135][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 252.086158][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 252.086182][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 252.086207][ T31] sys_info+0x135/0x170 [ 252.086226][ T31] watchdog+0xfd9/0x1030 [ 252.086248][ T31] ? watchdog+0x21a/0x1030 [ 252.086272][ T31] kthread+0x388/0x470 [ 252.086290][ T31] ? __pfx_watchdog+0x10/0x10 [ 252.086305][ T31] ? __pfx_kthread+0x10/0x10 [ 252.086331][ T31] ret_from_fork+0x51e/0xb90 [ 252.086356][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 252.086375][ T31] ? __switch_to+0xc7d/0x1450 [ 252.086395][ T31] ? __pfx_kthread+0x10/0x10 [ 252.086413][ T31] ret_from_fork_asm+0x1a/0x30 [ 252.086442][ T31] [ 252.086449][ T31] Sending NMI from CPU 0 to CPUs 1: [ 252.195575][ C1] NMI backtrace for cpu 1 [ 252.195591][ C1] CPU: 1 UID: 0 PID: 130 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 252.195607][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.195616][ C1] Workqueue: events_unbound toggle_allocation_gate [ 252.195640][ C1] RIP: 0010:switch_ldt+0x7b/0x1c0 [ 252.195657][ C1] Code: 38 00 74 08 4c 89 f7 e8 13 c9 c6 00 4d 0b 26 0f 85 8a 00 00 00 e8 65 2e 5c 00 48 c7 c0 40 e3 28 9a 48 c1 e8 03 42 0f b6 04 38 <84> c0 0f 85 e7 00 00 00 8b 1d b7 58 bf 18 31 ff 89 de e8 7e 32 5c [ 252.195669][ C1] RSP: 0018:ffffc90002f67768 EFLAGS: 00000802 [ 252.195681][ C1] RAX: 0000000000000004 RBX: ffffffff8e888780 RCX: ffff88801fbd9e80 [ 252.195691][ C1] RDX: 0000000000000000 RSI: ffffffff8e888780 RDI: ffff88801b088cc0 [ 252.195701][ C1] RBP: ffffc90002f678d0 R08: ffffffff8e889113 R09: 1ffffffff1d11222 [ 252.195712][ C1] R10: dffffc0000000000 R11: fffffbfff1d11223 R12: 0000000000000000 [ 252.195722][ C1] R13: 0000000000000001 R14: ffffffff8e889060 R15: dffffc0000000000 [ 252.195732][ C1] FS: 0000000000000000(0000) GS:ffff888125548000(0000) knlGS:0000000000000000 [ 252.195744][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.195754][ C1] CR2: 00005649460a1168 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 252.195768][ C1] Call Trace: [ 252.195774][ C1] [ 252.195781][ C1] unuse_temporary_mm+0xc5/0x160 [ 252.195803][ C1] ? kmem_cache_alloc_noprof+0x9f/0x650 [ 252.195825][ C1] __text_poke+0x6ea/0x9a0 [ 252.195842][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 252.195856][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 252.195874][ C1] ? kmem_cache_alloc_noprof+0x9f/0x650 [ 252.195890][ C1] ? __pfx___text_poke+0x10/0x10 [ 252.195909][ C1] smp_text_poke_batch_finish+0xd36/0x1160 [ 252.195929][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 252.195947][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 252.195969][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 252.195986][ C1] static_key_enable_cpuslocked+0x128/0x240 [ 252.196004][ C1] static_key_enable+0x1a/0x20 [ 252.196018][ C1] toggle_allocation_gate+0xab/0x290 [ 252.196036][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 252.196060][ C1] ? process_one_work+0x870/0x1720 [ 252.196078][ C1] ? process_one_work+0x870/0x1720 [ 252.196095][ C1] process_one_work+0x963/0x1720 [ 252.196121][ C1] ? __pfx_process_one_work+0x10/0x10 [ 252.196138][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 252.196160][ C1] worker_thread+0xb46/0x1140 [ 252.196189][ C1] kthread+0x388/0x470 [ 252.196203][ C1] ? __pfx_worker_thread+0x10/0x10 [ 252.196220][ C1] ? __pfx_kthread+0x10/0x10 [ 252.196235][ C1] ret_from_fork+0x51e/0xb90 [ 252.196254][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 252.196271][ C1] ? __switch_to+0xc7d/0x1450 [ 252.196289][ C1] ? __pfx_kthread+0x10/0x10 [ 252.196304][ C1] ret_from_fork_asm+0x1a/0x30 [ 252.196325][ C1] [ 252.480989][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 252.487847][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 252.496931][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.506963][ T31] Call Trace: [ 252.510227][ T31] [ 252.513139][ T31] vpanic+0x56c/0xa60 [ 252.517106][ T31] ? __pfx___schedule+0x10/0x10 [ 252.521940][ T31] ? __pfx_vpanic+0x10/0x10 [ 252.526422][ T31] ? __pfx_console_unlock+0x10/0x10 [ 252.531601][ T31] panic+0xc5/0xd0 [ 252.535300][ T31] ? __pfx_panic+0x10/0x10 [ 252.539693][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 252.545049][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 252.551185][ T31] watchdog+0x1023/0x1030 [ 252.555497][ T31] ? watchdog+0x21a/0x1030 [ 252.559893][ T31] kthread+0x388/0x470 [ 252.563940][ T31] ? __pfx_watchdog+0x10/0x10 [ 252.568594][ T31] ? __pfx_kthread+0x10/0x10 [ 252.573159][ T31] ret_from_fork+0x51e/0xb90 [ 252.577729][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 252.582820][ T31] ? __switch_to+0xc7d/0x1450 [ 252.587492][ T31] ? __pfx_kthread+0x10/0x10 [ 252.592079][ T31] ret_from_fork_asm+0x1a/0x30 [ 252.596839][ T31] [ 252.600043][ T31] Kernel Offset: disabled [ 252.604351][ T31] Rebooting in 86400 seconds..