Warning: Permanently added '10.128.1.234' (ED25519) to the list of known hosts.
2025/09/20 16:35:05 ignoring optional flag "type"="gce"
2025/09/20 16:35:05 parsed 1 programs
2025/09/20 16:35:05 executed programs: 0
[ 94.256820][ T30] kauditd_printk_skb: 22 callbacks suppressed
[ 94.256835][ T30] audit: type=1400 audit(1758386105.322:94): avc: denied { getattr } for pid=6026 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 94.341380][ T30] audit: type=1400 audit(1758386105.402:95): avc: denied { create } for pid=6038 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 95.360815][ T30] audit: type=1400 audit(1758386106.422:96): avc: denied { ioctl } for pid=6038 comm="syz-executor.0" path="socket:[6471]" dev="sockfs" ino=6471 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 95.361229][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 95.394355][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 95.401747][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 95.410024][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 95.418698][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 95.437084][ T30] audit: type=1400 audit(1758386106.502:97): avc: denied { mounton } for pid=6038 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 95.527930][ T6038] chnl_net:caif_netlink_parms(): no params data found
[ 95.578936][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.586182][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.593539][ T6038] bridge_slave_0: entered allmulticast mode
[ 95.600267][ T6038] bridge_slave_0: entered promiscuous mode
[ 95.608461][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.615761][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.623121][ T6038] bridge_slave_1: entered allmulticast mode
[ 95.629810][ T6038] bridge_slave_1: entered promiscuous mode
[ 95.653815][ T6038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 95.664660][ T6038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 95.691192][ T6038] team0: Port device team_slave_0 added
[ 95.698704][ T6038] team0: Port device team_slave_1 added
[ 95.720583][ T6038] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 95.728175][ T6038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 95.754118][ T6038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 95.766032][ T6038] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 95.773027][ T6038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 95.798916][ T6038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 95.835151][ T6038] hsr_slave_0: entered promiscuous mode
[ 95.841145][ T6038] hsr_slave_1: entered promiscuous mode
[ 96.240543][ T6038] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 96.251707][ T6038] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 96.262826][ T6038] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 96.273698][ T6038] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 96.310052][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.317542][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.324976][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.332117][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.401163][ T6038] 8021q: adding VLAN 0 to HW filter on device bond0
[ 96.419829][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.429982][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.448621][ T6038] 8021q: adding VLAN 0 to HW filter on device team0
[ 96.464292][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.471403][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.500959][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.508111][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.536557][ T6038] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 96.547537][ T6038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 96.594473][ T6038] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 96.648992][ T6038] veth0_vlan: entered promiscuous mode
[ 96.662601][ T6038] veth1_vlan: entered promiscuous mode
[ 96.696223][ T6038] veth0_macvtap: entered promiscuous mode
[ 96.706169][ T6038] veth1_macvtap: entered promiscuous mode
[ 96.727363][ T6038] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 96.746860][ T6038] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 96.764624][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.782991][ T1129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.808627][ T1129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.832144][ T1129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.922736][ T6087] nbd0: detected capacity change from 0 to 354
[ 97.433127][ T5172] Bluetooth: hci0: command tx timeout
[ 97.701598][ T51] block nbd0: Receive control failed (result -104)
[ 99.521886][ T51] Bluetooth: hci0: command tx timeout
[ 101.592714][ T51] Bluetooth: hci0: command tx timeout
[ 103.671963][ T51] Bluetooth: hci0: command tx timeout
[ 127.442685][ T55] block nbd0: Possible stuck request ffff888026bb0000: control (read@0,4096B). Runtime 30 seconds
[ 132.554801][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.561203][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
2025/09/20 16:36:02 executed programs: 1
[ 153.919664][ T5172] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 153.927377][ T5172] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 153.935389][ T5172] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 153.944073][ T5172] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 153.951721][ T5172] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 154.044606][ T6231] chnl_net:caif_netlink_parms(): no params data found
[ 154.096420][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state
[ 154.103621][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state
[ 154.110714][ T6231] bridge_slave_0: entered allmulticast mode
[ 154.117666][ T6231] bridge_slave_0: entered promiscuous mode
[ 154.125571][ T6231] bridge0: port 2(bridge_slave_1) entered blocking state
[ 154.132724][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state
[ 154.139800][ T6231] bridge_slave_1: entered allmulticast mode
[ 154.147256][ T6231] bridge_slave_1: entered promiscuous mode
[ 154.171145][ T6231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 154.181980][ T6231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 154.207500][ T6231] team0: Port device team_slave_0 added
[ 154.214781][ T6231] team0: Port device team_slave_1 added
[ 154.236821][ T6231] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 154.243888][ T6231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 154.269818][ T6231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 154.281616][ T6231] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 154.288593][ T6231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 154.314851][ T6231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 154.349132][ T6231] hsr_slave_0: entered promiscuous mode
[ 154.355244][ T6231] hsr_slave_1: entered promiscuous mode
[ 154.361096][ T6231] debugfs: 'hsr0' already exists in 'hsr'
[ 154.367156][ T6231] Cannot create hsr debugfs directory
[ 154.446169][ T6231] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 154.511630][ T6231] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 154.561003][ T6231] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 154.632322][ T6231] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 154.723378][ T6231] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 154.732937][ T6231] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 154.741930][ T6231] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 154.750733][ T6231] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 154.772127][ T6231] bridge0: port 2(bridge_slave_1) entered blocking state
[ 154.779207][ T6231] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 154.786590][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state
[ 154.794153][ T6231] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 154.835234][ T6231] 8021q: adding VLAN 0 to HW filter on device bond0
[ 154.848609][ T61] bridge0: port 1(bridge_slave_0) entered disabled state
[ 154.857611][ T61] bridge0: port 2(bridge_slave_1) entered disabled state
[ 154.872659][ T6231] 8021q: adding VLAN 0 to HW filter on device team0
[ 154.884398][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state
[ 154.891491][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 154.905189][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state
[ 154.912309][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 154.963182][ T6231] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 154.996306][ T6231] veth0_vlan: entered promiscuous mode
[ 155.006781][ T6231] veth1_vlan: entered promiscuous mode
[ 155.030913][ T6231] veth0_macvtap: entered promiscuous mode
[ 155.039875][ T6231] veth1_macvtap: entered promiscuous mode
[ 155.058635][ T6231] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 155.070012][ T6231] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 155.083608][ T3017] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 155.093121][ T3017] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 155.105388][ T3017] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 155.115417][ T3017] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 155.991998][ T51] Bluetooth: hci1: command tx timeout
[ 157.512309][ T3177] block nbd0: Possible stuck request ffff888026bb0000: control (read@0,4096B). Runtime 60 seconds
[ 158.071913][ T51] Bluetooth: hci1: command tx timeout
[ 158.163036][ T5221] udevd[5221]: worker [6030] /devices/virtual/block/nbd0 is taking a long time
[ 160.152551][ T51] Bluetooth: hci1: command tx timeout
[ 162.232266][ T51] Bluetooth: hci1: command tx timeout
[ 187.592700][ T3177] block nbd0: Possible stuck request ffff888026bb0000: control (read@0,4096B). Runtime 90 seconds
[ 193.994349][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 194.000634][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
2025/09/20 16:37:01 executed programs: 2
[ 212.238717][ T5172] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 212.246252][ T5172] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 212.254395][ T5172] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 212.263192][ T5172] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 212.270648][ T5172] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 212.367389][ T6254] chnl_net:caif_netlink_parms(): no params data found
[ 212.420744][ T6254] bridge0: port 1(bridge_slave_0) entered blocking state
[ 212.427927][ T6254] bridge0: port 1(bridge_slave_0) entered disabled state
[ 212.435260][ T6254] bridge_slave_0: entered allmulticast mode
[ 212.442091][ T6254] bridge_slave_0: entered promiscuous mode
[ 212.449902][ T6254] bridge0: port 2(bridge_slave_1) entered blocking state
[ 212.457168][ T6254] bridge0: port 2(bridge_slave_1) entered disabled state
[ 212.465507][ T6254] bridge_slave_1: entered allmulticast mode
[ 212.472886][ T6254] bridge_slave_1: entered promiscuous mode
[ 212.497948][ T6254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 212.508855][ T6254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 212.534679][ T6254] team0: Port device team_slave_0 added
[ 212.541725][ T6254] team0: Port device team_slave_1 added
[ 212.567168][ T6254] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 212.574428][ T6254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 212.600333][ T6254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 212.612300][ T6254] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 212.619243][ T6254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 212.645542][ T6254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 212.680361][ T6254] hsr_slave_0: entered promiscuous mode
[ 212.687541][ T6254] hsr_slave_1: entered promiscuous mode
[ 212.693609][ T6254] debugfs: 'hsr0' already exists in 'hsr'
[ 212.699341][ T6254] Cannot create hsr debugfs directory
[ 212.780790][ T6254] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 212.853773][ T6254] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 212.900905][ T6254] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 212.963430][ T6254] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 213.082169][ T6254] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 213.098337][ T6254] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 213.107729][ T6254] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 213.116699][ T6254] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 213.137589][ T6254] bridge0: port 2(bridge_slave_1) entered blocking state
[ 213.144686][ T6254] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 213.152087][ T6254] bridge0: port 1(bridge_slave_0) entered blocking state
[ 213.159151][ T6254] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 213.205536][ T6254] 8021q: adding VLAN 0 to HW filter on device bond0
[ 213.220285][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 213.228659][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 213.242900][ T6254] 8021q: adding VLAN 0 to HW filter on device team0
[ 213.255627][ T61] bridge0: port 1(bridge_slave_0) entered blocking state
[ 213.262715][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 213.275445][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state
[ 213.282591][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 213.335321][ T6254] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 213.370078][ T6254] veth0_vlan: entered promiscuous mode
[ 213.380517][ T6254] veth1_vlan: entered promiscuous mode
[ 213.403729][ T6254] veth0_macvtap: entered promiscuous mode
[ 213.412899][ T6254] veth1_macvtap: entered promiscuous mode
[ 213.428174][ T6254] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 213.442803][ T6254] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 213.457316][ T1129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 213.469124][ T1129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 213.478218][ T1129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 213.488799][ T1129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 214.312136][ T51] Bluetooth: hci2: command tx timeout
[ 216.392199][ T51] Bluetooth: hci2: command tx timeout
[ 217.691879][ T3177] block nbd0: Possible stuck request ffff888026bb0000: control (read@0,4096B). Runtime 120 seconds
[ 218.472479][ T51] Bluetooth: hci2: command tx timeout
[ 220.552072][ T5172] Bluetooth: hci2: command tx timeout
[ 221.682025][ T51] Bluetooth: hci0: command 0x0406 tx timeout
[ 247.771941][ T3177] block nbd0: Possible stuck request ffff888026bb0000: control (read@0,4096B). Runtime 150 seconds
[ 255.431983][ T31] INFO: task syz-executor.0:6087 blocked for more than 143 seconds.
[ 255.435546][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 255.439994][ T31] Not tainted syzkaller #0
[ 255.446346][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 255.451828][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 255.466061][ T31] task:syz-executor.0 state:D stack:27656 pid:6087 tgid:6086 ppid:6038 task_flags:0x400140 flags:0x00004006
[ 255.478022][ T31] Call Trace:
[ 255.481291][ T31]
[ 255.484255][ T31] __schedule+0x1190/0x5de0
[ 255.489232][ T31] ? __lock_acquire+0x62e/0x1ce0
[ 255.494244][ T31] ? __pfx___schedule+0x10/0x10
[ 255.499107][ T31] ? find_held_lock+0x2b/0x80
[ 255.503841][ T31] ? schedule+0x2d7/0x3a0
[ 255.508164][ T31] ? bdev_release+0x15a/0x6d0
[ 255.512871][ T31] schedule+0xe7/0x3a0
[ 255.516936][ T31] schedule_preempt_disabled+0x13/0x30
[ 255.522548][ T31] __mutex_lock+0x81b/0x1060
[ 255.527140][ T31] ? bdev_release+0x15a/0x6d0
[ 255.532092][ T31] ? __pfx___mutex_lock+0x10/0x10
[ 255.537127][ T31] ? find_held_lock+0x2b/0x80
[ 255.542096][ T31] ? do_raw_spin_unlock+0x172/0x230
[ 255.547294][ T31] ? bdev_release+0x15a/0x6d0
[ 255.552073][ T31] bdev_release+0x15a/0x6d0
[ 255.556585][ T31] ? __pfx_blkdev_release+0x10/0x10
[ 255.561813][ T31] blkdev_release+0x15/0x20
[ 255.566308][ T31] __fput+0x3ff/0xb70
[ 255.570274][ T31] task_work_run+0x150/0x240
[ 255.574871][ T31] ? __pfx_task_work_run+0x10/0x10
[ 255.579979][ T31] exit_to_user_mode_loop+0xeb/0x110
[ 255.585290][ T31] do_syscall_64+0x41c/0x4e0
[ 255.589879][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 255.595844][ T31] RIP: 0033:0x7fa65c479b69
[ 255.600280][ T31] RSP: 002b:00007fa65d6900c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 255.608731][ T31] RAX: 0000000000000000 RBX: 00007fa65c58bf80 RCX: 00007fa65c479b69
[ 255.616725][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003
[ 255.624717][ T31] RBP: 00007fa65c4d534e R08: 0000000000000000 R09: 0000000000000000
[ 255.632888][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 255.640835][ T31] R13: 000000000000000b R14: 00007fa65c58bf80 R15: 00007ffd40dcfe08
[ 255.648886][ T31]
[ 255.651973][ T31]
[ 255.651973][ T31] Showing all locks held in the system:
[ 255.659673][ T31] 7 locks held by kworker/u8:1/13:
[ 255.664832][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 255.676049][ T31] #1: ffffc90000127d10 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 255.688210][ T31] #2: ffff8880b8425b18 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6b8/0xd30
[ 255.697212][ T31] #3: ffffffff9b0b81d0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0
[ 255.707598][ T31] #4: ffffffff8e47fec8 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30
[ 255.718122][ T31] #5: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x33/0x4f0
[ 255.727731][ T31] #6: ffff88801b86d078 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: __pte_offset_map_lock+0x10f/0x310
[ 255.738398][ T31] 1 lock held by khungtaskd/31:
[ 255.743258][ T31] #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[ 255.753158][ T31] 2 locks held by getty/5607:
[ 255.757822][ T31] #0: ffff888035e6e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 255.767582][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[ 255.777737][ T31] 1 lock held by udevd/6030:
[ 255.782353][ T31] #0: ffff888026a56358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[ 255.791676][ T31] 1 lock held by syz-executor.0/6087:
[ 255.797061][ T31] #0: ffff888026a56358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0
[ 255.806679][ T31] 1 lock held by syz-executor.0/6245:
[ 255.812074][ T31] #0: ffff888026a56358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[ 255.821418][ T31] 1 lock held by syz-executor.0/6268:
[ 255.826820][ T31] #0: ffff888026a56358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[ 255.836175][ T31]
[ 255.838476][ T31] =============================================
[ 255.838476][ T31]
[ 255.846896][ T31] NMI backtrace for cpu 1
[ 255.846919][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full)
[ 255.846939][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 255.846948][ T31] Call Trace:
[ 255.846954][ T31]
[ 255.846961][ T31] dump_stack_lvl+0x116/0x1f0
[ 255.846992][ T31] nmi_cpu_backtrace+0x27b/0x390
[ 255.847010][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 255.847038][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 255.847058][ T31] watchdog+0xf0e/0x1260
[ 255.847085][ T31] ? __pfx_watchdog+0x10/0x10
[ 255.847104][ T31] ? lockdep_hardirqs_on+0x7c/0x110
[ 255.847130][ T31] ? __kthread_parkme+0x19e/0x250
[ 255.847158][ T31] ? __pfx_watchdog+0x10/0x10
[ 255.847179][ T31] kthread+0x3c2/0x780
[ 255.847199][ T31] ? __pfx_kthread+0x10/0x10
[ 255.847219][ T31] ? rcu_is_watching+0x12/0xc0
[ 255.847244][ T31] ? __pfx_kthread+0x10/0x10
[ 255.847264][ T31] ret_from_fork+0x56a/0x730
[ 255.847281][ T31] ? __pfx_kthread+0x10/0x10
[ 255.847300][ T31] ret_from_fork_asm+0x1a/0x30
[ 255.847336][ T31]
[ 255.847343][ T31] Sending NMI from CPU 1 to CPUs 0:
[ 255.962343][ C0] NMI backtrace for cpu 0
[ 255.962359][ C0] CPU: 0 UID: 0 PID: 1129 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full)
[ 255.962381][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 255.962397][ C0] Workqueue: bat_events batadv_nc_worker
[ 255.962421][ C0] RIP: 0010:do_raw_spin_lock+0x100/0x2b0
[ 255.962444][ C0] Code: 4c 89 e2 48 c1 ea 03 0f b6 14 02 4c 89 e0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 67 01 00 00 8b 53 08 65 8b 05 24 bd 3e 12 <39> c2 0f 84 34 01 00 00 48 89 df be 04 00 00 00 c7 44 24 28 00 00
[ 255.962462][ C0] RSP: 0018:ffffc900047afa18 EFLAGS: 00000246
[ 255.962476][ C0] RAX: 0000000000000000 RBX: ffff888031ee4900 RCX: ffffffff93e79500
[ 255.962488][ C0] RDX: 00000000ffffffff RSI: ffffffff8de2d798 RDI: ffff888031ee4904
[ 255.962501][ C0] RBP: 1ffff920008f5f44 R08: d8c7cef074a30168 R09: 0000000000000001
[ 255.962512][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888031ee4908
[ 255.962524][ C0] R13: ffff888031ee4910 R14: ffff888028a04d80 R15: ffff8880333ad120
[ 255.962536][ C0] FS: 0000000000000000(0000) GS:ffff8881246b2000(0000) knlGS:0000000000000000
[ 255.962553][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 255.962565][ C0] CR2: 0000556cee805168 CR3: 000000000e380000 CR4: 00000000003526f0
[ 255.962577][ C0] Call Trace:
[ 255.962583][ C0]
[ 255.962590][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 255.962612][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10
[ 255.962635][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10
[ 255.962657][ C0] batadv_nc_purge_paths+0xd9/0x3a0
[ 255.962680][ C0] batadv_nc_worker+0x958/0x1030
[ 255.962701][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 255.962725][ C0] ? __pfx_batadv_nc_worker+0x10/0x10
[ 255.962748][ C0] ? rcu_is_watching+0x12/0xc0
[ 255.962774][ C0] process_one_work+0x9cc/0x1b70
[ 255.962800][ C0] ? __pfx_process_one_work+0x10/0x10
[ 255.962824][ C0] ? assign_work+0x1a0/0x250
[ 255.962843][ C0] worker_thread+0x6c8/0xf10
[ 255.962867][ C0] ? __kthread_parkme+0x19e/0x250
[ 255.962894][ C0] ? __pfx_worker_thread+0x10/0x10
[ 255.962914][ C0] kthread+0x3c2/0x780
[ 255.962931][ C0] ? __pfx_kthread+0x10/0x10
[ 255.962950][ C0] ? rcu_is_watching+0x12/0xc0
[ 255.962972][ C0] ? __pfx_kthread+0x10/0x10
[ 255.962997][ C0] ret_from_fork+0x56a/0x730
[ 255.963015][ C0] ? __pfx_kthread+0x10/0x10
[ 255.963033][ C0] ret_from_fork_asm+0x1a/0x30
[ 255.963063][ C0]
[ 255.963548][ T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 256.209316][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full)
[ 256.218409][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 256.228450][ T31] Call Trace:
[ 256.231716][ T31]
[ 256.234653][ T31] dump_stack_lvl+0x3d/0x1f0
[ 256.239239][ T31] vpanic+0x6e8/0x7a0
[ 256.243211][ T31] ? __pfx_vpanic+0x10/0x10
[ 256.247701][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 256.253679][ T31] panic+0xca/0xd0
[ 256.257379][ T31] ? __pfx_panic+0x10/0x10
[ 256.261781][ T31] ? preempt_schedule_thunk+0x16/0x30
[ 256.267230][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300
[ 256.273366][ T31] ? watchdog+0xd78/0x1260
[ 256.277762][ T31] ? watchdog+0xd6b/0x1260
[ 256.282157][ T31] watchdog+0xd89/0x1260
[ 256.286381][ T31] ? __pfx_watchdog+0x10/0x10
[ 256.291035][ T31] ? lockdep_hardirqs_on+0x7c/0x110
[ 256.296216][ T31] ? __kthread_parkme+0x19e/0x250
[ 256.301224][ T31] ? __pfx_watchdog+0x10/0x10
[ 256.305879][ T31] kthread+0x3c2/0x780
[ 256.309928][ T31] ? __pfx_kthread+0x10/0x10
[ 256.314497][ T31] ? rcu_is_watching+0x12/0xc0
[ 256.319258][ T31] ? __pfx_kthread+0x10/0x10
[ 256.323826][ T31] ret_from_fork+0x56a/0x730
[ 256.328391][ T31] ? __pfx_kthread+0x10/0x10
[ 256.332958][ T31] ret_from_fork_asm+0x1a/0x30
[ 256.337711][ T31]
[ 256.340915][ T31] Kernel Offset: disabled
[ 256.345217][ T31] Rebooting in 86400 seconds..