Warning: Permanently added '10.128.10.21' (ED25519) to the list of known hosts. 2026/08/26 09:59:30 ignoring optional flag "type"="gce" 2026/08/26 09:59:31 parsed 1 programs 2026/08/26 09:59:31 executed programs: 0 [ 127.816583][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.827284][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.831012][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.852293][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.869592][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 128.713893][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.714494][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.716179][ T5759] bridge_slave_0: entered allmulticast mode [ 128.725984][ T5759] bridge_slave_0: entered promiscuous mode [ 128.742108][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.742911][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.743387][ T5759] bridge_slave_1: entered allmulticast mode [ 128.750829][ T5759] bridge_slave_1: entered promiscuous mode [ 128.896705][ T5759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.914139][ T5759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.055152][ T5759] team0: Port device team_slave_0 added [ 129.063332][ T5759] team0: Port device team_slave_1 added [ 129.204596][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.204708][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.204767][ T5759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.233421][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.233451][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.233484][ T5759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.579458][ T5759] hsr_slave_0: entered promiscuous mode [ 129.586671][ T5759] hsr_slave_1: entered promiscuous mode [ 129.911546][ T5608] Bluetooth: hci0: command tx timeout [ 131.774380][ T5759] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 131.818093][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 131.828250][ T5759] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 131.874320][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 131.878634][ T5759] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 131.919562][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 131.929638][ T5759] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 131.965418][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 132.001529][ T5608] Bluetooth: hci0: command tx timeout [ 132.209242][ T5759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.260703][ T5759] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.281278][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.289952][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.325873][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.338153][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.213520][ T5759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.340808][ T5759] veth0_vlan: entered promiscuous mode [ 133.423794][ T5759] veth1_vlan: entered promiscuous mode [ 133.499499][ T5759] veth0_macvtap: entered promiscuous mode [ 133.549381][ T5759] veth1_macvtap: entered promiscuous mode [ 133.635879][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.655835][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.003044][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.071596][ T5608] Bluetooth: hci0: command tx timeout [ 134.121641][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.132688][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.132742][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.273116][ T5884] nbd0: detected capacity change from 0 to 126 [ 134.944886][ T5608] block nbd0: Receive control failed (result -104) [ 136.151902][ T5608] Bluetooth: hci0: command tx timeout [ 138.647984][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.649297][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.911838][ T658] block nbd0: Possible stuck request ffff888027db0000: control (read@0,4096B). Runtime 30 seconds 2026/08/26 10:00:32 executed programs: 1 [ 190.179776][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.196063][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.206421][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.215830][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.217728][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 191.133712][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.134200][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.135997][ T5922] bridge_slave_0: entered allmulticast mode [ 191.145006][ T5922] bridge_slave_0: entered promiscuous mode [ 191.168044][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.168835][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.169515][ T5922] bridge_slave_1: entered allmulticast mode [ 191.188150][ T5922] bridge_slave_1: entered promiscuous mode [ 191.336281][ T5922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.351049][ T5922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.505152][ T5922] team0: Port device team_slave_0 added [ 191.512515][ T5922] team0: Port device team_slave_1 added [ 191.646980][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.647107][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.647181][ T5922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.657615][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.657670][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.657759][ T5922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.030528][ T5922] hsr_slave_0: entered promiscuous mode [ 192.040606][ T5922] hsr_slave_1: entered promiscuous mode [ 192.048147][ T5922] debugfs: 'hsr0' already exists in 'hsr' [ 192.048466][ T5922] Cannot create hsr debugfs directory [ 192.311681][ T59] Bluetooth: hci1: command tx timeout [ 192.590845][ T5922] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.848859][ T5922] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.086887][ T5922] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.352493][ T5922] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.742965][ T5922] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 193.788597][ T5922] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 193.797745][ T5922] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 193.824805][ T5922] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 193.829602][ T5922] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 193.866136][ T5922] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 193.870704][ T5922] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 193.915748][ T5922] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 194.043256][ T5922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.096271][ T5922] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.128004][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.128801][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.157937][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.158457][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.391521][ T59] Bluetooth: hci1: command tx timeout [ 194.690711][ T5922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.764812][ T5922] veth0_vlan: entered promiscuous mode [ 194.787978][ T5922] veth1_vlan: entered promiscuous mode [ 194.848801][ T5922] veth0_macvtap: entered promiscuous mode [ 194.870493][ T5922] veth1_macvtap: entered promiscuous mode [ 194.899523][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.924510][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.991684][ T658] block nbd0: Possible stuck request ffff888027db0000: control (read@0,4096B). Runtime 60 seconds [ 195.192053][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.194209][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.194257][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.194297][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.471634][ T59] Bluetooth: hci1: command tx timeout [ 198.464036][ T4956] udevd[4956]: worker [5740] /devices/virtual/block/nbd0 is taking a long time [ 198.551494][ T59] Bluetooth: hci1: command tx timeout [ 200.077322][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.079468][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 225.071791][ T658] block nbd0: Possible stuck request ffff888027db0000: control (read@0,4096B). Runtime 90 seconds 2026/08/26 10:01:34 executed programs: 2 [ 251.510178][ T4905] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 251.527874][ T4905] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 251.550479][ T4905] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 251.565963][ T4905] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 251.586380][ T4905] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 252.603311][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.603849][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.605472][ T5968] bridge_slave_0: entered allmulticast mode [ 252.614535][ T5968] bridge_slave_0: entered promiscuous mode [ 252.638870][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.639439][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.639987][ T5968] bridge_slave_1: entered allmulticast mode [ 252.661752][ T5968] bridge_slave_1: entered promiscuous mode [ 252.818119][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.833310][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.005375][ T5968] team0: Port device team_slave_0 added [ 253.015738][ T5968] team0: Port device team_slave_1 added [ 253.174142][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.174237][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.174318][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.181824][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.181879][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.181963][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.351498][ T5608] Bluetooth: hci0: command 0x0406 tx timeout [ 253.500627][ T5968] hsr_slave_0: entered promiscuous mode [ 253.509385][ T5968] hsr_slave_1: entered promiscuous mode [ 253.511731][ T5968] debugfs: 'hsr0' already exists in 'hsr' [ 253.511760][ T5968] Cannot create hsr debugfs directory [ 253.671554][ T59] Bluetooth: hci2: command tx timeout [ 254.053940][ T5968] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.315825][ T5968] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.583934][ T5968] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.862666][ T5968] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.153502][ T658] block nbd0: Possible stuck request ffff888027db0000: control (read@0,4096B). Runtime 120 seconds [ 255.215465][ T5968] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 255.250488][ T5968] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 255.256184][ T5968] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 255.286729][ T5968] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 255.289322][ T5968] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 255.315050][ T5968] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 255.321078][ T5968] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 255.365598][ T5968] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 255.493224][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.524863][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.545969][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.546683][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.579135][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.590251][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.754281][ T59] Bluetooth: hci2: command tx timeout [ 256.103921][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.199432][ T5968] veth0_vlan: entered promiscuous mode [ 256.217063][ T5968] veth1_vlan: entered promiscuous mode [ 256.273993][ T5968] veth0_macvtap: entered promiscuous mode [ 256.285830][ T5968] veth1_macvtap: entered promiscuous mode [ 256.318510][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.339740][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.431907][ T1158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.618164][ T69] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.620362][ T69] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.620410][ T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.833185][ T59] Bluetooth: hci2: command tx timeout [ 259.911641][ T59] Bluetooth: hci2: command tx timeout [ 261.515263][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.524088][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 285.231776][ T658] block nbd0: Possible stuck request ffff888027db0000: control (read@0,4096B). Runtime 150 seconds [ 290.311903][ T38] INFO: task syz-executor.0:5879 blocked for more than 143 seconds. [ 290.312023][ T38] Not tainted syzkaller #0 [ 290.312037][ T38] "echo 0 > ** replaying previous printk message ** [ 290.312037][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.312095][ T38] task:syz-executor.0 state:D stack:25544 pid:5879 tgid:5879 ppid:5759 task_flags:0x400040 flags:0x00080002 [ 290.312343][ T38] Call Trace: [ 290.312366][ T38] [ 290.312443][ T38] __schedule+0x16d9/0x5700 [ 290.312649][ T38] ? __pfx___schedule+0x10/0x10 [ 290.312735][ T38] ? trace_irq_disable+0x3b/0x140 [ 290.312821][ T38] ? __pfx___schedule+0x10/0x10 [ 290.312888][ T38] ? rt_mutex_slowlock_block+0x33c/0x690 [ 290.313047][ T38] rt_mutex_schedule+0x76/0xf0 [ 290.313248][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 290.313336][ T38] ? rt_mutex_slowlock_block+0x33c/0x690 [ 290.313413][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 290.313503][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 290.313571][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 290.313667][ T38] ? bdev_release+0x1be/0x690 [ 290.313776][ T38] ? bdev_release+0x1be/0x690 [ 290.313855][ T38] mutex_lock_nested+0x168/0x1d0 [ 290.313933][ T38] bdev_release+0x1be/0x690 [ 290.314037][ T38] ? __pfx_blkdev_release+0x10/0x10 [ 290.314113][ T38] blkdev_release+0x15/0x20 [ 290.314188][ T38] __fput+0x42a/0xa80 [ 290.314309][ T38] fput_close_sync+0x11f/0x240 [ 290.314396][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 290.314538][ T38] __x64_sys_close+0x7e/0x110 [ 290.314628][ T38] do_syscall_64+0x166/0x520 [ 290.314714][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.314781][ T38] ? clear_bhb_loop+0x70/0xc0 [ 290.314856][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.314921][ T38] RIP: 0033:0x7f675743031e [ 290.314989][ T38] RSP: 002b:00007ffef199bcb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 290.315076][ T38] RAX: ffffffffffffffda RBX: 00005555692c84c0 RCX: 00007f675743031e [ 290.315121][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 290.315163][ T38] RBP: 00007f675754d980 R08: 0000000000000000 R09: 0000000000000000 [ 290.315216][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000020c4a [ 290.315288][ T38] R13: ffffffffffffffff R14: 00007f6756fa0000 R15: 0000000000020909 [ 290.315392][ T38] [ 290.315436][ T38] INFO: task syz-executor.0:5881 blocked for more than 143 seconds. [ 290.315488][ T38] Not tainted syzkaller #0 [ 290.315513][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.315544][ T38] task:syz-executor.0 state:D stack:28120 pid:5881 tgid:5879 ppid:5759 task_flags:0x400140 flags:0x00080802 [ 290.315731][ T38] Call Trace: [ 290.315753][ T38] [ 290.315789][ T38] __schedule+0x16d9/0x5700 [ 290.315943][ T38] ? __pfx___schedule+0x10/0x10 [ 290.316054][ T38] rt_mutex_schedule+0x76/0xf0 [ 290.316139][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 290.316238][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 290.316313][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 290.316389][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 290.316486][ T38] ? bdev_release+0x1be/0x690 [ 290.316601][ T38] ? bdev_release+0x1be/0x690 [ 290.316682][ T38] mutex_lock_nested+0x168/0x1d0 [ 290.316765][ T38] bdev_release+0x1be/0x690 [ 290.316861][ T38] ? __pfx_blkdev_release+0x10/0x10 [ 290.316932][ T38] blkdev_release+0x15/0x20 [ 290.317002][ T38] __fput+0x42a/0xa80 [ 290.317112][ T38] task_work_run+0x1d9/0x270 [ 290.317195][ T38] ? __pfx_task_work_run+0x10/0x10 [ 290.317251][ T38] ? __fput_deferred+0x253/0x3e0 [ 290.317363][ T38] exit_to_user_mode_loop+0x204/0x770 [ 290.317478][ T38] ? rcu_is_watching+0x16/0xb0 [ 290.317571][ T38] do_syscall_64+0x328/0x520 [ 290.317660][ T38] ? trace_irq_disable+0x3b/0x140 [ 290.317763][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.317823][ T38] ? clear_bhb_loop+0x70/0xc0 [ 290.317900][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.317969][ T38] RIP: 0033:0x7f675740cef9 [ 290.318023][ T38] RSP: 002b:00007f675679e078 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.318095][ T38] RAX: 0000000000000000 RBX: 00007f675754bf80 RCX: 00007f675740cef9 [ 290.318145][ T38] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 290.318195][ T38] RBP: 00007f6757482980 R08: 0000000000000000 R09: 0000000000000000 [ 290.318229][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.318270][ T38] R13: 000000000000000b R14: 00007f675754bf80 R15: 00007ffef199bc38 [ 290.318357][ T38] [ 290.318492][ T38] [ 290.318492][ T38] Showing all locks held in the system: [ 290.318534][ T38] locks held by pr/ttyS0/17: 3, last CPU#0: [ 290.318601][ T38] #0: ffffffff8e09d538 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 290.318814][ T38] #1: ffffffff99e8f178 (&port_lock_key){+.+.}-{3:3}, at: nbcon_kthread_func+0x64c/0x880 [ 290.318990][ T38] #2: ffffffff8e1c3a80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 290.319151][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 290.319194][ T38] #0: ffffffff8e1c3a80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 290.319498][ T38] locks held by getty/5342: 2, on CPU#1: [ 290.319549][ T38] #0: ffff8880364480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 290.319738][ T38] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 290.319899][ T38] locks held by udevd/5740: 1, on CPU#0: [ 290.319945][ T38] #0: ffff888027d694c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 290.320140][ T38] locks held by syz-executor.0/5879: 1, on CPU#1: [ 290.320183][ T38] #0: ffff888027d694c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1be/0x690 [ 290.320344][ T38] locks held by syz-executor.0/5881: 1, on CPU#1: [ 290.320386][ T38] #0: ffff888027d694c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1be/0x690 [ 290.320558][ T38] locks held by syz-executor.0/5958: 1, on CPU#1: [ 290.320605][ T38] #0: ffff888027d694c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 290.320747][ T38] locks held by syz-executor.0/5959: 1, on CPU#1: [ 290.320806][ T38] #0: ffff888027d694c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 290.321000][ T38] locks held by syz-executor.0/6004: 1, on CPU#1: [ 290.321043][ T38] #0: ffff888027d694c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 290.321196][ T38] locks held by syz-executor.0/6005: 1, on CPU#0: [ 290.321239][ T38] #0: ffff888027d694c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 290.321787][ T38] [ 290.321800][ T38] ============================================= [ 290.321800][ T38] [ 290.321844][ T38] NMI backtrace for cpu 1 [ 290.321907][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 290.321967][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 290.322007][ T38] Call Trace: [ 290.322031][ T38] [ 290.322053][ T38] dump_stack_lvl+0xe8/0x150 [ 290.322151][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 290.322242][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 290.322375][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 290.322469][ T38] sys_info+0x135/0x170 [ 290.322532][ T38] watchdog+0xfd7/0x1030 [ 290.322621][ T38] ? watchdog+0x1c7/0x1030 [ 290.322715][ T38] kthread+0x38b/0x470 [ 290.322776][ T38] ? __pfx_watchdog+0x10/0x10 [ 290.322801][ T38] ? __pfx_kthread+0x10/0x10 [ 290.322825][ T38] ret_from_fork+0x514/0xb70 [ 290.322851][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 290.322918][ T38] ? __switch_to+0xc89/0x1420 [ 290.323009][ T38] ? __pfx_kthread+0x10/0x10 [ 290.323072][ T38] ret_from_fork_asm+0x1a/0x30 [ 290.323170][ T38] [ 290.323235][ T38] Sending NMI from CPU 1 to CPUs 0: [ 290.323302][ C0] NMI backtrace for cpu 0 [ 290.323318][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 290.323339][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 290.323349][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 290.323381][ C0] Code: e8 fe e7 66 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0f 85 d2 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 4a 30 f8 05 cc 44 89 f9 80 e1 07 [ 290.323397][ C0] RSP: 0018:ffffc900001678b8 EFLAGS: 00000202 [ 290.323414][ C0] RAX: 1ffffffff33d1e00 RBX: 00000000000003fd RCX: 0000000000000000 [ 290.323427][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 290.323439][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 290.323451][ C0] R10: dffffc0000000000 R11: ffffffff855f8550 R12: dffffc0000000000 [ 290.323465][ C0] R13: 0000000000000000 R14: ffffffff99e8f1a0 R15: 0000000000000000 [ 290.323478][ C0] FS: 0000000000000000(0000) GS:ffff888125bde000(0000) knlGS:0000000000000000 [ 290.323493][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.323505][ C0] CR2: 000056062b95b660 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 290.323522][ C0] Call Trace: [ 290.323529][ C0] [ 290.323537][ C0] wait_for_lsr+0x190/0x300 [ 290.323567][ C0] __serial8250_console_fifo_write+0xd0/0x3f0 [ 290.323593][ C0] serial8250_console_write+0xac5/0x1230 [ 290.323625][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 290.323660][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 290.323694][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 290.323722][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 290.323758][ C0] nbcon_kthread_func+0x679/0x880 [ 290.323785][ C0] ? nbcon_kthread_func+0x163/0x880 [ 290.323808][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 290.323835][ C0] ? __kthread_parkme+0x71/0x1f0 [ 290.323864][ C0] ? __kthread_parkme+0x199/0x1f0 [ 290.323893][ C0] kthread+0x38b/0x470 [ 290.323910][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 290.323939][ C0] ? __pfx_kthread+0x10/0x10 [ 290.323957][ C0] ret_from_fork+0x514/0xb70 [ 290.323976][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 290.323994][ C0] ? __switch_to+0xc89/0x1420 [ 290.324021][ C0] ? __pfx_kthread+0x10/0x10 [ 290.324039][ C0] ret_from_fork_asm+0x1a/0x30 [ 290.324064][ C0] [ 290.328495][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 291.419814][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 291.430786][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 291.441836][ T38] Call Trace: [ 291.445620][ T38] [ 291.449223][ T38] vpanic+0x56d/0xa60 [ 291.453591][ T38] ? __pfx___schedule+0x10/0x10 [ 291.458698][ T38] ? __pfx_vpanic+0x10/0x10 [ 291.464220][ T38] panic+0xc5/0xd0 [ 291.468104][ T38] ? __pfx_panic+0x10/0x10 [ 291.472866][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 291.478472][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 291.484087][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 291.490831][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 291.497029][ T38] watchdog+0x1030/0x1030 [ 291.501672][ T38] ? watchdog+0x1c7/0x1030 [ 291.506687][ T38] kthread+0x38b/0x470 [ 291.511274][ T38] ? __pfx_watchdog+0x10/0x10 [ 291.516366][ T38] ? __pfx_kthread+0x10/0x10 [ 291.521874][ T38] ret_from_fork+0x514/0xb70 [ 291.526865][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 291.532392][ T38] ? __switch_to+0xc89/0x1420 [ 291.537214][ T38] ? __pfx_kthread+0x10/0x10 [ 291.542427][ T38] ret_from_fork_asm+0x1a/0x30 [ 291.547426][ T38] [ 291.551499][ T38] Kernel Offset: disabled [ 291.555865][ T38] Rebooting in 86400 seconds..