Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts. 2026/03/01 02:40:27 ignoring optional flag "type"="gce" 2026/03/01 02:40:27 parsed 1 programs 2026/03/01 02:40:27 executed programs: 0 [ 79.942035][ T5128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.950516][ T5128] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.959892][ T5128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.968815][ T5128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.976521][ T5128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.091399][ T5994] chnl_net:caif_netlink_parms(): no params data found [ 80.146333][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.153551][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.160722][ T5994] bridge_slave_0: entered allmulticast mode [ 80.167809][ T5994] bridge_slave_0: entered promiscuous mode [ 80.175594][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.183162][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.190265][ T5994] bridge_slave_1: entered allmulticast mode [ 80.197724][ T5994] bridge_slave_1: entered promiscuous mode [ 80.220977][ T5994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.232462][ T5994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.260745][ T5994] team0: Port device team_slave_0 added [ 80.268527][ T5994] team0: Port device team_slave_1 added [ 80.289702][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.297361][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.323310][ T5994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.335081][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.342512][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.368818][ T5994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.404235][ T5994] hsr_slave_0: entered promiscuous mode [ 80.410624][ T5994] hsr_slave_1: entered promiscuous mode [ 80.956634][ T5994] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.970175][ T5994] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.980476][ T5994] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.991494][ T5994] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.038347][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.045528][ T5994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.052985][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.060093][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.085793][ T1324] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.113464][ T1324] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.159038][ T5994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.181284][ T5994] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.195435][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.202599][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.216276][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.223429][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.280854][ T5994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.397205][ T1645] cfg80211: failed to load regulatory.db [ 81.466464][ T5994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.514796][ T5994] veth0_vlan: entered promiscuous mode [ 81.527080][ T5994] veth1_vlan: entered promiscuous mode [ 81.559887][ T5994] veth0_macvtap: entered promiscuous mode [ 81.572888][ T5994] veth1_macvtap: entered promiscuous mode [ 81.591321][ T5994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.608151][ T5994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.624524][ T1324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.640717][ T1324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.653890][ T1324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.674139][ T1324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.857202][ T6056] nbd0: detected capacity change from 0 to 258 [ 82.032820][ T5128] Bluetooth: hci0: command tx timeout [ 82.588213][ T51] block nbd0: Receive control failed (result -104) [ 84.121950][ T51] Bluetooth: hci0: command tx timeout [ 86.192136][ T51] Bluetooth: hci0: command tx timeout [ 88.271977][ T51] Bluetooth: hci0: command tx timeout [ 112.112845][ T2382] block nbd0: Possible stuck request ffff8880273d0000: control (read@0,4096B). Runtime 30 seconds [ 132.594211][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.600518][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 2026/03/01 02:41:24 executed programs: 1 [ 137.800982][ T5128] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.808778][ T5128] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.816739][ T5128] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.824540][ T5128] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.832507][ T5128] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.009155][ T6192] chnl_net:caif_netlink_parms(): no params data found [ 138.064570][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.072145][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.079250][ T6192] bridge_slave_0: entered allmulticast mode [ 138.086247][ T6192] bridge_slave_0: entered promiscuous mode [ 138.094079][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.101131][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.108636][ T6192] bridge_slave_1: entered allmulticast mode [ 138.115973][ T6192] bridge_slave_1: entered promiscuous mode [ 138.140658][ T6192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.151693][ T6192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.177343][ T6192] team0: Port device team_slave_0 added [ 138.184826][ T6192] team0: Port device team_slave_1 added [ 138.206485][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.213997][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.239909][ T6192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.252398][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.259343][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.285980][ T6192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.320136][ T6192] hsr_slave_0: entered promiscuous mode [ 138.326278][ T6192] hsr_slave_1: entered promiscuous mode [ 138.332481][ T6192] debugfs: 'hsr0' already exists in 'hsr' [ 138.338259][ T6192] Cannot create hsr debugfs directory [ 138.416463][ T6192] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.493514][ T6192] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.551001][ T6192] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.651992][ T6192] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.765742][ T6192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 138.774904][ T6192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 138.785220][ T6192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 138.794498][ T6192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 138.815463][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.822560][ T6192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.829874][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.837011][ T6192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.877249][ T6192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.894581][ T1324] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.902519][ T1324] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.915066][ T6192] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.926631][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.933723][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.945372][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.952518][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.088460][ T6192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.122930][ T6192] veth0_vlan: entered promiscuous mode [ 139.133789][ T6192] veth1_vlan: entered promiscuous mode [ 139.155345][ T6192] veth0_macvtap: entered promiscuous mode [ 139.164736][ T6192] veth1_macvtap: entered promiscuous mode [ 139.178648][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.192493][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.206175][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.215431][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.229998][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.238939][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.872325][ T51] Bluetooth: hci1: command tx timeout [ 141.951887][ T51] Bluetooth: hci1: command tx timeout [ 142.197491][ T2382] block nbd0: Possible stuck request ffff8880273d0000: control (read@0,4096B). Runtime 60 seconds [ 142.296801][ T5178] udevd[5178]: worker [5997] /devices/virtual/block/nbd0 is taking a long time [ 144.032160][ T51] Bluetooth: hci1: command tx timeout [ 146.112025][ T51] Bluetooth: hci1: command tx timeout [ 172.283133][ T2382] block nbd0: Possible stuck request ffff8880273d0000: control (read@0,4096B). Runtime 90 seconds [ 194.035031][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.041380][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 2026/03/01 02:42:21 executed programs: 2 [ 195.320107][ T5128] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 195.328578][ T5128] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 195.336356][ T5128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 195.344540][ T5128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 195.352179][ T5128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 195.471290][ T6221] chnl_net:caif_netlink_parms(): no params data found [ 195.526294][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.533445][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.540545][ T6221] bridge_slave_0: entered allmulticast mode [ 195.547565][ T6221] bridge_slave_0: entered promiscuous mode [ 195.555196][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.562679][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.569902][ T6221] bridge_slave_1: entered allmulticast mode [ 195.577012][ T6221] bridge_slave_1: entered promiscuous mode [ 195.600818][ T6221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.612230][ T6221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.639556][ T6221] team0: Port device team_slave_0 added [ 195.647904][ T6221] team0: Port device team_slave_1 added [ 195.669726][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.676996][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.703975][ T6221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.716220][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.723238][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.749626][ T6221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.784687][ T6221] hsr_slave_0: entered promiscuous mode [ 195.790974][ T6221] hsr_slave_1: entered promiscuous mode [ 195.797440][ T6221] debugfs: 'hsr0' already exists in 'hsr' [ 195.803208][ T6221] Cannot create hsr debugfs directory [ 195.884269][ T6221] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.942161][ T6221] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.012116][ T6221] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.103269][ T6221] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.201560][ T6221] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 196.217017][ T6221] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 196.226076][ T6221] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 196.236321][ T6221] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 196.257084][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.264231][ T6221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.271568][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.278729][ T6221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.319574][ T6221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.333125][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.340654][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.354737][ T6221] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.366642][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.373751][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.386541][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.393702][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.527425][ T6221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.560884][ T6221] veth0_vlan: entered promiscuous mode [ 196.576480][ T6221] veth1_vlan: entered promiscuous mode [ 196.597968][ T6221] veth0_macvtap: entered promiscuous mode [ 196.606821][ T6221] veth1_macvtap: entered promiscuous mode [ 196.621142][ T6221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.635491][ T6221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.649286][ T1349] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.658543][ T1349] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.668820][ T1349] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.678157][ T1349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.392040][ T51] Bluetooth: hci2: command tx timeout [ 199.471969][ T51] Bluetooth: hci2: command tx timeout [ 201.551967][ T51] Bluetooth: hci2: command tx timeout [ 202.353304][ T2382] block nbd0: Possible stuck request ffff8880273d0000: control (read@0,4096B). Runtime 120 seconds [ 203.632370][ T51] Bluetooth: hci2: command tx timeout [ 206.351918][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 232.432195][ T2382] block nbd0: Possible stuck request ffff8880273d0000: control (read@0,4096B). Runtime 150 seconds [ 243.312148][ T31] INFO: task syz-executor.0:6056 blocked for more than 143 seconds. [ 243.320193][ T31] Not tainted syzkaller #0 [ 243.325194][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 243.333902][ T31] task:syz-executor.0 state:D stack:27144 pid:6056 tgid:6055 ppid:5994 task_flags:0x400140 flags:0x00080802 [ 243.345855][ T31] Call Trace: [ 243.349124][ T31] [ 243.352184][ T31] __schedule+0xfee/0x60e0 [ 243.356647][ T31] ? __lock_acquire+0x4a5/0x2630 [ 243.361616][ T31] ? __pfx___schedule+0x10/0x10 [ 243.366507][ T31] ? find_held_lock+0x2b/0x80 [ 243.371203][ T31] ? schedule+0x2bf/0x390 [ 243.375581][ T31] schedule+0xdd/0x390 [ 243.379669][ T31] schedule_preempt_disabled+0x13/0x30 [ 243.385156][ T31] __mutex_lock+0xc9a/0x1b90 [ 243.389745][ T31] ? bdev_release+0x15a/0x6d0 [ 243.394799][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 243.399855][ T31] ? find_held_lock+0x2b/0x80 [ 243.404624][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 243.409829][ T31] ? bdev_release+0x15a/0x6d0 [ 243.414556][ T31] bdev_release+0x15a/0x6d0 [ 243.419078][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 243.424303][ T31] blkdev_release+0x15/0x20 [ 243.428832][ T31] __fput+0x3ff/0xb40 [ 243.432841][ T31] task_work_run+0x150/0x240 [ 243.437431][ T31] ? __pfx_task_work_run+0x10/0x10 [ 243.442567][ T31] ? selinux_file_ioctl+0xb4/0x290 [ 243.447737][ T31] exit_to_user_mode_loop+0x100/0x4a0 [ 243.453176][ T31] do_syscall_64+0x67c/0xf80 [ 243.457771][ T31] ? clear_bhb_loop+0x40/0x90 [ 243.462505][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.468408][ T31] RIP: 0033:0x7fd46506ceb9 [ 243.472937][ T31] RSP: 002b:00007fd465da20b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.481362][ T31] RAX: 0000000000000000 RBX: 00007fd4651abf80 RCX: 00007fd46506ceb9 [ 243.489695][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 243.497716][ T31] RBP: 00007fd4650e2980 R08: 0000000000000000 R09: 0000000000000000 [ 243.505718][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.513706][ T31] R13: 000000000000000b R14: 00007fd4651abf80 R15: 00007ffd263514c8 [ 243.521680][ T31] [ 243.524786][ T31] [ 243.524786][ T31] Showing all locks held in the system: [ 243.532540][ T31] 5 locks held by kworker/u8:0/12: [ 243.537655][ T31] 1 lock held by khungtaskd/31: [ 243.542555][ T31] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 243.552525][ T31] 2 locks held by getty/5565: [ 243.557213][ T31] #0: ffff888033f860a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 243.567004][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 243.577211][ T31] 1 lock held by udevd/5997: [ 243.581850][ T31] #0: ffff8880272bd358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 243.591291][ T31] 1 lock held by syz-executor.0/6056: [ 243.596711][ T31] #0: ffff8880272bd358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 243.606354][ T31] 1 lock held by syz-executor.0/6212: [ 243.611700][ T31] #0: ffff8880272bd358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 243.621079][ T31] 1 lock held by syz-executor.0/6241: [ 243.626466][ T31] #0: ffff8880272bd358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 243.635905][ T31] [ 243.638220][ T31] ============================================= [ 243.638220][ T31] [ 243.646722][ T31] NMI backtrace for cpu 1 [ 243.646746][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 243.646769][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 243.646779][ T31] Call Trace: [ 243.646785][ T31] [ 243.646792][ T31] dump_stack_lvl+0x100/0x190 [ 243.646829][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 243.646849][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 243.646880][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 243.646911][ T31] sys_info+0x141/0x190 [ 243.646936][ T31] watchdog+0xd25/0x1050 [ 243.646979][ T31] ? __pfx_watchdog+0x10/0x10 [ 243.647008][ T31] ? __kthread_parkme+0x18c/0x230 [ 243.647042][ T31] ? kthread+0x13a/0x450 [ 243.647060][ T31] ? __pfx_watchdog+0x10/0x10 [ 243.647084][ T31] kthread+0x370/0x450 [ 243.647103][ T31] ? __pfx_kthread+0x10/0x10 [ 243.647126][ T31] ret_from_fork+0x754/0xd80 [ 243.647149][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 243.647174][ T31] ? __switch_to+0x7b4/0x1120 [ 243.647201][ T31] ? __pfx_kthread+0x10/0x10 [ 243.647223][ T31] ret_from_fork_asm+0x1a/0x30 [ 243.647264][ T31] [ 243.647271][ T31] Sending NMI from CPU 1 to CPUs 0: [ 243.766676][ C0] NMI backtrace for cpu 0 [ 243.766691][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 243.766714][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 243.766725][ C0] RIP: 0010:__switch_to+0x123/0x1120 [ 243.766754][ C0] Code: 1f 44 00 00 e8 8e 8c 5e 00 f3 49 0f ae c5 48 8d bd e0 18 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 18 0e 00 00 4c 89 ad e0 18 00 00 e8 5b 54 e5 09 48 8d bd e8 [ 243.766771][ C0] RSP: 0018:ffffc90000ab7a50 EFLAGS: 00000046 [ 243.766786][ C0] RAX: dffffc0000000000 RBX: ffff888140ef0000 RCX: ffffffff81aa11bb [ 243.766799][ C0] RDX: 1ffffffff1c931d4 RSI: ffffffff81aa1232 RDI: ffffffff8e498ea0 [ 243.766812][ C0] RBP: ffffffff8e4975c0 R08: 0000000000000001 R09: 0000000000000000 [ 243.766824][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 243.766834][ C0] R13: 0000000000000000 R14: ffff88801e6a2480 R15: ffffffff8e498e78 [ 243.766847][ C0] FS: 0000000000000000(0000) GS:ffff888124347000(0000) knlGS:0000000000000000 [ 243.766864][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.766877][ C0] CR2: 000056043dc4e168 CR3: 000000000e598000 CR4: 00000000003526f0 [ 243.766889][ C0] Call Trace: [ 243.888694][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 243.895537][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 243.904620][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 243.914646][ T31] Call Trace: [ 243.917900][ T31] [ 243.920805][ T31] dump_stack_lvl+0x100/0x190 [ 243.925465][ T31] vpanic+0x552/0x970 [ 243.929435][ T31] ? __pfx_vpanic+0x10/0x10 [ 243.933917][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 243.940066][ T31] panic+0xd1/0xe0 [ 243.943775][ T31] ? __pfx_panic+0x10/0x10 [ 243.948179][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 243.954327][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 243.960472][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 243.966601][ T31] ? watchdog.cold+0x198/0x1ca [ 243.971337][ T31] ? watchdog+0xd35/0x1050 [ 243.975733][ T31] watchdog.cold+0x1a9/0x1ca [ 243.980324][ T31] ? __pfx_watchdog+0x10/0x10 [ 243.984997][ T31] ? __kthread_parkme+0x18c/0x230 [ 243.990001][ T31] ? kthread+0x13a/0x450 [ 243.994215][ T31] ? __pfx_watchdog+0x10/0x10 [ 243.998887][ T31] kthread+0x370/0x450 [ 244.002930][ T31] ? __pfx_kthread+0x10/0x10 [ 244.007499][ T31] ret_from_fork+0x754/0xd80 [ 244.012078][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 244.017162][ T31] ? __switch_to+0x7b4/0x1120 [ 244.021815][ T31] ? __pfx_kthread+0x10/0x10 [ 244.026383][ T31] ret_from_fork_asm+0x1a/0x30 [ 244.031129][ T31] [ 244.034392][ T31] Kernel Offset: disabled [ 244.038696][ T31] Rebooting in 86400 seconds..