[ 88.019596][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 88.019613][ T30] audit: type=1400 audit(1756612010.818:100): avc: denied { search } for pid=5986 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.048335][ T30] audit: type=1400 audit(1756612010.818:101): avc: denied { search } for pid=5986 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.072374][ T30] audit: type=1400 audit(1756612010.818:102): avc: denied { search } for pid=5986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.095693][ T30] audit: type=1400 audit(1756612010.818:103): avc: denied { search } for pid=5986 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.119747][ T30] audit: type=1400 audit(1756612010.828:104): avc: denied { read open } for pid=5987 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.145470][ T30] audit: type=1400 audit(1756612010.828:105): avc: denied { getattr } for pid=5987 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.231212][ T30] audit: type=1400 audit(1756612011.028:106): avc: denied { add_name } for pid=5986 comm="dhcpcd-run-hook" name="resolv.conf.eth1.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.302884][ T30] audit: type=1400 audit(1756612011.108:107): avc: denied { remove_name } for pid=5997 comm="rm" name="resolv.conf.eth1.ipv4ll" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.247' (ED25519) to the list of known hosts. 2025/08/31 03:46:55 ignoring optional flag "type"="gce" 2025/08/31 03:46:56 parsed 1 programs [ 93.250869][ T30] audit: type=1400 audit(1756612016.048:108): avc: denied { getattr } for pid=6046 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 93.324019][ T30] audit: type=1400 audit(1756612016.128:109): avc: denied { unlink } for pid=6051 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2025/08/31 03:46:57 executed programs: 0 [ 94.629022][ T6051] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.672372][ T30] audit: type=1400 audit(1756612017.478:110): avc: denied { create } for pid=6058 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.684965][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.700829][ T30] audit: type=1400 audit(1756612017.498:111): avc: denied { ioctl } for pid=6058 comm="syz-executor.0" path="socket:[5938]" dev="sockfs" ino=5938 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.701194][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.734917][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.743313][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.751028][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.866063][ T6058] chnl_net:caif_netlink_parms(): no params data found [ 94.923363][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.930434][ T6058] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.937870][ T6058] bridge_slave_0: entered allmulticast mode [ 94.945058][ T6058] bridge_slave_0: entered promiscuous mode [ 94.954326][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.961451][ T6058] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.968685][ T6058] bridge_slave_1: entered allmulticast mode [ 94.975706][ T6058] bridge_slave_1: entered promiscuous mode [ 95.000488][ T6058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.012215][ T6058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.039130][ T6058] team0: Port device team_slave_0 added [ 95.046436][ T6058] team0: Port device team_slave_1 added [ 95.069291][ T6058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.076565][ T6058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.102875][ T6058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.114992][ T6058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.122098][ T6058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.148147][ T6058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.184022][ T6058] hsr_slave_0: entered promiscuous mode [ 95.190174][ T6058] hsr_slave_1: entered promiscuous mode [ 95.671543][ T6058] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.685058][ T6058] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.696260][ T6058] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.708173][ T6058] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.741750][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.748888][ T6058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.756358][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.763526][ T6058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.833798][ T6058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.853549][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.862813][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.885001][ T6058] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.898155][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.905295][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.919821][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.927004][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.980914][ T6058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.159724][ T6058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.214683][ T6058] veth0_vlan: entered promiscuous mode [ 96.229904][ T6058] veth1_vlan: entered promiscuous mode [ 96.264008][ T6058] veth0_macvtap: entered promiscuous mode [ 96.276733][ T6058] veth1_macvtap: entered promiscuous mode [ 96.302604][ T6058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.319950][ T6058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.337222][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.359320][ T2953] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.387793][ T2953] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.397925][ T2953] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.503780][ T6117] nbd0: detected capacity change from 0 to 2 [ 96.823056][ T5174] Bluetooth: hci0: command tx timeout [ 97.285111][ T51] block nbd0: Receive control failed (result -104) [ 98.902016][ T51] Bluetooth: hci0: command tx timeout [ 100.981787][ T51] Bluetooth: hci0: command tx timeout [ 103.062256][ T51] Bluetooth: hci0: command tx timeout [ 126.823317][ T56] block nbd0: Possible stuck request ffff888026aa0000: control (read@0,1024B). Runtime 30 seconds [ 132.584452][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.590767][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 2025/08/31 03:47:54 executed programs: 1 [ 152.476569][ T5174] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.484963][ T5174] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.492618][ T5174] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.500486][ T5174] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.508181][ T5174] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.621470][ T6257] chnl_net:caif_netlink_parms(): no params data found [ 152.675281][ T6257] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.682936][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.690027][ T6257] bridge_slave_0: entered allmulticast mode [ 152.696935][ T6257] bridge_slave_0: entered promiscuous mode [ 152.704557][ T6257] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.711752][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.718867][ T6257] bridge_slave_1: entered allmulticast mode [ 152.726027][ T6257] bridge_slave_1: entered promiscuous mode [ 152.749469][ T6257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.760297][ T6257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.787280][ T6257] team0: Port device team_slave_0 added [ 152.794823][ T6257] team0: Port device team_slave_1 added [ 152.817034][ T6257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.824045][ T6257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.850848][ T6257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.863252][ T6257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.870194][ T6257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.896467][ T6257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.933816][ T6257] hsr_slave_0: entered promiscuous mode [ 152.939875][ T6257] hsr_slave_1: entered promiscuous mode [ 152.945906][ T6257] debugfs: 'hsr0' already exists in 'hsr' [ 152.951716][ T6257] Cannot create hsr debugfs directory [ 153.032951][ T6257] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.091858][ T6257] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.170758][ T6257] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.253326][ T6257] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.351148][ T6257] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 153.364529][ T6257] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 153.374033][ T6257] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 153.383657][ T6257] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 153.405440][ T6257] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.412636][ T6257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.420002][ T6257] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.427158][ T6257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.474805][ T6257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.489621][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.498180][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.513269][ T6257] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.526465][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.533744][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.547006][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.554141][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.693262][ T6257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.730690][ T6257] veth0_vlan: entered promiscuous mode [ 153.740132][ T6257] veth1_vlan: entered promiscuous mode [ 153.765401][ T6257] veth0_macvtap: entered promiscuous mode [ 153.774309][ T6257] veth1_macvtap: entered promiscuous mode [ 153.787468][ T6257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.802016][ T6257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.815348][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.824519][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.838082][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.847742][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.592854][ T51] Bluetooth: hci1: command tx timeout [ 156.661860][ T51] Bluetooth: hci1: command tx timeout [ 156.900294][ T5224] udevd[5224]: worker [6053] /devices/virtual/block/nbd0 is taking a long time [ 156.912955][ T96] block nbd0: Possible stuck request ffff888026aa0000: control (read@0,1024B). Runtime 60 seconds [ 158.741801][ T51] Bluetooth: hci1: command tx timeout [ 160.821797][ T51] Bluetooth: hci1: command tx timeout [ 186.992490][ T96] block nbd0: Possible stuck request ffff888026aa0000: control (read@0,1024B). Runtime 90 seconds [ 194.024635][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.030957][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 2025/08/31 03:48:51 executed programs: 2 [ 209.920548][ T5174] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.928669][ T5174] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.936567][ T5174] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.945201][ T5174] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.954505][ T5174] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.074458][ T6286] chnl_net:caif_netlink_parms(): no params data found [ 210.131359][ T6286] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.138555][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.146113][ T6286] bridge_slave_0: entered allmulticast mode [ 210.153635][ T6286] bridge_slave_0: entered promiscuous mode [ 210.161525][ T6286] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.168754][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.176071][ T6286] bridge_slave_1: entered allmulticast mode [ 210.183093][ T6286] bridge_slave_1: entered promiscuous mode [ 210.208284][ T6286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.219520][ T6286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.246890][ T6286] team0: Port device team_slave_0 added [ 210.255191][ T6286] team0: Port device team_slave_1 added [ 210.277363][ T6286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.284973][ T6286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.310907][ T6286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.324280][ T6286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.331219][ T6286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.357886][ T6286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.394489][ T6286] hsr_slave_0: entered promiscuous mode [ 210.400627][ T6286] hsr_slave_1: entered promiscuous mode [ 210.406793][ T6286] debugfs: 'hsr0' already exists in 'hsr' [ 210.412588][ T6286] Cannot create hsr debugfs directory [ 210.501343][ T6286] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.565159][ T6286] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.640952][ T6286] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.693488][ T6286] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.800712][ T6286] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.812974][ T6286] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.822895][ T6286] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.832992][ T6286] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.854893][ T6286] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.862008][ T6286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.869322][ T6286] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.876434][ T6286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.919313][ T6286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.935117][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.944624][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.958689][ T6286] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.972559][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.979672][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.994925][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.002065][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.146020][ T6286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.181049][ T6286] veth0_vlan: entered promiscuous mode [ 211.190875][ T6286] veth1_vlan: entered promiscuous mode [ 211.215010][ T6286] veth0_macvtap: entered promiscuous mode [ 211.225040][ T6286] veth1_macvtap: entered promiscuous mode [ 211.241158][ T6286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.255961][ T6286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.268491][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.277677][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.288534][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.298371][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.031818][ T51] Bluetooth: hci2: command tx timeout [ 214.111755][ T51] Bluetooth: hci2: command tx timeout [ 216.191989][ T51] Bluetooth: hci2: command tx timeout [ 217.063597][ T56] block nbd0: Possible stuck request ffff888026aa0000: control (read@0,1024B). Runtime 120 seconds [ 218.261747][ T51] Bluetooth: hci2: command tx timeout [ 221.711774][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 247.141994][ T56] block nbd0: Possible stuck request ffff888026aa0000: control (read@0,1024B). Runtime 150 seconds [ 254.181863][ T31] INFO: task syz-executor.0:6117 blocked for more than 143 seconds. [ 254.189858][ T31] Not tainted syzkaller #0 [ 254.196679][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 254.205595][ T31] task:syz-executor.0 state:D stack:26584 pid:6117 tgid:6116 ppid:6058 task_flags:0x400140 flags:0x00004006 [ 254.217856][ T31] Call Trace: [ 254.221141][ T31] [ 254.224111][ T31] __schedule+0x1190/0x5de0 [ 254.228659][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 254.233645][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 254.238687][ T31] ? __pfx___schedule+0x10/0x10 [ 254.243574][ T31] ? find_held_lock+0x2b/0x80 [ 254.248255][ T31] ? schedule+0x2d7/0x3a0 [ 254.252701][ T31] ? bdev_release+0x15a/0x6d0 [ 254.257416][ T31] schedule+0xe7/0x3a0 [ 254.261465][ T31] schedule_preempt_disabled+0x13/0x30 [ 254.267113][ T31] __mutex_lock+0x81b/0x1060 [ 254.271738][ T31] ? bdev_release+0x15a/0x6d0 [ 254.276441][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 254.281468][ T31] ? find_held_lock+0x2b/0x80 [ 254.286225][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 254.291514][ T31] ? bdev_release+0x15a/0x6d0 [ 254.296264][ T31] bdev_release+0x15a/0x6d0 [ 254.300795][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 254.306089][ T31] blkdev_release+0x15/0x20 [ 254.310608][ T31] __fput+0x402/0xb70 [ 254.314667][ T31] task_work_run+0x14d/0x240 [ 254.319305][ T31] ? __pfx_task_work_run+0x10/0x10 [ 254.324478][ T31] get_signal+0x1d1/0x26d0 [ 254.328909][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 254.334868][ T31] ? __pfx_get_signal+0x10/0x10 [ 254.339724][ T31] ? task_work_add+0x1d5/0x360 [ 254.344634][ T31] ? __pfx_task_work_add+0x10/0x10 [ 254.349757][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 254.355886][ T31] arch_do_signal_or_restart+0x8f/0x7d0 [ 254.361442][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 254.367682][ T31] exit_to_user_mode_loop+0x84/0x110 [ 254.373080][ T31] do_syscall_64+0x3f6/0x4c0 [ 254.377675][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.383628][ T31] RIP: 0033:0x7f2415e7cae9 [ 254.388048][ T31] RSP: 002b:00007f24151fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.396506][ T31] RAX: 0000000000000000 RBX: 00007f2415f9bf80 RCX: 00007f2415e7cae9 [ 254.404644][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000006 [ 254.412776][ T31] RBP: 00007f2415ec847a R08: 0000000000000000 R09: 0000000000000000 [ 254.421112][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.429241][ T31] R13: 000000000000000b R14: 00007f2415f9bf80 R15: 00007ffddbe46e88 [ 254.437268][ T31] [ 254.440283][ T31] INFO: task syz-executor.0:6122 blocked for more than 143 seconds. [ 254.448311][ T31] Not tainted syzkaller #0 [ 254.453301][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 254.462020][ T31] task:syz-executor.0 state:D stack:28952 pid:6122 tgid:6116 ppid:6058 task_flags:0x400140 flags:0x00004006 [ 254.473996][ T31] Call Trace: [ 254.477260][ T31] [ 254.480182][ T31] __schedule+0x1190/0x5de0 [ 254.484812][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 254.489771][ T31] ? __pfx___schedule+0x10/0x10 [ 254.494683][ T31] ? find_held_lock+0x2b/0x80 [ 254.499462][ T31] ? schedule+0x2d7/0x3a0 [ 254.503830][ T31] ? bdev_open+0x41a/0xe40 [ 254.508250][ T31] schedule+0xe7/0x3a0 [ 254.512375][ T31] schedule_preempt_disabled+0x13/0x30 [ 254.517933][ T31] __mutex_lock+0x81b/0x1060 [ 254.522600][ T31] ? bdev_open+0x41a/0xe40 [ 254.527050][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 254.532474][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 254.537520][ T31] ? bdev_open+0x41a/0xe40 [ 254.542054][ T31] bdev_open+0x41a/0xe40 [ 254.546316][ T31] bdev_file_open_by_dev+0x182/0x210 [ 254.551637][ T31] disk_scan_partitions+0x1ed/0x320 [ 254.556847][ T31] blkdev_common_ioctl+0x5bd/0x2470 [ 254.562122][ T31] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 254.567780][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 254.573747][ T31] ? do_vfs_ioctl+0x128/0x14f0 [ 254.578521][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 254.583646][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 254.590555][ T31] blkdev_ioctl+0x1cb/0x6d0 [ 254.595302][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 254.600340][ T31] ? selinux_file_ioctl+0x180/0x270 [ 254.605608][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 254.610822][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 254.615882][ T31] __x64_sys_ioctl+0x18b/0x210 [ 254.620671][ T31] do_syscall_64+0xcd/0x4c0 [ 254.625240][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.631137][ T31] RIP: 0033:0x7f2415e7cae9 [ 254.635575][ T31] RSP: 002b:00007f24151dd0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.644019][ T31] RAX: ffffffffffffffda RBX: 00007f2415f9c050 RCX: 00007f2415e7cae9 [ 254.652067][ T31] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000003 [ 254.660054][ T31] RBP: 00007f2415ec847a R08: 0000000000000000 R09: 0000000000000000 [ 254.668184][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.676233][ T31] R13: 000000000000006e R14: 00007f2415f9c050 R15: 00007ffddbe46e88 [ 254.684281][ T31] [ 254.687316][ T31] [ 254.687316][ T31] Showing all locks held in the system: [ 254.695058][ T31] 1 lock held by khungtaskd/31: [ 254.699896][ T31] #0: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 254.709921][ T31] 2 locks held by getty/5623: [ 254.714653][ T31] #0: ffff8880324510a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 254.724446][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 254.734581][ T31] 1 lock held by udevd/6053: [ 254.739141][ T31] #0: ffff8881437e9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 254.748531][ T31] 1 lock held by syz-executor.0/6117: [ 254.753921][ T31] #0: ffff8881437e9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 254.763537][ T31] 1 lock held by syz-executor.0/6122: [ 254.768919][ T31] #0: ffff8881437e9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 254.778261][ T31] 1 lock held by syz-executor.0/6276: [ 254.783645][ T31] #0: ffff8881437e9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 254.793039][ T31] 1 lock held by syz-executor.0/6277: [ 254.798407][ T31] #0: ffff8881437e9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 254.807764][ T31] 1 lock held by syz-executor.0/6306: [ 254.813206][ T31] #0: ffff8881437e9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 254.822738][ T31] 1 lock held by syz-executor.0/6307: [ 254.828107][ T31] #0: ffff8881437e9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 254.837501][ T31] [ 254.839823][ T31] ============================================= [ 254.839823][ T31] [ 254.848254][ T31] NMI backtrace for cpu 0 [ 254.848278][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 254.848296][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.848306][ T31] Call Trace: [ 254.848313][ T31] [ 254.848320][ T31] dump_stack_lvl+0x116/0x1f0 [ 254.848344][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 254.848370][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 254.848397][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 254.848426][ T31] watchdog+0xf0e/0x1260 [ 254.848452][ T31] ? __pfx_watchdog+0x10/0x10 [ 254.848471][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 254.848494][ T31] ? __kthread_parkme+0x19e/0x250 [ 254.848519][ T31] ? __pfx_watchdog+0x10/0x10 [ 254.848537][ T31] kthread+0x3c5/0x780 [ 254.848557][ T31] ? __pfx_kthread+0x10/0x10 [ 254.848578][ T31] ? rcu_is_watching+0x12/0xc0 [ 254.848602][ T31] ? __pfx_kthread+0x10/0x10 [ 254.848623][ T31] ret_from_fork+0x5d4/0x6f0 [ 254.848641][ T31] ? __pfx_kthread+0x10/0x10 [ 254.848661][ T31] ret_from_fork_asm+0x1a/0x30 [ 254.848704][ T31] [ 254.848711][ T31] Sending NMI from CPU 0 to CPUs 1: [ 254.965115][ C1] NMI backtrace for cpu 1 [ 254.965132][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 254.965154][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.965165][ C1] RIP: 0010:__lock_acquire+0xbc1/0x1ce0 [ 254.965199][ C1] Code: 4c 8b 04 24 48 b8 eb 83 b5 80 46 86 c8 61 49 0f af c0 48 c1 e8 2d 48 89 04 24 4c 8d 3c c5 20 ca 1a 97 48 8b 04 c5 20 ca 1a 97 <48> 8d 48 f8 48 85 c0 48 0f 45 c1 eb 04 48 83 e8 08 48 85 c0 74 16 [ 254.965217][ C1] RSP: 0018:ffffc90000a08e20 EFLAGS: 00000806 [ 254.965232][ C1] RAX: ffffffff93dd9c08 RBX: ffff88801e69af30 RCX: 000000009f81a77d [ 254.965245][ C1] RDX: af3eabacdb665ee4 RSI: 0000000003374fc1 RDI: ffff88801e69af58 [ 254.965257][ C1] RBP: 0000000000000000 R08: af3eabacdb665ee4 R09: 0000000000000001 [ 254.965269][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801e69af58 [ 254.965280][ C1] R13: ffff88801e69a440 R14: 000000003e068aaa R15: ffffffff97510f48 [ 254.965293][ C1] FS: 0000000000000000(0000) GS:ffff8881247b8000(0000) knlGS:0000000000000000 [ 254.965310][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.965323][ C1] CR2: 000056552825a168 CR3: 000000000e380000 CR4: 00000000003526f0 [ 254.965335][ C1] Call Trace: [ 254.965342][ C1] [ 254.965351][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 254.965381][ C1] lock_acquire+0x179/0x350 [ 254.965408][ C1] ? tick_nohz_start_idle+0xd5/0x2a0 [ 254.965435][ C1] ? lock_acquire+0x179/0x350 [ 254.965464][ C1] ktime_get+0x80/0x310 [ 254.965489][ C1] ? tick_nohz_start_idle+0xd5/0x2a0 [ 254.965515][ C1] tick_nohz_start_idle+0xd5/0x2a0 [ 254.965541][ C1] tick_nohz_irq_exit+0x7e/0xc0 [ 254.965569][ C1] irq_exit_rcu+0x9/0x30 [ 254.965594][ C1] sysvec_call_function_single+0xa4/0xc0 [ 254.965615][ C1] [ 254.965621][ C1] [ 254.965627][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 254.965648][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 254.965669][ C1] Code: 0c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 12 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 254.965686][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 254.965700][ C1] RAX: 00000000000df6fb RBX: 0000000000000001 RCX: ffffffff8b93fc29 [ 254.965711][ C1] RDX: 0000000000000000 RSI: ffffffff8de50a38 RDI: ffffffff8c162980 [ 254.965723][ C1] RBP: ffffed1003cd3488 R08: 0000000000000001 R09: ffffed10170a6655 [ 254.965735][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 254.965746][ C1] R13: ffff88801e69a440 R14: ffffffff90ab5290 R15: 0000000000000000 [ 254.965762][ C1] ? ct_kernel_exit+0x139/0x190 [ 254.965785][ C1] default_idle+0x13/0x20 [ 254.965807][ C1] default_idle_call+0x6d/0xb0 [ 254.965830][ C1] do_idle+0x391/0x510 [ 254.965852][ C1] ? __pfx_do_idle+0x10/0x10 [ 254.965875][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 254.965897][ C1] cpu_startup_entry+0x4f/0x60 [ 254.965920][ C1] start_secondary+0x21d/0x2b0 [ 254.965947][ C1] ? __pfx_start_secondary+0x10/0x10 [ 254.965981][ C1] common_startup_64+0x13e/0x148 [ 254.966008][ C1] [ 255.272325][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 255.279348][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 255.288712][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 255.298783][ T31] Call Trace: [ 255.302065][ T31] [ 255.305026][ T31] dump_stack_lvl+0x3d/0x1f0 [ 255.309611][ T31] vpanic+0x6e8/0x7a0 [ 255.313658][ T31] ? __pfx_vpanic+0x10/0x10 [ 255.318171][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 255.324160][ T31] panic+0xca/0xd0 [ 255.327880][ T31] ? __pfx_panic+0x10/0x10 [ 255.332381][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 255.337741][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 255.343885][ T31] ? watchdog+0xd78/0x1260 [ 255.348293][ T31] ? watchdog+0xd6b/0x1260 [ 255.352694][ T31] watchdog+0xd89/0x1260 [ 255.356922][ T31] ? __pfx_watchdog+0x10/0x10 [ 255.361670][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 255.366857][ T31] ? __kthread_parkme+0x19e/0x250 [ 255.371869][ T31] ? __pfx_watchdog+0x10/0x10 [ 255.376551][ T31] kthread+0x3c5/0x780 [ 255.380656][ T31] ? __pfx_kthread+0x10/0x10 [ 255.385258][ T31] ? rcu_is_watching+0x12/0xc0 [ 255.390109][ T31] ? __pfx_kthread+0x10/0x10 [ 255.394682][ T31] ret_from_fork+0x5d4/0x6f0 [ 255.399253][ T31] ? __pfx_kthread+0x10/0x10 [ 255.403855][ T31] ret_from_fork_asm+0x1a/0x30 [ 255.408737][ T31] [ 255.412008][ T31] Kernel Offset: disabled [ 255.416548][ T31] Rebooting in 86400 seconds..