[ 86.759154][ T1213] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts. 2025/05/27 01:25:21 ignoring optional flag "sandboxArg"="0" 2025/05/27 01:25:21 ignoring optional flag "type"="gce" 2025/05/27 01:25:21 parsed 1 programs 2025/05/27 01:25:21 executed programs: 0 [ 90.404437][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.412501][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.420806][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.429553][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.438375][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.574867][ T6157] chnl_net:caif_netlink_parms(): no params data found [ 90.643065][ T6157] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.650256][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.657701][ T6157] bridge_slave_0: entered allmulticast mode [ 90.664660][ T6157] bridge_slave_0: entered promiscuous mode [ 90.672324][ T6157] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.679731][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.686958][ T6157] bridge_slave_1: entered allmulticast mode [ 90.693900][ T6157] bridge_slave_1: entered promiscuous mode [ 90.721475][ T6157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.733217][ T6157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.764602][ T6157] team0: Port device team_slave_0 added [ 90.772719][ T6157] team0: Port device team_slave_1 added [ 90.799050][ T6157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.806024][ T6157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.833123][ T6157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.845170][ T6157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.852165][ T6157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.878174][ T6157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.918404][ T6157] hsr_slave_0: entered promiscuous mode [ 90.924684][ T6157] hsr_slave_1: entered promiscuous mode [ 91.574979][ T6157] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.588020][ T6157] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.600058][ T6157] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.612924][ T6157] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.711891][ T6157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.737712][ T6157] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.753647][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.760877][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.786365][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.793582][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.052557][ T6157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.105011][ T6157] veth0_vlan: entered promiscuous mode [ 92.125066][ T6157] veth1_vlan: entered promiscuous mode [ 92.170338][ T6157] veth0_macvtap: entered promiscuous mode [ 92.181849][ T6157] veth1_macvtap: entered promiscuous mode [ 92.207475][ T6157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.223710][ T6157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.242815][ T6157] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.256079][ T6157] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.264964][ T6157] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.277873][ T6157] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.366633][ T4546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.377467][ T4546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.415314][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.423296][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.517901][ T5156] Bluetooth: hci0: command tx timeout [ 92.569184][ T6213] nbd0: detected capacity change from 0 to 18 [ 93.320009][ T5156] block nbd0: Receive control failed (result -104) [ 94.597175][ T5156] Bluetooth: hci0: command tx timeout [ 96.677388][ T5156] Bluetooth: hci0: command tx timeout [ 98.757379][ T5156] Bluetooth: hci0: command tx timeout [ 122.607294][ T54] block nbd0: Possible stuck request ffff888025387000: control (read@0,4096B). Runtime 30 seconds [ 132.840273][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.846583][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 2025/05/27 01:26:18 executed programs: 1 [ 148.504825][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 148.513603][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 148.522232][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 148.531588][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 148.539527][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.679530][ T6517] chnl_net:caif_netlink_parms(): no params data found [ 148.745466][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.752686][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.760429][ T6517] bridge_slave_0: entered allmulticast mode [ 148.767675][ T6517] bridge_slave_0: entered promiscuous mode [ 148.775229][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.782579][ T6517] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.789947][ T6517] bridge_slave_1: entered allmulticast mode [ 148.797244][ T6517] bridge_slave_1: entered promiscuous mode [ 148.826915][ T6517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.838898][ T6517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.871458][ T6517] team0: Port device team_slave_0 added [ 148.879549][ T6517] team0: Port device team_slave_1 added [ 148.906680][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.913996][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.940508][ T6517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.952525][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.959716][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.985835][ T6517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.026560][ T6517] hsr_slave_0: entered promiscuous mode [ 149.032914][ T6517] hsr_slave_1: entered promiscuous mode [ 149.039501][ T6517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.047314][ T6517] Cannot create hsr debugfs directory [ 149.148982][ T6517] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.229214][ T6517] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.277967][ T6517] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.341038][ T6517] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.431815][ T6517] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 149.446270][ T6517] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 149.456524][ T6517] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 149.466084][ T6517] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 149.489976][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.497369][ T6517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.505117][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.512278][ T6517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.564993][ T6517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.580641][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.590628][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.606518][ T6517] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.623924][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.631116][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.640104][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.647340][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.812306][ T6517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.851236][ T6517] veth0_vlan: entered promiscuous mode [ 149.863480][ T6517] veth1_vlan: entered promiscuous mode [ 149.891910][ T6517] veth0_macvtap: entered promiscuous mode [ 149.901773][ T6517] veth1_macvtap: entered promiscuous mode [ 149.919562][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.932822][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.945740][ T6517] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.954947][ T6517] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.963893][ T6517] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.972730][ T6517] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.030347][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.045277][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.072978][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.081325][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.597990][ T50] Bluetooth: hci1: command tx timeout [ 152.677401][ T54] block nbd0: Possible stuck request ffff888025387000: control (read@0,4096B). Runtime 60 seconds [ 152.677457][ T50] Bluetooth: hci1: command tx timeout [ 153.122749][ T5206] udevd[5206]: worker [6146] /devices/virtual/block/nbd0 is taking a long time [ 154.768282][ T50] Bluetooth: hci1: command tx timeout [ 156.837703][ T50] Bluetooth: hci1: command tx timeout [ 182.765087][ T54] block nbd0: Possible stuck request ffff888025387000: control (read@0,4096B). Runtime 90 seconds [ 194.290015][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.296418][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 2025/05/27 01:27:16 executed programs: 2 [ 206.155780][ T5156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 206.164072][ T5156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 206.173107][ T5156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 206.181882][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 206.190207][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 206.353226][ T6539] chnl_net:caif_netlink_parms(): no params data found [ 206.421133][ T6539] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.428455][ T6539] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.435806][ T6539] bridge_slave_0: entered allmulticast mode [ 206.443244][ T6539] bridge_slave_0: entered promiscuous mode [ 206.453169][ T6539] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.460420][ T6539] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.468423][ T6539] bridge_slave_1: entered allmulticast mode [ 206.475532][ T6539] bridge_slave_1: entered promiscuous mode [ 206.506685][ T6539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.519283][ T6539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.552861][ T6539] team0: Port device team_slave_0 added [ 206.562659][ T6539] team0: Port device team_slave_1 added [ 206.590184][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.597782][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.624082][ T6539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.636319][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.643439][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.671014][ T6539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.715825][ T6539] hsr_slave_0: entered promiscuous mode [ 206.722238][ T6539] hsr_slave_1: entered promiscuous mode [ 206.728553][ T6539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.736128][ T6539] Cannot create hsr debugfs directory [ 206.842130][ T6539] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.941410][ T6539] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.990642][ T6539] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.080990][ T6539] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.201788][ T6539] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 207.211326][ T6539] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 207.220972][ T6539] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 207.232572][ T6539] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 207.259355][ T6539] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.266633][ T6539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.274127][ T6539] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.281257][ T6539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.318671][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.326517][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.354223][ T6539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.375411][ T6539] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.387821][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.394956][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.408938][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.416062][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.582795][ T6539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.623191][ T6539] veth0_vlan: entered promiscuous mode [ 207.635461][ T6539] veth1_vlan: entered promiscuous mode [ 207.662323][ T6539] veth0_macvtap: entered promiscuous mode [ 207.672562][ T6539] veth1_macvtap: entered promiscuous mode [ 207.691675][ T6539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.705280][ T6539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.717336][ T6539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.726063][ T6539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.735712][ T6539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.747167][ T6539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.804723][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.813290][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.840119][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.848473][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.276972][ T50] Bluetooth: hci2: command tx timeout [ 210.367052][ T50] Bluetooth: hci2: command tx timeout [ 212.437550][ T50] Bluetooth: hci2: command tx timeout [ 212.848108][ T25] block nbd0: Possible stuck request ffff888025387000: control (read@0,4096B). Runtime 120 seconds [ 214.517125][ T50] Bluetooth: hci2: command tx timeout [ 216.836949][ T5156] Bluetooth: hci0: command 0x0406 tx timeout [ 242.917297][ T54] block nbd0: Possible stuck request ffff888025387000: control (read@0,4096B). Runtime 150 seconds [ 251.237144][ T31] INFO: task syz-executor.0:6213 blocked for more than 143 seconds. [ 251.245181][ T31] Not tainted 6.15.0-rc7-next-20250526-syzkaller-13629-g3be1a7a31fbd #0 [ 251.254144][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 251.262850][ T31] task:syz-executor.0 state:D stack:27896 pid:6213 tgid:6211 ppid:6157 task_flags:0x400140 flags:0x00004006 [ 251.274872][ T31] Call Trace: [ 251.278197][ T31] [ 251.281147][ T31] __schedule+0x16f5/0x4d00 [ 251.285725][ T31] ? __lock_acquire+0xab9/0xd20 [ 251.290683][ T31] ? schedule+0x165/0x360 [ 251.295027][ T31] ? __pfx___schedule+0x10/0x10 [ 251.299937][ T31] ? schedule+0x91/0x360 [ 251.305043][ T31] schedule+0x165/0x360 [ 251.309297][ T31] schedule_preempt_disabled+0x13/0x30 [ 251.314857][ T31] __mutex_lock+0x724/0xe80 [ 251.319569][ T31] ? __mutex_lock+0x51b/0xe80 [ 251.324268][ T31] ? bdev_release+0x1a9/0x650 [ 251.329082][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 251.334124][ T31] ? __asan_memset+0x22/0x50 [ 251.338857][ T31] ? __pfx___fsnotify_parent+0x10/0x10 [ 251.344380][ T31] ? do_raw_spin_lock+0x121/0x290 [ 251.349511][ T31] bdev_release+0x1a9/0x650 [ 251.354046][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 251.359313][ T31] blkdev_release+0x15/0x20 [ 251.363860][ T31] __fput+0x44c/0xa70 [ 251.367990][ T31] task_work_run+0x1d4/0x260 [ 251.372626][ T31] ? __pfx_task_work_run+0x10/0x10 [ 251.377794][ T31] get_signal+0x11c5/0x1310 [ 251.382324][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 251.387897][ T31] ? __pfx_task_work_add+0x10/0x10 [ 251.393019][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 251.401904][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 251.407916][ T31] ? __fget_files+0x2a/0x420 [ 251.412611][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 251.418366][ T31] exit_to_user_mode_loop+0x75/0x110 [ 251.423678][ T31] do_syscall_64+0x2bd/0x3b0 [ 251.428300][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.433504][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.439594][ T31] ? clear_bhb_loop+0x60/0xb0 [ 251.444286][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.450220][ T31] RIP: 0033:0x7ffa6b67c859 [ 251.454650][ T31] RSP: 002b:00007ffa6c34b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.463107][ T31] RAX: 0000000000000000 RBX: 00007ffa6b79bf80 RCX: 00007ffa6b67c859 [ 251.471130][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 251.479571][ T31] RBP: 00007ffa6b6d8ad0 R08: 0000000000000000 R09: 0000000000000000 [ 251.487707][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.495699][ T31] R13: 000000000000000b R14: 00007ffa6b79bf80 R15: 00007ffc3d0ef9c8 [ 251.504219][ T31] [ 251.508393][ T31] [ 251.508393][ T31] Showing all locks held in the system: [ 251.516121][ T31] 1 lock held by khungtaskd/31: [ 251.521268][ T31] #0: ffffffff8e13f080 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 251.531265][ T31] 3 locks held by kworker/u8:9/4546: [ 251.536561][ T31] #0: ffff8880b873b8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 251.546664][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x318/0x6d0 [ 251.558302][ T31] #2: ffff8880b8725958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 251.567325][ T31] 2 locks held by getty/5597: [ 251.572000][ T31] #0: ffff888034aaa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 251.581889][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 251.592073][ T31] 1 lock held by udevd/6146: [ 251.596644][ T31] #0: ffff88802529d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 251.605982][ T31] 1 lock held by syz-executor.0/6213: [ 251.612073][ T31] #0: ffff88802529d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 251.621781][ T31] 1 lock held by syz-executor.0/6530: [ 251.627210][ T31] #0: ffff88802529d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 251.636656][ T31] 1 lock held by syz-executor.0/6553: [ 251.642163][ T31] #0: ffff88802529d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 251.651564][ T31] [ 251.653893][ T31] ============================================= [ 251.653893][ T31] [ 251.662361][ T31] NMI backtrace for cpu 0 [ 251.662383][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-next-20250526-syzkaller-13629-g3be1a7a31fbd #0 PREEMPT(full) [ 251.662457][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 251.662467][ T31] Call Trace: [ 251.662473][ T31] [ 251.662481][ T31] dump_stack_lvl+0x189/0x250 [ 251.662498][ T31] ? __wake_up_klogd+0xd9/0x110 [ 251.662518][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.662533][ T31] ? __pfx__printk+0x10/0x10 [ 251.662562][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 251.662582][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 251.662596][ T31] ? _printk+0xcf/0x120 [ 251.662617][ T31] ? __pfx__printk+0x10/0x10 [ 251.662635][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 251.662654][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 251.662668][ T31] watchdog+0xfee/0x1030 [ 251.662759][ T31] ? watchdog+0x1de/0x1030 [ 251.662789][ T31] kthread+0x711/0x8a0 [ 251.662810][ T31] ? __pfx_watchdog+0x10/0x10 [ 251.662830][ T31] ? __pfx_kthread+0x10/0x10 [ 251.662849][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 251.662866][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.662884][ T31] ? __pfx_kthread+0x10/0x10 [ 251.662902][ T31] ret_from_fork+0x3fc/0x770 [ 251.662927][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 251.662953][ T31] ? __switch_to_asm+0x39/0x70 [ 251.662969][ T31] ? __switch_to_asm+0x33/0x70 [ 251.662984][ T31] ? __pfx_kthread+0x10/0x10 [ 251.663003][ T31] ret_from_fork_asm+0x1a/0x30 [ 251.663031][ T31] [ 251.663037][ T31] Sending NMI from CPU 0 to CPUs 1: [ 251.823433][ C1] NMI backtrace for cpu 1 [ 251.823448][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc7-next-20250526-syzkaller-13629-g3be1a7a31fbd #0 PREEMPT(full) [ 251.823467][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 251.823476][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 251.823498][ C1] Code: c3 d5 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 45 23 00 f3 0f 1e fa fb f4 98 d5 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 251.823511][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 251.823525][ C1] RAX: 2a1355790bfa9f00 RBX: ffffffff81974a08 RCX: 2a1355790bfa9f00 [ 251.823537][ C1] RDX: 0000000000000001 RSI: ffffffff8d980d66 RDI: ffffffff8be29300 [ 251.823547][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 251.823558][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa12ef0 [ 251.823569][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003adab40 [ 251.823579][ C1] FS: 0000000000000000(0000) GS:ffff888125d56000(0000) knlGS:0000000000000000 [ 251.823591][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.823601][ C1] CR2: 00005606ad116168 CR3: 000000000df38000 CR4: 00000000003526f0 [ 251.823615][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 251.823630][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 251.823639][ C1] Call Trace: [ 251.823646][ C1] [ 251.823652][ C1] default_idle+0x13/0x20 [ 251.823670][ C1] default_idle_call+0x74/0xb0 [ 251.823689][ C1] do_idle+0x1e8/0x510 [ 251.823706][ C1] ? __pfx_do_idle+0x10/0x10 [ 251.823725][ C1] ? do_idle+0x4f1/0x510 [ 251.823740][ C1] cpu_startup_entry+0x44/0x60 [ 251.823753][ C1] start_secondary+0x101/0x110 [ 251.823771][ C1] common_startup_64+0x13e/0x147 [ 251.823795][ C1] [ 251.824480][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 252.014854][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-next-20250526-syzkaller-13629-g3be1a7a31fbd #0 PREEMPT(full) [ 252.027861][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 252.037915][ T31] Call Trace: [ 252.041191][ T31] [ 252.044403][ T31] dump_stack_lvl+0x99/0x250 [ 252.049002][ T31] ? __asan_memcpy+0x40/0x70 [ 252.053592][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.058860][ T31] ? __pfx__printk+0x10/0x10 [ 252.063440][ T31] panic+0x2db/0x790 [ 252.067416][ T31] ? __pfx_panic+0x10/0x10 [ 252.071827][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 252.077622][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 252.082977][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 252.089287][ T31] watchdog+0x102d/0x1030 [ 252.093605][ T31] ? watchdog+0x1de/0x1030 [ 252.098009][ T31] kthread+0x711/0x8a0 [ 252.102062][ T31] ? __pfx_watchdog+0x10/0x10 [ 252.107073][ T31] ? __pfx_kthread+0x10/0x10 [ 252.111650][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 252.116835][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.122041][ T31] ? __pfx_kthread+0x10/0x10 [ 252.126616][ T31] ret_from_fork+0x3fc/0x770 [ 252.131203][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 252.136389][ T31] ? __switch_to_asm+0x39/0x70 [ 252.141134][ T31] ? __switch_to_asm+0x33/0x70 [ 252.146013][ T31] ? __pfx_kthread+0x10/0x10 [ 252.150600][ T31] ret_from_fork_asm+0x1a/0x30 [ 252.155355][ T31] [ 252.158651][ T31] Kernel Offset: disabled [ 252.162968][ T31] Rebooting in 86400 seconds..