Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. 2026/04/19 12:35:05 ignoring optional flag "type"="gce" 2026/04/19 12:35:05 parsed 1 programs 2026/04/19 12:35:05 executed programs: 0 [ 104.087867][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.103798][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.104594][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.106438][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.107109][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.341197][ T5991] chnl_net:caif_netlink_parms(): no params data found [ 104.569897][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.570037][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.570168][ T5991] bridge_slave_0: entered allmulticast mode [ 104.571580][ T5991] bridge_slave_0: entered promiscuous mode [ 104.575020][ T5991] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.575147][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.575241][ T5991] bridge_slave_1: entered allmulticast mode [ 104.576594][ T5991] bridge_slave_1: entered promiscuous mode [ 104.712503][ T5991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.715460][ T5991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.852289][ T5991] team0: Port device team_slave_0 added [ 104.854190][ T5991] team0: Port device team_slave_1 added [ 104.973961][ T5991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.973977][ T5991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.973998][ T5991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.976208][ T5991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.976221][ T5991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.976244][ T5991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.145187][ T5991] hsr_slave_0: entered promiscuous mode [ 105.145922][ T5991] hsr_slave_1: entered promiscuous mode [ 106.228587][ T59] Bluetooth: hci0: command tx timeout [ 107.092363][ T5991] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.126682][ T5991] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.127484][ T5991] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.166592][ T5991] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.167381][ T5991] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.193018][ T5991] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.196650][ T5991] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.225821][ T5991] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.387065][ T5991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.415237][ T5991] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.443611][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.443753][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.455397][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.455598][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.877470][ T5991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.940659][ T5991] veth0_vlan: entered promiscuous mode [ 107.958190][ T5991] veth1_vlan: entered promiscuous mode [ 108.050147][ T5991] veth0_macvtap: entered promiscuous mode [ 108.065303][ T5991] veth1_macvtap: entered promiscuous mode [ 108.097900][ T5991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.137442][ T5991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.158342][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.165729][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.166772][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.166810][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.313372][ T59] Bluetooth: hci0: command tx timeout [ 108.633538][ T6093] nbd0: detected capacity change from 0 to 4398046511104 [ 109.369757][ T6093] block nbd0: shutting down sockets [ 109.420971][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.421086][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 109.424712][ T71] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.424744][ T71] Buffer I/O error on dev nbd0, logical block 0, async page read [ 109.447131][ T5993] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 2026/04/19 12:35:12 executed programs: 1 [ 109.447163][ T5993] Buffer I/O error on dev nbd0, logical block 0, async page read [ 109.447422][ T5993] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.447442][ T5993] Buffer I/O error on dev nbd0, logical block 0, async page read [ 109.447579][ T5993] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.447599][ T5993] Buffer I/O error on dev nbd0, logical block 0, async page read [ 109.464972][ T5993] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.465004][ T5993] Buffer I/O error on dev nbd0, logical block 0, async page read [ 109.473586][ T5993] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.473617][ T5993] Buffer I/O error on dev nbd0, logical block 0, async page read [ 109.486967][ T5993] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.486998][ T5993] Buffer I/O error on dev nbd0, logical block 0, async page read [ 109.487087][ T5993] ldm_validate_partition_table(): Disk read failed. [ 109.487154][ T5993] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.487175][ T5993] Buffer I/O error on dev nbd0, logical block 0, async page read [ 109.487380][ T5993] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.487402][ T5993] Buffer I/O error on dev nbd0, logical block 0, async page read [ 109.492693][ T5993] Dev nbd0: unable to read RDB block 0 [ 109.495328][ T5993] nbd0: unable to read partition table [ 109.650455][ T5993] ldm_validate_partition_table(): Disk read failed. [ 109.651019][ T5993] Dev nbd0: unable to read RDB block 0 [ 109.651838][ T5993] nbd0: unable to read partition table [ 110.079589][ T6138] nbd0: detected capacity change from 0 to 4398046511104 [ 110.388612][ T5118] Bluetooth: hci0: command tx timeout [ 110.749401][ T59] block nbd0: Receive control failed (result -104) [ 110.754994][ T6138] block nbd0: shutting down sockets [ 110.799890][ T5993] ldm_validate_partition_table(): Disk read failed. [ 110.803102][ T5993] Dev nbd0: unable to read RDB block 0 [ 110.803747][ T5993] nbd0: unable to read partition table [ 110.824690][ T5993] ldm_validate_partition_table(): Disk read failed. [ 110.825200][ T5993] Dev nbd0: unable to read RDB block 0 [ 110.827328][ T5993] nbd0: unable to read partition table [ 111.228602][ T6180] nbd0: detected capacity change from 0 to 4398046511104 [ 111.977610][ T59] block nbd0: Receive control failed (result -104) [ 112.468580][ T59] Bluetooth: hci0: command tx timeout [ 132.952235][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.952351][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.308818][ T32] block nbd0: Possible stuck request ffff888026f55780: control (read@0,4096B). Runtime 30 seconds 2026/04/19 12:36:08 executed programs: 5 [ 168.176784][ T5118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 168.178368][ T5118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 168.183177][ T5118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 168.200019][ T5118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.200862][ T5118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 168.432659][ T6201] chnl_net:caif_netlink_parms(): no params data found [ 168.700505][ T6201] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.700573][ T6201] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.700863][ T6201] bridge_slave_0: entered allmulticast mode [ 168.702321][ T6201] bridge_slave_0: entered promiscuous mode [ 168.707173][ T6201] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.707291][ T6201] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.707389][ T6201] bridge_slave_1: entered allmulticast mode [ 168.709977][ T6201] bridge_slave_1: entered promiscuous mode [ 168.862320][ T6201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.865878][ T6201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.022224][ T6201] team0: Port device team_slave_0 added [ 169.024124][ T6201] team0: Port device team_slave_1 added [ 169.160450][ T6201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.160465][ T6201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.160479][ T6201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.161764][ T6201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.161784][ T6201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.161799][ T6201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.315263][ T6201] hsr_slave_0: entered promiscuous mode [ 169.316069][ T6201] hsr_slave_1: entered promiscuous mode [ 169.316708][ T6201] debugfs: 'hsr0' already exists in 'hsr' [ 169.316787][ T6201] Cannot create hsr debugfs directory [ 169.933477][ T6201] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.141478][ T6201] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.228566][ T5118] Bluetooth: hci1: command tx timeout [ 170.344465][ T6201] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.557163][ T6201] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.777156][ T6201] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 170.814833][ T6201] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 170.815479][ T6201] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 170.834638][ T6201] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 170.835439][ T6201] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 170.871688][ T6201] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 170.872334][ T6201] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 170.915694][ T6201] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 171.002261][ T6201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.022342][ T6201] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.036066][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.036169][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.065243][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.065336][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.261155][ T6201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.321278][ T6201] veth0_vlan: entered promiscuous mode [ 171.326293][ T6201] veth1_vlan: entered promiscuous mode [ 171.364900][ T6201] veth0_macvtap: entered promiscuous mode [ 171.376468][ T6201] veth1_macvtap: entered promiscuous mode [ 171.399553][ T32] block nbd0: Possible stuck request ffff888026f55780: control (read@0,4096B). Runtime 60 seconds [ 171.402974][ T6201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.429730][ T6201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.462839][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.464055][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.464096][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.464129][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.308687][ T5118] Bluetooth: hci1: command tx timeout [ 174.388572][ T5118] Bluetooth: hci1: command tx timeout [ 174.749298][ T5168] udevd[5168]: worker [5993] /devices/virtual/block/nbd0 is taking a long time [ 176.470109][ T5118] Bluetooth: hci1: command tx timeout [ 194.394825][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.394869][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.468745][ T32] block nbd0: Possible stuck request ffff888026f55780: control (read@0,4096B). Runtime 90 seconds 2026/04/19 12:37:09 executed programs: 6 [ 227.188547][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 228.801893][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 228.804108][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 228.804846][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 228.805911][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 228.806931][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.054854][ T6229] chnl_net:caif_netlink_parms(): no params data found [ 229.310155][ T6229] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.310277][ T6229] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.310397][ T6229] bridge_slave_0: entered allmulticast mode [ 229.311807][ T6229] bridge_slave_0: entered promiscuous mode [ 229.313951][ T6229] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.314073][ T6229] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.314334][ T6229] bridge_slave_1: entered allmulticast mode [ 229.315661][ T6229] bridge_slave_1: entered promiscuous mode [ 229.503422][ T6229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.507376][ T6229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.661360][ T6229] team0: Port device team_slave_0 added [ 229.663346][ T6229] team0: Port device team_slave_1 added [ 229.780307][ T6229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.780324][ T6229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.780338][ T6229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.782034][ T6229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.782047][ T6229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.782065][ T6229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.975447][ T6229] hsr_slave_0: entered promiscuous mode [ 229.976169][ T6229] hsr_slave_1: entered promiscuous mode [ 229.976704][ T6229] debugfs: 'hsr0' already exists in 'hsr' [ 229.976723][ T6229] Cannot create hsr debugfs directory [ 230.575403][ T6229] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.793139][ T6229] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.868626][ T5118] Bluetooth: hci2: command tx timeout [ 230.993881][ T6229] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.203048][ T6229] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.447974][ T6229] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 231.492708][ T6229] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 231.493357][ T6229] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 231.514772][ T6229] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.515431][ T6229] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 231.552623][ T6229] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 231.553296][ T6229] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 231.568610][ T32] block nbd0: Possible stuck request ffff888026f55780: control (read@0,4096B). Runtime 120 seconds [ 231.584266][ T6229] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 231.667463][ T6229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.691784][ T6229] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.696466][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.696595][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.725490][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.725615][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.933942][ T6229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.988298][ T6229] veth0_vlan: entered promiscuous mode [ 232.002309][ T6229] veth1_vlan: entered promiscuous mode [ 232.029984][ T6229] veth0_macvtap: entered promiscuous mode [ 232.033231][ T6229] veth1_macvtap: entered promiscuous mode [ 232.047337][ T6229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.052069][ T6229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.116200][ T140] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.120677][ T140] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.121376][ T140] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.122332][ T140] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.948797][ T5118] Bluetooth: hci2: command tx timeout [ 235.038626][ T5118] Bluetooth: hci2: command tx timeout [ 237.109221][ T5118] Bluetooth: hci2: command tx timeout [ 255.832276][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.832376][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.628737][ T32] block nbd0: Possible stuck request ffff888026f55780: control (read@0,4096B). Runtime 150 seconds [ 262.229870][ T38] INFO: task syz-executor.0:6180 blocked for more than 143 seconds. [ 262.229906][ T38] Not tainted syzkaller #0 [ 262.229917][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 262.229926][ T38] task:syz-executor.0 state:D stack:27576 pid:6180 tgid:6178 ppid:5991 task_flags:0x400140 flags:0x00080803 [ 262.229998][ T38] Call Trace: [ 262.230006][ T38] [ 262.230020][ T38] __schedule+0x1681/0x54c0 [ 262.230098][ T38] ? __pfx___schedule+0x10/0x10 [ 262.230119][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 262.230164][ T38] rt_mutex_schedule+0x76/0xf0 [ 262.230196][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 262.230237][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 262.230268][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 262.230290][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 262.230310][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 262.230339][ T38] ? bdev_release+0x1af/0x660 [ 262.230380][ T38] ? bdev_release+0x1af/0x660 [ 262.230406][ T38] mutex_lock_nested+0x168/0x1d0 [ 262.230435][ T38] ? __pfx___fsnotify_parent+0x10/0x10 [ 262.230466][ T38] bdev_release+0x1af/0x660 [ 262.230501][ T38] ? __pfx_blkdev_release+0x10/0x10 [ 262.230521][ T38] blkdev_release+0x15/0x20 [ 262.230539][ T38] __fput+0x461/0xa70 [ 262.230572][ T38] task_work_run+0x1d9/0x270 [ 262.230600][ T38] ? __pfx_task_work_run+0x10/0x10 [ 262.230634][ T38] get_signal+0x11c3/0x1310 [ 262.230682][ T38] arch_do_signal_or_restart+0xbc/0x830 [ 262.230711][ T38] ? __pfx_task_work_add+0x10/0x10 [ 262.230735][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 262.230768][ T38] ? __fput_deferred+0x253/0x3e0 [ 262.230805][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.230827][ T38] exit_to_user_mode_loop+0x86/0x480 [ 262.230860][ T38] ? rcu_is_watching+0x15/0xb0 [ 262.230885][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.230906][ T38] do_syscall_64+0x33e/0xf80 [ 262.230929][ T38] ? trace_irq_disable+0x3b/0x140 [ 262.230947][ T38] ? clear_bhb_loop+0x40/0x90 [ 262.230974][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.230994][ T38] RIP: 0033:0x7f0c926bb0e9 [ 262.231018][ T38] RSP: 002b:00007f0c91e46078 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.231036][ T38] RAX: 0000000000000000 RBX: 00007f0c927ebf80 RCX: 00007f0c926bb0e9 [ 262.231049][ T38] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 262.231060][ T38] RBP: 00007f0c9273040f R08: 0000000000000000 R09: 0000000000000000 [ 262.231070][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.231189][ T38] R13: 000000000000000b R14: 00007f0c927ebf80 R15: 00007ffe9ddcdbf8 [ 262.231221][ T38] [ 262.231253][ T38] [ 262.231253][ T38] Showing all locks held in the system: [ 262.231264][ T38] 1 lock held by khungtaskd/38: [ 262.231275][ T38] #0: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 262.231347][ T38] 4 locks held by kworker/u8:12/2965: [ 262.231357][ T38] #0: ffff88801a08c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 262.231395][ T38] #1: ffffc9000f11fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 262.231424][ T38] #2: ffff8880b883b820 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 262.231453][ T38] #3: ffff8880b88246c8 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x53/0x880 [ 262.231484][ T38] 2 locks held by getty/5555: [ 262.231489][ T38] #0: ffff888028afd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 262.231517][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 262.231542][ T38] 1 lock held by udevd/5993: [ 262.231548][ T38] #0: ffff888026e384c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 262.231577][ T38] 1 lock held by syz-executor.0/6180: [ 262.231582][ T38] #0: ffff888026e384c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1af/0x660 [ 262.231611][ T38] 1 lock held by syz-executor.0/6220: [ 262.231617][ T38] #0: ffff888026e384c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 262.231645][ T38] 1 lock held by syz-executor.0/6248: [ 262.231651][ T38] #0: ffff888026e384c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 262.231678][ T38] [ 262.231681][ T38] ============================================= [ 262.231681][ T38] [ 262.231693][ T38] NMI backtrace for cpu 1 [ 262.231707][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 262.231718][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 262.231724][ T38] Call Trace: [ 262.231729][ T38] [ 262.231733][ T38] dump_stack_lvl+0xe8/0x150 [ 262.231752][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 262.231771][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 262.231796][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 262.231814][ T38] sys_info+0x135/0x170 [ 262.231828][ T38] watchdog+0xfd3/0x1030 [ 262.231842][ T38] ? watchdog+0x1c9/0x1030 [ 262.231854][ T38] kthread+0x388/0x470 [ 262.231866][ T38] ? __pfx_watchdog+0x10/0x10 [ 262.231878][ T38] ? __pfx_kthread+0x10/0x10 [ 262.231890][ T38] ret_from_fork+0x514/0xb70 [ 262.231908][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 262.231923][ T38] ? __switch_to+0xc79/0x1410 [ 262.231938][ T38] ? __pfx_kthread+0x10/0x10 [ 262.231950][ T38] ret_from_fork_asm+0x1a/0x30 [ 262.231968][ T38] [ 262.231972][ T38] Sending NMI from CPU 1 to CPUs 0: [ 262.232012][ C0] NMI backtrace for cpu 0 [ 262.232025][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 262.232047][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 262.232056][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 262.232077][ C0] Code: 2b 63 02 e9 43 c7 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 ca 1e 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 262.232090][ C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 00000242 [ 262.232103][ C0] RAX: 00000000000e9c9d RBX: ffffffff819980da RCX: 0000000080000001 [ 262.232114][ C0] RDX: 0000000000000001 RSI: ffffffff8d63094a RDI: ffffffff8ba73060 [ 262.232124][ C0] RBP: ffffffff8dc07eb0 R08: ffff8880b8833e9b R09: 1ffff110171067d3 [ 262.232135][ C0] R10: dffffc0000000000 R11: ffffed10171067d4 R12: 0000000000000000 [ 262.232146][ C0] R13: 1ffffffff1b9fdd8 R14: 0000000000000000 R15: 1ffffffff1b9fdd8 [ 262.232157][ C0] FS: 0000000000000000(0000) GS:ffff888126109000(0000) knlGS:0000000000000000 [ 262.232169][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.232180][ C0] CR2: 00005616a04cb660 CR3: 000000000ddb6000 CR4: 00000000003526f0 [ 262.232194][ C0] Call Trace: [ 262.232200][ C0] [ 262.232205][ C0] default_idle+0x9/0x20 [ 262.232225][ C0] default_idle_call+0x72/0xb0 [ 262.232245][ C0] do_idle+0x36a/0x5f0 [ 262.232266][ C0] ? lock_acquire+0x106/0x350 [ 262.232283][ C0] ? __pfx_do_idle+0x10/0x10 [ 262.232307][ C0] cpu_startup_entry+0x43/0x60 [ 262.232327][ C0] rest_init+0x2de/0x300 [ 262.232350][ C0] start_kernel+0x38a/0x3e0 [ 262.232378][ C0] x86_64_start_reservations+0x24/0x30 [ 262.232400][ C0] x86_64_start_kernel+0x143/0x1c0 [ 262.232421][ C0] common_startup_64+0x13e/0x147 [ 262.232446][ C0] [ 262.232996][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 262.233005][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 262.233017][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 262.233023][ T38] Call Trace: [ 262.233027][ T38] [ 262.233031][ T38] vpanic+0x56c/0xa60 [ 262.233045][ T38] ? __pfx___schedule+0x10/0x10 [ 262.233057][ T38] ? __pfx_vpanic+0x10/0x10 [ 262.233071][ T38] panic+0xc5/0xd0 [ 262.233081][ T38] ? __pfx_panic+0x10/0x10 [ 262.233092][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 262.233108][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 262.233126][ T38] watchdog+0x102c/0x1030 [ 262.233139][ T38] ? watchdog+0x1c9/0x1030 [ 262.233151][ T38] kthread+0x388/0x470 [ 262.233162][ T38] ? __pfx_watchdog+0x10/0x10 [ 262.233171][ T38] ? __pfx_kthread+0x10/0x10 [ 262.233183][ T38] ret_from_fork+0x514/0xb70 [ 262.233200][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 262.233216][ T38] ? __switch_to+0xc79/0x1410 [ 262.233230][ T38] ? __pfx_kthread+0x10/0x10 [ 262.233242][ T38] ret_from_fork_asm+0x1a/0x30 [ 262.233260][ T38] [ 262.233743][ T38] Kernel Offset: disabled