Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. 2025/10/14 10:28:54 ignoring optional flag "type"="gce" 2025/10/14 10:28:54 parsed 1 programs 2025/10/14 10:28:54 executed programs: 0 [ 95.253126][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.261699][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.269653][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.278147][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.285850][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.418956][ T6018] chnl_net:caif_netlink_parms(): no params data found [ 95.488166][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.495508][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.502827][ T6018] bridge_slave_0: entered allmulticast mode [ 95.509848][ T6018] bridge_slave_0: entered promiscuous mode [ 95.517722][ T6018] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.524999][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.532970][ T6018] bridge_slave_1: entered allmulticast mode [ 95.540113][ T6018] bridge_slave_1: entered promiscuous mode [ 95.568436][ T6018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.580096][ T6018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.611214][ T6018] team0: Port device team_slave_0 added [ 95.618710][ T6018] team0: Port device team_slave_1 added [ 95.645350][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.652469][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.679622][ T6018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.691766][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.698798][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.724813][ T6018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.765717][ T6018] hsr_slave_0: entered promiscuous mode [ 95.772073][ T6018] hsr_slave_1: entered promiscuous mode [ 96.236348][ T6018] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.246399][ T6018] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.259307][ T6018] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.270203][ T6018] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.311804][ T6018] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.319121][ T6018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.326658][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.333894][ T6018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.413144][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.422864][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.452863][ T6018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.478296][ T6018] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.492992][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.500207][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.528916][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.536145][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.786670][ T6018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.849799][ T6018] veth0_vlan: entered promiscuous mode [ 96.866699][ T6018] veth1_vlan: entered promiscuous mode [ 96.912422][ T6018] veth0_macvtap: entered promiscuous mode [ 96.924186][ T6018] veth1_macvtap: entered promiscuous mode [ 96.948163][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.965668][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.985802][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.995587][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.016136][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.037094][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.170041][ T6076] nbd0: detected capacity change from 0 to 18 [ 97.371085][ T52] Bluetooth: hci0: command tx timeout [ 97.948608][ T5146] block nbd0: Receive control failed (result -104) [ 99.450015][ T5146] Bluetooth: hci0: command tx timeout [ 101.530477][ T5146] Bluetooth: hci0: command tx timeout [ 103.610129][ T5146] Bluetooth: hci0: command tx timeout [ 127.771639][ T25] block nbd0: Possible stuck request ffff888025940000: control (read@0,4096B). Runtime 30 seconds [ 132.893010][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.899415][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 2025/10/14 10:29:51 executed programs: 1 [ 153.129708][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.138321][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.146270][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.154667][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.162374][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.297620][ T6216] chnl_net:caif_netlink_parms(): no params data found [ 153.362017][ T6216] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.369128][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.377280][ T6216] bridge_slave_0: entered allmulticast mode [ 153.384484][ T6216] bridge_slave_0: entered promiscuous mode [ 153.392299][ T6216] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.399423][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.406736][ T6216] bridge_slave_1: entered allmulticast mode [ 153.414082][ T6216] bridge_slave_1: entered promiscuous mode [ 153.442738][ T6216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.454456][ T6216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.484519][ T6216] team0: Port device team_slave_0 added [ 153.493069][ T6216] team0: Port device team_slave_1 added [ 153.519171][ T6216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.527054][ T6216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.553155][ T6216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.565182][ T6216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.573068][ T6216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.599076][ T6216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.640541][ T6216] hsr_slave_0: entered promiscuous mode [ 153.646843][ T6216] hsr_slave_1: entered promiscuous mode [ 153.653446][ T6216] debugfs: 'hsr0' already exists in 'hsr' [ 153.659234][ T6216] Cannot create hsr debugfs directory [ 153.755902][ T6216] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.810716][ T6216] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.871840][ T6216] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.963022][ T6216] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.068257][ T6216] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 154.078000][ T6216] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 154.088650][ T6216] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 154.098338][ T6216] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 154.124311][ T6216] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.131451][ T6216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.138793][ T6216] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.145982][ T6216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.195684][ T6216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.212424][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.220413][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.236830][ T6216] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.250901][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.258037][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.274133][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.281322][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.318571][ T6216] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.329399][ T6216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.456095][ T6216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.499731][ T6216] veth0_vlan: entered promiscuous mode [ 154.512085][ T6216] veth1_vlan: entered promiscuous mode [ 154.538367][ T6216] veth0_macvtap: entered promiscuous mode [ 154.547942][ T6216] veth1_macvtap: entered promiscuous mode [ 154.566414][ T6216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.581932][ T6216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.596802][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.606665][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.616598][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.626817][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.210148][ T5146] Bluetooth: hci1: command tx timeout [ 157.289981][ T5146] Bluetooth: hci1: command tx timeout [ 157.690229][ T5196] udevd[5196]: worker [6027] /devices/virtual/block/nbd0 is taking a long time [ 157.851139][ T56] block nbd0: Possible stuck request ffff888025940000: control (read@0,4096B). Runtime 60 seconds [ 159.370417][ T5146] Bluetooth: hci1: command tx timeout [ 161.450064][ T5146] Bluetooth: hci1: command tx timeout [ 187.931698][ T56] block nbd0: Possible stuck request ffff888025940000: control (read@0,4096B). Runtime 90 seconds [ 194.332885][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.339215][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 2025/10/14 10:30:49 executed programs: 2 [ 210.716445][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.724663][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.733308][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.742019][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.749629][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.891191][ T6244] chnl_net:caif_netlink_parms(): no params data found [ 210.958630][ T6244] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.966014][ T6244] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.973441][ T6244] bridge_slave_0: entered allmulticast mode [ 210.981127][ T6244] bridge_slave_0: entered promiscuous mode [ 210.988813][ T6244] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.996002][ T6244] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.003289][ T6244] bridge_slave_1: entered allmulticast mode [ 211.010623][ T6244] bridge_slave_1: entered promiscuous mode [ 211.038996][ T6244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.051876][ T6244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.081822][ T6244] team0: Port device team_slave_0 added [ 211.089472][ T6244] team0: Port device team_slave_1 added [ 211.115051][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.123188][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.149819][ T6244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.162557][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.169531][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.196879][ T6244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.236433][ T6244] hsr_slave_0: entered promiscuous mode [ 211.243236][ T6244] hsr_slave_1: entered promiscuous mode [ 211.249310][ T6244] debugfs: 'hsr0' already exists in 'hsr' [ 211.255113][ T6244] Cannot create hsr debugfs directory [ 211.354064][ T6244] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.413038][ T6244] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.471557][ T6244] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.552716][ T6244] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.674016][ T6244] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 211.685132][ T6244] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 211.696615][ T6244] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 211.710440][ T6244] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 211.734447][ T6244] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.741585][ T6244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.749040][ T6244] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.756209][ T6244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.806731][ T6244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.822642][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.831653][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.847688][ T6244] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.862707][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.869923][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.884913][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.892107][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.048204][ T6244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.092603][ T6244] veth0_vlan: entered promiscuous mode [ 212.105552][ T6244] veth1_vlan: entered promiscuous mode [ 212.135003][ T6244] veth0_macvtap: entered promiscuous mode [ 212.144925][ T6244] veth1_macvtap: entered promiscuous mode [ 212.161584][ T6244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.177877][ T6244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.192108][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.202019][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.212052][ T1148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.220940][ T1148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.810434][ T5146] Bluetooth: hci2: command tx timeout [ 214.890073][ T5146] Bluetooth: hci2: command tx timeout [ 216.970163][ T5146] Bluetooth: hci2: command tx timeout [ 218.011843][ T56] block nbd0: Possible stuck request ffff888025940000: control (read@0,4096B). Runtime 120 seconds [ 219.050087][ T5146] Bluetooth: hci2: command tx timeout [ 222.010046][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 248.090427][ T56] block nbd0: Possible stuck request ffff888025940000: control (read@0,4096B). Runtime 150 seconds [ 255.773177][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.779755][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.410174][ T31] INFO: task syz-executor.0:6076 blocked for more than 143 seconds. [ 256.418200][ T31] Not tainted syzkaller #0 [ 256.423208][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 256.432048][ T31] task:syz-executor.0 state:D stack:27864 pid:6076 tgid:6075 ppid:6018 task_flags:0x400140 flags:0x00080003 [ 256.444066][ T31] Call Trace: [ 256.447384][ T31] [ 256.450377][ T31] __schedule+0x1798/0x4cc0 [ 256.454942][ T31] ? __lock_acquire+0xab9/0xd20 [ 256.459781][ T31] ? __lock_acquire+0xab9/0xd20 [ 256.464709][ T31] ? __pfx___schedule+0x10/0x10 [ 256.470070][ T31] ? schedule+0x91/0x360 [ 256.474332][ T31] schedule+0x165/0x360 [ 256.478472][ T31] schedule_preempt_disabled+0x13/0x30 [ 256.484002][ T31] __mutex_lock+0x7e6/0x1350 [ 256.488609][ T31] ? __mutex_lock+0x5bb/0x1350 [ 256.493513][ T31] ? bdev_release+0x1a9/0x650 [ 256.498216][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 256.503376][ T31] ? __asan_memset+0x22/0x50 [ 256.507986][ T31] ? __pfx___fsnotify_parent+0x10/0x10 [ 256.513522][ T31] ? do_raw_spin_lock+0x121/0x290 [ 256.518556][ T31] bdev_release+0x1a9/0x650 [ 256.523161][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 256.528382][ T31] blkdev_release+0x15/0x20 [ 256.532987][ T31] __fput+0x44c/0xa70 [ 256.536988][ T31] task_work_run+0x1d4/0x260 [ 256.541626][ T31] ? __pfx_task_work_run+0x10/0x10 [ 256.546748][ T31] get_signal+0x11ec/0x1340 [ 256.551329][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 256.556889][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 256.563282][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 256.568326][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 256.573941][ T31] exit_to_user_mode_loop+0x72/0x130 [ 256.579244][ T31] do_syscall_64+0x2bd/0xfa0 [ 256.583978][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.589189][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.595309][ T31] ? clear_bhb_loop+0x60/0xb0 [ 256.600045][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.606015][ T31] RIP: 0033:0x7f0416c7c859 [ 256.610474][ T31] RSP: 002b:00007f04178fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.618980][ T31] RAX: 0000000000000000 RBX: 00007f0416d9bf80 RCX: 00007f0416c7c859 [ 256.627032][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 256.635055][ T31] RBP: 00007f0416cd8ad0 R08: 0000000000000000 R09: 0000000000000000 [ 256.643151][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.651304][ T31] R13: 000000000000000b R14: 00007f0416d9bf80 R15: 00007ffe2d916ae8 [ 256.659309][ T31] [ 256.662484][ T31] [ 256.662484][ T31] Showing all locks held in the system: [ 256.670242][ T31] 1 lock held by khungtaskd/31: [ 256.675097][ T31] #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 256.685282][ T31] 2 locks held by getty/5587: [ 256.689999][ T31] #0: ffff88814d1310a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 256.699916][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 256.710080][ T31] 1 lock held by udevd/6027: [ 256.714649][ T31] #0: ffff8881437a2358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 256.723933][ T31] 1 lock held by syz-executor.0/6076: [ 256.729305][ T31] #0: ffff8881437a2358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 256.739187][ T31] 1 lock held by syz-executor.0/6235: [ 256.744950][ T31] #0: ffff8881437a2358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 256.754480][ T31] 1 lock held by syz-executor.0/6264: [ 256.759907][ T31] #0: ffff8881437a2358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 256.769161][ T31] [ 256.771533][ T31] ============================================= [ 256.771533][ T31] [ 256.780108][ T31] NMI backtrace for cpu 1 [ 256.780131][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 256.780148][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 256.780156][ T31] Call Trace: [ 256.780162][ T31] [ 256.780168][ T31] dump_stack_lvl+0x189/0x250 [ 256.780193][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.780210][ T31] ? __pfx__printk+0x10/0x10 [ 256.780239][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 256.780264][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 256.780288][ T31] ? __pfx__printk+0x10/0x10 [ 256.780308][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 256.780331][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 256.780359][ T31] watchdog+0xf60/0xfa0 [ 256.780385][ T31] ? watchdog+0x1e2/0xfa0 [ 256.780411][ T31] kthread+0x711/0x8a0 [ 256.780432][ T31] ? __pfx_watchdog+0x10/0x10 [ 256.780451][ T31] ? __pfx_kthread+0x10/0x10 [ 256.780468][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.780486][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.780504][ T31] ? __pfx_kthread+0x10/0x10 [ 256.780521][ T31] ret_from_fork+0x4bc/0x870 [ 256.780544][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 256.780571][ T31] ? __switch_to_asm+0x39/0x70 [ 256.780588][ T31] ? __switch_to_asm+0x33/0x70 [ 256.780605][ T31] ? __pfx_kthread+0x10/0x10 [ 256.780622][ T31] ret_from_fork_asm+0x1a/0x30 [ 256.780656][ T31] [ 256.780663][ T31] Sending NMI from CPU 1 to CPUs 0: [ 256.925836][ C0] NMI backtrace for cpu 0 [ 256.925853][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 256.925869][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 256.925879][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 256.925902][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 91 1b 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 256.925914][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 256.925928][ C0] RAX: 43d21da06f0a6800 RBX: ffffffff8196bc07 RCX: 43d21da06f0a6800 [ 256.925940][ C0] RDX: 0000000000000001 RSI: ffffffff8d7ea803 RDI: ffffffff8bc07de0 [ 256.925950][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632fdb R09: 1ffff110170c65fb [ 256.925961][ C0] R10: dffffc0000000000 R11: ffffed10170c65fc R12: ffffffff8f9e3370 [ 256.925972][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a40 [ 256.925982][ C0] FS: 0000000000000000(0000) GS:ffff888125d08000(0000) knlGS:0000000000000000 [ 256.925994][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.926005][ C0] CR2: 000055c9ebb85660 CR3: 000000000df38000 CR4: 00000000003526f0 [ 256.926019][ C0] Call Trace: [ 256.926027][ C0] [ 256.926033][ C0] default_idle+0x13/0x20 [ 256.926052][ C0] default_idle_call+0x73/0xb0 [ 256.926071][ C0] do_idle+0x1e7/0x510 [ 256.926094][ C0] ? __pfx_do_idle+0x10/0x10 [ 256.926125][ C0] cpu_startup_entry+0x44/0x60 [ 256.926143][ C0] rest_init+0x2de/0x300 [ 256.926164][ C0] start_kernel+0x3ae/0x410 [ 256.926197][ C0] x86_64_start_reservations+0x24/0x30 [ 256.926214][ C0] x86_64_start_kernel+0x143/0x1c0 [ 256.926230][ C0] common_startup_64+0x13e/0x147 [ 256.926253][ C0] [ 256.932980][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 256.932998][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 256.933016][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 256.933027][ T31] Call Trace: [ 256.933035][ T31] [ 256.933042][ T31] dump_stack_lvl+0x99/0x250 [ 256.933066][ T31] ? __asan_memcpy+0x40/0x70 [ 256.933084][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.933101][ T31] ? __pfx__printk+0x10/0x10 [ 256.933130][ T31] vpanic+0x237/0x6d0 [ 256.933151][ T31] ? __pfx_vpanic+0x10/0x10 [ 256.933173][ T31] ? preempt_schedule_common+0x83/0xd0 [ 256.933198][ T31] panic+0xb9/0xc0 [ 256.933219][ T31] ? __pfx_panic+0x10/0x10 [ 256.933241][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 256.933268][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 256.933294][ T31] watchdog+0xf9f/0xfa0 [ 256.933320][ T31] ? watchdog+0x1e2/0xfa0 [ 256.933346][ T31] kthread+0x711/0x8a0 [ 256.933366][ T31] ? __pfx_watchdog+0x10/0x10 [ 256.933386][ T31] ? __pfx_kthread+0x10/0x10 [ 256.933404][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.933422][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.933440][ T31] ? __pfx_kthread+0x10/0x10 [ 256.933458][ T31] ret_from_fork+0x4bc/0x870 [ 256.933481][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 256.933509][ T31] ? __switch_to_asm+0x39/0x70 [ 256.933526][ T31] ? __switch_to_asm+0x33/0x70 [ 256.933543][ T31] ? __pfx_kthread+0x10/0x10 [ 256.933561][ T31] ret_from_fork_asm+0x1a/0x30 [ 256.933594][ T31] [ 257.253849][ T31] Kernel Offset: disabled [ 257.258158][ T31] Rebooting in 86400 seconds..