Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. 2026/11/04 10:28:24 ignoring optional flag "type"="gce" 2026/11/04 10:28:24 parsed 1 programs 2026/11/04 10:28:24 executed programs: 0 [ 96.457838][ T4915] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.470809][ T4915] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.473521][ T4915] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.474513][ T4915] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.475158][ T4915] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.169610][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.169732][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.169837][ T5767] bridge_slave_0: entered allmulticast mode [ 97.171181][ T5767] bridge_slave_0: entered promiscuous mode [ 97.173355][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.173461][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.173546][ T5767] bridge_slave_1: entered allmulticast mode [ 97.174782][ T5767] bridge_slave_1: entered promiscuous mode [ 97.313855][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.316342][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.454069][ T5767] team0: Port device team_slave_0 added [ 97.456296][ T5767] team0: Port device team_slave_1 added [ 97.580708][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.580726][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.580742][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.582273][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.582286][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.582305][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.774721][ T5767] hsr_slave_0: entered promiscuous mode [ 97.775497][ T5767] hsr_slave_1: entered promiscuous mode [ 98.548284][ T4915] Bluetooth: hci0: command tx timeout [ 99.741470][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.782617][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.785329][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.849028][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.850781][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.892064][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.893669][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.935674][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.092015][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.127507][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.160769][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.160905][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.187796][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.187940][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.628446][ T4915] Bluetooth: hci0: command tx timeout [ 100.859903][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.965547][ T5767] veth0_vlan: entered promiscuous mode [ 101.000828][ T5767] veth1_vlan: entered promiscuous mode [ 101.072541][ T5767] veth0_macvtap: entered promiscuous mode [ 101.095438][ T5767] veth1_macvtap: entered promiscuous mode [ 101.137641][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.159290][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.380725][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.552603][ T2966] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.552652][ T2966] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.552685][ T2966] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.724164][ T5903] nbd0: detected capacity change from 0 to 258 [ 102.526231][ T4915] block nbd0: Receive control failed (result -104) [ 102.709111][ T4915] Bluetooth: hci0: command tx timeout [ 104.788195][ T4915] Bluetooth: hci0: command tx timeout [ 131.790285][ T75] block nbd0: Possible stuck request ffff888021770000: control (read@0,4096B). Runtime 30 seconds [ 133.033747][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.033812][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 2026/11/04 10:29:25 executed programs: 1 [ 157.744203][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.746403][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.747147][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.753273][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.753960][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 158.439658][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.439775][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.440073][ T5932] bridge_slave_0: entered allmulticast mode [ 158.443718][ T5932] bridge_slave_0: entered promiscuous mode [ 158.445819][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.445920][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.446196][ T5932] bridge_slave_1: entered allmulticast mode [ 158.447444][ T5932] bridge_slave_1: entered promiscuous mode [ 158.591812][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.594499][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.731194][ T5932] team0: Port device team_slave_0 added [ 158.733950][ T5932] team0: Port device team_slave_1 added [ 158.870006][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.870024][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.870038][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.871492][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.871505][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.871525][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.034830][ T5932] hsr_slave_0: entered promiscuous mode [ 159.035585][ T5932] hsr_slave_1: entered promiscuous mode [ 159.036237][ T5932] debugfs: 'hsr0' already exists in 'hsr' [ 159.036261][ T5932] Cannot create hsr debugfs directory [ 159.680737][ T5932] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.828217][ T4915] Bluetooth: hci1: command tx timeout [ 159.893617][ T5932] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.112767][ T5932] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.350869][ T5932] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.613364][ T5932] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 160.651212][ T5932] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 160.652117][ T5932] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 160.672456][ T5932] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 160.673425][ T5932] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 160.716194][ T5932] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 160.717816][ T5932] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 160.763209][ T5932] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 160.837900][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.861371][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.870809][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.870997][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.903260][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.903384][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.263162][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.326886][ T5932] veth0_vlan: entered promiscuous mode [ 161.346096][ T5932] veth1_vlan: entered promiscuous mode [ 161.375519][ T5932] veth0_macvtap: entered promiscuous mode [ 161.387203][ T5932] veth1_macvtap: entered promiscuous mode [ 161.414504][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.427325][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.653134][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.672073][ T70] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.674683][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.675090][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.868218][ T75] block nbd0: Possible stuck request ffff888021770000: control (read@0,4096B). Runtime 60 seconds [ 161.908285][ T4915] Bluetooth: hci1: command tx timeout [ 163.988113][ T4915] Bluetooth: hci1: command tx timeout [ 164.791731][ T4965] udevd[4965]: worker [5768] /devices/virtual/block/nbd0 is taking a long time [ 166.068215][ T4915] Bluetooth: hci1: command tx timeout [ 191.958233][ T75] block nbd0: Possible stuck request ffff888021770000: control (read@0,4096B). Runtime 90 seconds [ 194.471599][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.471651][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 2026/11/04 10:30:25 executed programs: 2 [ 217.818474][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.837799][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.841308][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.842468][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.843139][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.529610][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.529720][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.529828][ T5976] bridge_slave_0: entered allmulticast mode [ 218.531133][ T5976] bridge_slave_0: entered promiscuous mode [ 218.533065][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.533190][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.533285][ T5976] bridge_slave_1: entered allmulticast mode [ 218.534559][ T5976] bridge_slave_1: entered promiscuous mode [ 218.653554][ T5976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.657108][ T5976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.792139][ T5976] team0: Port device team_slave_0 added [ 218.794152][ T5976] team0: Port device team_slave_1 added [ 218.929878][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.929895][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.929909][ T5976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.931193][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.931207][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.931224][ T5976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.113937][ T5976] hsr_slave_0: entered promiscuous mode [ 219.114656][ T5976] hsr_slave_1: entered promiscuous mode [ 219.115162][ T5976] debugfs: 'hsr0' already exists in 'hsr' [ 219.115179][ T5976] Cannot create hsr debugfs directory [ 219.703247][ T5976] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.908201][ T4915] Bluetooth: hci2: command tx timeout [ 219.925757][ T5976] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.163416][ T5976] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.377080][ T5976] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.655298][ T5976] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.691433][ T5976] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.692428][ T5976] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.712362][ T5976] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.721496][ T5976] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.752340][ T5976] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 220.753255][ T5976] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.804431][ T5976] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 220.886312][ T5976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.906667][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.924153][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.924289][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.925777][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.925848][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.303859][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.349127][ T5976] veth0_vlan: entered promiscuous mode [ 221.357658][ T5976] veth1_vlan: entered promiscuous mode [ 221.404574][ T5976] veth0_macvtap: entered promiscuous mode [ 221.416246][ T5976] veth1_macvtap: entered promiscuous mode [ 221.443480][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.456572][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.569854][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.570329][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.634196][ T2966] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.638735][ T2966] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.988914][ T4915] Bluetooth: hci2: command tx timeout [ 222.028154][ T75] block nbd0: Possible stuck request ffff888021770000: control (read@0,4096B). Runtime 120 seconds [ 222.150955][ T4915] Bluetooth: hci0: command 0x0406 tx timeout [ 224.068179][ T61] Bluetooth: hci2: command tx timeout [ 226.149083][ T61] Bluetooth: hci2: command tx timeout [ 252.118193][ T75] block nbd0: Possible stuck request ffff888021770000: control (read@0,4096B). Runtime 150 seconds [ 255.911700][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.911745][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.308324][ T37] INFO: task syz-executor.0:5903 blocked for more than 143 seconds. [ 262.308359][ T37] Not tainted syzkaller #0 [ 262.308369][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 262.308377][ T37] task:syz-executor.0 state:D stack:28296 pid:5903 tgid:5902 ppid:5767 task_flags:0x400140 flags:0x00080803 [ 262.308431][ T37] Call Trace: [ 262.308435][ T37] [ 262.308444][ T37] __schedule+0x171d/0x56f0 [ 262.308470][ T37] ? __lock_acquire+0x747/0x2de0 [ 262.308498][ T37] ? trace_irq_disable+0x3b/0x140 [ 262.308512][ T37] ? __pfx___schedule+0x10/0x10 [ 262.308530][ T37] rt_mutex_schedule+0x76/0xf0 [ 262.308549][ T37] rt_mutex_slowlock_block+0x540/0x6a0 [ 262.308569][ T37] ? rt_mutex_slowlock_block+0x33f/0x6a0 [ 262.308586][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 262.308602][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 262.308618][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 262.308632][ T37] ? is_bpf_text_address+0x26/0x2b0 [ 262.308660][ T37] ? bdev_release+0x1be/0x690 [ 262.308672][ T37] mutex_lock_nested+0x163/0x1d0 [ 262.308687][ T37] ? __pfx___fsnotify_parent+0x10/0x10 [ 262.308702][ T37] bdev_release+0x1be/0x690 [ 262.308719][ T37] ? __pfx_blkdev_release+0x10/0x10 [ 262.308732][ T37] blkdev_release+0x15/0x20 [ 262.308748][ T37] __fput+0x41a/0xa70 [ 262.308770][ T37] task_work_run+0x1d9/0x260 [ 262.308786][ T37] ? __pfx_task_work_run+0x10/0x10 [ 262.308806][ T37] get_signal+0x12d1/0x1430 [ 262.308831][ T37] arch_do_signal_or_restart+0xbb/0x860 [ 262.308843][ T37] ? __pfx_task_work_add+0x10/0x10 [ 262.308856][ T37] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 262.308871][ T37] ? __fput_deferred+0x253/0x3e0 [ 262.308889][ T37] exit_to_user_mode_loop+0x10e/0x770 [ 262.308901][ T37] ? rcu_is_watching+0x16/0xb0 [ 262.308915][ T37] do_syscall_64+0x328/0x520 [ 262.308927][ T37] ? trace_irq_disable+0x3b/0x140 [ 262.308937][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.308948][ T37] ? clear_bhb_loop+0x70/0xc0 [ 262.308961][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.308972][ T37] RIP: 0033:0x7f1e1b72c1a9 [ 262.308990][ T37] RSP: 002b:00007f1e1aabe078 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.309000][ T37] RAX: 0000000000000000 RBX: 00007f1e1b86bf80 RCX: 00007f1e1b72c1a9 [ 262.309008][ T37] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 262.309014][ T37] RBP: 00007f1e1b7a1978 R08: 0000000000000000 R09: 0000000000000000 [ 262.309020][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.309026][ T37] R13: 000000000000000b R14: 00007f1e1b86bf80 R15: 00007ffcfe51f8f8 [ 262.309051][ T37] [ 262.309068][ T37] [ 262.309068][ T37] Showing all locks held in the system: [ 262.309075][ T37] locks held by khungtaskd/37: 1, last CPU#0: [ 262.309084][ T37] #0: ffffffff8f3c15c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 262.309132][ T37] locks held by getty/5352: 2, on CPU#0: [ 262.309140][ T37] #0: ffff8880378cc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 262.309168][ T37] #1: ffffc900044eb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 262.309196][ T37] locks held by udevd/5768: 1, on CPU#1: [ 262.309203][ T37] #0: ffff888028f1c4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 262.309229][ T37] locks held by syz-executor.0/5903: 1, on CPU#0: [ 262.309236][ T37] #0: ffff888028f1c4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1be/0x690 [ 262.309262][ T37] locks held by syz-executor.0/5967: 1, on CPU#0: [ 262.309269][ T37] #0: ffff888028f1c4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 262.309294][ T37] locks held by syz-executor.0/6012: 1, on CPU#0: [ 262.309301][ T37] #0: ffff888028f1c4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 262.309325][ T37] [ 262.309328][ T37] ============================================= [ 262.309328][ T37] [ 262.309336][ T37] NMI backtrace for cpu 0 [ 262.309351][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 262.309377][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 262.309389][ T37] Call Trace: [ 262.309397][ T37] [ 262.309405][ T37] dump_stack_lvl+0xe8/0x150 [ 262.309442][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 262.309476][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 262.309506][ T37] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 262.309540][ T37] sys_info+0x135/0x170 [ 262.309561][ T37] watchdog+0x1073/0x10f0 [ 262.309578][ T37] ? watchdog+0x209/0x10f0 [ 262.309599][ T37] kthread+0x38b/0x470 [ 262.309620][ T37] ? __pfx_watchdog+0x10/0x10 [ 262.309630][ T37] ? __pfx_kthread+0x10/0x10 [ 262.309643][ T37] ret_from_fork+0x514/0xb70 [ 262.309656][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 262.309667][ T37] ? __switch_to+0xc78/0x1410 [ 262.309678][ T37] ? __pfx_kthread+0x10/0x10 [ 262.309690][ T37] ret_from_fork_asm+0x1a/0x30 [ 262.309709][ T37] [ 262.309728][ T37] Sending NMI from CPU 0 to CPUs 1: [ 262.309761][ C1] NMI backtrace for cpu 1 [ 262.309780][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 262.309799][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 262.309808][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 262.309829][ C1] Code: 2b 67 02 e9 c3 e6 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 24 15 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 262.309843][ C1] RSP: 0018:ffffc900001c7e40 EFLAGS: 00000242 [ 262.309858][ C1] RAX: 000000000006e6ef RBX: ffffffff819b6800 RCX: 8000000000000001 [ 262.309870][ C1] RDX: 0000000000000001 RSI: ffffffff8dafc1e9 RDI: ffffffff8bed2a80 [ 262.309882][ C1] RBP: ffffc900001c7f10 R08: ffff8880b85341db R09: 1ffff110170a683b [ 262.309895][ C1] R10: dffffc0000000000 R11: ffffed10170a683c R12: 0000000000000000 [ 262.309907][ C1] R13: 1ffff11003bde3e8 R14: 1ffff92000038fd0 R15: dffffc0000000000 [ 262.309920][ C1] FS: 0000000000000000(0000) GS:ffff888124815000(0000) knlGS:0000000000000000 [ 262.309933][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.309945][ C1] CR2: 0000561aa11f9168 CR3: 000000002b56e000 CR4: 00000000003526f0 [ 262.309960][ C1] Call Trace: [ 262.309966][ C1] [ 262.309972][ C1] default_idle+0x9/0x20 [ 262.309993][ C1] default_idle_call+0x72/0xb0 [ 262.310015][ C1] do_idle+0x2e0/0x540 [ 262.310031][ C1] ? __pfx_do_idle+0x10/0x10 [ 262.310062][ C1] cpu_startup_entry+0x43/0x60 [ 262.310077][ C1] start_secondary+0x101/0x110 [ 262.310096][ C1] common_startup_64+0x13e/0x157 [ 262.310130][ C1] [ 262.310778][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 262.965932][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 262.975551][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 262.985605][ T37] Call Trace: [ 262.988933][ T37] [ 262.991868][ T37] vpanic+0x26f/0x710 [ 262.995959][ T37] panic+0xc5/0xd0 [ 262.999683][ T37] ? __pfx_panic+0x10/0x10 [ 263.004083][ T37] ? preempt_schedule_common+0x7f/0xd0 [ 263.009526][ T37] ? preempt_schedule_thunk+0x16/0x40 [ 263.014890][ T37] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 263.021064][ T37] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 263.027226][ T37] watchdog+0x10e7/0x10f0 [ 263.031558][ T37] ? watchdog+0x209/0x10f0 [ 263.036055][ T37] kthread+0x38b/0x470 [ 263.040307][ T37] ? __pfx_watchdog+0x10/0x10 [ 263.045006][ T37] ? __pfx_kthread+0x10/0x10 [ 263.049592][ T37] ret_from_fork+0x514/0xb70 [ 263.054194][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 263.059401][ T37] ? __switch_to+0xc78/0x1410 [ 263.064095][ T37] ? __pfx_kthread+0x10/0x10 [ 263.068695][ T37] ret_from_fork_asm+0x1a/0x30 [ 263.073475][ T37] [ 263.076833][ T37] Kernel Offset: disabled [ 263.081150][ T37] Rebooting in 86400 seconds..