INFO: task kworker/0:0H:11 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:0H    state:D stack:26568 pid:11    tgid:11    ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: kblockd blk_mq_requeue_work
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x17d4/0x5630 kernel/sched/core.c:7239
 __schedule_loop kernel/sched/core.c:7316 [inline]
 schedule+0x164/0x2b0 kernel/sched/core.c:7331
 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99
 wait_for_reconnect drivers/block/nbd.c:1107 [inline]
 nbd_handle_cmd drivers/block/nbd.c:1149 [inline]
 nbd_queue_rq+0x889/0x1150 drivers/block/nbd.c:1207
 blk_mq_dispatch_rq_list+0x499/0x1990 block/blk-mq.c:2117
 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:168 [inline]
 blk_mq_do_dispatch_sched block/blk-mq-sched.c:182 [inline]
 __blk_mq_sched_dispatch_requests+0xd36/0x1580 block/blk-mq-sched.c:307
 blk_mq_sched_dispatch_requests+0xd7/0x190 block/blk-mq-sched.c:329
 blk_mq_run_hw_queue+0x34a/0x4f0 block/blk-mq.c:2356
 blk_mq_run_hw_queues+0x268/0x3f0 block/blk-mq.c:2404
 blk_mq_requeue_work+0x703/0x760 block/blk-mq.c:1571
 process_one_work kernel/workqueue.c:3322 [inline]
 process_scheduled_works+0xa88/0x14c0 kernel/workqueue.c:3405
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Showing all locks held in the system:
locks held by kworker/0:0H/11: 4, on CPU#0:
 #0: ffff88801eefc540 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
 #0: ffff88801eefc540 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 kernel/workqueue.c:3405
 #1: ffffc90000107c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
 #1: ffffc90000107c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 kernel/workqueue.c:3405
 #2: ffff8880275d2b18 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:187 [inline]
 #2: ffff8880275d2b18 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:294 [inline]
 #2: ffff8880275d2b18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x321/0x4f0 block/blk-mq.c:2355
 #3: ffff888027fe7338 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 drivers/block/nbd.c:1199
locks held by kworker/u8:0/12: 4, last CPU#1:
 #0: ffff8880b863b4e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 kernel/sched/core.c:667
 #1: ffffc90000117c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
 #1: ffffc90000117c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 kernel/workqueue.c:3405
 #2: ffff8880b8628198 (hrtimer_bases.lock){-.-.}-{2:2}, at: __run_hrtimer kernel/time/hrtimer.c:2071 [inline]
 #2: ffff8880b8628198 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x466/0xa10 kernel/time/hrtimer.c:2124
 #3: ffffffff9a7d4748 (&____s->seqcount#2){----}-{0:0}, at: ktime_get_update_offsets_now+0x5d/0x3e0 kernel/time/timekeeping.c:2856
locks held by ksoftirqd/0/15: 1, last CPU#0:
 #0: ffff8880b863b4e0 (&rq->__lock){-.-.}-{2:2}, at: class_raw_spinlock_constructor include/linux/spinlock.h:559 [inline]
 #0: ffff8880b863b4e0 (&rq->__lock){-.-.}-{2:2}, at: __hrtimer_rearm_deferred+0x99/0x4b0 kernel/time/hrtimer.c:2181
locks held by khungtaskd/31: 1, last CPU#1:
 #0: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
 #0: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline]
 #0: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6793
locks held by getty/5369: 2, on CPU#0:
 #0: ffff888036ecd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 drivers/tty/n_tty.c:2211
locks held by syz-executor/5611: 1, on CPU#0:
 #0: ffff88807edc8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close net/bluetooth/hci_core.c:500 [inline]
 #0: ffff88807edc8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 net/bluetooth/hci_core.c:2681
locks held by syz-executor/5613: 1, on CPU#0:
 #0: ffff88807b264ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close net/bluetooth/hci_core.c:500 [inline]
 #0: ffff88807b264ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 net/bluetooth/hci_core.c:2681
locks held by udevd/5628: 1, on CPU#0:
 #0: ffff888027e9d350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 block/bdev.c:991
locks held by syz.5.1371/10772: 2, on CPU#0:
 #0: ffff888058384ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close net/bluetooth/hci_core.c:500 [inline]
 #0: ffff888058384ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 net/bluetooth/hci_core.c:2681
 #1: ffffffff8eb604e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:343 [inline]
 #1: ffffffff8eb604e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 kernel/rcu/tree_exp.h:961
locks held by syz.1.1372/10780: 1, on CPU#0:
 #0: ffff88807f30cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close net/bluetooth/hci_core.c:500 [inline]
 #0: ffff88807f30cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 net/bluetooth/hci_core.c:2681
locks held by syz.0.1373/10779: 2, on CPU#0:
 #0: ffff8880365ea8e0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3e/0x100 net/netfilter/nf_tables_api.c:11541
 #1: ffffffff8eb604e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:311 [inline]
 #1: ffffffff8eb604e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 kernel/rcu/tree_exp.h:961

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:123
 nmi_trigger_cpumask_backtrace+0x17d/0x390 lib/nmi_backtrace.c:66
 trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline]
 __sys_info lib/sys_info.c:157 [inline]
 sys_info+0x135/0x170 lib/sys_info.c:165
 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]
 watchdog+0xfd7/0x1030 kernel/hung_task.c:561
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 151 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: events_unbound nsim_dev_trap_report_work
RIP: 0010:mark_lock+0x7/0x190 kernel/locking/lockdep.c:4730
Code: e9 48 89 df 48 8b 2c 24 e9 b6 fd ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 <41> 54 53 8b 46 20 89 c1 81 e1 00 00 03 00 83 f9 01 bb 09 00 00 00
RSP: 0018:ffffc90002f37848 EFLAGS: 00000002
RAX: 0000000000000000 RBX: ffff888020b20000 RCX: ffffffff941c9760
RDX: 0000000000000002 RSI: ffff888020b20c20 RDI: ffff888020b20000
RBP: 0000000000000000 R08: ffffffff90589337 R09: 1ffffffff20b1266
R10: dffffc0000000000 R11: fffffbfff20b1267 R12: ffff888020b20c20
R13: ffff8880b8636fd0 R14: ffff888020b20ba8 R15: 0000000000000003
FS:  0000000000000000(0000) GS:ffff888124f23000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000007ffd4000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 mark_held_locks kernel/locking/lockdep.c:4341 [inline]
 __trace_hardirqs_on_caller kernel/locking/lockdep.c:4359 [inline]
 lockdep_hardirqs_on_prepare+0x112/0x270 kernel/locking/lockdep.c:4426
 trace_hardirqs_on+0x28/0x40 kernel/trace/trace_preemptirq.c:78
 crng_make_state+0x2c5/0x600 drivers/char/random.c:383
 _get_random_bytes+0xff/0x260 drivers/char/random.c:396
 eth_random_addr include/linux/etherdevice.h:239 [inline]
 nsim_dev_trap_skb_build drivers/net/netdevsim/dev.c:752 [inline]
 nsim_dev_trap_report drivers/net/netdevsim/dev.c:801 [inline]
 nsim_dev_trap_report_work+0x346/0xb40 drivers/net/netdevsim/dev.c:847
 process_one_work kernel/workqueue.c:3322 [inline]
 process_scheduled_works+0xa88/0x14c0 kernel/workqueue.c:3405
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>