Warning: Permanently added '10.128.1.103' (ED25519) to the list of known hosts. 2026/02/20 10:47:44 ignoring optional flag "type"="gce" 2026/02/20 10:47:44 parsed 1 programs 2026/02/20 10:47:44 executed programs: 0 [ 99.469870][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.471973][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.472685][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.473633][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.494265][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.675386][ T5982] chnl_net:caif_netlink_parms(): no params data found [ 99.915546][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.915679][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.915833][ T5982] bridge_slave_0: entered allmulticast mode [ 99.917157][ T5982] bridge_slave_0: entered promiscuous mode [ 99.921470][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.921594][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.921871][ T5982] bridge_slave_1: entered allmulticast mode [ 99.923360][ T5982] bridge_slave_1: entered promiscuous mode [ 100.098465][ T5982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.100990][ T5982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.247063][ T5982] team0: Port device team_slave_0 added [ 100.249253][ T5982] team0: Port device team_slave_1 added [ 100.375705][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.375721][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.375741][ T5982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.377326][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.377338][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.377358][ T5982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.579668][ T5982] hsr_slave_0: entered promiscuous mode [ 100.581575][ T5982] hsr_slave_1: entered promiscuous mode [ 101.534013][ T60] Bluetooth: hci0: command tx timeout [ 102.365983][ T5982] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.408621][ T5982] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.441079][ T5982] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.481117][ T5982] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.652227][ T5982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.675320][ T5982] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.683642][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.695416][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.712767][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.713016][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.071237][ T5982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.132754][ T5982] veth0_vlan: entered promiscuous mode [ 103.147261][ T5982] veth1_vlan: entered promiscuous mode [ 103.192031][ T5982] veth0_macvtap: entered promiscuous mode [ 103.198532][ T5982] veth1_macvtap: entered promiscuous mode [ 103.218673][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.229846][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.249104][ T1112] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.250763][ T1112] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.250804][ T1112] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.250844][ T1112] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.614217][ T5110] Bluetooth: hci0: command tx timeout [ 103.655775][ T6075] nbd0: detected capacity change from 0 to 10 [ 104.334222][ T60] block nbd0: Receive control failed (result -104) [ 105.693998][ T60] Bluetooth: hci0: command tx timeout [ 107.774979][ T60] Bluetooth: hci0: command tx timeout [ 132.899471][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.899584][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.224111][ T32] block nbd0: Possible stuck request ffff888026277000: control (read@0,4096B). Runtime 30 seconds 2026/02/20 10:48:43 executed programs: 1 [ 159.551981][ T5110] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 159.561951][ T5110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 159.563066][ T5110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 159.567120][ T5110] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 159.567786][ T5110] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 159.767064][ T6182] chnl_net:caif_netlink_parms(): no params data found [ 160.025273][ T6182] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.025396][ T6182] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.025518][ T6182] bridge_slave_0: entered allmulticast mode [ 160.026907][ T6182] bridge_slave_0: entered promiscuous mode [ 160.031392][ T6182] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.031512][ T6182] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.031785][ T6182] bridge_slave_1: entered allmulticast mode [ 160.033155][ T6182] bridge_slave_1: entered promiscuous mode [ 160.208698][ T6182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.211447][ T6182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.366861][ T6182] team0: Port device team_slave_0 added [ 160.368805][ T6182] team0: Port device team_slave_1 added [ 160.525937][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.525952][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.525972][ T6182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.527217][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.527229][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.527247][ T6182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.939600][ T6182] hsr_slave_0: entered promiscuous mode [ 160.940324][ T6182] hsr_slave_1: entered promiscuous mode [ 160.940963][ T6182] debugfs: 'hsr0' already exists in 'hsr' [ 160.941034][ T6182] Cannot create hsr debugfs directory [ 161.388607][ T6182] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.605981][ T6182] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.614925][ T60] Bluetooth: hci1: command tx timeout [ 161.815953][ T6182] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.019974][ T6182] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.256855][ T6182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 162.299529][ T6182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 162.317066][ T6182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 162.358033][ T6182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 162.474787][ T6182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.489191][ T6182] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.500056][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.500301][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.501938][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.502007][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.702799][ T6182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.743048][ T6182] veth0_vlan: entered promiscuous mode [ 162.751217][ T6182] veth1_vlan: entered promiscuous mode [ 162.779104][ T6182] veth0_macvtap: entered promiscuous mode [ 162.782084][ T6182] veth1_macvtap: entered promiscuous mode [ 162.798720][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.817709][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.834093][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.834815][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.835752][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.835992][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.693952][ T60] Bluetooth: hci1: command tx timeout [ 164.304312][ T64] block nbd0: Possible stuck request ffff888026277000: control (read@0,4096B). Runtime 60 seconds [ 165.257979][ T5160] udevd[5160]: worker [6003] /devices/virtual/block/nbd0 is taking a long time [ 165.773933][ T60] Bluetooth: hci1: command tx timeout [ 167.854717][ T60] Bluetooth: hci1: command tx timeout [ 194.338380][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.338425][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.374126][ T32] block nbd0: Possible stuck request ffff888026277000: control (read@0,4096B). Runtime 90 seconds 2026/02/20 10:49:43 executed programs: 2 [ 219.085313][ T5110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.088153][ T5110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.088885][ T5110] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.090154][ T5110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.090846][ T5110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.296151][ T6213] chnl_net:caif_netlink_parms(): no params data found [ 219.525244][ T6213] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.525365][ T6213] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.525476][ T6213] bridge_slave_0: entered allmulticast mode [ 219.526865][ T6213] bridge_slave_0: entered promiscuous mode [ 219.530790][ T6213] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.530907][ T6213] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.531197][ T6213] bridge_slave_1: entered allmulticast mode [ 219.532527][ T6213] bridge_slave_1: entered promiscuous mode [ 219.707829][ T6213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.710359][ T6213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.857316][ T6213] team0: Port device team_slave_0 added [ 219.859425][ T6213] team0: Port device team_slave_1 added [ 220.065807][ T6213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.065822][ T6213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.065842][ T6213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.067100][ T6213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.067111][ T6213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.067131][ T6213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.479348][ T6213] hsr_slave_0: entered promiscuous mode [ 220.480100][ T6213] hsr_slave_1: entered promiscuous mode [ 220.480618][ T6213] debugfs: 'hsr0' already exists in 'hsr' [ 220.480640][ T6213] Cannot create hsr debugfs directory [ 220.878652][ T6213] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.095971][ T6213] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.134132][ T5110] Bluetooth: hci2: command tx timeout [ 221.307725][ T6213] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.509505][ T6213] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.700296][ T6213] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.737795][ T6213] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.756947][ T6213] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.797881][ T6213] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 221.905514][ T6213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.925205][ T6213] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.931947][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.932165][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.960594][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.960725][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.013977][ T5110] Bluetooth: hci0: command 0x0406 tx timeout [ 222.157013][ T6213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.200347][ T6213] veth0_vlan: entered promiscuous mode [ 222.211436][ T6213] veth1_vlan: entered promiscuous mode [ 222.242183][ T6213] veth0_macvtap: entered promiscuous mode [ 222.247072][ T6213] veth1_macvtap: entered promiscuous mode [ 222.262957][ T6213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.285443][ T6213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.291716][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.292034][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.292082][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.292113][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.214122][ T60] Bluetooth: hci2: command tx timeout [ 224.454143][ T32] block nbd0: Possible stuck request ffff888026277000: control (read@0,4096B). Runtime 120 seconds [ 225.293982][ T60] Bluetooth: hci2: command tx timeout [ 227.374576][ T60] Bluetooth: hci2: command tx timeout [ 254.534161][ T32] block nbd0: Possible stuck request ffff888026277000: control (read@0,4096B). Runtime 150 seconds [ 255.777991][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.778063][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.624329][ T38] INFO: task syz-executor.0:6078 blocked for more than 143 seconds. [ 259.624360][ T38] Not tainted syzkaller #0 [ 259.624370][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 259.624378][ T38] task:syz-executor.0 state:D stack:28384 pid:6078 tgid:6074 ppid:5982 task_flags:0x400140 flags:0x00080003 [ 259.624443][ T38] Call Trace: [ 259.624453][ T38] [ 259.624467][ T38] __schedule+0x14fb/0x52c0 [ 259.624515][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 259.624548][ T38] ? trace_irq_disable+0x3b/0x150 [ 259.624572][ T38] ? __pfx___schedule+0x10/0x10 [ 259.624607][ T38] rt_mutex_schedule+0x76/0xf0 [ 259.624628][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 259.624664][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 259.624688][ T38] rt_mutex_slowlock+0x2dc/0x7b0 [ 259.624708][ T38] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 259.624727][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 259.624778][ T38] ? bdev_release+0x1af/0x660 [ 259.624804][ T38] mutex_lock_nested+0x168/0x1d0 [ 259.624821][ T38] ? __pfx___fsnotify_parent+0x10/0x10 [ 259.624846][ T38] bdev_release+0x1af/0x660 [ 259.624876][ T38] ? __pfx_blkdev_release+0x10/0x10 [ 259.624895][ T38] blkdev_release+0x15/0x20 [ 259.624911][ T38] __fput+0x461/0xa90 [ 259.624943][ T38] task_work_run+0x1d9/0x270 [ 259.624965][ T38] ? __pfx_task_work_run+0x10/0x10 [ 259.624993][ T38] get_signal+0x11c3/0x1310 [ 259.625037][ T38] arch_do_signal_or_restart+0xbc/0x830 [ 259.625060][ T38] ? __pfx_task_work_add+0x10/0x10 [ 259.625079][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 259.625107][ T38] ? __fput_deferred+0x253/0x3e0 [ 259.625136][ T38] exit_to_user_mode_loop+0x86/0x480 [ 259.625160][ T38] ? rcu_is_watching+0x15/0xb0 [ 259.625182][ T38] do_syscall_64+0x32d/0xf80 [ 259.625203][ T38] ? trace_irq_disable+0x3b/0x150 [ 259.625221][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.625239][ T38] ? clear_bhb_loop+0x40/0x90 [ 259.625261][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.625278][ T38] RIP: 0033:0x7f6a7affcef9 [ 259.625303][ T38] RSP: 002b:00007f6a7a36d0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.625321][ T38] RAX: 0000000000000000 RBX: 00007f6a7b13c050 RCX: 00007f6a7affcef9 [ 259.625333][ T38] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 259.625344][ T38] RBP: 00007f6a7b072980 R08: 0000000000000000 R09: 0000000000000000 [ 259.625355][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.625366][ T38] R13: 000000000000006e R14: 00007f6a7b13c050 R15: 00007ffe3c2d6598 [ 259.625395][ T38] [ 259.625430][ T38] [ 259.625430][ T38] Showing all locks held in the system: [ 259.625441][ T38] 1 lock held by khungtaskd/38: [ 259.625451][ T38] #0: ffffffff8ddcd780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 259.625516][ T38] 4 locks held by kworker/u8:11/3569: [ 259.625528][ T38] 2 locks held by getty/5552: [ 259.625537][ T38] #0: ffff8880370a50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 259.625578][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 259.625624][ T38] 1 lock held by udevd/6003: [ 259.625633][ T38] #0: ffff8880261b34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 259.625695][ T38] 1 lock held by syz-executor.0/6078: [ 259.625705][ T38] #0: ffff8880261b34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1af/0x660 [ 259.625793][ T38] 1 lock held by syz-executor.0/6203: [ 259.625803][ T38] #0: ffff8880261b34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 259.625848][ T38] 1 lock held by syz-executor.0/6232: [ 259.625858][ T38] #0: ffff8880261b34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 259.625902][ T38] [ 259.625907][ T38] ============================================= [ 259.625907][ T38] [ 259.625919][ T38] NMI backtrace for cpu 1 [ 259.625939][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 259.625957][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 259.625966][ T38] Call Trace: [ 259.625973][ T38] [ 259.625980][ T38] dump_stack_lvl+0xe8/0x150 [ 259.626005][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 259.626022][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 259.626046][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 259.626066][ T38] sys_info+0x135/0x170 [ 259.626087][ T38] watchdog+0xfd9/0x1030 [ 259.626112][ T38] ? watchdog+0x21a/0x1030 [ 259.626137][ T38] kthread+0x388/0x470 [ 259.626156][ T38] ? __pfx_watchdog+0x10/0x10 [ 259.626173][ T38] ? __pfx_kthread+0x10/0x10 [ 259.626191][ T38] ret_from_fork+0x51e/0xb90 [ 259.626216][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 259.626237][ T38] ? __switch_to+0xc7d/0x1450 [ 259.626260][ T38] ? __pfx_kthread+0x10/0x10 [ 259.626278][ T38] ret_from_fork_asm+0x1a/0x30 [ 259.626309][ T38] [ 259.626316][ T38] Sending NMI from CPU 1 to CPUs 0: [ 259.626348][ C0] NMI backtrace for cpu 0 [ 259.626360][ C0] CPU: 0 UID: 0 PID: 3569 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 259.626377][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 259.626387][ C0] Workqueue: bat_events batadv_tt_purge [ 259.626404][ C0] RIP: 0010:preempt_count_add+0x32/0x190 [ 259.626424][ C0] Code: 53 49 bf 00 00 00 00 00 fc ff df 48 c7 c0 a0 34 59 99 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 ea 00 00 00 83 3d 8e 8b c5 17 00 <75> 07 65 8b 05 15 37 ba 10 65 01 3d 0e 37 ba 10 48 c7 c0 a0 34 59 [ 259.626437][ C0] RSP: 0018:ffffc9000ef07900 EFLAGS: 00000046 [ 259.626449][ C0] RAX: 0000000000000004 RBX: ffffc9000ef07968 RCX: ffffffff99593403 [ 259.626459][ C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000000000000001 [ 259.626468][ C0] RBP: ffffc9000ef079c8 R08: ffff888049253b57 R09: 1ffff1100924a76a [ 259.626479][ C0] R10: dffffc0000000000 R11: ffffed100924a76b R12: 1ffff92001de0f2d [ 259.626489][ C0] R13: 0000000000000246 R14: ffff888049253b00 R15: dffffc0000000000 [ 259.626499][ C0] FS: 0000000000000000(0000) GS:ffff888126342000(0000) knlGS:0000000000000000 [ 259.626511][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.626522][ C0] CR2: 0000560042788168 CR3: 000000000dbba000 CR4: 00000000003526f0 [ 259.626535][ C0] Call Trace: [ 259.626541][ C0] [ 259.626547][ C0] rt_spin_lock+0x16f/0x400 [ 259.626564][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 259.626580][ C0] ? batadv_tt_local_purge+0x98/0x380 [ 259.626595][ C0] batadv_tt_local_purge+0x143/0x380 [ 259.626610][ C0] ? batadv_tt_local_purge+0x98/0x380 [ 259.626627][ C0] batadv_tt_purge+0x35/0xa10 [ 259.626644][ C0] ? process_scheduled_works+0xa25/0x1830 [ 259.626662][ C0] ? process_scheduled_works+0xa25/0x1830 [ 259.626680][ C0] process_scheduled_works+0xb02/0x1830 [ 259.626709][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 259.626729][ C0] ? assign_work+0x3d5/0x5e0 [ 259.626749][ C0] worker_thread+0xa50/0xfc0 [ 259.626777][ C0] kthread+0x388/0x470 [ 259.626792][ C0] ? __pfx_worker_thread+0x10/0x10 [ 259.626809][ C0] ? __pfx_kthread+0x10/0x10 [ 259.626823][ C0] ret_from_fork+0x51e/0xb90 [ 259.626842][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 259.626859][ C0] ? __switch_to+0xc7d/0x1450 [ 259.626876][ C0] ? __pfx_kthread+0x10/0x10 [ 259.626891][ C0] ret_from_fork_asm+0x1a/0x30 [ 259.626910][ C0] [ 259.627349][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 259.627362][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 259.627381][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 259.627390][ T38] Call Trace: [ 259.627397][ T38] [ 259.627404][ T38] vpanic+0x56c/0xa60 [ 259.627430][ T38] ? __pfx_vpanic+0x10/0x10 [ 259.627461][ T38] panic+0xc5/0xd0 [ 259.627483][ T38] ? __pfx_panic+0x10/0x10 [ 259.627503][ T38] ? printk_trigger_flush+0x117/0x180 [ 259.627526][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 259.627553][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 259.627575][ T38] watchdog+0x1023/0x1030 [ 259.627599][ T38] ? watchdog+0x21a/0x1030 [ 259.627625][ T38] kthread+0x388/0x470 [ 259.627643][ T38] ? __pfx_watchdog+0x10/0x10 [ 259.627660][ T38] ? __pfx_kthread+0x10/0x10 [ 259.627679][ T38] ret_from_fork+0x51e/0xb90 [ 259.627703][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 259.627724][ T38] ? __switch_to+0xc7d/0x1450 [ 259.627752][ T38] ? __pfx_kthread+0x10/0x10 [ 259.627771][ T38] ret_from_fork_asm+0x1a/0x30 [ 259.627802][ T38] [ 259.628240][ T38] Kernel Offset: disabled