Warning: Permanently added '10.128.0.13' (ED25519) to the list of known hosts. 2026/05/12 22:10:23 ignoring optional flag "type"="gce" 2026/05/12 22:10:24 parsed 1 programs 2026/05/12 22:10:24 executed programs: 0 [ 105.835178][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.854277][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.855160][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.867900][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.876851][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.577582][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.577823][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.578214][ T5840] bridge_slave_0: entered allmulticast mode [ 106.580094][ T5840] bridge_slave_0: entered promiscuous mode [ 106.593033][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.593322][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.593563][ T5840] bridge_slave_1: entered allmulticast mode [ 106.605176][ T5840] bridge_slave_1: entered promiscuous mode [ 106.751340][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.756090][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.894376][ T5840] team0: Port device team_slave_0 added [ 106.898714][ T5840] team0: Port device team_slave_1 added [ 107.029180][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.029191][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.029205][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.031361][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.031371][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.031384][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.192182][ T5840] hsr_slave_0: entered promiscuous mode [ 107.193371][ T5840] hsr_slave_1: entered promiscuous mode [ 107.977197][ T61] Bluetooth: hci0: command tx timeout [ 109.244200][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.277077][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.279125][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.318067][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.319116][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.361226][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.363370][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.408151][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.634303][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.701369][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.724943][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.725210][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.753035][ T3390] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.753270][ T3390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.058745][ T61] Bluetooth: hci0: command tx timeout [ 110.481734][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.633441][ T5840] veth0_vlan: entered promiscuous mode [ 110.667672][ T5840] veth1_vlan: entered promiscuous mode [ 110.737416][ T5840] veth0_macvtap: entered promiscuous mode [ 110.754132][ T5840] veth1_macvtap: entered promiscuous mode [ 110.793104][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.820638][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.862002][ T1025] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.880409][ T1025] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.900760][ T1025] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.906857][ T1025] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.565744][ T5971] nbd0: detected capacity change from 0 to 18 [ 112.135705][ T4929] Bluetooth: hci0: command tx timeout [ 112.224383][ T61] block nbd0: Receive control failed (result -104) [ 114.215735][ T61] Bluetooth: hci0: command tx timeout [ 132.939919][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.940016][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.945800][ T11] block nbd0: Possible stuck request ffff888027210000: control (read@0,4096B). Runtime 30 seconds 2026/05/12 22:11:24 executed programs: 1 [ 167.385392][ T4929] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.401216][ T4929] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.402296][ T4929] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.403347][ T4929] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.404022][ T4929] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 168.107451][ T6054] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.107685][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.107851][ T6054] bridge_slave_0: entered allmulticast mode [ 168.111315][ T6054] bridge_slave_0: entered promiscuous mode [ 168.115758][ T6054] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.116161][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.116415][ T6054] bridge_slave_1: entered allmulticast mode [ 168.119558][ T6054] bridge_slave_1: entered promiscuous mode [ 168.251176][ T6054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.255425][ T6054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.399559][ T6054] team0: Port device team_slave_0 added [ 168.403269][ T6054] team0: Port device team_slave_1 added [ 168.541653][ T6054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.541665][ T6054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.541679][ T6054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.543630][ T6054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.543639][ T6054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.543653][ T6054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.706972][ T6054] hsr_slave_0: entered promiscuous mode [ 168.708191][ T6054] hsr_slave_1: entered promiscuous mode [ 168.709249][ T6054] debugfs: 'hsr0' already exists in 'hsr' [ 168.709320][ T6054] Cannot create hsr debugfs directory [ 169.321106][ T6054] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.495769][ T61] Bluetooth: hci1: command tx timeout [ 169.562280][ T6054] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.799773][ T6054] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.014600][ T6054] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.262076][ T6054] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 170.291336][ T6054] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 170.292257][ T6054] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 170.313636][ T6054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 170.314542][ T6054] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 170.350126][ T6054] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 170.351245][ T6054] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 170.393420][ T6054] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 170.503664][ T6054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.531202][ T6054] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.554682][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.554817][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.571661][ T905] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.571793][ T905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.971659][ T6054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.043020][ T6054] veth0_vlan: entered promiscuous mode [ 171.067805][ T6054] veth1_vlan: entered promiscuous mode [ 171.111755][ T6054] veth0_macvtap: entered promiscuous mode [ 171.121752][ T6054] veth1_macvtap: entered promiscuous mode [ 171.147069][ T6054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.164686][ T6054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.183485][ T905] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.184243][ T905] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.184287][ T905] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.185296][ T905] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.575818][ T61] Bluetooth: hci1: command tx timeout [ 172.016222][ T11] block nbd0: Possible stuck request ffff888027210000: control (read@0,4096B). Runtime 60 seconds [ 173.655760][ T61] Bluetooth: hci1: command tx timeout [ 174.543068][ T4979] udevd[4979]: worker [5825] /devices/virtual/block/nbd0 is taking a long time [ 175.736031][ T61] Bluetooth: hci1: command tx timeout [ 194.378657][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.378745][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.096447][ T11] block nbd0: Possible stuck request ffff888027210000: control (read@0,4096B). Runtime 90 seconds 2026/05/12 22:12:24 executed programs: 2 [ 227.553020][ T4929] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 227.561630][ T4929] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 227.563584][ T4929] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 227.566185][ T4929] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 227.567683][ T4929] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 228.307789][ T6099] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.308002][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.308179][ T6099] bridge_slave_0: entered allmulticast mode [ 228.310142][ T6099] bridge_slave_0: entered promiscuous mode [ 228.312599][ T6099] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.312829][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.313008][ T6099] bridge_slave_1: entered allmulticast mode [ 228.316545][ T6099] bridge_slave_1: entered promiscuous mode [ 228.451123][ T6099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.454789][ T6099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.621357][ T6099] team0: Port device team_slave_0 added [ 228.624273][ T6099] team0: Port device team_slave_1 added [ 228.778684][ T6099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.778695][ T6099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.778708][ T6099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.780698][ T6099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.780708][ T6099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.780721][ T6099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.943171][ T6099] hsr_slave_0: entered promiscuous mode [ 228.944369][ T6099] hsr_slave_1: entered promiscuous mode [ 228.945365][ T6099] debugfs: 'hsr0' already exists in 'hsr' [ 228.945387][ T6099] Cannot create hsr debugfs directory [ 229.562091][ T6099] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.575740][ T61] Bluetooth: hci2: command tx timeout [ 229.790303][ T6099] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.018430][ T6099] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.238036][ T6099] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.470948][ T6099] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 230.511565][ T6099] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.512540][ T6099] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 230.536328][ T6099] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.537314][ T6099] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 230.569740][ T6099] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.570886][ T6099] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 230.590926][ T6099] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.707880][ T6099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.737220][ T6099] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.743967][ T3400] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.744111][ T3400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.772144][ T905] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.772298][ T905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.161130][ T6099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.231532][ T6099] veth0_vlan: entered promiscuous mode [ 231.244429][ T6099] veth1_vlan: entered promiscuous mode [ 231.298923][ T6099] veth0_macvtap: entered promiscuous mode [ 231.304022][ T6099] veth1_macvtap: entered promiscuous mode [ 231.350703][ T6099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.369424][ T6099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.390214][ T1025] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.390432][ T1025] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.390466][ T1025] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.390499][ T1025] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.656781][ T61] Bluetooth: hci2: command tx timeout [ 232.188148][ T11] block nbd0: Possible stuck request ffff888027210000: control (read@0,4096B). Runtime 120 seconds [ 232.306841][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 233.735754][ T4929] Bluetooth: hci2: command tx timeout [ 235.815709][ T4929] Bluetooth: hci2: command tx timeout [ 255.819170][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.819272][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.256194][ T11] block nbd0: Possible stuck request ffff888027210000: control (read@0,4096B). Runtime 150 seconds [ 263.496605][ T38] INFO: task syz-executor.0:5971 blocked for more than 143 seconds. [ 263.496630][ T38] Not tainted syzkaller #0 [ 263.496639][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 263.496651][ T38] task:syz-executor.0 state:D stack:26720 pid:5971 tgid:5969 ppid:5840 task_flags:0x400140 flags:0x00080803 [ 263.496724][ T38] Call Trace: [ 263.496731][ T38] [ 263.496750][ T38] __schedule+0x16f9/0x5500 [ 263.496803][ T38] ? trace_irq_disable+0x3b/0x140 [ 263.496835][ T38] ? __pfx___schedule+0x10/0x10 [ 263.496854][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 263.496897][ T38] rt_mutex_schedule+0x76/0xf0 [ 263.496924][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 263.496964][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 263.496994][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 263.497025][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 263.497054][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 263.497093][ T38] ? bdev_release+0x1af/0x660 [ 263.497170][ T38] ? bdev_release+0x1af/0x660 [ 263.497189][ T38] mutex_lock_nested+0x168/0x1d0 [ 263.497216][ T38] ? __pfx___fsnotify_parent+0x10/0x10 [ 263.497247][ T38] bdev_release+0x1af/0x660 [ 263.497275][ T38] ? __pfx_blkdev_release+0x10/0x10 [ 263.497298][ T38] blkdev_release+0x15/0x20 [ 263.497320][ T38] __fput+0x461/0xa70 [ 263.497355][ T38] task_work_run+0x1d9/0x270 [ 263.497382][ T38] ? __pfx_task_work_run+0x10/0x10 [ 263.497415][ T38] get_signal+0x11eb/0x1330 [ 263.497473][ T38] arch_do_signal_or_restart+0xbc/0x840 [ 263.497496][ T38] ? __pfx_task_work_add+0x10/0x10 [ 263.497518][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 263.497547][ T38] ? __fput_deferred+0x253/0x3e0 [ 263.497580][ T38] exit_to_user_mode_loop+0x8c/0x4d0 [ 263.497600][ T38] ? rcu_is_watching+0x15/0xb0 [ 263.497623][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.497644][ T38] do_syscall_64+0x33e/0xf80 [ 263.497667][ T38] ? trace_irq_disable+0x3b/0x140 [ 263.497695][ T38] ? clear_bhb_loop+0x40/0x90 [ 263.497716][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.497734][ T38] RIP: 0033:0x7fd460b6ceb9 [ 263.497759][ T38] RSP: 002b:00007fd45fedd078 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.497778][ T38] RAX: 0000000000000000 RBX: 00007fd460cac050 RCX: 00007fd460b6ceb9 [ 263.497792][ T38] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 263.497803][ T38] RBP: 00007fd460be2980 R08: 0000000000000000 R09: 0000000000000000 [ 263.497816][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.497864][ T38] R13: 000000000000006e R14: 00007fd460cac050 R15: 00007fff29e46838 [ 263.497895][ T38] [ 263.497923][ T38] [ 263.497923][ T38] Showing all locks held in the system: [ 263.497933][ T38] 1 lock held by khungtaskd/38: [ 263.497944][ T38] #0: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 263.498025][ T38] 2 locks held by getty/5370: [ 263.498035][ T38] #0: ffff8880360380a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 263.498085][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 263.498137][ T38] 1 lock held by udevd/5825: [ 263.498147][ T38] #0: ffff8880269694c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 263.498193][ T38] 1 lock held by syz-executor.0/5971: [ 263.498204][ T38] #0: ffff8880269694c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1af/0x660 [ 263.498249][ T38] 3 locks held by kworker/1:4/6088: [ 263.498259][ T38] #0: ffff88813fe42538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 263.498310][ T38] #1: ffffc90004ecfc40 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 263.498359][ T38] #2: ffffffff8eab45f8 ("ratelimiter_table_lock"){+.+.}-{3:3}, at: wg_ratelimiter_gc_entries+0x5d/0x480 [ 263.498409][ T38] 1 lock held by syz-executor.0/6090: [ 263.498419][ T38] #0: ffff8880269694c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 263.498463][ T38] 1 lock held by syz-executor.0/6133: [ 263.498473][ T38] #0: ffff8880269694c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 263.498516][ T38] [ 263.498521][ T38] ============================================= [ 263.498521][ T38] [ 263.498538][ T38] NMI backtrace for cpu 0 [ 263.498560][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 263.498584][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 263.498594][ T38] Call Trace: [ 263.498601][ T38] [ 263.498608][ T38] dump_stack_lvl+0xe8/0x150 [ 263.498633][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 263.498663][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 263.498687][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 263.498719][ T38] sys_info+0x135/0x170 [ 263.498745][ T38] watchdog+0xfd3/0x1030 [ 263.498780][ T38] ? watchdog+0x1c9/0x1030 [ 263.498813][ T38] kthread+0x388/0x470 [ 263.498833][ T38] ? __pfx_watchdog+0x10/0x10 [ 263.498858][ T38] ? __pfx_kthread+0x10/0x10 [ 263.498879][ T38] ret_from_fork+0x514/0xb70 [ 263.498906][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 263.498929][ T38] ? __switch_to+0xc79/0x1410 [ 263.498950][ T38] ? __pfx_kthread+0x10/0x10 [ 263.498971][ T38] ret_from_fork_asm+0x1a/0x30 [ 263.499011][ T38] [ 263.499018][ T38] Sending NMI from CPU 0 to CPUs 1: [ 263.499047][ C1] NMI backtrace for cpu 1 [ 263.499059][ C1] CPU: 1 UID: 0 PID: 6088 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 263.499076][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 263.499086][ C1] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 263.499106][ C1] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 263.499126][ C1] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 2c c3 84 00 48 c7 c3 18 4d 71 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 34 8b 03 65 ff 0d 19 6d c6 10 74 11 83 e0 04 c1 e8 02 5b [ 263.499138][ C1] RSP: 0018:ffffc90004ecf9b8 EFLAGS: 00000806 [ 263.499150][ C1] RAX: 0000000000000000 RBX: ffff8880b8733d18 RCX: 0000000080000003 [ 263.499161][ C1] RDX: 0000000000000000 RSI: ffffffff8ba85b40 RDI: ffffffff8ba85b00 [ 263.499172][ C1] RBP: ffffc90004ecfad8 R08: ffffffff8f8acbf7 R09: 1ffffffff1f1597e [ 263.499183][ C1] R10: dffffc0000000000 R11: fffffbfff1f1597f R12: 1ffff920009d9f4d [ 263.499193][ C1] R13: 0000000000000246 R14: ffffffff8d8ce798 R15: dffffc0000000000 [ 263.499204][ C1] FS: 0000000000000000(0000) GS:ffff88812601f000(0000) knlGS:0000000000000000 [ 263.499216][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.499227][ C1] CR2: 000056089a20b168 CR3: 000000003ec0e000 CR4: 00000000003526f0 [ 263.499241][ C1] Call Trace: [ 263.499247][ C1] [ 263.499254][ C1] trace_irq_enable+0x3b/0x140 [ 263.499276][ C1] trace_hardirqs_on+0x18/0x40 [ 263.499297][ C1] _raw_spin_unlock_irqrestore+0x30/0x80 [ 263.499315][ C1] rt_spin_lock+0x17a/0x400 [ 263.499339][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 263.499362][ C1] ? rt_spin_unlock+0x160/0x200 [ 263.499385][ C1] wg_ratelimiter_gc_entries+0x5d/0x480 [ 263.499405][ C1] ? process_one_work+0x8be/0x1630 [ 263.499425][ C1] process_one_work+0x98b/0x1630 [ 263.499454][ C1] ? __pfx_process_one_work+0x10/0x10 [ 263.499473][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 263.499501][ C1] worker_thread+0xb49/0x1140 [ 263.499526][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 263.499550][ C1] kthread+0x388/0x470 [ 263.499566][ C1] ? __pfx_worker_thread+0x10/0x10 [ 263.499585][ C1] ? __pfx_kthread+0x10/0x10 [ 263.499601][ C1] ret_from_fork+0x514/0xb70 [ 263.499627][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 263.499644][ C1] ? __switch_to+0xc79/0x1410 [ 263.499660][ C1] ? __pfx_kthread+0x10/0x10 [ 263.499681][ C1] ret_from_fork_asm+0x1a/0x30 [ 263.499708][ C1] [ 263.500045][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 263.500064][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 263.500085][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 263.500095][ T38] Call Trace: [ 263.500102][ T38] [ 263.500110][ T38] vpanic+0x56c/0xa60 [ 263.500146][ T38] ? __pfx_vpanic+0x10/0x10 [ 263.500180][ T38] panic+0xc5/0xd0 [ 263.500204][ T38] ? __pfx_panic+0x10/0x10 [ 263.500238][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 263.500272][ T38] watchdog+0x102c/0x1030 [ 263.500306][ T38] ? watchdog+0x1c9/0x1030 [ 263.500338][ T38] kthread+0x388/0x470 [ 263.500358][ T38] ? __pfx_watchdog+0x10/0x10 [ 263.500384][ T38] ? __pfx_kthread+0x10/0x10 [ 263.500406][ T38] ret_from_fork+0x514/0xb70 [ 263.500431][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 263.500454][ T38] ? __switch_to+0xc79/0x1410 [ 263.500476][ T38] ? __pfx_kthread+0x10/0x10 [ 263.500498][ T38] ret_from_fork_asm+0x1a/0x30 [ 263.500538][ T38] [ 263.500952][ T38] Kernel Offset: disabled