Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts. 1970/01/01 00:00:29 parsed 1 programs 1970/01/01 00:00:29 serving rpc on tcp://39509 [ 30.811975][ T4727] cgroup: Unknown subsys name 'net' [ 30.972183][ T4727] cgroup: Unknown subsys name 'cpuset' [ 30.973544][ T4727] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.159167][ T4727] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 33.897950][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.897963][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.905125][ T3792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.905137][ T3792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.943490][ T4734] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.942263][ T4772] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.942547][ T4772] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.942609][ T4772] bridge_slave_0: entered allmulticast mode [ 34.943432][ T4772] bridge_slave_0: entered promiscuous mode [ 34.946996][ T4772] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.947045][ T4772] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.947098][ T4772] bridge_slave_1: entered allmulticast mode [ 34.947769][ T4772] bridge_slave_1: entered promiscuous mode [ 34.961083][ T4772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.961959][ T4772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.968565][ T4772] team0: Port device team_slave_0 added [ 34.969270][ T4772] team0: Port device team_slave_1 added [ 34.980447][ T4772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.980457][ T4772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.980469][ T4772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.987376][ T4772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.987384][ T4772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.987396][ T4772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.999027][ T4772] hsr_slave_0: entered promiscuous mode [ 34.999406][ T4772] hsr_slave_1: entered promiscuous mode [ 35.045293][ T4772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.047229][ T4772] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.047637][ T4772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.048457][ T4772] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.048774][ T4772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.049584][ T4772] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.049908][ T4772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.051785][ T4772] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.074948][ T4772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.080408][ T4772] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.084361][ T3188] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.084402][ T3188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.085229][ T3188] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.085251][ T3188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.186873][ T4772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.197897][ T4772] veth0_vlan: entered promiscuous mode [ 35.200948][ T4772] veth1_vlan: entered promiscuous mode [ 35.207640][ T4772] veth0_macvtap: entered promiscuous mode [ 35.208731][ T4772] veth1_macvtap: entered promiscuous mode [ 35.212765][ T4772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.215361][ T4772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.231939][ T3792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.231987][ T3792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.232006][ T3792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.232021][ T3792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.286441][ T3586] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.343387][ T3586] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.412200][ T3586] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.485314][ T3586] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.588162][ T4822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.588478][ T4822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.588652][ T4822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.589011][ T4822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.589245][ T4822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:35 executed programs: 0 [ 35.809946][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.810453][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.812069][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.812388][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.812576][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.941304][ T4830] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.941366][ T4830] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.941426][ T4830] bridge_slave_0: entered allmulticast mode [ 35.941854][ T4830] bridge_slave_0: entered promiscuous mode [ 35.942753][ T4830] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.942799][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.942847][ T4830] bridge_slave_1: entered allmulticast mode [ 35.943287][ T4830] bridge_slave_1: entered promiscuous mode [ 35.951045][ T4830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.951991][ T4830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.958458][ T4830] team0: Port device team_slave_0 added [ 35.959156][ T4830] team0: Port device team_slave_1 added [ 35.965161][ T4830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.965169][ T4830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.965181][ T4830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.965767][ T4830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.965774][ T4830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.965787][ T4830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.978208][ T4830] hsr_slave_0: entered promiscuous mode [ 35.978485][ T4830] hsr_slave_1: entered promiscuous mode [ 35.978680][ T4830] debugfs: 'hsr0' already exists in 'hsr' [ 35.978735][ T4830] Cannot create hsr debugfs directory [ 37.851176][ T4822] Bluetooth: hci0: command tx timeout [ 38.642438][ T3586] bridge_slave_1: left allmulticast mode [ 38.642465][ T3586] bridge_slave_1: left promiscuous mode [ 38.642743][ T3586] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.645043][ T3586] bridge_slave_0: left allmulticast mode [ 38.645056][ T3586] bridge_slave_0: left promiscuous mode [ 38.645125][ T3586] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.700620][ T3586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.732911][ T3586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.734110][ T3586] bond0 (unregistering): Released all slaves [ 38.753134][ T3586] hsr_slave_0: left promiscuous mode [ 38.753422][ T3586] hsr_slave_1: left promiscuous mode [ 38.753720][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.753733][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.754119][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.754129][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.757301][ T3586] veth1_macvtap: left promiscuous mode [ 38.757330][ T3586] veth0_macvtap: left promiscuous mode [ 38.757374][ T3586] veth1_vlan: left promiscuous mode [ 38.757432][ T3586] veth0_vlan: left promiscuous mode [ 38.841014][ T3586] team0 (unregistering): Port device team_slave_1 removed [ 38.846219][ T3586] team0 (unregistering): Port device team_slave_0 removed [ 39.015981][ T4406] 8021q: adding VLAN 0 to HW filter on device eth0 [ 39.159969][ T4830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.163750][ T4830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.164061][ T4830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.165191][ T4830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.165501][ T4830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.166500][ T4830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.247061][ T4830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.248267][ T4830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.272879][ T4830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.289372][ T4830] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.291957][ T3792] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.291983][ T3792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.294658][ T3792] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.294681][ T3792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.404544][ T4830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.415105][ T4830] veth0_vlan: entered promiscuous mode [ 39.417014][ T4830] veth1_vlan: entered promiscuous mode [ 39.424389][ T4830] veth0_macvtap: entered promiscuous mode [ 39.425727][ T4830] veth1_macvtap: entered promiscuous mode [ 39.429009][ T4830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.435336][ T4830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.452547][ T3586] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.452788][ T3586] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.452804][ T3586] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.452818][ T3586] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.460152][ T3792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.460162][ T3792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.469341][ T3792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.469352][ T3792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.790738][ T1185] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 39.940598][ T4822] Bluetooth: hci0: command tx timeout [ 39.941375][ T1185] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 39.942265][ T1185] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 39.942276][ T1185] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 39.942291][ T1185] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.946335][ T1185] usb 1-1: probing VID:PID(0424:012C) [ 39.947254][ T1185] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 39.947266][ T1185] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 39.947274][ T1185] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 39.947281][ T1185] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 39.947287][ T1185] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 40.347046][ T1185] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 40.547427][ T1185] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted 1970/01/01 00:00:41 executed programs: 3 [ 41.363423][ T1185] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 41.379168][ T1185] usb 1-1: USB disconnect, device number 2 [ 41.379956][ T4804] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 41.384626][ T4804] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 41.446864][ T1185] USB vub300 remote SDIO host controller[0] now disconnected [ 41.730537][ T1185] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 41.880876][ T1185] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 41.881540][ T1185] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 41.881551][ T1185] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 41.881565][ T1185] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.886713][ T1185] usb 1-1: probing VID:PID(0424:012C) [ 41.886988][ T1185] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 41.886996][ T1185] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 41.887004][ T1185] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 41.887010][ T1185] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 41.887017][ T1185] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 42.010905][ T4822] Bluetooth: hci0: command tx timeout [ 42.284196][ T1185] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 42.410625][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 42.410639][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/0 [ 42.410648][ C0] preempt_count: 101, expected: 0 [ 42.410654][ C0] RCU nest depth: 0, expected: 0 [ 42.410659][ C0] locks held by swapper/0/0: 1, last CPU#0: [ 42.410666][ C0] #0: ffff80008ea97c60 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xf0/0x7f4 [ 42.410702][ C0] Preemption disabled at: [ 42.410705][ C0] [] schedule_preempt_disabled+0x20/0x2c [ 42.410719][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT [ 42.410728][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.410733][ C0] Call trace: [ 42.410736][ C0] show_stack+0x2c/0x3c (C) [ 42.410748][ C0] __dump_stack+0x30/0x40 [ 42.410758][ C0] dump_stack_lvl+0xd8/0x12c [ 42.410768][ C0] dump_stack+0x1c/0x28 [ 42.410777][ C0] __might_resched+0x354/0x4c0 [ 42.410787][ C0] __might_sleep+0x84/0xdc [ 42.410795][ C0] __cancel_work_sync+0x78/0x144 [ 42.410803][ C0] cancel_delayed_work_sync+0x24/0x38 [ 42.410811][ C0] mmc_free_host+0x20/0x48 [ 42.410822][ C0] vub300_delete+0xd4/0xec [ 42.410830][ C0] vub300_inactivity_timer_expired+0xd4/0x2ac [ 42.410838][ C0] call_timer_fn+0x198/0x7f4 [ 42.410849][ C0] __run_timer_base+0x530/0x744 [ 42.410862][ C0] run_timer_base+0x84/0x1b8 [ 42.410874][ C0] run_timer_softirq+0x20/0x48 [ 42.410885][ C0] handle_softirqs+0x324/0xcbc [ 42.410893][ C0] __do_softirq+0x14/0x20 [ 42.410901][ C0] ____do_softirq+0x14/0x20 [ 42.410908][ C0] call_on_irq_stack+0x30/0x48 [ 42.410915][ C0] do_softirq_own_stack+0x20/0x2c [ 42.410923][ C0] __irq_exit_rcu+0x10c/0x318 [ 42.410930][ C0] irq_exit_rcu+0x14/0x84 [ 42.410938][ C0] el1_interrupt+0x40/0x60 [ 42.410947][ C0] el1h_64_irq_handler+0x18/0x24 [ 42.410956][ C0] el1h_64_irq+0x78/0x7c [ 42.410963][ C0] default_idle_call+0xa0/0xb8 (P) [ 42.410974][ C0] do_idle+0x1ec/0x450 [ 42.410983][ C0] cpu_startup_entry+0x5c/0x74 [ 42.410993][ C0] rest_init+0x390/0x3a8 [ 42.411003][ C0] start_kernel+0x374/0x3c0 [ 42.411014][ C0] __primary_switched+0x8c/0x94 [ 42.411129][ C0] ODEBUG: object 00000000c8fae9fb is NOT on stack 000000009affeaa5, but annotated. [ 42.411251][ C0] ------------[ cut here ]------------ [ 42.411255][ C0] WARNING: lib/debugobjects.c:672 at debug_object_is_on_stack+0xb0/0xb8, CPU#0: swapper/0/0 [ 42.450460][ C0] Modules linked in: [ 42.451102][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 PREEMPT [ 42.452847][ C0] Tainted: [W]=WARN [ 42.453525][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.455262][ C0] pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 42.456530][ C0] pc : debug_object_is_on_stack+0xb0/0xb8 [ 42.457473][ C0] lr : debug_object_is_on_stack+0xb0/0xb8 [ 42.458460][ C0] sp : ffff80008ea97780 [ 42.459188][ C0] x29: ffff80008ea97780 x28: dfff800000000000 x27: ffff0000d2971b40 [ 42.460640][ C0] x26: 0000000000000001 x25: dfff800000000000 x24: 0000000000000000 [ 42.462003][ C0] x23: 0000000000000000 x22: ffff80008e9ad000 x21: ffff800088a7c4e0 [ 42.463422][ C0] x20: 0000000000000001 x19: ffff80008ea978e0 x18: 00000000ffffffff [ 42.464864][ C0] x17: 3561616566666139 x16: 3030303030303030 x15: 206b63617473206e [ 42.466194][ C0] x14: 00000000000005d9 x13: 0000000000000001 x12: 0000000000000003 [ 42.467634][ C0] x11: 0000000000000000 x10: 0000000000000103 x9 : b5b535d9c2933a00 [ 42.469056][ C0] x8 : b5b535d9c2933a00 x7 : ffff8000804823d8 x6 : 0000000000000000 [ 42.470502][ C0] x5 : 0000000000000001 x4 : 0000000000000000 x3 : ffff80008048ced8 [ 42.471934][ C0] x2 : 0000000100000102 x1 : ffff800088a7c4c0 x0 : 0000000000000050 [ 42.473318][ C0] Call trace: [ 42.473914][ C0] debug_object_is_on_stack+0xb0/0xb8 (P) [ 42.474880][ C0] lookup_object_or_alloc+0xfc/0x188 [ 42.475816][ C0] __debug_object_init+0x8c/0x1e0 [ 42.476653][ C0] debug_object_init_on_stack+0x20/0x2c [ 42.477605][ C0] init_rcu_head_on_stack+0x18/0x24 [ 42.478502][ C0] __synchronize_srcu+0x1ac/0x268 [ 42.479361][ C0] synchronize_srcu+0x280/0x2e0 [ 42.480251][ C0] wakeup_source_unregister+0x110/0x32c [ 42.481209][ C0] mmc_host_classdev_release+0x48/0x100 [ 42.482168][ C0] device_release+0xb4/0x1d4 [ 42.482960][ C0] kobject_put+0x1dc/0x4b8 [ 42.483734][ C0] put_device+0x28/0x40 [ 42.484482][ C0] mmc_free_host+0x38/0x48 [ 42.485271][ C0] vub300_delete+0xd4/0xec [ 42.486065][ C0] vub300_inactivity_timer_expired+0xd4/0x2ac [ 42.487114][ C0] call_timer_fn+0x198/0x7f4 [ 42.487937][ C0] __run_timer_base+0x530/0x744 [ 42.488779][ C0] run_timer_base+0x84/0x1b8 [ 42.489582][ C0] run_timer_softirq+0x20/0x48 [ 42.490412][ C0] handle_softirqs+0x324/0xcbc [ 42.491203][ C0] __do_softirq+0x14/0x20 [ 42.491949][ C0] ____do_softirq+0x14/0x20 [ 42.492740][ C0] call_on_irq_stack+0x30/0x48 [ 42.493584][ C0] do_softirq_own_stack+0x20/0x2c [ 42.494484][ C0] __irq_exit_rcu+0x10c/0x318 [ 42.495304][ C0] irq_exit_rcu+0x14/0x84 [ 42.496086][ C0] el1_interrupt+0x40/0x60 [ 42.496819][ C0] el1h_64_irq_handler+0x18/0x24 [ 42.497693][ C0] el1h_64_irq+0x78/0x7c [ 42.498451][ C0] default_idle_call+0xa0/0xb8 (P) [ 42.499271][ C0] do_idle+0x1ec/0x450 [ 42.499995][ C0] cpu_startup_entry+0x5c/0x74 [ 42.500766][ C0] rest_init+0x390/0x3a8 [ 42.501465][ C0] start_kernel+0x374/0x3c0 [ 42.502224][ C0] __primary_switched+0x8c/0x94 [ 42.503055][ C0] irq event stamp: 476363 [ 42.503809][ C0] hardirqs last enabled at (476362): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 42.505623][ C0] hardirqs last disabled at (476363): [] _raw_spin_lock_irqsave+0x2c/0x7c [ 42.507247][ C0] softirqs last enabled at (476240): [] handle_softirqs+0xb2c/0xcbc [ 42.508850][ C0] softirqs last disabled at (476247): [] __do_softirq+0x14/0x20 [ 42.510493][ C0] ---[ end trace 0000000000000000 ]--- [ 42.511557][ C0] BUG: scheduling while atomic: swapper/0/0/0x00000102 [ 42.511567][ C0] locks held by swapper/0/0: 1, on CPU#0: [ 42.511574][ C0] #0: ffff80008ea97c60 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xf0/0x7f4 [ 42.511602][ C0] Modules linked in: [ 42.511608][ C0] Preemption disabled at: [ 42.511610][ C0] [] schedule_preempt_disabled+0x20/0x2c [ 42.511622][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 PREEMPT [ 42.511632][ C0] Tainted: [W]=WARN [ 42.511634][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.511638][ C0] Call trace: [ 42.511640][ C0] show_stack+0x2c/0x3c (C) [ 42.511651][ C0] __dump_stack+0x30/0x40 [ 42.511661][ C0] dump_stack_lvl+0xd8/0x12c [ 42.511671][ C0] dump_stack+0x1c/0x28 [ 42.511680][ C0] __schedule_bug+0x10c/0x190 [ 42.511690][ C0] __schedule+0x1418/0x2b00 [ 42.511697][ C0] schedule+0x13c/0x20c [ 42.511705][ C0] schedule_timeout+0xc0/0x28c [ 42.511713][ C0] wait_for_common+0x220/0x394 [ 42.511721][ C0] wait_for_completion+0x18/0x24 [ 42.511729][ C0] __synchronize_srcu+0x1cc/0x268 [ 42.511739][ C0] synchronize_srcu+0x280/0x2e0 [ 42.511749][ C0] wakeup_source_unregister+0x110/0x32c [ 42.511758][ C0] mmc_host_classdev_release+0x48/0x100 [ 42.511769][ C0] device_release+0xb4/0x1d4 [ 42.511778][ C0] kobject_put+0x1dc/0x4b8 [ 42.511788][ C0] put_device+0x28/0x40 [ 42.511798][ C0] mmc_free_host+0x38/0x48 [ 42.511808][ C0] vub300_delete+0xd4/0xec [ 42.511815][ C0] vub300_inactivity_timer_expired+0xd4/0x2ac [ 42.511823][ C0] call_timer_fn+0x198/0x7f4 [ 42.511833][ C0] __run_timer_base+0x530/0x744 [ 42.511843][ C0] run_timer_base+0x84/0x1b8 [ 42.511854][ C0] run_timer_softirq+0x20/0x48 [ 42.511867][ C0] handle_softirqs+0x324/0xcbc [ 42.511876][ C0] __do_softirq+0x14/0x20 [ 42.511883][ C0] ____do_softirq+0x14/0x20 [ 42.511890][ C0] call_on_irq_stack+0x30/0x48 [ 42.511897][ C0] do_softirq_own_stack+0x20/0x2c [ 42.511905][ C0] __irq_exit_rcu+0x10c/0x318 [ 42.511912][ C0] irq_exit_rcu+0x14/0x84 [ 42.511920][ C0] el1_interrupt+0x40/0x60 [ 42.511928][ C0] el1h_64_irq_handler+0x18/0x24 [ 42.511937][ C0] el1h_64_irq+0x78/0x7c [ 42.511945][ C0] default_idle_call+0xa0/0xb8 (P) [ 42.511955][ C0] do_idle+0x1ec/0x450 [ 42.511964][ C0] cpu_startup_entry+0x5c/0x74 [ 42.511973][ C0] rest_init+0x390/0x3a8 [ 42.511983][ C0] start_kernel+0x374/0x3c0 [ 42.511993][ C0] __primary_switched+0x8c/0x94 [ 42.512009][ T0] ------------[ cut here ]------------ [ 42.512012][ T0] releasing a pinned lock [ 42.512038][ T0] WARNING: kernel/locking/lockdep.c:5597 at lock_release+0x288/0x354, CPU#0: swapper/0/0 [ 42.556142][ T0] Modules linked in: [ 42.556818][ T0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 PREEMPT [ 42.558558][ T0] Tainted: [W]=WARN [ 42.559215][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.560825][ T0] pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 42.562113][ T0] pc : lock_release+0x288/0x354 [ 42.562944][ T0] lr : lock_release+0x288/0x354 [ 42.563801][ T0] sp : ffff80008ea973c0 [ 42.564548][ T0] x29: ffff80008ea973d0 x28: 1fffe00035bdc1b3 x27: 1fffe00035bdc033 [ 42.565990][ T0] x26: 0000000000000002 x25: 00000000000000c0 x24: ffff800088a022f8 [ 42.567412][ T0] x23: ffff800088a7d038 x22: 0000000000000002 x21: ffff0001adee01e0 [ 42.568855][ T0] x20: ffff8000800a2d0c x19: ffff800088a7c4c0 x18: 00000000ffffffff [ 42.570308][ T0] x17: 3561616566666139 x16: 0000000000000001 x15: ffff80008a707000 [ 42.571735][ T0] x14: 0000000000000671 x13: 0000000000000001 x12: 0000000000000003 [ 42.573124][ T0] x11: 0000000000000000 x10: 0000000000000004 x9 : b5b535d9c2933a00 [ 42.574503][ T0] x8 : b5b535d9c2933a00 x7 : 0000000000000001 x6 : ffff8000804823d8 [ 42.575941][ T0] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f3e90 [ 42.577364][ T0] x2 : 0000000000000002 x1 : ffff800088a7c4c0 x0 : 0000000000000000 [ 42.578776][ T0] Call trace: [ 42.579341][ T0] lock_release+0x288/0x354 (P) [ 42.580190][ T0] _raw_spin_unlock+0x24/0x78 [ 42.581039][ T0] dequeue_task_idle+0x1c/0x64 [ 42.581885][ T0] dequeue_task+0x204/0x2fc [ 42.582716][ T0] __schedule+0x564/0x2b00 [ 42.583523][ T0] schedule+0x13c/0x20c [ 42.584260][ T0] schedule_timeout+0xc0/0x28c [ 42.585056][ T0] wait_for_common+0x220/0x394 [ 42.585838][ T0] wait_for_completion+0x18/0x24 [ 42.586633][ T0] __synchronize_srcu+0x1cc/0x268 [ 42.587482][ T0] synchronize_srcu+0x280/0x2e0 [ 42.588290][ T0] wakeup_source_unregister+0x110/0x32c [ 42.589274][ T0] mmc_host_classdev_release+0x48/0x100 [ 42.590243][ T0] device_release+0xb4/0x1d4 [ 42.591053][ T0] kobject_put+0x1dc/0x4b8 [ 42.591830][ T0] put_device+0x28/0x40 [ 42.592599][ T0] mmc_free_host+0x38/0x48 [ 42.593415][ T0] vub300_delete+0xd4/0xec [ 42.594207][ T0] vub300_inactivity_timer_expired+0xd4/0x2ac [ 42.595292][ T0] call_timer_fn+0x198/0x7f4 [ 42.596048][ T0] __run_timer_base+0x530/0x744 [ 42.596880][ T0] run_timer_base+0x84/0x1b8 [ 42.597674][ T0] run_timer_softirq+0x20/0x48 [ 42.598475][ T0] handle_softirqs+0x324/0xcbc [ 42.599292][ T0] __do_softirq+0x14/0x20 [ 42.600070][ T0] ____do_softirq+0x14/0x20 [ 42.600885][ T0] call_on_irq_stack+0x30/0x48 [ 42.601748][ T0] do_softirq_own_stack+0x20/0x2c [ 42.602667][ T0] __irq_exit_rcu+0x10c/0x318 [ 42.603523][ T0] irq_exit_rcu+0x14/0x84 [ 42.604243][ T0] el1_interrupt+0x40/0x60 [ 42.605011][ T0] el1h_64_irq_handler+0x18/0x24 [ 42.605883][ T0] el1h_64_irq+0x78/0x7c [ 42.606637][ T0] default_idle_call+0xa0/0xb8 (P) [ 42.607561][ T0] do_idle+0x1ec/0x450 [ 42.608311][ T0] cpu_startup_entry+0x5c/0x74 [ 42.609096][ T0] rest_init+0x390/0x3a8 [ 42.609831][ T0] start_kernel+0x374/0x3c0 [ 42.610626][ T0] __primary_switched+0x8c/0x94 [ 42.611443][ T0] irq event stamp: 476407 [ 42.612168][ T0] hardirqs last enabled at (476406): [] dump_stack_lvl+0xe8/0x12c [ 42.613789][ T0] hardirqs last disabled at (476407): [] __schedule+0x2f8/0x2b00 [ 42.615462][ T0] softirqs last enabled at (476240): [] handle_softirqs+0xb2c/0xcbc [ 42.617193][ T0] softirqs last disabled at (476247): [] __do_softirq+0x14/0x20 [ 42.618849][ T0] ---[ end trace 0000000000000000 ]--- [ 4 ** replaying previous printk message ** [ 42.620504][ C0] ================================================================== [ 42.620514][ C0] BUG: KASAN: stack-out-of-bounds in tick_nohz_handler+0x320/0x5fc [ 42.620534][ C0] Read of size 8 at addr ffff80008ea978d8 by task swapper/0/0 [ 42.620541][ C0] [ 42.620546][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 PREEMPT [ 42.620556][ C0] Tainted: [W]=WARN [ 42.620559][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.620563][ C0] Call trace: [ 42.620565][ C0] show_stack+0x2c/0x3c (C) [ 42.620578][ C0] __dump_stack+0x30/0x40 [ 42.620587][ C0] dump_stack_lvl+0xd8/0x12c [ 42.620597][ C0] print_address_description+0xb0/0x238 [ 42.620605][ C0] print_report+0x68/0x84 [ 42.620612][ C0] kasan_report+0x8c/0xc4 [ 42.620620][ C0] __asan_report_load8_noabort+0x20/0x2c [ 42.620629][ C0] tick_nohz_handler+0x320/0x5fc [ 42.620639][ C0] __hrtimer_run_queues+0x2e4/0x998 [ 42.620647][ C0] hrtimer_interrupt+0x408/0x8c0 [ 42.620654][ C0] arch_timer_handler_virt+0x70/0x84 [ 42.620663][ C0] handle_percpu_devid_irq+0x240/0x42c [ 42.620673][ C0] generic_handle_domain_irq+0xe4/0x154 [ 42.620681][ C0] gic_handle_irq+0x6c/0x180 [ 42.620688][ C0] do_interrupt_handler+0xe0/0x138 [ 42.620696][ C0] el1_interrupt+0x3c/0x60 [ 42.620705][ C0] el1h_64_irq_handler+0x18/0x24 [ 42.620714][ C0] el1h_64_irq+0x78/0x7c [ 42.620721][ C0] seqcount_lockdep_reader_access+0xd8/0xf8 (P) [ 42.620729][ C0] ktime_get_with_offset+0xb8/0x2b8 [ 42.620737][ C0] mac80211_hwsim_tx_frame_no_nl+0x10c/0x17e0 [ 42.620746][ C0] mac80211_hwsim_tx_frame+0x1b4/0x1ec [ 42.620754][ C0] __mac80211_hwsim_beacon_tx+0x1b8/0x2c8 [ 42.620763][ C0] mac80211_hwsim_beacon_tx+0x324/0x6c0 [ 42.620772][ C0] __iterate_interfaces+0x234/0x4e0 [ 42.620784][ C0] ieee80211_iterate_active_interfaces_atomic+0xf4/0x1ac [ 42.620795][ C0] mac80211_hwsim_beacon+0xb4/0x1a4 [ 42.620803][ C0] __hrtimer_run_queues+0x310/0x998 [ 42.620810][ C0] hrtimer_run_softirq+0x1b4/0x2a8 [ 42.620818][ C0] handle_softirqs+0x324/0xcbc [ 42.620825][ C0] __do_softirq+0x14/0x20 [ 42.620832][ C0] ____do_softirq+0x14/0x20 [ 42.620839][ C0] call_on_irq_stack+0x30/0x48 [ 42.620846][ C0] [ 42.620848][ C0] The buggy address belongs to a 8-page vmalloc region starting at 0xffff80008ea90000 allocated at init_IRQ+0x10/0x34 [ 42.620870][ C0] The buggy address belongs to the physical page: [ 42.620874][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1011df [ 42.620882][ C0] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 42.620892][ C0] raw: 05ffc00000000000 fffffdffc30477c8 fffffdffc30477c8 0000000000000000 [ 42.620900][ C0] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 42.620904][ C0] page dumped because: kasan: bad access detected [ 42.620907][ C0] [ 42.620909][ C0] Memory state around the buggy address: [ 42.620913][ C0] ffff80008ea97780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.620918][ C0] ffff80008ea97800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.620922][ C0] >ffff80008ea97880: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 [ 42.620925][ C0] ^ [ 42.620929][ C0] ffff80008ea97900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.620934][ C0] ffff80008ea97980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.620937][ C0] ================================================================== [ 42.620940][ C0] Disabling lock debugging due to kernel taint [ 42.621012][ T0] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 42.621018][ T0] Mem abort info: [ 42.621020][ T0] ESR = 0x0000000086000007 [ 42.621023][ T0] EC = 0x21: IABT (current EL), IL = 32 bits [ 42.621028][ T0] SET = 0, FnV = 0 [ 42.621030][ T0] EA = 0, S1PTW = 0 [ 42.621033][ T0] FSC = 0x07: level 3 translation fault [ 42.621037][ T0] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000121cb1000 [ 42.621042][ T0] [0000000000000000] pgd=0800000112d44403, p4d=0800000112d44403, pud=0800000111cf5403, pmd=0800000121cb8403, pte=0000000000000000 [ 42.621059][ T0] Internal error: Oops: 0000000086000007 [#1] SMP [ 42.688718][ T0] Modules linked in: [ 42.689403][ T0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G B W syzkaller #0 PREEMPT [ 42.691167][ T0] Tainted: [B]=BAD_PAGE, [W]=WARN [ 42.692036][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.693649][ T0] pstate: 434000c5 (nZcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 42.694948][ T0] pc : 0x0 [ 42.695468][ T0] lr : 0x0 [ 42.696011][ T0] sp : ffff80008ea97240 [ 42.696695][ T0] x29: ffff700011d52e4c x28: ffff800088a7c4c0 x27: 1fffe00035bdc033 [ 42.698025][ T0] x26: 0000000000000002 x25: dfff800000000000 x24: ffff800088a7c9d8 [ 42.699384][ T0] x23: 0000000083400005 x22: 1ffff0001114f899 x21: dfff800000000000 [ 42.700775][ T0] x20: ffff800088a7c4c0 x19: ffff800088a7c4c8 x18: 00000000ffffffff [ 42.702254][ T0] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 42.703747][ T0] x14: 0000000000000000 x13: 0000000000000001 x12: ffff0000c1a21d80 [ 42.705193][ T0] x11: ffff8001254c8000 x10: dfff800000000000 x9 : 00000000000000c0 [ 42.706624][ T0] x8 : 0000000004200002 x7 : 0000000000000000 x6 : ffff8000803a6bfc [ 42.708010][ T0] x5 : 0000000000000001 x4 : 00000009ec68fd0b x3 : ffff800080570c28 [ 42.709380][ T0] x2 : 0000000000000003 x1 : ffff800088a7c4c0 x0 : ffff80008030afc0 [ 42.710847][ T0] Call trace: [ 42.711411][ T0] 0x0 (P) [ 42.711963][ T0] ---[ end trace 0000000000000000 ]--- [ 42.904806][ T0] Kernel panic - not syncing: Oops: Fatal exception [ 42.905890][ T0] SMP: stopping secondary CPUs [ 42.906732][ T0] Kernel Offset: disabled [ 42.907423][ T0] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 42.908541][ T0] Memory Limit: none [ 43.104885][ T0] Rebooting in 86400 seconds..