Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. 2025/12/14 02:22:28 parsed 1 programs [ 125.787251][ T4210] cgroup: Unknown subsys name 'net' [ 125.895643][ T4210] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 127.223323][ T4210] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 128.721268][ T4222] chnl_net:caif_netlink_parms(): no params data found [ 128.765066][ T4222] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.772895][ T4222] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.781206][ T4222] device bridge_slave_0 entered promiscuous mode [ 128.793511][ T4222] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.800653][ T4222] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.808321][ T4222] device bridge_slave_1 entered promiscuous mode [ 128.827691][ T4222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.838494][ T4222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.862420][ T4222] team0: Port device team_slave_0 added [ 128.869351][ T4222] team0: Port device team_slave_1 added [ 128.886493][ T4222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.893866][ T4222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.919883][ T4222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.934320][ T4222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.941506][ T4222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.967507][ T4222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.997332][ T4222] device hsr_slave_0 entered promiscuous mode [ 129.004510][ T4222] device hsr_slave_1 entered promiscuous mode [ 129.089373][ T4222] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 129.099037][ T4222] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 129.108043][ T4222] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 129.117321][ T4222] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 129.142117][ T4222] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.149239][ T4222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.156918][ T4222] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.163981][ T4222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.214639][ T4222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.228282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.239269][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.248862][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.258817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 129.274081][ T4222] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.286472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.296064][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.303149][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.320252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.339972][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.347033][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.373219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.382427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.390968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.399419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.410563][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.432708][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.541900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.549362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.565654][ T4222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.586254][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.607054][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.618071][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.626576][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.637580][ T4222] device veth0_vlan entered promiscuous mode [ 129.649673][ T4222] device veth1_vlan entered promiscuous mode [ 129.674523][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.683536][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.693589][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.705055][ T4222] device veth0_macvtap entered promiscuous mode [ 129.714363][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.724843][ T4222] device veth1_macvtap entered promiscuous mode [ 129.743675][ T4222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.753432][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.764045][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.775747][ T4222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.783989][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.794199][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.813499][ T4222] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.822630][ T4222] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.831646][ T4222] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.840549][ T4222] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.923975][ T4222] syz-executor (4222) used greatest stack depth: 20128 bytes left [ 130.420406][ T156] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.085942][ T1468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.100745][ T1468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.110886][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.119432][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.127643][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.136323][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/12/14 02:22:36 executed programs: 0 [ 132.037498][ T4298] chnl_net:caif_netlink_parms(): no params data found [ 132.075707][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.083077][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.090820][ T4298] device bridge_slave_0 entered promiscuous mode [ 132.098574][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.106064][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.114192][ T4298] device bridge_slave_1 entered promiscuous mode [ 132.134319][ T4298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.145005][ T4298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.166094][ T4298] team0: Port device team_slave_0 added [ 132.174194][ T4298] team0: Port device team_slave_1 added [ 132.191456][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.198404][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.224961][ T4298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.237226][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.244283][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.270517][ T4298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.300043][ T4298] device hsr_slave_0 entered promiscuous mode [ 132.306765][ T4298] device hsr_slave_1 entered promiscuous mode [ 132.313487][ T4298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.321435][ T4298] Cannot create hsr debugfs directory [ 132.505860][ T156] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.521630][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.528099][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.040413][ T4235] Bluetooth: hci0: command 0x0409 tx timeout [ 134.715523][ T156] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.767502][ T156] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.635072][ T156] device hsr_slave_0 left promiscuous mode [ 135.641585][ T156] device hsr_slave_1 left promiscuous mode [ 135.648085][ T156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.655984][ T156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.664339][ T156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.671774][ T156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.679228][ T156] device bridge_slave_1 left promiscuous mode [ 135.685981][ T156] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.697879][ T156] device bridge_slave_0 left promiscuous mode [ 135.704832][ T156] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.722392][ T156] device veth1_macvtap left promiscuous mode [ 135.728524][ T156] device veth0_macvtap left promiscuous mode [ 135.734679][ T156] device veth1_vlan left promiscuous mode [ 135.741158][ T156] device veth0_vlan left promiscuous mode [ 135.868697][ T156] team0 (unregistering): Port device team_slave_1 removed [ 135.883478][ T156] team0 (unregistering): Port device team_slave_0 removed [ 135.895829][ T156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.909665][ T156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.957200][ T156] bond0 (unregistering): Released all slaves [ 136.047187][ T4298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 136.058440][ T4298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 136.067690][ T4298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 136.077610][ T4298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 136.120036][ T1346] Bluetooth: hci0: command 0x041b tx timeout [ 136.138451][ T4298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.151536][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.159165][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.175684][ T4298] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.191016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.199726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.208391][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.215502][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.223289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.233905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.242606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.251685][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.258732][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.277353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.286324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.299023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.308141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.316991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.328231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.336972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.352199][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.361253][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.369433][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.378075][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.387995][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.493937][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.502414][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.516435][ T4298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.535472][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.544628][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.566432][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.576456][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.586891][ T4298] device veth0_vlan entered promiscuous mode [ 136.594901][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.603259][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.615807][ T4298] device veth1_vlan entered promiscuous mode [ 136.638721][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.647528][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 136.656015][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.665515][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.675909][ T4298] device veth0_macvtap entered promiscuous mode [ 136.686317][ T4298] device veth1_macvtap entered promiscuous mode [ 136.703841][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.712447][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.721096][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.729015][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.739450][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.751586][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.760436][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.769479][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.781159][ T4298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.790606][ T4298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.799310][ T4298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.808998][ T4298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.865048][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.877388][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.898191][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.900380][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2025/12/14 02:22:41 executed programs: 2 [ 136.913545][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.922582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 138.200948][ T1346] Bluetooth: hci0: command 0x040f tx timeout [ 154.105622][ T4404] chnl_net:caif_netlink_parms(): no params data found [ 155.979969][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 158.079966][ T4378] Bluetooth: hci1: command 0x041b tx timeout [ 160.130729][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 162.230629][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 216.080582][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 218.129907][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 220.229978][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 222.280046][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 243.979785][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 243.986832][ C1] rcu: 0-...!: (0 ticks this GP) idle=48b/1/0x4000000000000002 softirq=7112/7112 fqs=0 [ 243.997258][ C1] (detected by 1, t=10506 jiffies, g=7121, q=614) [ 244.003788][ C1] Sending NMI from CPU 1 to CPUs 0: [ 244.009003][ C0] NMI backtrace for cpu 0 [ 244.009025][ C0] CPU: 0 PID: 4402 Comm: syz.0.50 Not tainted syzkaller #0 [ 244.009041][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.009057][ C0] RIP: 0010:lock_is_held_type+0x4c/0x190 [ 244.009092][ C0] Code: 3d 6c 7f c7 03 00 0f 84 03 01 00 00 65 8b 05 5b 8f 60 76 85 c0 0f 85 f4 00 00 00 65 48 8b 1d cb 85 60 76 83 bb ec 0a 00 00 00 <0f> 85 df 00 00 00 41 89 f7 49 89 fe 48 c7 04 24 00 00 00 00 9c 8f [ 244.009105][ C0] RSP: 0000:ffffc900035cf1f0 EFLAGS: 00000046 [ 244.009119][ C0] RAX: 0000000000000000 RBX: ffff888023ea3b80 RCX: 6b6339de1f3c9500 [ 244.009131][ C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8c11c720 [ 244.009142][ C0] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffc900035cf3a0 [ 244.009154][ C0] R10: fffff520006b9e7b R11: 1ffff920006b9e74 R12: dffffc0000000000 [ 244.009166][ C0] R13: ffffc900035cf406 R14: ffffffff8bf23a40 R15: dffffc0000000000 [ 244.009178][ C0] FS: 000055558ab6b500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 244.009193][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.009205][ C0] CR2: 00007f0508407000 CR3: 0000000071832000 CR4: 00000000003506f0 [ 244.009219][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 244.009228][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 244.009238][ C0] Call Trace: [ 244.009245][ C0] [ 244.009255][ C0] perf_misc_flags+0x56/0x1b0 [ 244.009276][ C0] perf_prepare_sample+0x132/0x1cb0 [ 244.009296][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 244.009315][ C0] ? perf_callchain+0x190/0x190 [ 244.009330][ C0] ? rcu_lock_release+0x9/0x20 [ 244.009350][ C0] perf_event_output_forward+0x146/0x280 [ 244.009367][ C0] ? perf_get_page_size+0x420/0x420 [ 244.009384][ C0] ? perf_event_output_forward+0x222/0x280 [ 244.009399][ C0] ? lockdep_lock+0x1e0/0x1e0 [ 244.009416][ C0] ? perf_get_page_size+0x420/0x420 [ 244.009432][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 244.009455][ C0] __perf_event_overflow+0x364/0x530 [ 244.009474][ C0] perf_swevent_event+0x4ad/0x530 [ 244.009493][ C0] perf_tp_event+0x32c/0xb50 [ 244.009509][ C0] ? perf_swevent_event+0x50e/0x530 [ 244.009525][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 244.009542][ C0] ? perf_tp_event+0xa3b/0xb50 [ 244.009574][ C0] ? update_load_avg+0xbea/0x1130 [ 244.009595][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 244.009614][ C0] perf_trace_preemptirq_template+0x2be/0x380 [ 244.009634][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 244.009653][ C0] ? trace_event_raw_event_preemptirq_template+0x270/0x270 [ 244.009671][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 244.009691][ C0] ? lock_chain_count+0x20/0x20 [ 244.009710][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 244.009726][ C0] trace_irq_enable_rcuidle+0x108/0x180 [ 244.009744][ C0] trace_hardirqs_on+0x57/0x80 [ 244.009760][ C0] asm_sysvec_irq_work+0x16/0x20 [ 244.009776][ C0] RIP: 0010:rcu_read_unlock_special+0x84/0x480 [ 244.009794][ C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 ed 11 9e 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 244.009806][ C0] RSP: 0000:ffffc900035cfa00 EFLAGS: 00000206 [ 244.009819][ C0] RAX: 6b6339de1f3c9500 RBX: 1ffff920006b9f44 RCX: 6b6339de1f3c9500 [ 244.009831][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b1be0 RDI: ffffffff8a59e800 [ 244.009843][ C0] RBP: ffffc900035cfad0 R08: dffffc0000000000 R09: fffffbfff1ff5419 [ 244.009855][ C0] R10: fffffbfff1ff5419 R11: 1ffffffff1ff5418 R12: ffffffff8c120c00 [ 244.009867][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001 [ 244.009900][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 244.009914][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 244.009932][ C0] ? __mod_lruvec_page_state+0x1fe/0x330 [ 244.009953][ C0] __rcu_read_unlock+0x78/0xd0 [ 244.009968][ C0] __unlock_page_memcg+0xea/0x100 [ 244.009986][ C0] wp_page_copy+0xeb2/0x1fd0 [ 244.010001][ C0] ? do_wp_page+0x902/0xad0 [ 244.010020][ C0] ? insert_page_into_pte_locked+0x480/0x480 [ 244.010034][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 244.010050][ C0] ? _raw_spin_unlock+0x24/0x40 [ 244.010064][ C0] ? do_wp_page+0x902/0xad0 [ 244.010080][ C0] handle_mm_fault+0x1ec7/0x43b0 [ 244.010102][ C0] ? get_page+0xe0/0xe0 [ 244.010119][ C0] ? vmacache_find+0x238/0x590 [ 244.010136][ C0] ? find_vma+0xd2/0x230 [ 244.010151][ C0] do_user_addr_fault+0x489/0xc80 [ 244.010175][ C0] exc_page_fault+0x60/0x100 [ 244.010191][ C0] ? clear_bhb_loop+0x30/0x80 [ 244.010208][ C0] asm_exc_page_fault+0x22/0x30 [ 244.010223][ C0] RIP: 0033:0x7f05080862e8 [ 244.010237][ C0] Code: 80 3d 3b 0d 38 00 00 89 7c 24 0c 88 54 24 10 48 89 74 24 28 0f 85 c8 09 00 00 80 3d 06 44 eb 00 00 48 89 f5 41 89 d4 41 89 cd 05 11 0d 38 00 01 0f 85 23 04 00 00 80 3d d4 43 eb 00 00 0f 85 [ 244.010249][ C0] RSP: 002b:00007ffc7175db30 EFLAGS: 00010246 [ 244.010260][ C0] RAX: 00007f050840afa0 RBX: 00007f050840afa8 RCX: 0000000000000000 [ 244.010270][ C0] RDX: 00000000fffffc03 RSI: 00007f050840b038 RDI: 0000000000000000 [ 244.010280][ C0] RBP: 00007f050840b038 R08: 0000000000000000 R09: 0000000000000000 [ 244.010289][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 00000000fffffc03 [ 244.010298][ C0] R13: 0000000000000000 R14: 00007ffc7175dba8 R15: 0000000000000005 [ 244.010315][ C0] [ 244.010999][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g7121 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 244.544936][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=2685 [ 244.552741][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g7121 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 244.564020][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 244.573989][ C1] rcu: RCU grace-period kthread stack dump: [ 244.579888][ C1] task:rcu_preempt state:I stack:27904 pid: 15 ppid: 2 flags:0x00004000 [ 244.589131][ C1] Call Trace: [ 244.592421][ C1] [ 244.595362][ C1] __schedule+0x11bb/0x4390 [ 244.599886][ C1] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 244.605280][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 244.611195][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 244.617108][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 244.623014][ C1] ? _raw_spin_unlock+0x40/0x40 [ 244.627872][ C1] ? rcu_is_watching+0x11/0xa0 [ 244.632664][ C1] ? release_firmware_map_entry+0x190/0x190 [ 244.638585][ C1] schedule+0x11b/0x1e0 [ 244.642761][ C1] schedule_timeout+0x15c/0x280 [ 244.647625][ C1] ? console_conditional_schedule+0x40/0x40 [ 244.653528][ C1] ? update_process_times+0x200/0x200 [ 244.658918][ C1] ? prepare_to_swait_event+0x331/0x350 [ 244.664483][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 244.669343][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 244.674762][ C1] ? rcu_gp_init+0xd58/0x10e0 [ 244.679450][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 244.684228][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 244.689436][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 244.694645][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 244.699853][ C1] rcu_gp_kthread+0x98/0x350 [ 244.704471][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 244.709603][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 244.715512][ C1] ? __kthread_parkme+0x157/0x1b0 [ 244.720566][ C1] kthread+0x436/0x520 [ 244.724640][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 244.729755][ C1] ? kthread_blkcg+0xd0/0xd0 [ 244.734353][ C1] ret_from_fork+0x1f/0x30 [ 244.738792][ C1] [ 244.741818][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 244.748139][ C1] Sending NMI from CPU 1 to CPUs 0: [ 244.753343][ C0] NMI backtrace for cpu 0 [ 244.753356][ C0] CPU: 0 PID: 4402 Comm: syz.0.50 Not tainted syzkaller #0 [ 244.753371][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.753379][ C0] RIP: 0010:__lock_acquire+0x12ad/0x7c60 [ 244.753399][ C0] Code: 00 00 74 12 48 89 df e8 01 23 60 00 49 b8 00 00 00 00 00 fc ff df 48 83 3b 00 0f 84 10 4b 00 00 48 8b 44 24 58 42 0f b6 04 00 <84> c0 0f 85 16 5a 00 00 41 8b 07 89 c3 81 e3 ff 1f 00 00 c1 e8 03 [ 244.753411][ C0] RSP: 0000:ffffc900035cee60 EFLAGS: 00000086 [ 244.753424][ C0] RAX: 0000000000000000 RBX: ffffffff8f932f80 RCX: ffffffff815c0fcf [ 244.753435][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8ffaa0c0 [ 244.753445][ C0] RBP: ffffc900035cf0b0 R08: dffffc0000000000 R09: fffffbfff1ff5419 [ 244.753456][ C0] R10: fffffbfff1ff5419 R11: 1ffffffff1ff5418 R12: 000000000466878f [ 244.753467][ C0] R13: ffff888023ea3b80 R14: 00000000044ba132 R15: ffff888023ea4730 [ 244.753478][ C0] FS: 000055558ab6b500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 244.753492][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.753502][ C0] CR2: 00007f0508407000 CR3: 0000000071832000 CR4: 00000000003506f0 [ 244.753516][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 244.753524][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 244.753533][ C0] Call Trace: [ 244.753539][ C0] [ 244.753545][ C0] ? mark_lock+0x94/0x320 [ 244.753565][ C0] ? __lock_acquire+0x12d9/0x7c60 [ 244.753583][ C0] ? mark_lock+0x94/0x320 [ 244.753599][ C0] ? verify_lock_unused+0x140/0x140 [ 244.753633][ C0] ? __lock_acquire+0x12d9/0x7c60 [ 244.753651][ C0] ? mark_lock+0x94/0x320 [ 244.753671][ C0] ? __lock_acquire+0x12d9/0x7c60 [ 244.753690][ C0] lock_acquire+0x197/0x3f0 [ 244.753707][ C0] ? rcu_lock_acquire+0x5/0x30 [ 244.753724][ C0] ? rcu_lock_release+0x5/0x40 [ 244.753738][ C0] ? read_lock_is_recursive+0x10/0x10 [ 244.753756][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 244.753774][ C0] ? llist_add_batch+0x85/0xa0 [ 244.753795][ C0] rcu_lock_acquire+0x2a/0x30 [ 244.753809][ C0] ? rcu_lock_acquire+0x5/0x30 [ 244.753822][ C0] perf_output_begin_forward+0x97/0xa30 [ 244.753840][ C0] ? kvm_is_in_guest+0x24/0x30 [ 244.753860][ C0] ? perf_prepare_sample+0x1680/0x1cb0 [ 244.753878][ C0] ? __perf_cgroup_move+0x140/0x140 [ 244.753896][ C0] ? perf_callchain+0x190/0x190 [ 244.753911][ C0] ? rcu_lock_release+0x9/0x20 [ 244.753929][ C0] perf_event_output_forward+0x15c/0x280 [ 244.753946][ C0] ? perf_get_page_size+0x420/0x420 [ 244.753963][ C0] ? perf_event_output_forward+0x222/0x280 [ 244.753978][ C0] ? lockdep_lock+0x1e0/0x1e0 [ 244.753994][ C0] ? perf_get_page_size+0x420/0x420 [ 244.754010][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 244.754027][ C0] __perf_event_overflow+0x364/0x530 [ 244.754045][ C0] perf_swevent_event+0x4ad/0x530 [ 244.754063][ C0] perf_tp_event+0x32c/0xb50 [ 244.754078][ C0] ? perf_swevent_event+0x50e/0x530 [ 244.754094][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 244.754112][ C0] ? perf_tp_event+0xa3b/0xb50 [ 244.754140][ C0] ? update_load_avg+0xbea/0x1130 [ 244.754160][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 244.754178][ C0] perf_trace_preemptirq_template+0x2be/0x380 [ 244.754198][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 244.754215][ C0] ? trace_event_raw_event_preemptirq_template+0x270/0x270 [ 244.754233][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 244.754253][ C0] ? lock_chain_count+0x20/0x20 [ 244.754271][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 244.754287][ C0] trace_irq_enable_rcuidle+0x108/0x180 [ 244.754305][ C0] trace_hardirqs_on+0x57/0x80 [ 244.754320][ C0] asm_sysvec_irq_work+0x16/0x20 [ 244.754348][ C0] RIP: 0010:rcu_read_unlock_special+0x84/0x480 [ 244.754370][ C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 ed 11 9e 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 244.754381][ C0] RSP: 0000:ffffc900035cfa00 EFLAGS: 00000206 [ 244.754393][ C0] RAX: 6b6339de1f3c9500 RBX: 1ffff920006b9f44 RCX: 6b6339de1f3c9500 [ 244.754404][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b1be0 RDI: ffffffff8a59e800 [ 244.754415][ C0] RBP: ffffc900035cfad0 R08: dffffc0000000000 R09: fffffbfff1ff5419 [ 244.754426][ C0] R10: fffffbfff1ff5419 R11: 1ffffffff1ff5418 R12: ffffffff8c120c00 [ 244.754437][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001 [ 244.754454][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 244.754468][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 244.754486][ C0] ? __mod_lruvec_page_state+0x1fe/0x330 [ 244.754505][ C0] __rcu_read_unlock+0x78/0xd0 [ 244.754519][ C0] __unlock_page_memcg+0xea/0x100 [ 244.754537][ C0] wp_page_copy+0xeb2/0x1fd0 [ 244.754552][ C0] ? do_wp_page+0x902/0xad0 [ 244.754570][ C0] ? insert_page_into_pte_locked+0x480/0x480 [ 244.754584][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 244.754600][ C0] ? _raw_spin_unlock+0x24/0x40 [ 244.754613][ C0] ? do_wp_page+0x902/0xad0 [ 244.754629][ C0] handle_mm_fault+0x1ec7/0x43b0 [ 244.754649][ C0] ? get_page+0xe0/0xe0 [ 244.754665][ C0] ? vmacache_find+0x238/0x590 [ 244.754682][ C0] ? find_vma+0xd2/0x230 [ 244.754697][ C0] do_user_addr_fault+0x489/0xc80 [ 244.754719][ C0] exc_page_fault+0x60/0x100 [ 244.754735][ C0] ? clear_bhb_loop+0x30/0x80 [ 244.754751][ C0] asm_exc_page_fault+0x22/0x30 [ 244.754765][ C0] RIP: 0033:0x7f05080862e8 [ 244.754779][ C0] Code: 80 3d 3b 0d 38 00 00 89 7c 24 0c 88 54 24 10 48 89 74 24 28 0f 85 c8 09 00 00 80 3d 06 44 eb 00 00 48 89 f5 41 89 d4 41 89 cd 05 11 0d 38 00 01 0f 85 23 04 00 00 80 3d d4 43 eb 00 00 0f 85 [ 244.754790][ C0] RSP: 002b:00007ffc7175db30 EFLAGS: 00010246 [ 244.754802][ C0] RAX: 00007f050840afa0 RBX: 00007f050840afa8 RCX: 0000000000000000 [ 244.754811][ C0] RDX: 00000000fffffc03 RSI: 00007f050840b038 RDI: 0000000000000000 [ 244.754821][ C0] RBP: 00007f050840b038 R08: 0000000000000000 R09: 0000000000000000 [ 244.754830][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 00000000fffffc03 [ 244.754839][ C0] R13: 0000000000000000 R14: 00007ffc7175dba8 R15: 0000000000000005 [ 244.754854][ C0] [ 245.190362][ T4379] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 10643 jiffies s: 2657 root: 0x1/. [ 245.368592][ T4379] rcu: blocking rcu_node structures (internal RCU debug): [ 245.375763][ T4379] Task dump for CPU 0: [ 245.379875][ T4379] task:syz.0.50 state:R running task stack:27200 pid: 4402 ppid: 4298 flags:0x0000000c [ 245.390712][ T4379] Call Trace: [ 245.393995][ T4379] [ 245.396936][ T4379] ? asm_sysvec_irq_work+0x16/0x20 [ 245.402147][ T4379] ? trace_event_raw_event_preemptirq_template+0x270/0x270 [ 245.409363][ T4379] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 245.415411][ T4379] ? lock_chain_count+0x20/0x20 [ 245.420310][ T4379] ? asm_sysvec_irq_work+0x16/0x20 [ 245.425434][ T4379] ? trace_irq_enable_rcuidle+0x108/0x180 [ 245.431191][ T4379] ? trace_hardirqs_on+0x57/0x80 [ 245.436140][ T4379] ? asm_sysvec_irq_work+0x16/0x20 [ 245.441294][ T4379] ? rcu_read_unlock_special+0x84/0x480 [ 245.446853][ T4379] ? __rcu_read_unlock+0xd0/0xd0 [ 245.451873][ T4379] ? __lock_acquire+0x7c60/0x7c60 [ 245.456910][ T4379] ? __mod_lruvec_page_state+0x1fe/0x330 [ 245.462915][ T4379] ? __rcu_read_unlock+0x78/0xd0 [ 245.467866][ T4379] ? __unlock_page_memcg+0xea/0x100 [ 245.473105][ T4379] ? wp_page_copy+0xeb2/0x1fd0 [ 245.477881][ T4379] ? do_wp_page+0x902/0xad0 [ 245.482437][ T4379] ? insert_page_into_pte_locked+0x480/0x480 [ 245.488424][ T4379] ? do_raw_spin_unlock+0x11d/0x230 [ 245.493660][ T4379] ? _raw_spin_unlock+0x24/0x40 [ 245.498526][ T4379] ? do_wp_page+0x902/0xad0 [ 245.503154][ T4379] ? handle_mm_fault+0x1ec7/0x43b0 [ 245.508313][ T4379] ? get_page+0xe0/0xe0 [ 245.512501][ T4379] ? vmacache_find+0x238/0x590 [ 245.517278][ T4379] ? find_vma+0xd2/0x230 [ 245.521559][ T4379] ? do_user_addr_fault+0x489/0xc80 [ 245.526781][ T4379] ? exc_page_fault+0x60/0x100 [ 245.531573][ T4379] ? clear_bhb_loop+0x30/0x80 [ 245.536380][ T4379] ? asm_exc_page_fault+0x22/0x30 [ 245.541472][ T4379]