Warning: Permanently added '10.128.10.20' (ED25519) to the list of known hosts. 2026/01/10 16:20:19 parsed 1 programs [ 91.959913][ T4908] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.287167][ T4579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.295356][ T4579] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.306934][ T4579] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.318519][ T4579] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.360117][ T4579] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.017545][ T4937] chnl_net:caif_netlink_parms(): no params data found [ 94.118087][ T4937] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.126607][ T4937] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.134247][ T4937] bridge_slave_0: entered allmulticast mode [ 94.141401][ T4937] bridge_slave_0: entered promiscuous mode [ 94.150197][ T4937] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.157931][ T4937] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.165892][ T4937] bridge_slave_1: entered allmulticast mode [ 94.172877][ T4937] bridge_slave_1: entered promiscuous mode [ 94.200258][ T4937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.211505][ T4937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.239081][ T4937] team0: Port device team_slave_0 added [ 94.247143][ T4937] team0: Port device team_slave_1 added [ 94.271278][ T4937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.278671][ T4937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.304705][ T4937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.316525][ T4937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.324076][ T4937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.350854][ T4937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.388422][ T4937] hsr_slave_0: entered promiscuous mode [ 94.395426][ T4937] hsr_slave_1: entered promiscuous mode [ 94.872026][ T4937] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.890869][ T4937] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.900982][ T4937] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.915663][ T4937] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.951359][ T4937] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.958907][ T4937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.966614][ T4937] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.974224][ T4937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.005478][ T3837] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.015764][ T3837] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.722179][ T4937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.744278][ T4937] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.763744][ T3837] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.771543][ T3837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.802544][ T3837] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.809867][ T3837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.841027][ T4937] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.851805][ T4937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.501705][ T4937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.554094][ T4937] veth0_vlan: entered promiscuous mode [ 96.567388][ T4937] veth1_vlan: entered promiscuous mode [ 97.068334][ T4937] veth0_macvtap: entered promiscuous mode [ 97.078944][ T4937] veth1_macvtap: entered promiscuous mode [ 97.105203][ T4937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.128608][ T4937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.458100][ T2856] bridge_slave_1: left allmulticast mode [ 98.464426][ T2856] bridge_slave_1: left promiscuous mode [ 98.470247][ T2856] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.519216][ T2856] bridge_slave_0: left allmulticast mode [ 98.525871][ T2856] bridge_slave_0: left promiscuous mode [ 98.533195][ T2856] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.864537][ T2856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.877321][ T2856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.888469][ T2856] bond0 (unregistering): Released all slaves [ 99.040218][ T2856] hsr_slave_0: left promiscuous mode [ 99.074066][ T2856] hsr_slave_1: left promiscuous mode [ 99.080288][ T2856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.089617][ T2856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.142924][ T2856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.150763][ T2856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.199332][ T2856] veth1_macvtap: left promiscuous mode [ 99.205049][ T2856] veth0_macvtap: left promiscuous mode [ 99.210716][ T2856] veth1_vlan: left promiscuous mode [ 99.216166][ T2856] veth0_vlan: left promiscuous mode [ 99.625563][ T2856] team0 (unregistering): Port device team_slave_1 removed [ 99.652702][ T2856] team0 (unregistering): Port device team_slave_0 removed [ 100.772870][ T3707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.781133][ T3707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.812664][ T1021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.820551][ T1021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/10 16:20:31 executed programs: 0 [ 102.202118][ T4579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.215118][ T4579] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.223111][ T4579] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.237218][ T4579] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.244832][ T4579] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.700564][ T5264] chnl_net:caif_netlink_parms(): no params data found [ 102.796307][ T5264] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.804021][ T5264] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.811190][ T5264] bridge_slave_0: entered allmulticast mode [ 102.818759][ T5264] bridge_slave_0: entered promiscuous mode [ 102.828272][ T5264] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.835709][ T5264] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.842900][ T5264] bridge_slave_1: entered allmulticast mode [ 102.849923][ T5264] bridge_slave_1: entered promiscuous mode [ 102.881899][ T5264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.906710][ T5264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.944190][ T5264] team0: Port device team_slave_0 added [ 102.953016][ T5264] team0: Port device team_slave_1 added [ 102.991330][ T5264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.998391][ T5264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.024372][ T5264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.038221][ T5264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.045633][ T5264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.071999][ T5264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.128096][ T5264] hsr_slave_0: entered promiscuous mode [ 103.134782][ T5264] hsr_slave_1: entered promiscuous mode [ 103.724445][ T5264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.741225][ T5264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.752776][ T5264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.764057][ T5264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.284763][ T4579] Bluetooth: hci0: command tx timeout [ 104.505492][ T5264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.527314][ T5264] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.539792][ T2856] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.547010][ T2856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.572988][ T2856] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.580376][ T2856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.219649][ T5264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.277141][ T5264] veth0_vlan: entered promiscuous mode [ 105.292352][ T5264] veth1_vlan: entered promiscuous mode [ 105.687964][ T5264] veth0_macvtap: entered promiscuous mode [ 105.706264][ T5264] veth1_macvtap: entered promiscuous mode [ 105.722133][ T5264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.736065][ T5264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.048246][ T3837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.056579][ T3837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.080574][ T3378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.088686][ T3378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.141963][ C0] hrtimer: interrupt took 14295292 ns 2026/01/10 16:20:39 executed programs: 3 [ 109.863931][ T4579] Bluetooth: hci0: command tx timeout [ 214.923575][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 214.930617][ C1] rcu: 0-...!: (2 ticks this GP) idle=8d24/1/0x4000000000000000 softirq=21250/21250 fqs=1 [ 214.941337][ C1] rcu: (detected by 1, t=10506 jiffies, g=15285, q=1578 ncpus=2) [ 214.949272][ C1] Sending NMI from CPU 1 to CPUs 0: [ 214.949314][ C0] NMI backtrace for cpu 0 [ 214.949342][ C0] CPU: 0 UID: 0 PID: 1021 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(none) [ 214.949358][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.949372][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 214.949413][ C0] RIP: 0010:advance_sched+0x245/0xc90 [ 214.949434][ C0] Code: 89 5c 24 60 48 8b 1b 48 83 3c 24 00 4c 89 6c 24 18 0f 84 1b 01 00 00 e8 39 15 56 fa 4d 85 ff 0f 84 70 01 00 00 48 89 5c 24 40 <4c> 89 74 24 78 49 8d 9f 50 01 00 00 48 89 d9 48 c1 e9 03 48 b8 00 [ 214.949445][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00000086 [ 214.949458][ C0] RAX: ffffffff8766b497 RBX: 0000000000000000 RCX: ffff888112f98000 [ 214.949468][ C0] RDX: 0000000000010000 RSI: 0000000000000001 RDI: 0000000000000000 [ 214.949477][ C0] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000004 [ 214.949486][ C0] R10: dffffc0000000000 R11: fffff52000000f7c R12: ffff88811f3f3300 [ 214.949496][ C0] R13: ffff88811f3f3000 R14: ffff88811f3f32f0 R15: ffff8881656f3c00 [ 214.949507][ C0] FS: 0000000000000000(0000) GS:ffff888266687000(0000) knlGS:0000000000000000 [ 214.949519][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.949529][ C0] CR2: 00007f5aabb7f5a0 CR3: 0000000174f98000 CR4: 00000000003526f0 [ 214.949543][ C0] Call Trace: [ 214.949554][ C0] [ 214.949567][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 214.949583][ C0] ? __pfx_advance_sched+0x10/0x10 [ 214.949600][ C0] __hrtimer_run_queues+0x51c/0xc30 [ 214.949620][ C0] ? lock_acquire+0x107/0x340 [ 214.949643][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 214.949661][ C0] ? read_tsc+0x9/0x20 [ 214.949678][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 214.949708][ C0] __sysvec_apic_timer_interrupt+0x102/0x3e0 [ 214.949727][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 214.949747][ C0] [ 214.949752][ C0] [ 214.949758][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 214.949773][ C0] RIP: 0010:kasan_check_range+0x92/0x2c0 [ 214.949788][ C0] Code: 4d 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 <4c> 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 0f 85 de 01 00 00 49 ff c3 [ 214.949799][ C0] RSP: 0018:ffffc9000267e708 EFLAGS: 00000202 [ 214.949811][ C0] RAX: ffffffff81f83b01 RBX: dffffc0000000001 RCX: ffffffff81f83bef [ 214.949822][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0005c546c0 [ 214.949831][ C0] RBP: ffffc9000267e868 R08: ffffea0005c546c7 R09: 1ffffd4000b8a8d8 [ 214.949842][ C0] R10: dffffc0000000000 R11: fffff94000b8a8d8 R12: 0000000000000001 [ 214.949852][ C0] R13: 1ffff920004cfcf4 R14: fffff94000b8a8d9 R15: 1ffffd4000b8a8d8 [ 214.949866][ C0] ? __folio_start_writeback+0xf1/0x920 [ 214.949884][ C0] ? __folio_start_writeback+0x1df/0x920 [ 214.949904][ C0] ? folio_mapping+0x16f/0x1f0 [ 214.949921][ C0] __folio_start_writeback+0x1df/0x920 [ 214.949943][ C0] ? __pfx___folio_start_writeback+0x10/0x10 [ 214.949971][ C0] ? folio_clear_dirty_for_io+0x1c0/0x710 [ 214.949990][ C0] ext4_bio_write_folio+0xb66/0x13a0 [ 214.950014][ C0] mpage_process_page_bufs+0x692/0x8a0 [ 214.950033][ C0] mpage_prepare_extent_to_map+0xdc1/0x15d0 [ 214.950053][ C0] ? do_writepages+0x32e/0x550 [ 214.950078][ C0] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 214.950108][ C0] ? rcu_is_watching+0x15/0xb0 [ 214.950127][ C0] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 214.950144][ C0] ? kmem_cache_alloc_noprof+0x3ce/0x710 [ 214.950161][ C0] ? ext4_init_io_end+0x29/0x130 [ 214.950181][ C0] ext4_do_writepages+0xbe2/0x48a0 [ 214.950202][ C0] ? _raw_spin_unlock+0x28/0x50 [ 214.950217][ C0] ? ieee80211_handle_wake_tx_queue+0x21f/0x2a0 [ 214.950248][ C0] ? __pfx_ext4_do_writepages+0x10/0x10 [ 214.950265][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 214.950286][ C0] ? ieee80211_tx+0x2a0/0x460 [ 214.950301][ C0] ? __pfx_ieee80211_tx+0x10/0x10 [ 214.950317][ C0] ? ext4_writepages+0x1ca/0x350 [ 214.950330][ C0] ? ext4_writepages+0x1ca/0x350 [ 214.950350][ C0] ext4_writepages+0x203/0x350 [ 214.950365][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 214.950385][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 214.950399][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 214.950413][ C0] do_writepages+0x32e/0x550 [ 214.950433][ C0] ? reacquire_held_locks+0x104/0x190 [ 214.950450][ C0] ? writeback_sb_inodes+0x3bd/0x1870 [ 214.950472][ C0] __writeback_single_inode+0x133/0x1240 [ 214.950491][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 214.950507][ C0] writeback_sb_inodes+0x93a/0x1870 [ 214.950536][ C0] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 214.950570][ C0] ? __pfx_down_read_trylock+0x10/0x10 [ 214.950591][ C0] ? __pfx_move_expired_inodes+0x10/0x10 [ 214.950613][ C0] __writeback_inodes_wb+0x111/0x240 [ 214.950635][ C0] wb_writeback+0x43f/0xaa0 [ 214.950656][ C0] ? queue_io+0x221/0x450 [ 214.950675][ C0] ? __pfx_wb_writeback+0x10/0x10 [ 214.950692][ C0] ? do_raw_spin_lock+0x121/0x290 [ 214.950711][ C0] wb_workfn+0xad2/0xed0 [ 214.950734][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 214.950756][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 214.950774][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 214.950793][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 214.950809][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 214.950825][ C0] process_scheduled_works+0xad1/0x1770 [ 214.950853][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 214.950868][ C0] ? do_raw_spin_lock+0x121/0x290 [ 214.950888][ C0] worker_thread+0x8a0/0xda0 [ 214.950910][ C0] ? __kthread_parkme+0x7b/0x200 [ 214.950931][ C0] kthread+0x711/0x8a0 [ 214.950951][ C0] ? __pfx_worker_thread+0x10/0x10 [ 214.950972][ C0] ? __pfx_kthread+0x10/0x10 [ 214.950991][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 214.951006][ C0] ? __pfx_kthread+0x10/0x10 [ 214.951025][ C0] ret_from_fork+0x510/0xa50 [ 214.951041][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 214.951055][ C0] ? __switch_to+0xc9e/0x1480 [ 214.951076][ C0] ? __pfx_kthread+0x10/0x10 [ 214.951094][ C0] ret_from_fork_asm+0x1a/0x30 [ 214.951115][ C0] [ 214.951303][ C1] rcu: rcu_preempt kthread starved for 10501 jiffies! g15285 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 215.559585][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 215.569558][ C1] rcu: RCU grace-period kthread stack dump: [ 215.575442][ C1] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 215.589043][ C1] Call Trace: [ 215.592316][ C1] [ 215.595250][ C1] __schedule+0x1b41/0x2bd0 [ 215.599948][ C1] ? __pfx___schedule+0x10/0x10 [ 215.604901][ C1] ? schedule+0x91/0x360 [ 215.609146][ C1] schedule+0x165/0x360 [ 215.613320][ C1] schedule_timeout+0x12b/0x270 [ 215.618253][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 215.623723][ C1] ? __pfx_process_timeout+0x10/0x10 [ 215.629027][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 215.634855][ C1] ? prepare_to_swait_event+0x341/0x380 [ 215.640422][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 215.645294][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 215.651186][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 215.656559][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 215.661769][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 215.667669][ C1] rcu_gp_kthread+0x99/0x390 [ 215.672267][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 215.677470][ C1] ? __kthread_parkme+0x7b/0x200 [ 215.682585][ C1] ? __kthread_parkme+0x1a1/0x200 [ 215.687718][ C1] kthread+0x711/0x8a0 [ 215.691809][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 215.697016][ C1] ? __pfx_kthread+0x10/0x10 [ 215.701616][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 215.706827][ C1] ? __pfx_kthread+0x10/0x10 [ 215.711544][ C1] ret_from_fork+0x510/0xa50 [ 215.716221][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 215.721417][ C1] ? __switch_to+0xc9e/0x1480 [ 215.726216][ C1] ? __pfx_kthread+0x10/0x10 [ 215.730915][ C1] ret_from_fork_asm+0x1a/0x30 [ 215.735705][ C1] [ 215.738746][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 215.745153][ C1] CPU: 1 UID: 0 PID: 5140 Comm: udevd Not tainted syzkaller #0 PREEMPT(none) [ 215.754430][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 215.764480][ C1] RIP: 0010:smp_call_function_many_cond+0xcc5/0x1260 [ 215.771155][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 04 91 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 af 8c 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 93 8c [ 215.790754][ C1] RSP: 0018:ffffc900026df6e0 EFLAGS: 00000293 [ 215.796822][ C1] RAX: ffffffff81b13d3d RBX: 1ffff1103ea48319 RCX: ffff8881136a9dc0 [ 215.804820][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 215.812808][ C1] RBP: ffffc900026df820 R08: ffffffff8c5d5ab7 R09: 1ffffffff18bab56 [ 215.820799][ C1] R10: dffffc0000000000 R11: fffffbfff18bab57 R12: ffff8881f52418c8 [ 215.828807][ C1] R13: dffffc0000000000 R14: ffff8881f533b040 R15: 0000000000000000 [ 215.836877][ C1] FS: 0000000000000000(0000) GS:ffff888266787000(0000) knlGS:0000000000000000 [ 215.845814][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.852670][ C1] CR2: 00007f5aabb7f5a0 CR3: 000000000b0ee000 CR4: 00000000003526f0 [ 215.860693][ C1] Call Trace: [ 215.863976][ C1] [ 215.866909][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 215.872115][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 215.878444][ C1] ? rcu_is_watching+0x15/0xb0 [ 215.883219][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 215.888411][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 215.893585][ C1] flush_tlb_mm_range+0x60a/0x1170 [ 215.898792][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 215.903753][ C1] tlb_flush_mmu+0x1a7/0x680 [ 215.908438][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 215.913038][ C1] ? free_pgd_range+0x144b/0x14c0 [ 215.918065][ C1] free_ldt_pgtables+0x17b/0x320 [ 215.923013][ C1] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 215.928512][ C1] ? down_read+0x274/0x2e0 [ 215.933101][ C1] ? exit_mmap+0x115/0xb10 [ 215.937608][ C1] exit_mmap+0x174/0xb10 [ 215.941854][ C1] ? uprobe_clear_state+0x20f/0x290 [ 215.947051][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 215.951815][ C1] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 215.957465][ C1] ? __pfx_exit_aio+0x10/0x10 [ 215.962163][ C1] ? uprobe_clear_state+0x27c/0x290 [ 215.967445][ C1] __mmput+0x118/0x3c0 [ 215.971517][ C1] exit_mm+0x169/0x230 [ 215.975653][ C1] do_exit+0x627/0x22f0 [ 215.979809][ C1] ? __pfx_do_exit+0x10/0x10 [ 215.984572][ C1] ? do_raw_spin_lock+0x121/0x290 [ 215.989688][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 215.994887][ C1] do_group_exit+0x21c/0x2d0 [ 215.999570][ C1] __x64_sys_exit_group+0x3f/0x40 [ 216.004679][ C1] x64_sys_call+0x2210/0x2210 [ 216.009353][ C1] do_syscall_64+0xec/0xf20 [ 216.013946][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.020016][ C1] ? trace_irq_disable+0x37/0x100 [ 216.025131][ C1] ? clear_bhb_loop+0x60/0xb0 [ 216.029810][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.035712][ C1] RIP: 0033:0x7f5aab4f16c5 [ 216.040404][ C1] Code: Unable to access opcode bytes at 0x7f5aab4f169b. [ 216.047420][ C1] RSP: 002b:00007ffcd8bace48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 216.055918][ C1] RAX: ffffffffffffffda RBX: 000055a85a8a3060 RCX: 00007f5aab4f16c5 [ 216.063884][ C1] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 216.071846][ C1] RBP: 000055a85a879910 R08: 0000000000000000 R09: 0000000000000000 [ 216.079827][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.087849][ C1] R13: 00007ffcd8bace90 R14: 0000000000000000 R15: 0000000000000000 [ 216.096031][ C1]