Warning: Permanently added '10.128.10.7' (ED25519) to the list of known hosts. 2025/12/24 17:39:02 parsed 1 programs [ 88.665267][ T4613] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 90.334582][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.342881][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.358419][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.368454][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.377076][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.388496][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.677159][ T4673] chnl_net:caif_netlink_parms(): no params data found [ 91.820604][ T4673] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.827803][ T4673] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.840630][ T4673] device bridge_slave_0 entered promiscuous mode [ 91.849123][ T4673] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.856627][ T4673] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.864297][ T4673] device bridge_slave_1 entered promiscuous mode [ 91.882737][ T4673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.893609][ T4673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.915506][ T4673] team0: Port device team_slave_0 added [ 91.922381][ T4673] team0: Port device team_slave_1 added [ 91.938222][ T4673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.945174][ T4673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.971671][ T4673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.983476][ T4673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.990558][ T4673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.016608][ T4673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.060677][ T4673] device hsr_slave_0 entered promiscuous mode [ 92.067236][ T4673] device hsr_slave_1 entered promiscuous mode [ 92.601985][ T4673] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.611463][ T4673] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.622994][ T4673] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.654635][ T4673] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.748670][ T4673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.763621][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.774393][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.787216][ T4673] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.810181][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.821212][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.831591][ T4219] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.838725][ T4219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.870283][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.879050][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.890788][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.900804][ T4219] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.907925][ T4219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.918108][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.927041][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.945916][ T4673] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.957601][ T4673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.980760][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.990399][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.000890][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.012338][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.021496][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.030216][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.039515][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.048688][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.109062][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.118296][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.217964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.225436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.250544][ T4673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.287140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.307683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.338829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.357900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.379179][ T4673] device veth0_vlan entered promiscuous mode [ 93.388108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.398260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.421360][ T4673] device veth1_vlan entered promiscuous mode [ 93.461296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.470790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.487446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.517977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.531144][ T4673] device veth0_macvtap entered promiscuous mode [ 93.557606][ T4673] device veth1_macvtap entered promiscuous mode [ 93.573902][ T4673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.597580][ T1450] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.605854][ T1450] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.622661][ T1450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.635702][ T1450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.649296][ T4673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.657871][ T1450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.667754][ T1450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.684628][ T4673] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.694096][ T4673] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.703613][ T4673] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.712826][ T4673] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/12/24 17:39:12 executed programs: 0 [ 95.256024][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.403872][ T4828] chnl_net:caif_netlink_parms(): no params data found [ 95.458510][ T4828] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.465678][ T4828] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.476550][ T4828] device bridge_slave_0 entered promiscuous mode [ 95.486023][ T4828] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.495578][ T4828] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.504074][ T4828] device bridge_slave_1 entered promiscuous mode [ 95.531841][ T4828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.545564][ T4828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.577398][ T4828] team0: Port device team_slave_0 added [ 95.585014][ T4828] team0: Port device team_slave_1 added [ 95.611461][ T4828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.618776][ T4828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.647512][ T4828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.660865][ T4828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.670207][ T4828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.698730][ T4828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.737025][ T4828] device hsr_slave_0 entered promiscuous mode [ 95.743970][ T4828] device hsr_slave_1 entered promiscuous mode [ 95.753058][ T4828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.761269][ T4828] Cannot create hsr debugfs directory [ 97.306316][ T4676] Bluetooth: hci0: command 0x0409 tx timeout [ 98.590431][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.671543][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.722259][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.396409][ T4676] Bluetooth: hci0: command 0x041b tx timeout [ 99.520795][ T4828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.537376][ T4828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.545870][ T4828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.556450][ T4828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.605151][ T4828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.617874][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.625592][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.637684][ T144] device hsr_slave_0 left promiscuous mode [ 99.643943][ T144] device hsr_slave_1 left promiscuous mode [ 99.650514][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.658256][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.665784][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.673492][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.681550][ T144] device bridge_slave_1 left promiscuous mode [ 99.687977][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.696970][ T144] device bridge_slave_0 left promiscuous mode [ 99.703139][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.714101][ T144] device veth1_macvtap left promiscuous mode [ 99.720212][ T144] device veth0_macvtap left promiscuous mode [ 99.726313][ T144] device veth1_vlan left promiscuous mode [ 99.732081][ T144] device veth0_vlan left promiscuous mode [ 99.844827][ T144] team0 (unregistering): Port device team_slave_1 removed [ 99.857611][ T144] team0 (unregistering): Port device team_slave_0 removed [ 99.868962][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.883716][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.929973][ T144] bond0 (unregistering): Released all slaves [ 99.965374][ T4828] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.975548][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.984775][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.993236][ T4219] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.000332][ T4219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.008451][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.021184][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.030353][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.042805][ T4219] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.049907][ T4219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.060778][ T1450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.073520][ T1450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.084779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.094248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.104011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.123703][ T1450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.132908][ T1450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.144802][ T1450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.153889][ T1450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.165958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.174581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.185696][ T4828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.273454][ T1450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.281559][ T1450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.299245][ T4828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.319416][ T1450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.329366][ T1450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.349732][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.359818][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.370364][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.378479][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.388904][ T4828] device veth0_vlan entered promiscuous mode [ 100.400946][ T4828] device veth1_vlan entered promiscuous mode [ 100.422357][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.433192][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.441769][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.450277][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.461973][ T4828] device veth0_macvtap entered promiscuous mode [ 100.471756][ T4828] device veth1_macvtap entered promiscuous mode [ 100.489256][ T4828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.497622][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.507027][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.515084][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.524824][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.536703][ T4828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.549533][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.558899][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.568934][ T4828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.578683][ T4828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.589370][ T4828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.599125][ T4828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.660030][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.672122][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.693684][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2025/12/24 17:39:17 executed programs: 2 [ 100.705263][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.714400][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.726406][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 205.786070][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 205.793154][ C0] rcu: 1-...!: (1 GPs behind) idle=3cb/1/0x4000000000000000 softirq=9590/9593 fqs=26 [ 205.803450][ C0] (detected by 0, t=10502 jiffies, g=10165, q=222) [ 205.810033][ C0] Sending NMI from CPU 0 to CPUs 1: [ 205.815247][ C1] NMI backtrace for cpu 1 [ 205.815267][ C1] CPU: 1 PID: 5098 Comm: syz.0.17 Not tainted syzkaller #0 [ 205.815282][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.815300][ C1] RIP: 0010:lock_release+0x144/0x870 [ 205.815331][ C1] Code: 83 3e 00 0f 85 58 04 00 00 48 89 5c 24 18 48 c7 84 24 a0 00 00 00 00 00 00 00 9c 8f 84 24 a0 00 00 00 48 8b 84 24 a0 00 00 00 <48> 89 44 24 50 fa 48 c7 c7 e0 29 0b 8a e8 9a 7b 45 08 65 ff 05 63 [ 205.815342][ C1] RSP: 0018:ffffc90000dd0b60 EFLAGS: 00000046 [ 205.815354][ C1] RAX: 0000000000000046 RBX: ffff88807ca29dc0 RCX: 566845b202189e00 [ 205.815364][ C1] RDX: 0000000000000000 RSI: ffffffff8a59e7e0 RDI: ffffffff8a59e7a0 [ 205.815373][ C1] RBP: ffffc90000dd0c70 R08: dffffc0000000000 R09: fffffbfff1ad26b6 [ 205.815383][ C1] R10: fffffbfff1ad26b6 R11: 1ffffffff1ad26b5 R12: ffff88807971dae8 [ 205.815393][ C1] R13: dffffc0000000000 R14: ffff88807ca2a8ac R15: 1ffff920001ba178 [ 205.815403][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 205.815414][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.815424][ C1] CR2: 0000200000000600 CR3: 000000000be8e000 CR4: 00000000003506e0 [ 205.815436][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 205.815444][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 205.815452][ C1] Call Trace: [ 205.815458][ C1] [ 205.815473][ C1] ? rcu_lock_release+0x5/0x20 [ 205.815485][ C1] ? __netif_schedule+0xb5/0x2c0 [ 205.815500][ C1] ? read_lock_is_recursive+0x10/0x10 [ 205.815513][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 205.815526][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 205.815540][ C1] ? __rwlock_init+0x140/0x140 [ 205.815551][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 205.815570][ C1] advance_sched+0x7d0/0x940 [ 205.815587][ C1] __hrtimer_run_queues+0x53d/0xc40 [ 205.815606][ C1] ? taprio_free_sched_cb+0x190/0x190 [ 205.815622][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 205.815637][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 205.815653][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 205.815678][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 205.815693][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 205.815710][ C1] [ 205.815713][ C1] [ 205.815718][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 205.815732][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 205.815746][ C1] Code: 74 05 e8 be 9a d2 f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d6 22 a6 f7 65 8b 05 67 20 57 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 205.815756][ C1] RSP: 0018:ffffc9000311f3c0 EFLAGS: 00000206 [ 205.815766][ C1] RAX: 566845b202189e00 RBX: 0000000000000a06 RCX: 566845b202189e00 [ 205.815776][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b1be0 RDI: 0000000000000001 [ 205.815785][ C1] RBP: ffffc9000311f448 R08: dffffc0000000000 R09: fffffbfff2c636d4 [ 205.815795][ C1] R10: fffffbfff2c636d4 R11: 1ffffffff2c636d3 R12: dffffc0000000000 [ 205.815804][ C1] R13: ffff888072b14ea0 R14: ffffffff9631b698 R15: 1ffff92000623e78 [ 205.815821][ C1] ? _raw_spin_unlock+0x40/0x40 [ 205.815837][ C1] debug_check_no_obj_freed+0x515/0x530 [ 205.815865][ C1] slab_free_freelist_hook+0x8b/0x170 [ 205.815880][ C1] ? ___pte_free_tlb+0x88/0x2a0 [ 205.815896][ C1] kmem_cache_free+0x8f/0x210 [ 205.815907][ C1] ? __tlb_remove_page_size+0x19b/0x3f0 [ 205.815926][ C1] ___pte_free_tlb+0x88/0x2a0 [ 205.815941][ C1] ? pte_alloc_one+0x2f0/0x2f0 [ 205.815961][ C1] free_pgd_range+0x622/0xb00 [ 205.815986][ C1] free_pgtables+0x271/0x2a0 [ 205.816003][ C1] exit_mmap+0x39e/0x5f0 [ 205.816017][ C1] ? vm_brk+0x20/0x20 [ 205.816035][ C1] ? uprobe_clear_state+0x2f6/0x460 [ 205.816048][ C1] ? mm_update_next_owner+0x522/0x640 [ 205.816065][ C1] __mmput+0x115/0x3b0 [ 205.816078][ C1] exit_mm+0x567/0x6c0 [ 205.816092][ C1] ? xacct_add_tsk+0x4b0/0x4b0 [ 205.816107][ C1] ? do_exit+0x20a0/0x20a0 [ 205.816122][ C1] ? taskstats_exit+0x439/0xab0 [ 205.816137][ C1] ? tty_audit_exit+0x14e/0x1f0 [ 205.816152][ C1] do_exit+0x5a1/0x20a0 [ 205.816168][ C1] ? put_task_struct+0x80/0x80 [ 205.816183][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 205.816199][ C1] ? lock_chain_count+0x20/0x20 [ 205.816213][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 205.816227][ C1] do_group_exit+0x12e/0x300 [ 205.816241][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 205.816256][ C1] get_signal+0x6ca/0x12c0 [ 205.816277][ C1] arch_do_signal_or_restart+0xc1/0x1300 [ 205.816294][ C1] ? __might_fault+0xb3/0x110 [ 205.816310][ C1] ? futex_exit_release+0x1c0/0x1c0 [ 205.816324][ C1] ? get_sigframe_size+0x10/0x10 [ 205.816347][ C1] ? exit_to_user_mode_loop+0x3b/0x130 [ 205.816364][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 205.816379][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 205.816395][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 205.816409][ C1] do_syscall_64+0x58/0xa0 [ 205.816422][ C1] ? clear_bhb_loop+0x30/0x80 [ 205.816435][ C1] ? clear_bhb_loop+0x30/0x80 [ 205.816448][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 205.816461][ C1] RIP: 0033:0x7ff13c920ba9 [ 205.816472][ C1] Code: Unable to access opcode bytes at RIP 0x7ff13c920b7f. [ 205.816478][ C1] RSP: 002b:00007ff13bf900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 205.816491][ C1] RAX: fffffffffffffe00 RBX: 00007ff13cb67fa8 RCX: 00007ff13c920ba9 [ 205.816501][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff13cb67fa8 [ 205.816509][ C1] RBP: 00007ff13cb67fa0 R08: 0000000000000000 R09: 0000000000000000 [ 205.816517][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.816525][ C1] R13: 00007ff13cb68038 R14: 00007ffd3c7b2390 R15: 00007ffd3c7b2478 [ 205.816541][ C1] [ 205.817235][ C0] rcu: rcu_preempt kthread starved for 10450 jiffies! g10165 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 206.386838][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 206.396807][ C0] rcu: RCU grace-period kthread stack dump: [ 206.402692][ C0] task:rcu_preempt state:R running task stack:27976 pid: 15 ppid: 2 flags:0x00004000 [ 206.413470][ C0] Call Trace: [ 206.416747][ C0] [ 206.419672][ C0] __schedule+0x11bb/0x4390 [ 206.424176][ C0] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 206.429555][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 206.435451][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 206.441333][ C0] ? _raw_spin_unlock+0x40/0x40 [ 206.446177][ C0] ? rcu_is_watching+0x11/0xa0 [ 206.451032][ C0] ? release_firmware_map_entry+0x190/0x190 [ 206.456948][ C0] schedule+0x11b/0x1e0 [ 206.461105][ C0] schedule_timeout+0x15c/0x280 [ 206.465953][ C0] ? console_conditional_schedule+0x40/0x40 [ 206.471840][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 206.477730][ C0] ? update_process_times+0x200/0x200 [ 206.483105][ C0] ? prepare_to_swait_event+0x331/0x350 [ 206.488744][ C0] rcu_gp_fqs_loop+0x29e/0x11b0 [ 206.493598][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 206.499747][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 206.504595][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 206.509885][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 206.515086][ C0] rcu_gp_kthread+0x98/0x350 [ 206.519686][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 206.524793][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 206.530682][ C0] ? __kthread_parkme+0x157/0x1b0 [ 206.535707][ C0] kthread+0x436/0x520 [ 206.539864][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 206.544966][ C0] ? kthread_blkcg+0xd0/0xd0 [ 206.549897][ C0] ret_from_fork+0x1f/0x30 [ 206.554320][ C0] [ 206.557342][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 206.563648][ C0] NMI backtrace for cpu 0 [ 206.567961][ C0] CPU: 0 PID: 4247 Comm: kworker/0:10 Not tainted syzkaller #0 [ 206.575500][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.585638][ C0] Workqueue: events fqdir_free_fn [ 206.590658][ C0] Call Trace: [ 206.593926][ C0] [ 206.596762][ C0] dump_stack_lvl+0x168/0x230 [ 206.601436][ C0] ? show_regs_print_info+0x20/0x20 [ 206.607061][ C0] ? load_image+0x3b0/0x3b0 [ 206.611570][ C0] ? irq_work_queue+0xbf/0x140 [ 206.616348][ C0] nmi_cpu_backtrace+0x397/0x3d0 [ 206.621374][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 206.627527][ C0] ? _printk+0xcc/0x110 [ 206.631685][ C0] ? cpu_online+0x1d/0x30 [ 206.636011][ C0] ? load_image+0x3b0/0x3b0 [ 206.640598][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 206.646751][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 206.652727][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 206.658885][ C0] print_other_cpu_stall+0x10c8/0x1220 [ 206.664348][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 206.669277][ C0] ? timekeeping_advance+0x7f6/0xac0 [ 206.674558][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 206.679585][ C0] rcu_sched_clock_irq+0x831/0x1110 [ 206.684779][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 206.689638][ C0] ? account_process_tick+0x227/0x3a0 [ 206.695181][ C0] update_process_times+0x193/0x200 [ 206.700373][ C0] tick_sched_timer+0x37d/0x560 [ 206.705222][ C0] __hrtimer_run_queues+0x4fe/0xc40 [ 206.710511][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 206.716066][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 206.721170][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 206.727234][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 206.732187][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 206.738248][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 206.743962][ C0] [ 206.746880][ C0] [ 206.749808][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 206.755777][ C0] RIP: 0010:smp_call_function_single+0x21a/0x490 [ 206.762098][ C0] Code: ff e8 ca 5e 0b 00 41 83 e6 01 49 bc 00 00 00 00 00 fc ff df 75 0a e8 55 5b 0b 00 e9 a3 00 00 00 f3 90 f7 44 24 48 01 00 00 00 <0f> 84 8e 00 00 00 e8 3b 5b 0b 00 eb e9 e8 74 86 35 08 89 c3 41 89 [ 206.781691][ C0] RSP: 0018:ffffc90002f9fa40 EFLAGS: 00000202 [ 206.787750][ C0] RAX: ffffffff816c70d5 RBX: 0000000000000000 RCX: ffff8880276e3b80 [ 206.795711][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 206.803681][ C0] RBP: ffffc90002f9fb30 R08: dffffc0000000000 R09: ffffed1017227681 [ 206.811661][ C0] R10: ffffed1017227681 R11: 1ffff11017227680 R12: dffffc0000000000 [ 206.819633][ C0] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff920005f3f4c [ 206.827615][ C0] ? smp_call_function_single+0x225/0x490 [ 206.833481][ C0] ? rcu_rdp_is_offloaded+0x180/0x180 [ 206.838872][ C0] ? flush_smp_call_function_from_idle+0x230/0x230 [ 206.845374][ C0] ? rcu_rdp_is_offloaded+0x180/0x180 [ 206.850841][ C0] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 206.856145][ C0] rcu_barrier+0x25d/0x4b0 [ 206.860565][ C0] ? cond_synchronize_rcu+0x20/0x20 [ 206.865770][ C0] ? read_lock_is_recursive+0x10/0x10 [ 206.871160][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 206.877057][ C0] ? _raw_spin_unlock+0x40/0x40 [ 206.881911][ C0] fqdir_free_fn+0x2f/0x130 [ 206.886427][ C0] process_one_work+0x863/0x1000 [ 206.891375][ C0] ? worker_detach_from_pool+0x240/0x240 [ 206.897008][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 206.902292][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 206.907310][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 206.912678][ C0] ? wq_worker_running+0x97/0x170 [ 206.917694][ C0] worker_thread+0xaa8/0x12a0 [ 206.922391][ C0] kthread+0x436/0x520 [ 206.926463][ C0] ? rcu_lock_release+0x20/0x20 [ 206.931304][ C0] ? kthread_blkcg+0xd0/0xd0 [ 206.935896][ C0] ret_from_fork+0x1f/0x30 [ 206.940321][ C0]