[ 37.779168][ T2879] hsr_slave_0: left promiscuous mode [ 37.784610][ T2879] hsr_slave_1: left promiscuous mode [ 37.790665][ T2879] bridge_slave_1: left allmulticast mode [ 37.796307][ T2879] bridge_slave_1: left promiscuous mode [ 37.802021][ T2879] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.809392][ T2879] bridge_slave_0: left allmulticast mode [ 37.815016][ T2879] bridge_slave_0: left promiscuous mode [ 37.820738][ T2879] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.829412][ T2879] veth1_macvtap: left promiscuous mode [ 37.834880][ T2879] veth0_macvtap: left promiscuous mode [ 37.840651][ T2879] veth1_vlan: left promiscuous mode [ 37.845846][ T2879] veth0_vlan: left promiscuous mode [ 37.911092][ T2879] team0 (unregistering): Port device team_slave_1 removed [ 37.923504][ T2879] team0 (unregistering): Port device team_slave_0 removed Warning: Permanently added '10.128.1.135' (ED25519) to the list of known hosts. 2026/07/24 12:07:13 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 44.862704][ T4531] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.648631][ T3081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.656541][ T3081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.678436][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.686280][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.455163][ T4629] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.462355][ T4629] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.469518][ T4629] bridge_slave_0: entered allmulticast mode [ 46.475844][ T4629] bridge_slave_0: entered promiscuous mode [ 46.482773][ T4629] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.489962][ T4629] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.497154][ T4629] bridge_slave_1: entered allmulticast mode [ 46.503427][ T4629] bridge_slave_1: entered promiscuous mode [ 46.562241][ T4629] team0: Port device team_slave_0 added [ 46.568395][ T4629] team0: Port device team_slave_1 added [ 46.621595][ T4629] hsr_slave_0: entered promiscuous mode [ 46.627404][ T4629] hsr_slave_1: entered promiscuous mode [ 46.680257][ T4629] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.687854][ T4629] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.695137][ T4629] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.702479][ T4629] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.916650][ T4629] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.925173][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.932238][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.940619][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.947682][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.210955][ T4629] veth0_vlan: entered promiscuous mode [ 47.217604][ T4629] veth1_vlan: entered promiscuous mode [ 47.309322][ T4629] veth0_macvtap: entered promiscuous mode [ 47.315810][ T4629] veth1_macvtap: entered promiscuous mode 2026/07/24 12:07:16 executed programs: 0 [ 47.500956][ T4629] syz-executor (4629) used greatest stack depth: 10744 bytes left [ 47.896041][ T4762] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.903238][ T4762] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.910440][ T4762] bridge_slave_0: entered allmulticast mode [ 47.916620][ T4762] bridge_slave_0: entered promiscuous mode [ 47.933626][ T4762] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.940883][ T4762] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.948087][ T4762] bridge_slave_1: entered allmulticast mode [ 47.954232][ T4762] bridge_slave_1: entered promiscuous mode [ 47.967083][ T4767] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.974142][ T4767] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.981238][ T4767] bridge_slave_0: entered allmulticast mode [ 47.987351][ T4767] bridge_slave_0: entered promiscuous mode [ 47.998551][ T4767] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.005609][ T4767] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.012769][ T4767] bridge_slave_1: entered allmulticast mode [ 48.019009][ T4767] bridge_slave_1: entered promiscuous mode [ 48.051238][ T4773] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.058470][ T4773] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.065591][ T4773] bridge_slave_0: entered allmulticast mode [ 48.071834][ T4773] bridge_slave_0: entered promiscuous mode [ 48.085715][ T4773] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.092924][ T4773] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.100241][ T4773] bridge_slave_1: entered allmulticast mode [ 48.106518][ T4773] bridge_slave_1: entered promiscuous mode [ 48.115579][ T4764] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.122786][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.129947][ T4764] bridge_slave_0: entered allmulticast mode [ 48.136175][ T4764] bridge_slave_0: entered promiscuous mode [ 48.159385][ T4762] team0: Port device team_slave_0 added [ 48.165542][ T4762] team0: Port device team_slave_1 added [ 48.207288][ T4764] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.214380][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.221550][ T4764] bridge_slave_1: entered allmulticast mode [ 48.227830][ T4764] bridge_slave_1: entered promiscuous mode [ 48.237974][ T4767] team0: Port device team_slave_0 added [ 48.244129][ T4767] team0: Port device team_slave_1 added [ 48.300321][ T4762] hsr_slave_0: entered promiscuous mode [ 48.309420][ T4762] hsr_slave_1: entered promiscuous mode [ 48.315178][ T4762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.322849][ T4762] Cannot create hsr debugfs directory [ 48.346963][ T4773] team0: Port device team_slave_0 added [ 48.353750][ T4773] team0: Port device team_slave_1 added [ 48.369276][ T4767] hsr_slave_0: entered promiscuous mode [ 48.375185][ T4767] hsr_slave_1: entered promiscuous mode [ 48.383520][ T4767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.391175][ T4767] Cannot create hsr debugfs directory [ 48.465430][ T4764] team0: Port device team_slave_0 added [ 48.481873][ T4764] team0: Port device team_slave_1 added [ 48.517901][ T4773] hsr_slave_0: entered promiscuous mode [ 48.539995][ T4773] hsr_slave_1: entered promiscuous mode [ 48.547342][ T4773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.554908][ T4773] Cannot create hsr debugfs directory [ 48.621827][ T4764] hsr_slave_0: entered promiscuous mode [ 48.627958][ T4764] hsr_slave_1: entered promiscuous mode [ 48.633734][ T4764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.641338][ T4764] Cannot create hsr debugfs directory [ 48.760913][ T4762] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 48.768475][ T4762] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 48.784449][ T4762] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 48.794826][ T4762] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 49.026899][ T4773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.038659][ T4773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.056791][ T4773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.064232][ T4773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.229741][ T4762] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.238642][ T3081] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.245711][ T3081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.261668][ T4762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.272114][ T4762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.287089][ T3081] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.294476][ T3081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.568252][ T4773] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.577755][ T2739] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.584821][ T2739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.592560][ T2739] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.599605][ T2739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.612086][ T4773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.622487][ T4773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.075675][ T4762] veth0_vlan: entered promiscuous mode [ 50.084830][ T4762] veth1_vlan: entered promiscuous mode [ 50.225553][ T4773] veth0_vlan: entered promiscuous mode [ 50.233378][ T4773] veth1_vlan: entered promiscuous mode [ 50.270893][ T4762] veth0_macvtap: entered promiscuous mode [ 50.280874][ T4762] veth1_macvtap: entered promiscuous mode [ 50.422256][ T4773] veth0_macvtap: entered promiscuous mode [ 50.432303][ T4773] veth1_macvtap: entered promiscuous mode [ 50.516808][ T2879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.524661][ T2879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.536064][ T2739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.544317][ T2739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.686336][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 150.693348][ C0] rcu: 1-...!: (1 GPs behind) idle=7d74/1/0x4000000000000000 softirq=18952/18982 fqs=2 [ 150.703061][ C0] rcu: (detected by 0, t=10002 jiffies, g=6693, q=1475 ncpus=2) [ 150.710770][ C0] Sending NMI from CPU 0 to CPUs 1: [ 150.715971][ C1] NMI backtrace for cpu 1 [ 150.715987][ C1] CPU: 1 PID: 5243 Comm: syz.4.17 Not tainted syzkaller #0 [ 150.715998][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 150.716013][ C1] RIP: 0010:__lock_acquire+0x8e/0x450 [ 150.716036][ C1] Code: ff 30 0f 93 c1 83 3d 10 9a 2a 08 00 74 02 31 c9 84 c9 0f 85 c8 03 00 00 8b 74 24 60 8b 4c 24 50 48 c7 c2 30 10 b5 85 48 29 d0 <48> c1 f8 04 48 ba c5 4e ec c4 4e ec c4 4e 48 0f af d0 85 f6 75 70 [ 150.716045][ C1] RSP: 0018:ffffc900000d8de0 EFLAGS: 00000002 [ 150.716055][ C1] RAX: 00000000000000d0 RBX: ffff888125bfb780 RCX: 0000000000000000 [ 150.716062][ C1] RDX: ffffffff85b51030 RSI: 0000000000000000 RDI: ffffffff8960c898 [ 150.716069][ C1] RBP: ffffffff8960c898 R08: 0000000000000001 R09: 0000000000000000 [ 150.716076][ C1] R10: 0000000000008000 R11: ffffc900000d8ff8 R12: 0000000000000000 [ 150.716083][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 150.716089][ C1] FS: 00007febd3a1f6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 150.716099][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.716107][ C1] CR2: 00002000000012c0 CR3: 000000012a7c8000 CR4: 00000000003506e0 [ 150.716119][ C1] Call Trace: [ 150.716124][ C1] [ 150.716133][ C1] lock_acquire+0xd6/0x1f0 [ 150.716144][ C1] ? debug_object_activate+0x56/0x230 [ 150.716159][ C1] _raw_spin_lock_irqsave+0x53/0x80 [ 150.716172][ C1] ? debug_object_activate+0x56/0x230 [ 150.716185][ C1] debug_object_activate+0x56/0x230 [ 150.716198][ C1] enqueue_hrtimer+0x27/0x140 [ 150.716215][ C1] __hrtimer_run_queues+0x22a/0x400 [ 150.716232][ C1] hrtimer_interrupt+0x116/0x460 [ 150.716249][ C1] __sysvec_apic_timer_interrupt+0x80/0x1e0 [ 150.716268][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 150.716282][ C1] [ 150.716284][ C1] [ 150.716288][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 150.716302][ C1] RIP: 0010:rcu_is_watching+0x20/0x40 [ 150.716315][ C1] Code: c0 48 85 db 0f 95 c0 5b c3 90 f3 0f 1e fa 65 ff 05 6d 97 d7 7e e8 60 a3 4e 02 89 c0 48 8b 04 c5 30 9a 2c 84 8b 80 68 a8 02 00 <65> ff 0d 51 97 d7 7e 74 07 83 e0 04 c1 e8 02 c3 0f 1f 44 00 00 eb [ 150.716323][ C1] RSP: 0018:ffffc90001b37c28 EFLAGS: 00000286 [ 150.716331][ C1] RAX: 0000000000227d74 RBX: ffffffff816e62bc RCX: 7d79cb1164d45600 [ 150.716338][ C1] RDX: 0000000000000000 RSI: ffffffff84121525 RDI: ffffffff842a2fae [ 150.716345][ C1] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 150.716351][ C1] R10: 0000000000000000 R11: ffffffffffffffff R12: ffffffff845ada78 [ 150.716358][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.716365][ C1] ? timerfd_clock_was_set+0x2c/0x120 [ 150.716380][ C1] ? rcu_is_watching+0x10/0x40 [ 150.716391][ C1] lock_acquire+0x50/0x1f0 [ 150.716401][ C1] ? ktime_mono_to_any+0x138/0x170 [ 150.716418][ C1] ? timerfd_clock_was_set+0x2c/0x120 [ 150.716430][ C1] timerfd_clock_was_set+0x48/0x120 [ 150.716443][ C1] ? timerfd_clock_was_set+0x2c/0x120 [ 150.716454][ C1] ? cpus_read_unlock+0x6a/0xa0 [ 150.716467][ C1] clock_was_set+0x336/0x370 [ 150.716483][ C1] ? __x64_sys_clock_adjtime+0x126/0x1b0 [ 150.716497][ C1] do_adjtimex+0x563/0x640 [ 150.716509][ C1] __x64_sys_clock_adjtime+0x126/0x1b0 [ 150.716525][ C1] do_syscall_64+0x55/0xb0 [ 150.716542][ C1] ? clear_bhb_loop+0x40/0x90 [ 150.716554][ C1] ? clear_bhb_loop+0x40/0x90 [ 150.716566][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.716578][ C1] RIP: 0033:0x7febd3bbce59 [ 150.716591][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.716599][ C1] RSP: 002b:00007febd3a1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 150.716609][ C1] RAX: ffffffffffffffda RBX: 00007febd3e35fa0 RCX: 00007febd3bbce59 [ 150.716615][ C1] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000000 [ 150.716622][ C1] RBP: 00007febd3c52d6f R08: 0000000000000000 R09: 0000000000000000 [ 150.716628][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.716634][ C1] R13: 00007febd3e36038 R14: 00007febd3e35fa0 R15: 00007ffccaca8338 [ 150.716643][ C1] [ 150.716961][ C0] rcu: rcu_preempt kthread starved for 9998 jiffies! g6693 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 151.139286][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 151.149264][ C0] rcu: RCU grace-period kthread stack dump: [ 151.155147][ C0] task:rcu_preempt state:R running task stack:14472 pid:17 ppid:2 flags:0x00004000 [ 151.165906][ C0] Call Trace: [ 151.169175][ C0] [ 151.172107][ C0] __schedule+0x68e/0x960 [ 151.176436][ C0] schedule+0x54/0xc0 [ 151.180411][ C0] schedule_timeout+0x13e/0x1c0 [ 151.185256][ C0] ? update_process_times+0xe0/0xe0 [ 151.190452][ C0] rcu_gp_fqs_loop+0x197/0x680 [ 151.195209][ C0] ? do_raw_spin_unlock+0x59/0x100 [ 151.200398][ C0] rcu_gp_kthread+0x1c/0x150 [ 151.205008][ C0] kthread+0x114/0x140 [ 151.209070][ C0] ? rcu_barrier_callback+0x20/0x20 [ 151.214263][ C0] ? kthread_blkcg+0x60/0x60 [ 151.218847][ C0] ret_from_fork+0x48/0x60 [ 151.223261][ C0] ? kthread_blkcg+0x60/0x60 [ 151.227844][ C0] ret_from_fork_asm+0x11/0x20 [ 151.233125][ C0] [ 151.236142][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 151.242449][ C0] CPU: 0 PID: 2739 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 151.249999][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 151.260048][ C0] Workqueue: events_unbound toggle_allocation_gate [ 151.266682][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x60 [ 151.272853][ C0] Code: 48 8b 3d ac f7 64 03 48 89 de 5b e9 43 18 2a 00 cc cc cc f3 0f 1e fa 48 8b 04 24 65 48 8b 0d 80 5e cd 7e 65 8b 15 81 5e cd 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 ec 14 00 00 [ 151.292471][ C0] RSP: 0000:ffffc90009be7c28 EFLAGS: 00000202 [ 151.298527][ C0] RAX: ffffffff81309a78 RBX: 0000000000000001 RCX: ffff888114a79bc0 [ 151.306486][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 [ 151.314450][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000034 [ 151.322429][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888237c30340 [ 151.330393][ C0] R13: 0000000000000001 R14: ffff888237d34b80 R15: 00000000fffffff8 [ 151.338355][ C0] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 151.347297][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.353889][ C0] CR2: 00007fd46e4cf000 CR3: 0000000004477000 CR4: 00000000003506f0 [ 151.361854][ C0] Call Trace: [ 151.365125][ C0] [ 151.368043][ C0] smp_call_function_many_cond+0x768/0xae0 [ 151.373859][ C0] ? text_poke_sync+0x30/0x30 [ 151.378533][ C0] ? text_poke_sync+0x30/0x30 [ 151.383203][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 151.388314][ C0] text_poke_bp_batch+0x12f/0x440 [ 151.393334][ C0] ? process_scheduled_works+0x322/0x850 [ 151.398954][ C0] text_poke_finish+0x30/0x50 [ 151.403660][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 151.409636][ C0] static_key_enable+0x67/0x80 [ 151.414391][ C0] toggle_allocation_gate+0x3b/0x160 [ 151.419669][ C0] process_scheduled_works+0x3a4/0x850 [ 151.425293][ C0] worker_thread+0x366/0x4d0 [ 151.429871][ C0] kthread+0x114/0x140 [ 151.433940][ C0] ? pr_cont_work+0x270/0x270 [ 151.438603][ C0] ? kthread_blkcg+0x60/0x60 [ 151.443185][ C0] ret_from_fork+0x48/0x60 [ 151.447596][ C0] ? kthread_blkcg+0x60/0x60 [ 151.452183][ C0] ret_from_fork_asm+0x11/0x20 [ 151.456950][ C0]