Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts. 2026/01/03 18:31:54 parsed 1 programs [ 113.011692][ T4616] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 114.423343][ T4623] chnl_net:caif_netlink_parms(): no params data found [ 114.469012][ T4623] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.476303][ T4623] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.484638][ T4623] device bridge_slave_0 entered promiscuous mode [ 114.493092][ T4623] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.500552][ T4623] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.508662][ T4623] device bridge_slave_1 entered promiscuous mode [ 114.532612][ T4623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.544510][ T4623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.570849][ T4623] team0: Port device team_slave_0 added [ 114.579105][ T4623] team0: Port device team_slave_1 added [ 114.599608][ T4623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.607179][ T4623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.633436][ T4623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.647030][ T4623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.654095][ T4623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.680435][ T4623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.711410][ T4623] device hsr_slave_0 entered promiscuous mode [ 114.718499][ T4623] device hsr_slave_1 entered promiscuous mode [ 115.254752][ T4623] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.267699][ T4623] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.278424][ T4623] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.290670][ T4623] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.318020][ T4623] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.325478][ T4623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.333322][ T4623] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.341092][ T4623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.378715][ T1221] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.387009][ T1221] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.425013][ T4623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.441149][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.452871][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.473681][ T4623] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.485492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.496042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.506446][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.513814][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.536528][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.545766][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.558273][ T1221] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.565400][ T1221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.574137][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.583991][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.593719][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.604990][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.615957][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.627752][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.638626][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.654876][ T4623] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.666592][ T4623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.684906][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.695770][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.706357][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.716984][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.726179][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.870685][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.879736][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.893809][ T4623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.917228][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.930051][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.952926][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.963893][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.975913][ T4623] device veth0_vlan entered promiscuous mode [ 115.984227][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.993248][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.007222][ T4623] device veth1_vlan entered promiscuous mode [ 116.035597][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.046562][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.055739][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.065608][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.078071][ T4623] device veth0_macvtap entered promiscuous mode [ 116.089283][ T4623] device veth1_macvtap entered promiscuous mode [ 116.110219][ T4623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.118058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.126502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.135465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.144978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.159963][ T4623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.168506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.180227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.191542][ T4623] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.201377][ T4623] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.210549][ T4623] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.219581][ T4623] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.361425][ T1221] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.185117][ T1221] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.708239][ T1221] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.766449][ T1221] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.471991][ T1221] device hsr_slave_0 left promiscuous mode [ 122.490974][ T1221] device hsr_slave_1 left promiscuous mode [ 122.499718][ T1221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.507333][ T1221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.529086][ T1221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.536541][ T1221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.560639][ T1221] device bridge_slave_1 left promiscuous mode [ 122.567032][ T1221] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.577564][ T1221] device bridge_slave_0 left promiscuous mode [ 122.584287][ T1221] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.601114][ T1221] device veth1_macvtap left promiscuous mode [ 122.607208][ T1221] device veth0_macvtap left promiscuous mode [ 122.613742][ T1221] device veth1_vlan left promiscuous mode [ 122.621192][ T1221] device veth0_vlan left promiscuous mode [ 122.834631][ T1221] team0 (unregistering): Port device team_slave_1 removed [ 122.852391][ T1221] team0 (unregistering): Port device team_slave_0 removed [ 122.870857][ T1221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.885678][ T1221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.945432][ T1221] bond0 (unregistering): Released all slaves [ 123.020554][ T3091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.029150][ T3091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.041599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 123.089173][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.097697][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.110803][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/01/03 18:32:10 executed programs: 0 [ 125.076648][ T5107] chnl_net:caif_netlink_parms(): no params data found [ 125.114760][ T1221] ODEBUG: Out of memory. ODEBUG disabled [ 125.181744][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.189007][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.205967][ T5107] device bridge_slave_0 entered promiscuous mode [ 125.224163][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.263444][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.303711][ T5107] device bridge_slave_1 entered promiscuous mode [ 125.522175][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.535993][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.631963][ T5107] team0: Port device team_slave_0 added [ 125.642096][ T5107] team0: Port device team_slave_1 added [ 125.668177][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.675455][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.702052][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.714599][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.722255][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.749299][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.784491][ T5107] device hsr_slave_0 entered promiscuous mode [ 125.791344][ T5107] device hsr_slave_1 entered promiscuous mode [ 126.309927][ T5107] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.321925][ T5107] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.332994][ T5107] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.343189][ T5107] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.468526][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.521700][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.530930][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.543227][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.557651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.567082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.576757][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.583905][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.593423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.608814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.618447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.627451][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.634715][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.646223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.709523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.719272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.730450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.739616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.749295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.758718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.767394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.776667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.786814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.798244][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.849602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.898058][ T5144] Bluetooth: hci0: command 0x0409 tx timeout [ 127.022325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.031113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.045193][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.107137][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.116324][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.172192][ T5107] device veth0_vlan entered promiscuous mode [ 127.181197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.190603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.200982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.209838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.231425][ T5107] device veth1_vlan entered promiscuous mode [ 127.285985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 127.295839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 127.306264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.315796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.326982][ T5107] device veth0_macvtap entered promiscuous mode [ 127.356254][ T5107] device veth1_macvtap entered promiscuous mode [ 127.375689][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.385984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.394510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.403318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.412572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.425820][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.438466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.460290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.472632][ T5107] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.483313][ T5107] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.492448][ T5107] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.503238][ T5107] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.636322][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.653252][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.674716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 127.703955][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.726082][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.753249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 232.887775][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 232.895077][ C0] rcu: 1-...!: (1 ticks this GP) idle=5b5/1/0x4000000000000000 softirq=10396/10396 fqs=0 [ 232.906030][ C0] (detected by 0, t=10504 jiffies, g=12701, q=738) [ 232.912658][ C0] Sending NMI from CPU 0 to CPUs 1: [ 232.917983][ C1] NMI backtrace for cpu 1 [ 232.918006][ C1] CPU: 1 PID: 5228 Comm: syz.0.17 Not tainted syzkaller #0 [ 232.918023][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 232.918040][ C1] RIP: 0010:lock_release+0x1d1/0x870 [ 232.918075][ C1] Code: 04 00 00 41 8b 0e 85 c9 0f 84 10 02 00 00 4c 89 64 24 40 4c 89 34 24 4c 89 7c 24 20 44 8d 79 ff 48 8d 9f f0 0a 00 00 4d 63 f7 <48> 89 4c 24 28 83 f9 32 0f 83 ca 04 00 00 4b 8d 04 b6 4c 8d 24 c3 [ 232.918089][ C1] RSP: 0018:ffffc90000dd0b40 EFLAGS: 00000006 [ 232.918103][ C1] RAX: 0000000000000000 RBX: ffff88802c0928b0 RCX: 0000000000000003 [ 232.918114][ C1] RDX: 0000000000000000 RSI: ffffffff8a0b29e0 RDI: ffff88802c091dc0 [ 232.918126][ C1] RBP: ffffc90000dd0c60 R08: dffffc0000000000 R09: fffffbfff1ad26b6 [ 232.918139][ C1] R10: fffffbfff1ad26b6 R11: 1ffffffff1ad26b5 R12: 1ffff11005812515 [ 232.918152][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000002 [ 232.918163][ C1] FS: 00007f37309de6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 232.918178][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.918189][ C1] CR2: 00005568470d0cd8 CR3: 0000000067f88000 CR4: 00000000003506e0 [ 232.918204][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 232.918213][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 232.918224][ C1] Call Trace: [ 232.918230][ C1] [ 232.918238][ C1] ? advance_sched+0x687/0x940 [ 232.918256][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 232.918274][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 232.918291][ C1] ? __rwlock_init+0x140/0x140 [ 232.918310][ C1] _raw_spin_unlock+0x12/0x40 [ 232.918327][ C1] advance_sched+0x687/0x940 [ 232.918347][ C1] __hrtimer_run_queues+0x53d/0xc40 [ 232.918370][ C1] ? taprio_free_sched_cb+0x190/0x190 [ 232.918389][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 232.918412][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 232.918439][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 232.918458][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 232.918479][ C1] [ 232.918483][ C1] [ 232.918488][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 232.918507][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 232.918525][ C1] Code: 74 05 e8 be 9a d2 f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d6 22 a6 f7 65 8b 05 67 20 57 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 232.918538][ C1] RSP: 0018:ffffc900032aee00 EFLAGS: 00000206 [ 232.918551][ C1] RAX: 76f02ed751235100 RBX: 0000000000000a06 RCX: 76f02ed751235100 [ 232.918563][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b1be0 RDI: 0000000000000001 [ 232.918575][ C1] RBP: ffffc900032aee90 R08: dffffc0000000000 R09: fffffbfff1ff5432 [ 232.918587][ C1] R10: fffffbfff1ff5432 R11: 1ffffffff1ff5431 R12: dffffc0000000000 [ 232.918600][ C1] R13: 0000001dc1a6601f R14: ffff88802bc69ae8 R15: 1ffff92000655dc0 [ 232.918619][ C1] ? _raw_spin_unlock+0x40/0x40 [ 232.918638][ C1] taprio_change+0x3ff2/0x4ed0 [ 232.918663][ C1] ? taprio_destroy+0x410/0x410 [ 232.918682][ C1] ? fifo_init+0x3ab/0x650 [ 232.918704][ C1] ? qdisc_alloc+0x80a/0xb10 [ 232.918723][ C1] ? mutex_is_locked+0xe/0x40 [ 232.918739][ C1] ? rtnl_is_locked+0x11/0x20 [ 232.918757][ C1] ? qdisc_hash_add+0x21c/0x2d0 [ 232.918782][ C1] ? taprio_peek+0x40/0x40 [ 232.918800][ C1] qdisc_create+0x7bd/0x1170 [ 232.918819][ C1] ? qdisc_notify+0x350/0x350 [ 232.918832][ C1] ? apparmor_capable+0x12c/0x190 [ 232.918853][ C1] tc_modify_qdisc+0xaa1/0x1770 [ 232.918885][ C1] ? rcu_lock_release+0x20/0x20 [ 232.918910][ C1] ? rcu_lock_release+0x20/0x20 [ 232.918928][ C1] rtnetlink_rcv_msg+0x7ff/0xe90 [ 232.918949][ C1] ? rtnetlink_bind+0x80/0x80 [ 232.918965][ C1] ? __local_bh_enable_ip+0x12a/0x1b0 [ 232.918982][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 232.919001][ C1] ? __local_bh_enable_ip+0x12a/0x1b0 [ 232.919016][ C1] ? _local_bh_enable+0xa0/0xa0 [ 232.919035][ C1] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 232.919059][ C1] ? dev_queue_xmit+0x20/0x20 [ 232.919074][ C1] ? memcpy+0x3c/0x60 [ 232.919093][ C1] ? __copy_skb_header+0x417/0x5a0 [ 232.919111][ C1] ? __skb_clone+0x480/0x790 [ 232.919129][ C1] netlink_rcv_skb+0x1e0/0x430 [ 232.919147][ C1] ? rtnetlink_bind+0x80/0x80 [ 232.919163][ C1] ? netlink_ack+0xb60/0xb60 [ 232.919184][ C1] netlink_unicast+0x774/0x920 [ 232.919204][ C1] netlink_sendmsg+0x8ab/0xbc0 [ 232.919224][ C1] ? netlink_getsockopt+0x560/0x560 [ 232.919242][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 232.919260][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 232.919277][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 232.919293][ C1] ? netlink_getsockopt+0x560/0x560 [ 232.919310][ C1] ____sys_sendmsg+0x5a2/0x8c0 [ 232.919328][ C1] ? memset+0x1e/0x40 [ 232.919351][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 232.919369][ C1] ? import_iovec+0x6f/0xa0 [ 232.919389][ C1] ___sys_sendmsg+0x1f0/0x260 [ 232.919408][ C1] ? __sys_sendmsg+0x250/0x250 [ 232.919427][ C1] ? percpu_counter_add_batch+0x13b/0x160 [ 232.919454][ C1] ? __fdget+0x18b/0x210 [ 232.919470][ C1] __se_sys_sendmsg+0x190/0x250 [ 232.919487][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 232.919501][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 232.919526][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 232.919545][ C1] do_syscall_64+0x4c/0xa0 [ 232.919561][ C1] ? clear_bhb_loop+0x30/0x80 [ 232.919578][ C1] ? clear_bhb_loop+0x30/0x80 [ 232.919595][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.919612][ C1] RIP: 0033:0x7f373176eb69 [ 232.919628][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.919641][ C1] RSP: 002b:00007f37309de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.919656][ C1] RAX: ffffffffffffffda RBX: 00007f3731995fa0 RCX: 00007f373176eb69 [ 232.919668][ C1] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 232.919679][ C1] RBP: 00007f37317f1df1 R08: 0000000000000000 R09: 0000000000000000 [ 232.919689][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.919699][ C1] R13: 0000000000000000 R14: 00007f3731995fa0 R15: 00007fffb25871a8 [ 232.919716][ C1] [ 232.919978][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10503 jiffies! g12701 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 233.553982][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=6817 [ 233.561986][ C0] rcu: rcu_preempt kthread starved for 10504 jiffies! g12701 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 233.573383][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 233.583680][ C0] rcu: RCU grace-period kthread stack dump: [ 233.589796][ C0] task:rcu_preempt state:I stack:28064 pid: 15 ppid: 2 flags:0x00004000 [ 233.599302][ C0] Call Trace: [ 233.602607][ C0] [ 233.605577][ C0] __schedule+0x11bb/0x4390 [ 233.610235][ C0] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 233.615645][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 233.621574][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 233.627598][ C0] ? _raw_spin_unlock+0x40/0x40 [ 233.632742][ C0] ? rcu_is_watching+0x11/0xa0 [ 233.637624][ C0] ? release_firmware_map_entry+0x190/0x190 [ 233.643750][ C0] schedule+0x11b/0x1e0 [ 233.647941][ C0] schedule_timeout+0x15c/0x280 [ 233.652951][ C0] ? console_conditional_schedule+0x40/0x40 [ 233.659004][ C0] ? update_process_times+0x200/0x200 [ 233.664419][ C0] ? prepare_to_swait_event+0x331/0x350 [ 233.670392][ C0] rcu_gp_fqs_loop+0x29e/0x11b0 [ 233.675294][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 233.681481][ C0] ? rcu_gp_init+0xd58/0x10e0 [ 233.686583][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 233.691575][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 233.697190][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 233.702433][ C0] rcu_gp_kthread+0x98/0x350 [ 233.707268][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 233.712434][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 233.718598][ C0] ? __kthread_parkme+0x157/0x1b0 [ 233.723657][ C0] kthread+0x436/0x520 [ 233.727937][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 233.733539][ C0] ? kthread_blkcg+0xd0/0xd0 [ 233.738251][ C0] ret_from_fork+0x1f/0x30 [ 233.743090][ C0] [ 233.746168][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 233.752606][ C0] Sending NMI from CPU 0 to CPUs 1: [ 233.757858][ C1] NMI backtrace for cpu 1 [ 233.757867][ C1] CPU: 1 PID: 5228 Comm: syz.0.17 Not tainted syzkaller #0 [ 233.757884][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 233.757894][ C1] RIP: 0010:debug_smp_processor_id+0x0/0x10 [ 233.757920][ C1] Code: 12 8a e8 43 01 00 00 65 c7 05 38 5d 61 76 00 00 00 00 48 c7 c7 60 dc 12 8a e8 2c 01 00 00 65 ff 0d 21 5d 61 76 5b c3 00 00 cc <48> c7 c7 a0 e7 59 8a 48 c7 c6 e0 e7 59 8a eb 00 55 41 57 41 56 53 [ 233.757934][ C1] RSP: 0018:ffffc90000dd0b38 EFLAGS: 00000087 [ 233.757949][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff815c7c29 [ 233.757961][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8d6935a8 [ 233.757972][ C1] RBP: ffffc90000dd0c70 R08: dffffc0000000000 R09: fffffbfff1ad26b6 [ 233.757984][ C1] R10: fffffbfff1ad26b6 R11: 1ffffffff1ad26b5 R12: ffff88802bc69ae8 [ 233.757997][ C1] R13: dffffc0000000000 R14: ffff88802bc69800 R15: 1ffff920001ba178 [ 233.758010][ C1] FS: 00007f37309de6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 233.758026][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.758037][ C1] CR2: 00005568470d0cd8 CR3: 0000000067f88000 CR4: 00000000003506e0 [ 233.758052][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 233.758062][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 233.758073][ C1] Call Trace: [ 233.758079][ C1] [ 233.758085][ C1] rcu_is_watching+0x11/0xa0 [ 233.758104][ C1] lock_release+0xba/0x870 [ 233.758126][ C1] ? rcu_lock_release+0x5/0x20 [ 233.758140][ C1] ? __netif_schedule+0xb5/0x2c0 [ 233.758159][ C1] ? read_lock_is_recursive+0x10/0x10 [ 233.758177][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 233.758193][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 233.758212][ C1] ? __rwlock_init+0x140/0x140 [ 233.758232][ C1] advance_sched+0x7d0/0x940 [ 233.758254][ C1] __hrtimer_run_queues+0x53d/0xc40 [ 233.758278][ C1] ? taprio_free_sched_cb+0x190/0x190 [ 233.758299][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 233.758323][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 233.758354][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 233.758373][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 233.758393][ C1] [ 233.758397][ C1] [ 233.758403][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 233.758423][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 233.758440][ C1] Code: 74 05 e8 be 9a d2 f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d6 22 a6 f7 65 8b 05 67 20 57 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 233.758453][ C1] RSP: 0018:ffffc900032aee00 EFLAGS: 00000206 [ 233.758467][ C1] RAX: 76f02ed751235100 RBX: 0000000000000a06 RCX: 76f02ed751235100 [ 233.758478][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b1be0 RDI: 0000000000000001 [ 233.758490][ C1] RBP: ffffc900032aee90 R08: dffffc0000000000 R09: fffffbfff1ff5432 [ 233.758502][ C1] R10: fffffbfff1ff5432 R11: 1ffffffff1ff5431 R12: dffffc0000000000 [ 233.758514][ C1] R13: 0000001dc1a6601f R14: ffff88802bc69ae8 R15: 1ffff92000655dc0 [ 233.758536][ C1] ? _raw_spin_unlock+0x40/0x40 [ 233.758556][ C1] taprio_change+0x3ff2/0x4ed0 [ 233.758584][ C1] ? taprio_destroy+0x410/0x410 [ 233.758603][ C1] ? fifo_init+0x3ab/0x650 [ 233.758625][ C1] ? qdisc_alloc+0x80a/0xb10 [ 233.758645][ C1] ? mutex_is_locked+0xe/0x40 [ 233.758661][ C1] ? rtnl_is_locked+0x11/0x20 [ 233.758679][ C1] ? qdisc_hash_add+0x21c/0x2d0 [ 233.758706][ C1] ? taprio_peek+0x40/0x40 [ 233.758724][ C1] qdisc_create+0x7bd/0x1170 [ 233.758743][ C1] ? qdisc_notify+0x350/0x350 [ 233.758757][ C1] ? apparmor_capable+0x12c/0x190 [ 233.758779][ C1] tc_modify_qdisc+0xaa1/0x1770 [ 233.758806][ C1] ? rcu_lock_release+0x20/0x20 [ 233.758833][ C1] ? rcu_lock_release+0x20/0x20 [ 233.758859][ C1] rtnetlink_rcv_msg+0x7ff/0xe90 [ 233.758880][ C1] ? rtnetlink_bind+0x80/0x80 [ 233.758897][ C1] ? __local_bh_enable_ip+0x12a/0x1b0 [ 233.758914][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 233.758933][ C1] ? __local_bh_enable_ip+0x12a/0x1b0 [ 233.758949][ C1] ? _local_bh_enable+0xa0/0xa0 [ 233.758969][ C1] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 233.758994][ C1] ? dev_queue_xmit+0x20/0x20 [ 233.759009][ C1] ? memcpy+0x3c/0x60 [ 233.759027][ C1] ? __copy_skb_header+0x417/0x5a0 [ 233.759045][ C1] ? __skb_clone+0x480/0x790 [ 233.759064][ C1] netlink_rcv_skb+0x1e0/0x430 [ 233.759081][ C1] ? rtnetlink_bind+0x80/0x80 [ 233.759097][ C1] ? netlink_ack+0xb60/0xb60 [ 233.759131][ C1] netlink_unicast+0x774/0x920 [ 233.759153][ C1] netlink_sendmsg+0x8ab/0xbc0 [ 233.759174][ C1] ? netlink_getsockopt+0x560/0x560 [ 233.759192][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 233.759210][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 233.759228][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 233.759244][ C1] ? netlink_getsockopt+0x560/0x560 [ 233.759261][ C1] ____sys_sendmsg+0x5a2/0x8c0 [ 233.759280][ C1] ? memset+0x1e/0x40 [ 233.759297][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 233.759317][ C1] ? import_iovec+0x6f/0xa0 [ 233.759337][ C1] ___sys_sendmsg+0x1f0/0x260 [ 233.759356][ C1] ? __sys_sendmsg+0x250/0x250 [ 233.759377][ C1] ? percpu_counter_add_batch+0x13b/0x160 [ 233.759406][ C1] ? __fdget+0x18b/0x210 [ 233.759422][ C1] __se_sys_sendmsg+0x190/0x250 [ 233.759440][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 233.759454][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 233.759479][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 233.759499][ C1] do_syscall_64+0x4c/0xa0 [ 233.759515][ C1] ? clear_bhb_loop+0x30/0x80 [ 233.759532][ C1] ? clear_bhb_loop+0x30/0x80 [ 233.759549][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 233.759567][ C1] RIP: 0033:0x7f373176eb69 [ 233.759582][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.759595][ C1] RSP: 002b:00007f37309de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.759611][ C1] RAX: ffffffffffffffda RBX: 00007f3731995fa0 RCX: 00007f373176eb69 [ 233.759623][ C1] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 233.759633][ C1] RBP: 00007f37317f1df1 R08: 0000000000000000 R09: 0000000000000000 [ 233.759643][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.759653][ C1] R13: 0000000000000000 R14: 00007f3731995fa0 R15: 00007fffb25871a8 [ 233.759672][ C1]