Warning: Permanently added '10.128.0.158' (ED25519) to the list of known hosts.
2026/09/28 01:13:41 parsed 1 programs
2026/09/28 01:13:41 serving rpc on tcp://39103
[ 80.368487][ T4285] cgroup: Unknown subsys name 'net'
[ 80.471006][ T4285] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 82.033192][ T4285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 84.699053][ T4321] chnl_net:caif_netlink_parms(): no params data found
[ 84.748006][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.755728][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state
[ 84.764125][ T4321] device bridge_slave_0 entered promiscuous mode
[ 84.772796][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.780162][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state
[ 84.788321][ T4321] device bridge_slave_1 entered promiscuous mode
[ 84.811233][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 84.822099][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 84.845644][ T4321] team0: Port device team_slave_0 added
[ 84.858674][ T4321] team0: Port device team_slave_1 added
[ 84.875270][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 84.882233][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 84.908298][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 84.921613][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 84.928784][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 84.954726][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 84.985139][ T4321] device hsr_slave_0 entered promiscuous mode
[ 84.992472][ T4321] device hsr_slave_1 entered promiscuous mode
[ 85.118706][ T4321] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 85.130222][ T4321] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 85.140170][ T4321] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 85.150654][ T4321] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 85.217289][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.224504][ T4321] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 85.232455][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.239646][ T4321] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 85.281409][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0
[ 85.297538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 85.309495][ T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.317862][ T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.327806][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 85.348252][ T4321] 8021q: adding VLAN 0 to HW filter on device team0
[ 85.359726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 85.368672][ T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.375943][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 85.388347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 85.397141][ T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.404317][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 85.437065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 85.446140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 85.459084][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 85.477435][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 85.489635][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 85.500797][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 85.682034][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 85.689685][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 85.701023][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 85.722067][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 85.731510][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 85.758363][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 85.767518][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 85.776366][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 85.784961][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 85.796115][ T4321] device veth0_vlan entered promiscuous mode
[ 85.818080][ T4321] device veth1_vlan entered promiscuous mode
[ 85.846582][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 85.860077][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 85.869298][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 85.878929][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 85.890886][ T4321] device veth0_macvtap entered promiscuous mode
[ 85.902682][ T4321] device veth1_macvtap entered promiscuous mode
[ 85.923207][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 85.936685][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 85.944586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 85.957966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 85.966271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 85.979871][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 85.988865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 85.998397][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 86.011631][ T4321] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.020837][ T4321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.029832][ T4321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.039391][ T4321] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.170077][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 86.185756][ T4341] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 86.195603][ T4341] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 86.204852][ T4341] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 86.212707][ T4341] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 86.220573][ T4341] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 86.228013][ T4341] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 86.424017][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 86.432099][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.449526][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 86.472593][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 86.481158][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.489093][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 86.765571][ T954] cfg80211: failed to load regulatory.db
2026/09/28 01:13:51 executed programs: 0
[ 88.271842][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 88.280945][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 88.289606][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 88.297555][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 88.305393][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 88.312657][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 88.333682][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 88.439417][ T4377] chnl_net:caif_netlink_parms(): no params data found
[ 88.482065][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.489437][ T4377] bridge0: port 1(bridge_slave_0) entered disabled state
[ 88.497366][ T4377] device bridge_slave_0 entered promiscuous mode
[ 88.507559][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.514925][ T4377] bridge0: port 2(bridge_slave_1) entered disabled state
[ 88.522688][ T4377] device bridge_slave_1 entered promiscuous mode
[ 88.542595][ T4377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 88.553511][ T4377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 88.575097][ T4377] team0: Port device team_slave_0 added
[ 88.582657][ T4377] team0: Port device team_slave_1 added
[ 88.600258][ T4377] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 88.607475][ T4377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.634394][ T4377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 88.646613][ T4377] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 88.653631][ T4377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.680004][ T4377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 88.711328][ T4377] device hsr_slave_0 entered promiscuous mode
[ 88.718235][ T4377] device hsr_slave_1 entered promiscuous mode
[ 88.724941][ T4377] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 88.732696][ T4377] Cannot create hsr debugfs directory
[ 90.364079][ T49] Bluetooth: hci0: command 0x0409 tx timeout
[ 90.862412][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 90.927775][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 91.799623][ T4377] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 91.811752][ T4377] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 91.825409][ T4377] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 91.836567][ T4377] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 91.862105][ T41] device hsr_slave_0 left promiscuous mode
[ 91.869188][ T41] device hsr_slave_1 left promiscuous mode
[ 91.877005][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 91.885027][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 91.894790][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 91.902957][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 91.911128][ T41] device bridge_slave_1 left promiscuous mode
[ 91.918464][ T41] bridge0: port 2(bridge_slave_1) entered disabled state
[ 91.932858][ T41] device bridge_slave_0 left promiscuous mode
[ 91.941596][ T41] bridge0: port 1(bridge_slave_0) entered disabled state
[ 91.972486][ T41] device veth1_macvtap left promiscuous mode
[ 91.979071][ T41] device veth0_macvtap left promiscuous mode
[ 91.986637][ T41] device veth1_vlan left promiscuous mode
[ 91.992544][ T41] device veth0_vlan left promiscuous mode
[ 92.342266][ T41] team0 (unregistering): Port device team_slave_1 removed
[ 92.375283][ T41] team0 (unregistering): Port device team_slave_0 removed
[ 92.403129][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 92.434449][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 92.444217][ T4341] Bluetooth: hci0: command 0x041b tx timeout
[ 92.624937][ T41] bond0 (unregistering): Released all slaves
[ 92.721118][ T4377] 8021q: adding VLAN 0 to HW filter on device bond0
[ 92.752432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 92.760601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 92.772079][ T4377] 8021q: adding VLAN 0 to HW filter on device team0
[ 92.782577][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 92.792080][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 92.802169][ T58] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.809323][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 92.818018][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 92.843685][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 92.852425][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 92.861835][ T58] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.868971][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 92.879232][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 92.891543][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 92.910740][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 92.920821][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 92.930508][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 92.941328][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 92.950464][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 92.961735][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 92.970958][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 92.981844][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 92.991484][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 93.001938][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 93.207070][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 93.215325][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 93.230655][ T4377] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 93.283123][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 93.294258][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 93.334883][ T4377] device veth0_vlan entered promiscuous mode
[ 93.341360][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 93.350316][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 93.365277][ T4377] device veth1_vlan entered promiscuous mode
[ 93.373226][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 93.381554][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 93.391049][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 93.424368][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 93.433404][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 93.443164][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 93.454683][ T4377] device veth0_macvtap entered promiscuous mode
[ 93.463423][ T4377] device veth1_macvtap entered promiscuous mode
[ 93.480396][ T4377] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 93.491874][ T4377] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 93.500174][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 93.508937][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 93.517023][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 93.525887][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 93.535130][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 93.543707][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 93.554728][ T4377] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.563469][ T4377] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.572546][ T4377] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.582290][ T4377] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.638355][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.647898][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.659850][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 93.677809][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
2026/09/28 01:13:56 executed programs: 2
[ 93.686399][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.695190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 93.760699][ C0] hrtimer: interrupt took 11196316 ns
2026/09/28 01:14:22 executed programs: 3
[ 120.038998][ T4341] Bluetooth: hci0: command 0x040f tx timeout
[ 225.123490][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 225.130502][ C1] rcu: 0-...!: (2 GPs behind) idle=5eb4/1/0x4000000000000000 softirq=9520/9522 fqs=8
[ 225.140757][ C1] (detected by 1, t=10502 jiffies, g=9777, q=462 ncpus=2)
[ 225.147979][ C1] Sending NMI from CPU 1 to CPUs 0:
[ 225.153299][ C0] NMI backtrace for cpu 0
[ 225.153308][ C0] CPU: 0 PID: 58 Comm: kworker/u4:4 Not tainted syzkaller #0
[ 225.153323][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 225.153333][ C0] Workqueue: events_unbound cfg80211_wiphy_work
[ 225.153353][ C0] RIP: 0010:__lock_acquire+0x3bd/0x7c40
[ 225.153375][ C0] Code: 24 40 42 0f b6 04 01 84 c0 0f 85 a4 62 00 00 48 8b 5d 18 b8 00 e0 ff ff 41 23 46 20 41 81 e7 ff 1f 00 00 44 09 f8 41 89 46 20 <49> 8d 7e 08 48 89 f8 48 c1 e8 03 42 80 3c 00 00 74 0f e8 6c 74 6f
[ 225.153386][ C0] RSP: 0018:ffffc90000007940 EFLAGS: 00000006
[ 225.153397][ C0] RAX: 00000000000a4060 RBX: ffffffff81722209 RCX: 1ffff110038d38f9
[ 225.153408][ C0] RDX: 0000000000000060 RSI: 0000000000000000 RDI: ffff8880b8e2a5d8
[ 225.153417][ C0] RBP: ffffc90000007b70 R08: dffffc0000000000 R09: 0000000000000001
[ 225.153426][ C0] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: 0000000000000000
[ 225.153436][ C0] R13: ffff8880b8e2a5d8 R14: ffff88801c69c7a8 R15: 0000000000000060
[ 225.153446][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 225.153457][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 225.153467][ C0] CR2: 00007f81c52df040 CR3: 00000000285fc000 CR4: 00000000003506f0
[ 225.153481][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 225.153489][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 225.153498][ C0] Call Trace:
[ 225.153504][ C0]
[ 225.153512][ C0] ? verify_lock_unused+0x140/0x140
[ 225.153532][ C0] ? verify_lock_unused+0x140/0x140
[ 225.153551][ C0] ? verify_lock_unused+0x140/0x140
[ 225.153569][ C0] ? debug_objects_fill_pool+0x87/0x780
[ 225.153590][ C0] lock_acquire+0x1bb/0x4a0
[ 225.153607][ C0] ? __hrtimer_run_queues+0x5e9/0xc90
[ 225.153626][ C0] ? read_lock_is_recursive+0x10/0x10
[ 225.153644][ C0] ? __rwlock_init+0x140/0x140
[ 225.153659][ C0] _raw_spin_lock_irq+0xab/0xf0
[ 225.153678][ C0] ? __hrtimer_run_queues+0x5e9/0xc90
[ 225.153692][ C0] ? _raw_spin_lock_irqsave+0x100/0x100
[ 225.153713][ C0] __hrtimer_run_queues+0x5e9/0xc90
[ 225.153727][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0
[ 225.153746][ C0] ? taprio_free_sched_cb+0x190/0x190
[ 225.153775][ C0] ? hrtimer_interrupt+0x980/0x980
[ 225.153789][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0
[ 225.153808][ C0] hrtimer_interrupt+0x399/0x980
[ 225.153829][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0
[ 225.153850][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0
[ 225.153867][ C0]
[ 225.153871][ C0]
[ 225.153876][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 225.153890][ C0] RIP: 0010:memset_erms+0xb/0x10
[ 225.153906][ C0] Code: 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 f3 aa <4c> 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01
[ 225.153916][ C0] RSP: 0018:ffffc90001596d78 EFLAGS: 00000202
[ 225.153927][ C0] RAX: 0000000000000000 RBX: ffffc90001596e28 RCX: 0000000000000000
[ 225.153936][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90001596e88
[ 225.153945][ C0] RBP: dffffc0000000000 R08: ffffc90001596e87 R09: ffffc90001596e78
[ 225.153954][ C0] R10: dffffc0000000000 R11: fffff520002b2dd1 R12: dffffc0000000000
[ 225.153964][ C0] R13: ffffc90001598000 R14: ffffc90001596e60 R15: ffffc90001596e5d
[ 225.153979][ C0] unwind_next_frame+0x8da/0x1fd0
[ 225.153997][ C0] ? kvfree_call_rcu+0x103/0x890
[ 225.154017][ C0] ? stack_trace_save+0xf0/0xf0
[ 225.154033][ C0] arch_stack_walk+0x10c/0x140
[ 225.154050][ C0] ? cfg80211_update_known_bss+0x184/0xb60
[ 225.154070][ C0] stack_trace_save+0xa6/0xf0
[ 225.154086][ C0] ? stack_trace_snprint+0xe0/0xe0
[ 225.154106][ C0] kasan_save_stack+0x3a/0x60
[ 225.154124][ C0] ? kasan_save_stack+0x3a/0x60
[ 225.154147][ C0] ? __kasan_record_aux_stack+0xb2/0xc0
[ 225.154159][ C0] ? kvfree_call_rcu+0x103/0x890
[ 225.154191][ C0] ? __phys_addr+0xb6/0x170
[ 225.154209][ C0] __kasan_record_aux_stack+0xb2/0xc0
[ 225.154222][ C0] kvfree_call_rcu+0x103/0x890
[ 225.154241][ C0] ? worker_thread+0xaf5/0x12a0
[ 225.154257][ C0] ? rcu_leak_callback+0x10/0x10
[ 225.154277][ C0] ? do_raw_spin_lock+0x128/0x2f0
[ 225.154292][ C0] cfg80211_update_known_bss+0x184/0xb60
[ 225.154313][ C0] cfg80211_bss_update+0x156/0x21a0
[ 225.154334][ C0] ? __kmem_cache_alloc_node+0x19d/0x270
[ 225.154350][ C0] ? cfg80211_inform_bss_frame_data+0x728/0x1390
[ 225.154369][ C0] ? rcu_is_watching+0x11/0xa0
[ 225.154387][ C0] ? cfg80211_inform_bss_frame_data+0x8b0/0x1390
[ 225.154407][ C0] cfg80211_inform_bss_frame_data+0xa77/0x1390
[ 225.154431][ C0] ? cfg80211_parse_mbssid_data+0x23a0/0x23a0
[ 225.154450][ C0] ? __lock_acquire+0x138a/0x7c40
[ 225.154472][ C0] ? __lock_acquire+0x7c40/0x7c40
[ 225.154493][ C0] ? ieee80211_bss_info_update+0x33b/0xbf0
[ 225.154512][ C0] ieee80211_bss_info_update+0x6ef/0xbf0
[ 225.154533][ C0] ? ieee80211_rx_bss_put+0x60/0x60
[ 225.154553][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0
[ 225.154568][ C0] ? ieee80211_vif_get_shift+0x22b/0x290
[ 225.154590][ C0] ? ieee80211_mandatory_rates+0x1c8/0x230
[ 225.154606][ C0] ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0
[ 225.154621][ C0] ? verify_lock_unused+0x140/0x140
[ 225.154644][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0
[ 225.154660][ C0] ? ieee80211_ibss_rx_no_sta+0x780/0x780
[ 225.154677][ C0] ? mark_lock+0x94/0x320
[ 225.154695][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 225.154713][ C0] ? __lock_acquire+0x7c40/0x7c40
[ 225.154730][ C0] ? lock_chain_count+0x20/0x20
[ 225.154747][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 225.154767][ C0] ? kcov_remote_start+0x87/0x810
[ 225.154783][ C0] ? skb_dequeue+0x120/0x150
[ 225.154799][ C0] ieee80211_iface_work+0x72c/0xc70
[ 225.154817][ C0] cfg80211_wiphy_work+0x224/0x260
[ 225.154831][ C0] ? process_one_work+0x7b4/0x1160
[ 225.154846][ C0] process_one_work+0x8ab/0x1160
[ 225.154866][ C0] ? worker_detach_from_pool+0x240/0x240
[ 225.154882][ C0] ? _raw_spin_lock_irq+0xb7/0xf0
[ 225.154900][ C0] ? _raw_spin_lock_irqsave+0x100/0x100
[ 225.154918][ C0] ? wq_worker_running+0x97/0x190
[ 225.154932][ C0] worker_thread+0xaf5/0x12a0
[ 225.154951][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 225.154973][ C0] kthread+0x29d/0x330
[ 225.154984][ C0] ? worker_clr_flags+0x1a0/0x1a0
[ 225.154999][ C0] ? kthread_blkcg+0xd0/0xd0
[ 225.155011][ C0] ret_from_fork+0x1f/0x30
[ 225.155033][ C0]
[ 225.155294][ C1] rcu: rcu_preempt kthread starved for 10486 jiffies! g9777 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[ 225.803716][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 225.813710][ C1] rcu: RCU grace-period kthread stack dump:
[ 225.819620][ C1] task:rcu_preempt state:R running task stack:27920 pid:16 ppid:2 flags:0x00004000
[ 225.830433][ C1] Call Trace:
[ 225.833734][ C1]
[ 225.836688][ C1] __schedule+0x107f/0x4030
[ 225.841232][ C1] ? lockdep_hardirqs_on+0x94/0x140
[ 225.846462][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 225.852385][ C1] ? _raw_spin_unlock+0x40/0x40
[ 225.857269][ C1] ? release_firmware_map_entry+0x187/0x187
[ 225.863199][ C1] schedule+0xb9/0x180
[ 225.867295][ C1] schedule_timeout+0x184/0x2d0
[ 225.872182][ C1] ? console_conditional_schedule+0x40/0x40
[ 225.878191][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120
[ 225.884116][ C1] ? update_process_times+0x1b0/0x1b0
[ 225.889530][ C1] ? prepare_to_swait_event+0x340/0x360
[ 225.895112][ C1] rcu_gp_fqs_loop+0x303/0x1350
[ 225.900089][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0
[ 225.906271][ C1] ? __lock_acquire+0x7c40/0x7c40
[ 225.911330][ C1] ? rcu_gp_init+0x14f0/0x14f0
[ 225.916114][ C1] ? rcu_gp_cleanup+0xade/0xc30
[ 225.920995][ C1] ? _raw_spin_unlock_irq+0x1f/0x40
[ 225.926228][ C1] ? lockdep_hardirqs_on+0x94/0x140
[ 225.931453][ C1] rcu_gp_kthread+0x99/0x3b0
[ 225.936108][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 225.941262][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 225.947199][ C1] ? __kthread_parkme+0x71/0x1c0
[ 225.952175][ C1] ? __kthread_parkme+0x15b/0x1c0
[ 225.957234][ C1] kthread+0x29d/0x330
[ 225.961331][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 225.966640][ C1] ? kthread_blkcg+0xd0/0xd0
[ 225.971260][ C1] ret_from_fork+0x1f/0x30
[ 225.975723][ C1]
[ 225.978759][ C1] rcu: Stack dump where RCU GP kthread last ran:
[ 225.985105][ C1] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0
[ 225.992416][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 226.002494][ C1] Workqueue: events_unbound toggle_allocation_gate
[ 226.009029][ C1] RIP: 0010:smp_call_function_many_cond+0x1148/0x1250
[ 226.015823][ C1] Code: 41 8b 1f 89 de 83 e6 01 31 ff e8 53 02 0b 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 df fe 0a 00 e9 34 ff ff ff f3 90 <41> 0f b6 04 1c 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 17 ff ff ff
[ 226.035546][ C1] RSP: 0018:ffffc900000e7800 EFLAGS: 00000293
[ 226.041638][ C1] RAX: ffffffff81773423 RBX: dffffc0000000000 RCX: ffff88813feb0000
[ 226.049804][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 226.057793][ C1] RBP: ffffc900000e7960 R08: ffffffff90b0f247 R09: 1ffffffff2161e48
[ 226.065786][ C1] R10: dffffc0000000000 R11: fffffbfff2161e49 R12: 1ffff110171c85f5
[ 226.073776][ C1] R13: ffff8880b8f3bd80 R14: 0000000000000000 R15: ffff8880b8e42fa8
[ 226.081772][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 226.090725][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 226.097330][ C1] CR2: 0000200000000300 CR3: 000000000c88e000 CR4: 00000000003506e0
[ 226.105325][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 226.113422][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 226.121464][ C1] Call Trace:
[ 226.124766][ C1]
[ 226.127741][ C1] ? text_poke_sync+0x20/0x20
[ 226.132451][ C1] ? smp_call_function_many+0x30/0x30
[ 226.137858][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4e0
[ 226.143343][ C1] ? perf_event_bpf_output+0x330/0x330
[ 226.148838][ C1] ? trace_raw_output_contention_end+0xd0/0xd0
[ 226.155020][ C1] ? preempt_schedule_thunk+0x16/0x18
[ 226.160431][ C1] ? text_poke_sync+0x20/0x20
[ 226.165135][ C1] on_each_cpu_cond_mask+0x3b/0x80
[ 226.170546][ C1] text_poke_bp_batch+0x5ae/0x850
[ 226.175621][ C1] ? text_poke_loc_init+0x560/0x560
[ 226.180852][ C1] ? arch_jump_label_transform_queue+0x76/0xd0
[ 226.187203][ C1] ? __jump_label_update+0x39a/0x3c0
[ 226.192532][ C1] ? process_one_work+0x7b4/0x1160
[ 226.197688][ C1] text_poke_finish+0x16/0x30
[ 226.202406][ C1] arch_jump_label_transform_apply+0x13/0x20
[ 226.208418][ C1] static_key_enable_cpuslocked+0x11f/0x240
[ 226.214342][ C1] static_key_enable+0x16/0x20
[ 226.219128][ C1] toggle_allocation_gate+0xba/0x470
[ 226.224466][ C1] ? show_object+0xa0/0xa0
[ 226.228931][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 226.234955][ C1] ? __lock_acquire+0x7c40/0x7c40
[ 226.240030][ C1] ? read_lock_is_recursive+0x10/0x10
[ 226.245432][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 226.251356][ C1] ? _raw_spin_unlock+0x40/0x40
[ 226.256236][ C1] ? _raw_spin_unlock_irq+0x1f/0x40
[ 226.261467][ C1] ? process_one_work+0x7b4/0x1160
[ 226.266608][ C1] process_one_work+0x8ab/0x1160
[ 226.271588][ C1] ? worker_detach_from_pool+0x240/0x240
[ 226.277250][ C1] ? _raw_spin_lock_irq+0xb7/0xf0
[ 226.282305][ C1] ? _raw_spin_lock_irqsave+0x100/0x100
[ 226.287880][ C1] ? wq_worker_running+0x97/0x190
[ 226.292931][ C1] worker_thread+0xaf5/0x12a0
[ 226.297763][ C1] kthread+0x29d/0x330
[ 226.301902][ C1] ? worker_clr_flags+0x1a0/0x1a0
[ 226.306950][ C1] ? kthread_blkcg+0xd0/0xd0
[ 226.311564][ C1] ret_from_fork+0x1f/0x30
[ 226.316030][ C1]