Warning: Permanently added '10.128.0.141' (ED25519) to the list of known hosts. 2026/05/22 08:08:01 parsed 1 programs [ 276.267643][ T4234] cgroup: Unknown subsys name 'net' [ 276.404717][ T4234] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 277.991391][ T4234] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 280.517246][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 280.591778][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.600009][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.610045][ T4269] device bridge_slave_0 entered promiscuous mode [ 280.620860][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.628983][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.640700][ T4269] device bridge_slave_1 entered promiscuous mode [ 280.671124][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.685199][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.718539][ T4269] team0: Port device team_slave_0 added [ 280.729388][ T4269] team0: Port device team_slave_1 added [ 280.758077][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.768201][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.797292][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.811380][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.820683][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.851219][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.899458][ T4269] device hsr_slave_0 entered promiscuous mode [ 280.908076][ T4269] device hsr_slave_1 entered promiscuous mode [ 281.080422][ T4269] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 281.095051][ T4269] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 281.107401][ T4269] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 281.118664][ T4269] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 281.159778][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.167171][ T4269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.175537][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.182734][ T4269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.254661][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.281077][ T1568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 281.297990][ T1568] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.306878][ T1568] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.319643][ T1568] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 281.335378][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.350690][ T1568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.359813][ T1568] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.366998][ T1568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.384247][ T1568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.404411][ T1568] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.411837][ T1568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.446285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 281.456306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.475465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 281.485298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.494496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.505571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 281.515162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.534254][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.546416][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 281.557815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 281.577523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.711636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.725390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.752964][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.779754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 281.790430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.826135][ T4269] device veth0_vlan entered promiscuous mode [ 281.837526][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.849078][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.860429][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.868993][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.880997][ T4269] device veth1_vlan entered promiscuous mode [ 281.902311][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 281.910650][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 281.918919][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 281.928676][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 281.940304][ T4269] device veth0_macvtap entered promiscuous mode [ 281.950549][ T4269] device veth1_macvtap entered promiscuous mode [ 281.967886][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.976921][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 281.986259][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 281.995059][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 282.004572][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 282.017343][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.047016][ T1568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 282.056830][ T1568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 282.068981][ T4269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.079446][ T4269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.091685][ T4269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.100809][ T4269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.219807][ T4269] syz-executor (4269) used greatest stack depth: 20144 bytes left [ 283.969984][ T1568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.986303][ T1568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.010388][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 284.026381][ T912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.041324][ T912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.052311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/05/22 08:08:12 executed programs: 0 [ 284.518748][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.710550][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 284.763670][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.771961][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.780262][ T4328] device bridge_slave_0 entered promiscuous mode [ 284.789863][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.799023][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.807717][ T4328] device bridge_slave_1 entered promiscuous mode [ 284.830546][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.846314][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.872210][ T4328] team0: Port device team_slave_0 added [ 284.881311][ T4328] team0: Port device team_slave_1 added [ 284.903692][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.911364][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.937774][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.950138][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.960253][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.993751][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.026005][ T4328] device hsr_slave_0 entered promiscuous mode [ 285.034501][ T4328] device hsr_slave_1 entered promiscuous mode [ 285.042919][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.050830][ T4328] Cannot create hsr debugfs directory [ 286.694201][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 287.021129][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.091785][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.161698][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.041428][ T4328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 288.055637][ T4328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 288.085929][ T4328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 288.097273][ T4328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 288.175821][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.198332][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.207339][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.219505][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.245265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.254505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.264160][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.271577][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.311708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 288.321756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 288.333045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.341710][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.348865][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.357439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 288.374286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 288.412969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 288.422192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 288.434044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 288.444631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 288.454166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 288.467208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 288.475993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 288.508143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 288.517962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 288.528853][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 288.667696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.679697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 288.707941][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.729539][ T1568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 288.739835][ T1568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 288.762944][ T4354] Bluetooth: hci0: command 0x041b tx timeout [ 288.775848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 288.785699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 288.795973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 288.804404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 288.817976][ T144] device hsr_slave_0 left promiscuous mode [ 288.825304][ T144] device hsr_slave_1 left promiscuous mode [ 288.833430][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.841291][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.851753][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.859648][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.871324][ T144] device bridge_slave_1 left promiscuous mode [ 288.878616][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.896537][ T144] device bridge_slave_0 left promiscuous mode [ 288.903075][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.925761][ T144] device veth1_macvtap left promiscuous mode [ 288.933005][ T144] device veth0_macvtap left promiscuous mode [ 288.939227][ T144] device veth1_vlan left promiscuous mode [ 288.945871][ T144] device veth0_vlan left promiscuous mode [ 289.139486][ T144] team0 (unregistering): Port device team_slave_1 removed [ 289.152533][ T144] team0 (unregistering): Port device team_slave_0 removed [ 289.168980][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.185116][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.255469][ T144] bond0 (unregistering): Released all slaves [ 289.308858][ T4328] device veth0_vlan entered promiscuous mode [ 289.326006][ T4328] device veth1_vlan entered promiscuous mode [ 289.359945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 289.371112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.384987][ T4328] device veth0_macvtap entered promiscuous mode [ 289.396021][ T4328] device veth1_macvtap entered promiscuous mode [ 289.418268][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.428692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 289.439342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 289.448631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 289.457772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 289.484012][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.492320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 289.505514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 289.518744][ T4328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.528436][ T4328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.537535][ T4328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.546936][ T4328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.630673][ T1568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.640504][ T1568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.649396][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/05/22 08:08:17 executed programs: 2 [ 289.677173][ T4381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.685337][ T4381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.694296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 290.844929][ T4356] Bluetooth: hci0: command 0x040f tx timeout [ 309.094131][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 311.192853][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 313.243046][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 315.343162][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 369.192810][ T4289] Bluetooth: hci2: command 0x0409 tx timeout [ 371.242853][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 373.342874][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 375.442865][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 397.042669][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 397.049723][ C1] rcu: 0-....: (1 GPs behind) idle=b31/1/0x4000000000000002 softirq=7498/7499 fqs=2100 [ 397.060234][ C1] (detected by 1, t=10506 jiffies, g=9493, q=457) [ 397.066884][ C1] Sending NMI from CPU 1 to CPUs 0: [ 397.072134][ C0] NMI backtrace for cpu 0 [ 397.072152][ C0] CPU: 0 PID: 4429 Comm: syz.0.39 Not tainted syzkaller #0 [ 397.072189][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 397.072206][ C0] RIP: 0010:__lock_acquire+0x947/0x7d10 [ 397.072386][ C0] Code: 00 00 00 e8 fb 35 61 00 4c 0f a3 35 43 40 c0 0e 73 1a 4b 8d 04 76 c1 e0 06 4c 8d b0 80 df b5 8f 49 b8 00 00 00 00 00 fc ff df 2b 49 b8 00 00 00 00 00 fc ff df 48 8b 84 24 90 00 00 00 42 0f [ 397.072426][ C0] RSP: 0018:ffffc9000332e8a0 EFLAGS: 00000006 [ 397.072465][ C0] RAX: 0000000000000fc0 RBX: 0000000000000001 RCX: ffffffff815d2075 [ 397.072477][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901d60c0 [ 397.072489][ C0] RBP: ffffc9000332eaf0 R08: dffffc0000000000 R09: 1ffffffff203ac18 [ 397.072502][ C0] R10: dffffc0000000000 R11: fffffbfff203ac19 R12: ffff888023608b38 [ 397.072515][ C0] R13: 0000000000000002 R14: ffffffff8fb5ef40 R15: ffff888023608b38 [ 397.072528][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 397.072544][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.072557][ C0] CR2: 00007faab7a45ff8 CR3: 000000000c08e000 CR4: 00000000003506f0 [ 397.072573][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 397.072584][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 397.072595][ C0] Call Trace: [ 397.072623][ C0] [ 397.072678][ C0] ? mark_lock+0x94/0x320 [ 397.072723][ C0] ? mark_lock+0x94/0x320 [ 397.072739][ C0] ? mark_lock+0x94/0x320 [ 397.072755][ C0] ? verify_lock_unused+0x140/0x140 [ 397.072774][ C0] ? __lock_acquire+0x12e8/0x7d10 [ 397.072794][ C0] ? mark_lock+0x94/0x320 [ 397.072816][ C0] lock_acquire+0x19e/0x400 [ 397.072835][ C0] ? rcu_lock_acquire+0x5/0x30 [ 397.072867][ C0] ? rcu_lock_release+0x5/0x40 [ 397.072883][ C0] ? read_lock_is_recursive+0x10/0x10 [ 397.072904][ C0] ? llist_add_batch+0x85/0xa0 [ 397.072977][ C0] rcu_lock_acquire+0x2a/0x30 [ 397.072993][ C0] ? rcu_lock_acquire+0x5/0x30 [ 397.073008][ C0] perf_output_begin_forward+0xa5/0xa40 [ 397.073025][ C0] ? kvm_is_in_guest+0x24/0x30 [ 397.073106][ C0] ? __perf_cgroup_move+0x140/0x140 [ 397.073122][ C0] ? perf_callchain+0x190/0x190 [ 397.073162][ C0] ? rcu_lock_release+0x9/0x20 [ 397.073183][ C0] perf_event_output_forward+0x19b/0x2e0 [ 397.073202][ C0] ? perf_get_page_size+0x430/0x430 [ 397.073221][ C0] ? perf_event_output_forward+0x261/0x2e0 [ 397.073239][ C0] ? perf_get_page_size+0x430/0x430 [ 397.073257][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 397.073276][ C0] __perf_event_overflow+0x364/0x530 [ 397.073296][ C0] perf_swevent_event+0x4ad/0x530 [ 397.073316][ C0] perf_tp_event+0x383/0xbf0 [ 397.073335][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 397.073353][ C0] ? perf_tp_event+0xa92/0xbf0 [ 397.073386][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 397.073407][ C0] perf_trace_preemptirq_template+0x2aa/0x360 [ 397.073453][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 397.073547][ C0] ? trace_event_raw_event_preemptirq_template+0x290/0x290 [ 397.073567][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 397.073589][ C0] ? lock_chain_count+0x20/0x20 [ 397.073609][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 397.073627][ C0] trace_irq_enable_rcuidle+0x108/0x180 [ 397.073647][ C0] trace_hardirqs_on+0x57/0x80 [ 397.073665][ C0] asm_sysvec_irq_work+0x16/0x20 [ 397.073707][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x4a0 [ 397.073748][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 d2 df 9c 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 397.073762][ C0] RSP: 0018:ffffc9000332f420 EFLAGS: 00000206 [ 397.073776][ C0] RAX: f5013b4174682100 RBX: 1ffff92000665e88 RCX: f5013b4174682100 [ 397.073790][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b3100 RDI: ffffffff8a7a0700 [ 397.073803][ C0] RBP: ffffc9000332f4f0 R08: ffffffff901d60c7 R09: 1ffffffff203ac18 [ 397.073817][ C0] R10: dffffc0000000000 R11: fffffbfff203ac19 R12: ffffffff8c323800 [ 397.073830][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001 [ 397.073850][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 397.073867][ C0] ? rcu_lock_acquire+0x30/0x30 [ 397.073926][ C0] __rcu_read_unlock+0x78/0xd0 [ 397.073943][ C0] __unlock_page_memcg+0xea/0x100 [ 397.073960][ C0] unmap_page_range+0xf96/0x2500 [ 397.074014][ C0] unmap_vmas+0x131/0x250 [ 397.074031][ C0] ? unmap_page_range+0x2500/0x2500 [ 397.074053][ C0] ? __mutex_lock_common+0x465/0x2400 [ 397.074079][ C0] exit_mmap+0x3b9/0x640 [ 397.074099][ C0] ? vm_brk+0x20/0x20 [ 397.074122][ C0] ? uprobe_clear_state+0x2f6/0x460 [ 397.074138][ C0] ? mm_update_next_owner+0x522/0x640 [ 397.074185][ C0] __mmput+0x115/0x3b0 [ 397.074224][ C0] exit_mm+0x5f7/0x770 [ 397.074242][ C0] ? do_exit+0x20c0/0x20c0 [ 397.074258][ C0] ? taskstats_exit+0x439/0xab0 [ 397.074302][ C0] ? tty_audit_exit+0x14e/0x1f0 [ 397.074366][ C0] do_exit+0x5a9/0x20c0 [ 397.074382][ C0] ? rcu_nmi_exit+0x6f/0xf0 [ 397.074437][ C0] ? put_task_struct+0x80/0x80 [ 397.074452][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 397.074474][ C0] ? lock_chain_count+0x20/0x20 [ 397.074494][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 397.074511][ C0] do_group_exit+0x12e/0x300 [ 397.074527][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 397.074548][ C0] get_signal+0x6d6/0x12d0 [ 397.074591][ C0] arch_do_signal_or_restart+0xe7/0x12c0 [ 397.074625][ C0] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 397.074646][ C0] ? get_sigframe_size+0x10/0x10 [ 397.074665][ C0] ? rcu_nmi_exit+0x6f/0xf0 [ 397.074690][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 397.074727][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 397.074744][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 397.074761][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 397.074781][ C0] do_syscall_64+0x58/0xa0 [ 397.074798][ C0] ? clear_bhb_loop+0x30/0x80 [ 397.074815][ C0] ? clear_bhb_loop+0x30/0x80 [ 397.074833][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 397.074851][ C0] RIP: 0033:0x7faab83e4e59 [ 397.074865][ C0] Code: Unable to access opcode bytes at RIP 0x7faab83e4e2f. [ 397.074872][ C0] RSP: 002b:00007faab7a460e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 397.074890][ C0] RAX: 0000000000000001 RBX: 00007faab865dfa8 RCX: 00007faab83e4e59 [ 397.074902][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faab865dfac [ 397.074914][ C0] RBP: 00007faab865dfa0 R08: 0035239ade2b81d0 R09: 0000000000000000 [ 397.074926][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 397.074938][ C0] R13: 00007faab865e038 R14: 00007ffe361772d0 R15: 00007ffe361773b8 [ 397.074956][ C0] [ 399.163250][ T4264] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 10718 jiffies s: 2933 root: 0x1/. [ 399.177808][ T4264] rcu: blocking rcu_node structures (internal RCU debug): [ 399.185342][ T4264] Task dump for CPU 0: [ 399.189475][ T4264] task:syz.0.39 state:R running task stack:25904 pid: 4429 ppid: 4328 flags:0x00004008 [ 399.200711][ T4264] Call Trace: [ 399.204178][ T4264] [ 399.207150][ T4264] ? __rcu_read_unlock+0x78/0xd0 [ 399.212147][ T4264] ? __unlock_page_memcg+0xea/0x100 [ 399.217479][ T4264] ? unmap_page_range+0xf96/0x2500 [ 399.222708][ T4264] ? unmap_vmas+0x131/0x250 [ 399.227280][ T4264] ? unmap_page_range+0x2500/0x2500 [ 399.232519][ T4264] ? __mutex_lock_common+0x465/0x2400 [ 399.238017][ T4264] ? exit_mmap+0x3b9/0x640 [ 399.242478][ T4264] ? vm_brk+0x20/0x20 [ 399.246571][ T4264] ? uprobe_clear_state+0x2f6/0x460 [ 399.251803][ T4264] ? mm_update_next_owner+0x522/0x640 [ 399.257241][ T4264] ? __mmput+0x115/0x3b0 [ 399.261518][ T4264] ? exit_mm+0x5f7/0x770 [ 399.265929][ T4264] ? do_exit+0x20c0/0x20c0 [ 399.270379][ T4264] ? taskstats_exit+0x439/0xab0 [ 399.275304][ T4264] ? tty_audit_exit+0x14e/0x1f0 [ 399.280275][ T4264] ? do_exit+0x5a9/0x20c0 [ 399.284656][ T4264] ? rcu_nmi_exit+0x6f/0xf0 [ 399.289195][ T4264] ? put_task_struct+0x80/0x80 [ 399.294103][ T4264] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 399.300131][ T4264] ? lock_chain_count+0x20/0x20 [ 399.305039][ T4264] ? _raw_spin_lock_irq+0xb7/0xf0 [ 399.310097][ T4264] ? do_group_exit+0x12e/0x300 [ 399.314936][ T4264] ? lockdep_hardirqs_on+0x94/0x140 [ 399.320177][ T4264] ? get_signal+0x6d6/0x12d0 [ 399.324859][ T4264] ? arch_do_signal_or_restart+0xe7/0x12c0 [ 399.330715][ T4264] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 399.336504][ T4264] ? get_sigframe_size+0x10/0x10 [ 399.341501][ T4264] ? rcu_nmi_exit+0x6f/0xf0 [ 399.346666][ T4264] ? exit_to_user_mode_loop+0x3b/0x130 [ 399.352275][ T4264] ? exit_to_user_mode_loop+0x9e/0x130 [ 399.357821][ T4264] ? exit_to_user_mode_prepare+0xee/0x180 [ 399.363703][ T4264] ? syscall_exit_to_user_mode+0x16/0x40 [ 399.369374][ T4264] ? do_syscall_64+0x58/0xa0 [ 399.374029][ T4264] ? clear_bhb_loop+0x30/0x80 [ 399.378736][ T4264] ? clear_bhb_loop+0x30/0x80 [ 399.383476][ T4264] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 399.389608][ T4264]