[ 92.080859][ T9] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts. 2026/06/09 08:56:30 parsed 1 programs [ 99.059562][ T5623] cgroup: Unknown subsys name 'net' [ 99.300814][ T5623] cgroup: Unknown subsys name 'cpuset' [ 99.355998][ T5623] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 101.393412][ T5623] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 106.443048][ T1060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.443076][ T1060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.613112][ T1060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.613135][ T1060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.992659][ T5676] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.994234][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.994458][ T5676] bridge_slave_0: entered allmulticast mode [ 110.001405][ T5676] bridge_slave_0: entered promiscuous mode [ 110.037792][ T5676] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.038101][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.038301][ T5676] bridge_slave_1: entered allmulticast mode [ 110.041003][ T5676] bridge_slave_1: entered promiscuous mode [ 110.114839][ T5676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.128428][ T5676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.251551][ T5676] team0: Port device team_slave_0 added [ 110.258099][ T5676] team0: Port device team_slave_1 added [ 110.300210][ T5676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.300224][ T5676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.300244][ T5676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.304128][ T5676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.304140][ T5676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.304159][ T5676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.507438][ T5676] hsr_slave_0: entered promiscuous mode [ 110.509382][ T5676] hsr_slave_1: entered promiscuous mode [ 110.916291][ T5676] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.970511][ T5676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.994034][ T5676] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.033171][ T5676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.043352][ T5676] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.074121][ T5676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.075241][ T5676] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.114432][ T5676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.387501][ T5676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.452482][ T5676] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.473781][ T1461] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.474764][ T1461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.510020][ T1461] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.510134][ T1461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.048811][ T5676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.177254][ T5676] veth0_vlan: entered promiscuous mode [ 112.201132][ T5676] veth1_vlan: entered promiscuous mode [ 112.287860][ T5676] veth0_macvtap: entered promiscuous mode [ 112.310637][ T5676] veth1_macvtap: entered promiscuous mode [ 112.370245][ T5676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.451879][ T5676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.486519][ T147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.488601][ T147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.489183][ T147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.489853][ T147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.281314][ T147] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.110774][ T147] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.421585][ T4926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.423620][ T4926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.424980][ T4926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.435272][ T4926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.440259][ T4926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.164643][ T147] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.453978][ T147] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.296678][ T147] bridge_slave_1: left allmulticast mode [ 116.296913][ T147] bridge_slave_1: left promiscuous mode [ 116.304464][ T147] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.517323][ T147] bridge_slave_0: left allmulticast mode [ 116.517361][ T147] bridge_slave_0: left promiscuous mode [ 116.518037][ T147] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.376388][ T147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.438088][ T147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.477999][ T147] bond0 (unregistering): Released all slaves [ 117.511755][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 117.995570][ T147] hsr_slave_0: left promiscuous mode [ 118.035564][ T147] hsr_slave_1: left promiscuous mode [ 118.037032][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.037113][ T147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.088293][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.088324][ T147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.179830][ T147] veth1_macvtap: left promiscuous mode [ 118.180058][ T147] veth0_macvtap: left promiscuous mode [ 118.180370][ T147] veth1_vlan: left promiscuous mode [ 118.180675][ T147] veth0_vlan: left promiscuous mode [ 119.026331][ T147] team0 (unregistering): Port device team_slave_1 removed [ 119.086235][ T147] team0 (unregistering): Port device team_slave_0 removed [ 119.301687][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 120.167029][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 2026/06/09 08:56:56 executed programs: 0 [ 120.440917][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.468296][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.469901][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.471453][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.472528][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.574280][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 122.260033][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.260356][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.260545][ T5798] bridge_slave_0: entered allmulticast mode [ 122.263104][ T5798] bridge_slave_0: entered promiscuous mode [ 122.271497][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.272672][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.273605][ T5798] bridge_slave_1: entered allmulticast mode [ 122.320436][ T5798] bridge_slave_1: entered promiscuous mode [ 122.383040][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.395016][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.458927][ T5798] team0: Port device team_slave_0 added [ 122.464593][ T5798] team0: Port device team_slave_1 added [ 122.534286][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.534301][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.534321][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.558768][ T60] Bluetooth: hci0: command tx timeout [ 122.563382][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.563434][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.563508][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.721870][ T5798] hsr_slave_0: entered promiscuous mode [ 122.723829][ T5798] hsr_slave_1: entered promiscuous mode [ 124.649593][ T60] Bluetooth: hci0: command tx timeout [ 125.549481][ T5798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.584190][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.586135][ T5798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.636107][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.639212][ T5798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.694235][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.698755][ T5798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.744275][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.007314][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.070057][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.103810][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.104069][ T1060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.153155][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.153363][ T1060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.716570][ T60] Bluetooth: hci0: command tx timeout [ 127.092607][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.296159][ T5798] veth0_vlan: entered promiscuous mode [ 127.343346][ T5798] veth1_vlan: entered promiscuous mode [ 127.505575][ T5798] veth0_macvtap: entered promiscuous mode [ 127.551975][ T5798] veth1_macvtap: entered promiscuous mode [ 127.628314][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.653454][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.749936][ T2231] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.750551][ T2231] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.750825][ T2231] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.751072][ T2231] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.390114][ T1060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.390139][ T1060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.501757][ T1060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.501779][ T1060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/06/09 08:57:04 executed programs: 2 [ 128.796804][ T60] Bluetooth: hci0: command tx timeout [ 128.920598][ T5978] ------------[ cut here ]------------ [ 128.920610][ T5978] task_rq(p) != rq [ 128.920620][ T5978] WARNING: kernel/sched/fair.c:7656 at hrtick_start_fair+0x196/0x1f0, CPU#0: syz.0.22/5978 [ 128.920658][ T5978] Modules linked in: [ 128.920694][ T5978] CPU: 0 UID: 0 PID: 5978 Comm: syz.0.22 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 128.920713][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 128.920729][ T5978] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 128.920753][ T5978] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 e3 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 4b 65 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 128.920767][ T5978] RSP: 0018:ffffc90003e2f140 EFLAGS: 00010087 [ 128.920781][ T5978] RAX: ffff8880b873ba40 RBX: ffff8880b863ba40 RCX: ffffffff8197c7de [ 128.920794][ T5978] RDX: 0000000000000000 RSI: ffff888036620000 RDI: ffff8880b863ba40 [ 128.920806][ T5978] RBP: dffffc0000000000 R08: ffffffff8fcf0b0f R09: 1ffffffff1f9e161 [ 128.920819][ T5978] R10: dffffc0000000000 R11: fffffbfff1f9e162 R12: dffffc0000000000 [ 128.920831][ T5978] R13: 1ffff110170c78d6 R14: ffff888036620000 R15: ffffffff8dc217d8 [ 128.920844][ T5978] FS: 0000000000000000(0000) GS:ffff888125a76000(0000) knlGS:0000000000000000 [ 128.920858][ T5978] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.920869][ T5978] CR2: 0000001b2f063fff CR3: 00000000448ba000 CR4: 00000000003526f0 [ 128.920884][ T5978] Call Trace: [ 128.920894][ T5978] [ 128.920904][ T5978] set_next_task_fair+0xa68/0xce0 [ 128.920930][ T5978] __schedule+0x3e03/0x5550 [ 128.920978][ T5978] ? __pfx___schedule+0x10/0x10 [ 128.921017][ T5978] preempt_schedule_irq+0x4d/0xa0 [ 128.921044][ T5978] irqentry_exit+0x14f/0x8c0 [ 128.921060][ T5978] ? trace_irq_disable+0x3b/0x140 [ 128.921085][ T5978] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 128.921105][ T5978] RIP: 0010:lock_acquire+0x58/0x350 [ 128.921127][ T5978] Code: 8b 05 0c 7b 19 11 48 89 44 24 58 0f 1f 44 00 00 65 8b 05 0f 7b 19 11 83 f8 08 0f 83 83 01 00 00 89 c0 48 0f a3 05 b8 e5 2d 0e <73> 0d e8 91 45 09 00 84 c0 0f 84 ca 01 00 00 83 3d f2 f8 2d 0e 00 [ 128.921140][ T5978] RSP: 0018:ffffc90003e2f500 EFLAGS: 00000293 [ 128.921153][ T5978] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 128.921163][ T5978] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e3cb2a0 [ 128.921173][ T5978] RBP: ffffffff81af0d9d R08: 0000000000000000 R09: 0000000000000000 [ 128.921184][ T5978] R10: ffffc90003e2f678 R11: ffffffff81b09bb0 R12: 0000000000000002 [ 128.921195][ T5978] R13: ffffffff8e3cb2a0 R14: 0000000000000000 R15: 0000000000000000 [ 128.921209][ T5978] ? is_module_text_address+0x1d/0x1e0 [ 128.921235][ T5978] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 128.921264][ T5978] ? unwind_next_frame+0xa6/0x2550 [ 128.921292][ T5978] ? unwind_next_frame+0xa6/0x2550 [ 128.921314][ T5978] ? unwind_next_frame+0x1bbf/0x2550 [ 128.921336][ T5978] ? is_module_text_address+0x1d/0x1e0 [ 128.921358][ T5978] is_module_text_address+0x39/0x1e0 [ 128.921378][ T5978] ? is_module_text_address+0x1d/0x1e0 [ 128.921401][ T5978] kernel_text_address+0x94/0xe0 [ 128.921424][ T5978] __kernel_text_address+0xd/0x30 [ 128.921445][ T5978] unwind_get_return_address+0x4d/0x90 [ 128.921469][ T5978] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 128.921488][ T5978] arch_stack_walk+0xfb/0x150 [ 128.921522][ T5978] stack_trace_save+0xa9/0x100 [ 128.921541][ T5978] ? __pfx_stack_trace_save+0x10/0x10 [ 128.921561][ T5978] ? kasan_save_track+0x4f/0x80 [ 128.921576][ T5978] ? kasan_save_track+0x3e/0x80 [ 128.921590][ T5978] ? __kasan_kmalloc+0x93/0xb0 [ 128.921606][ T5978] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 128.921623][ T5978] ? kmem_cache_free+0x156/0x6c0 [ 128.921640][ T5978] ? tear_down_vmas+0x312/0x520 [ 128.921655][ T5978] ? exit_mmap+0x4b6/0x9e0 [ 128.921670][ T5978] ? __mmput+0xcb/0x3e0 [ 128.921695][ T5978] kasan_save_stack+0x3e/0x60 [ 128.921710][ T5978] ? kasan_save_stack+0x3e/0x60 [ 128.921725][ T5978] ? kasan_record_aux_stack+0xbd/0xd0 [ 128.921747][ T5978] ? kmem_cache_free+0x513/0x6c0 [ 128.921764][ T5978] ? tear_down_vmas+0x312/0x520 [ 128.921779][ T5978] ? exit_mmap+0x4b6/0x9e0 [ 128.921793][ T5978] ? __mmput+0xcb/0x3e0 [ 128.921814][ T5978] ? exit_mm+0x18e/0x250 [ 128.921832][ T5978] ? do_exit+0x6a2/0x22c0 [ 128.921849][ T5978] ? do_group_exit+0x21b/0x2d0 [ 128.921868][ T5978] ? __x64_sys_exit_group+0x3f/0x40 [ 128.921887][ T5978] ? x64_sys_call+0x221a/0x2240 [ 128.921909][ T5978] ? do_syscall_64+0x174/0x580 [ 128.921925][ T5978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.921974][ T5978] ? tear_down_vmas+0x312/0x520 [ 128.921990][ T5978] kasan_record_aux_stack+0xbd/0xd0 [ 128.922012][ T5978] kmem_cache_free+0x513/0x6c0 [ 128.922035][ T5978] tear_down_vmas+0x312/0x520 [ 128.922057][ T5978] exit_mmap+0x4b6/0x9e0 [ 128.922076][ T5978] ? __pfx_exit_mmap+0x10/0x10 [ 128.922090][ T5978] ? do_raw_spin_lock+0x12b/0x2f0 [ 128.922118][ T5978] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 128.922143][ T5978] ? __pfx_exit_aio+0x10/0x10 [ 128.922169][ T5978] ? uprobe_clear_state+0x2bf/0x3f0 [ 128.922194][ T5978] __mmput+0xcb/0x3e0 [ 128.922218][ T5978] exit_mm+0x18e/0x250 [ 128.922246][ T5978] do_exit+0x6a2/0x22c0 [ 128.922264][ T5978] ? lockdep_hardirqs_on+0x7a/0x110 [ 128.922285][ T5978] ? rt_spin_lock+0x1e0/0x400 [ 128.922307][ T5978] ? __pfx_do_exit+0x10/0x10 [ 128.922327][ T5978] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 128.922357][ T5978] ? rt_spin_unlock+0x160/0x200 [ 128.922381][ T5978] do_group_exit+0x21b/0x2d0 [ 128.922403][ T5978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.922421][ T5978] __x64_sys_exit_group+0x3f/0x40 [ 128.922442][ T5978] x64_sys_call+0x221a/0x2240 [ 128.922470][ T5978] do_syscall_64+0x174/0x580 [ 128.922486][ T5978] ? trace_irq_disable+0x3b/0x140 [ 128.922505][ T5978] ? clear_bhb_loop+0x40/0x90 [ 128.922524][ T5978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.922539][ T5978] RIP: 0033:0x7f79e470ce59 [ 128.922556][ T5978] Code: Unable to access opcode bytes at 0x7f79e470ce2f. [ 128.922564][ T5978] RSP: 002b:00007ffe361a6638 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 128.922579][ T5978] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f79e470ce59 [ 128.922589][ T5978] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.922598][ T5978] RBP: 00007ffe361a669c R08: 0000000000000000 R09: 00000000000927c0 [ 128.922607][ T5978] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000005 [ 128.922616][ T5978] R13: 00000000000927c0 R14: 000000000001f5f2 R15: 00007ffe361a66f0 [ 128.922639][ T5978] [ 128.922647][ T5978] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.922658][ T5978] CPU: 0 UID: 0 PID: 5978 Comm: syz.0.22 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 128.922675][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 128.922683][ T5978] Call Trace: [ 128.922689][ T5978] [ 128.922695][ T5978] vpanic+0x56c/0xa60 [ 128.922719][ T5978] ? __pfx__printk+0x10/0x10 [ 128.922737][ T5978] ? __pfx_vpanic+0x10/0x10 [ 128.922758][ T5978] ? is_bpf_text_address+0x292/0x2b0 [ 128.922780][ T5978] ? is_bpf_text_address+0x26/0x2b0 [ 128.922808][ T5978] panic+0xc5/0xd0 [ 128.922830][ T5978] ? __pfx_panic+0x10/0x10 [ 128.922864][ T5978] __warn+0x315/0x4c0 [ 128.922886][ T5978] ? hrtick_start_fair+0x196/0x1f0 [ 128.922908][ T5978] ? hrtick_start_fair+0x196/0x1f0 [ 128.922929][ T5978] __report_bug+0x339/0x540 [ 128.922950][ T5978] ? hrtick_start_fair+0x196/0x1f0 [ 128.922971][ T5978] ? __pfx___report_bug+0x10/0x10 [ 128.922988][ T5978] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 128.923015][ T5978] ? hrtick_start_fair+0x196/0x1f0 [ 128.923036][ T5978] report_bug+0x16a/0x220 [ 128.923052][ T5978] ? hrtick_start_fair+0x196/0x1f0 [ 128.923071][ T5978] ? hrtick_start_fair+0x198/0x1f0 [ 128.923091][ T5978] handle_bug+0x9c/0x200 [ 128.923110][ T5978] exc_invalid_op+0x1a/0x50 [ 128.923128][ T5978] asm_exc_invalid_op+0x1a/0x20 [ 128.923143][ T5978] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 128.923164][ T5978] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 e3 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 4b 65 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 128.923176][ T5978] RSP: 0018:ffffc90003e2f140 EFLAGS: 00010087 [ 128.923189][ T5978] RAX: ffff8880b873ba40 RBX: ffff8880b863ba40 RCX: ffffffff8197c7de [ 128.923200][ T5978] RDX: 0000000000000000 RSI: ffff888036620000 RDI: ffff8880b863ba40 [ 128.923211][ T5978] RBP: dffffc0000000000 R08: ffffffff8fcf0b0f R09: 1ffffffff1f9e161 [ 128.923229][ T5978] R10: dffffc0000000000 R11: fffffbfff1f9e162 R12: dffffc0000000000 [ 128.923241][ T5978] R13: 1ffff110170c78d6 R14: ffff888036620000 R15: ffffffff8dc217d8 [ 128.923259][ T5978] ? set_next_task_fair+0xa4e/0xce0 [ 128.923282][ T5978] set_next_task_fair+0xa68/0xce0 [ 128.923304][ T5978] __schedule+0x3e03/0x5550 [ 128.923347][ T5978] ? __pfx___schedule+0x10/0x10 [ 128.923382][ T5978] preempt_schedule_irq+0x4d/0xa0 [ 128.923407][ T5978] irqentry_exit+0x14f/0x8c0 [ 128.923422][ T5978] ? trace_irq_disable+0x3b/0x140 [ 128.923444][ T5978] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 128.923461][ T5978] RIP: 0010:lock_acquire+0x58/0x350 [ 128.923480][ T5978] Code: 8b 05 0c 7b 19 11 48 89 44 24 58 0f 1f 44 00 00 65 8b 05 0f 7b 19 11 83 f8 08 0f 83 83 01 00 00 89 c0 48 0f a3 05 b8 e5 2d 0e <73> 0d e8 91 45 09 00 84 c0 0f 84 ca 01 00 00 83 3d f2 f8 2d 0e 00 [ 128.923493][ T5978] RSP: 0018:ffffc90003e2f500 EFLAGS: 00000293 [ 128.923505][ T5978] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 128.923514][ T5978] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e3cb2a0 [ 128.923523][ T5978] RBP: ffffffff81af0d9d R08: 0000000000000000 R09: 0000000000000000 [ 128.923533][ T5978] R10: ffffc90003e2f678 R11: ffffffff81b09bb0 R12: 0000000000000002 [ 128.923544][ T5978] R13: ffffffff8e3cb2a0 R14: 0000000000000000 R15: 0000000000000000 [ 128.923556][ T5978] ? is_module_text_address+0x1d/0x1e0 [ 128.923575][ T5978] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 128.923601][ T5978] ? unwind_next_frame+0xa6/0x2550 [ 128.923625][ T5978] ? unwind_next_frame+0xa6/0x2550 [ 128.923645][ T5978] ? unwind_next_frame+0x1bbf/0x2550 [ 128.923667][ T5978] ? is_module_text_address+0x1d/0x1e0 [ 128.923687][ T5978] is_module_text_address+0x39/0x1e0 [ 128.923705][ T5978] ? is_module_text_address+0x1d/0x1e0 [ 128.923729][ T5978] kernel_text_address+0x94/0xe0 [ 128.923750][ T5978] __kernel_text_address+0xd/0x30 [ 128.923769][ T5978] unwind_get_return_address+0x4d/0x90 [ 128.923791][ T5978] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 128.923810][ T5978] arch_stack_walk+0xfb/0x150 [ 128.923840][ T5978] stack_trace_save+0xa9/0x100 [ 128.923858][ T5978] ? __pfx_stack_trace_save+0x10/0x10 [ 128.923877][ T5978] ? kasan_save_track+0x4f/0x80 [ 128.923890][ T5978] ? kasan_save_track+0x3e/0x80 [ 128.923903][ T5978] ? __kasan_kmalloc+0x93/0xb0 [ 128.923917][ T5978] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 128.923933][ T5978] ? kmem_cache_free+0x156/0x6c0 [ 128.923948][ T5978] ? tear_down_vmas+0x312/0x520 [ 128.923962][ T5978] ? exit_mmap+0x4b6/0x9e0 [ 128.923975][ T5978] ? __mmput+0xcb/0x3e0 [ 128.923998][ T5978] kasan_save_stack+0x3e/0x60 [ 128.924012][ T5978] ? kasan_save_stack+0x3e/0x60 [ 128.924025][ T5978] ? kasan_record_aux_stack+0xbd/0xd0 [ 128.924044][ T5978] ? kmem_cache_free+0x513/0x6c0 [ 128.924059][ T5978] ? tear_down_vmas+0x312/0x520 [ 128.924074][ T5978] ? exit_mmap+0x4b6/0x9e0 [ 128.924087][ T5978] ? __mmput+0xcb/0x3e0 [ 128.924107][ T5978] ? exit_mm+0x18e/0x250 [ 128.924123][ T5978] ? do_exit+0x6a2/0x22c0 [ 128.924139][ T5978] ? do_group_exit+0x21b/0x2d0 [ 128.924157][ T5978] ? __x64_sys_exit_group+0x3f/0x40 [ 128.924175][ T5978] ? x64_sys_call+0x221a/0x2240 [ 128.924194][ T5978] ? do_syscall_64+0x174/0x580 [ 128.924209][ T5978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.924265][ T5978] ? tear_down_vmas+0x312/0x520 [ 128.924281][ T5978] kasan_record_aux_stack+0xbd/0xd0 [ 128.924302][ T5978] kmem_cache_free+0x513/0x6c0 [ 128.924345][ T5978] tear_down_vmas+0x312/0x520 [ 128.924365][ T5978] exit_mmap+0x4b6/0x9e0 [ 128.924383][ T5978] ? __pfx_exit_mmap+0x10/0x10 [ 128.924396][ T5978] ? do_raw_spin_lock+0x12b/0x2f0 [ 128.924422][ T5978] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 128.924445][ T5978] ? __pfx_exit_aio+0x10/0x10 [ 128.924468][ T5978] ? uprobe_clear_state+0x2bf/0x3f0 [ 128.924490][ T5978] __mmput+0xcb/0x3e0 [ 128.924513][ T5978] exit_mm+0x18e/0x250 [ 128.924534][ T5978] do_exit+0x6a2/0x22c0 [ 128.924551][ T5978] ? lockdep_hardirqs_on+0x7a/0x110 [ 128.924570][ T5978] ? rt_spin_lock+0x1e0/0x400 [ 128.924590][ T5978] ? __pfx_do_exit+0x10/0x10 [ 128.924608][ T5978] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 128.924636][ T5978] ? rt_spin_unlock+0x160/0x200 [ 128.924659][ T5978] do_group_exit+0x21b/0x2d0 [ 128.924680][ T5978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.924697][ T5978] __x64_sys_exit_group+0x3f/0x40 [ 128.924716][ T5978] x64_sys_call+0x221a/0x2240 [ 128.924736][ T5978] do_syscall_64+0x174/0x580 [ 128.924751][ T5978] ? trace_irq_disable+0x3b/0x140 [ 128.924770][ T5978] ? clear_bhb_loop+0x40/0x90 [ 128.924789][ T5978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.924805][ T5978] RIP: 0033:0x7f79e470ce59 [ 128.924817][ T5978] Code: Unable to access opcode bytes at 0x7f79e470ce2f. [ 128.924825][ T5978] RSP: 002b:00007ffe361a6638 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 128.924839][ T5978] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f79e470ce59 [ 128.924850][ T5978] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.924859][ T5978] RBP: 00007ffe361a669c R08: 0000000000000000 R09: 00000000000927c0 [ 128.924869][ T5978] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000005 [ 128.924878][ T5978] R13: 00000000000927c0 R14: 000000000001f5f2 R15: 00007ffe361a66f0 [ 128.924901][ T5978] [ 130.029239][ T5978] Shutting down cpus with NMI [ 130.029460][ T5978] Kernel Offset: disabled