Warning: Permanently added '10.128.10.8' (ED25519) to the list of known hosts. 1970/01/01 00:00:29 parsed 1 programs 1970/01/01 00:00:29 serving rpc on tcp://33861 [ 30.784557][ T4748] cgroup: Unknown subsys name 'net' [ 30.965252][ T4748] cgroup: Unknown subsys name 'cpuset' [ 30.966595][ T4748] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.152750][ T4748] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 34.416308][ T4755] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.416597][ T4755] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.416957][ T4755] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.447114][ T4755] infiniband rxe0: set active [ 34.447319][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.447363][ T4755] infiniband rxe0: added rxe_eth0 [ 34.455054][ T4755] RDS/IB: rxe0: added [ 34.455118][ T4755] smc: adding ib device rxe0 with port count 1 [ 34.455140][ T4755] smc: ib device rxe0 port 1 has no pnetid [ 34.455399][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.461703][ T4755] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.557935][ T4755] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.558102][ T4755] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.558229][ T4755] bridge_slave_0: entered allmulticast mode [ 34.558687][ T4755] bridge_slave_0: entered promiscuous mode [ 34.560064][ T4755] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.560111][ T4755] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.560157][ T4755] bridge_slave_1: entered allmulticast mode [ 34.560629][ T4755] bridge_slave_1: entered promiscuous mode [ 34.568838][ T4755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.569691][ T4755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.576917][ T4755] team0: Port device team_slave_0 added [ 34.577607][ T4755] team0: Port device team_slave_1 added [ 34.583046][ T4755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.583055][ T4755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.583066][ T4755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.584312][ T4755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.584319][ T4755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.584331][ T4755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.594590][ T4755] hsr_slave_0: entered promiscuous mode [ 34.594938][ T4755] hsr_slave_1: entered promiscuous mode [ 34.640198][ T4755] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.642099][ T4755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.642707][ T4755] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.643945][ T4755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.644238][ T4755] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.649969][ T4755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.650287][ T4755] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.652681][ T4755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.662046][ T4755] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.662079][ T4755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.662209][ T4755] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.662237][ T4755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.680179][ T4755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.685363][ T2507] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.685774][ T2507] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.689035][ T4755] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.700074][ T2507] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.700108][ T2507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.700468][ T2507] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.700486][ T2507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.706909][ T4755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.792769][ T4755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.803913][ T4755] veth0_vlan: entered promiscuous mode [ 34.807572][ T4755] veth1_vlan: entered promiscuous mode [ 34.813992][ T4755] veth0_macvtap: entered promiscuous mode [ 34.815134][ T4755] veth1_macvtap: entered promiscuous mode [ 34.818604][ T4755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.820375][ T4755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.824737][ T2589] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.825111][ T2589] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.825173][ T2589] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.844286][ T2589] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.876923][ T4755] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.912171][ T4799] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.938298][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.999382][ T4804] rxe_eth0 speed is unknown, defaulting to 1000 [ 35.017024][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.076388][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.100560][ T4807] rxe_eth0 speed is unknown, defaulting to 1000 [ 35.127078][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.174686][ T4810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.174976][ T4810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.175150][ T4810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.175526][ T4810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.175766][ T4810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.184939][ T4809] rxe_eth0 speed is unknown, defaulting to 1000 [ 35.308791][ T4816] rxe_eth0 speed is unknown, defaulting to 1000 [ 35.425865][ T4820] rxe_eth0 speed is unknown, defaulting to 1000 [ 35.569809][ T4824] rxe_eth0 speed is unknown, defaulting to 1000 [ 35.681862][ T4828] rxe_eth0 speed is unknown, defaulting to 1000 [ 35.750240][ T4832] rxe_eth0 speed is unknown, defaulting to 1000 [ 35.860507][ T4836] rxe_eth0 speed is unknown, defaulting to 1000 [ 35.965122][ T4840] rxe_eth0 speed is unknown, defaulting to 1000 [ 36.089553][ T4844] rxe_eth0 speed is unknown, defaulting to 1000 [ 36.144857][ T2507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.144870][ T2507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.155285][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.155297][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.217422][ T4848] rxe_eth0 speed is unknown, defaulting to 1000 [ 36.337401][ T4852] rxe_eth0 speed is unknown, defaulting to 1000 [ 36.420296][ T4856] rxe_eth0 speed is unknown, defaulting to 1000 1970/01/01 00:00:36 executed programs: 0 [ 36.649917][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.650165][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.650336][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.651198][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.651677][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.732131][ T4860] rxe_eth0 speed is unknown, defaulting to 1000 [ 36.826106][ T4860] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.826171][ T4860] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.826231][ T4860] bridge_slave_0: entered allmulticast mode [ 36.826669][ T4860] bridge_slave_0: entered promiscuous mode [ 36.827616][ T4860] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.827659][ T4860] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.827718][ T4860] bridge_slave_1: entered allmulticast mode [ 36.828153][ T4860] bridge_slave_1: entered promiscuous mode [ 36.835695][ T4860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.836709][ T4860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.842849][ T4860] team0: Port device team_slave_0 added [ 36.843818][ T4860] team0: Port device team_slave_1 added [ 36.850636][ T4860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.850646][ T4860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.850657][ T4860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.851159][ T4860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.851166][ T4860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.851178][ T4860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.869009][ T4860] hsr_slave_0: entered promiscuous mode [ 36.869356][ T4860] hsr_slave_1: entered promiscuous mode [ 36.869629][ T4860] debugfs: 'hsr0' already exists in 'hsr' [ 36.869687][ T4860] Cannot create hsr debugfs directory [ 38.454459][ T40] bridge_slave_1: left allmulticast mode [ 38.454482][ T40] bridge_slave_1: left promiscuous mode [ 38.454711][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.457298][ T40] bridge_slave_0: left allmulticast mode [ 38.457311][ T40] bridge_slave_0: left promiscuous mode [ 38.457464][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.519306][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.544976][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.584069][ T40] bond0 (unregistering): Released all slaves [ 38.691199][ T40] hsr_slave_0: left promiscuous mode [ 38.691529][ T40] hsr_slave_1: left promiscuous mode [ 38.691849][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.691864][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.692310][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.692319][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.706255][ T40] veth1_macvtap: left promiscuous mode [ 38.706293][ T40] veth0_macvtap: left promiscuous mode [ 38.706342][ T40] veth1_vlan: left promiscuous mode [ 38.706386][ T40] veth0_vlan: left promiscuous mode [ 38.736464][ T4810] Bluetooth: hci0: command tx timeout [ 38.806995][ T40] team0 (unregistering): Port device team_slave_1 removed [ 38.810796][ T40] team0 (unregistering): Port device team_slave_0 removed [ 38.860743][ T4426] 8021q: adding VLAN 0 to HW filter on device eth0 [ 39.331313][ T4860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.332969][ T4860] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.337644][ T4860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.338842][ T4860] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.339211][ T4860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.340243][ T4860] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.340703][ T4860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.341626][ T4860] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.374260][ T4860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.379913][ T4860] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.381568][ T2589] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.381599][ T2589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.387518][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.387543][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.402235][ T4860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.402252][ T4860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.537547][ T4860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.557805][ T4860] veth0_vlan: entered promiscuous mode [ 39.560339][ T4860] veth1_vlan: entered promiscuous mode [ 39.571240][ T4860] veth0_macvtap: entered promiscuous mode [ 39.572636][ T4860] veth1_macvtap: entered promiscuous mode [ 39.578518][ T4860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.580690][ T4860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.595871][ T2589] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.595906][ T2589] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.595924][ T2589] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.595940][ T2589] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.668299][ T2507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.668315][ T2507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.701906][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.701921][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.983404][ T4466] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 40.147061][ T4466] usb 1-1: Using ep0 maxpacket: 8 [ 40.167941][ T4466] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 40.172609][ T4466] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.178169][ T4466] usb 1-1: config 0 descriptor?? [ 40.187403][ T4466] usb 1-1: probing VID:PID(0424:012C) [ 40.188296][ T4466] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 40.188307][ T4466] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 40.188315][ T4466] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 40.188323][ T4466] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 40.188331][ T4466] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 40.589508][ T4466] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 40.790374][ T4466] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 40.813442][ T4810] Bluetooth: hci0: command tx timeout [ 41.605999][ T4466] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 41.621377][ T4466] usb 1-1: USB disconnect, device number 2 [ 41.622325][ T4880] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 41.688067][ T4466] USB vub300 remote SDIO host controller[0] now disconnected [ 41.973173][ T4466] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 42.123128][ T4466] usb 1-1: Using ep0 maxpacket: 8 [ 42.123485][ T4466] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 42.124146][ T4466] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.125303][ T4466] usb 1-1: config 0 descriptor?? [ 42.127314][ T4466] usb 1-1: probing VID:PID(0424:012C) [ 42.128665][ T4466] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 42.128678][ T4466] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 42.128687][ T4466] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 42.128695][ T4466] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 42.128702][ T4466] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 42.528861][ T4466] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 42.653225][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 42.653240][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/0 [ 42.653248][ C0] preempt_count: 101, expected: 0 [ 42.653253][ C0] RCU nest depth: 0, expected: 0 [ 42.653258][ C0] locks held by swapper/0/0: 1, last CPU#0: [ 42.653265][ C0] #0: ffff80008f857c60 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xf0/0x7f4 [ 42.653299][ C0] Preemption disabled at: [ 42.653302][ C0] [] schedule_preempt_disabled+0x20/0x2c [ 42.653319][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT [ 42.653327][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 42.653332][ C0] Call trace: [ 42.653335][ C0] show_stack+0x2c/0x3c (C) [ 42.653345][ C0] __dump_stack+0x30/0x40 [ 42.653353][ C0] dump_stack_lvl+0xd8/0x12c [ 42.653361][ C0] dump_stack+0x1c/0x28 [ 42.653368][ C0] __might_resched+0x354/0x4c0 [ 42.653379][ C0] __might_sleep+0x84/0xdc [ 42.653389][ C0] __cancel_work_sync+0x78/0x144 [ 42.653398][ C0] cancel_delayed_work_sync+0x24/0x38 [ 42.653407][ C0] mmc_free_host+0x20/0x48 [ 42.653417][ C0] vub300_delete+0xd4/0xec [ 42.653427][ C0] vub300_inactivity_timer_expired+0xd4/0x2ac [ 42.653437][ C0] call_timer_fn+0x198/0x7f4 [ 42.653445][ C0] __run_timer_base+0x530/0x744 [ 42.653454][ C0] run_timer_base+0x84/0x1b8 [ 42.653462][ C0] run_timer_softirq+0x20/0x48 [ 42.653471][ C0] handle_softirqs+0x324/0xcbc [ 42.653480][ C0] __do_softirq+0x14/0x20 [ 42.653488][ C0] ____do_softirq+0x10/0x1c [ 42.653497][ C0] call_on_irq_stack+0x30/0x48 [ 42.653506][ C0] do_softirq_own_stack+0x1c/0x28 [ 42.653514][ C0] __irq_exit_rcu+0x10c/0x318 [ 42.653523][ C0] irq_exit_rcu+0x14/0x84 [ 42.653532][ C0] el1_interrupt+0x40/0x60 [ 42.653542][ C0] el1h_64_irq_handler+0x18/0x24 [ 42.653550][ C0] el1h_64_irq+0x78/0x7c [ 42.653557][ C0] default_idle_call+0xa0/0xb8 (P) [ 42.653566][ C0] do_idle+0x1ec/0x450 [ 42.653577][ C0] cpu_startup_entry+0x5c/0x74 [ 42.653587][ C0] rest_init+0x390/0x3a8 [ 42.653596][ C0] start_kernel+0x374/0x3c0 [ 42.653607][ C0] __primary_switched+0x8c/0x94 [ 42.653715][ C0] ODEBUG: object 00000000b0f96439 is NOT on stack 00000000e11e96c7, but annotated. [ 42.653837][ C0] ------------[ cut here ]------------ [ 42.653840][ C0] WARNING: lib/debugobjects.c:672 at debug_object_is_on_stack+0xb0/0xb8, CPU#0: swapper/0/0 [ 42.700934][ C0] Modules linked in: [ 42.701783][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 PREEMPT [ 42.703824][ C0] Tainted: [W]=WARN [ 42.704544][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 42.706483][ C0] pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 42.708173][ C0] pc : debug_object_is_on_stack+0xb0/0xb8 [ 42.709294][ C0] lr : debug_object_is_on_stack+0xb0/0xb8 [ 42.710398][ C0] sp : ffff80008f857780 [ 42.711318][ C0] x29: ffff80008f857780 x28: dfff800000000000 x27: 1fffe00019e26008 [ 42.712860][ C0] x26: 0000000000000000 x25: dfff800000000000 x24: 0000000000000000 [ 42.714575][ C0] x23: 0000000000000000 x22: ffff80008f768000 x21: ffff80008981c4e0 [ 42.716356][ C0] x20: 0000000000000001 x19: ffff80008f8578e0 x18: 00000000ffffffff [ 42.717967][ C0] x17: 3763363965313165 x16: 3030303030303030 x15: 206b63617473206e [ 42.719586][ C0] x14: 0000000000000826 x13: 0000000000000001 x12: 0000000000000003 [ 42.721304][ C0] x11: 0000000000000000 x10: 0000000000000103 x9 : 1d51c9665b4d4f00 [ 42.723075][ C0] x8 : 1d51c9665b4d4f00 x7 : ffff800080484084 x6 : 0000000000000000 [ 42.724797][ C0] x5 : 0000000000000001 x4 : 0000000000000000 x3 : ffff80008048eb84 [ 42.726485][ C0] x2 : 0000000100000102 x1 : ffff80008981c4c0 x0 : 0000000000000050 [ 42.728155][ C0] Call trace: [ 42.728815][ C0] debug_object_is_on_stack+0xb0/0xb8 (P) [ 42.729995][ C0] lookup_object_or_alloc+0xfc/0x188 [ 42.731139][ C0] __debug_object_init+0x8c/0x1e0 [ 42.732206][ C0] debug_object_init_on_stack+0x20/0x2c [ 42.733419][ C0] init_rcu_head_on_stack+0x18/0x24 [ 42.734468][ C0] __synchronize_srcu+0x1ac/0x268 [ 42.735543][ C0] synchronize_srcu+0x280/0x2e0 [ 42.736572][ C0] wakeup_source_unregister+0x110/0x32c [ 42.737798][ C0] mmc_host_classdev_release+0x48/0x100 [ 42.739037][ C0] device_release+0xb4/0x1d4 [ 42.740049][ C0] kobject_put+0x1dc/0x4b8 [ 42.740988][ C0] put_device+0x28/0x40 [ 42.741891][ C0] mmc_free_host+0x38/0x48 [ 42.742813][ C0] vub300_delete+0xd4/0xec [ 42.743715][ C0] vub300_inactivity_timer_expired+0xd4/0x2ac [ 42.744990][ C0] call_timer_fn+0x198/0x7f4 [ 42.745975][ C0] __run_timer_base+0x530/0x744 [ 42.746899][ C0] run_timer_base+0x84/0x1b8 [ 42.747842][ C0] run_timer_softirq+0x20/0x48 [ 42.748782][ C0] handle_softirqs+0x324/0xcbc [ 42.749663][ C0] __do_softirq+0x14/0x20 [ 42.750528][ C0] ____do_softirq+0x10/0x1c [ 42.751519][ C0] call_on_irq_stack+0x30/0x48 [ 42.752562][ C0] do_softirq_own_stack+0x1c/0x28 [ 42.753570][ C0] __irq_exit_rcu+0x10c/0x318 [ 42.754585][ C0] irq_exit_rcu+0x14/0x84 [ 42.755480][ C0] el1_interrupt+0x40/0x60 [ 42.756362][ C0] el1h_64_irq_handler+0x18/0x24 [ 42.757336][ C0] el1h_64_irq+0x78/0x7c [ 42.758225][ C0] default_idle_call+0xa0/0xb8 (P) [ 42.759337][ C0] do_idle+0x1ec/0x450 [ 42.760248][ C0] cpu_startup_entry+0x5c/0x74 [ 42.761297][ C0] rest_init+0x390/0x3a8 [ 42.762175][ C0] start_kernel+0x374/0x3c0 [ 42.763055][ C0] __primary_switched+0x8c/0x94 [ 42.764152][ C0] irq event stamp: 472973 [ 42.765109][ C0] hardirqs last enabled at (472972): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 42.767204][ C0] hardirqs last disabled at (472973): [] _raw_spin_lock_irqsave+0x2c/0x7c [ 42.769230][ C0] softirqs last enabled at (472850): [] handle_softirqs+0xb2c/0xcbc [ 42.771352][ C0] softirqs last disabled at (472857): [] __do_softirq+0x14/0x20 [ 42.773227][ C0] ---[ end trace 0000000000000000 ]--- [ 42.774476][ C0] BUG: scheduling while atomic: swapper/0/0/0x00000102 [ 42.774484][ C0] locks held by swapper/0/0: 1, on CPU#0: [ 42.774491][ C0] #0: ffff80008f857c60 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xf0/0x7f4 [ 42.774519][ C0] Modules linked in: [ 42.774524][ C0] Preemption disabled at: [ 42.774527][ C0] [] schedule_preempt_disabled+0x20/0x2c [ 42.774546][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 PREEMPT [ 42.774557][ C0] Tainted: [W]=WARN [ 42.774559][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 42.774564][ C0] Call trace: [ 42.774566][ C0] show_stack+0x2c/0x3c (C) [ 42.774578][ C0] __dump_stack+0x30/0x40 [ 42.774587][ C0] dump_stack_lvl+0xd8/0x12c [ 42.774595][ C0] dump_stack+0x1c/0x28 [ 42.774602][ C0] __schedule_bug+0x10c/0x190 [ 42.774610][ C0] __schedule+0x1418/0x2b00 [ 42.774619][ C0] schedule+0x13c/0x20c [ 42.774629][ C0] schedule_timeout+0xc0/0x28c [ 42.774636][ C0] wait_for_common+0x220/0x394 [ 42.774645][ C0] wait_for_completion+0x18/0x24 [ 42.774655][ C0] __synchronize_srcu+0x1cc/0x268 [ 42.774663][ C0] synchronize_srcu+0x280/0x2e0 [ 42.774672][ C0] wakeup_source_unregister+0x110/0x32c [ 42.774682][ C0] mmc_host_classdev_release+0x48/0x100 [ 42.774691][ C0] device_release+0xb4/0x1d4 [ 42.774700][ C0] kobject_put+0x1dc/0x4b8 [ 42.774708][ C0] put_device+0x28/0x40 [ 42.774719][ C0] mmc_free_host+0x38/0x48 [ 42.774727][ C0] vub300_delete+0xd4/0xec [ 42.774737][ C0] vub300_inactivity_timer_expired+0xd4/0x2ac [ 42.774746][ C0] call_timer_fn+0x198/0x7f4 [ 42.774755][ C0] __run_timer_base+0x530/0x744 [ 42.774763][ C0] run_timer_base+0x84/0x1b8 [ 42.774771][ C0] run_timer_softirq+0x20/0x48 [ 42.774780][ C0] handle_softirqs+0x324/0xcbc [ 42.774788][ C0] __do_softirq+0x14/0x20 [ 42.774796][ C0] ____do_softirq+0x10/0x1c [ 42.774804][ C0] call_on_irq_stack+0x30/0x48 [ 42.774813][ C0] do_softirq_own_stack+0x1c/0x28 [ 42.774821][ C0] __irq_exit_rcu+0x10c/0x318 [ 42.774830][ C0] irq_exit_rcu+0x14/0x84 [ 42.774839][ C0] el1_interrupt+0x40/0x60 [ 42.774846][ C0] el1h_64_irq_handler+0x18/0x24 [ 42.774853][ C0] el1h_64_irq+0x78/0x7c [ 42.774860][ C0] default_idle_call+0xa0/0xb8 (P) [ 42.774869][ C0] do_idle+0x1ec/0x450 [ 42.774880][ C0] cpu_startup_entry+0x5c/0x74 [ 42.774890][ C0] rest_init+0x390/0x3a8 [ 42.774899][ C0] start_kernel+0x374/0x3c0 [ 42.774908][ C0] __primary_switched+0x8c/0x94 [ 42.774925][ T0] ------------[ cut here ]------------ [ 42.774928][ T0] releasing a pinned lock [ 42.774955][ T0] WARNING: kernel/locking/lockdep.c:5597 at lock_release+0x288/0x354, CPU#0: swapper/0/0 [ 42.827084][ T0] Modules linked in: [ 42.827822][ T0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 PREEMPT [ 42.829677][ T0] Tainted: [W]=WARN [ 42.830440][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 42.832463][ T0] pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 42.834026][ T0] pc : lock_release+0x288/0x354 [ 42.834986][ T0] lr : lock_release+0x288/0x354 [ 42.835916][ T0] sp : ffff80008f8573c0 [ 42.836709][ T0] x29: ffff80008f8573d0 x28: 1fffe000359ecfb3 x27: 1fffe000359ece33 [ 42.838127][ T0] x26: 0000000000000002 x25: 00000000000000c0 x24: ffff8000897a32f8 [ 42.839694][ T0] x23: ffff80008981d038 x22: 0000000000000002 x21: ffff0001acf671e0 [ 42.841319][ T0] x20: ffff8000800a3aec x19: ffff80008981c4c0 x18: 00000000ffffffff [ 42.843003][ T0] x17: 3763363965313165 x16: 0000000000000001 x15: ffff80008b4c2000 [ 42.844686][ T0] x14: 00000000000008be x13: 0000000000000001 x12: 0000000000000003 [ 42.846281][ T0] x11: 0000000000000000 x10: 0000000000000004 x9 : 1d51c9665b4d4f00 [ 42.847834][ T0] x8 : 1d51c9665b4d4f00 x7 : 0000000000000001 x6 : ffff800080484084 [ 42.849392][ T0] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f4d68 [ 42.851022][ T0] x2 : 0000000000000002 x1 : ffff80008981c4c0 x0 : 0000000000000000 [ 42.852420][ T0] Call trace: [ 42.853019][ T0] lock_release+0x288/0x354 (P) [ 42.853972][ T0] _raw_spin_unlock+0x24/0x78 [ 42.854954][ T0] dequeue_task_idle+0x1c/0x64 [ 42.855910][ T0] dequeue_task+0x204/0x2fc [ 42.856797][ T0] __schedule+0x564/0x2b00 [ 42.857748][ T0] schedule+0x13c/0x20c [ 42.858644][ T0] schedule_timeout+0xc0/0x28c [ 42.859669][ T0] wait_for_common+0x220/0x394 [ 42.860666][ T0] wait_for_completion+0x18/0x24 [ 42.861731][ T0] __synchronize_srcu+0x1cc/0x268 [ 42.862836][ T0] synchronize_srcu+0x280/0x2e0 [ 42.863894][ T0] wakeup_source_unregister+0x110/0x32c [ 42.864997][ T0] mmc_host_classdev_release+0x48/0x100 [ 42.866157][ T0] device_release+0xb4/0x1d4 [ 42.867094][ T0] kobject_put+0x1dc/0x4b8 [ 42.868042][ T0] put_device+0x28/0x40 [ 42.868948][ T0] mmc_free_host+0x38/0x48 [ 42.869938][ T0] vub300_delete+0xd4/0xec [ 42.870976][ T0] vub300_inactivity_timer_expired+0xd4/0x2ac [ 42.872327][ T0] call_timer_fn+0x198/0x7f4 [ 42.873334][ T0] __run_timer_base+0x530/0x744 [ 42.874390][ T0] run_timer_base+0x84/0x1b8 [ 42.875419][ T0] run_timer_softirq+0x20/0x48 [ 42.876363][ T0] handle_softirqs+0x324/0xcbc [ 42.877261][ T0] __do_softirq+0x14/0x20 [ 42.878026][ T0] ____do_softirq+0x10/0x1c [ 42.878869][ T0] call_on_irq_stack+0x30/0x48 [ 42.879773][ T0] do_softirq_own_stack+0x1c/0x28 [ 42.880737][ T0] __irq_exit_rcu+0x10c/0x318 [ 42.881612][ T0] irq_exit_rcu+0x14/0x84 [ 42.882443][ T0] el1_interrupt+0x40/0x60 [ 42.883291][ T0] el1h_64_irq_handler+0x18/0x24 [ 42.884271][ T0] el1h_64_irq+0x78/0x7c [ 42.885066][ T0] default_idle_call+0xa0/0xb8 (P) [ 42.886095][ T0] do_idle+0x1ec/0x450 [ 42.886919][ T0] cpu_startup_entry+0x5c/0x74 [ 42.887770][ T0] rest_init+0x390/0x3a8 [ 42.888605][ T0] start_kernel+0x374/0x3c0 [ 42.889445][ T0] __primary_switched+0x8c/0x94 [ 42.890340][ T0] irq event stamp: 473017 [ 42.891169][ T0] hardirqs last enabled at (473016): [] dump_stack_lvl+0xe8/0x12c [ 42.893053][ T0] hardirqs last disabled at (473017): [] __schedule+0x2f8/0x2b00 [ 42.894846][ T0] softirqs last enabled at (472850): [] handle_softirqs+0xb2c/0xcbc [ 42.896677][ T0] softirqs last disabled at (472857): [] __do_softirq+0x14/0x20 [ 42.898400][ T0] ---[ end trace 0000000000000000 ]--- [ 42.900379][ T0] [ 42.900802][ T0] ================================ [ 42.901757][ T0] WARNING: inconsistent lock state [ 42.902725][ T0] syzkaller #0 Tainted: G W [ 42.903877][ T0] -------------------------------- [ 42.904814][ T0] inconsistent {IN-SOFTIRQ-W} -> {SOFTIRQ-ON-W} usage. [ 42.906267][ T0] swapper/0/0 [HC0[0]:SC1[0]:HE0:SE1] takes: [ 42.907487][ T0] ffff80008f857c60 ((&vub300->inactivity_timer)){+.?.}-{0:0}, at: call_timer_fn+0xf0/0x7f4 [ 42.909570][ T0] {IN-SOFTIRQ-W} state was registered at: [ 42.910752][ T0] lock_acquire+0x13c/0x320 [ 42.911713][ T0] call_timer_fn+0xf8/0x7f4 [ 42.912633][ T0] __run_timer_base+0x530/0x744 [ 42.913674][ T0] run_timer_base+0x84/0x1b8 [ 42.914617][ T0] run_timer_softirq+0x20/0x48 [ 42.915535][ T0] handle_softirqs+0x324/0xcbc [ 42.916541][ T0] __do_softirq+0x14/0x20 [ 42.917367][ T0] ____do_softirq+0x10/0x1c [ 42.918217][ T0] call_on_irq_stack+0x30/0x48 [ 42.919236][ T0] do_softirq_own_stack+0x1c/0x28 [ 42.920242][ T0] __irq_exit_rcu+0x10c/0x318 [ 42.921298][ T0] irq_exit_rcu+0x14/0x84 [ 42.922231][ T0] el1_interrupt+0x40/0x60 [ 42.923153][ T0] el1h_64_irq_handler+0x18/0x24 [ 42.924201][ T0] el1h_64_irq+0x78/0x7c [ 42.925026][ T0] default_idle_call+0xa0/0xb8 [ 42.925887][ T0] do_idle+0x1ec/0x450 [ 42.926774][ T0] cpu_startup_entry+0x5c/0x74 [ 42.927849][ T0] rest_init+0x390/0x3a8 [ 42.928781][ T0] start_kernel+0x374/0x3c0 [ 42.929743][ T0] __primary_switched+0x8c/0x94 [ 42.930778][ T0] irq event stamp: 473052 [ 42.931763][ T0] hardirqs last enabled at (473050): [] rcu_core+0x43c/0xfbc [ 42.933392][ T0] hardirqs last disabled at (473051): [] handle_softirqs+0x9cc/0xcbc [ 42.935400][ T0] softirqs last enabled at (473052): [] handle_softirqs+0xb2c/0xcbc [ 42.937452][ T0] softirqs last disabled at (472857): [] __do_softirq+0x14/0x20 [ 42.939443][ T0] [ 42.939443][ T0] other info that might help us debug this: [ 42.941057][ T0] Possible unsafe locking scenario: [ 42.941057][ T0] [ 42.942544][ T0] CPU0 [ 42.943207][ T0] ---- [ 42.943913][ T0] lock((&vub300->inactivity_timer)); [ 42.945149][ T0] [ 42.945890][ T0] lock((&vub300->inactivity_timer)); [ 42.947085][ T0] [ 42.947085][ T0] *** DEADLOCK *** [ 42.947085][ T0] [ 42.948796][ T0] locks held by swapper/0/0: 1, on CPU#0: [ 42.949990][ T0] #0: ffff80008f857c60 ((&vub300->inactivity_timer)){+.?.}-{0:0}, at: call_timer_fn+0xf0/0x7f4 [ 42.952062][ T0] [ 42.952062][ T0] stack backtrace: [ 42.953377][ T0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 PREEMPT [ 42.955465][ T0] Tainted: [W]=WARN [ 42.956145][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 42.958018][ T0] Call trace: [ 42.958726][ T0] show_stack+0x2c/0x3c (C) [ 42.959727][ T0] __dump_stack+0x30/0x40 [ 42.960598][ T0] dump_stack_lvl+0xd8/0x12c [ 42.961499][ T0] dump_stack+0x1c/0x28 [ 42.962355][ T0] print_usage_bug+0x2f8/0x33c [ 42.963284][ T0] mark_lock_irq+0x4a0/0x4a8 [ 42.964222][ T0] mark_lock+0x144/0x1a4 [ 42.965124][ T0] mark_held_locks+0x60/0xb0 [ 42.966111][ T0] lockdep_hardirqs_on_prepare+0xf8/0x1d4 [ 42.967356][ T0] __arm64_exit_to_kernel_mode+0x48/0xcc [ 42.968669][ T0] arm64_exit_to_kernel_mode_preempt+0x28/0x38 [ 42.969941][ T0] el1_interrupt+0x4c/0x60 [ 42.970875][ T0] el1h_64_irq_handler+0x18/0x24 [ 42.971967][ T0] el1h_64_irq+0x78/0x7c [ 42.972893][ T0] dequeue_task_idle+0x24/0x64 (P) [ 42.974043][ T0] dequeue_task+0x204/0x2fc [ 42.975043][ T0] __schedule+0x564/0x2b00 [ 42.975958][ T0] lockdep_unlock+0x6c/0xf4 [ 42.976878][ T0] __lock_acquire+0x150c/0x2b08 [ 42.977879][ T0] 0x0 [ 42.978516][ T0] bad: scheduling from the idle thread! [ 42.978524][ T0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 PREEMPT [ 42.978534][ T0] Tainted: [W]=WARN [ 42.978541][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 42.978546][ T0] Call trace: [ 42.978548][ T0] show_stack+0x2c/0x3c (C) [ 42.978558][ T0] __dump_stack+0x30/0x40 [ 42.978568][ T0] dump_stack_lvl+0xd8/0x12c [ 42.978576][ T0] dump_stack+0x1c/0x28 [ 42.978583][ T0] dequeue_task_idle+0x34/0x64 [ 42.978590][ T0] dequeue_task+0x204/0x2fc [ 42.978598][ T0] __schedule+0x564/0x2b00 [ 42.978607][ T0] lockdep_unlock+0x6c/0xf4 [ 42.978615][ T0] __lock_acquire+0x150c/0x2b08 [ 42.978623][ T0] 0x0 [ 42.978643][ T0] Unable to handle kernel paging request at virtual address dfff800000000001 [ 42.978648][ T0] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 42.978652][ T0] Mem abort info: [ 42.978654][ T0] ESR = 0x0000000096000005 [ 42.978657][ T0] EC = 0x25: DABT (current EL), IL = 32 bits [ 42.978661][ T0] SET = 0, FnV = 0 [ 42.978664][ T0] EA = 0, S1PTW = 0 [ 42.978667][ T0] FSC = 0x05: level 1 translation fault [ 42.978670][ T0] Data abort info: [ 42.978672][ T0] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 42.978675][ T0] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 42.978679][ T0] GCS = 0, Overlay = 0, DirtyBit = 0 [ 42.978683][ T0] [dfff800000000001] address between user and kernel address ranges [ 42.978689][ T0] Internal error: Oops: 0000000096000005 [#1] SMP [ 43.007973][ T0] Modules linked in: [ 43.008727][ T0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 PREEMPT [ 43.010533][ T0] Tainted: [W]=WARN [ 43.011245][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 43.013199][ T0] pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 43.014633][ T0] pc : __schedule+0x9f0/0x2b00 [ 43.015515][ T0] lr : __schedule+0x9dc/0x2b00 [ 43.016433][ T0] sp : ffff80008f8574c0 [ 43.017286][ T0] x29: ffff80008f8575f0 x28: ffff800088677b98 x27: 0000000000000000 [ 43.018859][ T0] x26: ffff80008981cc60 x25: dfff800000000000 x24: 1fffe000359ece33 [ 43.020591][ T0] x23: ffff0001acf67d28 x22: 000000000000000c x21: ffff0000d2e69d80 [ 43.022116][ T0] x20: ffff0001acf67180 x19: ffff80008981c4c0 x18: 00000000ffffffff [ 43.023681][ T0] x17: 3763363965313165 x16: 0000000000000001 x15: 0000000000000000 [ 43.025144][ T0] x14: 0000000000000982 x13: 0000000000000001 x12: 0000000000000000 [ 43.026681][ T0] x11: 0000000000000000 x10: ffff700011303899 x9 : dfff800000000000 [ 43.028197][ T0] x8 : 0000000000000001 x7 : 0000000000000000 x6 : ffff8000803a4efc [ 43.029643][ T0] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000868c7a34 [ 43.031179][ T0] x2 : 0000000000000001 x1 : 0000000000000008 x0 : 0000000000000001 [ 43.032754][ T0] Call trace: [ 43.033393][ T0] __schedule+0x9f0/0x2b00 (P) [ 43.034336][ T0] lockdep_unlock+0x6c/0xf4 [ 43.035260][ T0] __lock_acquire+0x150c/0x2b08 [ 43.036134][ T0] 0x0 [ 43.036650][ T0] Code: 528000c8 f828127f 91003376 d343fec8 (38f96908) [ 43.037965][ T0] ---[ end trace 0000000000000000 ]--- [ 43.228260][ T0] Kernel panic - not syncing: Oops: Fatal exception [ 43.229502][ T0] SMP: stopping secondary CPUs [ 44.324624][ T0] SMP: failed to stop secondary CPUs 1 [ 44.325700][ T0] Kernel Offset: disabled [ 44.326587][ T0] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 44.328060][ T0] Memory Limit: none [ 44.518303][ T0] Rebooting in 86400 seconds..