Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts. 1970/01/01 00:00:29 parsed 1 programs 1970/01/01 00:00:29 serving rpc on tcp://46835 [ 30.626704][ T4724] cgroup: Unknown subsys name 'net' [ 30.786988][ T4724] cgroup: Unknown subsys name 'cpuset' [ 30.788358][ T4724] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.943160][ T4724] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 32.378431][ T4736] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.551332][ T4737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 32.551625][ T4737] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.551805][ T4737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.552149][ T4737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.552380][ T4737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 33.111553][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.111569][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.121466][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.121480][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.539912][ T4788] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.540307][ T4788] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.540382][ T4788] bridge_slave_0: entered allmulticast mode [ 33.540857][ T4788] bridge_slave_0: entered promiscuous mode [ 33.548814][ T4788] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.548842][ T4788] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.548901][ T4788] bridge_slave_1: entered allmulticast mode [ 33.549338][ T4788] bridge_slave_1: entered promiscuous mode [ 33.559305][ T4788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.586972][ T4788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.593067][ T4788] team0: Port device team_slave_0 added [ 33.593760][ T4788] team0: Port device team_slave_1 added [ 33.602520][ T4788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.602531][ T4788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.602544][ T4788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.603391][ T4788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.603400][ T4788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.603416][ T4788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.626503][ T4788] hsr_slave_0: entered promiscuous mode [ 33.626871][ T4788] hsr_slave_1: entered promiscuous mode [ 33.681437][ T4788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.684227][ T4788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.684680][ T4788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.685946][ T4788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.686238][ T4788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.687989][ T4788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.688320][ T4788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.691308][ T4788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.700755][ T4788] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.700798][ T4788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.700943][ T4788] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.700971][ T4788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.718463][ T4788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.722482][ T4788] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.723923][ T3449] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.724378][ T3449] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.731995][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.732025][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.734068][ T3449] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.734091][ T3449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.823709][ T4788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.833602][ T4788] veth0_vlan: entered promiscuous mode [ 33.838929][ T4788] veth1_vlan: entered promiscuous mode [ 33.849662][ T4788] veth0_macvtap: entered promiscuous mode [ 33.850723][ T4788] veth1_macvtap: entered promiscuous mode [ 33.855168][ T4788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.860429][ T4788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.875835][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.876187][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.876207][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.876226][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.941574][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.009719][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:34 executed programs: 0 [ 34.079546][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.095771][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.096030][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.096214][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.097092][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.097347][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.149800][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.232750][ T4827] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.232820][ T4827] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.232870][ T4827] bridge_slave_0: entered allmulticast mode [ 34.233283][ T4827] bridge_slave_0: entered promiscuous mode [ 34.236062][ T4827] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.236087][ T4827] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.236188][ T4827] bridge_slave_1: entered allmulticast mode [ 34.236598][ T4827] bridge_slave_1: entered promiscuous mode [ 34.243381][ T4827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.244282][ T4827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.254591][ T4827] team0: Port device team_slave_0 added [ 34.255273][ T4827] team0: Port device team_slave_1 added [ 34.263742][ T4827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.263752][ T4827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.263767][ T4827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.264518][ T4827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.264525][ T4827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.264538][ T4827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.285385][ T4827] hsr_slave_0: entered promiscuous mode [ 34.286107][ T4827] hsr_slave_1: entered promiscuous mode [ 34.286309][ T4827] debugfs: 'hsr0' already exists in 'hsr' [ 34.286341][ T4827] Cannot create hsr debugfs directory [ 36.175907][ T4737] Bluetooth: hci0: command tx timeout [ 37.023381][ T12] bridge_slave_1: left allmulticast mode [ 37.023453][ T12] bridge_slave_1: left promiscuous mode [ 37.023737][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.031373][ T12] bridge_slave_0: left allmulticast mode [ 37.031389][ T12] bridge_slave_0: left promiscuous mode [ 37.031458][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.084155][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.126686][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.146449][ T12] bond0 (unregistering): Released all slaves [ 37.209728][ T12] hsr_slave_0: left promiscuous mode [ 37.210005][ T12] hsr_slave_1: left promiscuous mode [ 37.210286][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.210300][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.210637][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.210646][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.213686][ T12] veth1_macvtap: left promiscuous mode [ 37.213715][ T12] veth0_macvtap: left promiscuous mode [ 37.213758][ T12] veth1_vlan: left promiscuous mode [ 37.213804][ T12] veth0_vlan: left promiscuous mode [ 37.301956][ T12] team0 (unregistering): Port device team_slave_1 removed [ 37.306139][ T12] team0 (unregistering): Port device team_slave_0 removed [ 37.350670][ T4403] 8021q: adding VLAN 0 to HW filter on device eth0 [ 37.617329][ T4827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.618927][ T4827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.619293][ T4827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.620297][ T4827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.620652][ T4827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.621653][ T4827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.622055][ T4827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.623012][ T4827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.667935][ T4827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.671614][ T4827] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.673857][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.673880][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.676227][ T3449] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.676250][ T3449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.683455][ T4827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.683467][ T4827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.785133][ T4827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.795467][ T4827] veth0_vlan: entered promiscuous mode [ 37.797767][ T4827] veth1_vlan: entered promiscuous mode [ 37.804677][ T4827] veth0_macvtap: entered promiscuous mode [ 37.806506][ T4827] veth1_macvtap: entered promiscuous mode [ 37.809603][ T4827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.810543][ T4827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.827122][ T1943] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.827258][ T1943] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.827276][ T1943] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.827292][ T1943] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.843510][ T1943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.843521][ T1943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.851611][ T3449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.851624][ T3449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.105619][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 38.245690][ T4737] Bluetooth: hci0: command tx timeout [ 38.256930][ T26] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 38.257788][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 38.257807][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 38.257824][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.262122][ T26] usb 1-1: probing VID:PID(0424:012C) [ 38.262701][ T26] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 38.262712][ T26] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 38.262720][ T26] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 38.262727][ T26] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 38.262734][ T26] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 38.662122][ T26] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 38.862458][ T26] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted 1970/01/01 00:00:39 executed programs: 3 [ 39.677451][ T26] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 39.693995][ T26] usb 1-1: USB disconnect, device number 2 [ 39.694721][ T866] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 39.759487][ T26] USB vub300 remote SDIO host controller[0] now disconnected [ 40.045490][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 40.195803][ T26] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 40.196462][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 40.196475][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 40.196489][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.200208][ T26] usb 1-1: probing VID:PID(0424:012C) [ 40.200504][ T26] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 40.200512][ T26] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 40.200532][ T26] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 40.200539][ T26] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 40.200547][ T26] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 40.325461][ T4737] Bluetooth: hci0: command tx timeout [ 40.599211][ T26] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 40.725551][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 40.725566][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/1 [ 40.725575][ C1] preempt_count: 101, expected: 0 [ 40.725581][ C1] RCU nest depth: 0, expected: 0 [ 40.725585][ C1] locks held by swapper/1/0: 1, last CPU#1: [ 40.725592][ C1] #0: ffff80008eac7c60 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xf0/0x7f4 [ 40.725624][ C1] Preemption disabled at: [ 40.725627][ C1] [] stack_depot_save_flags+0x2f4/0x8cc [ 40.725643][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT [ 40.725651][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 40.725656][ C1] Call trace: [ 40.725659][ C1] show_stack+0x2c/0x3c (C) [ 40.725671][ C1] __dump_stack+0x30/0x40 [ 40.725682][ C1] dump_stack_lvl+0xd8/0x12c [ 40.725692][ C1] dump_stack+0x1c/0x28 [ 40.725701][ C1] __might_resched+0x354/0x4c0 [ 40.725711][ C1] __might_sleep+0x84/0xdc [ 40.725719][ C1] __cancel_work_sync+0x78/0x144 [ 40.725728][ C1] cancel_delayed_work_sync+0x24/0x38 [ 40.725735][ C1] mmc_free_host+0x20/0x48 [ 40.725744][ C1] vub300_delete+0xd4/0xec [ 40.725754][ C1] vub300_inactivity_timer_expired+0xd4/0x2ac [ 40.725762][ C1] call_timer_fn+0x198/0x7f4 [ 40.725769][ C1] __run_timer_base+0x530/0x744 [ 40.725780][ C1] run_timer_base+0x84/0x1b8 [ 40.725787][ C1] run_timer_softirq+0x20/0x48 [ 40.725801][ C1] handle_softirqs+0x324/0xcbc [ 40.725811][ C1] __do_softirq+0x14/0x20 [ 40.725820][ C1] ____do_softirq+0x14/0x20 [ 40.725829][ C1] call_on_irq_stack+0x30/0x48 [ 40.725837][ C1] do_softirq_own_stack+0x20/0x2c [ 40.725845][ C1] __irq_exit_rcu+0x10c/0x318 [ 40.725852][ C1] irq_exit_rcu+0x14/0x84 [ 40.725860][ C1] el1_interrupt+0x40/0x60 [ 40.725871][ C1] el1h_64_irq_handler+0x18/0x24 [ 40.725881][ C1] el1h_64_irq+0x78/0x7c [ 40.725888][ C1] default_idle_call+0xa0/0xb8 (P) [ 40.725896][ C1] do_idle+0x1ec/0x450 [ 40.725906][ C1] cpu_startup_entry+0x5c/0x74 [ 40.725915][ C1] secondary_start_kernel+0x1bc/0x1e0 [ 40.725925][ C1] __secondary_switched+0xc0/0xc4 [ 40.726038][ C1] ODEBUG: object 0000000077c40855 is NOT on stack 00000000b25a035a, but annotated. [ 40.726156][ C1] ------------[ cut here ]------------ [ 40.726160][ C1] WARNING: lib/debugobjects.c:672 at debug_object_is_on_stack+0xb0/0xb8, CPU#1: swapper/1/0 [ 40.770802][ C1] Modules linked in: [ 40.771539][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 PREEMPT [ 40.773404][ C1] Tainted: [W]=WARN [ 40.774105][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 40.775949][ C1] pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 40.777440][ C1] pc : debug_object_is_on_stack+0xb0/0xb8 [ 40.778535][ C1] lr : debug_object_is_on_stack+0xb0/0xb8 [ 40.779584][ C1] sp : ffff80008eac7780 [ 40.780368][ C1] x29: ffff80008eac7780 x28: dfff800000000000 x27: 1fffe00019b63008 [ 40.781833][ C1] x26: 0000000000000000 x25: dfff800000000000 x24: 0000000000000000 [ 40.783309][ C1] x23: 0000000000000000 x22: ffff80008e9ce000 x21: ffff0000c1aa8020 [ 40.784753][ C1] x20: 0000000000000001 x19: ffff80008eac78e0 x18: 00000000ffffffff [ 40.786267][ C1] x17: 6135333061353262 x16: 3030303030303030 x15: 206b63617473206e [ 40.787774][ C1] x14: 0000000000000672 x13: 0000000000000001 x12: 0000000000000003 [ 40.789243][ C1] x11: 0000000000000000 x10: 0000000000000103 x9 : 066073d428b05f00 [ 40.790689][ C1] x8 : 066073d428b05f00 x7 : ffff800080483190 x6 : 0000000000000000 [ 40.792216][ C1] x5 : 0000000000000001 x4 : 0000000000000000 x3 : ffff80008048dc90 [ 40.793738][ C1] x2 : 0000000100000102 x1 : ffff0000c1aa8000 x0 : 0000000000000050 [ 40.795287][ C1] Call trace: [ 40.795874][ C1] debug_object_is_on_stack+0xb0/0xb8 (P) [ 40.796910][ C1] lookup_object_or_alloc+0xfc/0x188 [ 40.797933][ C1] __debug_object_init+0x8c/0x1e0 [ 40.798950][ C1] debug_object_init_on_stack+0x20/0x2c [ 40.800003][ C1] init_rcu_head_on_stack+0x18/0x24 [ 40.801024][ C1] __synchronize_srcu+0x1ac/0x268 [ 40.802018][ C1] synchronize_srcu+0x280/0x2e0 [ 40.802978][ C1] wakeup_source_unregister+0x110/0x32c [ 40.804015][ C1] mmc_host_classdev_release+0x48/0x100 [ 40.805059][ C1] device_release+0xb4/0x1d4 [ 40.805948][ C1] kobject_put+0x1dc/0x4b8 [ 40.806802][ C1] put_device+0x28/0x40 [ 40.807584][ C1] mmc_free_host+0x38/0x48 [ 40.808431][ C1] vub300_delete+0xd4/0xec [ 40.809276][ C1] vub300_inactivity_timer_expired+0xd4/0x2ac [ 40.810444][ C1] call_timer_fn+0x198/0x7f4 [ 40.811297][ C1] __run_timer_base+0x530/0x744 [ 40.812212][ C1] run_timer_base+0x84/0x1b8 [ 40.813085][ C1] run_timer_softirq+0x20/0x48 [ 40.814008][ C1] handle_softirqs+0x324/0xcbc [ 40.814943][ C1] __do_softirq+0x14/0x20 [ 40.815802][ C1] ____do_softirq+0x14/0x20 [ 40.816691][ C1] call_on_irq_stack+0x30/0x48 [ 40.817578][ C1] do_softirq_own_stack+0x20/0x2c [ 40.818540][ C1] __irq_exit_rcu+0x10c/0x318 [ 40.819466][ C1] irq_exit_rcu+0x14/0x84 [ 40.820348][ C1] el1_interrupt+0x40/0x60 [ 40.821203][ C1] el1h_64_irq_handler+0x18/0x24 [ 40.822144][ C1] el1h_64_irq+0x78/0x7c [ 40.822985][ C1] default_idle_call+0xa0/0xb8 (P) [ 40.823985][ C1] do_idle+0x1ec/0x450 [ 40.824777][ C1] cpu_startup_entry+0x5c/0x74 [ 40.825741][ C1] secondary_start_kernel+0x1bc/0x1e0 [ 40.826789][ C1] __secondary_switched+0xc0/0xc4 [ 40.827745][ C1] irq event stamp: 539069 [ 40.828580][ C1] hardirqs last enabled at (539068): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 40.830619][ C1] hardirqs last disabled at (539069): [] _raw_spin_lock_irqsave+0x2c/0x7c [ 40.832509][ C1] softirqs last enabled at (538946): [] handle_softirqs+0xb2c/0xcbc [ 40.834315][ C1] softirqs last disabled at (538953): [] __do_softirq+0x14/0x20 [ 40.836011][ C1] ---[ end trace 0000000000000000 ]--- [ 40.837157][ C1] BUG: scheduling while atomic: swapper/1/0/0x00000102 [ 40.837165][ C1] locks held by swapper/1/0: 1, on CPU#1: [ 40.837172][ C1] #0: ffff80008eac7c60 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xf0/0x7f4 [ 40.837198][ C1] Modules linked in: [ 40.837203][ C1] Preemption disabled at: [ 40.837205][ C1] [] stack_depot_save_flags+0x2f4/0x8cc [ 40.837218][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 PREEMPT [ 40.837228][ C1] Tainted: [W]=WARN [ 40.837231][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 40.837235][ C1] Call trace: [ 40.837237][ C1] show_stack+0x2c/0x3c (C) [ 40.837248][ C1] __dump_stack+0x30/0x40 [ 40.837258][ C1] dump_stack_lvl+0xd8/0x12c [ 40.837268][ C1] dump_stack+0x1c/0x28 [ 40.837277][ C1] __schedule_bug+0x10c/0x190 [ 40.837287][ C1] __schedule+0x1418/0x2b00 [ 40.837295][ C1] schedule+0x13c/0x20c [ 40.837303][ C1] schedule_timeout+0xc0/0x28c [ 40.837312][ C1] wait_for_common+0x220/0x394 [ 40.837321][ C1] wait_for_completion+0x18/0x24 [ 40.837329][ C1] __synchronize_srcu+0x1cc/0x268 [ 40.837340][ C1] synchronize_srcu+0x280/0x2e0 [ 40.837351][ C1] wakeup_source_unregister+0x110/0x32c [ 40.837360][ C1] mmc_host_classdev_release+0x48/0x100 [ 40.837368][ C1] device_release+0xb4/0x1d4 [ 40.837377][ C1] kobject_put+0x1dc/0x4b8 [ 40.837388][ C1] put_device+0x28/0x40 [ 40.837395][ C1] mmc_free_host+0x38/0x48 [ 40.837402][ C1] vub300_delete+0xd4/0xec [ 40.837409][ C1] vub300_inactivity_timer_expired+0xd4/0x2ac [ 40.837418][ C1] call_timer_fn+0x198/0x7f4 [ 40.837425][ C1] __run_timer_base+0x530/0x744 [ 40.837435][ C1] run_timer_base+0x84/0x1b8 [ 40.837442][ C1] run_timer_softirq+0x20/0x48 [ 40.837453][ C1] handle_softirqs+0x324/0xcbc [ 40.837460][ C1] __do_softirq+0x14/0x20 [ 40.837467][ C1] ____do_softirq+0x14/0x20 [ 40.837475][ C1] call_on_irq_stack+0x30/0x48 [ 40.837482][ C1] do_softirq_own_stack+0x20/0x2c [ 40.837489][ C1] __irq_exit_rcu+0x10c/0x318 [ 40.837497][ C1] irq_exit_rcu+0x14/0x84 [ 40.837505][ C1] el1_interrupt+0x40/0x60 [ 40.837514][ C1] el1h_64_irq_handler+0x18/0x24 [ 40.837523][ C1] el1h_64_irq+0x78/0x7c [ 40.837531][ C1] default_idle_call+0xa0/0xb8 (P) [ 40.837538][ C1] do_idle+0x1ec/0x450 [ 40.837547][ C1] cpu_startup_entry+0x5c/0x74 [ 40.837556][ C1] secondary_start_kernel+0x1bc/0x1e0 [ 40.837566][ C1] __secondary_switched+0xc0/0xc4 [ 40.837582][ T0] ------------[ cut here ]------------ [ 40.837585][ T0] releasing a pinned lock [ 40.837612][ T0] WARNING: kernel/locking/lockdep.c:5597 at lock_release+0x288/0x354, CPU#1: swapper/1/0 [ 40.885946][ T0] Modules linked in: [ 40.886709][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 PREEMPT [ 40.888610][ T0] Tainted: [W]=WARN [ 40.889317][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 40.891172][ T0] pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 40.892615][ T0] pc : lock_release+0x288/0x354 [ 40.893524][ T0] lr : lock_release+0x288/0x354 [ 40.894427][ T0] sp : ffff80008eac73c0 [ 40.895188][ T0] x29: ffff80008eac73d0 x28: 1fffe00035bdc5b3 x27: 1fffe00035bdc433 [ 40.896649][ T0] x26: 0000000000000002 x25: 00000000000000c0 x24: ffff800088a222f8 [ 40.898155][ T0] x23: ffff0000c1aa8b78 x22: 0000000000000002 x21: ffff0001adee21e0 [ 40.899767][ T0] x20: ffff8000800a2d80 x19: ffff0000c1aa8000 x18: 00000000ffffffff [ 40.901303][ T0] x17: 6135333061353262 x16: 0000000000000001 x15: ffff80008a728000 [ 40.902833][ T0] x14: 0000000000000708 x13: 0000000000000001 x12: 0000000000000003 [ 40.904418][ T0] x11: 0000000000000000 x10: 0000000000000004 x9 : 066073d428b05f00 [ 40.905901][ T0] x8 : 066073d428b05f00 x7 : 0000000000000001 x6 : ffff800080483190 [ 40.907366][ T0] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f3e60 [ 40.908952][ T0] x2 : 0000000000000002 x1 : ffff0000c1aa8000 x0 : 0000000000000000 [ 40.910509][ T0] Call trace: [ 40.911139][ T0] lock_release+0x288/0x354 (P) [ 40.912088][ T0] _raw_spin_unlock+0x24/0x78 [ 40.913018][ T0] dequeue_task_idle+0x1c/0x64 [ 40.913933][ T0] dequeue_task+0x204/0x2fc [ 40.914789][ T0] __schedule+0x564/0x2b00 [ 40.915646][ T0] schedule+0x13c/0x20c [ 40.916426][ T0] schedule_timeout+0xc0/0x28c [ 40.917312][ T0] wait_for_common+0x220/0x394 [ 40.918181][ T0] wait_for_completion+0x18/0x24 [ 40.919078][ T0] __synchronize_srcu+0x1cc/0x268 [ 40.919983][ T0] synchronize_srcu+0x280/0x2e0 [ 40.920867][ T0] wakeup_source_unregister+0x110/0x32c [ 40.921887][ T0] mmc_host_classdev_release+0x48/0x100 [ 40.922910][ T0] device_release+0xb4/0x1d4 [ 40.923756][ T0] kobject_put+0x1dc/0x4b8 [ 40.924588][ T0] put_device+0x28/0x40 [ 40.925381][ T0] mmc_free_host+0x38/0x48 [ 40.926224][ T0] vub300_delete+0xd4/0xec [ 40.927062][ T0] vub300_inactivity_timer_expired+0xd4/0x2ac [ 40.928220][ T0] call_timer_fn+0x198/0x7f4 [ 40.929078][ T0] __run_timer_base+0x530/0x744 [ 40.929996][ T0] run_timer_base+0x84/0x1b8 [ 40.930845][ T0] run_timer_softirq+0x20/0x48 [ 40.931763][ T0] handle_softirqs+0x324/0xcbc [ 40.932675][ T0] __do_softirq+0x14/0x20 [ 40.933479][ T0] ____do_softirq+0x14/0x20 [ 40.934305][ T0] call_on_irq_stack+0x30/0x48 [ 40.935235][ T0] do_softirq_own_stack+0x20/0x2c [ 40.936210][ T0] __irq_exit_rcu+0x10c/0x318 [ 40.937127][ T0] irq_exit_rcu+0x14/0x84 [ 40.937978][ T0] el1_interrupt+0x40/0x60 [ 40.938830][ T0] el1h_64_irq_handler+0x18/0x24 [ 40.939744][ T0] el1h_64_irq+0x78/0x7c [ 40.940552][ T0] default_idle_call+0xa0/0xb8 (P) [ 40.941602][ T0] do_idle+0x1ec/0x450 [ 40.942391][ T0] cpu_startup_entry+0x5c/0x74 [ 40.943323][ T0] secondary_start_kernel+0x1bc/0x1e0 [ 40.944354][ T0] __secondary_switched+0xc0/0xc4 [ 40.945324][ T0] irq event stamp: 539111 [ 40.946116][ T0] hardirqs last enabled at (539110): [] dump_stack_lvl+0xe8/0x12c [ 40.947887][ T0] hardirqs last disabled at (539111): [] __schedule+0x2f8/0x2b00 [ 40.949696][ T0] softirqs last enabled at (538946): [] handle_softirqs+0xb2c/0xcbc [ 40.951549][ T0] softirqs last disabled at (538953): [] __do_softirq+0x14/0x20 [ 40.953333][ T0] ---[ end trace 0000000000000000 ]--- [ 40.9 ** replaying previous printk message ** [ 40.955321][ C1] ================================================================== [ 40.955330][ C1] BUG: KASAN: stack-out-of-bounds in stack_trace_consume_entry+0xe8/0x1d0 [ 40.955344][ C1] Write of size 8 at addr ffff80008eac75b0 by task swapper/1/0 [ 40.955351][ C1] [ 40.955356][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 PREEMPT [ 40.955366][ C1] Tainted: [W]=WARN [ 40.955368][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 40.955373][ C1] Call trace: [ 40.955375][ C1] show_stack+0x2c/0x3c (C) [ 40.955387][ C1] __dump_stack+0x30/0x40 [ 40.955397][ C1] dump_stack_lvl+0xd8/0x12c [ 40.955407][ C1] print_address_description+0xb0/0x238 [ 40.955419][ C1] print_report+0x68/0x84 [ 40.955426][ C1] kasan_report+0x8c/0xc4 [ 40.955436][ C1] __asan_report_store8_noabort+0x20/0x2c [ 40.955446][ C1] stack_trace_consume_entry+0xe8/0x1d0 [ 40.955455][ C1] arch_stack_walk+0x218/0x328 [ 40.955466][ C1] stack_trace_save+0x9c/0xf0 [ 40.955475][ C1] kasan_save_track+0x40/0x78 [ 40.955483][ C1] kasan_save_alloc_info+0x40/0x50 [ 40.955492][ C1] __kasan_slab_alloc+0x70/0x88 [ 40.955500][ C1] kmem_cache_alloc_node_noprof+0x318/0x604 [ 40.955509][ C1] kmalloc_reserve+0xc4/0x214 [ 40.955519][ C1] __alloc_skb+0x230/0x610 [ 40.955527][ C1] skb_copy+0x124/0x340 [ 40.955537][ C1] mac80211_hwsim_tx_frame_no_nl+0xbf8/0x17e0 [ 40.955547][ C1] mac80211_hwsim_tx_frame+0x1b4/0x1ec [ 40.955555][ C1] __mac80211_hwsim_beacon_tx+0x1b8/0x2c8 [ 40.955565][ C1] mac80211_hwsim_beacon_tx+0x324/0x6c0 [ 40.955575][ C1] __iterate_interfaces+0x234/0x4e0 [ 40.955584][ C1] ieee80211_iterate_active_interfaces_atomic+0xf4/0x1ac [ 40.955592][ C1] mac80211_hwsim_beacon+0xb4/0x1a4 [ 40.955601][ C1] __hrtimer_run_queues+0x310/0x998 [ 40.955609][ C1] hrtimer_run_softirq+0x1b4/0x2a8 [ 40.955617][ C1] handle_softirqs+0x324/0xcbc [ 40.955625][ C1] __do_softirq+0x14/0x20 [ 40.955632][ C1] ____do_softirq+0x14/0x20 [ 40.955639][ C1] call_on_irq_stack+0x30/0x48 [ 40.955647][ C1] [ 40.955649][ C1] The buggy address belongs to a 8-page vmalloc region starting at 0xffff80008eac0000 allocated at init_IRQ+0x10/0x34 [ 40.955669][ C1] The buggy address belongs to the physical page: [ 40.955673][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1011e7 [ 40.955682][ C1] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 40.955693][ C1] raw: 05ffc00000000000 fffffdffc30479c8 fffffdffc30479c8 0000000000000000 [ 40.955700][ C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 40.955704][ C1] page dumped because: kasan: bad access detected [ 40.955708][ C1] [ 40.955709][ C1] Memory state around the buggy address: [ 40.955713][ C1] ffff80008eac7480: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 [ 40.955718][ C1] ffff80008eac7500: 00 00 00 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00 [ 40.955722][ C1] >ffff80008eac7580: 00 00 00 00 00 00 f3 f3 00 00 00 00 00 00 00 00 [ 40.955726][ C1] ^ [ 40.955730][ C1] ffff80008eac7600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 40.955734][ C1] ffff80008eac7680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 40.955738][ C1] ================================================================== [ 40.955769][ C1] Disabling lock debugging due to kernel taint [ 40.955851][ T0] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 40.955860][ T0] Mem abort info: [ 40.955863][ T0] ESR = 0x0000000086000005 [ 40.955867][ T0] EC = 0x21: IABT (current EL), IL = 32 bits [ 40.955871][ T0] SET = 0, FnV = 0 [ 40.955874][ T0] EA = 0, S1PTW = 0 [ 40.955876][ T0] FSC = 0x05: level 1 translation fault [ 40.955880][ T0] user pgtable: 4k pages, 48-bit VAs, pgdp=000000011ee68000 [ 40.955886][ T0] [0000000000000000] pgd=08000001051fb403, p4d=08000001051fb403, pud=0000000000000000 [ 40.955897][ T0] Internal error: Oops: 0000000086000005 [#1] SMP [ 41.028777][ T0] Modules linked in: [ 41.029505][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G B W syzkaller #0 PREEMPT [ 41.031350][ T0] Tainted: [B]=BAD_PAGE, [W]=WARN [ 41.032267][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 41.034125][ T0] pstate: 434000c5 (nZcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 41.035599][ T0] pc : 0x0 [ 41.036184][ T0] lr : 0x0 [ 41.036748][ T0] sp : ffff80008eac7240 [ 41.037526][ T0] x29: ffff80008a28d000 x28: ffff0000c1aa8000 x27: 1fffe00035bdc433 [ 41.039044][ T0] x26: 0000000000000002 x25: dfff800000000000 x24: ffff0000c1aa8518 [ 41.040561][ T0] x23: 0000000083400005 x22: 1fffe00018355001 x21: dfff800000000000 [ 41.042136][ T0] x20: ffff0000c1aa8000 x19: ffff0000c1aa8008 x18: 00000000ffffffff [ 41.043609][ T0] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 41.045129][ T0] x14: 0000000000000000 x13: 0000000000000001 x12: ffff0000c1ad0000 [ 41.046652][ T0] x11: ffff8001254aa000 x10: dfff800000000000 x9 : 00000000000000c0 [ 41.048172][ T0] x8 : 0000000004200042 x7 : 0000000000000000 x6 : ffff8000803a6b64 [ 41.049680][ T0] x5 : 0000000000000001 x4 : 000000098928a2e4 x3 : ffff8000805719e0 [ 41.051161][ T0] x2 : 0000000000000003 x1 : ffff0000c1aa8000 x0 : ffff80008030af1c [ 41.052644][ T0] Call trace: [ 41.053278][ T0] 0x0 (P) [ 41.053885][ T0] ---[ end trace 0000000000000000 ]--- [ 41.288457][ T0] Kernel panic - not syncing: Oops: Fatal exception [ 41.289648][ T0] SMP: stopping secondary CPUs [ 41.290515][ T0] Kernel Offset: disabled [ 41.291258][ T0] CPU features: 0x0,50000000,00f00020,9c080a02,a84ff6a7 [ 41.292451][ T0] Memory Limit: none [ 41.499172][ T0] Rebooting in 86400 seconds..