Warning: Permanently added '10.128.1.17' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://34297 [ 31.375185][ T4719] cgroup: Unknown subsys name 'net' [ 31.535345][ T4719] cgroup: Unknown subsys name 'cpuset' [ 31.536733][ T4719] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.670885][ T4719] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 34.436958][ T4725] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.087984][ T4761] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.088357][ T4761] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.088519][ T4761] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.088860][ T4761] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.089061][ T4761] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.302379][ T352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.302390][ T352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.309332][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.309345][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.606255][ T4783] rxe_eth0 speed is unknown, defaulting to 1000 [ 35.606579][ T4783] rxe_eth0 speed is unknown, defaulting to 1000 [ 35.606962][ T4783] rxe_eth0 speed is unknown, defaulting to 1000 [ 35.652173][ T4783] infiniband rxe0: set active [ 35.652419][ T4760] rxe_eth0 speed is unknown, defaulting to 1000 [ 35.652458][ T4783] infiniband rxe0: added rxe_eth0 [ 35.662356][ T4783] RDS/IB: rxe0: added [ 35.662428][ T4783] smc: adding ib device rxe0 with port count 1 [ 35.662451][ T4783] smc: ib device rxe0 port 1 has no pnetid [ 35.662747][ T4760] rxe_eth0 speed is unknown, defaulting to 1000 [ 35.663455][ T4783] rxe_eth0 speed is unknown, defaulting to 1000 [ 35.699593][ T4783] rxe_eth0 speed is unknown, defaulting to 1000 [ 35.762055][ T4783] rxe_eth0 speed is unknown, defaulting to 1000 [ 35.946571][ T4783] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.946904][ T4783] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.946967][ T4783] bridge_slave_0: entered allmulticast mode [ 35.947434][ T4783] bridge_slave_0: entered promiscuous mode [ 35.949163][ T4783] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.949210][ T4783] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.949278][ T4783] bridge_slave_1: entered allmulticast mode [ 35.949655][ T4783] bridge_slave_1: entered promiscuous mode [ 35.957130][ T4783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.957981][ T4783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.964456][ T4783] team0: Port device team_slave_0 added [ 35.965145][ T4783] team0: Port device team_slave_1 added [ 35.970654][ T4783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.970663][ T4783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.970675][ T4783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.971520][ T4783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.971528][ T4783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.971541][ T4783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.983577][ T4783] hsr_slave_0: entered promiscuous mode [ 35.986294][ T4783] hsr_slave_1: entered promiscuous mode [ 36.036977][ T4783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.039312][ T4783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.039818][ T4783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.040695][ T4783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.041075][ T4783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.041961][ T4783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.042581][ T4783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.043467][ T4783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.053108][ T4783] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.053140][ T4783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.053304][ T4783] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.053331][ T4783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.070274][ T4783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.075743][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.076227][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.079377][ T4783] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.081506][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.081535][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.084263][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.084285][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.094273][ T4783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.094288][ T4783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.183897][ T4783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.196256][ T4783] veth0_vlan: entered promiscuous mode [ 36.198448][ T4783] veth1_vlan: entered promiscuous mode [ 36.211712][ T4783] veth0_macvtap: entered promiscuous mode [ 36.213647][ T4783] veth1_macvtap: entered promiscuous mode [ 36.219922][ T4783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.221979][ T4783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.244566][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.244595][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.244611][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.244626][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.299412][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.307749][ T4822] rxe_eth0 speed is unknown, defaulting to 1000 [ 36.397511][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.447375][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:36 executed programs: 0 [ 36.476088][ T4761] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.476475][ T4761] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.476639][ T4761] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.476915][ T4761] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.477182][ T4761] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.509811][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.548228][ T4825] rxe_eth0 speed is unknown, defaulting to 1000 [ 36.642498][ T4825] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.642562][ T4825] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.642616][ T4825] bridge_slave_0: entered allmulticast mode [ 36.643066][ T4825] bridge_slave_0: entered promiscuous mode [ 36.645991][ T4825] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.646012][ T4825] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.646060][ T4825] bridge_slave_1: entered allmulticast mode [ 36.646470][ T4825] bridge_slave_1: entered promiscuous mode [ 36.656344][ T4825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.657239][ T4825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.663064][ T4825] team0: Port device team_slave_0 added [ 36.666093][ T4825] team0: Port device team_slave_1 added [ 36.673018][ T4825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.673028][ T4825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.673041][ T4825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.673584][ T4825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.673591][ T4825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.673604][ T4825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.685404][ T4825] hsr_slave_0: entered promiscuous mode [ 36.685676][ T4825] hsr_slave_1: entered promiscuous mode [ 36.685878][ T4825] debugfs: 'hsr0' already exists in 'hsr' [ 36.685924][ T4825] Cannot create hsr debugfs directory [ 38.514127][ T4761] Bluetooth: hci0: command tx timeout [ 40.038477][ T41] bridge_slave_1: left allmulticast mode [ 40.038510][ T41] bridge_slave_1: left promiscuous mode [ 40.038825][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.040862][ T41] bridge_slave_0: left allmulticast mode [ 40.040875][ T41] bridge_slave_0: left promiscuous mode [ 40.040940][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.100517][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.125003][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.138342][ T41] bond0 (unregistering): Released all slaves [ 40.242781][ T41] hsr_slave_0: left promiscuous mode [ 40.243090][ T41] hsr_slave_1: left promiscuous mode [ 40.243386][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.243400][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.249847][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.249860][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.253209][ T41] veth1_macvtap: left promiscuous mode [ 40.253260][ T41] veth0_macvtap: left promiscuous mode [ 40.253379][ T41] veth1_vlan: left promiscuous mode [ 40.253421][ T41] veth0_vlan: left promiscuous mode [ 40.340914][ T41] team0 (unregistering): Port device team_slave_1 removed [ 40.346712][ T41] team0 (unregistering): Port device team_slave_0 removed [ 40.396473][ T4398] 8021q: adding VLAN 0 to HW filter on device eth0 [ 40.585514][ T4761] Bluetooth: hci0: command tx timeout [ 40.620329][ T4825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.622400][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.622702][ T4825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.630391][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.630908][ T4825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.631832][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.632313][ T4825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.633410][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.684978][ T4825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.705574][ T4825] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.707472][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.707565][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.709429][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.709453][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.730035][ T4825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.730049][ T4825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.849716][ T4825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.873997][ T4825] veth0_vlan: entered promiscuous mode [ 40.876236][ T4825] veth1_vlan: entered promiscuous mode [ 40.882104][ T4825] veth0_macvtap: entered promiscuous mode [ 40.889169][ T4825] veth1_macvtap: entered promiscuous mode [ 40.893029][ T4825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.900979][ T4825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.930032][ T352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.930054][ T352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.940342][ T352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.940360][ T352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.944241][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.944390][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.944423][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.944438][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.214121][ T4384] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 41.374416][ T4384] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 41.375311][ T4384] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 41.375324][ T4384] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 41.375341][ T4384] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.379531][ T4384] usb 1-1: probing VID:PID(0424:012C) [ 41.380071][ T4384] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 41.380082][ T4384] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 41.380091][ T4384] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 41.380098][ T4384] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 41.380106][ T4384] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 41.779515][ T4384] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 41.979860][ T4384] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 42.663829][ T4761] Bluetooth: hci0: command tx timeout 1970/01/01 00:00:42 executed programs: 3 [ 42.796572][ T4384] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 42.810093][ T4384] usb 1-1: USB disconnect, device number 2 [ 42.811345][ T4808] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 42.878201][ T4384] USB vub300 remote SDIO host controller[0] now disconnected [ 43.163808][ T4384] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 43.314109][ T4384] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 43.314763][ T4384] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 43.314773][ T4384] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 43.314787][ T4384] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.318158][ T4384] usb 1-1: probing VID:PID(0424:012C) [ 43.318479][ T4384] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 43.318488][ T4384] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 43.318495][ T4384] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 43.318502][ T4384] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 43.318509][ T4384] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 43.717734][ T4384] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 43.863872][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 43.863888][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/1 [ 43.863897][ C1] preempt_count: 101, expected: 0 [ 43.863902][ C1] RCU nest depth: 0, expected: 0 [ 43.863907][ C1] locks held by swapper/1/0: 1, last CPU#1: [ 43.863915][ C1] #0: ffff80008f7f7c60 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xf0/0x7f4 [ 43.863950][ C1] Preemption disabled at: [ 43.863953][ C1] [] stack_depot_save_flags+0x2f4/0x8cc [ 43.863969][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT [ 43.863978][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 43.863983][ C1] Call trace: [ 43.863986][ C1] show_stack+0x2c/0x3c (C) [ 43.863998][ C1] __dump_stack+0x30/0x40 [ 43.864009][ C1] dump_stack_lvl+0xd8/0x12c [ 43.864019][ C1] dump_stack+0x1c/0x28 [ 43.864029][ C1] __might_resched+0x354/0x4c0 [ 43.864039][ C1] __might_sleep+0x84/0xdc [ 43.864048][ C1] __cancel_work_sync+0x78/0x144 [ 43.864056][ C1] cancel_delayed_work_sync+0x24/0x38 [ 43.864064][ C1] mmc_free_host+0x20/0x48 [ 43.864074][ C1] vub300_delete+0xd4/0xec [ 43.864083][ C1] vub300_inactivity_timer_expired+0xd4/0x2ac [ 43.864092][ C1] call_timer_fn+0x198/0x7f4 [ 43.864100][ C1] __run_timer_base+0x530/0x744 [ 43.864111][ C1] run_timer_base+0x84/0x1b8 [ 43.864118][ C1] run_timer_softirq+0x20/0x48 [ 43.864126][ C1] handle_softirqs+0x324/0xcbc [ 43.864134][ C1] __do_softirq+0x14/0x20 [ 43.864142][ C1] ____do_softirq+0x10/0x1c [ 43.864150][ C1] call_on_irq_stack+0x30/0x48 [ 43.864157][ C1] do_softirq_own_stack+0x1c/0x28 [ 43.864165][ C1] __irq_exit_rcu+0x10c/0x318 [ 43.864173][ C1] irq_exit_rcu+0x14/0x84 [ 43.864180][ C1] el1_interrupt+0x40/0x60 [ 43.864189][ C1] el1h_64_irq_handler+0x18/0x24 [ 43.864197][ C1] el1h_64_irq+0x78/0x7c [ 43.864204][ C1] default_idle_call+0xa0/0xb8 (P) [ 43.864213][ C1] do_idle+0x1ec/0x450 [ 43.864227][ C1] cpu_startup_entry+0x5c/0x74 [ 43.864238][ C1] secondary_start_kernel+0x1d8/0x1fc [ 43.864248][ C1] __secondary_switched+0xc0/0xc4 [ 43.864368][ C1] ODEBUG: object 000000006daceff7 is NOT on stack 00000000de2eec52, but annotated. [ 43.864491][ C1] ------------[ cut here ]------------ [ 43.864494][ C1] WARNING: lib/debugobjects.c:672 at debug_object_is_on_stack+0xb0/0xb8, CPU#1: swapper/1/0 [ 43.915720][ C1] Modules linked in: [ 43.916609][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 PREEMPT [ 43.918823][ C1] Tainted: [W]=WARN [ 43.919602][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 43.921745][ C1] pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 43.923412][ C1] pc : debug_object_is_on_stack+0xb0/0xb8 [ 43.924700][ C1] lr : debug_object_is_on_stack+0xb0/0xb8 [ 43.926046][ C1] sp : ffff80008f7f7780 [ 43.927010][ C1] x29: ffff80008f7f7780 x28: dfff800000000000 x27: 1fffe00019a08808 [ 43.928558][ C1] x26: 0000000000000000 x25: dfff800000000000 x24: 0000000000000000 [ 43.930371][ C1] x23: 0000000000000000 x22: ffff80008f6f1000 x21: ffff0000c1aa8020 [ 43.932029][ C1] x20: 0000000000000001 x19: ffff80008f7f78e0 x18: 00000000ffffffff [ 43.933726][ C1] x17: 3235636565326564 x16: 3030303030303030 x15: 206b63617473206e [ 43.935392][ C1] x14: 0000000000000723 x13: 0000000000000001 x12: 0000000000000003 [ 43.937122][ C1] x11: 0000000000000000 x10: 0000000000000103 x9 : f1ad47184db9dc00 [ 43.938848][ C1] x8 : f1ad47184db9dc00 x7 : ffff800080483084 x6 : 0000000000000000 [ 43.940431][ C1] x5 : 0000000000000001 x4 : 0000000000000000 x3 : ffff80008048db84 [ 43.942092][ C1] x2 : 0000000000000102 x1 : ffff0000c1aa8000 x0 : 0000000000000050 [ 43.943685][ C1] Call trace: [ 43.944259][ C1] debug_object_is_on_stack+0xb0/0xb8 (P) [ 43.945326][ C1] lookup_object_or_alloc+0xfc/0x188 [ 43.946384][ C1] __debug_object_init+0x8c/0x1e0 [ 43.947423][ C1] debug_object_init_on_stack+0x20/0x2c [ 43.948549][ C1] init_rcu_head_on_stack+0x18/0x24 [ 43.949611][ C1] __synchronize_srcu+0x1ac/0x268 [ 43.950684][ C1] synchronize_srcu+0x280/0x2e0 [ 43.951705][ C1] wakeup_source_unregister+0x110/0x32c [ 43.952849][ C1] mmc_host_classdev_release+0x48/0x100 [ 43.953830][ C1] device_release+0xb4/0x1d4 [ 43.954731][ C1] kobject_put+0x1dc/0x4b8 [ 43.955629][ C1] put_device+0x28/0x40 [ 43.956450][ C1] mmc_free_host+0x38/0x48 [ 43.957331][ C1] vub300_delete+0xd4/0xec [ 43.958181][ C1] vub300_inactivity_timer_expired+0xd4/0x2ac [ 43.959400][ C1] call_timer_fn+0x198/0x7f4 [ 43.960353][ C1] __run_timer_base+0x530/0x744 [ 43.961348][ C1] run_timer_base+0x84/0x1b8 [ 43.962243][ C1] run_timer_softirq+0x20/0x48 [ 43.963142][ C1] handle_softirqs+0x324/0xcbc [ 43.964099][ C1] __do_softirq+0x14/0x20 [ 43.964967][ C1] ____do_softirq+0x10/0x1c [ 43.965867][ C1] call_on_irq_stack+0x30/0x48 [ 43.966764][ C1] do_softirq_own_stack+0x1c/0x28 [ 43.967797][ C1] __irq_exit_rcu+0x10c/0x318 [ 43.968675][ C1] irq_exit_rcu+0x14/0x84 [ 43.969532][ C1] el1_interrupt+0x40/0x60 [ 43.970446][ C1] el1h_64_irq_handler+0x18/0x24 [ 43.971457][ C1] el1h_64_irq+0x78/0x7c [ 43.972361][ C1] default_idle_call+0xa0/0xb8 (P) [ 43.973450][ C1] do_idle+0x1ec/0x450 [ 43.974318][ C1] cpu_startup_entry+0x5c/0x74 [ 43.975181][ C1] secondary_start_kernel+0x1d8/0x1fc [ 43.976244][ C1] __secondary_switched+0xc0/0xc4 [ 43.977289][ C1] irq event stamp: 502745 [ 43.978147][ C1] hardirqs last enabled at (502744): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 43.980308][ C1] hardirqs last disabled at (502745): [] _raw_spin_lock_irqsave+0x2c/0x7c [ 43.982356][ C1] softirqs last enabled at (502622): [] handle_softirqs+0xb2c/0xcbc [ 43.984406][ C1] softirqs last disabled at (502629): [] __do_softirq+0x14/0x20 [ 43.985948][ C1] ---[ end trace 0000000000000000 ]--- [ 43.987154][ C1] BUG: scheduling while atomic: swapper/1/0/0x00000102 [ 43.987165][ C1] locks held by swapper/1/0: 1, on CPU#1: [ 43.987180][ C1] #0: ffff80008f7f7c60 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xf0/0x7f4 [ 43.987208][ C1] Modules linked in: [ 43.987213][ C1] Preemption disabled at: [ 43.987219][ C1] [] stack_depot_save_flags+0x2f4/0x8cc [ 43.987235][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 PREEMPT [ 43.987247][ C1] Tainted: [W]=WARN [ 43.987251][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 43.987255][ C1] Call trace: [ 43.987257][ C1] show_stack+0x2c/0x3c (C) [ 43.987268][ C1] __dump_stack+0x30/0x40 [ 43.987280][ C1] dump_stack_lvl+0xd8/0x12c [ 43.987290][ C1] dump_stack+0x1c/0x28 [ 43.987300][ C1] __schedule_bug+0x10c/0x190 [ 43.987311][ C1] __schedule+0x1418/0x2b00 [ 43.987320][ C1] schedule+0x13c/0x20c [ 43.987329][ C1] schedule_timeout+0xc0/0x28c [ 43.987337][ C1] wait_for_common+0x220/0x394 [ 43.987347][ C1] wait_for_completion+0x18/0x24 [ 43.987357][ C1] __synchronize_srcu+0x1cc/0x268 [ 43.987365][ C1] synchronize_srcu+0x280/0x2e0 [ 43.987372][ C1] wakeup_source_unregister+0x110/0x32c [ 43.987383][ C1] mmc_host_classdev_release+0x48/0x100 [ 43.987391][ C1] device_release+0xb4/0x1d4 [ 43.987401][ C1] kobject_put+0x1dc/0x4b8 [ 43.987409][ C1] put_device+0x28/0x40 [ 43.987416][ C1] mmc_free_host+0x38/0x48 [ 43.987424][ C1] vub300_delete+0xd4/0xec [ 43.987432][ C1] vub300_inactivity_timer_expired+0xd4/0x2ac [ 43.987442][ C1] call_timer_fn+0x198/0x7f4 [ 43.987449][ C1] __run_timer_base+0x530/0x744 [ 43.987460][ C1] run_timer_base+0x84/0x1b8 [ 43.987467][ C1] run_timer_softirq+0x20/0x48 [ 43.987474][ C1] handle_softirqs+0x324/0xcbc [ 43.987482][ C1] __do_softirq+0x14/0x20 [ 43.987489][ C1] ____do_softirq+0x10/0x1c [ 43.987496][ C1] call_on_irq_stack+0x30/0x48 [ 43.987504][ C1] do_softirq_own_stack+0x1c/0x28 [ 43.987511][ C1] __irq_exit_rcu+0x10c/0x318 [ 43.987519][ C1] irq_exit_rcu+0x14/0x84 [ 43.987527][ C1] el1_interrupt+0x40/0x60 [ 43.987534][ C1] el1h_64_irq_handler+0x18/0x24 [ 43.987541][ C1] el1h_64_irq+0x78/0x7c [ 43.987548][ C1] default_idle_call+0xa0/0xb8 (P) [ 43.987557][ C1] do_idle+0x1ec/0x450 [ 43.987566][ C1] cpu_startup_entry+0x5c/0x74 [ 43.987576][ C1] secondary_start_kernel+0x1d8/0x1fc [ 43.987586][ C1] __secondary_switched+0xc0/0xc4 [ 43.987602][ T0] ------------[ cut here ]------------ [ 43.987606][ T0] releasing a pinned lock [ 43.987632][ T0] WARNING: kernel/locking/lockdep.c:5597 at lock_release+0x288/0x354, CPU#1: swapper/1/0 [ 44.039987][ T0] Modules linked in: [ 44.040853][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 PREEMPT [ 44.043086][ T0] Tainted: [W]=WARN [ 44.043898][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 44.046091][ T0] pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 44.047839][ T0] pc : lock_release+0x288/0x354 [ 44.048905][ T0] lr : lock_release+0x288/0x354 [ 44.049998][ T0] sp : ffff80008f7f73c0 [ 44.050919][ T0] x29: ffff80008f7f73d0 x28: 1fffe000349fe9b3 x27: 1fffe000349fe833 [ 44.052695][ T0] x26: 0000000000000002 x25: 00000000000000c0 x24: ffff8000897422f8 [ 44.054202][ T0] x23: ffff0000c1aa8b78 x22: 0000000000000002 x21: ffff0001a4ff41e0 [ 44.055684][ T0] x20: ffff8000800a2ffc x19: ffff0000c1aa8000 x18: 00000000ffffffff [ 44.057147][ T0] x17: 3235636565326564 x16: 0000000000000001 x15: ffff80008b44b000 [ 44.058594][ T0] x14: 00000000000007b9 x13: 0000000000000001 x12: 0000000000000003 [ 44.060171][ T0] x11: 0000000000000000 x10: 0000000000000004 x9 : f1ad47184db9dc00 [ 44.061805][ T0] x8 : f1ad47184db9dc00 x7 : 0000000000000001 x6 : ffff800080483084 [ 44.063306][ T0] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f3d68 [ 44.064822][ T0] x2 : 0000000000000002 x1 : ffff0000c1aa8000 x0 : 0000000000000000 [ 44.066382][ T0] Call trace: [ 44.067037][ T0] lock_release+0x288/0x354 (P) [ 44.068018][ T0] _raw_spin_unlock+0x24/0x78 [ 44.068914][ T0] dequeue_task_idle+0x1c/0x64 [ 44.069829][ T0] dequeue_task+0x204/0x2fc [ 44.070631][ T0] __schedule+0x564/0x2b00 [ 44.071470][ T0] schedule+0x13c/0x20c [ 44.072296][ T0] schedule_timeout+0xc0/0x28c [ 44.073280][ T0] wait_for_common+0x220/0x394 [ 44.074264][ T0] wait_for_completion+0x18/0x24 [ 44.075271][ T0] __synchronize_srcu+0x1cc/0x268 [ 44.076296][ T0] synchronize_srcu+0x280/0x2e0 [ 44.077247][ T0] wakeup_source_unregister+0x110/0x32c [ 44.078327][ T0] mmc_host_classdev_release+0x48/0x100 [ 44.079304][ T0] device_release+0xb4/0x1d4 [ 44.080127][ T0] kobject_put+0x1dc/0x4b8 [ 44.080904][ T0] put_device+0x28/0x40 [ 44.081650][ T0] mmc_free_host+0x38/0x48 [ 44.082448][ T0] vub300_delete+0xd4/0xec [ 44.083276][ T0] vub300_inactivity_timer_expired+0xd4/0x2ac [ 44.084512][ T0] call_timer_fn+0x198/0x7f4 [ 44.085418][ T0] __run_timer_base+0x530/0x744 [ 44.086369][ T0] run_timer_base+0x84/0x1b8 [ 44.087204][ T0] run_timer_softirq+0x20/0x48 [ 44.088138][ T0] handle_softirqs+0x324/0xcbc [ 44.089082][ T0] __do_softirq+0x14/0x20 [ 44.089943][ T0] ____do_softirq+0x10/0x1c [ 44.090837][ T0] call_on_irq_stack+0x30/0x48 [ 44.091811][ T0] do_softirq_own_stack+0x1c/0x28 [ 44.092807][ T0] __irq_exit_rcu+0x10c/0x318 [ 44.093752][ T0] irq_exit_rcu+0x14/0x84 [ 44.094652][ T0] el1_interrupt+0x40/0x60 [ 44.095622][ T0] el1h_64_irq_handler+0x18/0x24 [ 44.096704][ T0] el1h_64_irq+0x78/0x7c [ 44.097544][ T0] default_idle_call+0xa0/0xb8 (P) [ 44.098568][ T0] do_idle+0x1ec/0x450 [ 44.099403][ T0] cpu_startup_entry+0x5c/0x74 [ 44.100378][ T0] secondary_start_kernel+0x1d8/0x1fc [ 44.101470][ T0] __secondary_switched+0xc0/0xc4 [ 44.102520][ T0] irq event stamp: 502791 [ 44.103452][ T0] hardirqs last enabled at (502790): [] dump_stack_lvl+0xe8/0x12c [ 44.105525][ T0] hardirqs last disabled at (502791): [] __schedule+0x2f8/0x2b00 [ 44.107484][ T0] softirqs last enabled at (502622): [] handle_softirqs+0xb2c/0xcbc [ 44.109435][ T0] softirqs last disabled at (502629): [] __do_softirq+0x14/0x20 [ 44.111308][ T0] ---[ end trace 0000000000000000 ]--- [ 44.113578][ T0] [ 44.114064][ T0] ================================ [ 44.115122][ T0] WARNING: inconsistent lock state [ 44.116226][ T0] syzkaller #0 Tainted: G W [ 44.117480][ T0] -------------------------------- [ 44.118556][ T0] inconsistent {IN-SOFTIRQ-W} -> {SOFTIRQ-ON-W} usage. [ 44.120055][ T0] swapper/1/0 [HC0[0]:SC1[0]:HE0:SE1] takes: [ 44.121376][ T0] ffff80008f7f7c60 ((&vub300->inactivity_timer)){+.?.}-{0:0}, at: call_timer_fn+0xf0/0x7f4 [ 44.123528][ T0] {IN-SOFTIRQ-W} state was registered at: [ 44.124764][ T0] lock_acquire+0x13c/0x320 [ 44.125808][ T0] call_timer_fn+0xf8/0x7f4 [ 44.126861][ T0] __run_timer_base+0x530/0x744 [ 44.128001][ T0] run_timer_base+0x84/0x1b8 [ 44.129117][ T0] run_timer_softirq+0x20/0x48 [ 44.130225][ T0] handle_softirqs+0x324/0xcbc [ 44.131353][ T0] __do_softirq+0x14/0x20 [ 44.132330][ T0] ____do_softirq+0x10/0x1c [ 44.133380][ T0] call_on_irq_stack+0x30/0x48 [ 44.134505][ T0] do_softirq_own_stack+0x1c/0x28 [ 44.135688][ T0] __irq_exit_rcu+0x10c/0x318 [ 44.136668][ T0] irq_exit_rcu+0x14/0x84 [ 44.137687][ T0] el1_interrupt+0x40/0x60 [ 44.138738][ T0] el1h_64_irq_handler+0x18/0x24 [ 44.139838][ T0] el1h_64_irq+0x78/0x7c [ 44.140768][ T0] default_idle_call+0xa0/0xb8 [ 44.141888][ T0] do_idle+0x1ec/0x450 [ 44.142814][ T0] cpu_startup_entry+0x5c/0x74 [ 44.143717][ T0] secondary_start_kernel+0x1d8/0x1fc [ 44.144833][ T0] __secondary_switched+0xc0/0xc4 [ 44.145921][ T0] irq event stamp: 502814 [ 44.146864][ T0] hardirqs last enabled at (502812): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 44.149115][ T0] hardirqs last disabled at (502813): [] handle_softirqs+0x9cc/0xcbc [ 44.151180][ T0] softirqs last enabled at (502814): [] handle_softirqs+0xb2c/0xcbc [ 44.153199][ T0] softirqs last disabled at (502629): [] __do_softirq+0x14/0x20 [ 44.155249][ T0] [ 44.155249][ T0] other info that might help us debug this: [ 44.157043][ T0] Possible unsafe locking scenario: [ 44.157043][ T0] [ 44.158632][ T0] CPU0 [ 44.159366][ T0] ---- [ 44.160091][ T0] lock((&vub300->inactivity_timer)); [ 44.161303][ T0] [ 44.162023][ T0] lock((&vub300->inactivity_timer)); [ 44.163240][ T0] [ 44.163240][ T0] *** DEADLOCK *** [ 44.163240][ T0] [ 44.165073][ T0] locks held by swapper/1/0: 1, on CPU#1: [ 44.166376][ T0] #0: ffff80008f7f7c60 ((&vub300->inactivity_timer)){+.?.}-{0:0}, at: call_timer_fn+0xf0/0x7f4 [ 44.168692][ T0] [ 44.168692][ T0] stack backtrace: [ 44.169859][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 PREEMPT [ 44.171920][ T0] Tainted: [W]=WARN [ 44.172719][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 44.174781][ T0] Call trace: [ 44.175447][ T0] show_stack+0x2c/0x3c (C) [ 44.176450][ T0] __dump_stack+0x30/0x40 [ 44.177439][ T0] dump_stack_lvl+0xd8/0x12c [ 44.178462][ T0] dump_stack+0x1c/0x28 [ 44.179386][ T0] print_usage_bug+0x2f8/0x33c [ 44.180341][ T0] mark_lock_irq+0x4a0/0x4a8 [ 44.181300][ T0] mark_lock+0x144/0x1a4 [ 44.182116][ T0] mark_held_locks+0x60/0xb0 [ 44.183041][ T0] lockdep_hardirqs_on_prepare+0xf8/0x1d4 [ 44.184203][ T0] __arm64_exit_to_kernel_mode+0x48/0xcc [ 44.185330][ T0] arm64_exit_to_kernel_mode_preempt+0x28/0x38 [ 44.186597][ T0] el1_interrupt+0x4c/0x60 [ 44.187498][ T0] el1h_64_irq_handler+0x18/0x24 [ 44.188503][ T0] el1h_64_irq+0x78/0x7c [ 44.189353][ T0] dequeue_task_idle+0x24/0x64 (P) [ 44.190390][ T0] dequeue_task+0x204/0x2fc [ 44.191322][ T0] __schedule+0x564/0x2b00 [ 44.192241][ T0] lockdep_unlock+0x6c/0xf4 [ 44.193170][ T0] __lock_acquire+0x150c/0x2b08 [ 44.194123][ T0] 0x1 [ 44.194675][ T0] bad: scheduling from the idle thread! [ 44.194684][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 PREEMPT [ 44.194696][ T0] Tainted: [W]=WARN [ 44.194699][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 44.194704][ T0] Call trace: [ 44.194706][ T0] show_stack+0x2c/0x3c (C) [ 44.194717][ T0] __dump_stack+0x30/0x40 [ 44.194727][ T0] dump_stack_lvl+0xd8/0x12c [ 44.194736][ T0] dump_stack+0x1c/0x28 [ 44.194745][ T0] dequeue_task_idle+0x34/0x64 [ 44.194754][ T0] dequeue_task+0x204/0x2fc [ 44.194761][ T0] __schedule+0x564/0x2b00 [ 44.194770][ T0] lockdep_unlock+0x6c/0xf4 [ 44.194777][ T0] __lock_acquire+0x150c/0x2b08 [ 44.194784][ T0] 0x1 [ 44.194799][ T0] Unable to handle kernel paging request at virtual address dfff800000000001 [ 44.194804][ T0] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 44.194808][ T0] Mem abort info: [ 44.194810][ T0] ESR = 0x0000000096000005 [ 44.194813][ T0] EC = 0x25: DABT (current EL), IL = 32 bits [ 44.194817][ T0] SET = 0, FnV = 0 [ 44.194820][ T0] EA = 0, S1PTW = 0 [ 44.194823][ T0] FSC = 0x05: level 1 translation fault [ 44.194826][ T0] Data abort info: [ 44.194828][ T0] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 44.194832][ T0] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 44.194836][ T0] GCS = 0, Overlay = 0, DirtyBit = 0 [ 44.194840][ T0] [dfff800000000001] address between user and kernel address ranges [ 44.194845][ T0] Internal error: Oops: 0000000096000005 [#1] SMP [ 44.223264][ T0] Modules linked in: [ 44.224022][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 PREEMPT [ 44.226072][ T0] Tainted: [W]=WARN [ 44.226825][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 44.228833][ T0] pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 44.230458][ T0] pc : __schedule+0x9f0/0x2b00 [ 44.231466][ T0] lr : __schedule+0x9dc/0x2b00 [ 44.232491][ T0] sp : ffff80008f7f74c0 [ 44.233400][ T0] x29: ffff80008f7f75f0 x28: ffff80008f7f7540 x27: 0000000000000000 [ 44.235162][ T0] x26: ffff0000c1aa87a0 x25: dfff800000000000 x24: 1fffe000349fe833 [ 44.236847][ T0] x23: ffff0001a4ff4d28 x22: 000000000000000c x21: ffff0000c1ad1d80 [ 44.238559][ T0] x20: ffff0001a4ff4180 x19: ffff0000c1aa8000 x18: 00000000ffffffff [ 44.240192][ T0] x17: 3235636565326564 x16: 0000000000000001 x15: 0000000000000000 [ 44.241774][ T0] x14: 000000000000087b x13: 0000000000000001 x12: 0000000000000000 [ 44.243173][ T0] x11: 0000000000000000 x10: ffff600018355001 x9 : dfff800000000000 [ 44.244854][ T0] x8 : 0000000000000001 x7 : 0000000000000000 x6 : ffff8000803a3efc [ 44.246625][ T0] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80008688bc8c [ 44.248295][ T0] x2 : 0000000000000001 x1 : 0000000000000008 x0 : 0000000000000001 [ 44.249946][ T0] Call trace: [ 44.250627][ T0] __schedule+0x9f0/0x2b00 (P) [ 44.251616][ T0] lockdep_unlock+0x6c/0xf4 [ 44.252500][ T0] __lock_acquire+0x150c/0x2b08 [ 44.253358][ T0] 0x1 [ 44.253830][ T0] Code: 528000c8 f828127f 91003376 d343fec8 (38f96908) [ 44.255096][ T0] ---[ end trace 0000000000000000 ]--- [ 44.463527][ T0] Kernel panic - not syncing: Oops: Fatal exception [ 44.464864][ T0] SMP: stopping secondary CPUs [ 45.561541][ T0] SMP: failed to stop secondary CPUs 0 [ 45.562527][ T0] Kernel Offset: disabled [ 45.563385][ T0] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 45.564796][ T0] Memory Limit: none [ 45.796765][ T0] Rebooting in 86400 seconds..