Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. 2026/01/10 08:38:19 parsed 1 programs [ 82.474316][ T4269] cgroup: Unknown subsys name 'net' [ 82.609878][ T4269] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.184655][ T4269] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 85.740986][ T1367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.769153][ T1367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.799256][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.821499][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.832843][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.841852][ T1367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.994579][ T7] cfg80211: failed to load regulatory.db [ 87.369190][ T4309] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.380342][ T4311] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.388849][ T4311] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.396948][ T4311] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.404645][ T4311] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.413146][ T4311] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.217366][ T4351] chnl_net:caif_netlink_parms(): no params data found [ 89.287369][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.295989][ T4351] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.304498][ T4351] device bridge_slave_0 entered promiscuous mode [ 89.328896][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.336399][ T4351] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.344565][ T4351] device bridge_slave_1 entered promiscuous mode [ 89.384975][ T4351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.397020][ T4351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.423443][ T4351] team0: Port device team_slave_0 added [ 89.432648][ T4351] team0: Port device team_slave_1 added [ 89.464881][ T4351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.471861][ T4351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.498233][ T4351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.526942][ T4351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.534271][ T4351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.560407][ T4351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.615202][ T4351] device hsr_slave_0 entered promiscuous mode [ 89.621981][ T4351] device hsr_slave_1 entered promiscuous mode [ 89.771576][ T4351] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.783340][ T4351] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.793679][ T4351] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.804188][ T4351] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.842759][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.850114][ T4351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.858654][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.865848][ T4351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.938452][ T4351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.957599][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.971920][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.981507][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.990336][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 90.005656][ T4351] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.020765][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.030846][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.038071][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.058912][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.068300][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.075510][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.107041][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.117201][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.131436][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.170201][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.183396][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.197119][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.406792][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.414940][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.429689][ T4351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.457129][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.467361][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.497807][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.506784][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.516669][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.526226][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.537431][ T4351] device veth0_vlan entered promiscuous mode [ 90.556497][ T4351] device veth1_vlan entered promiscuous mode [ 90.578343][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.586978][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.597065][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.607317][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.625434][ T4351] device veth0_macvtap entered promiscuous mode [ 90.635432][ T4351] device veth1_macvtap entered promiscuous mode [ 90.652638][ T4351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.660482][ T1367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.669290][ T1367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.678180][ T1367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.687382][ T1367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.708177][ T4351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.716012][ T1367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.725627][ T1367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.738063][ T4351] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.747855][ T4351] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.756940][ T4351] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.765791][ T4351] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.052673][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/01/10 08:38:30 executed programs: 0 [ 91.255909][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.265126][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.275297][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.285507][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.293407][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.300696][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.447781][ T4374] chnl_net:caif_netlink_parms(): no params data found [ 91.505641][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.513140][ T4374] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.521102][ T4374] device bridge_slave_0 entered promiscuous mode [ 91.529930][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.537206][ T4374] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.545612][ T4374] device bridge_slave_1 entered promiscuous mode [ 91.575680][ T4374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.587569][ T4374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.615664][ T4374] team0: Port device team_slave_0 added [ 91.625422][ T4374] team0: Port device team_slave_1 added [ 91.651726][ T4374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.658836][ T4374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.685250][ T4374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.698354][ T4374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.705820][ T4374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.733438][ T4374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.769445][ T4374] device hsr_slave_0 entered promiscuous mode [ 91.776763][ T4374] device hsr_slave_1 entered promiscuous mode [ 91.784482][ T4374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.792328][ T4374] Cannot create hsr debugfs directory [ 93.384377][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 93.406565][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.463529][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 95.676210][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.717357][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.607283][ T4374] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.617800][ T4374] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.645235][ T4374] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.656738][ T4374] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.702418][ T11] device hsr_slave_0 left promiscuous mode [ 96.710476][ T11] device hsr_slave_1 left promiscuous mode [ 96.720862][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.728827][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.740631][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.748459][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.758967][ T11] device bridge_slave_1 left promiscuous mode [ 96.767522][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.784909][ T11] device bridge_slave_0 left promiscuous mode [ 96.791215][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.819852][ T11] device veth1_macvtap left promiscuous mode [ 96.826549][ T11] device veth0_macvtap left promiscuous mode [ 96.833237][ T11] device veth1_vlan left promiscuous mode [ 96.839393][ T11] device veth0_vlan left promiscuous mode [ 97.221666][ T11] team0 (unregistering): Port device team_slave_1 removed [ 97.252351][ T11] team0 (unregistering): Port device team_slave_0 removed [ 97.284414][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.315991][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.545736][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 97.587547][ T11] bond0 (unregistering): Released all slaves [ 97.694914][ T4374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.708324][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.720981][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.732684][ T4374] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.744475][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.755023][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.764625][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.771767][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.788343][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.796810][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.807378][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.817415][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.824606][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.837245][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.848839][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.860863][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.870167][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.886528][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.897648][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.906856][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.921072][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.930361][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.944884][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.953376][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.965002][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.194254][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.201757][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.215707][ T4374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.234949][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.245100][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.276901][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.285821][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.295990][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.304774][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.313883][ T4374] device veth0_vlan entered promiscuous mode [ 98.329513][ T4374] device veth1_vlan entered promiscuous mode [ 98.349369][ T1367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.357680][ T1367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.366403][ T1367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.375668][ T1367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.390667][ T4374] device veth0_macvtap entered promiscuous mode [ 98.401922][ T4374] device veth1_macvtap entered promiscuous mode [ 98.420656][ T4374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.431166][ T1367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.440243][ T1367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.448811][ T1367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.459939][ T1367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.475268][ T4374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.482678][ T1367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.491909][ T1367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.505253][ T4374] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.514164][ T4374] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.524024][ T4374] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.532900][ T4374] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.593667][ T1367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.601943][ T1367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.620497][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/01/10 08:38:38 executed programs: 2 [ 98.641112][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.649601][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.659077][ T1367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 203.842698][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 203.849922][ C0] rcu: 1-...!: (1 GPs behind) idle=2a34/1/0x4000000000000000 softirq=10327/10328 fqs=0 [ 203.860625][ C0] (detected by 0, t=10506 jiffies, g=10653, q=23 ncpus=2) [ 203.867881][ C0] Sending NMI from CPU 0 to CPUs 1: [ 203.873137][ C1] NMI backtrace for cpu 1 [ 203.873166][ C1] CPU: 1 PID: 4307 Comm: kworker/1:3 Not tainted syzkaller #0 [ 203.873184][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.873205][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 203.873256][ C1] RIP: 0010:_raw_spin_lock_irqsave+0x9f/0xf0 [ 203.873279][ C1] Code: 02 00 00 74 05 e8 d1 c3 6c f7 bf 01 00 00 00 e8 07 45 3d f7 48 8d 7b 18 31 f6 31 d2 31 c9 41 b8 01 00 00 00 45 31 c9 ff 75 08 5c 86 48 f7 48 83 c4 08 48 89 df e8 d0 c9 49 f7 48 c7 04 24 0e [ 203.873296][ C1] RSP: 0018:ffffc900001e0bf8 EFLAGS: 00000046 [ 203.873309][ C1] RAX: 0000000000010003 RBX: ffffffff96c07180 RCX: 0000000000000000 [ 203.873321][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff96c07198 [ 203.873332][ C1] RBP: ffffc900001e0c88 R08: 0000000000000001 R09: 0000000000000000 [ 203.873343][ C1] R10: ffffed1005d4b86b R11: 1ffff11005d4b868 R12: dffffc0000000000 [ 203.873355][ C1] R13: ffffffff96c07178 R14: 0000000000000802 R15: 1ffff9200003c180 [ 203.873368][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 203.873382][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.873394][ C1] CR2: 0000200000000300 CR3: 0000000026a91000 CR4: 00000000003506e0 [ 203.873409][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 203.873418][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 203.873428][ C1] Call Trace: [ 203.873437][ C1] [ 203.873444][ C1] ? debug_object_deactivate+0x63/0x340 [ 203.873473][ C1] ? _raw_spin_lock+0x40/0x40 [ 203.873496][ C1] ? advance_sched+0x6cc/0x970 [ 203.873523][ C1] debug_object_deactivate+0x63/0x340 [ 203.873545][ C1] debug_deactivate+0x29/0x240 [ 203.873567][ C1] __hrtimer_run_queues+0x2df/0xd60 [ 203.873584][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 203.873605][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 203.873630][ C1] ? taprio_free_sched_cb+0x190/0x190 [ 203.873658][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 203.873680][ C1] hrtimer_interrupt+0x3c5/0x9c0 [ 203.873710][ C1] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 203.873737][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 203.873759][ C1] [ 203.873763][ C1] [ 203.873769][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 203.873791][ C1] RIP: 0010:unwind_next_frame+0x1380/0x20b0 [ 203.873812][ C1] Code: 0f b6 04 08 84 c0 75 27 49 63 06 4c 01 f0 49 8d 4e 04 48 39 e8 4c 0f 46 e9 49 8d 46 fc 4c 0f 47 e0 4d 0f 46 fe 4d 39 e5 76 a8 d6 ee ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 7c cc 4c 89 f7 48 [ 203.873825][ C1] RSP: 0018:ffffc90004407410 EFLAGS: 00000202 [ 203.873839][ C1] RAX: ffffffff8e66022c RBX: ffffc900044074e8 RCX: ffffffff8e660234 [ 203.873852][ C1] RDX: ffffffff8f011e12 RSI: ffffffff8e660230 RDI: ffffffff8138655f [ 203.873864][ C1] RBP: ffffffff88dc7f6d R08: 0000000000000001 R09: 0000000000000006 [ 203.873875][ C1] R10: fffff52000880ea9 R11: 1ffff92000880ea7 R12: ffffffff8e660230 [ 203.873888][ C1] R13: ffffffff8e660234 R14: ffffffff8e660230 R15: ffffffff8e660230 [ 203.873902][ C1] ? ndisc_ns_create+0x1cd/0x620 [ 203.873928][ C1] ? unwind_next_frame+0xaf/0x20b0 [ 203.873953][ C1] ? ndisc_ns_create+0x1ce/0x620 [ 203.873977][ C1] ? stack_trace_save+0xe0/0xe0 [ 203.873998][ C1] arch_stack_walk+0x10c/0x140 [ 203.874020][ C1] ? ndisc_ns_create+0x1ce/0x620 [ 203.874044][ C1] stack_trace_save+0x98/0xe0 [ 203.874064][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 203.874088][ C1] ? memset+0x1e/0x40 [ 203.874103][ C1] kasan_set_track+0x4b/0x70 [ 203.874125][ C1] ? kasan_set_track+0x4b/0x70 [ 203.874145][ C1] ? __kasan_slab_alloc+0x6b/0x80 [ 203.874167][ C1] ? slab_post_alloc_hook+0x4b/0x480 [ 203.874183][ C1] ? kmem_cache_alloc_node+0x14d/0x320 [ 203.874200][ C1] ? __alloc_skb+0xfc/0x7e0 [ 203.874231][ C1] ? ndisc_alloc_skb+0xa6/0x450 [ 203.874257][ C1] ? ndisc_ns_create+0x1ce/0x620 [ 203.874298][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 203.874323][ C1] __kasan_slab_alloc+0x6b/0x80 [ 203.874346][ C1] slab_post_alloc_hook+0x4b/0x480 [ 203.874363][ C1] ? slab_pre_alloc_hook+0x59/0x310 [ 203.874379][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 203.874408][ C1] kmem_cache_alloc_node+0x14d/0x320 [ 203.874424][ C1] ? __alloc_skb+0xfc/0x7e0 [ 203.874452][ C1] __alloc_skb+0xfc/0x7e0 [ 203.874481][ C1] ndisc_alloc_skb+0xa6/0x450 [ 203.874505][ C1] ndisc_ns_create+0x1ce/0x620 [ 203.874527][ C1] ? addrconf_dad_work+0x957/0x14d0 [ 203.874548][ C1] ndisc_send_ns+0xab/0x150 [ 203.874572][ C1] ? ndisc_ns_create+0x620/0x620 [ 203.874599][ C1] addrconf_dad_work+0xa15/0x14d0 [ 203.874622][ C1] ? ipv6_get_saddr_eval+0xe60/0xe60 [ 203.874641][ C1] ? read_lock_is_recursive+0x10/0x10 [ 203.874662][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 203.874681][ C1] ? _raw_spin_unlock+0x40/0x40 [ 203.874698][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 203.874717][ C1] ? process_one_work+0x7a1/0x1160 [ 203.874736][ C1] process_one_work+0x898/0x1160 [ 203.874762][ C1] ? worker_detach_from_pool+0x240/0x240 [ 203.874782][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 203.874799][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 203.874816][ C1] ? kthread_data+0x4b/0xc0 [ 203.874842][ C1] worker_thread+0xaa2/0x1250 [ 203.874870][ C1] ? __kthread_parkme+0x162/0x1c0 [ 203.874897][ C1] kthread+0x29d/0x330 [ 203.874921][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 203.874938][ C1] ? kthread_blkcg+0xd0/0xd0 [ 203.874964][ C1] ret_from_fork+0x1f/0x30 [ 203.874994][ C1] [ 203.875121][ C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g10653 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 204.425555][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 204.435571][ C0] rcu: RCU grace-period kthread stack dump: [ 204.441507][ C0] task:rcu_preempt state:R running task stack:27840 pid:16 ppid:2 flags:0x00004000 [ 204.452339][ C0] Call Trace: [ 204.455683][ C0] [ 204.458663][ C0] __schedule+0x10ec/0x40b0 [ 204.463232][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 204.468487][ C0] ? _raw_spin_unlock+0x40/0x40 [ 204.473386][ C0] ? enqueue_timer+0x23f/0x5c0 [ 204.478201][ C0] ? __sched_text_start+0x8/0x8 [ 204.483098][ C0] ? __mod_timer+0x91e/0xd00 [ 204.487753][ C0] schedule+0xb9/0x180 [ 204.491869][ C0] schedule_timeout+0x15c/0x280 [ 204.496761][ C0] ? console_conditional_schedule+0x40/0x40 [ 204.502688][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 204.508732][ C0] ? update_process_times+0x1b0/0x1b0 [ 204.514283][ C0] ? prepare_to_swait_event+0x335/0x350 [ 204.519928][ C0] rcu_gp_fqs_loop+0x2f2/0x1310 [ 204.524823][ C0] ? rcu_gp_kthread+0x380/0x380 [ 204.529716][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 204.535739][ C0] ? rcu_gp_init+0x14b0/0x14b0 [ 204.540534][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 204.545427][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 204.550658][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 204.555938][ C0] rcu_gp_kthread+0x95/0x380 [ 204.560584][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 204.565828][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 204.571774][ C0] ? __kthread_parkme+0x162/0x1c0 [ 204.576877][ C0] kthread+0x29d/0x330 [ 204.580994][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 204.586151][ C0] ? kthread_blkcg+0xd0/0xd0 [ 204.590831][ C0] ret_from_fork+0x1f/0x30 [ 204.595314][ C0] [ 204.598401][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 204.604754][ C0] CPU: 0 PID: 4421 Comm: syz.0.17 Not tainted syzkaller #0 [ 204.611982][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.622082][ C0] RIP: 0010:smp_call_function_many_cond+0xe7b/0x1270 [ 204.628836][ C0] Code: 00 00 00 41 8b 1f 89 de 83 e6 01 31 ff e8 5d d9 0a 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 e9 d5 0a 00 eb 37 f3 90 <41> 0f b6 04 1c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 ce d5 0a [ 204.648515][ C0] RSP: 0018:ffffc90003357760 EFLAGS: 00000293 [ 204.654707][ C0] RAX: ffffffff81760a02 RBX: dffffc0000000000 RCX: ffff88807c639dc0 [ 204.662722][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 204.670727][ C0] RBP: ffffc900033578c0 R08: dffffc0000000000 R09: fffffbfff211904f [ 204.678756][ C0] R10: fffffbfff211904f R11: 1ffffffff211904e R12: 1ffff110171e81c9 [ 204.686767][ C0] R13: ffff8880b8e3bb80 R14: 0000000000000001 R15: ffff8880b8f40e48 [ 204.694773][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 204.703753][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.710379][ C0] CR2: 00007ffc9c153910 CR3: 000000000c68e000 CR4: 00000000003506f0 [ 204.718403][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 204.726429][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 204.734495][ C0] Call Trace: [ 204.737916][ C0] [ 204.740899][ C0] ? native_flush_tlb_multi+0xd0/0xd0 [ 204.746338][ C0] ? smp_call_function_many+0x30/0x30 [ 204.751760][ C0] ? __tlb_remove_page_size+0x19b/0x3f0 [ 204.757362][ C0] ? rcu_is_watching+0x11/0xa0 [ 204.762175][ C0] ? native_flush_tlb_multi+0xd0/0xd0 [ 204.767597][ C0] on_each_cpu_cond_mask+0x3b/0x80 [ 204.772752][ C0] flush_tlb_mm_range+0x409/0x610 [ 204.777851][ C0] ? flush_tlb_multi+0x50/0x50 [ 204.782677][ C0] ? free_pgtables+0x37a/0x3d0 [ 204.787516][ C0] tlb_flush_mmu_tlbonly+0x1b1/0x3f0 [ 204.792864][ C0] tlb_flush_mmu+0x28/0x210 [ 204.797425][ C0] tlb_finish_mmu+0xbd/0x1c0 [ 204.802079][ C0] exit_mmap+0x343/0x8e0 [ 204.806374][ C0] ? vm_brk+0x20/0x20 [ 204.810402][ C0] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 204.816097][ C0] ? exit_mm+0x1d6/0x2c0 [ 204.820397][ C0] ? uprobe_clear_state+0x274/0x290 [ 204.825638][ C0] ? mm_update_next_owner+0x525/0x650 [ 204.831097][ C0] __mmput+0x118/0x3c0 [ 204.835231][ C0] exit_mm+0x1e6/0x2c0 [ 204.839359][ C0] ? do_exit+0x2400/0x2400 [ 204.843825][ C0] ? taskstats_exit+0x35a/0x9d0 [ 204.848720][ C0] do_exit+0x8c1/0x2400 [ 204.852933][ C0] ? put_task_struct+0x80/0x80 [ 204.857737][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 204.863764][ C0] ? lock_chain_count+0x20/0x20 [ 204.868660][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 204.873718][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 204.879300][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 204.885327][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 204.890564][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 204.895889][ C0] do_group_exit+0x217/0x2d0 [ 204.900556][ C0] __x64_sys_exit_group+0x3b/0x40 [ 204.905626][ C0] do_syscall_64+0x4c/0xa0 [ 204.910091][ C0] ? clear_bhb_loop+0x60/0xb0 [ 204.914812][ C0] ? clear_bhb_loop+0x60/0xb0 [ 204.919538][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.925472][ C0] RIP: 0033:0x7f46dad8f749 [ 204.929964][ C0] Code: Unable to access opcode bytes at 0x7f46dad8f71f. [ 204.937011][ C0] RSP: 002b:00007ffc9c09f258 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 204.945481][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f46dad8f749 [ 204.953486][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.961489][ C0] RBP: 0000000000000003 R08: 0000000b9c09f34f R09: 00007f46dafb4280 [ 204.969499][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 204.977501][ C0] R13: 00007f46dafb4280 R14: 0000000000000003 R15: 00007ffc9c09f310 [ 204.985528][ C0]