Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. 2025/07/20 06:56:36 ignoring optional flag "sandboxArg"="0" 2025/07/20 06:56:37 parsed 1 programs [ 70.709808][ T5785] cgroup: Unknown subsys name 'net' [ 70.870255][ T5785] cgroup: Unknown subsys name 'rlimit' [ 71.619476][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.626076][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.263179][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.875669][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 74.944993][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.952601][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.960501][ T5818] bridge_slave_0: entered allmulticast mode [ 74.967960][ T5818] bridge_slave_0: entered promiscuous mode [ 74.976753][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.983948][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.991076][ T5818] bridge_slave_1: entered allmulticast mode [ 74.998073][ T5818] bridge_slave_1: entered promiscuous mode [ 75.028341][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.039472][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.075266][ T5818] team0: Port device team_slave_0 added [ 75.082559][ T5818] team0: Port device team_slave_1 added [ 75.106974][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.114126][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.140624][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.159485][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.166612][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.192597][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.239092][ T5818] hsr_slave_0: entered promiscuous mode [ 75.245908][ T5818] hsr_slave_1: entered promiscuous mode [ 75.399035][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.409539][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.419746][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.431701][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.474060][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.481266][ T5818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.489339][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.496661][ T5818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.564825][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.586566][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.596879][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.618804][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.636208][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.643375][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.658550][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.665752][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.818727][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.857761][ T5818] veth0_vlan: entered promiscuous mode [ 75.869367][ T5818] veth1_vlan: entered promiscuous mode [ 75.894659][ T5818] veth0_macvtap: entered promiscuous mode [ 75.905513][ T5818] veth1_macvtap: entered promiscuous mode [ 75.921358][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.938120][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.949934][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.959906][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.968661][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.977465][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.108573][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.129079][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.138561][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.146904][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.155682][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.163372][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.170819][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.360208][ T3431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.373873][ T3431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.413677][ T3431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.421542][ T3431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/07/20 06:56:46 executed programs: 0 [ 78.543137][ T5101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.551028][ T5101] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.559590][ T5101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.568634][ T5101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.577112][ T5101] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.585029][ T5101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.713170][ T5892] chnl_net:caif_netlink_parms(): no params data found [ 78.766902][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.774178][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.781298][ T5892] bridge_slave_0: entered allmulticast mode [ 78.788386][ T5892] bridge_slave_0: entered promiscuous mode [ 78.796713][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.804459][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.811626][ T5892] bridge_slave_1: entered allmulticast mode [ 78.819197][ T5892] bridge_slave_1: entered promiscuous mode [ 78.843455][ T5892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.855453][ T5892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.884798][ T5892] team0: Port device team_slave_0 added [ 78.892592][ T5892] team0: Port device team_slave_1 added [ 78.916892][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.924944][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.951793][ T5892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.963914][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.970866][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.996819][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.016924][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.059870][ T5892] hsr_slave_0: entered promiscuous mode [ 79.066310][ T5892] hsr_slave_1: entered promiscuous mode [ 79.072361][ T5892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.082035][ T5892] Cannot create hsr debugfs directory [ 80.654354][ T5101] Bluetooth: hci0: command tx timeout [ 81.054351][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.104566][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.863948][ T787] cfg80211: failed to load regulatory.db [ 81.954957][ T5892] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.971964][ T12] hsr_slave_0: left promiscuous mode [ 81.978882][ T12] hsr_slave_1: left promiscuous mode [ 81.986376][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.995536][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.003769][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.011150][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.020017][ T12] bridge_slave_1: left allmulticast mode [ 82.025865][ T12] bridge_slave_1: left promiscuous mode [ 82.032309][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.042805][ T12] bridge_slave_0: left allmulticast mode [ 82.049326][ T12] bridge_slave_0: left promiscuous mode [ 82.055199][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.074807][ T12] veth1_macvtap: left promiscuous mode [ 82.080579][ T12] veth0_macvtap: left promiscuous mode [ 82.086281][ T12] veth1_vlan: left promiscuous mode [ 82.091691][ T12] veth0_vlan: left promiscuous mode [ 82.447884][ T12] team0 (unregistering): Port device team_slave_1 removed [ 82.477891][ T12] team0 (unregistering): Port device team_slave_0 removed [ 82.515446][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.543437][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.735125][ T5101] Bluetooth: hci0: command tx timeout [ 82.815438][ T12] bond0 (unregistering): Released all slaves [ 82.913025][ T5892] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.924182][ T5892] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.934848][ T5892] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.016585][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.042208][ T5892] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.055277][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.062426][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.090200][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.097338][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.277359][ T5892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.313116][ T5892] veth0_vlan: entered promiscuous mode [ 83.331558][ T5892] veth1_vlan: entered promiscuous mode [ 83.388978][ T5892] veth0_macvtap: entered promiscuous mode [ 83.399451][ T5892] veth1_macvtap: entered promiscuous mode [ 83.433767][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.458102][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.471957][ T5892] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.481349][ T5892] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.490082][ T5892] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.498820][ T5892] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/07/20 06:56:51 executed programs: 2 [ 83.611568][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.620151][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.645656][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.653689][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.695243][ T5939] syz.0.16[5939]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.708854][ T5939] loop0: detected capacity change from 0 to 24 [ 83.717902][ T5939] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 83.729567][ T5939] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 188.803474][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 188.810232][ C1] rcu: 1-...!: (10499 ticks this GP) idle=3124/1/0x4000000000000000 softirq=11904/22168 fqs=0 [ 188.821196][ C1] rcu: (t=10500 jiffies g=8989 q=65 ncpus=2) [ 188.827273][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g8989 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 188.839511][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=4736 [ 188.847306][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g8989 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 188.858582][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 188.868545][ C1] rcu: RCU grace-period kthread stack dump: [ 188.874445][ C1] task:rcu_preempt state:I stack:27496 pid:17 ppid:2 flags:0x00004000 [ 188.883730][ C1] Call Trace: [ 188.887022][ C1] [ 188.889974][ C1] __schedule+0x14e2/0x4580 [ 188.894520][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 188.900425][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 188.905640][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 188.911540][ C1] ? asan.module_dtor+0x20/0x20 [ 188.916401][ C1] ? enqueue_timer+0x225/0x530 [ 188.921173][ C1] ? __mod_timer+0x984/0xdb0 [ 188.925780][ C1] schedule+0xbd/0x170 [ 188.929854][ C1] schedule_timeout+0x160/0x280 [ 188.934715][ C1] ? console_conditional_schedule+0x40/0x40 [ 188.940618][ C1] ? update_process_times+0x1b0/0x1b0 [ 188.946006][ C1] ? prepare_to_swait_event+0x339/0x360 [ 188.951562][ C1] rcu_gp_fqs_loop+0x302/0x1560 [ 188.956418][ C1] ? rcu_gp_init+0x110e/0x1510 [ 188.961198][ C1] ? rcu_gp_kthread+0x380/0x380 [ 188.966059][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 188.972045][ C1] ? rcu_gp_init+0x1510/0x1510 [ 188.976817][ C1] ? rcu_gp_cleanup+0xb4c/0xca0 [ 188.981677][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 188.986888][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 188.992119][ C1] rcu_gp_kthread+0x99/0x380 [ 188.996739][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 189.001866][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 189.006815][ C1] ? __kthread_parkme+0x162/0x1c0 [ 189.011856][ C1] kthread+0x2fa/0x390 [ 189.015930][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 189.021053][ C1] ? kthread_blkcg+0xd0/0xd0 [ 189.025646][ C1] ret_from_fork+0x48/0x80 [ 189.030066][ C1] ? kthread_blkcg+0xd0/0xd0 [ 189.034658][ C1] ret_from_fork_asm+0x11/0x20 [ 189.039451][ C1] [ 189.042476][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 189.048795][ C1] Sending NMI from CPU 1 to CPUs 0: [ 189.054023][ C0] NMI backtrace for cpu 0 [ 189.054041][ C0] CPU: 0 PID: 5866 Comm: kworker/0:5 Not tainted 6.6.99-syzkaller #0 [ 189.054055][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.054064][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 189.054083][ C0] RIP: 0010:__lock_acquire+0xfb8/0x7c80 [ 189.054100][ C0] Code: 40 e8 0c be 75 00 eb bb 44 89 e0 25 ff 1f 00 00 41 c1 ec 03 41 81 e4 00 60 00 00 41 09 c4 4c 89 fe 48 c1 ee 20 89 f0 c1 c0 04 <41> 29 f4 44 31 e0 44 01 fe 41 29 c7 89 c1 c1 c1 06 44 31 f9 01 f0 [ 189.054111][ C0] RSP: 0018:ffffc900000077a0 EFLAGS: 00000003 [ 189.054122][ C0] RAX: 00000000be9ba323 RBX: 000000000000806b RCX: ffffffff81671ba0 [ 189.054132][ C0] RDX: 0000000000000000 RSI: 000000003be9ba32 RDI: ffffffff90da2520 [ 189.054141][ C0] RBP: ffffc900000079e8 R08: dffffc0000000000 R09: 1ffffffff21b44a4 [ 189.054151][ C0] R10: dffffc0000000000 R11: fffffbfff21b44a5 R12: 0000000000000000 [ 189.054160][ C0] R13: ffff88802e4e1e00 R14: ffff88802e4e28e0 R15: 3be9ba32c8301548 [ 189.054171][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 189.054182][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.054192][ C0] CR2: 0000001b2bf5ffff CR3: 000000005f8ce000 CR4: 00000000003506f0 [ 189.054205][ C0] Call Trace: [ 189.054211][ C0] [ 189.054224][ C0] ? mark_lock+0x94/0x320 [ 189.054240][ C0] ? mark_lock+0x94/0x320 [ 189.054254][ C0] ? verify_lock_unused+0x140/0x140 [ 189.054269][ C0] ? __lock_acquire+0x1334/0x7c80 [ 189.054291][ C0] lock_acquire+0x197/0x410 [ 189.054305][ C0] ? debug_objects_fill_pool+0x73/0x6b0 [ 189.054324][ C0] ? verify_lock_unused+0x140/0x140 [ 189.054340][ C0] ? debug_objects_fill_pool+0x73/0x6b0 [ 189.054357][ C0] ? read_lock_is_recursive+0x20/0x20 [ 189.054375][ C0] ? debug_objects_fill_pool+0x73/0x6b0 [ 189.054392][ C0] debug_objects_fill_pool+0x92/0x6b0 [ 189.054409][ C0] ? debug_objects_fill_pool+0x73/0x6b0 [ 189.054428][ C0] ? debug_object_activate+0x4b0/0x4b0 [ 189.054446][ C0] ? do_raw_spin_lock+0x121/0x2c0 [ 189.054464][ C0] ? __rwlock_init+0x150/0x150 [ 189.054480][ C0] ? advance_sched+0x9f9/0xc80 [ 189.054492][ C0] ? advance_sched+0x9f9/0xc80 [ 189.054508][ C0] debug_object_activate+0x36/0x4b0 [ 189.054524][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 189.054546][ C0] enqueue_hrtimer+0x30/0x370 [ 189.054563][ C0] __hrtimer_run_queues+0x637/0xc40 [ 189.054580][ C0] ? taprio_dequeue_from_txq+0x8f0/0x8f0 [ 189.054597][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 189.054611][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 189.054631][ C0] hrtimer_interrupt+0x3c9/0x9c0 [ 189.054655][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 189.054673][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 189.054693][ C0] [ 189.054702][ C0] [ 189.054707][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 189.054728][ C0] RIP: 0010:__zone_watermark_ok+0x32f/0x3f0 [ 189.054748][ C0] Code: 8b 14 24 e9 66 fe ff ff 44 89 fe 48 c7 c7 40 57 e1 8c e8 14 3f 80 02 48 b9 00 00 00 00 00 fc ff df 48 8b 14 24 e9 8e fe ff ff <31> c0 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 b0 01 eb ed 41 [ 189.054759][ C0] RSP: 0018:ffffc900033873b8 EFLAGS: 00000297 [ 189.054770][ C0] RAX: 1ffff11027fff5c8 RBX: 0000000000000000 RCX: dffffc0000000000 [ 189.054780][ C0] RDX: ffff88813fffae00 RSI: 0000000000000002 RDI: ffff88813fffb490 [ 189.054789][ C0] RBP: ffff88813fffae40 R08: ffff88813fffb497 R09: 1ffff11027fff692 [ 189.054799][ C0] R10: dffffc0000000000 R11: ffffed1027fff693 R12: 0000000000000004 [ 189.054808][ C0] R13: 0000000000000005 R14: ffff88813fffae30 R15: 0000000000000000 [ 189.054823][ C0] ? __zone_watermark_ok+0x8b/0x3f0 [ 189.054844][ C0] zone_watermark_fast+0x162/0x230 [ 189.054865][ C0] get_page_from_freelist+0x35e/0x19f0 [ 189.054892][ C0] ? __next_zones_zonelist+0x9d/0x130 [ 189.054911][ C0] ? prepare_alloc_pages+0x366/0x5f0 [ 189.054932][ C0] __alloc_pages+0x1e3/0x460 [ 189.054952][ C0] ? zone_statistics+0x170/0x170 [ 189.054974][ C0] ? alloc_pages+0x4dc/0x740 [ 189.054994][ C0] ? lock_chain_count+0x20/0x20 [ 189.055009][ C0] alloc_slab_page+0x5d/0x170 [ 189.055029][ C0] new_slab+0x87/0x2e0 [ 189.055048][ C0] ___slab_alloc+0xc6d/0x12f0 [ 189.055068][ C0] ? __alloc_skb+0x108/0x2c0 [ 189.055088][ C0] kmem_cache_alloc_node+0x1ea/0x330 [ 189.055106][ C0] ? __alloc_skb+0x108/0x2c0 [ 189.055123][ C0] __alloc_skb+0x108/0x2c0 [ 189.055141][ C0] ndisc_alloc_skb+0xa6/0x450 [ 189.055160][ C0] ndisc_ns_create+0x213/0x640 [ 189.055179][ C0] ? ndisc_alloc_skb+0x450/0x450 [ 189.055195][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 189.055211][ C0] ? lock_chain_count+0x20/0x20 [ 189.055228][ C0] ndisc_send_ns+0xaf/0x150 [ 189.055246][ C0] ? ndisc_ns_create+0x640/0x640 [ 189.055266][ C0] addrconf_dad_work+0xa25/0x14e0 [ 189.055285][ C0] ? ipv6_get_saddr_eval+0xee0/0xee0 [ 189.055301][ C0] ? read_lock_is_recursive+0x20/0x20 [ 189.055318][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 189.055336][ C0] ? process_scheduled_works+0x957/0x15b0 [ 189.055352][ C0] ? process_scheduled_works+0x957/0x15b0 [ 189.055368][ C0] process_scheduled_works+0xa45/0x15b0 [ 189.055394][ C0] ? assign_work+0x400/0x400 [ 189.055412][ C0] ? assign_work+0x39e/0x400 [ 189.055429][ C0] worker_thread+0xa55/0xfc0 [ 189.055445][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 189.055465][ C0] ? _raw_spin_unlock+0x40/0x40 [ 189.055482][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 189.055508][ C0] kthread+0x2fa/0x390 [ 189.055520][ C0] ? pr_cont_work+0x560/0x560 [ 189.055536][ C0] ? kthread_blkcg+0xd0/0xd0 [ 189.055548][ C0] ret_from_fork+0x48/0x80 [ 189.055563][ C0] ? kthread_blkcg+0xd0/0xd0 [ 189.055576][ C0] ret_from_fork_asm+0x11/0x20 [ 189.055598][ C0] [ 189.056041][ C1] Sending NMI from CPU 1 to CPUs 0: [ 189.623387][ C0] NMI backtrace for cpu 0 [ 189.623398][ C0] CPU: 0 PID: 5866 Comm: kworker/0:5 Not tainted 6.6.99-syzkaller #0 [ 189.623413][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.623422][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 189.623444][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x1f/0x90 [ 189.623464][ C0] Code: 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 10 20 7e 7e 65 8b 0d 11 20 7e 7e 81 e1 00 01 ff 00 74 11 <81> f9 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 74 52 8b 8a f8 15 00 [ 189.623475][ C0] RSP: 0018:ffffc90000007d00 EFLAGS: 00000006 [ 189.623487][ C0] RAX: ffffffff8175ec09 RBX: ffff88807b545340 RCX: 0000000000010000 [ 189.623497][ C0] RDX: ffff88802e4e1e00 RSI: 0000000000000001 RDI: 0000000000000020 [ 189.623506][ C0] RBP: 0000000000000010 R08: ffffffff8e4a7cef R09: 1ffffffff1c94f9d [ 189.623516][ C0] R10: dffffc0000000000 R11: fffffbfff1c94f9e R12: dffffc0000000000 [ 189.623526][ C0] R13: 1ffff110171c5748 R14: ffff8880b8e2ba40 R15: 0000000000000001 [ 189.623536][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 189.623548][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.623558][ C0] CR2: 0000001b2bf5ffff CR3: 000000005f8ce000 CR4: 00000000003506f0 [ 189.623570][ C0] Call Trace: [ 189.623577][ C0] [ 189.623582][ C0] enqueue_hrtimer+0x129/0x370 [ 189.623603][ C0] __hrtimer_run_queues+0x637/0xc40 [ 189.623620][ C0] ? taprio_dequeue_from_txq+0x8f0/0x8f0 [ 189.623639][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 189.623654][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 189.623674][ C0] hrtimer_interrupt+0x3c9/0x9c0 [ 189.623701][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 189.623720][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 189.623744][ C0] [ 189.623748][ C0] [ 189.623753][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 189.623775][ C0] RIP: 0010:__zone_watermark_ok+0x32f/0x3f0 [ 189.623795][ C0] Code: 8b 14 24 e9 66 fe ff ff 44 89 fe 48 c7 c7 40 57 e1 8c e8 14 3f 80 02 48 b9 00 00 00 00 00 fc ff df 48 8b 14 24 e9 8e fe ff ff <31> c0 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 b0 01 eb ed 41 [ 189.623805][ C0] RSP: 0018:ffffc900033873b8 EFLAGS: 00000297 [ 189.623817][ C0] RAX: 1ffff11027fff5c8 RBX: 0000000000000000 RCX: dffffc0000000000 [ 189.623827][ C0] RDX: ffff88813fffae00 RSI: 0000000000000002 RDI: ffff88813fffb490 [ 189.623836][ C0] RBP: ffff88813fffae40 R08: ffff88813fffb497 R09: 1ffff11027fff692 [ 189.623846][ C0] R10: dffffc0000000000 R11: ffffed1027fff693 R12: 0000000000000004 [ 189.623855][ C0] R13: 0000000000000005 R14: ffff88813fffae30 R15: 0000000000000000 [ 189.623872][ C0] ? __zone_watermark_ok+0x8b/0x3f0 [ 189.623893][ C0] zone_watermark_fast+0x162/0x230 [ 189.623915][ C0] get_page_from_freelist+0x35e/0x19f0 [ 189.623944][ C0] ? __next_zones_zonelist+0x9d/0x130 [ 189.623963][ C0] ? prepare_alloc_pages+0x366/0x5f0 [ 189.623986][ C0] __alloc_pages+0x1e3/0x460 [ 189.624005][ C0] ? zone_statistics+0x170/0x170 [ 189.624028][ C0] ? alloc_pages+0x4dc/0x740 [ 189.624048][ C0] ? lock_chain_count+0x20/0x20 [ 189.624064][ C0] alloc_slab_page+0x5d/0x170 [ 189.624085][ C0] new_slab+0x87/0x2e0 [ 189.624104][ C0] ___slab_alloc+0xc6d/0x12f0 [ 189.624125][ C0] ? __alloc_skb+0x108/0x2c0 [ 189.624146][ C0] kmem_cache_alloc_node+0x1ea/0x330 [ 189.624165][ C0] ? __alloc_skb+0x108/0x2c0 [ 189.624183][ C0] __alloc_skb+0x108/0x2c0 [ 189.624202][ C0] ndisc_alloc_skb+0xa6/0x450 [ 189.624222][ C0] ndisc_ns_create+0x213/0x640 [ 189.624240][ C0] ? ndisc_alloc_skb+0x450/0x450 [ 189.624256][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 189.624273][ C0] ? lock_chain_count+0x20/0x20 [ 189.624290][ C0] ndisc_send_ns+0xaf/0x150 [ 189.624309][ C0] ? ndisc_ns_create+0x640/0x640 [ 189.624330][ C0] addrconf_dad_work+0xa25/0x14e0 [ 189.624350][ C0] ? ipv6_get_saddr_eval+0xee0/0xee0 [ 189.624366][ C0] ? read_lock_is_recursive+0x20/0x20 [ 189.624383][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 189.624403][ C0] ? process_scheduled_works+0x957/0x15b0 [ 189.624420][ C0] ? process_scheduled_works+0x957/0x15b0 [ 189.624436][ C0] process_scheduled_works+0xa45/0x15b0 [ 189.624465][ C0] ? assign_work+0x400/0x400 [ 189.624483][ C0] ? assign_work+0x39e/0x400 [ 189.624501][ C0] worker_thread+0xa55/0xfc0 [ 189.624518][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 189.624537][ C0] ? _raw_spin_unlock+0x40/0x40 [ 189.624554][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 189.624582][ C0] kthread+0x2fa/0x390 [ 189.624595][ C0] ? pr_cont_work+0x560/0x560 [ 189.624611][ C0] ? kthread_blkcg+0xd0/0xd0 [ 189.624623][ C0] ret_from_fork+0x48/0x80 [ 189.624639][ C0] ? kthread_blkcg+0xd0/0xd0 [ 189.624652][ C0] ret_from_fork_asm+0x11/0x20 [ 189.624677][ C0] [ 189.625380][ C1] CPU: 1 PID: 3495 Comm: kworker/u4:8 Not tainted 6.6.99-syzkaller #0 [ 190.099811][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.109871][ C1] Workqueue: events_unbound toggle_allocation_gate [ 190.116397][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 190.122477][ C1] Code: 00 0f 0b 0f 1f 80 00 00 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d ec e8 c4 0c 48 89 de 5b e9 f3 74 56 00 cc cc cc 0f 1e fa 48 8b 04 24 65 48 8b 0d c0 23 7e 7e 65 8b 15 c1 23 7e [ 190.142088][ C1] RSP: 0018:ffffc9000cb47778 EFLAGS: 00000202 [ 190.148164][ C1] RAX: 0000000000000000 RBX: 1ffff110171c87d9 RCX: ffff88802e4e3c00 [ 190.156136][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 190.164116][ C1] RBP: ffffc9000cb47900 R08: ffffffff90da2527 R09: 1ffffffff21b44a4 [ 190.172092][ C1] R10: dffffc0000000000 R11: fffffbfff21b44a5 R12: ffff8880b8e43ec8 [ 190.180065][ C1] R13: dffffc0000000000 R14: ffff8880b8f3d588 R15: 0000000000000000 [ 190.188036][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 190.196964][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.203545][ C1] CR2: 00007f94c4e5b000 CR3: 000000000cb30000 CR4: 00000000003506e0 [ 190.211518][ C1] Call Trace: [ 190.214799][ C1] [ 190.217733][ C1] smp_call_function_many_cond+0xdf7/0x1130 [ 190.223647][ C1] ? text_poke_sync+0x30/0x30 [ 190.228335][ C1] ? smp_call_function_many+0x40/0x40 [ 190.233716][ C1] ? text_poke+0xc0/0xc0 [ 190.237961][ C1] ? __mutex_trylock_common+0x153/0x250 [ 190.243510][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 190.249675][ C1] ? text_poke_sync+0x30/0x30 [ 190.254357][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 190.259501][ C1] ? kmem_cache_alloc_bulk+0x12a/0x5b0 [ 190.264991][ C1] text_poke_bp_batch+0x318/0x930 [ 190.270035][ C1] ? text_poke_loc_init+0x820/0x820 [ 190.275256][ C1] ? mutex_lock_nested+0x20/0x20 [ 190.280204][ C1] ? text_poke_queue+0x140/0x190 [ 190.285154][ C1] ? arch_jump_label_transform_queue+0x93/0x100 [ 190.291409][ C1] text_poke_finish+0x30/0x50 [ 190.296087][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 190.302075][ C1] static_key_disable_cpuslocked+0xc5/0x1a0 [ 190.307975][ C1] static_key_disable+0x1a/0x20 [ 190.312830][ C1] toggle_allocation_gate+0x1b0/0x250 [ 190.318219][ C1] ? show_object+0x70/0x70 [ 190.322659][ C1] ? wake_bit_function+0x200/0x200 [ 190.327799][ C1] ? process_scheduled_works+0x957/0x15b0 [ 190.333537][ C1] ? process_scheduled_works+0x957/0x15b0 [ 190.339266][ C1] process_scheduled_works+0xa45/0x15b0 [ 190.344848][ C1] ? assign_work+0x400/0x400 [ 190.349458][ C1] ? assign_work+0x39e/0x400 [ 190.354058][ C1] worker_thread+0xa55/0xfc0 [ 190.358656][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 190.364557][ C1] ? _raw_spin_unlock+0x40/0x40 [ 190.369415][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 190.375335][ C1] kthread+0x2fa/0x390 [ 190.379409][ C1] ? pr_cont_work+0x560/0x560 [ 190.384091][ C1] ? kthread_blkcg+0xd0/0xd0 [ 190.388683][ C1] ret_from_fork+0x48/0x80 [ 190.393104][ C1] ? kthread_blkcg+0xd0/0xd0 [ 190.397696][ C1] ret_from_fork_asm+0x11/0x20 [ 190.402484][ C1]