Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts. 2026/05/10 21:28:07 parsed 1 programs [ 119.715112][ T28] audit: type=1400 audit(1778448487.119:64): avc: denied { node_bind } for pid=296 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 119.718088][ T28] audit: type=1400 audit(1778448487.119:65): avc: denied { module_request } for pid=296 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 120.418241][ T28] audit: type=1400 audit(1778448487.819:66): avc: denied { mounton } for pid=304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 120.419280][ T304] cgroup: Unknown subsys name 'net' [ 120.440928][ T28] audit: type=1400 audit(1778448487.819:67): avc: denied { mount } for pid=304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 120.468168][ T28] audit: type=1400 audit(1778448487.849:68): avc: denied { unmount } for pid=304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 120.468311][ T304] cgroup: Unknown subsys name 'devices' [ 120.581037][ T304] cgroup: Unknown subsys name 'hugetlb' [ 120.586651][ T304] cgroup: Unknown subsys name 'rlimit' [ 120.724478][ T28] audit: type=1400 audit(1778448488.129:69): avc: denied { setattr } for pid=304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.747702][ T28] audit: type=1400 audit(1778448488.129:70): avc: denied { create } for pid=304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.768110][ T28] audit: type=1400 audit(1778448488.129:71): avc: denied { write } for pid=304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.776475][ T307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 120.788387][ T28] audit: type=1400 audit(1778448488.129:72): avc: denied { read } for pid=304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 120.817127][ T28] audit: type=1400 audit(1778448488.129:73): avc: denied { mounton } for pid=304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 120.844918][ T304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 121.559679][ T313] request_module fs-gadgetfs succeeded, but still no fs? [ 121.900250][ T327] syz-executor (327) used greatest stack depth: 21888 bytes left [ 122.053145][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.061930][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.069726][ T352] device bridge_slave_0 entered promiscuous mode [ 122.081850][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.088899][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.097031][ T352] device bridge_slave_1 entered promiscuous mode [ 122.212667][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.219758][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.227090][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.234175][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.256707][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.264604][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.272357][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.283744][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.292214][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.299253][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.306805][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.315281][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.322332][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.333671][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.342767][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.355433][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.366175][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.374343][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.382191][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.390618][ T352] device veth0_vlan entered promiscuous mode [ 122.400181][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.409123][ T352] device veth1_macvtap entered promiscuous mode 2026/05/10 21:28:09 executed programs: 0 [ 122.417978][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.427769][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.485077][ T352] syz-executor (352) used greatest stack depth: 21760 bytes left [ 122.633774][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.640884][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.648307][ T371] device bridge_slave_0 entered promiscuous mode [ 122.656990][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.664097][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.671626][ T371] device bridge_slave_1 entered promiscuous mode [ 122.698127][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.705243][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.712684][ T373] device bridge_slave_0 entered promiscuous mode [ 122.748288][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.755522][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.763017][ T373] device bridge_slave_1 entered promiscuous mode [ 122.799712][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.806755][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.814231][ T375] device bridge_slave_0 entered promiscuous mode [ 122.834418][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.841479][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.848911][ T378] device bridge_slave_0 entered promiscuous mode [ 122.855713][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.862796][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.870295][ T375] device bridge_slave_1 entered promiscuous mode [ 122.896673][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.903847][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.911303][ T378] device bridge_slave_1 entered promiscuous mode [ 122.999160][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.006323][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.013700][ T377] device bridge_slave_0 entered promiscuous mode [ 123.020827][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.027868][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.035353][ T377] device bridge_slave_1 entered promiscuous mode [ 123.174404][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.181487][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.188750][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.195790][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.227495][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.234859][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.243621][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.251504][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.284943][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.292421][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.301377][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.308800][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.316452][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.324963][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.333300][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.340347][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.347806][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.356184][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.364302][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.371337][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.378797][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.387276][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.395519][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.402543][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.410031][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.417658][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.429748][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.438080][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.446338][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.453372][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.470418][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.478763][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.487413][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.494482][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.501897][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.510593][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.518664][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.525697][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.533058][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.541214][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.549128][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.557182][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.567075][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.583682][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.591983][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.599025][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.606527][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.614859][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.621919][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.629557][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.636937][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.644442][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.652778][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.661052][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.668084][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.675542][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.691750][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.699697][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.707916][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.716294][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.723354][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.733187][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.754370][ T375] device veth0_vlan entered promiscuous mode [ 123.762276][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.770473][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.777912][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.786172][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.794213][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.802441][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.810469][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.824887][ T373] device veth0_vlan entered promiscuous mode [ 123.839067][ T375] device veth1_macvtap entered promiscuous mode [ 123.846639][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.855236][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.863491][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.871125][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.878642][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.887098][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.896529][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.904567][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.935735][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.944418][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.952966][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.961497][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.970009][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.978173][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.986651][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.995007][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.003820][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.011794][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.027174][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.034757][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.048665][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.057154][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.067533][ T373] device veth1_macvtap entered promiscuous mode [ 124.076651][ T378] device veth0_vlan entered promiscuous mode [ 124.086722][ T371] device veth0_vlan entered promiscuous mode [ 124.099306][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.099392][ C0] hrtimer: interrupt took 19395 ns [ 124.107585][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.121304][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.128969][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.137303][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.145611][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.153833][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.162813][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.170922][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.178411][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.186278][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.243206][ T377] device veth0_vlan entered promiscuous mode [ 124.257729][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.266253][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.281177][ T378] device veth1_macvtap entered promiscuous mode [ 124.296582][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.305324][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.313818][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.322612][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.330900][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.340459][ T377] device veth1_macvtap entered promiscuous mode [ 124.607568][ T371] device veth1_macvtap entered promiscuous mode [ 124.720679][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.728294][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.736224][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.745649][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.754301][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.762716][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.771179][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.779726][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.794943][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.803323][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.047030][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.055903][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.065433][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.087944][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.099387][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 225.106381][ C0] (detected by 0, t=10002 jiffies, g=1529, q=339 ncpus=2) [ 225.113579][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294959726-4294949723), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 225.126933][ C0] rcu: rcu_preempt kthread starved for 10004 jiffies! g1529 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 225.138034][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 225.147996][ C0] rcu: RCU grace-period kthread stack dump: [ 225.153878][ C0] task:rcu_preempt state:R running task stack:28496 pid:14 ppid:2 flags:0x00004000 [ 225.164667][ C0] Call Trace: [ 225.167941][ C0] [ 225.170867][ C0] __schedule+0xba6/0x1500 [ 225.175318][ C0] ? release_firmware_map_entry+0x190/0x190 [ 225.181224][ C0] schedule+0xbd/0x170 [ 225.185310][ C0] schedule_timeout+0x159/0x340 [ 225.190157][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 225.195525][ C0] ? __cfi_process_timeout+0x10/0x10 [ 225.200818][ C0] ? prepare_to_swait_event+0x308/0x320 [ 225.206365][ C0] rcu_gp_fqs_loop+0x2e9/0x10c0 [ 225.211210][ C0] ? _raw_spin_unlock_irq+0x4d/0x70 [ 225.216407][ C0] ? rcu_gp_init+0xf30/0xf30 [ 225.220991][ C0] rcu_gp_kthread+0x99/0x390 [ 225.225577][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 225.230768][ C0] ? __kasan_check_read+0x11/0x20 [ 225.235795][ C0] ? __kthread_parkme+0x142/0x180 [ 225.240824][ C0] kthread+0x281/0x320 [ 225.244907][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 225.250117][ C0] ? __cfi_kthread+0x10/0x10 [ 225.254708][ C0] ret_from_fork+0x1f/0x30 [ 225.259124][ C0] [ 225.262134][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 225.268461][ C0] CPU: 0 PID: 403 Comm: syz.3.20 Not tainted syzkaller #0 [ 225.275562][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 225.285605][ C0] RIP: 0010:update_stack_state+0x1ec/0x480 [ 225.291419][ C0] Code: 85 ed 0f 95 c0 48 8b 55 b0 4c 39 fa 0f 93 c1 20 c1 4c 39 f2 0f 92 c0 20 c8 3c 01 75 17 48 8b 8d 78 ff ff ff 4c 39 f9 0f 97 c0 <4c> 39 f1 0f 96 c1 84 c8 75 6e 49 bd 00 00 00 00 00 fc ff df 48 8b [ 225.311029][ C0] RSP: 0000:ffffc90000006cf8 EFLAGS: 00000202 [ 225.317092][ C0] RAX: 0000000000000001 RBX: ffffc90000006e48 RCX: ffffc90000007f08 [ 225.325055][ C0] RDX: ffffc90000007ef8 RSI: 1ffff92000000dca RDI: ffffc90000006ea0 [ 225.333020][ C0] RBP: ffffc90000006db8 R08: ffffc90000006f10 R09: ffffc90000006f08 [ 225.340986][ C0] R10: 0000000000000018 R11: fffff52000000dd5 R12: ffffc90000006e48 [ 225.348950][ C0] R13: 0000000000000002 R14: ffffc90000008000 R15: ffffc90000000000 [ 225.356914][ C0] FS: 0000555572238500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 225.365837][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.372412][ C0] CR2: 0000000000000a7c CR3: 0000000131d8f000 CR4: 00000000003506b0 [ 225.380378][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 225.388340][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 225.396304][ C0] Call Trace: [ 225.399573][ C0] [ 225.402411][ C0] unwind_next_frame+0x3d5/0x700 [ 225.407344][ C0] ? __kernel_text_address+0xd/0x30 [ 225.412539][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 225.418691][ C0] arch_stack_walk+0x124/0x150 [ 225.423455][ C0] ? __run_timers+0x65b/0x9f0 [ 225.428127][ C0] stack_trace_save+0xa6/0xf0 [ 225.432801][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 225.438166][ C0] ? memset+0x35/0x40 [ 225.442139][ C0] kasan_set_track+0x4b/0x70 [ 225.446729][ C0] ? kasan_set_track+0x4b/0x70 [ 225.451490][ C0] ? kasan_save_free_info+0x31/0x50 [ 225.456684][ C0] ? ____kasan_slab_free+0x132/0x180 [ 225.461964][ C0] ? __kasan_slab_free+0x11/0x20 [ 225.466895][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 225.472436][ C0] ? __kmem_cache_free+0xb7/0x1b0 [ 225.477456][ C0] ? kfree+0x6f/0xf0 [ 225.481345][ C0] ? skb_release_data+0x63f/0x890 [ 225.486360][ C0] ? consume_skb+0xab/0x1f0 [ 225.490852][ C0] ? netlink_broadcast+0x1084/0x1180 [ 225.496134][ C0] ? nlmsg_notify+0xe6/0x1a0 [ 225.500721][ C0] ? rtnl_notify+0x9a/0xc0 [ 225.505129][ C0] ? __neigh_notify+0xd3/0x130 [ 225.509894][ C0] ? neigh_cleanup_and_release+0x2c/0x1a0 [ 225.515625][ C0] ? neigh_remove_one+0x4b5/0x540 [ 225.520654][ C0] ? ___neigh_create+0x48b/0x1e20 [ 225.525676][ C0] ? __neigh_create+0x31/0x40 [ 225.530350][ C0] ? ip6_finish_output2+0xa56/0x18a0 [ 225.535631][ C0] ? ip6_finish_output+0x5f9/0xbb0 [ 225.540741][ C0] ? ip6_output+0x1fa/0x410 [ 225.545240][ C0] ? ndisc_send_skb+0x7dc/0xcc0 [ 225.550089][ C0] ? ndisc_send_rs+0x670/0x870 [ 225.554851][ C0] ? addrconf_rs_timer+0x2cf/0x610 [ 225.559957][ C0] ? call_timer_fn+0x46/0x2a0 [ 225.564640][ C0] ? __run_timers+0x65b/0x9f0 [ 225.569327][ C0] ? __kmem_cache_free+0xb7/0x1b0 [ 225.574351][ C0] kasan_save_free_info+0x31/0x50 [ 225.579373][ C0] ____kasan_slab_free+0x132/0x180 [ 225.584482][ C0] __kasan_slab_free+0x11/0x20 [ 225.589239][ C0] slab_free_freelist_hook+0xc2/0x190 [ 225.594603][ C0] ? skb_release_data+0x63f/0x890 [ 225.599625][ C0] __kmem_cache_free+0xb7/0x1b0 [ 225.604488][ C0] kfree+0x6f/0xf0 [ 225.608209][ C0] skb_release_data+0x63f/0x890 [ 225.613052][ C0] ? _raw_read_lock_irqsave+0x94/0xf0 [ 225.618420][ C0] consume_skb+0xab/0x1f0 [ 225.622747][ C0] netlink_broadcast+0x1084/0x1180 [ 225.627858][ C0] nlmsg_notify+0xe6/0x1a0 [ 225.632277][ C0] rtnl_notify+0x9a/0xc0 [ 225.636516][ C0] __neigh_notify+0xd3/0x130 [ 225.641110][ C0] neigh_cleanup_and_release+0x2c/0x1a0 [ 225.646655][ C0] neigh_remove_one+0x4b5/0x540 [ 225.651504][ C0] ___neigh_create+0x48b/0x1e20 [ 225.656352][ C0] ? irqentry_exit+0x37/0x40 [ 225.660945][ C0] __neigh_create+0x31/0x40 [ 225.665443][ C0] ip6_finish_output2+0xa56/0x18a0 [ 225.670553][ C0] ? __cfi_ip6_finish_output2+0x10/0x10 [ 225.676097][ C0] ? __cfi_ip6_mtu+0x10/0x10 [ 225.680686][ C0] ? ip6_mtu+0xc7/0x120 [ 225.684839][ C0] ip6_finish_output+0x5f9/0xbb0 [ 225.689775][ C0] ip6_output+0x1fa/0x410 [ 225.694108][ C0] ? __cfi_ip6_output+0x10/0x10 [ 225.698953][ C0] ? __cfi_ip6_finish_output+0x10/0x10 [ 225.704405][ C0] ndisc_send_skb+0x7dc/0xcc0 [ 225.709082][ C0] ? __cfi_ndisc_send_skb+0x10/0x10 [ 225.714279][ C0] ? __cfi_dst_output+0x10/0x10 [ 225.719129][ C0] ? memcpy+0x56/0x70 [ 225.723105][ C0] ? __ndisc_fill_addr_option+0xde/0x130 [ 225.728760][ C0] ndisc_send_rs+0x670/0x870 [ 225.733350][ C0] addrconf_rs_timer+0x2cf/0x610 [ 225.738282][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 225.743751][ C0] ? call_timer_fn+0x2c/0x2a0 [ 225.748430][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 225.753883][ C0] ? addrconf_rs_timer+0x1/0x610 [ 225.758815][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 225.764266][ C0] call_timer_fn+0x46/0x2a0 [ 225.768766][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 225.774225][ C0] __run_timers+0x65b/0x9f0 [ 225.778729][ C0] ? calc_index+0x200/0x200 [ 225.783243][ C0] ? __irq_exit_rcu+0x5e/0xf0 [ 225.787921][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 225.794075][ C0] run_timer_softirq+0x6a/0xf0 [ 225.798836][ C0] handle_softirqs+0x1d7/0x600 [ 225.803595][ C0] __irq_exit_rcu+0x52/0xf0 [ 225.808093][ C0] irq_exit_rcu+0x9/0x10 [ 225.812326][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 225.817960][ C0] [ 225.820887][ C0] [ 225.823827][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 225.829804][ C0] RIP: 0010:exit_to_user_mode_loop+0x4a/0xb0 [ 225.835780][ C0] Code: 00 e8 ba ca 5a 00 e8 d5 6c f8 00 fa e8 1f 3d 9b 03 65 48 8b 05 47 52 a2 7e 4c 8b 30 41 f7 c6 0e 30 02 00 74 5b fb 41 f6 c6 08 <74> 05 e8 ff 80 a0 03 41 f7 c6 00 10 00 00 74 08 48 89 df e8 be 9e [ 225.855383][ C0] RSP: 0000:ffffc90000ad7ed0 EFLAGS: 00000202 [ 225.861458][ C0] RAX: 0000000000000000 RBX: ffffc90000ad7f58 RCX: c511e09cda222a00 [ 225.869427][ C0] RDX: 1ffffffff0f6e600 RSI: 0000000000000008 RDI: ffffc90000ad7f58 [ 225.877391][ C0] RBP: ffffc90000ad7ee0 R08: ffffffff87b73008 R09: ffffffff87b73018 [ 225.885357][ C0] R10: ffffffff87b73003 R11: 1ffffffff0f6e600 R12: 0000000000000000 [ 225.893327][ C0] R13: 0000000000000000 R14: 0000000000000008 R15: ffff888118758000 [ 225.901294][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 225.906753][ C0] irqentry_exit_to_user_mode+0x9/0x10 [ 225.912209][ C0] irqentry_exit+0x12/0x40 [ 225.916625][ C0] sysvec_apic_timer_interrupt+0x64/0xc0 [ 225.922258][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 225.928235][ C0] RIP: 0033:0x7face2c55599 [ 225.932660][ C0] Code: 00 53 48 8b 1d 28 28 3c 00 45 31 d2 31 c9 48 8b 17 45 31 db 4c 8d 83 00 00 40 00 48 89 d0 0f 1f 00 4c 39 c0 73 63 44 0f b6 08 <48> 83 c0 01 4c 89 ce 83 e6 7f 48 d3 e6 49 09 f2 45 84 c9 79 2a 83 2026/05/10 21:29:53 executed programs: 14 [ 225.952258][ C0] RSP: 002b:00007fffeac5af00 EFLAGS: 00000283 [ 225.958319][ C0] RAX: 0000001b3322043d RBX: 0000001b33220000 RCX: 0000000000000000 [ 225.966287][ C0] RDX: 0000001b3322043d RSI: 0000000000000001 RDI: 00007fffeac5aff0 [ 225.974250][ C0] RBP: 0000000000000a7c R08: 0000001b33620000 R09: 0000000000000006 [ 225.982214][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 225.990197][ C0] R13: 00007face3015fac R14: 00007face3015fa8 R15: 00007face3015fa0 [ 225.998163][ C0] [ 230.475515][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 230.484208][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 230.492870][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 230.501165][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.591403][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.598448][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.606068][ T415] device bridge_slave_0 entered promiscuous mode [ 230.629174][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.636329][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.643888][ T415] device bridge_slave_1 entered promiscuous mode [ 230.717162][ T414] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.724430][ T414] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.731849][ T414] device bridge_slave_0 entered promiscuous mode [ 230.749874][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.756912][ T414] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.764333][ T414] device bridge_slave_1 entered promiscuous mode [ 230.788760][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.796098][ T413] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.803609][ T413] device bridge_slave_0 entered promiscuous mode [ 230.814417][ T268] device bridge_slave_1 left promiscuous mode [ 230.820577][ T268] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.827972][ T268] device bridge_slave_0 left promiscuous mode [ 230.834198][ T268] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.842119][ T268] device veth1_macvtap left promiscuous mode [ 230.848115][ T268] device veth0_vlan left promiscuous mode [ 230.924964][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.932067][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.939346][ T412] device bridge_slave_0 entered promiscuous mode [ 230.949129][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.956231][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.963870][ T412] device bridge_slave_1 entered promiscuous mode [ 230.970611][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.977633][ T413] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.985022][ T413] device bridge_slave_1 entered promiscuous mode [ 231.056859][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.064069][ T411] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.071509][ T411] device bridge_slave_0 entered promiscuous mode [ 231.103799][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.111010][ T411] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.118436][ T411] device bridge_slave_1 entered promiscuous mode [ 231.196955][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.204038][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.211334][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.218356][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.247088][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.254179][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.261460][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.268472][ T413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.300537][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.307594][ T414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.314866][ T414] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.321899][ T414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.335911][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.342989][ T412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.350272][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.357292][ T412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.379829][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.387543][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.394787][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.402044][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.409194][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.416661][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.423940][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.431363][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.438550][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.460498][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.468627][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.475664][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.483011][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.491371][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.498408][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.505781][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.514201][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.529228][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.552340][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.559871][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.567282][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.576200][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.584477][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.591519][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.599512][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.607786][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.616214][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.623270][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.638684][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.646879][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.654922][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.663203][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.676493][ T415] device veth0_vlan entered promiscuous mode [ 231.697242][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 231.705195][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.713486][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.721287][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.737372][ T415] device veth1_macvtap entered promiscuous mode [ 231.749586][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.757806][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.766329][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.774106][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.782556][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.791129][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.799550][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.807659][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.814708][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.836876][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.844399][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.852032][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.860438][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.868578][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.875619][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.883934][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.892261][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.900391][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.907392][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.914867][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.940235][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.948487][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.956761][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.963793][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.971283][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.980318][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.988660][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.996952][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.005472][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.015007][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 232.023159][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.046025][ T413] device veth0_vlan entered promiscuous mode [ 232.053451][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.061082][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.068507][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.076811][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.085583][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.093640][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.101156][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.108537][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.116935][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.125086][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.132124][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.162970][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.172024][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.180660][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.187706][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.196254][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.204696][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 2026/05/10 21:29:59 executed programs: 16 [ 232.212751][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.220864][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.228890][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.247293][ T411] device veth0_vlan entered promiscuous mode [ 232.262574][ T411] device veth1_macvtap entered promiscuous mode [ 232.342497][ T413] device veth1_macvtap entered promiscuous mode [ 232.437226][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.446026][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.454403][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.462000][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.470360][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.478634][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 232.487256][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 232.495840][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.504360][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.512776][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.521754][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 232.530434][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 232.538842][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 232.547405][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.556000][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.564458][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.573134][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.813954][ T414] device veth0_vlan entered promiscuous mode [ 232.844188][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 232.852255][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.876266][ T414] device veth1_macvtap entered promiscuous mode [ 332.879379][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 332.886117][ C0] rcu: 0-...!: (10000 ticks this GP) idle=3ccc/1/0x4000000000000000 softirq=3506/3506 fqs=0 [ 332.896280][ C0] (t=10001 jiffies g=1989 q=490 ncpus=2) [ 332.901992][ C0] rcu: rcu_preempt kthread starved for 10002 jiffies! g1989 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 332.913094][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 332.923058][ C0] rcu: RCU grace-period kthread stack dump: [ 332.928940][ C0] task:rcu_preempt state:R running task stack:28496 pid:14 ppid:2 flags:0x00004000 [ 332.939723][ C0] Call Trace: [ 332.942997][ C0] [ 332.945922][ C0] __schedule+0xba6/0x1500 [ 332.950343][ C0] ? release_firmware_map_entry+0x190/0x190 [ 332.956235][ C0] schedule+0xbd/0x170 [ 332.960300][ C0] schedule_timeout+0x159/0x340 [ 332.965158][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 332.970524][ C0] ? __cfi_process_timeout+0x10/0x10 [ 332.975805][ C0] ? prepare_to_swait_event+0x308/0x320 [ 332.981359][ C0] rcu_gp_fqs_loop+0x2e9/0x10c0 [ 332.986225][ C0] ? _raw_spin_unlock_irq+0x4d/0x70 [ 332.991420][ C0] ? rcu_gp_init+0xf30/0xf30 [ 332.996005][ C0] rcu_gp_kthread+0x99/0x390 [ 333.000593][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 333.005788][ C0] ? __kasan_check_read+0x11/0x20 [ 333.010810][ C0] ? __kthread_parkme+0x142/0x180 [ 333.015829][ C0] kthread+0x281/0x320 [ 333.019889][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 333.025081][ C0] ? __cfi_kthread+0x10/0x10 [ 333.029669][ C0] ret_from_fork+0x1f/0x30 [ 333.034086][ C0] [ 333.037102][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 333.043415][ C0] CPU: 0 PID: 436 Comm: syz.8.26 Not tainted syzkaller #0 [ 333.050520][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 333.060572][ C0] RIP: 0010:should_fail_ex+0x55/0x520 [ 333.065958][ C0] Code: a9 00 01 ff 00 0f 84 fa 00 00 00 4c 89 f3 48 c1 eb 03 80 3c 13 00 74 0e 4c 89 f7 49 89 d4 e8 c2 89 2a ff 4c 89 e2 49 83 3e 00 <0f> 84 20 01 00 00 4d 8d 66 20 4c 89 e0 48 c1 e8 03 0f b6 04 10 84 [ 333.085566][ C0] RSP: 0018:ffffc900000076c8 EFLAGS: 00000246 [ 333.091649][ C0] RAX: 0000000000000100 RBX: 1ffffffff0e4d4d4 RCX: 0000000000000002 [ 333.099622][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffffff8726a6a0 [ 333.107593][ C0] RBP: ffffc90000007710 R08: ffffc90000007838 R09: ffffc9000000783c [ 333.115560][ C0] R10: dffffc0000000000 R11: fffff52000000f15 R12: 00000000000d2a20 [ 333.123534][ C0] R13: ffffc90000007898 R14: ffffffff8726a6a0 R15: 0000000000000004 [ 333.131500][ C0] FS: 00005555826b4500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 333.140426][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.147003][ C0] CR2: 000000000000139b CR3: 000000011de54000 CR4: 00000000003506b0 [ 333.154978][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 333.162945][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 333.170908][ C0] Call Trace: [ 333.174199][ C0] [ 333.177040][ C0] should_fail_alloc_page+0x61/0x90 [ 333.182242][ C0] prepare_alloc_pages+0x148/0x600 [ 333.187356][ C0] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 333.192561][ C0] ? sched_clock_cpu+0x6e/0x260 [ 333.197407][ C0] ? perf_trace_x86_irq_vector+0x233/0x2c0 [ 333.203227][ C0] __alloc_pages+0x15b/0x610 [ 333.207818][ C0] ? __cfi___alloc_pages+0x10/0x10 [ 333.212927][ C0] ? __irq_exit_rcu+0x5e/0xf0 [ 333.217606][ C0] ? irqentry_exit+0x37/0x40 [ 333.222216][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 333.228381][ C0] alloc_slab_page+0x6e/0xf0 [ 333.232974][ C0] new_slab+0x98/0x3d0 [ 333.237048][ C0] ___slab_alloc+0x6bd/0xb20 [ 333.241638][ C0] ? ndisc_send_rs+0x304/0x870 [ 333.246405][ C0] __slab_alloc+0x5e/0xa0 [ 333.250738][ C0] ? ndisc_send_rs+0x304/0x870 [ 333.255509][ C0] ? ndisc_send_rs+0x304/0x870 [ 333.260272][ C0] __kmem_cache_alloc_node+0x203/0x2c0 [ 333.265740][ C0] ? ndisc_send_rs+0x304/0x870 [ 333.270505][ C0] ? ndisc_send_rs+0x304/0x870 [ 333.275272][ C0] __kmalloc_node_track_caller+0xa0/0x1e0 [ 333.281006][ C0] ? ndisc_send_rs+0x304/0x870 [ 333.285775][ C0] __alloc_skb+0x236/0x4b0 [ 333.290209][ C0] ndisc_send_rs+0x304/0x870 [ 333.294798][ C0] addrconf_rs_timer+0x2cf/0x610 [ 333.299731][ C0] ? __irq_exit_rcu+0x5e/0xf0 [ 333.304409][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 333.309868][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 333.315325][ C0] call_timer_fn+0x46/0x2a0 [ 333.319844][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 333.325312][ C0] __run_timers+0x65b/0x9f0 [ 333.329827][ C0] ? calc_index+0x200/0x200 [ 333.334344][ C0] ? __irq_exit_rcu+0x5e/0xf0 [ 333.339023][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 333.345186][ C0] run_timer_softirq+0x6a/0xf0 [ 333.349947][ C0] handle_softirqs+0x1d7/0x600 [ 333.354709][ C0] __irq_exit_rcu+0x52/0xf0 [ 333.359212][ C0] irq_exit_rcu+0x9/0x10 [ 333.363447][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 333.369079][ C0] [ 333.372002][ C0] [ 333.374930][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 333.380909][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x36/0x80 [ 333.387763][ C0] Code: a0 f2 90 7e 65 8b 15 a1 f2 90 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 6c 0b 00 00 00 74 4e 8b 91 48 0b 00 00 <83> fa 03 75 43 48 8b 91 50 0b 00 00 44 8b 89 4c 0b 00 00 49 c1 e1 [ 333.407538][ C0] RSP: 0018:ffffc90000c77db0 EFLAGS: 00000246 [ 333.413605][ C0] RAX: ffffffff81674c29 RBX: 0000000000000004 RCX: ffff88811e531440 [ 333.421570][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 333.429533][ C0] RBP: ffffc90000c77db0 R08: ffffc90000c77e4f R09: ffffc90000c77e40 [ 333.437498][ C0] R10: dffffc0000000000 R11: fffff5200018efca R12: 0000000000000081 [ 333.445463][ C0] R13: 1ffff9200018efc0 R14: 0000000000000004 R15: ffffc90000c77e40 [ 333.453432][ C0] ? __se_sys_futex+0xc9/0x310 [ 333.458196][ C0] __se_sys_futex+0xc9/0x310 [ 333.462783][ C0] ? sched_clock+0x9/0x10 [ 333.467112][ C0] ? __x64_sys_futex+0x100/0x100 [ 333.472044][ C0] ? irqentry_exit+0x37/0x40 [ 333.476661][ C0] __x64_sys_futex+0xe5/0x100 [ 333.481349][ C0] x64_sys_call+0x7ec/0x9a0 [ 333.485852][ C0] do_syscall_64+0x4c/0xa0 [ 333.490272][ C0] ? clear_bhb_loop+0x30/0x80 [ 333.494955][ C0] ? clear_bhb_loop+0x30/0x80 [ 333.499640][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.505532][ C0] RIP: 0033:0x7facd4d9cdd9 [ 333.509946][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.529544][ C0] RSP: 002b:00007ffc3caf6b48 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 333.537962][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007facd4d9cdd9 [ 333.545964][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007facd5015fac [ 333.553947][ C0] RBP: 000000000000139b R08: 0033129d0da8fe98 R09: 0000000000000000 [ 333.561917][ C0] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 333.569889][ C0] R13: 00007facd5015fac R14: 00007facd5015fa8 R15: 00007facd5015fa0 [ 333.577857][ C0] [ 333.580873][ C0] CPU: 0 PID: 436 Comm: syz.8.26 Not tainted syzkaller #0 [ 333.587975][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 333.598029][ C0] RIP: 0010:should_fail_ex+0x55/0x520 [ 333.603397][ C0] Code: a9 00 01 ff 00 0f 84 fa 00 00 00 4c 89 f3 48 c1 eb 03 80 3c 13 00 74 0e 4c 89 f7 49 89 d4 e8 c2 89 2a ff 4c 89 e2 49 83 3e 00 <0f> 84 20 01 00 00 4d 8d 66 20 4c 89 e0 48 c1 e8 03 0f b6 04 10 84 [ 333.623004][ C0] RSP: 0018:ffffc900000076c8 EFLAGS: 00000246 [ 333.629066][ C0] RAX: 0000000000000100 RBX: 1ffffffff0e4d4d4 RCX: 0000000000000002 [ 333.637030][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffffff8726a6a0 [ 333.644999][ C0] RBP: ffffc90000007710 R08: ffffc90000007838 R09: ffffc9000000783c [ 333.652963][ C0] R10: dffffc0000000000 R11: fffff52000000f15 R12: 00000000000d2a20 [ 333.660937][ C0] R13: ffffc90000007898 R14: ffffffff8726a6a0 R15: 0000000000000004 [ 333.668909][ C0] FS: 00005555826b4500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 333.677834][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.684413][ C0] CR2: 000000000000139b CR3: 000000011de54000 CR4: 00000000003506b0 [ 333.692383][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 333.700353][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 333.708335][ C0] Call Trace: [ 333.711609][ C0] [ 333.714455][ C0] should_fail_alloc_page+0x61/0x90 [ 333.719674][ C0] prepare_alloc_pages+0x148/0x600 [ 333.724795][ C0] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 333.730014][ C0] ? sched_clock_cpu+0x6e/0x260 [ 333.734871][ C0] ? perf_trace_x86_irq_vector+0x233/0x2c0 [ 333.740684][ C0] __alloc_pages+0x15b/0x610 [ 333.745274][ C0] ? __cfi___alloc_pages+0x10/0x10 [ 333.750383][ C0] ? __irq_exit_rcu+0x5e/0xf0 [ 333.755063][ C0] ? irqentry_exit+0x37/0x40 [ 333.759652][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 333.765810][ C0] alloc_slab_page+0x6e/0xf0 [ 333.770398][ C0] new_slab+0x98/0x3d0 [ 333.774462][ C0] ___slab_alloc+0x6bd/0xb20 [ 333.779052][ C0] ? ndisc_send_rs+0x304/0x870 [ 333.783815][ C0] __slab_alloc+0x5e/0xa0 [ 333.788158][ C0] ? ndisc_send_rs+0x304/0x870 [ 333.792919][ C0] ? ndisc_send_rs+0x304/0x870 [ 333.797685][ C0] __kmem_cache_alloc_node+0x203/0x2c0 [ 333.803179][ C0] ? ndisc_send_rs+0x304/0x870 [ 333.807959][ C0] ? ndisc_send_rs+0x304/0x870 [ 333.812732][ C0] __kmalloc_node_track_caller+0xa0/0x1e0 [ 333.818453][ C0] ? ndisc_send_rs+0x304/0x870 [ 333.823221][ C0] __alloc_skb+0x236/0x4b0 [ 333.827629][ C0] ndisc_send_rs+0x304/0x870 [ 333.832220][ C0] addrconf_rs_timer+0x2cf/0x610 [ 333.837158][ C0] ? __irq_exit_rcu+0x5e/0xf0 [ 333.841843][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 333.847304][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 333.852759][ C0] call_timer_fn+0x46/0x2a0 [ 333.857263][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 333.862723][ C0] __run_timers+0x65b/0x9f0 [ 333.867227][ C0] ? calc_index+0x200/0x200 [ 333.871726][ C0] ? __irq_exit_rcu+0x5e/0xf0 [ 333.876398][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 333.882553][ C0] run_timer_softirq+0x6a/0xf0 [ 333.887316][ C0] handle_softirqs+0x1d7/0x600 [ 333.892081][ C0] __irq_exit_rcu+0x52/0xf0 [ 333.896579][ C0] irq_exit_rcu+0x9/0x10 [ 333.900818][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 333.906459][ C0] [ 333.909400][ C0] [ 333.912327][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 333.918315][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x36/0x80 [ 333.925174][ C0] Code: a0 f2 90 7e 65 8b 15 a1 f2 90 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 6c 0b 00 00 00 74 4e 8b 91 48 0b 00 00 <83> fa 03 75 43 48 8b 91 50 0b 00 00 44 8b 89 4c 0b 00 00 49 c1 e1 [ 333.944779][ C0] RSP: 0018:ffffc90000c77db0 EFLAGS: 00000246 [ 333.950849][ C0] RAX: ffffffff81674c29 RBX: 0000000000000004 RCX: ffff88811e531440 [ 333.958834][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 333.966813][ C0] RBP: ffffc90000c77db0 R08: ffffc90000c77e4f R09: ffffc90000c77e40 [ 333.974874][ C0] R10: dffffc0000000000 R11: fffff5200018efca R12: 0000000000000081 [ 333.982842][ C0] R13: 1ffff9200018efc0 R14: 0000000000000004 R15: ffffc90000c77e40 [ 333.990809][ C0] ? __se_sys_futex+0xc9/0x310 [ 333.995570][ C0] __se_sys_futex+0xc9/0x310 [ 334.000155][ C0] ? sched_clock+0x9/0x10 [ 334.004486][ C0] ? __x64_sys_futex+0x100/0x100 [ 334.009415][ C0] ? irqentry_exit+0x37/0x40 [ 334.014006][ C0] __x64_sys_futex+0xe5/0x100 [ 334.018677][ C0] x64_sys_call+0x7ec/0x9a0 [ 334.023173][ C0] do_syscall_64+0x4c/0xa0 [ 334.027585][ C0] ? clear_bhb_loop+0x30/0x80 [ 334.032267][ C0] ? clear_bhb_loop+0x30/0x80 [ 334.036964][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.042885][ C0] RIP: 0033:0x7facd4d9cdd9 [ 334.047294][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.066890][ C0] RSP: 002b:00007ffc3caf6b48 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 334.075299][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007facd4d9cdd9 [ 334.083263][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007facd5015fac [ 334.091226][ C0] RBP: 000000000000139b R08: 0033129d0da8fe98 R09: 0000000000000000 [ 334.099199][ C0] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 334.107174][ C0] R13: 00007facd5015fac R14: 00007facd5015fa8 R15: 00007facd5015fa0 [ 334.115155][ C0] [ 334.118182][ C0] Sending NMI from CPU 0 to CPUs 1: [ 334.123393][ C1] NMI backtrace for cpu 1 [ 334.123408][ C1] CPU: 1 PID: 437 Comm: syz.6.30 Not tainted syzkaller #0 [ 334.123422][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 334.123430][ C1] RIP: 0010:check_preemption_disabled+0x3b/0x120 [ 334.123452][ C1] Code: 8b 04 25 28 00 00 00 48 89 45 d8 65 8b 05 8d b8 06 7b 65 8b 0d ee 14 07 7b f7 c1 ff ff ff 7f 74 20 65 48 8b 0c 25 28 00 00 00 <48> 3b 4d d8 0f 85 cb 00 00 00 48 83 c4 10 5b 41 5c 41 5e 41 5f 5d [ 334.123463][ C1] RSP: 0018:ffffc900001b0270 EFLAGS: 00000002 [ 334.123477][ C1] RAX: 0000000000000001 RBX: ffffffff866d5b50 RCX: 348145d4fc290000 [ 334.123487][ C1] RDX: 0000000000000000 RSI: ffffffff85ca8a80 RDI: ffffffff85ca8a40 [ 334.123497][ C1] RBP: ffffc900001b02a0 R08: ffffffff87b73048 R09: ffffffff87b73058 [ 334.123508][ C1] R10: 0000000000000000 R11: ffffffff8134bff0 R12: 0000000000000000 [ 334.123517][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 334.123526][ C1] FS: 0000555590823500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 334.123539][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 334.123550][ C1] CR2: 0000000000038da0 CR3: 000000011e5c3000 CR4: 00000000003506a0 [ 334.123562][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 334.123570][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 334.123580][ C1] Call Trace: [ 334.123584][ C1] [ 334.123589][ C1] debug_smp_processor_id+0x17/0x20 [ 334.123603][ C1] __sysvec_apic_timer_interrupt+0xa2/0x440 [ 334.123624][ C1] sysvec_apic_timer_interrupt+0x53/0xc0 [ 334.123643][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 334.123662][ C1] RIP: 0010:netlink_broadcast+0xf2/0x1180 [ 334.123683][ C1] Code: 0f b6 04 38 84 c0 0f 85 81 10 00 00 0f b7 03 48 69 c0 f0 00 00 00 49 8d 9c 06 a8 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 <74> 08 48 89 df e8 b4 6a a1 fd 48 8b 1b 48 85 db 0f 95 c0 48 83 c3 [ 334.123694][ C1] RSP: 0018:ffffc900001b03c0 EFLAGS: 00000246 [ 334.123705][ C1] RAX: 1ffff110211ad015 RBX: ffff888108d680a8 RCX: 0000000000000300 [ 334.123715][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000ffffffff [ 334.123724][ C1] RBP: ffffc900001b0498 R08: ffffffff87c2a0c3 R09: 1ffffffff0f85418 [ 334.123734][ C1] R10: dffffc0000000000 R11: fffffbfff0f85419 R12: dffffc0000000000 [ 334.123745][ C1] R13: 0000000000000003 R14: ffff888108d68000 R15: dffffc0000000000 [ 334.123758][ C1] ? neigh_stat_seq_show+0x2b0/0x2b0 [ 334.123780][ C1] nlmsg_notify+0xe6/0x1a0 [ 334.123799][ C1] rtnl_notify+0x9a/0xc0 [ 334.123813][ C1] __neigh_notify+0xd3/0x130 [ 334.123831][ C1] neigh_cleanup_and_release+0x2c/0x1a0 [ 334.123849][ C1] neigh_remove_one+0x4b5/0x540 [ 334.123865][ C1] ___neigh_create+0x48b/0x1e20 [ 334.123884][ C1] __neigh_create+0x31/0x40 [ 334.123900][ C1] ip6_finish_output2+0xa56/0x18a0 [ 334.123920][ C1] ? __cfi_ip6_finish_output2+0x10/0x10 [ 334.123937][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 334.123955][ C1] ip6_finish_output+0x5f9/0xbb0 [ 334.123971][ C1] ip6_output+0x1fa/0x410 [ 334.123986][ C1] ? __cfi_ip6_output+0x10/0x10 [ 334.124000][ C1] ? __cfi_ip6_finish_output+0x10/0x10 [ 334.124023][ C1] ndisc_send_skb+0x7dc/0xcc0 [ 334.124044][ C1] ? __cfi_ndisc_send_skb+0x10/0x10 [ 334.124063][ C1] ? __cfi_dst_output+0x10/0x10 [ 334.124080][ C1] ? __irq_exit_rcu+0x5e/0xf0 [ 334.124099][ C1] ndisc_send_rs+0x670/0x870 [ 334.124119][ C1] addrconf_rs_timer+0x2cf/0x610 [ 334.124133][ C1] ? __irq_exit_rcu+0x5e/0xf0 [ 334.124148][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 334.124164][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 334.124178][ C1] call_timer_fn+0x46/0x2a0 [ 334.124195][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 334.124209][ C1] __run_timers+0x65b/0x9f0 [ 334.124228][ C1] ? calc_index+0x200/0x200 [ 334.124245][ C1] ? __irq_exit_rcu+0x5e/0xf0 [ 334.124259][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 334.124280][ C1] run_timer_softirq+0x6a/0xf0 [ 334.124296][ C1] handle_softirqs+0x1d7/0x600 [ 334.124311][ C1] ? irqtime_account_irq+0xc4/0x240 [ 334.124330][ C1] __irq_exit_rcu+0x52/0xf0 [ 334.124344][ C1] irq_exit_rcu+0x9/0x10 [ 334.124357][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 334.124376][ C1] [ 334.124380][ C1] [ 334.124384][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 334.124403][ C1] RIP: 0010:__schedule+0x11d/0x1500 [ 334.124419][ C1] Code: 74 08 4c 89 f7 e8 e3 88 b6 fc 4d 8b 36 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ca 88 b6 fc 49 81 3e 9d 6e ac 57 <0f> 85 6f 0c 00 00 65 8b 05 1e e5 01 7b 25 ff ff ff 7f 83 f8 01 0f [ 334.124430][ C1] RSP: 0018:ffffc90000c67680 EFLAGS: 00000246 [ 334.124441][ C1] RAX: 1ffff9200018c000 RBX: ffff8881f6f00000 RCX: 348145d4fc290000 [ 334.124452][ C1] RDX: 1ffffffff0f6e608 RSI: ffffffff85ca8a80 RDI: ffffffff85ca8a40 [ 334.124462][ C1] RBP: ffffc90000c67790 R08: ffffffff87b73048 R09: ffffffff87b73058 [ 334.124473][ C1] R10: ffffffff87b73043 R11: 1ffffffff0f6e608 R12: dffffc0000000000 [ 334.124483][ C1] R13: ffff88811e535100 R14: ffffc90000c60000 R15: ffff8881f6f38820 [ 334.124497][ C1] ? irqentry_exit+0x37/0x40 [ 334.124516][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 334.124535][ C1] ? release_firmware_map_entry+0x190/0x190 [ 334.124553][ C1] preempt_schedule_irq+0xaa/0x120 [ 334.124569][ C1] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 334.124586][ C1] raw_irqentry_exit_cond_resched+0x29/0x30 [ 334.124601][ C1] irqentry_exit+0x37/0x40 [ 334.124619][ C1] sysvec_apic_timer_interrupt+0x64/0xc0 [ 334.124638][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 334.124655][ C1] RIP: 0010:stack_trace_consume_entry+0x6/0x290 [ 334.124674][ C1] Code: 4c 24 78 75 09 48 8d 65 f0 5b 41 5e 5d c3 e8 31 3f 99 03 90 90 90 90 90 90 90 90 90 90 90 90 b8 b6 63 6b ad 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 48 83 ec 20 48 ba 00 00 00 00 00 fc ff df 4c [ 334.124685][ C1] RSP: 0018:ffffc90000c67910 EFLAGS: 00000257 [ 334.124695][ C1] RAX: ffffffff81620ff6 RBX: ffffc90000c679e0 RCX: 1ffff9200018cf00 [ 334.124706][ C1] RDX: ffffc90000c67901 RSI: ffffffff81620ff6 RDI: ffffc90000c679e0 [ 334.124716][ C1] RBP: ffffc90000c67918 R08: ffffc90000c67901 R09: ffffc90000c67928 [ 334.124727][ C1] R10: 0000000000000000 R11: fffff5200018cf31 R12: ffff88811e535100 [ 334.124736][ C1] R13: dffffc0000000000 R14: ffffffff81621050 R15: ffffc90000c67928 [ 334.124747][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 334.124766][ C1] ? stack_trace_save+0xa6/0xf0 [ 334.124782][ C1] ? stack_trace_save+0xa6/0xf0 [ 334.124799][ C1] arch_stack_walk+0x118/0x150 [ 334.124819][ C1] ? stack_trace_save+0xa6/0xf0 [ 334.124836][ C1] stack_trace_save+0xa6/0xf0 [ 334.124853][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 334.124870][ C1] ? memset+0x35/0x40 [ 334.124884][ C1] kasan_save_stack+0x3a/0x60 [ 334.124907][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 334.124920][ C1] kasan_record_aux_stack+0xe/0x10 [ 334.124940][ C1] task_work_add+0x7f/0x330 [ 334.124956][ C1] ? __cfi_task_work_add+0x10/0x10 [ 334.124972][ C1] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 334.124992][ C1] fput+0xe1/0x1a0 [ 334.125012][ C1] filp_close+0x111/0x160 [ 334.125030][ C1] __close_range+0x3a3/0x500 [ 334.125045][ C1] ? __cfi___close_range+0x10/0x10 [ 334.125058][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 334.125078][ C1] __x64_sys_close_range+0x7a/0x90 [ 334.125096][ C1] x64_sys_call+0x43b/0x9a0 [ 334.125112][ C1] do_syscall_64+0x4c/0xa0 [ 334.125126][ C1] ? clear_bhb_loop+0x30/0x80 [ 334.125143][ C1] ? clear_bhb_loop+0x30/0x80 [ 334.125161][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.125179][ C1] RIP: 0033:0x7f7f9779cdd9 [ 334.125190][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.125201][ C1] RSP: 002b:00007fff380f69b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 334.125219][ C1] RAX: ffffffffffffffda RBX: 00007fff380f6aa0 RCX: 00007f7f9779cdd9 [ 334.125229][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 334.125237][ C1] RBP: 0000000000038da0 R08: 0000000000000001 R09: 0000000000000000 [ 334.125246][ C1] R10: 0000001b2da20000 R11: 0000000000000246 R12: 0000000000000000 [ 334.125255][ C1] R13: 00007f7f97a15fac R14: 00007f7f97a15fa8 R15: 00007f7f97a15fa0 [ 334.125267][ C1] [ 485.084498][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 237s! [syz.6.30:437] [ 485.092566][ C1] Modules linked in: [ 485.096458][ C1] CPU: 1 PID: 437 Comm: syz.6.30 Not tainted syzkaller #0 [ 485.103556][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 485.113604][ C1] RIP: 0010:update_stack_state+0x189/0x480 [ 485.119413][ C1] Code: 48 8b 8d 60 ff ff ff e8 65 b7 f7 ff 85 c0 0f 85 2f 01 00 00 48 8b 85 40 ff ff ff 42 80 3c 28 00 74 08 4c 89 f7 e8 b7 5e 81 00 <4d> 8b 3e 48 8b 85 48 ff ff ff 42 80 3c 28 00 74 0c 48 8b bd 70 ff [ 485.139013][ C1] RSP: 0018:ffffc900001afd78 EFLAGS: 00000246 [ 485.145079][ C1] RAX: 1ffff92000035fda RBX: ffffc900001afec8 RCX: 1ffff92000035fdb [ 485.153046][ C1] RDX: 1ffff92000035fdc RSI: 1ffff92000035fda RDI: ffffc900001aff20 [ 485.161010][ C1] RBP: ffffc900001afe38 R08: ffffc900001aff90 R09: ffffc900001aff88 [ 485.168979][ C1] R10: 0000000000000016 R11: fffff52000035fe5 R12: 0000000000000000 [ 485.176948][ C1] R13: dffffc0000000000 R14: ffffc900001afed0 R15: ffffc900001b0d70 [ 485.184914][ C1] FS: 0000555590823500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 485.193841][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 485.200433][ C1] CR2: 0000000000038da0 CR3: 000000011e5c3000 CR4: 00000000003506a0 [ 485.208403][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 485.216367][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 485.224338][ C1] Call Trace: [ 485.227609][ C1] [ 485.230448][ C1] unwind_next_frame+0x3d5/0x700 [ 485.235388][ C1] ? __kernel_text_address+0xd/0x30 [ 485.240587][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 485.246746][ C1] arch_stack_walk+0x124/0x150 [ 485.251522][ C1] ? call_timer_fn+0x46/0x2a0 [ 485.256196][ C1] stack_trace_save+0xa6/0xf0 [ 485.260866][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 485.266246][ C1] ? memset+0x35/0x40 [ 485.270218][ C1] kasan_set_track+0x4b/0x70 [ 485.274810][ C1] ? kasan_set_track+0x4b/0x70 [ 485.279566][ C1] ? kasan_save_free_info+0x31/0x50 [ 485.284753][ C1] ? ____kasan_slab_free+0x132/0x180 [ 485.290034][ C1] ? __kasan_slab_free+0x11/0x20 [ 485.294966][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 485.300503][ C1] ? kmem_cache_free+0x12d/0x300 [ 485.305445][ C1] ? kfree_skbmem+0x10c/0x180 [ 485.310112][ C1] ? consume_skb+0xb3/0x1f0 [ 485.314606][ C1] ? netlink_broadcast+0x1084/0x1180 [ 485.319887][ C1] ? nlmsg_notify+0xe6/0x1a0 [ 485.324475][ C1] ? rtnl_notify+0x9a/0xc0 [ 485.328890][ C1] ? __neigh_notify+0xd3/0x130 [ 485.333647][ C1] ? neigh_cleanup_and_release+0x2c/0x1a0 [ 485.339451][ C1] ? neigh_remove_one+0x4b5/0x540 [ 485.344473][ C1] ? ___neigh_create+0x48b/0x1e20 [ 485.349494][ C1] ? __neigh_create+0x31/0x40 [ 485.354169][ C1] ? ip6_finish_output2+0xa56/0x18a0 [ 485.359450][ C1] ? ip6_finish_output+0x5f9/0xbb0 [ 485.364554][ C1] ? ip6_output+0x1fa/0x410 [ 485.369050][ C1] ? ndisc_send_skb+0x7dc/0xcc0 [ 485.373898][ C1] ? ndisc_send_rs+0x670/0x870 [ 485.378661][ C1] ? addrconf_rs_timer+0x2cf/0x610 [ 485.383771][ C1] ? call_timer_fn+0x46/0x2a0 [ 485.388453][ C1] ? kmem_cache_free+0x12d/0x300 [ 485.393385][ C1] kasan_save_free_info+0x31/0x50 [ 485.398403][ C1] ____kasan_slab_free+0x132/0x180 [ 485.403517][ C1] __kasan_slab_free+0x11/0x20 [ 485.408277][ C1] slab_free_freelist_hook+0xc2/0x190 [ 485.413660][ C1] ? kfree_skbmem+0x10c/0x180 [ 485.418328][ C1] kmem_cache_free+0x12d/0x300 [ 485.423087][ C1] kfree_skbmem+0x10c/0x180 [ 485.427588][ C1] consume_skb+0xb3/0x1f0 [ 485.431909][ C1] netlink_broadcast+0x1084/0x1180 [ 485.437028][ C1] nlmsg_notify+0xe6/0x1a0 [ 485.441445][ C1] rtnl_notify+0x9a/0xc0 [ 485.445684][ C1] __neigh_notify+0xd3/0x130 [ 485.450270][ C1] neigh_cleanup_and_release+0x2c/0x1a0 [ 485.455814][ C1] neigh_remove_one+0x4b5/0x540 [ 485.460670][ C1] ___neigh_create+0x48b/0x1e20 [ 485.465525][ C1] __neigh_create+0x31/0x40 [ 485.470022][ C1] ip6_finish_output2+0xa56/0x18a0 [ 485.475130][ C1] ? __cfi_ip6_finish_output2+0x10/0x10 [ 485.480674][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 485.485954][ C1] ip6_finish_output+0x5f9/0xbb0 [ 485.490889][ C1] ip6_output+0x1fa/0x410 [ 485.495222][ C1] ? __cfi_ip6_output+0x10/0x10 [ 485.500067][ C1] ? __cfi_ip6_finish_output+0x10/0x10 [ 485.505524][ C1] ndisc_send_skb+0x7dc/0xcc0 [ 485.510204][ C1] ? __cfi_ndisc_send_skb+0x10/0x10 [ 485.515398][ C1] ? __cfi_dst_output+0x10/0x10 [ 485.520253][ C1] ? __irq_exit_rcu+0x5e/0xf0 [ 485.524927][ C1] ndisc_send_rs+0x670/0x870 [ 485.529515][ C1] addrconf_rs_timer+0x2cf/0x610 [ 485.534449][ C1] ? __irq_exit_rcu+0x5e/0xf0 [ 485.539125][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 485.544579][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 485.550032][ C1] call_timer_fn+0x46/0x2a0 [ 485.554529][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 485.559979][ C1] __run_timers+0x65b/0x9f0 [ 485.564484][ C1] ? calc_index+0x200/0x200 [ 485.568986][ C1] ? __irq_exit_rcu+0x5e/0xf0 [ 485.573661][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 485.579816][ C1] run_timer_softirq+0x6a/0xf0 [ 485.584577][ C1] handle_softirqs+0x1d7/0x600 [ 485.589351][ C1] ? irqtime_account_irq+0xc4/0x240 [ 485.594548][ C1] __irq_exit_rcu+0x52/0xf0 [ 485.599043][ C1] irq_exit_rcu+0x9/0x10 [ 485.603277][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 485.608913][ C1] [ 485.611837][ C1] [ 485.614755][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 485.620733][ C1] RIP: 0010:__schedule+0x11d/0x1500 [ 485.625931][ C1] Code: 74 08 4c 89 f7 e8 e3 88 b6 fc 4d 8b 36 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ca 88 b6 fc 49 81 3e 9d 6e ac 57 <0f> 85 6f 0c 00 00 65 8b 05 1e e5 01 7b 25 ff ff ff 7f 83 f8 01 0f [ 485.645530][ C1] RSP: 0018:ffffc90000c67680 EFLAGS: 00000246 [ 485.651593][ C1] RAX: 1ffff9200018c000 RBX: ffff8881f6f00000 RCX: 348145d4fc290000 [ 485.659560][ C1] RDX: 1ffffffff0f6e608 RSI: ffffffff85ca8a80 RDI: ffffffff85ca8a40 [ 485.667527][ C1] RBP: ffffc90000c67790 R08: ffffffff87b73048 R09: ffffffff87b73058 [ 485.675497][ C1] R10: ffffffff87b73043 R11: 1ffffffff0f6e608 R12: dffffc0000000000 [ 485.683466][ C1] R13: ffff88811e535100 R14: ffffc90000c60000 R15: ffff8881f6f38820 [ 485.691442][ C1] ? irqentry_exit+0x37/0x40 [ 485.696040][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 485.702196][ C1] ? release_firmware_map_entry+0x190/0x190 [ 485.708087][ C1] preempt_schedule_irq+0xaa/0x120 [ 485.713191][ C1] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 485.718911][ C1] raw_irqentry_exit_cond_resched+0x29/0x30 [ 485.724800][ C1] irqentry_exit+0x37/0x40 [ 485.729222][ C1] sysvec_apic_timer_interrupt+0x64/0xc0 [ 485.734853][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 485.740829][ C1] RIP: 0010:stack_trace_consume_entry+0x6/0x290 [ 485.747075][ C1] Code: 4c 24 78 75 09 48 8d 65 f0 5b 41 5e 5d c3 e8 31 3f 99 03 90 90 90 90 90 90 90 90 90 90 90 90 b8 b6 63 6b ad 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 48 83 ec 20 48 ba 00 00 00 00 00 fc ff df 4c [ 485.766674][ C1] RSP: 0018:ffffc90000c67910 EFLAGS: 00000257 [ 485.772738][ C1] RAX: ffffffff81620ff6 RBX: ffffc90000c679e0 RCX: 1ffff9200018cf00 [ 485.780705][ C1] RDX: ffffc90000c67901 RSI: ffffffff81620ff6 RDI: ffffc90000c679e0 [ 485.788668][ C1] RBP: ffffc90000c67918 R08: ffffc90000c67901 R09: ffffc90000c67928 [ 485.796640][ C1] R10: 0000000000000000 R11: fffff5200018cf31 R12: ffff88811e535100 [ 485.804604][ C1] R13: dffffc0000000000 R14: ffffffff81621050 R15: ffffc90000c67928 [ 485.812566][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 485.818718][ C1] ? stack_trace_save+0xa6/0xf0 [ 485.823565][ C1] ? stack_trace_save+0xa6/0xf0 [ 485.828409][ C1] arch_stack_walk+0x118/0x150 [ 485.833175][ C1] ? stack_trace_save+0xa6/0xf0 [ 485.838021][ C1] stack_trace_save+0xa6/0xf0 [ 485.842697][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 485.848069][ C1] ? memset+0x35/0x40 [ 485.852041][ C1] kasan_save_stack+0x3a/0x60 [ 485.856720][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 485.862085][ C1] kasan_record_aux_stack+0xe/0x10 [ 485.867203][ C1] task_work_add+0x7f/0x330 [ 485.871705][ C1] ? __cfi_task_work_add+0x10/0x10 [ 485.876809][ C1] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 485.882614][ C1] fput+0xe1/0x1a0 [ 485.886339][ C1] filp_close+0x111/0x160 [ 485.890671][ C1] __close_range+0x3a3/0x500 [ 485.895254][ C1] ? __cfi___close_range+0x10/0x10 [ 485.900359][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 485.906511][ C1] __x64_sys_close_range+0x7a/0x90 [ 485.911631][ C1] x64_sys_call+0x43b/0x9a0 [ 485.916131][ C1] do_syscall_64+0x4c/0xa0 [ 485.920542][ C1] ? clear_bhb_loop+0x30/0x80 [ 485.925215][ C1] ? clear_bhb_loop+0x30/0x80 [ 485.929890][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.935779][ C1] RIP: 0033:0x7f7f9779cdd9 [ 485.940185][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.959785][ C1] RSP: 002b:00007fff380f69b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 485.968195][ C1] RAX: ffffffffffffffda RBX: 00007fff380f6aa0 RCX: 00007f7f9779cdd9 [ 485.976157][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 485.984118][ C1] RBP: 0000000000038da0 R08: 0000000000000001 R09: 0000000000000000 [ 485.992084][ C1] R10: 0000001b2da20000 R11: 0000000000000246 R12: 0000000000000000 [ 486.000046][ C1] R13: 00007f7f97a15fac R14: 00007f7f97a15fa8 R15: 00007f7f97a15fa0 [ 486.008015][ C1] [ 486.011028][ C1] Sending NMI from CPU 1 to CPUs 0: [ 486.016225][ C0] NMI backtrace for cpu 0 [ 486.016236][ C0] CPU: 0 PID: 436 Comm: syz.8.26 Not tainted syzkaller #0 [ 486.016250][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 486.016257][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x1f/0x60 [ 486.016282][ C0] Code: 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 48 8b 45 08 65 48 8b 0d 60 f7 90 7e 65 8b 15 61 f7 90 7e 81 e2 00 01 ff 00 74 11 <81> fa 00 01 00 00 75 35 83 b9 6c 0b 00 00 00 74 2c 8b 91 48 0b 00 [ 486.016294][ C0] RSP: 0018:ffffc90000006bd8 EFLAGS: 00000006 [ 486.016306][ C0] RAX: ffffffff8196f7ea RBX: 0000000000000000 RCX: ffff88811e531440 [ 486.016317][ C0] RDX: 0000000000010100 RSI: 0000000000000000 RDI: 0000000000000000 [ 486.016325][ C0] RBP: ffffc90000006bd8 R08: ffffc90000006d97 R09: ffffc90000006d60 [ 486.016336][ C0] R10: 0000000000000000 R11: ffffffff810a7780 R12: dffffc0000000000 [ 486.016346][ C0] R13: ffffc90000007000 R14: 000000000000a020 R15: ffff888123905c20 [ 486.016356][ C0] FS: 00005555826b4500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 486.016369][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.016379][ C0] CR2: 000000000000139b CR3: 000000011de54000 CR4: 00000000003506b0 [ 486.016392][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 486.016400][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 486.016409][ C0] Call Trace: [ 486.016413][ C0] [ 486.016418][ C0] __perf_event_header__init_id+0x2ba/0x550 [ 486.016437][ C0] perf_prepare_sample+0x18b/0x1d40 [ 486.016453][ C0] ? perf_callchain_user+0x761/0xf50 [ 486.016474][ C0] ? __cfi_perf_output_begin_forward+0x10/0x10 [ 486.016494][ C0] ? __cfi_perf_prepare_sample+0x10/0x10 [ 486.016510][ C0] ? debug_smp_processor_id+0x17/0x20 [ 486.016524][ C0] ? get_perf_callchain+0x3c8/0x490 [ 486.016544][ C0] perf_event_output_forward+0xd1/0x1a0 [ 486.016561][ C0] ? __cfi_perf_event_output_forward+0x10/0x10 [ 486.016578][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 486.016598][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 486.016611][ C0] ? __perf_event_account_interrupt+0x1a4/0x2c0 [ 486.016630][ C0] __perf_event_overflow+0x437/0x620 [ 486.016649][ C0] perf_swevent_event+0x243/0x440 [ 486.016667][ C0] ? perf_tp_event+0xa20/0xa20 [ 486.016684][ C0] ? __cfi_perf_swevent_hrtimer+0x10/0x10 [ 486.016709][ C0] perf_tp_event+0x75b/0xa20 [ 486.016727][ C0] ? __cfi_perf_tp_event+0x10/0x10 [ 486.016750][ C0] ? ktime_get+0x141/0x170 [ 486.016763][ C0] ? lapic_next_event+0x70/0x80 [ 486.016781][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 486.016800][ C0] perf_trace_x86_irq_vector+0x233/0x2c0 [ 486.016821][ C0] ? __cfi_perf_trace_x86_irq_vector+0x10/0x10 [ 486.016841][ C0] __sysvec_apic_timer_interrupt+0x421/0x440 [ 486.016860][ C0] sysvec_apic_timer_interrupt+0x53/0xc0 [ 486.016879][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 486.016898][ C0] RIP: 0010:queued_write_lock_slowpath+0x12e/0x3ad [ 486.016917][ C0] Code: f0 41 81 0f 00 01 00 00 42 0f b6 04 23 84 c0 74 37 44 89 f9 80 e1 07 80 c1 03 38 c1 7c 2a 4c 89 ff e8 c6 dd b4 fc eb 20 f3 90 <42> 0f b6 04 23 84 c0 74 15 44 89 f9 80 e1 07 80 c1 03 38 c1 7c 08 [ 486.016927][ C0] RSP: 0018:ffffc90000007480 EFLAGS: 00000206 [ 486.016939][ C0] RAX: 00000000000001ff RBX: 1ffffffff0f005ae RCX: ffffffff85023344 [ 486.016949][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff87802d70 [ 486.016958][ C0] RBP: ffffc90000007530 R08: ffffffff87802d73 R09: 1ffffffff0f005ae [ 486.016968][ C0] R10: dffffc0000000000 R11: fffffbfff0f005af R12: dffffc0000000000 [ 486.016978][ C0] R13: 1ffff92000000e94 R14: ffffc900000074d0 R15: ffffffff87802d70 [ 486.016990][ C0] ? queued_write_lock_slowpath+0x104/0x3ad [ 486.017009][ C0] ? debug_smp_processor_id+0x17/0x20 [ 486.017022][ C0] ? __cfi_queued_write_lock_slowpath+0x10/0x10 [ 486.017040][ C0] ? __irq_exit_rcu+0x5e/0xf0 [ 486.017055][ C0] _raw_write_lock_bh+0xe2/0xf0 [ 486.017071][ C0] ? __cfi__raw_write_lock_bh+0x10/0x10 [ 486.017087][ C0] ? __cfi_read_tsc+0x10/0x10 [ 486.017105][ C0] ___neigh_create+0x214/0x1e20 [ 486.017123][ C0] ? irqentry_exit+0x37/0x40 [ 486.017141][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 486.017161][ C0] __neigh_create+0x31/0x40 [ 486.017177][ C0] ip6_finish_output2+0xa56/0x18a0 [ 486.017195][ C0] ? debug_smp_processor_id+0x17/0x20 [ 486.017209][ C0] ? __cfi_ip6_finish_output2+0x10/0x10 [ 486.017226][ C0] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 486.017244][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 486.017263][ C0] ? __cfi_ip6_mtu+0x10/0x10 [ 486.017278][ C0] ip6_finish_output+0x5f9/0xbb0 [ 486.017294][ C0] ip6_output+0x1fa/0x410 [ 486.017309][ C0] ? __cfi_ip6_output+0x10/0x10 [ 486.017324][ C0] ? __cfi_ip6_finish_output+0x10/0x10 [ 486.017340][ C0] ndisc_send_skb+0x7dc/0xcc0 [ 486.017361][ C0] ? __cfi_ndisc_send_skb+0x10/0x10 [ 486.017379][ C0] ? __cfi_dst_output+0x10/0x10 [ 486.017396][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 486.017416][ C0] ? memcpy+0x56/0x70 [ 486.017430][ C0] ? __ndisc_fill_addr_option+0xde/0x130 [ 486.017449][ C0] ndisc_send_rs+0x670/0x870 [ 486.017469][ C0] addrconf_rs_timer+0x2cf/0x610 [ 486.017483][ C0] ? __irq_exit_rcu+0x5e/0xf0 [ 486.017498][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 486.017514][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 486.017528][ C0] call_timer_fn+0x46/0x2a0 [ 486.017544][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 486.017559][ C0] __run_timers+0x65b/0x9f0 [ 486.017578][ C0] ? calc_index+0x200/0x200 [ 486.017594][ C0] ? __irq_exit_rcu+0x5e/0xf0 [ 486.017609][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 486.017629][ C0] run_timer_softirq+0x6a/0xf0 [ 486.017645][ C0] handle_softirqs+0x1d7/0x600 [ 486.017662][ C0] __irq_exit_rcu+0x52/0xf0 [ 486.017677][ C0] irq_exit_rcu+0x9/0x10 [ 486.017690][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 486.017714][ C0] [ 486.017718][ C0] [ 486.017723][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 486.017741][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x36/0x80 [ 486.017763][ C0] Code: a0 f2 90 7e 65 8b 15 a1 f2 90 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 6c 0b 00 00 00 74 4e 8b 91 48 0b 00 00 <83> fa 03 75 43 48 8b 91 50 0b 00 00 44 8b 89 4c 0b 00 00 49 c1 e1 [ 486.017775][ C0] RSP: 0018:ffffc90000c77db0 EFLAGS: 00000246 [ 486.017786][ C0] RAX: ffffffff81674c29 RBX: 0000000000000004 RCX: ffff88811e531440 [ 486.017796][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 486.017805][ C0] RBP: ffffc90000c77db0 R08: ffffc90000c77e4f R09: ffffc90000c77e40 [ 486.017816][ C0] R10: dffffc0000000000 R11: fffff5200018efca R12: 0000000000000081 [ 486.017826][ C0] R13: 1ffff9200018efc0 R14: 0000000000000004 R15: ffffc90000c77e40 [ 486.017838][ C0] ? __se_sys_futex+0xc9/0x310 [ 486.017852][ C0] __se_sys_futex+0xc9/0x310 [ 486.017865][ C0] ? sched_clock+0x9/0x10 [ 486.017882][ C0] ? __x64_sys_futex+0x100/0x100 [ 486.017895][ C0] ? irqentry_exit+0x37/0x40 [ 486.017916][ C0] __x64_sys_futex+0xe5/0x100 [ 486.017929][ C0] x64_sys_call+0x7ec/0x9a0 [ 486.017945][ C0] do_syscall_64+0x4c/0xa0 [ 486.017959][ C0] ? clear_bhb_loop+0x30/0x80 [ 486.017977][ C0] ? clear_bhb_loop+0x30/0x80 [ 486.017995][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.018013][ C0] RIP: 0033:0x7facd4d9cdd9 [ 486.018025][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.018037][ C0] RSP: 002b:00007ffc3caf6b48 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 486.018051][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007facd4d9cdd9 [ 486.018061][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007facd5015fac [ 486.018070][ C0] RBP: 000000000000139b R08: 0033129d0da8fe98 R09: 0000000000000000 [ 486.018080][ C0] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 486.018089][ C0] R13: 00007facd5015fac R14: 00007facd5015fa8 R15: 00007facd5015fa0 [ 486.018102][ C0]