Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts.
2026/01/07 18:32:50 parsed 1 programs
[ 136.082774][ T5797] cgroup: Unknown subsys name 'net'
[ 136.254419][ T5797] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 138.066988][ T5797] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 141.120371][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 141.130431][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 141.140090][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 141.150605][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 141.161345][ T5832] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 141.169964][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 141.976804][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 141.985447][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 142.023238][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 142.031689][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 142.976703][ T5862] chnl_net:caif_netlink_parms(): no params data found
[ 143.081590][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[ 143.091674][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[ 143.099684][ T5862] bridge_slave_0: entered allmulticast mode
[ 143.108360][ T5862] bridge_slave_0: entered promiscuous mode
[ 143.119431][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[ 143.126966][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[ 143.134398][ T5862] bridge_slave_1: entered allmulticast mode
[ 143.141996][ T5862] bridge_slave_1: entered promiscuous mode
[ 143.181959][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 143.195034][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 143.247994][ T5862] team0: Port device team_slave_0 added
[ 143.257340][ T5862] team0: Port device team_slave_1 added
[ 143.294661][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 143.301657][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 143.327720][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 143.340949][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 143.348855][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 143.375005][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 143.420349][ T5862] hsr_slave_0: entered promiscuous mode
[ 143.427209][ T5862] hsr_slave_1: entered promiscuous mode
[ 143.628705][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 143.641558][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 143.664347][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 143.676045][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 143.725097][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[ 143.732723][ T5862] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 143.740917][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[ 143.748302][ T5862] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 143.825761][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[ 143.846143][ T42] bridge0: port 1(bridge_slave_0) entered disabled state
[ 143.856248][ T42] bridge0: port 2(bridge_slave_1) entered disabled state
[ 143.883822][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[ 143.901364][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state
[ 143.908568][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 143.925135][ T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 143.932429][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 144.184140][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 144.266428][ T5862] veth0_vlan: entered promiscuous mode
[ 144.295021][ T5862] veth1_vlan: entered promiscuous mode
[ 144.336505][ T5862] veth0_macvtap: entered promiscuous mode
[ 144.347109][ T5862] veth1_macvtap: entered promiscuous mode
[ 144.372568][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 144.390135][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 144.415338][ T5862] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 144.424707][ T5862] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 144.434482][ T5862] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 144.443439][ T5862] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 144.611001][ T5862] syz-executor (5862) used greatest stack depth: 20240 bytes left
[ 144.644136][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/01/07 18:33:02 executed programs: 0
[ 145.943356][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 145.951670][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 145.961451][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 145.970722][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 145.979253][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 145.987003][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 146.170967][ T5897] chnl_net:caif_netlink_parms(): no params data found
[ 146.248593][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state
[ 146.256009][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state
[ 146.264128][ T5897] bridge_slave_0: entered allmulticast mode
[ 146.271293][ T5897] bridge_slave_0: entered promiscuous mode
[ 146.279856][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state
[ 146.287727][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state
[ 146.295221][ T5897] bridge_slave_1: entered allmulticast mode
[ 146.302746][ T5897] bridge_slave_1: entered promiscuous mode
[ 146.339945][ T5897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 146.353353][ T5897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 146.389092][ T5897] team0: Port device team_slave_0 added
[ 146.398599][ T5897] team0: Port device team_slave_1 added
[ 146.429327][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 146.436434][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 146.462533][ T5897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 146.477654][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 146.484761][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 146.512429][ T5897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 146.559302][ T5897] hsr_slave_0: entered promiscuous mode
[ 146.566126][ T5897] hsr_slave_1: entered promiscuous mode
[ 146.574265][ T5897] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 146.582274][ T5897] Cannot create hsr debugfs directory
[ 147.198739][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 148.072995][ T5084] Bluetooth: hci0: command tx timeout
[ 149.416142][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 149.479143][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 150.153279][ T5084] Bluetooth: hci0: command tx timeout
[ 150.390514][ T5897] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 150.407369][ T5897] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 150.441874][ T5897] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 150.455924][ T5897] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 150.484845][ T11] hsr_slave_0: left promiscuous mode
[ 150.492033][ T11] hsr_slave_1: left promiscuous mode
[ 150.501983][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 150.509975][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 150.521871][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 150.531385][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 150.540034][ T11] bridge_slave_1: left allmulticast mode
[ 150.546302][ T11] bridge_slave_1: left promiscuous mode
[ 150.553137][ T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 150.567849][ T11] bridge_slave_0: left allmulticast mode
[ 150.575263][ T11] bridge_slave_0: left promiscuous mode
[ 150.581368][ T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 150.612136][ T11] veth1_macvtap: left promiscuous mode
[ 150.619253][ T11] veth0_macvtap: left promiscuous mode
[ 150.626014][ T11] veth1_vlan: left promiscuous mode
[ 150.631664][ T11] veth0_vlan: left promiscuous mode
[ 151.167741][ T11] team0 (unregistering): Port device team_slave_1 removed
[ 151.207320][ T11] team0 (unregistering): Port device team_slave_0 removed
[ 151.247373][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 151.287876][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 151.667802][ T11] bond0 (unregistering): Released all slaves
[ 151.838642][ T5897] 8021q: adding VLAN 0 to HW filter on device bond0
[ 151.870539][ T5897] 8021q: adding VLAN 0 to HW filter on device team0
[ 151.896389][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state
[ 151.903994][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 151.925998][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state
[ 151.933279][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 152.175408][ T5897] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 152.233144][ T5084] Bluetooth: hci0: command tx timeout
[ 152.245444][ T5897] veth0_vlan: entered promiscuous mode
[ 152.263293][ T5897] veth1_vlan: entered promiscuous mode
[ 152.320386][ T5897] veth0_macvtap: entered promiscuous mode
[ 152.332254][ T5897] veth1_macvtap: entered promiscuous mode
[ 152.351768][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 152.379261][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 152.391420][ T5897] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 152.400755][ T5897] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 152.415248][ T5897] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 152.424273][ T5897] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 152.530007][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 152.538310][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 152.596272][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 152.606486][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/01/07 18:33:09 executed programs: 2
[ 257.772171][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[ 257.779163][ C0] rcu: 0-...!: (10499 ticks this GP) idle=0d1c/1/0x4000000000000000 softirq=13314/13314 fqs=0
[ 257.790409][ C0] rcu: (t=10500 jiffies g=12777 q=22 ncpus=2)
[ 257.796623][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g12777 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[ 257.809529][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=4137
[ 257.817427][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g12777 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
[ 257.828926][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 257.839042][ C0] rcu: RCU grace-period kthread stack dump:
[ 257.845080][ C0] task:rcu_preempt state:I stack:26568 pid:17 ppid:2 flags:0x00004000
[ 257.854460][ C0] Call Trace:
[ 257.857784][ C0]
[ 257.860858][ C0] __schedule+0x14d2/0x44d0
[ 257.865550][ C0] ? preempt_schedule_thunk+0x1a/0x30
[ 257.871176][ C0] ? _raw_spin_unlock_irqrestore+0xfa/0x110
[ 257.877211][ C0] ? asan.module_dtor+0x20/0x20
[ 257.882126][ C0] ? enqueue_timer+0x225/0x530
[ 257.886953][ C0] ? __mod_timer+0x984/0xdb0
[ 257.891710][ C0] schedule+0xbd/0x170
[ 257.896447][ C0] schedule_timeout+0x160/0x280
[ 257.901367][ C0] ? console_conditional_schedule+0x40/0x40
[ 257.907426][ C0] ? update_process_times+0x1b0/0x1b0
[ 257.912961][ C0] ? prepare_to_swait_event+0x339/0x360
[ 257.918996][ C0] rcu_gp_fqs_loop+0x302/0x1560
[ 257.923903][ C0] ? rcu_gp_init+0x110e/0x1510
[ 257.928734][ C0] ? rcu_gp_kthread+0x380/0x380
[ 257.933648][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 257.939680][ C0] ? rcu_gp_init+0x1510/0x1510
[ 257.944587][ C0] ? rcu_gp_cleanup+0xb4c/0xca0
[ 257.949569][ C0] ? _raw_spin_unlock_irq+0x23/0x50
[ 257.954827][ C0] ? lockdep_hardirqs_on+0x98/0x150
[ 257.960175][ C0] rcu_gp_kthread+0x99/0x380
[ 257.964914][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 257.970084][ C0] ? __kthread_parkme+0x7a/0x1c0
[ 257.975075][ C0] ? __kthread_parkme+0x162/0x1c0
[ 257.980728][ C0] kthread+0x2fa/0x390
[ 257.984857][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 257.990118][ C0] ? kthread_blkcg+0xd0/0xd0
[ 257.994932][ C0] ret_from_fork+0x48/0x80
[ 257.999406][ C0] ? kthread_blkcg+0xd0/0xd0
[ 258.004051][ C0] ret_from_fork_asm+0x11/0x20
[ 258.008970][ C0]
[ 258.012050][ C0] rcu: Stack dump where RCU GP kthread last ran:
[ 258.018435][ C0] Sending NMI from CPU 0 to CPUs 1:
[ 258.023702][ C1] NMI backtrace for cpu 1
[ 258.023723][ C1] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0
[ 258.023739][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 258.023756][ C1] Workqueue: netns cleanup_net
[ 258.023776][ C1] RIP: 0010:__lock_acquire+0x12f1/0x7c80
[ 258.023798][ C1] Code: 48 89 df e8 91 ed 75 00 49 b8 00 00 00 00 00 fc ff df 48 83 3b 00 0f 84 a6 4b 00 00 49 c1 e4 20 48 8b 44 24 48 42 0f b6 04 00 <84> c0 0f 85 97 59 00 00 4d 09 f4 41 8b 07 89 c1 81 e1 00 80 04 00
[ 258.023811][ C1] RSP: 0018:ffffc900001f0860 EFLAGS: 00000006
[ 258.023823][ C1] RAX: 0000000000000000 RBX: ffffffff906fc4d0 RCX: ffffffff816710b0
[ 258.023835][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90d94500
[ 258.023845][ C1] RBP: ffffc900001f0aa8 R08: dffffc0000000000 R09: 1ffffffff21b28a0
[ 258.023857][ C1] R10: dffffc0000000000 R11: fffffbfff21b28a1 R12: 2f566e4e00000000
[ 258.023869][ C1] R13: ffff888019e7bc00 R14: 0000000045871fd7 R15: ffff888019e7c7f0
[ 258.023881][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 258.023894][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 258.023905][ C1] CR2: 0000200000003c80 CR3: 0000000076cbd000 CR4: 00000000003506e0
[ 258.023919][ C1] Call Trace:
[ 258.023927][ C1]
[ 258.023946][ C1] ? verify_lock_unused+0x140/0x140
[ 258.023984][ C1] ? debug_objects_fill_pool+0x73/0x6b0
[ 258.024020][ C1] lock_acquire+0x197/0x410
[ 258.024045][ C1] ? debug_object_activate+0x6c/0x4b0
[ 258.024081][ C1] ? debug_objects_fill_pool+0xb3/0x6b0
[ 258.024112][ C1] ? read_lock_is_recursive+0x20/0x20
[ 258.024141][ C1] ? debug_object_activate+0x4b0/0x4b0
[ 258.024176][ C1] _raw_spin_lock_irqsave+0xa8/0xf0
[ 258.024205][ C1] ? debug_object_activate+0x6c/0x4b0
[ 258.024235][ C1] ? _raw_spin_lock+0x40/0x40
[ 258.024261][ C1] ? advance_sched+0x9f9/0xc80
[ 258.024291][ C1] ? advance_sched+0x9f9/0xc80
[ 258.024326][ C1] debug_object_activate+0x6c/0x4b0
[ 258.024357][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0
[ 258.024384][ C1] enqueue_hrtimer+0x30/0x370
[ 258.024403][ C1] __hrtimer_run_queues+0x637/0xc40
[ 258.024423][ C1] ? taprio_dequeue_from_txq+0x8f0/0x8f0
[ 258.024450][ C1] ? hrtimer_interrupt+0x9c0/0x9c0
[ 258.024470][ C1] hrtimer_interrupt+0x3c9/0x9c0
[ 258.024499][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0
[ 258.024522][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0
[ 258.024543][ C1]
[ 258.024548][ C1]
[ 258.024553][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 258.024574][ C1] RIP: 0010:lock_is_held_type+0x13e/0x190
[ 258.024594][ C1] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f
[ 258.024606][ C1] RSP: 0018:ffffc900001073a0 EFLAGS: 00000206
[ 258.024619][ C1] RAX: aa76e84596bff200 RBX: ffff888019e7bc00 RCX: aa76e84596bff200
[ 258.024631][ C1] RDX: ffff888019e7bc00 RSI: ffffffff8aaace60 RDI: ffffffff8afc6f80
[ 258.024642][ C1] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004
[ 258.024652][ C1] R10: dffffc0000000000 R11: fffff52000020e84 R12: 0000000000000004
[ 258.024663][ C1] R13: 0000000000000246 R14: ffffffff8e0c8858 R15: ffff888019e7c780
[ 258.024684][ C1] neigh_flush_dev+0x198/0xa80
[ 258.024709][ C1] ? do_raw_read_unlock+0x80/0x80
[ 258.024732][ C1] ? __neigh_ifdown+0x2c/0x460
[ 258.024756][ C1] __neigh_ifdown+0x3d/0x460
[ 258.024781][ C1] neigh_ifdown+0x1f/0x30
[ 258.024803][ C1] rt6_disable_ip+0x730/0x7a0
[ 258.024831][ C1] ? fib6_ifdown+0x4b0/0x4b0
[ 258.024852][ C1] ? __lock_acquire+0x7c80/0x7c80
[ 258.024869][ C1] ? rcu_is_watching+0x15/0xb0
[ 258.024892][ C1] addrconf_ifdown+0x15e/0x1880
[ 258.024920][ C1] ? __mutex_unlock_slowpath+0x1a2/0x6a0
[ 258.024937][ C1] ? tls_dev_event+0x71f/0xf00
[ 258.024957][ C1] ? addrconf_cleanup+0x1e0/0x1e0
[ 258.024988][ C1] addrconf_notify+0x6c6/0x1010
[ 258.025006][ C1] notifier_call_chain+0x197/0x390
[ 258.025030][ C1] unregister_netdevice_many_notify+0xf36/0x1810
[ 258.025056][ C1] ? unregister_netdevice_many+0x20/0x20
[ 258.025076][ C1] ? unregister_netdevice_queue+0x1ae/0x360
[ 258.025095][ C1] ? list_netdevice+0x730/0x730
[ 258.025112][ C1] ? net_generic+0x1e/0x240
[ 258.025130][ C1] ip_tunnel_delete_nets+0x31c/0x360
[ 258.025150][ C1] ? ip_tunnel_bind_dev+0x7f0/0x7f0
[ 258.025166][ C1] ? cleanup_net+0x6f4/0xb90
[ 258.025181][ C1] ? __kmem_cache_free+0xba/0x1f0
[ 258.025205][ C1] ? ipgre_tap_init_net+0x30/0x30
[ 258.025221][ C1] cleanup_net+0x77f/0xb90
[ 258.025238][ C1] ? ops_free_list+0x3b0/0x3b0
[ 258.025256][ C1] ? _raw_spin_unlock_irq+0x23/0x50
[ 258.025274][ C1] ? process_scheduled_works+0x957/0x15b0
[ 258.025295][ C1] ? process_scheduled_works+0x957/0x15b0
[ 258.025314][ C1] process_scheduled_works+0xa45/0x15b0
[ 258.025346][ C1] ? assign_work+0x400/0x400
[ 258.025367][ C1] ? assign_work+0x39e/0x400
[ 258.025394][ C1] worker_thread+0xa55/0xfc0
[ 258.025424][ C1] kthread+0x2fa/0x390
[ 258.025438][ C1] ? pr_cont_work+0x560/0x560
[ 258.025457][ C1] ? kthread_blkcg+0xd0/0xd0
[ 258.025471][ C1] ret_from_fork+0x48/0x80
[ 258.025490][ C1] ? kthread_blkcg+0xd0/0xd0
[ 258.025505][ C1] ret_from_fork_asm+0x11/0x20
[ 258.025534][ C1]
[ 258.025791][ C0] CPU: 0 PID: 5948 Comm: syz.0.17 Not tainted syzkaller #0
[ 258.562871][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 258.573146][ C0] RIP: 0010:queued_write_lock_slowpath+0x125/0x294
[ 258.579706][ C0] Code: f0 41 81 0e 00 01 00 00 42 0f b6 04 23 84 c0 74 37 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 2a 4c 89 f7 e8 bf be 6b f7 eb 20 f3 90 <42> 0f b6 04 23 84 c0 74 15 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 08
[ 258.599362][ C0] RSP: 0018:ffffc90000007520 EFLAGS: 00000206
[ 258.605473][ C0] RAX: 00000000000001ff RBX: 1ffffffff1c19108 RCX: ffffffff8a713fab
[ 258.613660][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e0c8840
[ 258.621672][ C0] RBP: ffffc900000075d0 R08: ffffffff8e0c8843 R09: 1ffffffff1c19108
[ 258.629688][ C0] R10: dffffc0000000000 R11: fffffbfff1c19109 R12: dffffc0000000000
[ 258.637700][ C0] R13: 1ffff92000000ea8 R14: ffffffff8e0c8840 R15: ffffc90000007570
[ 258.645742][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 258.654915][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 258.661760][ C0] CR2: 00007fff9a586058 CR3: 000000000cb30000 CR4: 00000000003506f0
[ 258.669874][ C0] Call Trace:
[ 258.673214][ C0]
[ 258.676209][ C0] ? queued_read_lock_slowpath+0x240/0x240
[ 258.682176][ C0] do_raw_write_lock+0x1ee/0x260
[ 258.687407][ C0] ? do_raw_read_unlock+0x80/0x80
[ 258.692540][ C0] ? ndisc_constructor+0x6a8/0x8c0
[ 258.697707][ C0] ? ___neigh_create+0xe5c/0x2440
[ 258.702805][ C0] ___neigh_create+0xe5c/0x2440
[ 258.707793][ C0] ? __ipv6_neigh_lookup_noref+0x5b9/0x7d0
[ 258.713977][ C0] ip6_finish_output2+0x159e/0x1650
[ 258.719354][ C0] ? ip6_finish_output2+0x661/0x1650
[ 258.730321][ C0] ? ip6_mtu+0x7d/0x3f0
[ 258.734543][ C0] ? nf_hook+0x370/0x370
[ 258.738852][ C0] ? ip6_finish_output+0x57b/0x820
[ 258.744041][ C0] ndisc_send_skb+0xbed/0x14b0
[ 258.748854][ C0] ? ndisc_send_skb+0x1f2/0x14b0
[ 258.753862][ C0] ? ndisc_mc_map+0x680/0x680
[ 258.758713][ C0] ? skb_dst+0xd0/0xd0
[ 258.762984][ C0] addrconf_rs_timer+0x2bc/0x600
[ 258.768099][ C0] ? addrconf_disable_policy_idev+0x480/0x480
[ 258.774247][ C0] call_timer_fn+0x16e/0x530
[ 258.778901][ C0] ? addrconf_disable_policy_idev+0x480/0x480
[ 258.785046][ C0] ? call_timer_fn+0xbf/0x530
[ 258.789781][ C0] ? __run_timers+0x7d0/0x7d0
[ 258.794509][ C0] ? _raw_spin_unlock_irq+0x23/0x50
[ 258.799747][ C0] ? lockdep_hardirqs_on+0x98/0x150
[ 258.804989][ C0] ? addrconf_disable_policy_idev+0x480/0x480
[ 258.811110][ C0] __run_timers+0x52d/0x7d0
[ 258.815691][ C0] ? detach_timer+0x2b0/0x2b0
[ 258.820502][ C0] ? lock_chain_count+0x20/0x20
[ 258.825421][ C0] run_timer_softirq+0x67/0xf0
[ 258.830307][ C0] handle_softirqs+0x280/0x820
[ 258.835130][ C0] ? __irq_exit_rcu+0xc7/0x190
[ 258.840141][ C0] ? do_softirq+0x180/0x180
[ 258.844708][ C0] ? irqtime_account_irq+0xb6/0x1c0
[ 258.850066][ C0] __irq_exit_rcu+0xc7/0x190
[ 258.854730][ C0] ? irq_exit_rcu+0x20/0x20
[ 258.859410][ C0] irq_exit_rcu+0x9/0x20
[ 258.863706][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0
[ 258.869598][ C0]
[ 258.873024][ C0]
[ 258.875994][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 258.882016][ C0] RIP: 0010:smp_call_function_many_cond+0xddf/0x1130
[ 258.888853][ C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 6a d7 0a 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 a5 d3 0a 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 89 d3
[ 258.908622][ C0] RSP: 0018:ffffc90003287760 EFLAGS: 00000293
[ 258.914836][ C0] RAX: ffffffff817abd37 RBX: 1ffff110171e826d RCX: ffff88802bd81e00
[ 258.922896][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 258.930996][ C0] RBP: ffffc900032878e0 R08: ffffffff90d94537 R09: 1ffffffff21b28a6
[ 258.939004][ C0] R10: dffffc0000000000 R11: fffffbfff21b28a7 R12: ffff8880b8f41368
[ 258.947128][ C0] R13: dffffc0000000000 R14: ffff8880b8e3d148 R15: 0000000000000001
[ 258.955158][ C0] ? smp_call_function_many_cond+0xdf7/0x1130
[ 258.961289][ C0] ? native_flush_tlb_multi+0xd0/0xd0
[ 258.966732][ C0] ? smp_call_function_many+0x40/0x40
[ 258.972520][ C0] ? slab_free_freelist_hook+0x130/0x1b0
[ 258.978207][ C0] ? __tlb_remove_page_size+0x1ed/0x490
[ 258.983819][ C0] ? rcu_is_watching+0x15/0xb0
[ 258.988735][ C0] ? native_flush_tlb_multi+0xd0/0xd0
[ 258.994295][ C0] on_each_cpu_cond_mask+0x3f/0x80
[ 258.999464][ C0] flush_tlb_mm_range+0x41e/0x690
[ 259.004549][ C0] ? flush_tlb_multi+0x50/0x50
[ 259.009465][ C0] tlb_flush_mmu+0x1b7/0x4f0
[ 259.014382][ C0] tlb_finish_mmu+0xc3/0x1d0
[ 259.020441][ C0] ? free_pgtables+0x743/0x770
[ 259.025274][ C0] exit_mmap+0x3f0/0xb50
[ 259.029615][ C0] ? exit_mm_release+0x1a/0x30
[ 259.034422][ C0] ? vm_brk+0x30/0x30
[ 259.038454][ C0] ? __mutex_unlock_slowpath+0x1a2/0x6a0
[ 259.044177][ C0] ? uprobe_clear_state+0x278/0x290
[ 259.049467][ C0] ? mm_update_next_owner+0x562/0x6c0
[ 259.054922][ C0] __mmput+0x118/0x3c0
[ 259.059056][ C0] exit_mm+0x1da/0x2c0
[ 259.063207][ C0] ? do_exit+0x23c0/0x23c0
[ 259.067777][ C0] ? taskstats_exit+0x35e/0x9e0
[ 259.072810][ C0] do_exit+0x88e/0x23c0
[ 259.077386][ C0] ? put_task_struct+0xc0/0xc0
[ 259.082585][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 259.088814][ C0] ? lock_chain_count+0x20/0x20
[ 259.093789][ C0] ? _raw_spin_lock_irq+0xaf/0xe0
[ 259.098869][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0
[ 259.104373][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 259.110457][ C0] ? _raw_spin_unlock_irq+0x23/0x50
[ 259.115721][ C0] ? lockdep_hardirqs_on+0x98/0x150
[ 259.121336][ C0] do_group_exit+0x21b/0x2d0
[ 259.126004][ C0] __x64_sys_exit_group+0x3f/0x40
[ 259.131087][ C0] do_syscall_64+0x55/0xb0
[ 259.135565][ C0] ? clear_bhb_loop+0x40/0x90
[ 259.140338][ C0] ? clear_bhb_loop+0x40/0x90
[ 259.145082][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 259.151036][ C0] RIP: 0033:0x7f950958f749
[ 259.155624][ C0] Code: Unable to access opcode bytes at 0x7f950958f71f.
[ 259.162674][ C0] RSP: 002b:00007ffe54963f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 259.171220][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f950958f749
[ 259.179597][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[ 259.188072][ C0] RBP: 0000000000000003 R08: 000000085496408f R09: 00007f95097b4280
[ 259.196101][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[ 259.204133][ C0] R13: 00007f95097b4280 R14: 0000000000000003 R15: 00007ffe54964050
[ 259.212275][ C0]
[ 259.215345][ C0] Sending NMI from CPU 0 to CPUs 1:
[ 259.220701][ C1] NMI backtrace for cpu 1
[ 259.220711][ C1] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0
[ 259.220727][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 259.220738][ C1] Workqueue: netns cleanup_net
[ 259.220760][ C1] RIP: 0010:do_raw_spin_lock+0xc/0x2c0
[ 259.220785][ C1] Code: 07 80 c1 03 38 c1 7c 95 48 89 df e8 8e b6 74 00 eb 8b 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 <41> 55 41 54 53 48 83 e4 e0 48 81 ec 80 00 00 00 48 89 fb 65 48 8b
[ 259.220798][ C1] RSP: 0018:ffffc900001f0be0 EFLAGS: 00000096
[ 259.220812][ C1] RAX: aa76e84596bff200 RBX: ffffffff9712bda0 RCX: aa76e84596bff200
[ 259.220825][ C1] RDX: 0000000000000000 RSI: ffffffff8aaace60 RDI: ffffffff9712bda0
[ 259.220836][ C1] RBP: ffffc900001f0bf0 R08: dffffc0000000000 R09: 1ffffffff21b28a0
[ 259.220848][ C1] R10: dffffc0000000000 R11: fffffbfff21b28a1 R12: dffffc0000000000
[ 259.220860][ C1] R13: dffffc0000000000 R14: 0000000000000802 R15: 1ffff9200003e180
[ 259.220872][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 259.220885][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 259.220897][ C1] CR2: 0000200000003c80 CR3: 0000000076cbd000 CR4: 00000000003506e0
[ 259.220912][ C1] Call Trace:
[ 259.220920][ C1]
[ 259.220928][ C1] _raw_spin_lock_irqsave+0xb4/0xf0
[ 259.220950][ C1] ? _raw_spin_lock+0x40/0x40
[ 259.220968][ C1] ? advance_sched+0x9f9/0xc80
[ 259.220990][ C1] ? advance_sched+0x9f9/0xc80
[ 259.221015][ C1] debug_object_activate+0x6c/0x4b0
[ 259.221038][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0
[ 259.221060][ C1] enqueue_hrtimer+0x30/0x370
[ 259.221080][ C1] __hrtimer_run_queues+0x637/0xc40
[ 259.221101][ C1] ? taprio_dequeue_from_txq+0x8f0/0x8f0
[ 259.221128][ C1] ? hrtimer_interrupt+0x9c0/0x9c0
[ 259.221150][ C1] hrtimer_interrupt+0x3c9/0x9c0
[ 259.221180][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0
[ 259.221203][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0
[ 259.221225][ C1]
[ 259.221229][ C1]
[ 259.221235][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 259.221263][ C1] RIP: 0010:lock_is_held_type+0x13e/0x190
[ 259.221283][ C1] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f
[ 259.221295][ C1] RSP: 0018:ffffc900001073a0 EFLAGS: 00000206
[ 259.221308][ C1] RAX: aa76e84596bff200 RBX: ffff888019e7bc00 RCX: aa76e84596bff200
[ 259.221320][ C1] RDX: ffff888019e7bc00 RSI: ffffffff8aaace60 RDI: ffffffff8afc6f80
[ 259.221332][ C1] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004
[ 259.221341][ C1] R10: dffffc0000000000 R11: fffff52000020e84 R12: 0000000000000004
[ 259.221351][ C1] R13: 0000000000000246 R14: ffffffff8e0c8858 R15: ffff888019e7c780
[ 259.221375][ C1] neigh_flush_dev+0x198/0xa80
[ 259.221400][ C1] ? do_raw_read_unlock+0x80/0x80
[ 259.221424][ C1] ? __neigh_ifdown+0x2c/0x460
[ 259.221454][ C1] __neigh_ifdown+0x3d/0x460
[ 259.221480][ C1] neigh_ifdown+0x1f/0x30
[ 259.221504][ C1] rt6_disable_ip+0x730/0x7a0
[ 259.221532][ C1] ? fib6_ifdown+0x4b0/0x4b0
[ 259.221553][ C1] ? __lock_acquire+0x7c80/0x7c80
[ 259.221570][ C1] ? rcu_is_watching+0x15/0xb0
[ 259.221594][ C1] addrconf_ifdown+0x15e/0x1880
[ 259.221622][ C1] ? __mutex_unlock_slowpath+0x1a2/0x6a0
[ 259.221640][ C1] ? tls_dev_event+0x71f/0xf00
[ 259.221660][ C1] ? addrconf_cleanup+0x1e0/0x1e0
[ 259.221692][ C1] addrconf_notify+0x6c6/0x1010
[ 259.221712][ C1] notifier_call_chain+0x197/0x390
[ 259.221736][ C1] unregister_netdevice_many_notify+0xf36/0x1810
[ 259.221763][ C1] ? unregister_netdevice_many+0x20/0x20
[ 259.221784][ C1] ? unregister_netdevice_queue+0x1ae/0x360
[ 259.221803][ C1] ? list_netdevice+0x730/0x730
[ 259.221819][ C1] ? net_generic+0x1e/0x240
[ 259.221838][ C1] ip_tunnel_delete_nets+0x31c/0x360
[ 259.221870][ C1] ? ip_tunnel_bind_dev+0x7f0/0x7f0
[ 259.221887][ C1] ? cleanup_net+0x6f4/0xb90
[ 259.221902][ C1] ? __kmem_cache_free+0xba/0x1f0
[ 259.221925][ C1] ? ipgre_tap_init_net+0x30/0x30
[ 259.221941][ C1] cleanup_net+0x77f/0xb90
[ 259.221959][ C1] ? ops_free_list+0x3b0/0x3b0
[ 259.221977][ C1] ? _raw_spin_unlock_irq+0x23/0x50
[ 259.221995][ C1] ? process_scheduled_works+0x957/0x15b0
[ 259.222024][ C1] ? process_scheduled_works+0x957/0x15b0
[ 259.222044][ C1] process_scheduled_works+0xa45/0x15b0
[ 259.222079][ C1] ? assign_work+0x400/0x400
[ 259.222101][ C1] ? assign_work+0x39e/0x400
[ 259.222123][ C1] worker_thread+0xa55/0xfc0
[ 259.222155][ C1] kthread+0x2fa/0x390
[ 259.222169][ C1] ? pr_cont_work+0x560/0x560
[ 259.222188][ C1] ? kthread_blkcg+0xd0/0xd0
[ 259.222203][ C1] ret_from_fork+0x48/0x80
[ 259.222222][ C1] ? kthread_blkcg+0xd0/0xd0
[ 259.222236][ C1] ret_from_fork_asm+0x11/0x20
[ 259.222272][ C1]