Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. 2025/12/26 22:51:41 parsed 1 programs [ 255.277919][ T30] audit: type=1400 audit(1766789500.999:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 255.298681][ T30] audit: type=1400 audit(1766789500.999:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 255.935282][ T30] audit: type=1400 audit(1766789501.649:66): avc: denied { mounton } for pid=289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 255.936854][ T289] cgroup: Unknown subsys name 'net' [ 255.958020][ T30] audit: type=1400 audit(1766789501.649:67): avc: denied { mount } for pid=289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 255.985250][ T30] audit: type=1400 audit(1766789501.679:68): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 255.985512][ T289] cgroup: Unknown subsys name 'devices' [ 256.128088][ T289] cgroup: Unknown subsys name 'hugetlb' [ 256.133686][ T289] cgroup: Unknown subsys name 'rlimit' [ 256.275725][ T30] audit: type=1400 audit(1766789501.989:69): avc: denied { setattr } for pid=289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 256.298928][ T30] audit: type=1400 audit(1766789501.989:70): avc: denied { create } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 256.306055][ T292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 256.319498][ T30] audit: type=1400 audit(1766789501.999:71): avc: denied { write } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 256.348086][ T30] audit: type=1400 audit(1766789501.999:72): avc: denied { read } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 256.361383][ T289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 256.368409][ T30] audit: type=1400 audit(1766789501.999:73): avc: denied { mounton } for pid=289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 256.822307][ T298] request_module fs-gadgetfs succeeded, but still no fs? [ 257.304575][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.311820][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.319285][ T318] device bridge_slave_0 entered promiscuous mode [ 257.330587][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.337734][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.345156][ T318] device bridge_slave_1 entered promiscuous mode [ 257.516955][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.524025][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.531351][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.538406][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.565436][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.572761][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.585645][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.594346][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.609703][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.618033][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.625066][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.632833][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.641103][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.648182][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.656555][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.665668][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.678467][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.692450][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.700738][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.708295][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.716537][ T318] device veth0_vlan entered promiscuous mode [ 257.725765][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 257.735064][ T318] device veth1_macvtap entered promiscuous mode [ 257.746040][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 257.760122][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/12/26 22:51:43 executed programs: 0 [ 257.800702][ T318] syz-executor (318) used greatest stack depth: 21568 bytes left [ 257.992742][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.999882][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.007373][ T364] device bridge_slave_0 entered promiscuous mode [ 258.014171][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.021256][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.028679][ T364] device bridge_slave_1 entered promiscuous mode [ 258.092745][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.099907][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.107361][ T366] device bridge_slave_0 entered promiscuous mode [ 258.118462][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.125512][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.133052][ T370] device bridge_slave_0 entered promiscuous mode [ 258.143343][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.150427][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.158418][ T366] device bridge_slave_1 entered promiscuous mode [ 258.171133][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.178227][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.185510][ T370] device bridge_slave_1 entered promiscuous mode [ 258.234011][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.241114][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.249043][ T371] device bridge_slave_0 entered promiscuous mode [ 258.255878][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.263017][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.270645][ T368] device bridge_slave_0 entered promiscuous mode [ 258.277751][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.284780][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.292230][ T368] device bridge_slave_1 entered promiscuous mode [ 258.308475][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.315510][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.323095][ T371] device bridge_slave_1 entered promiscuous mode [ 258.541807][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.549635][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.579563][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.588140][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.597351][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.604376][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.611940][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.620245][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.628428][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.635580][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.657397][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.665122][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.672848][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.680603][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.689261][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.697480][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.704490][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.711902][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.720213][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.728406][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.735421][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.742773][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.750294][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.757751][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.765992][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.774221][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.781257][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.820008][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.828839][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.838127][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.845955][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.853695][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.861231][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.869565][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.877827][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.884873][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.892377][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.900806][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.909037][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.916046][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.923409][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.931535][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.939562][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.947517][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.955417][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.963798][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.972080][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.979126][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.986585][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.017827][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.025285][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.032998][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.041369][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.049511][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.057838][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.065921][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.072962][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.080451][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.088508][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.096551][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.104798][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.113004][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.120311][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.132681][ T368] device veth0_vlan entered promiscuous mode [ 259.146927][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.154842][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.162322][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.170246][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.178300][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.186788][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.195853][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.207693][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.215718][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.223259][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.239682][ T368] device veth1_macvtap entered promiscuous mode [ 259.248433][ T370] device veth0_vlan entered promiscuous mode [ 259.256833][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.264996][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.273360][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.282503][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.303137][ T366] device veth0_vlan entered promiscuous mode [ 259.317909][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.326602][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.334553][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.342890][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.350483][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.358746][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.367661][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.375036][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.382522][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.390577][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.399089][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.412676][ T371] device veth0_vlan entered promiscuous mode [ 259.420214][ T364] device veth0_vlan entered promiscuous mode [ 259.432934][ T364] device veth1_macvtap entered promiscuous mode [ 259.440899][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.449537][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.459129][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.467596][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.475831][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 259.483762][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.491306][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.499386][ T370] device veth1_macvtap entered promiscuous mode [ 259.514946][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.523763][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.532228][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.545106][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.559899][ T371] device veth1_macvtap entered promiscuous mode [ 359.646180][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 359.653168][ C0] (detected by 0, t=10002 jiffies, g=1409, q=429) [ 359.659668][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294973171-4294963168), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 359.673029][ C0] rcu: rcu_preempt kthread starved for 10004 jiffies! g1409 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 359.684135][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 359.694097][ C0] rcu: RCU grace-period kthread stack dump: [ 359.699979][ C0] task:rcu_preempt state:R running task stack:28752 pid: 14 ppid: 2 flags:0x00004000 [ 359.710767][ C0] Call Trace: [ 359.714043][ C0] [ 359.716970][ C0] __schedule+0xb6e/0x14c0 [ 359.721406][ C0] ? release_firmware_map_entry+0x190/0x190 [ 359.727293][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 359.733099][ C0] ? __mod_timer+0x7ae/0xb30 [ 359.737690][ C0] schedule+0x11e/0x1e0 [ 359.741845][ C0] schedule_timeout+0x12c/0x2e0 [ 359.746690][ C0] ? console_conditional_schedule+0x30/0x30 [ 359.752581][ C0] ? update_process_times+0x200/0x200 [ 359.757962][ C0] ? prepare_to_swait_event+0x308/0x320 [ 359.763507][ C0] rcu_gp_fqs_loop+0x293/0xf60 [ 359.768269][ C0] ? debug_smp_processor_id+0x17/0x20 [ 359.773634][ C0] ? __note_gp_changes+0x4e2/0x9e0 [ 359.778740][ C0] ? rcu_gp_init+0xc00/0xc00 [ 359.783334][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 359.788543][ C0] ? rcu_gp_init+0x9a7/0xc00 [ 359.793129][ C0] rcu_gp_kthread+0x98/0x330 [ 359.797715][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 359.802395][ C0] ? __kasan_check_read+0x11/0x20 [ 359.807414][ C0] ? __kthread_parkme+0xac/0x200 [ 359.812351][ C0] ? preempt_count_add+0x90/0x1b0 [ 359.817384][ C0] kthread+0x411/0x500 [ 359.821446][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 359.826118][ C0] ? kthread_blkcg+0xd0/0xd0 [ 359.830704][ C0] ret_from_fork+0x1f/0x30 [ 359.835116][ C0] [ 359.838132][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 359.844455][ C0] Sending NMI from CPU 0 to CPUs 1: [ 359.849667][ C1] NMI backtrace for cpu 1 [ 359.849686][ C1] CPU: 1 PID: 422 Comm: syz.6.20 Not tainted syzkaller #0 [ 359.849700][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 359.849711][ C1] RIP: 0010:kasan_check_range+0x85/0x290 [ 359.849734][ C1] Code: 03 4e 8d 14 3b 4d 89 d6 4d 29 ce 49 83 fe 10 7f 26 4d 85 f6 0f 84 39 01 00 00 48 f7 d3 4c 01 db 41 80 39 00 0f 85 c2 01 00 00 <49> ff c1 48 ff c3 75 ee e9 1c 01 00 00 44 89 cb 83 e3 07 0f 84 b5 [ 359.849745][ C1] RSP: 0018:ffffc900001d0ea8 EFLAGS: 00000046 [ 359.849757][ C1] RAX: 1ffff1103ee26501 RBX: ffffffffffffffff RCX: ffffffff81761048 [ 359.849768][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff8881f7132f30 [ 359.849776][ C1] RBP: ffffc900001d0ec0 R08: dffffc0000000000 R09: ffffed103ee265e6 [ 359.849787][ C1] R10: ffffed103ee265e7 R11: 1ffff1103ee265e6 R12: dffffc0000000000 [ 359.849797][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000001 [ 359.849806][ C1] FS: 0000555595120500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 359.849818][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.849827][ C1] CR2: 0000000000000000 CR3: 000000011f71b000 CR4: 00000000003506a0 [ 359.849839][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 359.849847][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 359.849856][ C1] Call Trace: [ 359.849860][ C1] [ 359.849865][ C1] __kasan_check_write+0x14/0x20 [ 359.849879][ C1] irq_work_run_list+0xc8/0x240 [ 359.849895][ C1] ? irq_work_run+0xf0/0xf0 [ 359.849909][ C1] irq_work_run+0x6a/0xf0 [ 359.849922][ C1] __sysvec_irq_work+0x63/0x1a0 [ 359.849937][ C1] sysvec_irq_work+0xa1/0xc0 [ 359.849953][ C1] [ 359.849957][ C1] [ 359.849961][ C1] asm_sysvec_irq_work+0x1b/0x20 [ 359.849977][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 359.849995][ C1] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 eb d9 89 f6 31 d2 e8 fa 76 3a 01 5d c3 0f 1f 84 00 00 00 00 [ 359.850005][ C1] RSP: 0018:ffffc90002787be0 EFLAGS: 00000246 [ 359.850016][ C1] RAX: 00000000000000f6 RBX: 00000000000000f6 RCX: 000000000000083f [ 359.850024][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 359.850032][ C1] RBP: ffffc90002787be0 R08: dffffc0000000000 R09: ffffed103ee265e7 [ 359.850043][ C1] R10: ffffed103ee265e7 R11: 1ffff1103ee265e6 R12: 0000000000000000 [ 359.850052][ C1] R13: dffffc0000000001 R14: ffffffff85e659f8 R15: dffffc0000000000 [ 359.850065][ C1] x2apic_send_IPI_self+0x5e/0x70 [ 359.850081][ C1] arch_irq_work_raise+0x86/0xd0 [ 359.850095][ C1] __irq_work_queue_local+0x115/0x190 [ 359.850109][ C1] irq_work_queue+0x9e/0x150 [ 359.850122][ C1] bpf_send_signal_common+0x2b2/0x420 [ 359.850138][ C1] ? trace_raw_output_bpf_trace_printk+0xd0/0xd0 [ 359.850154][ C1] bpf_send_signal+0x19/0x20 [ 359.850167][ C1] bpf_prog_7ba5217f62dcd359+0x38/0x9a0 [ 359.850179][ C1] bpf_trace_run2+0xb0/0x1b0 [ 359.850193][ C1] ? bpf_trace_run1+0x1b0/0x1b0 [ 359.850208][ C1] __bpf_trace_sys_enter+0x62/0x70 [ 359.850221][ C1] __traceiter_sys_enter+0x2a/0x40 [ 359.850233][ C1] trace_sys_enter+0x3d/0x50 [ 359.850245][ C1] syscall_trace_enter+0x118/0x180 [ 359.850257][ C1] syscall_enter_from_user_mode+0x1f/0x30 [ 359.850270][ C1] do_syscall_64+0x24/0xa0 [ 359.850283][ C1] ? clear_bhb_loop+0x50/0xa0 [ 359.850295][ C1] ? clear_bhb_loop+0x50/0xa0 [ 359.850306][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 359.850321][ C1] RIP: 0033:0x7f1ce18f4829 [ 359.850332][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 359.850342][ C1] RSP: 002b:00007fff1eed6880 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 359.850354][ C1] RAX: ffffffffffffffda RBX: 00007f1ce1baefa8 RCX: 00007f1ce18f4829 [ 359.850364][ C1] RDX: 00007fff1eed6880 RSI: 00007fff1eed69b0 RDI: 0000000000000011 [ 359.850373][ C1] RBP: 0000000000000000 R08: 0028d332a5daeaff R09: 000000071eed710f [ 359.850382][ C1] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f1ce1baefac [ 359.850390][ C1] R13: 00007f1ce1baefa0 R14: 0000000000000095 R15: 0000000000000003 [ 359.850401][ C1]