Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts. 2025/10/26 04:46:48 parsed 1 programs [ 324.372934][ T28] audit: type=1400 audit(1761454008.547:64): avc: denied { node_bind } for pid=282 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 324.393781][ T28] audit: type=1400 audit(1761454008.547:65): avc: denied { module_request } for pid=282 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 325.538277][ T28] audit: type=1400 audit(1761454009.707:66): avc: denied { mounton } for pid=289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 325.540021][ T289] cgroup: Unknown subsys name 'net' [ 325.561123][ T28] audit: type=1400 audit(1761454009.707:67): avc: denied { mount } for pid=289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 325.588527][ T28] audit: type=1400 audit(1761454009.747:68): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 325.588773][ T289] cgroup: Unknown subsys name 'devices' [ 325.734727][ T289] cgroup: Unknown subsys name 'hugetlb' [ 325.740386][ T289] cgroup: Unknown subsys name 'rlimit' [ 325.853603][ T28] audit: type=1400 audit(1761454010.027:69): avc: denied { setattr } for pid=289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 325.876936][ T28] audit: type=1400 audit(1761454010.027:70): avc: denied { create } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 325.897343][ T28] audit: type=1400 audit(1761454010.027:71): avc: denied { write } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 325.917668][ T28] audit: type=1400 audit(1761454010.027:72): avc: denied { read } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 325.934476][ T292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 325.937906][ T28] audit: type=1400 audit(1761454010.027:73): avc: denied { mounton } for pid=289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 325.984296][ T289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 326.691428][ T294] request_module fs-gadgetfs succeeded, but still no fs? [ 326.863914][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.870994][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.878857][ T307] device bridge_slave_0 entered promiscuous mode [ 326.886786][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.893857][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.901335][ T307] device bridge_slave_1 entered promiscuous mode [ 326.964517][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.971596][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.978926][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.985993][ T307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.010365][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.017673][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.025579][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.033056][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.044246][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.052434][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.059486][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.068559][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.076737][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.083795][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.100918][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 327.110256][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 327.125709][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 327.137295][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 327.145633][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 327.153415][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 327.162620][ T307] device veth0_vlan entered promiscuous mode [ 327.173151][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 327.182361][ T307] device veth1_macvtap entered promiscuous mode [ 327.192648][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 327.207245][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 327.237625][ T307] syz-executor (307) used greatest stack depth: 22016 bytes left [ 327.823672][ T8] device bridge_slave_1 left promiscuous mode [ 327.829885][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.852696][ T8] device bridge_slave_0 left promiscuous mode [ 327.859003][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.869301][ T8] device veth1_macvtap left promiscuous mode [ 327.876551][ T8] device veth0_vlan left promiscuous mode 2025/10/26 04:46:52 executed programs: 0 [ 328.206759][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.213907][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.221290][ T363] device bridge_slave_0 entered promiscuous mode [ 328.228492][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.235693][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.243580][ T363] device bridge_slave_1 entered promiscuous mode [ 328.297807][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.304982][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.312304][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.319337][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.339282][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.346847][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.354131][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.363926][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.372257][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.379478][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.388479][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.396738][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.403798][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.416297][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.425629][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.439841][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 328.452984][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 328.461008][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 328.469001][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 328.476984][ T363] device veth0_vlan entered promiscuous mode [ 328.487491][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 328.496714][ T363] device veth1_macvtap entered promiscuous mode [ 328.506377][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 328.516699][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/10/26 04:46:57 executed programs: 224 2025/10/26 04:47:02 executed programs: 471 [ 340.938118][ T974] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.945342][ T974] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.953362][ T974] device bridge_slave_0 entered promiscuous mode [ 340.960793][ T974] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.967900][ T974] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.975480][ T974] device bridge_slave_1 entered promiscuous mode [ 341.029012][ T974] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.036093][ T974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.043534][ T974] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.050612][ T974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.071781][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 341.079664][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.087369][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.098730][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.106988][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.114053][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.122906][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.131332][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.138439][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.150619][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 341.161806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 341.176431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 341.187923][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 341.196222][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 341.203928][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 341.213901][ T974] device veth0_vlan entered promiscuous mode [ 341.224387][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 341.233871][ T974] device veth1_macvtap entered promiscuous mode [ 341.243827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 341.255896][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 341.433314][ T43] device bridge_slave_1 left promiscuous mode [ 341.439491][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.448128][ T43] device bridge_slave_0 left promiscuous mode [ 341.455558][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.463994][ T43] device veth1_macvtap left promiscuous mode [ 341.470053][ T43] device veth0_vlan left promiscuous mode 2025/10/26 04:47:07 executed programs: 699 2025/10/26 04:47:12 executed programs: 943 2025/10/26 04:47:17 executed programs: 1188 [ 353.610130][ T1587] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.617308][ T1587] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.624751][ T1587] device bridge_slave_0 entered promiscuous mode [ 353.631558][ T1587] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.638611][ T1587] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.645990][ T1587] device bridge_slave_1 entered promiscuous mode [ 353.698919][ T1587] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.705998][ T1587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.713308][ T1587] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.720346][ T1587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.742767][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 353.750661][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.758297][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.767164][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 353.775554][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.782612][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.793254][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 353.801477][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.808558][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.821101][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 353.830687][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 353.846766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 353.858206][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 353.866392][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 353.873849][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 353.881920][ T1587] device veth0_vlan entered promiscuous mode [ 353.893056][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 353.903920][ T1587] device veth1_macvtap entered promiscuous mode [ 353.913662][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 353.923872][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.193257][ T994] device bridge_slave_1 left promiscuous mode [ 354.199471][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.207413][ T994] device bridge_slave_0 left promiscuous mode [ 354.216287][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.225112][ T994] device veth1_macvtap left promiscuous mode [ 354.231148][ T994] device veth0_vlan left promiscuous mode [ 454.292058][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 454.299213][ C1] (detected by 1, t=10002 jiffies, g=9757, q=613 ncpus=2) [ 454.306400][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4294982634-4294972632), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 454.319769][ C1] rcu: rcu_preempt kthread starved for 10002 jiffies! g9757 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 454.330877][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 454.340840][ C1] rcu: RCU grace-period kthread stack dump: [ 454.346715][ C1] task:rcu_preempt state:R running task stack:28352 pid:14 ppid:2 flags:0x00004000 [ 454.357498][ C1] Call Trace: [ 454.360782][ C1] [ 454.363744][ C1] __schedule+0xb87/0x14e0 [ 454.368185][ C1] ? release_firmware_map_entry+0x194/0x194 [ 454.374088][ C1] ? __mod_timer+0x7ae/0xb30 [ 454.378692][ C1] schedule+0xbd/0x170 [ 454.382815][ C1] schedule_timeout+0x12c/0x2e0 [ 454.387678][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 454.393060][ C1] ? __cfi_process_timeout+0x10/0x10 [ 454.398364][ C1] ? prepare_to_swait_event+0x308/0x320 [ 454.403922][ C1] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 454.408872][ C1] ? rcu_gp_init+0xf10/0xf10 [ 454.413457][ C1] rcu_gp_kthread+0x95/0x370 [ 454.418042][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 454.423262][ C1] ? set_cpus_allowed_ptr+0x82/0xc0 [ 454.428460][ C1] ? __kasan_check_read+0x11/0x20 [ 454.433504][ C1] ? __kthread_parkme+0x142/0x180 [ 454.438520][ C1] kthread+0x281/0x320 [ 454.442604][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 454.447801][ C1] ? __cfi_kthread+0x10/0x10 [ 454.452379][ C1] ret_from_fork+0x1f/0x30 [ 454.456791][ C1] [ 454.459797][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 454.466103][ C1] CPU: 1 PID: 1612 Comm: syz.2.1232 Not tainted syzkaller #0 [ 454.473468][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 454.483528][ C1] RIP: 0010:smp_call_function_many_cond+0x872/0x960 [ 454.490125][ C1] Code: 41 8b 1f 89 de 83 e6 01 31 ff e8 29 66 09 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 f5 61 09 00 e9 38 ff ff ff f3 90 <41> 0f b6 44 1d 00 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 1a ff ff [ 454.509735][ C1] RSP: 0018:ffffc90001eaf7c0 EFLAGS: 00000293 [ 454.515805][ C1] RAX: ffffffff8166bc4e RBX: dffffc0000000000 RCX: ffff8881164d1440 [ 454.523779][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 454.531751][ C1] RBP: ffffc90001eaf8f8 R08: dffffc0000000000 R09: ffffed103ee2721b [ 454.539717][ C1] R10: 0000000000000000 R11: ffffffff813435c0 R12: 1ffff1103ee27218 [ 454.547682][ C1] R13: 1ffff1103ee07ae1 R14: 0000000000000000 R15: ffff8881f703d708 [ 454.555645][ C1] FS: 0000555580f91500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 454.564599][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 454.571183][ C1] CR2: 0000000000000000 CR3: 0000000120f7c000 CR4: 00000000003506a0 [ 454.579146][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 454.587197][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 454.595158][ C1] Call Trace: [ 454.598427][ C1] [ 454.601353][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 454.606394][ C1] ? smp_call_function_many+0x40/0x40 [ 454.611847][ C1] ? enqueue_timer+0x16a/0x480 [ 454.616608][ C1] ? text_poke+0x30/0x30 [ 454.620856][ C1] ? text_poke_loc_init+0x349/0x570 [ 454.626063][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 454.631104][ C1] on_each_cpu_cond_mask+0x43/0x80 [ 454.636239][ C1] text_poke_bp_batch+0x1cc/0x580 [ 454.641277][ C1] ? text_poke_loc_init+0x570/0x570 [ 454.646473][ C1] ? __kasan_check_write+0x14/0x20 [ 454.651574][ C1] ? mutex_lock+0x8d/0x1a0 [ 454.656015][ C1] ? __cfi_mutex_lock+0x10/0x10 [ 454.660861][ C1] ? enqueue_timer+0x16a/0x480 [ 454.665620][ C1] text_poke_finish+0x1a/0x30 [ 454.670291][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 454.676273][ C1] __jump_label_update+0x37c/0x3a0 [ 454.681381][ C1] jump_label_update+0x39b/0x450 [ 454.686314][ C1] static_key_disable_cpuslocked+0xc9/0x1a0 [ 454.692217][ C1] static_key_disable+0x1a/0x30 [ 454.697059][ C1] tracepoint_probe_unregister+0x624/0x8b0 [ 454.702869][ C1] bpf_probe_unregister+0x61/0x70 [ 454.707890][ C1] bpf_raw_tp_link_release+0x63/0x90 [ 454.713171][ C1] bpf_link_free+0x13a/0x390 [ 454.717847][ C1] ? __kasan_record_aux_stack+0xb6/0xc0 [ 454.723393][ C1] ? bpf_link_put_deferred+0x20/0x20 [ 454.728675][ C1] ? task_work_add+0x250/0x330 [ 454.733434][ C1] ? __cfi_task_work_add+0x10/0x10 [ 454.738562][ C1] ? do_futex+0x2b9/0x420 [ 454.742888][ C1] bpf_link_release+0x15f/0x170 [ 454.747729][ C1] ? __cfi_bpf_link_release+0x10/0x10 [ 454.753097][ C1] __fput+0x1fc/0x8f0 [ 454.757078][ C1] ? _raw_spin_unlock+0x4c/0x70 [ 454.761924][ C1] ____fput+0x15/0x20 [ 454.765899][ C1] task_work_run+0x1db/0x240 [ 454.770481][ C1] ? __cfi_task_work_run+0x10/0x10 [ 454.775593][ C1] ? __cfi___close_range+0x10/0x10 [ 454.780723][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 454.785940][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 454.791397][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 454.796855][ C1] do_syscall_64+0x58/0xa0 [ 454.801263][ C1] ? clear_bhb_loop+0x30/0x80 [ 454.805938][ C1] ? clear_bhb_loop+0x30/0x80 [ 454.810613][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.816505][ C1] RIP: 0033:0x7eff0778efc9 [ 454.820926][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.840534][ C1] RSP: 002b:00007ffe89801d38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 454.848944][ C1] RAX: 0000000000000000 RBX: 00000000000567c7 RCX: 00007eff0778efc9 [ 454.856922][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 454.864887][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 000000068980202f [ 454.872859][ C1] R10: 0000001b2f220000 R11: 0000000000000246 R12: 00007eff079e5fac [ 454.881175][ C1] R13: 00007eff079e5fa0 R14: ffffffffffffffff R15: 0000000000000003 [ 454.889161][ C1] [ 595.268194][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 225s! [syz.2.1232:1612] [ 595.276489][ C1] Modules linked in: [ 595.280380][ C1] CPU: 1 PID: 1612 Comm: syz.2.1232 Not tainted syzkaller #0 [ 595.287810][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 595.297861][ C1] RIP: 0010:smp_call_function_many_cond+0x872/0x960 [ 595.304537][ C1] Code: 41 8b 1f 89 de 83 e6 01 31 ff e8 29 66 09 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 f5 61 09 00 e9 38 ff ff ff f3 90 <41> 0f b6 44 1d 00 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 1a ff ff [ 595.324236][ C1] RSP: 0018:ffffc90001eaf7c0 EFLAGS: 00000293 [ 595.330345][ C1] RAX: ffffffff8166bc4e RBX: dffffc0000000000 RCX: ffff8881164d1440 [ 595.338315][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 595.346280][ C1] RBP: ffffc90001eaf8f8 R08: dffffc0000000000 R09: ffffed103ee2721b [ 595.354252][ C1] R10: 0000000000000000 R11: ffffffff813435c0 R12: 1ffff1103ee27218 [ 595.362214][ C1] R13: 1ffff1103ee07ae1 R14: 0000000000000000 R15: ffff8881f703d708 [ 595.370175][ C1] FS: 0000555580f91500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 595.379098][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 595.385676][ C1] CR2: 0000000000000000 CR3: 0000000120f7c000 CR4: 00000000003506a0 [ 595.393640][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 595.401605][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 595.409570][ C1] Call Trace: [ 595.412843][ C1] [ 595.415770][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 595.420814][ C1] ? smp_call_function_many+0x40/0x40 [ 595.426178][ C1] ? enqueue_timer+0x16a/0x480 [ 595.430988][ C1] ? text_poke+0x30/0x30 [ 595.435221][ C1] ? text_poke_loc_init+0x349/0x570 [ 595.440422][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 595.445448][ C1] on_each_cpu_cond_mask+0x43/0x80 [ 595.450555][ C1] text_poke_bp_batch+0x1cc/0x580 [ 595.455574][ C1] ? text_poke_loc_init+0x570/0x570 [ 595.460769][ C1] ? __kasan_check_write+0x14/0x20 [ 595.465944][ C1] ? mutex_lock+0x8d/0x1a0 [ 595.470410][ C1] ? __cfi_mutex_lock+0x10/0x10 [ 595.475598][ C1] ? enqueue_timer+0x16a/0x480 [ 595.480362][ C1] text_poke_finish+0x1a/0x30 [ 595.485033][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 595.491010][ C1] __jump_label_update+0x37c/0x3a0 [ 595.496165][ C1] jump_label_update+0x39b/0x450 [ 595.501096][ C1] static_key_disable_cpuslocked+0xc9/0x1a0 [ 595.506984][ C1] static_key_disable+0x1a/0x30 [ 595.511848][ C1] tracepoint_probe_unregister+0x624/0x8b0 [ 595.517718][ C1] bpf_probe_unregister+0x61/0x70 [ 595.522772][ C1] bpf_raw_tp_link_release+0x63/0x90 [ 595.528078][ C1] bpf_link_free+0x13a/0x390 [ 595.532692][ C1] ? __kasan_record_aux_stack+0xb6/0xc0 [ 595.538235][ C1] ? bpf_link_put_deferred+0x20/0x20 [ 595.543519][ C1] ? task_work_add+0x250/0x330 [ 595.548289][ C1] ? __cfi_task_work_add+0x10/0x10 [ 595.553393][ C1] ? do_futex+0x2b9/0x420 [ 595.557714][ C1] bpf_link_release+0x15f/0x170 [ 595.562556][ C1] ? __cfi_bpf_link_release+0x10/0x10 [ 595.567916][ C1] __fput+0x1fc/0x8f0 [ 595.571937][ C1] ? _raw_spin_unlock+0x4c/0x70 [ 595.576809][ C1] ____fput+0x15/0x20 [ 595.580794][ C1] task_work_run+0x1db/0x240 [ 595.585380][ C1] ? __cfi_task_work_run+0x10/0x10 [ 595.590484][ C1] ? __cfi___close_range+0x10/0x10 [ 595.595613][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 595.600823][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 595.606271][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 595.611772][ C1] do_syscall_64+0x58/0xa0 [ 595.616222][ C1] ? clear_bhb_loop+0x30/0x80 [ 595.620905][ C1] ? clear_bhb_loop+0x30/0x80 [ 595.625591][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 595.631484][ C1] RIP: 0033:0x7eff0778efc9 [ 595.635898][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.655490][ C1] RSP: 002b:00007ffe89801d38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 595.663892][ C1] RAX: 0000000000000000 RBX: 00000000000567c7 RCX: 00007eff0778efc9 [ 595.671856][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 595.679829][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 000000068980202f [ 595.687787][ C1] R10: 0000001b2f220000 R11: 0000000000000246 R12: 00007eff079e5fac [ 595.695753][ C1] R13: 00007eff079e5fa0 R14: ffffffffffffffff R15: 0000000000000003 [ 595.703724][ C1] [ 595.706741][ C1] Sending NMI from CPU 1 to CPUs 0: [ 595.712000][ C0] NMI backtrace for cpu 0 [ 595.712009][ C0] CPU: 0 PID: 19 Comm: kworker/0:1 Not tainted syzkaller #0 [ 595.712026][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 595.712037][ C0] Workqueue: rcu_gp srcu_invoke_callbacks [ 595.712147][ C0] RIP: 0010:kvm_wait+0xcc/0x140 [ 595.712170][ C0] Code: 20 f6 44 24 21 02 75 24 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 48 0f b6 07 40 38 f0 75 a6 66 90 0f 00 2d 45 96 13 04 f4 9a fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 [ 595.712183][ C0] RSP: 0018:ffffc90000006a20 EFLAGS: 00000046 [ 595.712196][ C0] RAX: 0000000000000003 RBX: ffff8881f7027c40 RCX: ffffffff84f43dc2 [ 595.712207][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881f7027c40 [ 595.712219][ C0] RBP: ffffc90000006ab0 R08: dffffc0000000000 R09: ffffed103ee04f89 [ 595.712231][ C0] R10: ffffed103ee04f89 R11: 1ffff1103ee04f88 R12: 1ffff1103ee00001 [ 595.712244][ C0] R13: ffff8881f7038cd4 R14: dffffc0000000000 R15: 1ffff92000000d44 [ 595.712256][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 595.712271][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 595.712283][ C0] CR2: 00007ffe89801e58 CR3: 000000010fc89000 CR4: 00000000003506b0 [ 595.712298][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 595.712307][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 595.712318][ C0] Call Trace: [ 595.712324][ C0] [ 595.712331][ C0] ? __cfi_kvm_wait+0x10/0x10 [ 595.712363][ C0] ? pv_hash+0x86/0x150 [ 595.712386][ C0] __pv_queued_spin_lock_slowpath+0x690/0xc40 [ 595.712419][ C0] ? __kernel_text_address+0xd/0x30 [ 595.712453][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 595.712488][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 595.712524][ C0] _raw_spin_lock_irqsave+0x108/0x110 [ 595.712542][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 595.712560][ C0] ? kasan_save_stack+0x4c/0x60 [ 595.712596][ C0] ? kasan_save_stack+0x3a/0x60 [ 595.712613][ C0] ? __kasan_record_aux_stack+0xb6/0xc0 [ 595.712638][ C0] ? kasan_record_aux_stack_noalloc+0xb/0x10 [ 595.712662][ C0] ? kvfree_call_rcu+0x95/0x7a0 [ 595.712705][ C0] lock_timer_base+0x127/0x270 [ 595.712726][ C0] __mod_timer+0x10a/0xb30 [ 595.712744][ C0] ? ip_local_deliver+0x1d8/0x320 [ 595.712818][ C0] ? ip_rcv+0x163/0x270 [ 595.712840][ C0] ? __netif_receive_skb+0xd7/0x2a0 [ 595.712905][ C0] ? __napi_poll+0xd0/0x5e0 [ 595.712928][ C0] ? net_rx_action+0x49b/0xaa0 [ 595.712953][ C0] ? __do_softirq+0xb/0xd [ 595.712975][ C0] ? process_one_work+0x71f/0xc40 [ 595.712992][ C0] add_timer+0x68/0x80 [ 595.713011][ C0] __queue_delayed_work+0x173/0x200 [ 595.713034][ C0] queue_delayed_work_on+0xdb/0x150 [ 595.713062][ C0] ? __cfi_queue_delayed_work_on+0x10/0x10 [ 595.713086][ C0] kvfree_call_rcu+0x436/0x7a0 [ 595.713107][ C0] ? __cfi_kvfree_call_rcu+0x10/0x10 [ 595.713127][ C0] ? longest_prefix_match+0x337/0x640 [ 595.713195][ C0] trie_delete_elem+0x572/0x720 [ 595.713216][ C0] bpf_prog_5186c38a4019a4cb+0x42/0x46 [ 595.713233][ C0] bpf_trace_run3+0x113/0x270 [ 595.713257][ C0] ? __cfi_bpf_trace_run3+0x10/0x10 [ 595.713280][ C0] ? debug_smp_processor_id+0x17/0x20 [ 595.713306][ C0] ? get_nohz_timer_target+0x74/0x540 [ 595.713325][ C0] __bpf_trace_timer_start+0x2b/0x40 [ 595.713343][ C0] enqueue_timer+0x337/0x480 [ 595.713366][ C0] __mod_timer+0x79f/0xb30 [ 595.713387][ C0] mod_timer+0x1f/0x30 [ 595.713405][ C0] sk_reset_timer+0x22/0xb0 [ 595.713469][ C0] tcp_rearm_rto+0x312/0x700 [ 595.713511][ C0] ? tcp_rbtree_insert+0x149/0x180 [ 595.713537][ C0] tcp_event_new_data_sent+0x250/0x400 [ 595.713579][ C0] tcp_write_xmit+0x161f/0x5fb0 [ 595.713606][ C0] __tcp_push_pending_frames+0x9c/0x2f0 [ 595.713626][ C0] tcp_rcv_established+0xed9/0x1a20 [ 595.713655][ C0] ? __cfi_tcp_rcv_established+0x10/0x10 [ 595.713681][ C0] ? ipv4_dst_check+0xf2/0x160 [ 595.713701][ C0] tcp_v4_do_rcv+0x446/0xa10 [ 595.713726][ C0] tcp_v4_rcv+0x233c/0x2a80 [ 595.713748][ C0] ? arch_stack_walk+0x124/0x150 [ 595.713792][ C0] ? __kasan_slab_free+0x11/0x20 [ 595.713860][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 595.713956][ C0] ? __cfi_tcp_v4_rcv+0x10/0x10 [ 595.713978][ C0] ? addrconf_ifdown+0x15d/0x1910 [ 595.714051][ C0] ? addrconf_notify+0x39f/0xe40 [ 595.714066][ C0] ? raw_notifier_call_chain+0xa1/0x110 [ 595.714107][ C0] ? unregister_netdevice_many+0xf8f/0x1820 [ 595.714130][ C0] ? default_device_exit_batch+0x9b9/0xa50 [ 595.714145][ C0] ? process_one_work+0x71f/0xc40 [ 595.714160][ C0] ? worker_thread+0xa29/0x11f0 [ 595.714175][ C0] ? kthread+0x281/0x320 [ 595.714191][ C0] ? ret_from_fork+0x1f/0x30 [ 595.714211][ C0] ip_protocol_deliver_rcu+0x325/0x6e0 [ 595.714238][ C0] ip_local_deliver_finish+0x24e/0x410 [ 595.714264][ C0] ip_local_deliver+0x1d8/0x320 [ 595.714287][ C0] ? __cfi_ip_local_deliver+0x10/0x10 [ 595.714310][ C0] ? memset+0x35/0x40 [ 595.714323][ C0] ? ip_rcv_finish_core+0xb0b/0x1490 [ 595.714350][ C0] ip_rcv+0x163/0x270 [ 595.714373][ C0] ? __cfi_ip_rcv+0x10/0x10 [ 595.714395][ C0] ? enqueue_task_fair+0xb91/0x1d10 [ 595.714422][ C0] ? __kasan_check_write+0x14/0x20 [ 595.714436][ C0] ? _raw_spin_lock_irq+0x8f/0xe0 [ 595.714453][ C0] ? __cfi_ip_rcv+0x10/0x10 [ 595.714475][ C0] __netif_receive_skb+0xd7/0x2a0 [ 595.714498][ C0] ? __cfi_enqueue_task_fair+0x10/0x10 [ 595.714524][ C0] process_backlog+0x351/0x600 [ 595.714551][ C0] __napi_poll+0xd0/0x5e0 [ 595.714582][ C0] net_rx_action+0x49b/0xaa0 [ 595.714613][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 595.714637][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 595.714656][ C0] ? irqtime_account_irq+0x75/0x240 [ 595.714680][ C0] handle_softirqs+0x1d7/0x600 [ 595.714700][ C0] __do_softirq+0xb/0xd [ 595.714721][ C0] do_softirq+0xc6/0x120 [ 595.714737][ C0] [ 595.714742][ C0] [ 595.714747][ C0] ? __cfi_do_softirq+0x10/0x10 [ 595.714764][ C0] ? complete+0x167/0x1c0 [ 595.714784][ C0] ? srcu_invoke_callbacks+0x210/0x410 [ 595.714803][ C0] __local_bh_enable_ip+0x75/0x80 [ 595.714819][ C0] srcu_invoke_callbacks+0x1cf/0x410 [ 595.714839][ C0] ? __cfi_srcu_invoke_callbacks+0x10/0x10 [ 595.714857][ C0] ? _raw_spin_lock_irq+0x8f/0xe0 [ 595.714873][ C0] ? kfree_rcu_monitor+0x78a/0x7f0 [ 595.714890][ C0] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 595.714905][ C0] process_one_work+0x71f/0xc40 [ 595.714924][ C0] worker_thread+0xa29/0x11f0 [ 595.714945][ C0] kthread+0x281/0x320 [ 595.714961][ C0] ? __cfi_worker_thread+0x10/0x10 [ 595.714976][ C0] ? __cfi_kthread+0x10/0x10 [ 595.714992][ C0] ret_from_fork+0x1f/0x30 [ 595.715030][ C0]