Warning: Permanently added '10.128.1.83' (ED25519) to the list of known hosts. 2025/08/11 10:57:35 ignoring optional flag "sandboxArg"="0" 2025/08/11 10:57:36 parsed 1 programs [ 90.504239][ T30] audit: type=1400 audit(1754909856.266:63): avc: denied { node_bind } for pid=5852 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 92.430247][ T30] audit: type=1400 audit(1754909858.186:64): avc: denied { mounton } for pid=5860 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 92.435527][ T5860] cgroup: Unknown subsys name 'net' [ 92.453048][ T30] audit: type=1400 audit(1754909858.186:65): avc: denied { mount } for pid=5860 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 92.480428][ T30] audit: type=1400 audit(1754909858.216:66): avc: denied { unmount } for pid=5860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 92.685439][ T5860] cgroup: Unknown subsys name 'cpuset' [ 92.693784][ T5860] cgroup: Unknown subsys name 'rlimit' [ 92.822955][ T30] audit: type=1400 audit(1754909858.586:67): avc: denied { setattr } for pid=5860 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.861405][ T30] audit: type=1400 audit(1754909858.586:68): avc: denied { create } for pid=5860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.882525][ T30] audit: type=1400 audit(1754909858.586:69): avc: denied { write } for pid=5860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.902953][ T30] audit: type=1400 audit(1754909858.586:70): avc: denied { read } for pid=5860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.923714][ T30] audit: type=1400 audit(1754909858.606:71): avc: denied { read } for pid=5512 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 92.944663][ T30] audit: type=1400 audit(1754909858.616:72): avc: denied { mounton } for pid=5860 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 92.959492][ T5864] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 93.959672][ T5860] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.715687][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 95.715702][ T30] audit: type=1400 audit(1754909861.476:78): avc: denied { execmem } for pid=5865 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 95.934600][ T30] audit: type=1400 audit(1754909861.696:79): avc: denied { read } for pid=5866 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 95.956834][ T30] audit: type=1400 audit(1754909861.706:80): avc: denied { open } for pid=5866 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 95.983736][ T30] audit: type=1400 audit(1754909861.716:81): avc: denied { mounton } for pid=5866 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 96.018094][ T30] audit: type=1400 audit(1754909861.776:82): avc: denied { mounton } for pid=5866 comm="syz-executor" path="/root/syzkaller.rKKspR/syz-tmp" dev="sda1" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 96.042537][ T30] audit: type=1400 audit(1754909861.776:83): avc: denied { mount } for pid=5866 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 96.064618][ T30] audit: type=1400 audit(1754909861.776:84): avc: denied { mounton } for pid=5866 comm="syz-executor" path="/root/syzkaller.rKKspR/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 96.089877][ T30] audit: type=1400 audit(1754909861.776:85): avc: denied { mount } for pid=5866 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 96.111664][ T30] audit: type=1400 audit(1754909861.776:86): avc: denied { mounton } for pid=5866 comm="syz-executor" path="/root/syzkaller.rKKspR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 96.138247][ T30] audit: type=1400 audit(1754909861.776:87): avc: denied { mounton } for pid=5866 comm="syz-executor" path="/root/syzkaller.rKKspR/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 96.169693][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.319530][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.330817][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.338723][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.355510][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.363779][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.623260][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.633356][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.683995][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.691928][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.070691][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 99.153394][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.161061][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.168534][ T5935] bridge_slave_0: entered allmulticast mode [ 99.179153][ T5935] bridge_slave_0: entered promiscuous mode [ 99.189949][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.197751][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.205459][ T5935] bridge_slave_1: entered allmulticast mode [ 99.212439][ T5935] bridge_slave_1: entered promiscuous mode [ 99.241525][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.252822][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.283412][ T5935] team0: Port device team_slave_0 added [ 99.291569][ T5935] team0: Port device team_slave_1 added [ 99.319976][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.327174][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.353570][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.366657][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.373662][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.399614][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.434328][ T5935] hsr_slave_0: entered promiscuous mode [ 99.440553][ T5935] hsr_slave_1: entered promiscuous mode [ 99.556394][ T5935] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.567537][ T5935] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.576945][ T5935] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.586729][ T5935] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.612371][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.619590][ T5935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.627744][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.634839][ T5935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.654475][ T991] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.664036][ T991] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.701630][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.719982][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.732262][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.739385][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.754777][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.762039][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.904769][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.944805][ T5935] veth0_vlan: entered promiscuous mode [ 99.956913][ T5935] veth1_vlan: entered promiscuous mode [ 99.980594][ T5935] veth0_macvtap: entered promiscuous mode [ 99.990460][ T5935] veth1_macvtap: entered promiscuous mode [ 100.007151][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.020372][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.037498][ T991] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.050346][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.061306][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.070538][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.171263][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.265152][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.367384][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/08/11 10:57:46 executed programs: 0 [ 100.460519][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.523872][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.531745][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.541184][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.550114][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.558456][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.691183][ T5960] chnl_net:caif_netlink_parms(): no params data found [ 100.748547][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.756377][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.763988][ T5960] bridge_slave_0: entered allmulticast mode [ 100.770878][ T5960] bridge_slave_0: entered promiscuous mode [ 100.779870][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.787143][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.794381][ T5960] bridge_slave_1: entered allmulticast mode [ 100.801110][ T5960] bridge_slave_1: entered promiscuous mode [ 100.829737][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.842389][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.873066][ T5960] team0: Port device team_slave_0 added [ 100.880808][ T5960] team0: Port device team_slave_1 added [ 100.905191][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.912160][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.939395][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.951980][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.960252][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.986332][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.031242][ T5960] hsr_slave_0: entered promiscuous mode [ 101.037527][ T5960] hsr_slave_1: entered promiscuous mode [ 101.043690][ T5960] debugfs: 'hsr0' already exists in 'hsr' [ 101.049484][ T5960] Cannot create hsr debugfs directory [ 102.593083][ T5873] Bluetooth: hci0: command tx timeout [ 103.404402][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 103.404418][ T30] audit: type=1400 audit(1754909869.166:109): avc: denied { search } for pid=5512 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.432482][ T30] audit: type=1400 audit(1754909869.166:110): avc: denied { search } for pid=5512 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.462713][ T30] audit: type=1400 audit(1754909869.166:111): avc: denied { search } for pid=5512 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.495720][ T36] bridge_slave_1: left allmulticast mode [ 103.501669][ T36] bridge_slave_1: left promiscuous mode [ 103.510663][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.528973][ T36] bridge_slave_0: left allmulticast mode [ 103.536193][ T36] bridge_slave_0: left promiscuous mode [ 103.541957][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.550143][ T30] audit: type=1400 audit(1754909869.296:112): avc: denied { read open } for pid=5972 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.575929][ T30] audit: type=1400 audit(1754909869.296:113): avc: denied { getattr } for pid=5972 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.760571][ T30] audit: type=1400 audit(1754909869.516:114): avc: denied { add_name } for pid=5971 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.851408][ T30] audit: type=1400 audit(1754909869.606:115): avc: denied { remove_name } for pid=5982 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2023 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.937926][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.948975][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.959478][ T36] bond0 (unregistering): Released all slaves [ 104.031794][ T36] hsr_slave_0: left promiscuous mode [ 104.037776][ T36] hsr_slave_1: left promiscuous mode [ 104.043728][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.051135][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.060095][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.067647][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.082792][ T36] veth1_macvtap: left promiscuous mode [ 104.088446][ T36] veth0_macvtap: left promiscuous mode [ 104.094155][ T36] veth1_vlan: left promiscuous mode [ 104.099525][ T36] veth0_vlan: left promiscuous mode [ 104.347305][ T36] team0 (unregistering): Port device team_slave_1 removed [ 104.370839][ T36] team0 (unregistering): Port device team_slave_0 removed [ 104.673264][ T5873] Bluetooth: hci0: command tx timeout [ 104.856416][ T5960] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.869536][ T5960] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.881939][ T5960] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.900567][ T5960] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.055533][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.090495][ T5960] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.109655][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.116844][ T4273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.132571][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.139739][ T4273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.378902][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.430853][ T5960] veth0_vlan: entered promiscuous mode [ 105.444030][ T5960] veth1_vlan: entered promiscuous mode [ 105.480744][ T5960] veth0_macvtap: entered promiscuous mode [ 105.491150][ T5960] veth1_macvtap: entered promiscuous mode [ 105.513122][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.530038][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.546504][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.559032][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.568426][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.587597][ T65] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.665692][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.675785][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/08/11 10:57:51 executed programs: 2 [ 105.727796][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.738165][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.790021][ T30] audit: type=1400 audit(1754909871.546:116): avc: denied { create } for pid=6029 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.818776][ T30] audit: type=1400 audit(1754909871.546:117): avc: denied { ioctl } for pid=6029 comm="syz.0.17" path="socket:[5916]" dev="sockfs" ino=5916 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 210.912220][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 210.919296][ C1] rcu: 0-...!: (0 ticks this GP) idle=13e4/1/0x4000000000000000 softirq=18324/18324 fqs=1 [ 210.929766][ C1] rcu: (detected by 1, t=10502 jiffies, g=9901, q=322 ncpus=2) [ 210.937410][ C1] Sending NMI from CPU 1 to CPUs 0: [ 210.937533][ C0] NMI backtrace for cpu 0 [ 210.937564][ C0] CPU: 0 UID: 0 PID: 5960 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 210.937587][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.937603][ C0] RIP: 0010:timerqueue_add+0x6/0x330 [ 210.937637][ C0] Code: ba 04 00 00 00 31 f6 31 ff e8 c6 f0 73 f6 e9 e6 fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 41 55 41 54 55 48 89 f5 53 48 83 ec 08 48 89 3c 24 e8 b2 29 [ 210.937655][ C0] RSP: 0018:ffffc90000007e30 EFLAGS: 00000046 [ 210.937670][ C0] RAX: 0000000000000000 RBX: ffff8880b8427d80 RCX: 0000000000000001 [ 210.937681][ C0] RDX: 0000000000000000 RSI: ffff88807a2d6340 RDI: ffff8880b8427dd0 [ 210.937693][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 000000000000001f [ 210.937711][ C0] R10: 0000000000000001 R11: ffffffff9b0f7c18 R12: ffff8880b8427c80 [ 210.937723][ C0] R13: 0000000000000000 R14: ffff88807a2d6340 R15: 0000000000000001 [ 210.937735][ C0] FS: 00005555883eb500(0000) GS:ffff8881246bd000(0000) knlGS:0000000000000000 [ 210.937752][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.937765][ C0] CR2: 00007fb991aaf0f6 CR3: 0000000058033000 CR4: 00000000003526f0 [ 210.937777][ C0] Call Trace: [ 210.937784][ C0] [ 210.937792][ C0] __hrtimer_run_queues+0x8ff/0xad0 [ 210.937822][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 210.937844][ C0] ? read_tsc+0x9/0x20 [ 210.937872][ C0] hrtimer_interrupt+0x397/0x8e0 [ 210.937900][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 210.937922][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 210.937951][ C0] [ 210.937957][ C0] [ 210.937963][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 210.937984][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 210.938014][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 46 ca 01 f6 48 89 df e8 2e 1e 02 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 a5 1b f2 f5 65 8b 05 1e 38 40 08 85 c0 74 16 5b [ 210.938032][ C0] RSP: 0018:ffffc90003ccfc20 EFLAGS: 00000246 [ 210.938045][ C0] RAX: 0000000000000006 RBX: ffff8880b8427c80 RCX: ffffffff81c378cf [ 210.938057][ C0] RDX: 0000000000000000 RSI: ffffffff8de4f0f5 RDI: ffffffff8c162400 [ 210.938069][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000001 [ 210.938080][ C0] R10: ffffffff90ab3597 R11: 0000000000000000 R12: 0000000000000001 [ 210.938091][ C0] R13: ffff8880b8427d00 R14: 0000000000000000 R15: ffffc90003ccfda8 [ 210.938107][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 210.938133][ C0] hrtimer_try_to_cancel+0x165/0x2f0 [ 210.938156][ C0] do_nanosleep+0x227/0x570 [ 210.938182][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 210.938207][ C0] ? __asan_memset+0x23/0x50 [ 210.938234][ C0] ? __hrtimer_setup+0x176/0x280 [ 210.938255][ C0] hrtimer_nanosleep+0x155/0x380 [ 210.938278][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 210.938303][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 210.938324][ C0] ? get_timespec64+0x147/0x240 [ 210.938350][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 210.938378][ C0] common_nsleep+0xa1/0xd0 [ 210.938406][ C0] __x64_sys_clock_nanosleep+0x34a/0x4a0 [ 210.938430][ C0] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 210.938457][ C0] do_syscall_64+0xcd/0x4c0 [ 210.938477][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.938496][ C0] RIP: 0033:0x7f7f399c14a5 [ 210.938511][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 210.938528][ C0] RSP: 002b:00007fff71f4bf60 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 210.938544][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7f399c14a5 [ 210.938556][ C0] RDX: 00007fff71f4bfa0 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.938567][ C0] RBP: 00007fff71f4c00c R08: 0000000000000000 R09: 0000000000000000 [ 210.938578][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 210.938589][ C0] R13: 00000000000927c0 R14: 0000000000019d43 R15: 00007fff71f4c060 [ 210.938607][ C0] [ 210.939441][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g9901 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 211.353073][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 211.363033][ C1] rcu: RCU grace-period kthread stack dump: [ 211.368906][ C1] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 211.382432][ C1] Call Trace: [ 211.385789][ C1] [ 211.388717][ C1] __schedule+0x1190/0x5de0 [ 211.393238][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 211.398304][ C1] ? __pfx___schedule+0x10/0x10 [ 211.403166][ C1] ? find_held_lock+0x2b/0x80 [ 211.407841][ C1] ? schedule+0x2d7/0x3a0 [ 211.412179][ C1] schedule+0xe7/0x3a0 [ 211.416285][ C1] schedule_timeout+0x123/0x290 [ 211.421140][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 211.426520][ C1] ? __pfx_process_timeout+0x10/0x10 [ 211.431906][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 211.437739][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 211.443220][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 211.448009][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 211.453287][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 211.458577][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 211.463504][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 211.468363][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 211.474181][ C1] rcu_gp_kthread+0x270/0x380 [ 211.478853][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 211.484043][ C1] ? rcu_is_watching+0x12/0xc0 [ 211.488807][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 211.494091][ C1] ? __kthread_parkme+0x19e/0x250 [ 211.499225][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 211.504417][ C1] kthread+0x3c5/0x780 [ 211.508483][ C1] ? __pfx_kthread+0x10/0x10 [ 211.513073][ C1] ? rcu_is_watching+0x12/0xc0 [ 211.517882][ C1] ? __pfx_kthread+0x10/0x10 [ 211.522485][ C1] ret_from_fork+0x5d7/0x6f0 [ 211.527071][ C1] ? __pfx_kthread+0x10/0x10 [ 211.531657][ C1] ret_from_fork_asm+0x1a/0x30 [ 211.536442][ C1] [ 211.539463][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 211.545776][ C1] CPU: 1 UID: 0 PID: 6032 Comm: sed Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 211.555406][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 211.565460][ C1] RIP: 0010:smp_call_function_many_cond+0xdfd/0x1600 [ 211.572167][ C1] Code: 57 48 8b 54 24 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 05 05 0c 00 f3 90 <41> 0f b6 45 00 40 38 c5 7c 08 84 c0 0f 85 e0 05 00 00 8b 43 08 31 [ 211.591857][ C1] RSP: 0018:ffffc9000403f930 EFLAGS: 00000293 [ 211.597924][ C1] RAX: 0000000000000000 RBX: ffff8880b8442000 RCX: ffffffff81af8e41 [ 211.605889][ C1] RDX: ffff888058318000 RSI: ffffffff81af8e1b RDI: 0000000000000005 [ 211.613869][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 211.621863][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 211.629858][ C1] R13: ffffed1017088401 R14: 0000000000000001 R15: 0000000000000000 [ 211.637858][ C1] FS: 0000000000000000(0000) GS:ffff8881247bd000(0000) knlGS:0000000000000000 [ 211.646842][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.653429][ C1] CR2: 00007ff1a6cb1368 CR3: 000000000e380000 CR4: 00000000003526f0 [ 211.661398][ C1] Call Trace: [ 211.664672][ C1] [ 211.667610][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 211.672819][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 211.679169][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 211.684371][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 211.689487][ C1] flush_tlb_mm_range+0x4a0/0x17a0 [ 211.694620][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 211.699734][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 211.705293][ C1] tlb_finish_mmu+0x3c9/0x7c0 [ 211.709981][ C1] exit_mmap+0x403/0xb90 [ 211.714230][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 211.719002][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 211.723963][ C1] __mmput+0x12a/0x410 [ 211.728032][ C1] mmput+0x62/0x70 [ 211.731756][ C1] do_exit+0x7c7/0x2bf0 [ 211.735940][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 211.740963][ C1] ? __pfx_do_exit+0x10/0x10 [ 211.745573][ C1] ? rcu_is_watching+0x12/0xc0 [ 211.750431][ C1] do_group_exit+0xd3/0x2a0 [ 211.754954][ C1] __x64_sys_exit_group+0x3e/0x50 [ 211.760006][ C1] x64_sys_call+0x14fa/0x1720 [ 211.764689][ C1] do_syscall_64+0xcd/0x4c0 [ 211.769195][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.775098][ C1] RIP: 0033:0x7fb99189e6c5 [ 211.779519][ C1] Code: Unable to access opcode bytes at 0x7fb99189e69b. [ 211.786520][ C1] RSP: 002b:00007fff48eb9288 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 211.794925][ C1] RAX: ffffffffffffffda RBX: 00007fb99199ffe8 RCX: 00007fb99189e6c5 [ 211.802887][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 211.810853][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 211.818813][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 211.826796][ C1] R13: 0000000000000000 R14: 00007fb99199e680 R15: 00007fb9919a0000 [ 211.834778][ C1]