syzkaller syzkaller login: [ 17.453345][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 17.453360][ T28] audit: type=1400 audit(1778479605.780:59): avc: denied { transition } for pid=224 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.460692][ T28] audit: type=1400 audit(1778479605.780:60): avc: denied { noatsecure } for pid=224 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.465095][ T28] audit: type=1400 audit(1778479605.780:61): avc: denied { write } for pid=224 comm="sh" path="pipe:[14449]" dev="pipefs" ino=14449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 17.469298][ T28] audit: type=1400 audit(1778479605.780:62): avc: denied { rlimitinh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.473181][ T28] audit: type=1400 audit(1778479605.780:63): avc: denied { siginh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.100' (ED25519) to the list of known hosts. 2026/05/11 06:10:10 parsed 1 programs [ 221.749507][ T28] audit: type=1400 audit(1778479810.080:64): avc: denied { node_bind } for pid=294 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 221.770422][ T28] audit: type=1400 audit(1778479810.080:65): avc: denied { module_request } for pid=294 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 222.589732][ T28] audit: type=1400 audit(1778479810.920:66): avc: denied { mounton } for pid=300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 222.590768][ T300] cgroup: Unknown subsys name 'net' [ 222.612566][ T28] audit: type=1400 audit(1778479810.920:67): avc: denied { mount } for pid=300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 222.640433][ T28] audit: type=1400 audit(1778479810.940:68): avc: denied { unmount } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 222.640519][ T300] cgroup: Unknown subsys name 'devices' [ 222.780779][ T300] cgroup: Unknown subsys name 'hugetlb' [ 222.786516][ T300] cgroup: Unknown subsys name 'rlimit' [ 222.893910][ T28] audit: type=1400 audit(1778479811.220:69): avc: denied { setattr } for pid=300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 222.917464][ T28] audit: type=1400 audit(1778479811.220:70): avc: denied { create } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 222.936273][ T304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 222.938084][ T28] audit: type=1400 audit(1778479811.220:71): avc: denied { write } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 222.965877][ T300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 222.966990][ T28] audit: type=1400 audit(1778479811.220:72): avc: denied { read } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 222.995914][ T28] audit: type=1400 audit(1778479811.220:73): avc: denied { mounton } for pid=300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 223.839631][ T311] request_module fs-gadgetfs succeeded, but still no fs? [ 224.353137][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.360455][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.368235][ T343] device bridge_slave_0 entered promiscuous mode [ 224.383466][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.390956][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.398504][ T343] device bridge_slave_1 entered promiscuous mode [ 224.494171][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.501389][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.508705][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.515807][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.542819][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.551123][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.558671][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.579612][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.587859][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.595098][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.602715][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.610991][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.618118][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.625611][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.633670][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.650159][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 224.661419][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 224.669695][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.677294][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.685754][ T343] device veth0_vlan entered promiscuous mode 2026/05/11 06:10:13 executed programs: 0 [ 224.695784][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.704777][ T343] device veth1_macvtap entered promiscuous mode [ 224.714585][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.724651][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.771171][ T343] syz-executor (343) used greatest stack depth: 21920 bytes left [ 224.963310][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.970485][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.977783][ T376] device bridge_slave_0 entered promiscuous mode [ 225.003421][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.010595][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.018212][ T376] device bridge_slave_1 entered promiscuous mode [ 225.054192][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.061540][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.069081][ T373] device bridge_slave_0 entered promiscuous mode [ 225.090792][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.098053][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.105607][ T375] device bridge_slave_0 entered promiscuous mode [ 225.116105][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.123545][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.131151][ T375] device bridge_slave_1 entered promiscuous mode [ 225.140168][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.147395][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.155011][ T373] device bridge_slave_1 entered promiscuous mode [ 225.178023][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.185384][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.192974][ T378] device bridge_slave_0 entered promiscuous mode [ 225.202888][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.210207][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.217806][ T378] device bridge_slave_1 entered promiscuous mode [ 225.258180][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.265726][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.273391][ T379] device bridge_slave_0 entered promiscuous mode [ 225.281054][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.288335][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.296052][ T379] device bridge_slave_1 entered promiscuous mode [ 225.444603][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.451882][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.459197][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.466326][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.522343][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.529534][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.537002][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.544202][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.577098][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.584212][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.591533][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.598556][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.611111][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.618171][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.625559][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.632611][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.670966][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.678235][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.685644][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.692703][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.710846][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.718338][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.725578][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.733673][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.741191][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.748473][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.755770][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.763286][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.770654][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.777870][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.785195][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.794430][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.802803][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.809865][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.819625][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.840587][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.849306][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.856519][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.879175][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.886914][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.895718][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.902792][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.922909][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.931269][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.938396][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.946253][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.955095][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.962182][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.993866][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.003060][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.011540][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.018672][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.026471][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.035005][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.043325][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.051439][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.059428][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.067441][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.075620][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.083863][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.092116][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.100408][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.108392][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.116228][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.123711][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.131910][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.139945][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.147300][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.156626][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.164964][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.173261][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.180434][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.205084][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.213635][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.221828][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.228973][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.236733][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.245447][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.253872][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.260921][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.268386][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 226.277702][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 226.286264][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 226.294655][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 226.312673][ T375] device veth0_vlan entered promiscuous mode [ 226.327676][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 226.337098][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.345512][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.353568][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 226.361554][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 226.369827][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.378184][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.386874][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.394048][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.401421][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 226.409951][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.417661][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.436555][ T375] device veth1_macvtap entered promiscuous mode [ 226.445934][ T378] device veth0_vlan entered promiscuous mode [ 226.452951][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 226.461341][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.470877][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.479289][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 226.486840][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.494953][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.509295][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 226.517347][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.525089][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.532968][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.540962][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.548409][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 226.558700][ T376] device veth0_vlan entered promiscuous mode [ 226.577255][ T378] device veth1_macvtap entered promiscuous mode [ 226.589528][ T379] device veth0_vlan entered promiscuous mode [ 226.597639][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.606402][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 226.614490][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 226.623118][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.631594][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.639828][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.647994][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.656561][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 226.665088][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 226.673515][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.681830][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.690155][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.697596][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.717649][ T376] device veth1_macvtap entered promiscuous mode [ 226.733165][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 226.742014][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.751324][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.773268][ T379] device veth1_macvtap entered promiscuous mode [ 226.780330][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 226.780345][ T28] audit: type=1400 audit(1778479815.110:106): avc: denied { open } for pid=395 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 226.805745][ T28] audit: type=1400 audit(1778479815.110:107): avc: denied { perfmon } for pid=395 comm="syz.1.18" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 226.827918][ T28] audit: type=1400 audit(1778479815.110:108): avc: denied { kernel } for pid=395 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 226.869736][ T373] device veth0_vlan entered promiscuous mode [ 226.879207][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 226.887324][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.895584][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.903288][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.911724][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 226.920300][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 226.928680][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 226.937321][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 226.946966][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.955607][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.964257][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 226.972690][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 227.004791][ T373] device veth1_macvtap entered promiscuous mode [ 227.014194][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 227.023115][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.031582][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 227.040404][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 227.049299][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 227.057717][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 227.066181][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 228.728941][ C0] hrtimer: interrupt took 14833 ns 2026/05/11 06:10:23 executed programs: 11 [ 334.788894][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 334.796055][ C1] (detected by 1, t=10002 jiffies, g=1641, q=341 ncpus=2) [ 334.803301][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4294970674-4294960672), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 334.816967][ C1] rcu: rcu_preempt kthread starved for 10002 jiffies! g1641 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 334.828190][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 334.838164][ C1] rcu: RCU grace-period kthread stack dump: [ 334.844054][ C1] task:rcu_preempt state:R running task stack:28064 pid:14 ppid:2 flags:0x00004000 [ 334.854935][ C1] Call Trace: [ 334.858308][ C1] [ 334.861337][ C1] __schedule+0xba6/0x1500 [ 334.865775][ C1] ? release_firmware_map_entry+0x190/0x190 [ 334.871784][ C1] schedule+0xbd/0x170 [ 334.875872][ C1] schedule_timeout+0x159/0x340 [ 334.880762][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 334.886156][ C1] ? __cfi_process_timeout+0x10/0x10 [ 334.891453][ C1] ? prepare_to_swait_event+0x308/0x320 [ 334.897018][ C1] rcu_gp_fqs_loop+0x2e9/0x10c0 [ 334.901876][ C1] ? _raw_spin_unlock_irq+0x4d/0x70 [ 334.907083][ C1] ? rcu_gp_init+0xf30/0xf30 [ 334.911767][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 334.917594][ C1] ? finish_swait+0x17d/0x1b0 [ 334.922286][ C1] rcu_gp_kthread+0x99/0x390 [ 334.926880][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 334.932084][ C1] ? __kasan_check_read+0x11/0x20 [ 334.937118][ C1] ? __kthread_parkme+0x142/0x180 [ 334.942153][ C1] kthread+0x281/0x320 [ 334.946322][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 334.951695][ C1] ? __cfi_kthread+0x10/0x10 [ 334.956400][ C1] ret_from_fork+0x1f/0x30 [ 334.960835][ C1] [ 334.963866][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 334.970282][ C1] CPU: 1 PID: 395 Comm: syz.1.18 Not tainted syzkaller #0 [ 334.977585][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 334.987673][ C1] RIP: 0010:can_stat_update+0x4a/0xbb0 [ 334.993230][ C1] Code: f8 ee fc 4d 8d 6c 24 38 4c 89 e8 48 c1 e8 03 48 89 45 c8 42 80 3c 30 00 74 08 4c 89 ef e8 6e 93 34 fd 49 8b 45 00 48 89 45 d0 <48> c7 c0 c0 b9 00 87 48 c1 e8 03 42 80 3c 30 00 74 0c 48 c7 c7 c0 [ 335.012846][ C1] RSP: 0018:ffffc900001b0cc0 EFLAGS: 00000246 [ 335.019009][ C1] RAX: ffff88810b76ff00 RBX: 0000000000000100 RCX: ffff888115265100 [ 335.026991][ C1] RDX: 0000000000000100 RSI: ffffffff84827db0 RDI: ffff8881146f55a8 [ 335.035147][ C1] RBP: ffffc900001b0d38 R08: 0000000000000003 R09: 0000000000000004 [ 335.043124][ C1] R10: 0000000000000000 R11: fffff520000361a0 R12: ffff8881146f55a8 [ 335.051196][ C1] R13: ffff8881146f55e0 R14: dffffc0000000000 R15: ffff8881146f55a8 [ 335.059281][ C1] FS: 000055555ef26500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 335.068218][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 335.074810][ C1] CR2: 00007fe85a244b91 CR3: 0000000112bcb000 CR4: 00000000003506a0 [ 335.082794][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 335.090785][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 335.098870][ C1] Call Trace: [ 335.102154][ C1] [ 335.105002][ C1] ? call_timer_fn+0x2c/0x2a0 [ 335.109781][ C1] ? __cfi_can_stat_update+0x10/0x10 [ 335.115079][ C1] call_timer_fn+0x46/0x2a0 [ 335.119598][ C1] ? __cfi_can_stat_update+0x10/0x10 [ 335.124894][ C1] __run_timers+0x65b/0x9f0 [ 335.129428][ C1] ? calc_index+0x200/0x200 [ 335.134045][ C1] ? __irq_exit_rcu+0x5e/0xf0 [ 335.138828][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 335.145000][ C1] run_timer_softirq+0x6a/0xf0 [ 335.149782][ C1] handle_softirqs+0x1d7/0x600 [ 335.154667][ C1] __irq_exit_rcu+0x52/0xf0 [ 335.159283][ C1] irq_exit_rcu+0x9/0x10 [ 335.163593][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 335.169343][ C1] [ 335.172286][ C1] [ 335.175232][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 335.181227][ C1] RIP: 0010:exit_itimers+0xc2/0x670 [ 335.186437][ C1] Code: bf 88 00 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 31 fc 51 00 49 8b 07 <4c> 39 f8 0f 84 43 05 00 00 48 81 c3 58 08 00 00 49 89 dd 49 c1 ed [ 335.206148][ C1] RSP: 0018:ffffc90000a97920 EFLAGS: 00000246 [ 335.212230][ C1] RAX: ffff88812d268088 RBX: ffff888115265100 RCX: dffffc0000000000 [ 335.220470][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888115265100 [ 335.228452][ C1] RBP: ffffc90000a979f0 R08: ffff88812d268007 R09: 1ffff11025a4d000 [ 335.236430][ C1] R10: dffffc0000000000 R11: ffffed1025a4d001 R12: 1ffff11022a4cb2a [ 335.244592][ C1] R13: dffffc0000000000 R14: ffff888115265950 R15: ffff88812d268088 [ 335.252585][ C1] ? __cfi_exit_itimers+0x10/0x10 [ 335.258145][ C1] do_exit+0x631/0x2660 [ 335.262414][ C1] ? __cfi_do_exit+0x10/0x10 [ 335.267034][ C1] ? ctx_flexible_sched_in+0x70/0x70 [ 335.272351][ C1] ? sched_clock_cpu+0x6e/0x260 [ 335.277231][ C1] ? __kasan_check_write+0x14/0x20 [ 335.282448][ C1] ? _raw_spin_lock_irq+0x95/0xf0 [ 335.287499][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 335.293053][ C1] do_group_exit+0x210/0x2d0 [ 335.297747][ C1] ? __kasan_check_write+0x14/0x20 [ 335.302872][ C1] get_signal+0x13b5/0x1520 [ 335.307492][ C1] arch_do_signal_or_restart+0xd1/0x1140 [ 335.313574][ C1] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 335.320179][ C1] ? __kasan_check_write+0x14/0x20 [ 335.325348][ C1] ? finish_task_switch+0x209/0x7b0 [ 335.330564][ C1] ? __switch_to_asm+0x3a/0x60 [ 335.335431][ C1] ? __schedule+0xbae/0x1500 [ 335.340032][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 335.346202][ C1] ? __kasan_check_read+0x11/0x20 [ 335.351243][ C1] exit_to_user_mode_loop+0x7a/0xb0 [ 335.356458][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 335.361940][ C1] irqentry_exit_to_user_mode+0x9/0x10 [ 335.367589][ C1] irqentry_exit+0x12/0x40 [ 335.372116][ C1] sysvec_apic_timer_interrupt+0x64/0xc0 [ 335.377767][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 335.384027][ C1] RIP: 0033:0x7fe85a195b77 [ 335.388454][ C1] Code: 24 08 64 48 2b 14 25 28 00 00 00 75 05 48 83 c4 18 c3 e8 7c 97 00 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 05 e9 0a 25 00 <48> 85 c0 74 14 48 83 ec 08 ff d0 85 c0 75 1a 31 c0 48 83 c4 08 c3 [ 335.408165][ C1] RSP: 002b:00007ffd15e4d928 EFLAGS: 00000206 [ 335.414343][ C1] RAX: 00007ffd15e6d750 RBX: 0000000000000004 RCX: 0000000000000000 [ 335.422507][ C1] RDX: 00007fe85a2b9b40 RSI: 00007ffd15e4d990 RDI: 0000000000000001 [ 335.430560][ C1] RBP: 00007fe85a244b91 R08: 0000000000000000 R09: 0000000000000000 [ 335.438739][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 335.446819][ C1] R13: 00007fe85a415fac R14: 00007fe85a415fa0 R15: 00007fe85a415fa0 [ 335.454810][ C1] [ 375.374312][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 143s! [syz.3.20:398] [ 375.382433][ C0] Modules linked in: [ 375.386335][ C0] CPU: 0 PID: 398 Comm: syz.3.20 Not tainted syzkaller #0 [ 375.393455][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 375.403616][ C0] RIP: 0010:unwind_next_frame+0x115/0x700 [ 375.409445][ C0] Code: f7 e8 5f 66 81 00 48 ba 00 00 00 00 00 fc ff df 4c 89 75 98 49 8b 06 48 89 45 a8 4c 8d 68 20 4c 89 e8 48 c1 e8 03 80 3c 10 00 <74> 12 4c 89 ef e8 31 66 81 00 48 ba 00 00 00 00 00 fc ff df 49 8b [ 375.429064][ C0] RSP: 0018:ffffc90000007708 EFLAGS: 00000246 [ 375.435491][ C0] RAX: 1ffff1102256328c RBX: ffffc90000007788 RCX: 0000000000007700 [ 375.443648][ C0] RDX: dffffc0000000000 RSI: ffffffff8162e07a RDI: ffffc90000007788 [ 375.451718][ C0] RBP: ffffc90000007778 R08: ffffc90000007850 R09: ffffc90000007848 [ 375.459962][ C0] R10: 0000000000000009 R11: fffff52000000efd R12: 0000000000000000 [ 375.468030][ C0] R13: ffff888112b19460 R14: ffffc900000077b0 R15: ffffc90000007ef8 [ 375.476094][ C0] FS: 000055556458f500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 375.485036][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.491644][ C0] CR2: 0000000000000004 CR3: 0000000122d20000 CR4: 00000000003506b0 [ 375.499637][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 375.507707][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 375.515773][ C0] Call Trace: [ 375.519404][ C0] [ 375.522253][ C0] ? __kernel_text_address+0xd/0x30 [ 375.527472][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 375.533685][ C0] arch_stack_walk+0x124/0x150 [ 375.538472][ C0] ? run_timer_softirq+0x6a/0xf0 [ 375.543507][ C0] stack_trace_save+0xa6/0xf0 [ 375.548204][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 375.553603][ C0] ? kasan_set_track+0x60/0x70 [ 375.558473][ C0] ? kasan_set_track+0x4b/0x70 [ 375.563329][ C0] ? kasan_save_alloc_info+0x25/0x30 [ 375.568622][ C0] ? memset+0x35/0x40 [ 375.572625][ C0] kasan_set_track+0x4b/0x70 [ 375.577247][ C0] ? kasan_set_track+0x4b/0x70 [ 375.582040][ C0] ? kasan_save_alloc_info+0x25/0x30 [ 375.587347][ C0] ? __kasan_kmalloc+0x95/0xb0 [ 375.592123][ C0] ? __kmalloc_node_track_caller+0xb1/0x1e0 [ 375.598029][ C0] ? __alloc_skb+0x236/0x4b0 [ 375.602631][ C0] ? ndisc_send_rs+0x304/0x870 [ 375.607435][ C0] ? addrconf_rs_timer+0x2cf/0x610 [ 375.612577][ C0] ? call_timer_fn+0x46/0x2a0 [ 375.617284][ C0] ? __run_timers+0x65b/0x9f0 [ 375.621995][ C0] ? run_timer_softirq+0x6a/0xf0 [ 375.627217][ C0] ? ndisc_send_rs+0x304/0x870 [ 375.631996][ C0] kasan_save_alloc_info+0x25/0x30 [ 375.637142][ C0] __kasan_kmalloc+0x95/0xb0 [ 375.641747][ C0] ? ndisc_send_rs+0x304/0x870 [ 375.646701][ C0] __kmalloc_node_track_caller+0xb1/0x1e0 [ 375.652431][ C0] ? ndisc_send_rs+0x304/0x870 [ 375.657329][ C0] __alloc_skb+0x236/0x4b0 [ 375.661758][ C0] ndisc_send_rs+0x304/0x870 [ 375.666386][ C0] addrconf_rs_timer+0x2cf/0x610 [ 375.671339][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 375.676814][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 375.681962][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 375.687577][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 375.693051][ C0] call_timer_fn+0x46/0x2a0 [ 375.697826][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 375.703392][ C0] __run_timers+0x65b/0x9f0 [ 375.707914][ C0] ? calc_index+0x200/0x200 [ 375.712698][ C0] ? __irq_exit_rcu+0x5e/0xf0 [ 375.717393][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 375.723566][ C0] run_timer_softirq+0x6a/0xf0 [ 375.728440][ C0] handle_softirqs+0x1d7/0x600 [ 375.733219][ C0] ? irqtime_account_irq+0xc4/0x240 [ 375.738433][ C0] __irq_exit_rcu+0x52/0xf0 [ 375.742954][ C0] irq_exit_rcu+0x9/0x10 [ 375.747234][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 375.752978][ C0] [ 375.755923][ C0] [ 375.758858][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 375.764855][ C0] RIP: 0010:generic_exec_single+0x2bc/0x3b0 [ 375.770762][ C0] Code: 74 71 e8 e7 7d 09 00 43 0f b6 04 3e 84 c0 0f 85 c7 00 00 00 41 c7 04 24 00 00 00 00 bb fa ff ff ff eb 11 e8 c6 7d 09 00 31 db <49> bf 00 00 00 00 00 fc ff df 48 c7 44 24 20 0e 36 e0 45 4b c7 44 [ 375.790382][ C0] RSP: 0018:ffffc90000ac7a20 EFLAGS: 00000293 [ 375.796479][ C0] RAX: ffffffff8167f81e RBX: 0000000000000000 RCX: ffff888112b19440 [ 375.804643][ C0] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 375.812624][ C0] RBP: ffffc90000ac7ad0 R08: ffff888112b19440 R09: fffff52000158e80 [ 375.820611][ C0] R10: 0000000000000000 R11: ffffffff81980270 R12: ffffc90000ac7b28 [ 375.828631][ C0] R13: 1ffff92000158f48 R14: ffffc90000ac7c60 R15: 0000000000000200 [ 375.836700][ C0] ? __cfi_perf_pmu_nop_void+0x10/0x10 [ 375.842184][ C0] ? generic_exec_single+0x24e/0x3b0 [ 375.847494][ C0] ? memcpy+0x56/0x70 [ 375.851497][ C0] ? __cfi_remote_function+0x10/0x10 [ 375.856796][ C0] ? smp_call_function_single+0x490/0x490 [ 375.862530][ C0] ? avc_has_perm_noaudit+0x30b/0x490 [ 375.867911][ C0] ? security_file_alloc+0x33/0x130 [ 375.873124][ C0] smp_call_function_single+0x1d9/0x490 [ 375.878680][ C0] ? __cfi_remote_function+0x10/0x10 [ 375.883973][ C0] ? __cfi_smp_call_function_single+0x10/0x10 [ 375.890316][ C0] ? __cfi_remote_function+0x10/0x10 [ 375.895608][ C0] ? selinux_capable+0x2b6/0x3b0 [ 375.900730][ C0] perf_install_in_context+0x4b8/0x760 [ 375.906202][ C0] ? exclusive_event_installable+0x230/0x230 [ 375.912198][ C0] ? __cfi___perf_install_in_context+0x10/0x10 [ 375.918450][ C0] ? __kasan_check_write+0x14/0x20 [ 375.923653][ C0] ? mutex_lock+0x93/0x1b0 [ 375.928079][ C0] ? __cfi_mutex_lock+0x10/0x10 [ 375.932940][ C0] ? capable+0x8a/0xe0 [ 375.937110][ C0] ? exclusive_event_installable+0x7c/0x230 [ 375.943015][ C0] ? perf_event__header_size+0x173/0x240 [ 375.948666][ C0] __se_sys_perf_event_open+0x12b1/0x1bb0 [ 375.954482][ C0] ? __x64_sys_perf_event_open+0xd0/0xd0 [ 375.960146][ C0] ? __cfi_ksys_write+0x10/0x10 [ 375.965009][ C0] ? do_user_addr_fault+0x9ac/0x1050 [ 375.970308][ C0] __x64_sys_perf_event_open+0xbf/0xd0 [ 375.975870][ C0] x64_sys_call+0x385/0x9a0 [ 375.980431][ C0] do_syscall_64+0x4c/0xa0 [ 375.984862][ C0] ? clear_bhb_loop+0x30/0x80 [ 375.989554][ C0] ? clear_bhb_loop+0x30/0x80 [ 375.994246][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 376.000159][ C0] RIP: 0033:0x7fc9c9b9cdd9 [ 376.004660][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.024725][ C0] RSP: 002b:00007fff42efe0a8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 376.033155][ C0] RAX: ffffffffffffffda RBX: 00007fc9c9e15fa0 RCX: 00007fc9c9b9cdd9 [ 376.041137][ C0] RDX: afffffffffffffff RSI: 0000000000000000 RDI: 0000200000000180 [ 376.049223][ C0] RBP: 00007fc9c9c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 376.057481][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 376.065688][ C0] R13: 00007fc9c9e15fac R14: 00007fc9c9e15fa0 R15: 00007fc9c9e15fa0 [ 376.073680][ C0] [ 376.076710][ C0] Sending NMI from CPU 0 to CPUs 1: [ 376.081937][ C1] NMI backtrace for cpu 1 [ 376.081955][ C1] CPU: 1 PID: 395 Comm: syz.1.18 Not tainted syzkaller #0 [ 376.081977][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 376.081984][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 376.082011][ C1] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 eb d9 89 f6 31 d2 e8 ea 2d 5c 01 5d c3 0f 1f 84 00 00 00 00 [ 376.082023][ C1] RSP: 0018:ffffc900001b0840 EFLAGS: 00000046 [ 376.082038][ C1] RAX: 000000000000017c RBX: 000000000000017c RCX: 0000000000000838 [ 376.082048][ C1] RDX: 0000000000000000 RSI: 000000000000017c RDI: 0000000000000838 [ 376.082057][ C1] RBP: ffffc900001b0840 R08: ffff888115265100 R09: 0000000000000002 [ 376.082068][ C1] R10: 0000000000000000 R11: ffffffff8134c020 R12: 0000000000000020 [ 376.082077][ C1] R13: dffffc0000000000 R14: ffffffff866d5b60 R15: dffffc0000000000 [ 376.082088][ C1] FS: 000055555ef26500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 376.082101][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.082112][ C1] CR2: 00007fe85a244b91 CR3: 0000000112bcb000 CR4: 00000000003506a0 [ 376.082127][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 376.082135][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 376.082144][ C1] Call Trace: [ 376.082149][ C1] [ 376.082153][ C1] lapic_next_event+0x70/0x80 [ 376.082172][ C1] clockevents_program_event+0x1d9/0x330 [ 376.082188][ C1] tick_program_event+0xa3/0x120 [ 376.082205][ C1] hrtimer_interrupt+0x501/0x8c0 [ 376.082228][ C1] __sysvec_apic_timer_interrupt+0x11e/0x440 [ 376.082255][ C1] sysvec_apic_timer_interrupt+0x53/0xc0 [ 376.082275][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 376.082294][ C1] RIP: 0010:kasan_poison_last_granule+0x0/0x30 [ 376.082311][ C1] Code: 89 c7 48 89 f2 89 ce e8 7e 8a 3f 03 5d c3 0f 0b c3 0f 0b c3 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 8d bb 8f cf <48> 89 f0 48 83 e0 07 74 19 55 48 89 e5 48 01 f7 48 c1 ef 03 48 b9 [ 376.082322][ C1] RSP: 0018:ffffc900001b0b18 EFLAGS: 00000246 [ 376.082334][ C1] RAX: ffff8881f714e001 RBX: ffff88812f4c1800 RCX: ffffffff38373800 [ 376.082344][ C1] RDX: 0000000000000200 RSI: 0000000000000200 RDI: ffff88812f4c1800 [ 376.082353][ C1] RBP: ffffc900001b0b40 R08: ffffc900001b0b08 R09: ffff88812f4c1800 [ 376.082364][ C1] R10: 00000000743a084c R11: 00000000ffffffff R12: 0000000000000200 [ 376.082373][ C1] R13: ffff888100042f00 R14: 0000000000082a20 R15: ffff888100042f00 [ 376.082386][ C1] ? __kasan_kmalloc+0x55/0xb0 [ 376.082403][ C1] ? ndisc_send_rs+0x304/0x870 [ 376.082423][ C1] __kmalloc_node_track_caller+0xb1/0x1e0 [ 376.082438][ C1] ? ndisc_send_rs+0x304/0x870 [ 376.082457][ C1] __alloc_skb+0x236/0x4b0 [ 376.082471][ C1] ndisc_send_rs+0x304/0x870 [ 376.082491][ C1] addrconf_rs_timer+0x2cf/0x610 [ 376.082507][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 376.082522][ C1] ? _raw_spin_lock_irq+0x95/0xf0 [ 376.082537][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 376.082552][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 376.082567][ C1] call_timer_fn+0x46/0x2a0 [ 376.082584][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 376.082599][ C1] __run_timers+0x65b/0x9f0 [ 376.082618][ C1] ? calc_index+0x200/0x200 [ 376.082634][ C1] ? __irq_exit_rcu+0x5e/0xf0 [ 376.082650][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 376.082671][ C1] run_timer_softirq+0x6a/0xf0 [ 376.082687][ C1] handle_softirqs+0x1d7/0x600 [ 376.082704][ C1] __irq_exit_rcu+0x52/0xf0 [ 376.082718][ C1] irq_exit_rcu+0x9/0x10 [ 376.082731][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 376.082750][ C1] [ 376.082754][ C1] [ 376.082759][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 376.082777][ C1] RIP: 0010:do_exit+0x67f/0x2660 [ 376.082797][ C1] Code: fc ff df e9 af 01 00 00 e8 de 9b 2e 00 e9 aa 01 00 00 4c 89 64 24 08 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 20 80 3c 01 00 <74> 0a 48 8b 7c 24 10 e8 c5 36 74 00 41 bc 58 02 00 00 48 8b 44 24 [ 376.082808][ C1] RSP: 0018:ffffc90000a97a00 EFLAGS: 00000246 [ 376.082819][ C1] RAX: dffffc0000000000 RBX: ffff88812d268001 RCX: 1ffff11022a4cb2a [ 376.082830][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888115265100 [ 376.082839][ C1] RBP: ffffc90000a97b60 R08: ffff88812d268007 R09: 1ffff11025a4d000 [ 376.082849][ C1] R10: dffffc0000000000 R11: ffffed1025a4d001 R12: ffff888115265660 [ 376.082860][ C1] R13: ffff88811258f200 R14: 1ffff11022a4cacc R15: 000000000000018b [ 376.082873][ C1] ? __cfi_do_exit+0x10/0x10 [ 376.082892][ C1] ? ctx_flexible_sched_in+0x70/0x70 [ 376.082906][ C1] ? sched_clock_cpu+0x6e/0x260 [ 376.082923][ C1] ? __kasan_check_write+0x14/0x20 [ 376.082937][ C1] ? _raw_spin_lock_irq+0x95/0xf0 [ 376.082952][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 376.082967][ C1] do_group_exit+0x210/0x2d0 [ 376.082987][ C1] ? __kasan_check_write+0x14/0x20 [ 376.083001][ C1] get_signal+0x13b5/0x1520 [ 376.083023][ C1] arch_do_signal_or_restart+0xd1/0x1140 [ 376.083041][ C1] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 376.083058][ C1] ? __kasan_check_write+0x14/0x20 [ 376.083071][ C1] ? finish_task_switch+0x209/0x7b0 [ 376.083090][ C1] ? __switch_to_asm+0x3a/0x60 [ 376.083107][ C1] ? __schedule+0xbae/0x1500 [ 376.083123][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 376.083143][ C1] ? __kasan_check_read+0x11/0x20 [ 376.083157][ C1] exit_to_user_mode_loop+0x7a/0xb0 [ 376.083173][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 376.083188][ C1] irqentry_exit_to_user_mode+0x9/0x10 [ 376.083207][ C1] irqentry_exit+0x12/0x40 [ 376.083226][ C1] sysvec_apic_timer_interrupt+0x64/0xc0 [ 376.083251][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 376.083270][ C1] RIP: 0033:0x7fe85a195b77 [ 376.083281][ C1] Code: 24 08 64 48 2b 14 25 28 00 00 00 75 05 48 83 c4 18 c3 e8 7c 97 00 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 05 e9 0a 25 00 <48> 85 c0 74 14 48 83 ec 08 ff d0 85 c0 75 1a 31 c0 48 83 c4 08 c3 [ 376.083292][ C1] RSP: 002b:00007ffd15e4d928 EFLAGS: 00000206 [ 376.083303][ C1] RAX: 00007ffd15e6d750 RBX: 0000000000000004 RCX: 0000000000000000 [ 376.083312][ C1] RDX: 00007fe85a2b9b40 RSI: 00007ffd15e4d990 RDI: 0000000000000001 [ 376.083322][ C1] RBP: 00007fe85a244b91 R08: 0000000000000000 R09: 0000000000000000 [ 376.083331][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 376.083340][ C1] R13: 00007fe85a415fac R14: 00007fe85a415fa0 R15: 00007fe85a415fa0 [ 376.083352][ C1]