syzkaller syzkaller login: [ 15.579968][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 15.579982][ T28] audit: type=1400 audit(1758949108.149:59): avc: denied { transition } for pid=225 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.584466][ T28] audit: type=1400 audit(1758949108.149:60): avc: denied { noatsecure } for pid=225 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.587398][ T28] audit: type=1400 audit(1758949108.169:61): avc: denied { write } for pid=225 comm="sh" path="pipe:[14554]" dev="pipefs" ino=14554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 15.590565][ T28] audit: type=1400 audit(1758949108.169:62): avc: denied { rlimitinh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.593534][ T28] audit: type=1400 audit(1758949108.169:63): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. 2025/09/27 05:02:26 parsed 1 programs [ 253.887020][ T28] audit: type=1400 audit(1758949346.459:64): avc: denied { node_bind } for pid=284 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 253.907827][ T28] audit: type=1400 audit(1758949346.459:65): avc: denied { module_request } for pid=284 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 255.026588][ T28] audit: type=1400 audit(1758949347.599:66): avc: denied { mounton } for pid=293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 255.028338][ T293] cgroup: Unknown subsys name 'net' [ 255.049260][ T28] audit: type=1400 audit(1758949347.599:67): avc: denied { mount } for pid=293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 255.077196][ T28] audit: type=1400 audit(1758949347.659:68): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 255.077473][ T293] cgroup: Unknown subsys name 'devices' [ 255.224622][ T293] cgroup: Unknown subsys name 'hugetlb' [ 255.230250][ T293] cgroup: Unknown subsys name 'rlimit' [ 255.343530][ T28] audit: type=1400 audit(1758949347.919:69): avc: denied { setattr } for pid=293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 255.366806][ T28] audit: type=1400 audit(1758949347.919:70): avc: denied { create } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 255.387617][ T28] audit: type=1400 audit(1758949347.919:71): avc: denied { write } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 255.393212][ T295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 255.408599][ T28] audit: type=1400 audit(1758949347.919:72): avc: denied { read } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 255.437104][ T28] audit: type=1400 audit(1758949347.919:73): avc: denied { mounton } for pid=293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 255.522715][ T293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 256.346314][ T303] request_module fs-gadgetfs succeeded, but still no fs? [ 256.451214][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.465310][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.473750][ T301] device bridge_slave_0 entered promiscuous mode [ 256.506029][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.513119][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.520574][ T301] device bridge_slave_1 entered promiscuous mode [ 256.872489][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.879664][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.886981][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.894036][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.964030][ T332] syz-executor (332) used greatest stack depth: 21920 bytes left [ 256.998139][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.022252][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.029796][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.037653][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.049922][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.058580][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.065667][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.083958][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.092231][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.099254][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.150251][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.173828][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.193172][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.213635][ T301] device veth0_vlan entered promiscuous mode [ 257.221651][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.230137][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.238268][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.255652][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 257.268246][ T301] device veth1_macvtap entered promiscuous mode [ 257.279055][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 257.295071][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/09/27 05:02:29 executed programs: 0 [ 257.423872][ T301] syz-executor (301) used greatest stack depth: 21696 bytes left [ 257.552708][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.559758][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.567432][ T369] device bridge_slave_0 entered promiscuous mode [ 257.575538][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.582586][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.589907][ T369] device bridge_slave_1 entered promiscuous mode [ 257.665329][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.672547][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.680105][ T368] device bridge_slave_0 entered promiscuous mode [ 257.689081][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.696268][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.703810][ T368] device bridge_slave_1 entered promiscuous mode [ 257.762538][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.769585][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.777500][ T370] device bridge_slave_0 entered promiscuous mode [ 257.792152][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.799189][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.806706][ T370] device bridge_slave_1 entered promiscuous mode [ 257.816728][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.823832][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.831185][ T374] device bridge_slave_0 entered promiscuous mode [ 257.853794][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.860845][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.868389][ T374] device bridge_slave_1 entered promiscuous mode [ 257.917451][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.924878][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.932528][ T373] device bridge_slave_0 entered promiscuous mode [ 257.940952][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.948052][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.955453][ T373] device bridge_slave_1 entered promiscuous mode [ 258.103232][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.110288][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.117607][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.124644][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.163189][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.170250][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.177557][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.184714][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.197127][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.204296][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.211729][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.218791][ T368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.245936][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.253191][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.260468][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.267528][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.306617][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.313699][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.320975][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.328048][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.373153][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.380938][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.389570][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.398424][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.406352][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.414002][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.421140][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.429350][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.437452][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.444685][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.452767][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.459972][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.467287][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.475033][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.482341][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.523657][ T369] device veth0_vlan entered promiscuous mode [ 258.533643][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.542256][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.550549][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.558989][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.566064][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.573778][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.583112][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.591423][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.598482][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.606020][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.613515][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.620951][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.629340][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.637526][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.644578][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.652199][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.660542][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.668778][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.675812][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.683288][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 258.691587][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.700191][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.708183][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.716712][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.724246][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.755158][ T369] device veth1_macvtap entered promiscuous mode [ 258.775275][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.783841][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.793642][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.801865][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.808930][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.817952][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.826006][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.834483][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.843269][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.850302][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.858008][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.866335][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.874607][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.882682][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.890634][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.898759][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.906972][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.914699][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.922599][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.930863][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.939357][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.946432][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.953959][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.963060][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.971278][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.978352][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.011965][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.020881][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.029213][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.037707][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.045566][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.054696][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.063270][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.071501][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.080016][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.088501][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.097132][ T370] device veth0_vlan entered promiscuous mode [ 259.107440][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.115634][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.143391][ T368] device veth0_vlan entered promiscuous mode [ 259.152463][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.161651][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.171197][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.179814][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.196410][ T374] device veth0_vlan entered promiscuous mode [ 259.220214][ T374] device veth1_macvtap entered promiscuous mode [ 259.230416][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.239065][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.249805][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.258345][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.266568][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.285691][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.304324][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.324090][ T370] device veth1_macvtap entered promiscuous mode [ 259.349979][ T373] device veth0_vlan entered promiscuous mode [ 259.382521][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.391072][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.399671][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.408537][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.417307][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.426033][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.434728][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.443455][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.451919][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.477379][ T373] device veth1_macvtap entered promiscuous mode [ 359.511947][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 359.519062][ C1] (detected by 1, t=10002 jiffies, g=1537, q=630 ncpus=2) [ 359.526284][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294973168-4294963165), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 359.539697][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g1537 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 359.550821][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 359.560800][ C1] rcu: RCU grace-period kthread stack dump: [ 359.566714][ C1] task:rcu_preempt state:R running task stack:28528 pid:14 ppid:2 flags:0x00004000 [ 359.577523][ C1] Call Trace: [ 359.580815][ C1] [ 359.583762][ C1] __schedule+0xb87/0x14e0 [ 359.588223][ C1] ? release_firmware_map_entry+0x194/0x194 [ 359.594140][ C1] ? __mod_timer+0x7ae/0xb30 [ 359.598754][ C1] schedule+0xbd/0x170 [ 359.602840][ C1] schedule_timeout+0x12c/0x2e0 [ 359.607713][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 359.613112][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 359.618589][ C1] ? __cfi_process_timeout+0x10/0x10 [ 359.623893][ C1] ? prepare_to_swait_event+0x308/0x320 [ 359.629463][ C1] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 359.634338][ C1] ? rcu_gp_init+0xf10/0xf10 [ 359.638942][ C1] rcu_gp_kthread+0x95/0x370 [ 359.643542][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 359.648760][ C1] ? set_cpus_allowed_ptr+0x82/0xc0 [ 359.653980][ C1] ? __kasan_check_read+0x11/0x20 [ 359.659018][ C1] ? __kthread_parkme+0x142/0x180 [ 359.664060][ C1] kthread+0x281/0x320 [ 359.668171][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 359.673398][ C1] ? __cfi_kthread+0x10/0x10 [ 359.678004][ C1] ret_from_fork+0x1f/0x30 [ 359.682441][ C1] [ 359.685465][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 359.691790][ C1] Sending NMI from CPU 1 to CPUs 0: [ 359.697104][ C0] NMI backtrace for cpu 0 [ 359.697113][ C0] CPU: 0 PID: 442 Comm: syz.0.29 Not tainted syzkaller #0 [ 359.697129][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 359.697138][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 359.697166][ C0] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 eb d9 89 f6 31 d2 e8 0a f3 56 01 5d c3 0f 1f 84 00 00 00 00 [ 359.697180][ C0] RSP: 0018:ffffc90000007df0 EFLAGS: 00000046 [ 359.697194][ C0] RAX: 0000000000049e54 RBX: 0000000000049e54 RCX: 0000000000000838 [ 359.697205][ C0] RDX: 0000000000000000 RSI: 0000000000049e54 RDI: 0000000000000838 [ 359.697215][ C0] RBP: ffffc90000007df0 R08: ffff88811af16540 R09: 0000000000000002 [ 359.697227][ C0] R10: 0000000000000000 R11: ffffffff813434d0 R12: 0000000000000020 [ 359.697237][ C0] R13: dffffc0000000000 R14: ffffffff86494b60 R15: dffffc0000000000 [ 359.697251][ C0] FS: 00007ff3c1d406c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 359.697266][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.697281][ C0] CR2: 000020000006b000 CR3: 000000012e046000 CR4: 00000000003506b0 [ 359.697295][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 359.697305][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 359.697315][ C0] Call Trace: [ 359.697320][ C0] [ 359.697326][ C0] lapic_next_event+0x70/0x80 [ 359.697348][ C0] clockevents_program_event+0x1d9/0x330 [ 359.697364][ C0] tick_program_event+0xa3/0x120 [ 359.697385][ C0] hrtimer_interrupt+0x501/0x8c0 [ 359.697413][ C0] __sysvec_apic_timer_interrupt+0x11e/0x440 [ 359.697436][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 359.697459][ C0] [ 359.697463][ C0] [ 359.697468][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 359.697491][ C0] RIP: 0010:_raw_spin_unlock_irq+0x48/0x70 [ 359.697515][ C0] Code: 74 12 48 89 fb 48 c7 c7 00 d1 ed 86 e8 31 69 c0 fc 48 89 df 48 83 3d c6 b2 f9 01 00 74 26 e8 93 0c 00 00 90 fb bf 01 00 00 00 93 95 57 fc 65 8b 05 74 4f 0e 7b 85 c0 74 03 5b 5d c3 e8 34 5c [ 359.697527][ C0] RSP: 0018:ffffc90000de7b90 EFLAGS: 00000246 [ 359.697540][ C0] RAX: 0000000000000001 RBX: 0000000000000021 RCX: dffffc0000000000 [ 359.697550][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 359.697559][ C0] RBP: ffffc90000de7b98 R08: dffffc0000000000 R09: fffff520001bcfc0 [ 359.697572][ C0] R10: fffff520001bcfc0 R11: 1ffff920001bcfbc R12: dffffc0000000000 [ 359.697584][ C0] R13: 1ffff11020f73a5c R14: 000000001c000004 R15: ffff888107b9d2e0 [ 359.697600][ C0] get_signal+0x12a4/0x1520 [ 359.697626][ C0] arch_do_signal_or_restart+0xb0/0x1030 [ 359.697646][ C0] ? __ia32_sys_rt_sigreturn+0x5e7/0x6c0 [ 359.697668][ C0] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 359.697688][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 359.697710][ C0] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 359.697734][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 359.697751][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 359.697768][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 359.697791][ C0] do_syscall_64+0x58/0xa0 [ 359.697807][ C0] ? clear_bhb_loop+0x30/0x80 [ 359.697827][ C0] ? clear_bhb_loop+0x30/0x80 [ 359.697849][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.697869][ C0] RIP: 0033:0x7ff3c0f8eec7 [ 359.697887][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 359.697899][ C0] RSP: 002b:00007ff3c1d400e8 EFLAGS: 00000246 [ 359.697911][ C0] RAX: 00000000000000ca RBX: 00007ff3c11e5fa8 RCX: 00007ff3c0f8eec9 [ 359.697922][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff3c11e5fa8 [ 359.697932][ C0] RBP: 00007ff3c11e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 359.697942][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.697952][ C0] R13: 00007ff3c11e6038 R14: 00007ffddbdb3bc0 R15: 00007ffddbdb3ca8 [ 359.697966][ C0] [ 516.071882][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 516.079165][ C0] (detected by 0, t=10002 jiffies, g=1541, q=498 ncpus=2) [ 516.086377][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4294988823-4294978821), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 516.100039][ C0] rcu: rcu_preempt kthread starved for 10002 jiffies! g1541 f0x0 RCU_GP_ONOFF(3) ->state=0x0 ->cpu=0 [ 516.111358][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 516.121358][ C0] rcu: RCU grace-period kthread stack dump: [ 516.127257][ C0] task:rcu_preempt state:R running task stack:28528 pid:14 ppid:2 flags:0x00004000 [ 516.138067][ C0] Call Trace: [ 516.141368][ C0] [ 516.144319][ C0] __schedule+0xb87/0x14e0 [ 516.148885][ C0] ? __kasan_check_write+0x14/0x20 [ 516.154051][ C0] ? release_firmware_map_entry+0x194/0x194 [ 516.159958][ C0] ? detach_if_pending+0xf4/0x300 [ 516.165029][ C0] preempt_schedule_irq+0x9b/0x110 [ 516.170263][ C0] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 516.176015][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 516.181512][ C0] ? __kasan_check_write+0x14/0x20 [ 516.186647][ C0] ? _raw_spin_lock_irq+0x8f/0xe0 [ 516.191713][ C0] raw_irqentry_exit_cond_resched+0x29/0x30 [ 516.197643][ C0] irqentry_exit+0x37/0x40 [ 516.202148][ C0] sysvec_reschedule_ipi+0x78/0x80 [ 516.207292][ C0] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 516.212789][ C0] RIP: 0010:rcu_gp_init+0x714/0xf10 [ 516.218124][ C0] Code: fd ff ff 4c 89 e7 e8 7b 57 57 00 e9 7b fd ff ff 89 d9 80 e1 07 38 c1 0f 8c e9 fe ff ff 48 89 df e8 51 58 57 00 e9 dc fe ff ff <8b> 1d 06 37 3c 06 4c 8b 35 9f 37 3c 06 4d 85 f6 74 2e 4c 89 f7 be [ 516.237750][ C0] RSP: 0018:ffffc900000e7d20 EFLAGS: 00000246 [ 516.243842][ C0] RAX: ffffffff86fb3ec0 RBX: 0000000000000001 RCX: 0000000000000000 [ 516.251827][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff86fb40c0 [ 516.259808][ C0] RBP: ffffc900000e7e10 R08: 0000000000000004 R09: 0000000000000003 [ 516.267793][ C0] R10: fffff5200001cf94 R11: 1ffff9200001cf94 R12: ffffffff86fb3c7a [ 516.275781][ C0] R13: dffffc0000000000 R14: ffffffff86fb3ec0 R15: dffffc0000000000 [ 516.283775][ C0] ? rcu_gp_kthread+0x370/0x370 [ 516.288660][ C0] rcu_gp_kthread+0x166/0x370 [ 516.293374][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 516.298611][ C0] ? set_cpus_allowed_ptr+0x82/0xc0 [ 516.303947][ C0] ? __kasan_check_read+0x11/0x20 [ 516.308983][ C0] ? __kthread_parkme+0x142/0x180 [ 516.314087][ C0] kthread+0x281/0x320 [ 516.318190][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 516.323528][ C0] ? __cfi_kthread+0x10/0x10 [ 516.328143][ C0] ret_from_fork+0x1f/0x30 [ 516.332706][ C0] [ 516.335750][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 516.342088][ C0] CPU: 0 PID: 442 Comm: syz.0.29 Not tainted syzkaller #0 [ 516.349213][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 516.359288][ C0] RIP: 0010:_raw_spin_unlock_irq+0x48/0x70 [ 516.365219][ C0] Code: 74 12 48 89 fb 48 c7 c7 00 d1 ed 86 e8 31 69 c0 fc 48 89 df 48 83 3d c6 b2 f9 01 00 74 26 e8 93 0c 00 00 90 fb bf 01 00 00 00 93 95 57 fc 65 8b 05 74 4f 0e 7b 85 c0 74 03 5b 5d c3 e8 34 5c [ 516.384856][ C0] RSP: 0018:ffffc90000de7b90 EFLAGS: 00000246 [ 516.391068][ C0] RAX: 0000000000000001 RBX: 0000000000000021 RCX: dffffc0000000000 [ 516.399150][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 516.407233][ C0] RBP: ffffc90000de7b98 R08: dffffc0000000000 R09: fffff520001bcfc0 [ 516.415323][ C0] R10: fffff520001bcfc0 R11: 1ffff920001bcfbc R12: dffffc0000000000 [ 516.423321][ C0] R13: 1ffff11020f73a5c R14: 000000001c000004 R15: ffff888107b9d2e0 [ 516.431320][ C0] FS: 00007ff3c1d406c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 516.440288][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 516.446894][ C0] CR2: 000020000006b000 CR3: 000000012e046000 CR4: 00000000003506b0 [ 516.454890][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 516.462884][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 516.470881][ C0] Call Trace: [ 516.474192][ C0] [ 516.477138][ C0] get_signal+0x12a4/0x1520 [ 516.481781][ C0] arch_do_signal_or_restart+0xb0/0x1030 [ 516.487493][ C0] ? __ia32_sys_rt_sigreturn+0x5e7/0x6c0 [ 516.493151][ C0] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 516.499071][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 516.505247][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 516.510466][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 516.515952][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 516.521438][ C0] do_syscall_64+0x58/0xa0 [ 516.525869][ C0] ? clear_bhb_loop+0x30/0x80 [ 516.530571][ C0] ? clear_bhb_loop+0x30/0x80 [ 516.535265][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 516.541174][ C0] RIP: 0033:0x7ff3c0f8eec7 [ 516.545600][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 516.565217][ C0] RSP: 002b:00007ff3c1d400e8 EFLAGS: 00000246 [ 516.571321][ C0] RAX: 00000000000000ca RBX: 00007ff3c11e5fa8 RCX: 00007ff3c0f8eec9 [ 516.579321][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff3c11e5fa8 [ 516.587298][ C0] RBP: 00007ff3c11e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 516.595292][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.603277][ C0] R13: 00007ff3c11e6038 R14: 00007ffddbdb3bc0 R15: 00007ffddbdb3ca8 [ 516.611270][ C0]