syzkaller syzkaller login: [ 21.916582][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 21.916596][ T30] audit: type=1400 audit(1777674342.411:59): avc: denied { transition } for pid=265 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.927733][ T30] audit: type=1400 audit(1777674342.411:60): avc: denied { noatsecure } for pid=265 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.936534][ T30] audit: type=1400 audit(1777674342.411:61): avc: denied { write } for pid=265 comm="sh" path="pipe:[14927]" dev="pipefs" ino=14927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 21.958739][ T30] audit: type=1400 audit(1777674342.411:62): avc: denied { rlimitinh } for pid=265 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.977360][ T30] audit: type=1400 audit(1777674342.411:63): avc: denied { siginh } for pid=265 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 172.334246][ T272] sshd-session (272) used greatest stack depth: 21280 bytes left Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts. 2026/05/01 22:28:20 parsed 1 programs [ 180.263334][ T30] audit: type=1400 audit(1777674500.751:64): avc: denied { node_bind } for pid=293 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 180.284587][ T30] audit: type=1400 audit(1777674500.751:65): avc: denied { module_request } for pid=293 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 180.962108][ T30] audit: type=1400 audit(1777674501.451:66): avc: denied { mounton } for pid=300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 180.963107][ T300] cgroup: Unknown subsys name 'net' [ 180.985203][ T30] audit: type=1400 audit(1777674501.451:67): avc: denied { mount } for pid=300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 181.012807][ T30] audit: type=1400 audit(1777674501.481:68): avc: denied { unmount } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 181.012966][ T300] cgroup: Unknown subsys name 'devices' [ 181.187537][ T300] cgroup: Unknown subsys name 'hugetlb' [ 181.193191][ T300] cgroup: Unknown subsys name 'rlimit' [ 181.453879][ T30] audit: type=1400 audit(1777674501.941:69): avc: denied { setattr } for pid=300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.477345][ T30] audit: type=1400 audit(1777674501.941:70): avc: denied { create } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 181.498418][ T30] audit: type=1400 audit(1777674501.941:71): avc: denied { write } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 181.504091][ T303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 181.518829][ T30] audit: type=1400 audit(1777674501.941:72): avc: denied { read } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 181.548009][ T30] audit: type=1400 audit(1777674501.941:73): avc: denied { mounton } for pid=300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 181.580070][ T300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 182.135512][ T313] request_module fs-gadgetfs succeeded, but still no fs? [ 182.203156][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.246938][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.257595][ T310] device bridge_slave_0 entered promiscuous mode [ 182.265756][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.272913][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.295993][ T310] device bridge_slave_1 entered promiscuous mode [ 182.625121][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.632624][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.640394][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.647675][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.708682][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.717920][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.727392][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.739229][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.756348][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.764817][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.772086][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.780048][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.788404][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.795680][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.824342][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.832878][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.841888][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.849993][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.858413][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 2026/05/01 22:28:23 executed programs: 0 [ 182.867027][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.876121][ T310] device veth0_vlan entered promiscuous mode [ 182.885959][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.894920][ T310] device veth1_macvtap entered promiscuous mode [ 182.904183][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.914791][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.140433][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.147660][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.155349][ T371] device bridge_slave_0 entered promiscuous mode [ 183.165076][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.172332][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.180059][ T371] device bridge_slave_1 entered promiscuous mode [ 183.194723][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.201977][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.209507][ T374] device bridge_slave_0 entered promiscuous mode [ 183.217493][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.224713][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.232092][ T374] device bridge_slave_1 entered promiscuous mode [ 183.239146][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.246244][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.253703][ T370] device bridge_slave_0 entered promiscuous mode [ 183.293549][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.301018][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.308498][ T370] device bridge_slave_1 entered promiscuous mode [ 183.384086][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.391322][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.399112][ T376] device bridge_slave_0 entered promiscuous mode [ 183.409769][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.416995][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.424579][ T376] device bridge_slave_1 entered promiscuous mode [ 183.460098][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.467286][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.474814][ T377] device bridge_slave_0 entered promiscuous mode [ 183.484798][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.492112][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.499764][ T377] device bridge_slave_1 entered promiscuous mode [ 183.666640][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.673799][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.681118][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.688166][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.714688][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.721784][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.729082][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.736216][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.745047][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.752387][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.760243][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.768066][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.776416][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.784072][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.791608][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.799997][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.808416][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.815469][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.823032][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.831563][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.840009][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.847263][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.854956][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.884064][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.891816][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.899687][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.908397][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.916928][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.924148][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.932153][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.940678][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.949069][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.956106][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.963624][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.989104][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.997290][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.021613][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.029267][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.037670][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.045177][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.052770][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.061846][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.069124][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.078785][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.086999][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.103089][ T371] device veth0_vlan entered promiscuous mode [ 184.126053][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.134496][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.143718][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.152057][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.160109][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.168169][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.176677][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.184944][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.193562][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.201011][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.208735][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.216984][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.224177][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.242119][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.250434][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.258960][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.273785][ T371] device veth1_macvtap entered promiscuous mode [ 184.285023][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.293721][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.300862][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.308338][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.317274][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.325852][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.332924][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.340966][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.349429][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.357653][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.365334][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.374097][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.382800][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.391665][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.400742][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.419207][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.427791][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.436071][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.444487][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.464418][ T374] device veth0_vlan entered promiscuous mode [ 184.471876][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.481165][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.489689][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.498200][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.506834][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.515745][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.524382][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.532831][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.541026][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.548869][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.565317][ T376] device veth0_vlan entered promiscuous mode [ 184.578269][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.586991][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.596602][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.605772][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.614479][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.622733][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.631182][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.638753][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.650466][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.658718][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.669049][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.676784][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.684825][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.693245][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.706722][ T377] device veth0_vlan entered promiscuous mode [ 184.716612][ T376] device veth1_macvtap entered promiscuous mode [ 184.732755][ T370] device veth0_vlan entered promiscuous mode [ 184.767386][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.775332][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 284.805394][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 284.812797][ C1] (detected by 1, t=10002 jiffies, g=1709, q=319) [ 284.820180][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4294965680-4294955678), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 284.834676][ C1] rcu: rcu_preempt kthread starved for 10002 jiffies! g1709 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 284.846084][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 284.856245][ C1] rcu: RCU grace-period kthread stack dump: [ 284.862136][ C1] task:rcu_preempt state:R running task stack:28640 pid: 14 ppid: 2 flags:0x00004000 [ 284.873706][ C1] Call Trace: [ 284.877128][ C1] [ 284.880332][ C1] __schedule+0xb6e/0x14c0 [ 284.885034][ C1] ? release_firmware_map_entry+0x190/0x190 [ 284.891033][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 284.897028][ C1] ? __mod_timer+0x7da/0xb50 [ 284.901838][ C1] schedule+0x11e/0x1e0 [ 284.906314][ C1] schedule_timeout+0x159/0x340 [ 284.911450][ C1] ? console_conditional_schedule+0x30/0x30 [ 284.917647][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 284.923383][ C1] ? update_process_times+0x200/0x200 [ 284.928771][ C1] ? prepare_to_swait_event+0x308/0x320 [ 284.934415][ C1] rcu_gp_fqs_loop+0x2ae/0xf80 [ 284.939379][ C1] ? __kasan_check_write+0x14/0x20 [ 284.944712][ C1] ? debug_smp_processor_id+0x17/0x20 [ 284.950094][ C1] ? __note_gp_changes+0x4e2/0x9e0 [ 284.955222][ C1] ? rcu_gp_init+0xc00/0xc00 [ 284.959993][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 284.965372][ C1] ? rcu_gp_init+0x9a7/0xc00 [ 284.970062][ C1] rcu_gp_kthread+0x9b/0x360 [ 284.974658][ C1] ? _raw_spin_lock+0xf0/0xf0 [ 284.979344][ C1] ? wake_nocb_gp+0x1d0/0x1d0 [ 284.984032][ C1] ? __kasan_check_read+0x11/0x20 [ 284.989066][ C1] ? __kthread_parkme+0xac/0x200 [ 284.994222][ C1] kthread+0x411/0x500 [ 284.998848][ C1] ? wake_nocb_gp+0x1d0/0x1d0 [ 285.003543][ C1] ? kthread_blkcg+0xd0/0xd0 [ 285.008762][ C1] ret_from_fork+0x1f/0x30 [ 285.013225][ C1] [ 285.016364][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 285.023426][ C1] Sending NMI from CPU 1 to CPUs 0: [ 285.029349][ C0] NMI backtrace for cpu 0 [ 285.029359][ C0] CPU: 0 PID: 395 Comm: syz.3.20 Not tainted syzkaller #0 [ 285.029375][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.029382][ C0] RIP: 0010:kasan_check_range+0x89/0x2a0 [ 285.029426][ C0] Code: 49 c1 e9 03 4b 8d 1c 29 49 89 dc 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 45 01 00 00 4c 89 cb 48 f7 d3 4c 01 f3 41 80 3b 00 <0f> 85 95 01 00 00 49 ff c3 48 ff c3 75 ee e9 25 01 00 00 45 89 df [ 285.029438][ C0] RSP: 0018:ffffc90001447a78 EFLAGS: 00000046 [ 285.029453][ C0] RAX: 1ffff11021971301 RBX: ffffffffffffffff RCX: ffffffff84b45267 [ 285.029464][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88810bb071c0 [ 285.029474][ C0] RBP: ffffc90001447aa0 R08: ffff88810bb071c3 R09: 1ffff11021760e38 [ 285.029484][ C0] R10: dffffc0000000000 R11: ffffed1021760e38 R12: 0000000000000001 [ 285.029494][ C0] R13: dffffc0000000001 R14: 1ffff11021760e38 R15: 1ffff92000288f58 [ 285.029505][ C0] FS: 000055556856d500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 285.029519][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.029529][ C0] CR2: 0000001b34163fff CR3: 000000011ee93000 CR4: 00000000003506b0 [ 285.029544][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 285.029553][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 285.029563][ C0] Call Trace: [ 285.029568][ C0] [ 285.029574][ C0] __kasan_check_write+0x14/0x20 [ 285.029590][ C0] _raw_spin_lock+0x87/0xf0 [ 285.029606][ C0] ? _raw_spin_trylock_bh+0x150/0x150 [ 285.029622][ C0] ? posixtimer_rearm+0x232/0x330 [ 285.029638][ C0] dequeue_signal+0x18b/0x440 [ 285.029653][ C0] get_signal+0x696/0x1480 [ 285.029669][ C0] arch_do_signal_or_restart+0xdf/0x11c0 [ 285.029685][ C0] ? __ia32_sys_rt_sigreturn+0x639/0x730 [ 285.029700][ C0] ? load_gs_index+0xc0/0xc0 [ 285.029714][ C0] ? get_sigframe_size+0x10/0x10 [ 285.029729][ C0] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 285.029745][ C0] exit_to_user_mode_loop+0xa7/0xe0 [ 285.029760][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 285.029773][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 285.029787][ C0] do_syscall_64+0x58/0xa0 [ 285.029802][ C0] ? clear_bhb_loop+0x50/0xa0 [ 285.029815][ C0] ? clear_bhb_loop+0x50/0xa0 [ 285.029828][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 285.029844][ C0] RIP: 0033:0x7fd3b03a3dd9 [ 285.029858][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.029869][ C0] RSP: 002b:00007ffedfe5b788 EFLAGS: 00000246 [ 285.029880][ C0] RAX: 0000000000000000 RBX: 00007fd3b061cfa0 RCX: 00007fd3b03a3dd9 [ 285.029890][ C0] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 285.029899][ C0] RBP: 00007fd3b0439d69 R08: 0000000000000000 R09: 0000000000000000 [ 285.029908][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.029917][ C0] R13: 00007fd3b061cfac R14: 00007fd3b061cfa0 R15: 00007fd3b061cfa0 [ 285.029929][ C0] [ 428.975559][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 244s! [ 428.984500][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 244s! [ 428.993664][ C0] Showing busy workqueues and worker pools: [ 428.999597][ C0] workqueue events: flags=0x0 [ 429.004326][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 429.004477][ C0] pending: psi_avgs_work, kfree_rcu_monitor [ 429.004517][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 429.004588][ C0] pending: vmstat_shepherd, kfree_rcu_monitor [ 429.004621][ C0] workqueue events_unbound: flags=0x2 [ 429.038320][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/512 refcnt=5 [ 429.038360][ C0] in-flight: 364:linkwatch_event [ 429.038448][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 429.038530][ C0] workqueue events_power_efficient: flags=0x80 [ 429.065091][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 429.065143][ C0] pending: wg_ratelimiter_gc_entries, neigh_periodic_work [ 429.065184][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 429.065217][ C0] pending: gc_worker, neigh_periodic_work, check_lifetime [ 429.065258][ C0] workqueue netns: flags=0xe000a [ 429.101363][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=3 [ 429.101402][ C0] in-flight: 8:cleanup_net [ 429.101433][ C0] workqueue mm_percpu_wq: flags=0x8 [ 429.118658][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.118706][ C0] pending: vmstat_update [ 429.118731][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.118763][ C0] pending: vmstat_update [ 429.118784][ C0] workqueue writeback: flags=0x4a [ 429.148553][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.148595][ C0] pending: wb_workfn [ 429.148623][ C0] workqueue kblockd: flags=0x18 [ 429.164991][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 429.165027][ C0] pending: blk_mq_timeout_work [ 429.165204][ C0] workqueue dm_bufio_cache: flags=0x8 [ 429.183677][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.183723][ C0] pending: work_fn [ 429.183812][ C0] workqueue mld: flags=0x40008 [ 429.200517][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=52 [ 429.200564][ C0] pending: mld_ifc_work [ 429.200589][ C0] inactive: mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_dad_work, mld_ifc_work, mld_dad_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work [ 429.201604][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=42 [ 429.201637][ C0] pending: mld_ifc_work [ 429.201656][ C0] inactive: mld_ifc_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work [ 429.202343][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 429.350525][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=98 [ 429.350569][ C0] in-flight: 393:addrconf_dad_work [ 429.350598][ C0] inactive: addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work [ 429.351163][ C0] , addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work [ 429.351631][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=114 [ 429.351664][ C0] in-flight: 365:addrconf_dad_work [ 429.351708][ C0] inactive: addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work [ 429.352215][ C0] , addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work [ 429.352694][ C0] , addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_verify_work [ 429.352924][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.747635][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.747677][ C0] pending: wg_packet_handshake_send_worker [ 429.747712][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.766547][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.766584][ C0] pending: wg_packet_encrypt_worker [ 429.766606][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.766638][ C0] pending: wg_packet_encrypt_worker [ 429.766657][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.798566][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.798615][ C0] pending: wg_packet_encrypt_worker [ 429.798660][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.798693][ C0] pending: wg_packet_encrypt_worker [ 429.798714][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.830731][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.830780][ C0] pending: wg_packet_handshake_send_worker [ 429.830809][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.849654][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.849697][ C0] pending: wg_packet_encrypt_worker [ 429.849722][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.849754][ C0] pending: wg_packet_encrypt_worker [ 429.849901][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.882112][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.882147][ C0] pending: wg_packet_encrypt_worker [ 429.882168][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.882199][ C0] pending: wg_packet_encrypt_worker [ 429.882264][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.914581][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.914613][ C0] pending: wg_packet_handshake_send_worker [ 429.914641][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.933381][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.933415][ C0] pending: wg_packet_encrypt_worker [ 429.933440][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.951653][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.951683][ C0] pending: wg_packet_handshake_send_worker [ 429.951704][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.970650][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.970684][ C0] pending: wg_packet_encrypt_worker [ 429.970755][ C0] workqueue wg-kex-wg0: flags=0x24 [ 429.989132][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.989166][ C0] pending: wg_packet_handshake_receive_worker [ 429.989188][ C0] workqueue wg-kex-wg0: flags=0x6 [ 430.008427][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 430.008458][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 430.008493][ C0] workqueue wg-kex-wg1: flags=0x24 [ 430.030013][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.030047][ C0] pending: wg_packet_handshake_receive_worker [ 430.030070][ C0] workqueue wg-kex-wg1: flags=0x6 [ 430.049406][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 430.049437][ C0] pending: wg_packet_handshake_send_worker [ 430.049458][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 430.068269][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 430.068302][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 430.068335][ C0] workqueue wg-kex-wg2: flags=0x6 [ 430.088452][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 430.088481][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 430.088551][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=245s workers=4 idle: 20 60 6 [ 430.088632][ C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=245s workers=4 idle: 42 26 342 [ 430.088703][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=244s workers=5 idle: 45 10 318