Warning: Permanently added '10.128.1.184' (ED25519) to the list of known hosts. 2026/01/24 01:24:32 parsed 1 programs [ 45.612249][ T28] audit: type=1400 audit(1769217873.231:106): avc: denied { unlink } for pid=401 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 45.680154][ T401] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.325202][ T28] audit: type=1400 audit(1769217873.941:107): avc: denied { create } for pid=410 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.677833][ T432] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.684898][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.692253][ T432] device bridge_slave_0 entered promiscuous mode [ 46.699536][ T432] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.706722][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.714069][ T432] device bridge_slave_1 entered promiscuous mode [ 46.751121][ T432] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.758228][ T432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.765487][ T432] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.772614][ T432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.789128][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.796820][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.804054][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.813466][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.821646][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.828747][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.837229][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.845459][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.852571][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.863765][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.876587][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.887216][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.898122][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.906169][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.913778][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.921708][ T432] device veth0_vlan entered promiscuous mode [ 46.930713][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.940338][ T432] device veth1_macvtap entered promiscuous mode [ 46.949828][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.959511][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.210599][ T28] audit: type=1401 audit(1769217874.821:108): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2026/01/24 01:24:35 executed programs: 0 [ 47.446772][ T471] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.453967][ T471] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.461234][ T471] device bridge_slave_0 entered promiscuous mode [ 47.471306][ T471] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.478451][ T471] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.486131][ T471] device bridge_slave_1 entered promiscuous mode [ 47.537847][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.545502][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.554376][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.563020][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.571134][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.578173][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.586896][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.595136][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.603501][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.611638][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.618653][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.633727][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.643186][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.656287][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.667440][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.675525][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.683310][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.691260][ T471] device veth0_vlan entered promiscuous mode [ 47.700781][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.711111][ T471] device veth1_macvtap entered promiscuous mode [ 47.722012][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.732288][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.754557][ T28] audit: type=1400 audit(1769217875.371:109): avc: denied { bpf } for pid=482 comm="syz.2.17" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.775280][ T28] audit: type=1400 audit(1769217875.371:110): avc: denied { prog_load } for pid=482 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 47.796845][ T28] audit: type=1400 audit(1769217875.371:111): avc: denied { map_create } for pid=482 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 47.815902][ T28] audit: type=1400 audit(1769217875.371:112): avc: denied { map_read map_write } for pid=482 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 47.835873][ T28] audit: type=1400 audit(1769217875.371:113): avc: denied { perfmon } for pid=482 comm="syz.2.17" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.856761][ T28] audit: type=1400 audit(1769217875.371:114): avc: denied { prog_run } for pid=482 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 48.503888][ T8] device bridge_slave_1 left promiscuous mode [ 48.510048][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.517692][ T8] device bridge_slave_0 left promiscuous mode [ 48.524034][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.532752][ T8] device veth1_macvtap left promiscuous mode [ 48.538808][ T8] device veth0_vlan left promiscuous mode [ 151.071567][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 151.078288][ C1] rcu: 1-...!: (10000 ticks this GP) idle=c1fc/1/0x4000000000000000 softirq=4494/4500 fqs=0 [ 151.088423][ C1] (t=10001 jiffies g=3213 q=126 ncpus=2) [ 151.094120][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10000 jiffies! g3213 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 151.106325][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=988 [ 151.114025][ C1] rcu: rcu_preempt kthread starved for 10001 jiffies! g3213 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 151.125283][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 151.135311][ C1] rcu: RCU grace-period kthread stack dump: [ 151.141185][ C1] task:rcu_preempt state:I stack:28496 pid:14 ppid:2 flags:0x00004000 [ 151.150550][ C1] Call Trace: [ 151.153814][ C1] [ 151.156748][ C1] __schedule+0xba6/0x1500 [ 151.161179][ C1] ? release_firmware_map_entry+0x190/0x190 [ 151.167057][ C1] schedule+0xbd/0x170 [ 151.171101][ C1] schedule_timeout+0x159/0x340 [ 151.175939][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 151.181281][ C1] ? __cfi_process_timeout+0x10/0x10 [ 151.186672][ C1] ? prepare_to_swait_event+0x308/0x320 [ 151.192196][ C1] rcu_gp_fqs_loop+0x2e9/0x10c0 [ 151.197035][ C1] ? _raw_spin_unlock_irq+0x4d/0x70 [ 151.202209][ C1] ? rcu_gp_init+0xf30/0xf30 [ 151.206876][ C1] rcu_gp_kthread+0x99/0x390 [ 151.211441][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 151.216619][ C1] ? __kasan_check_read+0x11/0x20 [ 151.221616][ C1] ? __kthread_parkme+0x142/0x180 [ 151.226613][ C1] kthread+0x281/0x320 [ 151.230671][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 151.235850][ C1] ? __cfi_kthread+0x10/0x10 [ 151.240504][ C1] ret_from_fork+0x1f/0x30 [ 151.244900][ C1] [ 151.247903][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 151.254235][ C1] Sending NMI from CPU 1 to CPUs 0: [ 151.259460][ C0] NMI backtrace for cpu 0 [ 151.259479][ C0] CPU: 0 PID: 43 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 151.259494][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.259511][ C0] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 151.259535][ C0] RIP: 0010:kvm_wait+0xdf/0x150 [ 151.259558][ C0] Code: 43 c6 44 37 04 f8 75 24 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 48 0f b6 07 40 38 f0 75 93 66 90 0f 00 2d 42 14 13 04 f4 87 fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 [ 151.259570][ C0] RSP: 0018:ffffc90000007100 EFLAGS: 00000046 [ 151.259582][ C0] RAX: 0000000000000003 RBX: ffff8881f7027c40 RCX: ffffffff84ffa742 [ 151.259593][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881f7027c40 [ 151.259603][ C0] RBP: ffffc90000007190 R08: ffff8881f7027c40 R09: 1ffff1103ee04f88 [ 151.259614][ C0] R10: dffffc0000000000 R11: ffffed103ee04f89 R12: 1ffff1103ee00001 [ 151.259625][ C0] R13: ffff8881f7038cd4 R14: dffffc0000000000 R15: 1ffff92000000e20 [ 151.259636][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 151.259649][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.259659][ C0] CR2: 0000001b32263fff CR3: 000000011eb73000 CR4: 00000000003506b0 [ 151.259671][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 151.259680][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 151.259689][ C0] Call Trace: [ 151.259695][ C0] [ 151.259701][ C0] ? __cfi_kvm_wait+0x10/0x10 [ 151.259741][ C0] __pv_queued_spin_lock_slowpath+0x690/0xc40 [ 151.259773][ C0] ? __kernel_text_address+0xd/0x30 [ 151.259794][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 151.259816][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 151.259840][ C0] _raw_spin_lock_irqsave+0x120/0x130 [ 151.259858][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 151.259875][ C0] ? kasan_save_stack+0x4c/0x60 [ 151.259892][ C0] ? kasan_save_stack+0x3a/0x60 [ 151.259907][ C0] ? __kasan_record_aux_stack+0xb6/0xc0 [ 151.259927][ C0] ? kasan_record_aux_stack_noalloc+0xb/0x10 [ 151.259949][ C0] lock_timer_base+0x127/0x270 [ 151.259967][ C0] __mod_timer+0xe5/0xc00 [ 151.259982][ C0] ? __irq_exit_rcu+0x52/0xf0 [ 151.259998][ C0] ? irq_exit_rcu+0x9/0x10 [ 151.260011][ C0] ? sysvec_call_function_single+0xa6/0xc0 [ 151.260032][ C0] ? asm_sysvec_call_function_single+0x1b/0x20 [ 151.260053][ C0] ? synchronize_srcu+0x1c9/0x1f0 [ 151.260067][ C0] ? fsnotify_mark_destroy_workfn+0x106/0x300 [ 151.260083][ C0] ? worker_thread+0xa29/0x11e0 [ 151.260096][ C0] ? kthread+0x281/0x320 [ 151.260111][ C0] add_timer+0x68/0x80 [ 151.260127][ C0] __queue_delayed_work+0x173/0x200 [ 151.260146][ C0] queue_delayed_work_on+0xe7/0x160 [ 151.260164][ C0] ? __cfi_queue_delayed_work_on+0x10/0x10 [ 151.260183][ C0] kvfree_call_rcu+0x44f/0x7c0 [ 151.260200][ C0] ? __cfi_kvfree_call_rcu+0x10/0x10 [ 151.260217][ C0] ? longest_prefix_match+0x337/0x640 [ 151.260236][ C0] trie_delete_elem+0x572/0x720 [ 151.260253][ C0] bpf_prog_5186c38a4019a4cb+0x42/0x46 [ 151.260272][ C0] bpf_trace_run3+0x123/0x290 [ 151.260291][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 151.260310][ C0] ? calc_wheel_index+0xc8/0x8d0 [ 151.260328][ C0] ? __cfi_bpf_trace_run3+0x10/0x10 [ 151.260347][ C0] ? debug_smp_processor_id+0x17/0x20 [ 151.260361][ C0] ? get_nohz_timer_target+0x7a/0x560 [ 151.260379][ C0] __bpf_trace_timer_start+0x2b/0x40 [ 151.260394][ C0] enqueue_timer+0x337/0x480 [ 151.260413][ C0] __mod_timer+0x84c/0xc00 [ 151.260428][ C0] ? ____kasan_slab_free+0x132/0x180 [ 151.260444][ C0] ? __kasan_slab_free+0x11/0x20 [ 151.260462][ C0] add_timer+0x68/0x80 [ 151.260477][ C0] __queue_delayed_work+0x173/0x200 [ 151.260496][ C0] queue_delayed_work_on+0xe7/0x160 [ 151.260514][ C0] ? __cfi_queue_delayed_work_on+0x10/0x10 [ 151.260532][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 151.260548][ C0] ? srcu_gp_start+0x18c/0x2e0 [ 151.260563][ C0] srcu_gp_start_if_needed+0xcf7/0x1010 [ 151.260581][ C0] ? start_poll_synchronize_srcu+0x20/0x20 [ 151.260596][ C0] ? radix_tree_node_rcu_free+0x85/0x90 [ 151.260616][ C0] ? kmem_cache_free+0x12d/0x300 [ 151.260634][ C0] ? __cfi_srcu_free_old_probes+0x10/0x10 [ 151.260652][ C0] ? __cfi_rcu_free_old_probes+0x10/0x10 [ 151.260670][ C0] call_srcu+0x49/0x50 [ 151.260683][ C0] rcu_free_old_probes+0x23/0x30 [ 151.260700][ C0] rcu_do_batch+0x52a/0xbc0 [ 151.260716][ C0] ? rcu_core+0xe80/0xe80 [ 151.260729][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 151.260750][ C0] ? rcu_report_qs_rnp+0x2bc/0x390 [ 151.260769][ C0] rcu_core+0x5c3/0xe80 [ 151.260782][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 151.260796][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 151.260817][ C0] ? irqtime_account_irq+0x75/0x240 [ 151.260837][ C0] rcu_core_si+0x9/0x10 [ 151.260854][ C0] handle_softirqs+0x1d7/0x600 [ 151.260870][ C0] __irq_exit_rcu+0x52/0xf0 [ 151.260885][ C0] irq_exit_rcu+0x9/0x10 [ 151.260898][ C0] sysvec_call_function_single+0xa6/0xc0 [ 151.260919][ C0] [ 151.260923][ C0] [ 151.260928][ C0] asm_sysvec_call_function_single+0x1b/0x20 [ 151.260948][ C0] RIP: 0010:rcu_gp_is_normal+0x29/0x90 [ 151.260971][ C0] Code: 7f 55 48 89 e5 53 48 bb 00 00 00 00 00 fc ff df 48 c7 c0 00 09 97 87 48 c1 e8 03 0f b6 04 18 84 c0 75 2d 83 3d 87 44 3b 06 00 <74> 1f 48 c7 c0 a0 90 72 87 48 c1 e8 03 0f b6 04 18 84 c0 75 30 83 [ 151.260982][ C0] RSP: 0018:ffffc900002cfc08 EFLAGS: 00000246 [ 151.260994][ C0] RAX: 0000000000000004 RBX: dffffc0000000000 RCX: ffffffff87970903 [ 151.261003][ C0] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000000000000040 [ 151.261012][ C0] RBP: ffffc900002cfc10 R08: 0000000000000003 R09: 0000000000000004 [ 151.261021][ C0] R10: 0000000000000000 R11: ffffffff812e92b0 R12: 1ffffffff0f398fa [ 151.261030][ C0] R13: 00000000000005d8 R14: 1ffffffff0f398fb R15: ffffffff879cc7d0 [ 151.261041][ C0] ? __cfi_read_tsc+0x10/0x10 [ 151.261062][ C0] synchronize_srcu+0x1c9/0x1f0 [ 151.261076][ C0] fsnotify_mark_destroy_workfn+0x106/0x300 [ 151.261091][ C0] ? ttwu_do_activate+0x174/0x280 [ 151.261108][ C0] ? __cfi_fsnotify_mark_destroy_workfn+0x10/0x10 [ 151.261125][ C0] process_one_work+0x71f/0xc40 [ 151.261141][ C0] worker_thread+0xa29/0x11e0 [ 151.261157][ C0] ? __kthread_parkme+0x142/0x180 [ 151.261171][ C0] kthread+0x281/0x320 [ 151.261185][ C0] ? __cfi_worker_thread+0x10/0x10 [ 151.261198][ C0] ? __cfi_kthread+0x10/0x10 [ 151.261212][ C0] ret_from_fork+0x1f/0x30 [ 151.261231][ C0] [ 151.261467][ C1] CPU: 1 PID: 791 Comm: syz.2.171 Not tainted syzkaller #0 [ 151.903947][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.913978][ C1] RIP: 0010:smp_call_function_many_cond+0x893/0x980 [ 151.920549][ C1] Code: e6 01 31 ff e8 be 74 09 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 8a 70 09 00 e9 38 ff ff ff f3 90 41 0f b6 44 1d 00 <84> c0 75 14 41 f7 07 01 00 00 00 0f 84 1a ff ff ff e8 67 70 09 00 [ 151.940131][ C1] RSP: 0018:ffffc9000142f7c0 EFLAGS: 00000293 [ 151.946170][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88810e479440 [ 151.954121][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 151.962150][ C1] RBP: ffffc9000142f8f8 R08: ffff8881f71390d7 R09: 1ffff1103ee2721a [ 151.970098][ C1] R10: 0000000000000000 R11: ffffffff8134b920 R12: 1ffff1103ee27218 [ 151.978037][ C1] R13: 1ffff1103ee07ae1 R14: 0000000000000000 R15: ffff8881f703d708 [ 151.985977][ C1] FS: 0000555586f28500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 151.994876][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.001463][ C1] CR2: 0000000000000000 CR3: 000000011eb73000 CR4: 00000000003506a0 [ 152.009413][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.017373][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 152.025591][ C1] Call Trace: [ 152.028845][ C1] [ 152.031756][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 152.036770][ C1] ? smp_call_function_many+0x40/0x40 [ 152.042113][ C1] ? enqueue_timer+0x16a/0x480 [ 152.046937][ C1] ? text_poke+0x30/0x30 [ 152.051155][ C1] ? text_poke_loc_init+0x396/0x5b0 [ 152.056324][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 152.061318][ C1] on_each_cpu_cond_mask+0x43/0x80 [ 152.066401][ C1] text_poke_bp_batch+0x1cf/0x600 [ 152.071422][ C1] ? text_poke_loc_init+0x5b0/0x5b0 [ 152.076704][ C1] ? __kasan_check_write+0x14/0x20 [ 152.081960][ C1] ? mutex_lock+0x93/0x1b0 [ 152.086352][ C1] ? __cfi_mutex_lock+0x10/0x10 [ 152.091175][ C1] ? enqueue_timer+0x16a/0x480 [ 152.095917][ C1] text_poke_finish+0x1a/0x30 [ 152.100573][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 152.106560][ C1] __jump_label_update+0x37c/0x3a0 [ 152.111672][ C1] jump_label_update+0x39b/0x450 [ 152.116583][ C1] static_key_disable_cpuslocked+0xc9/0x1a0 [ 152.122471][ C1] static_key_disable+0x1a/0x30 [ 152.127298][ C1] tracepoint_probe_unregister+0x641/0x8e0 [ 152.133079][ C1] bpf_probe_unregister+0x61/0x70 [ 152.138080][ C1] bpf_raw_tp_link_release+0x63/0x90 [ 152.143351][ C1] bpf_link_free+0x13a/0x3a0 [ 152.147916][ C1] ? bpf_link_put_deferred+0x20/0x20 [ 152.153289][ C1] ? __kasan_check_write+0x14/0x20 [ 152.158407][ C1] bpf_link_release+0x15f/0x170 [ 152.163239][ C1] ? __cfi_bpf_link_release+0x10/0x10 [ 152.168584][ C1] __fput+0x1fc/0x8f0 [ 152.172588][ C1] ____fput+0x15/0x20 [ 152.176619][ C1] task_work_run+0x1e1/0x250 [ 152.181184][ C1] ? __cfi_task_work_run+0x10/0x10 [ 152.186265][ C1] ? __cfi___close_range+0x10/0x10 [ 152.191348][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 152.196517][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 152.202120][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 152.207585][ C1] do_syscall_64+0x58/0xa0 [ 152.211998][ C1] ? clear_bhb_loop+0x30/0x80 [ 152.216662][ C1] ? clear_bhb_loop+0x30/0x80 [ 152.221324][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.227284][ C1] RIP: 0033:0x7fd7a339a679 [ 152.231683][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.251348][ C1] RSP: 002b:00007fffc8099768 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 152.259738][ C1] RAX: 0000000000000000 RBX: 00007fffc8099850 RCX: 00007fd7a339a679 [ 152.267703][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 152.275820][ C1] RBP: 000000000000c758 R08: 0000000000000001 R09: 0000000000000000 [ 152.283772][ C1] R10: 0000001b31620000 R11: 0000000000000246 R12: 00007fffc8099890 [ 152.291714][ C1] R13: 00007fd7a3605fac R14: 000000000000c97f R15: 00007fd7a3605fa0 [ 152.299662][ C1] [ 287.095268][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 226s! [syz.2.171:791] [ 287.103530][ C1] Modules linked in: [ 287.107411][ C1] CPU: 1 PID: 791 Comm: syz.2.171 Not tainted syzkaller #0 [ 287.114575][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.124688][ C1] RIP: 0010:smp_call_function_many_cond+0x88d/0x980 [ 287.131267][ C1] Code: 41 8b 1f 89 de 83 e6 01 31 ff e8 be 74 09 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 8a 70 09 00 e9 38 ff ff ff f3 90 <41> 0f b6 44 1d 00 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 1a ff ff [ 287.150852][ C1] RSP: 0018:ffffc9000142f7c0 EFLAGS: 00000293 [ 287.156909][ C1] RAX: ffffffff8167d959 RBX: dffffc0000000000 RCX: ffff88810e479440 [ 287.164871][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 287.172813][ C1] RBP: ffffc9000142f8f8 R08: ffff8881f71390d7 R09: 1ffff1103ee2721a [ 287.180870][ C1] R10: 0000000000000000 R11: ffffffff8134b920 R12: 1ffff1103ee27218 [ 287.188809][ C1] R13: 1ffff1103ee07ae1 R14: 0000000000000000 R15: ffff8881f703d708 [ 287.196757][ C1] FS: 0000555586f28500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 287.205829][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.212384][ C1] CR2: 0000000000000000 CR3: 000000011eb73000 CR4: 00000000003506a0 [ 287.220339][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.228299][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.236250][ C1] Call Trace: [ 287.239506][ C1] [ 287.242416][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 287.247438][ C1] ? smp_call_function_many+0x40/0x40 [ 287.252809][ C1] ? enqueue_timer+0x16a/0x480 [ 287.257553][ C1] ? text_poke+0x30/0x30 [ 287.261787][ C1] ? text_poke_loc_init+0x396/0x5b0 [ 287.266972][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 287.272063][ C1] on_each_cpu_cond_mask+0x43/0x80 [ 287.277172][ C1] text_poke_bp_batch+0x1cf/0x600 [ 287.282189][ C1] ? text_poke_loc_init+0x5b0/0x5b0 [ 287.287365][ C1] ? __kasan_check_write+0x14/0x20 [ 287.292454][ C1] ? mutex_lock+0x93/0x1b0 [ 287.296860][ C1] ? __cfi_mutex_lock+0x10/0x10 [ 287.301701][ C1] ? enqueue_timer+0x16a/0x480 [ 287.306534][ C1] text_poke_finish+0x1a/0x30 [ 287.311203][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 287.317161][ C1] __jump_label_update+0x37c/0x3a0 [ 287.322257][ C1] jump_label_update+0x39b/0x450 [ 287.327194][ C1] static_key_disable_cpuslocked+0xc9/0x1a0 [ 287.333076][ C1] static_key_disable+0x1a/0x30 [ 287.337908][ C1] tracepoint_probe_unregister+0x641/0x8e0 [ 287.343693][ C1] bpf_probe_unregister+0x61/0x70 [ 287.348693][ C1] bpf_raw_tp_link_release+0x63/0x90 [ 287.353950][ C1] bpf_link_free+0x13a/0x3a0 [ 287.358518][ C1] ? bpf_link_put_deferred+0x20/0x20 [ 287.363775][ C1] ? __kasan_check_write+0x14/0x20 [ 287.368857][ C1] bpf_link_release+0x15f/0x170 [ 287.373676][ C1] ? __cfi_bpf_link_release+0x10/0x10 [ 287.379017][ C1] __fput+0x1fc/0x8f0 [ 287.382971][ C1] ____fput+0x15/0x20 [ 287.386924][ C1] task_work_run+0x1e1/0x250 [ 287.391490][ C1] ? __cfi_task_work_run+0x10/0x10 [ 287.396572][ C1] ? __cfi___close_range+0x10/0x10 [ 287.401656][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 287.406825][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 287.412264][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 287.417720][ C1] do_syscall_64+0x58/0xa0 [ 287.422124][ C1] ? clear_bhb_loop+0x30/0x80 [ 287.426790][ C1] ? clear_bhb_loop+0x30/0x80 [ 287.431550][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.437424][ C1] RIP: 0033:0x7fd7a339a679 [ 287.441895][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.461502][ C1] RSP: 002b:00007fffc8099768 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 287.469913][ C1] RAX: 0000000000000000 RBX: 00007fffc8099850 RCX: 00007fd7a339a679 [ 287.477869][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 287.485812][ C1] RBP: 000000000000c758 R08: 0000000000000001 R09: 0000000000000000 [ 287.493771][ C1] R10: 0000001b31620000 R11: 0000000000000246 R12: 00007fffc8099890 [ 287.501728][ C1] R13: 00007fd7a3605fac R14: 000000000000c97f R15: 00007fd7a3605fa0 [ 287.509677][ C1] [ 287.512691][ C1] Sending NMI from CPU 1 to CPUs 0: [ 287.518026][ C0] NMI backtrace for cpu 0 [ 287.518036][ C0] CPU: 0 PID: 43 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 287.518051][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.518132][ C0] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 287.518157][ C0] RIP: 0010:kvm_wait+0xdf/0x150 [ 287.518183][ C0] Code: 43 c6 44 37 04 f8 75 24 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 48 0f b6 07 40 38 f0 75 93 66 90 0f 00 2d 42 14 13 04 f4 87 fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 [ 287.518195][ C0] RSP: 0018:ffffc90000007100 EFLAGS: 00000046 [ 287.518207][ C0] RAX: 0000000000000003 RBX: ffff8881f7027c40 RCX: ffffffff84ffa742 [ 287.518218][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881f7027c40 [ 287.518228][ C0] RBP: ffffc90000007190 R08: ffff8881f7027c40 R09: 1ffff1103ee04f88 [ 287.518239][ C0] R10: dffffc0000000000 R11: ffffed103ee04f89 R12: 1ffff1103ee00001 [ 287.518249][ C0] R13: ffff8881f7038cd4 R14: dffffc0000000000 R15: 1ffff92000000e20 [ 287.518260][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 287.518273][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.518283][ C0] CR2: 0000001b32263fff CR3: 000000011eb73000 CR4: 00000000003506b0 [ 287.518296][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.518304][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.518313][ C0] Call Trace: [ 287.518318][ C0] [ 287.518326][ C0] ? __cfi_kvm_wait+0x10/0x10 [ 287.518367][ C0] __pv_queued_spin_lock_slowpath+0x690/0xc40 [ 287.518389][ C0] ? __kernel_text_address+0xd/0x30 [ 287.518409][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 287.518430][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 287.518454][ C0] _raw_spin_lock_irqsave+0x120/0x130 [ 287.518472][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 287.518490][ C0] ? kasan_save_stack+0x4c/0x60 [ 287.518506][ C0] ? kasan_save_stack+0x3a/0x60 [ 287.518521][ C0] ? __kasan_record_aux_stack+0xb6/0xc0 [ 287.518541][ C0] ? kasan_record_aux_stack_noalloc+0xb/0x10 [ 287.518562][ C0] lock_timer_base+0x127/0x270 [ 287.518580][ C0] __mod_timer+0xe5/0xc00 [ 287.518595][ C0] ? __irq_exit_rcu+0x52/0xf0 [ 287.518611][ C0] ? irq_exit_rcu+0x9/0x10 [ 287.518633][ C0] ? sysvec_call_function_single+0xa6/0xc0 [ 287.518654][ C0] ? asm_sysvec_call_function_single+0x1b/0x20 [ 287.518674][ C0] ? synchronize_srcu+0x1c9/0x1f0 [ 287.518691][ C0] ? fsnotify_mark_destroy_workfn+0x106/0x300 [ 287.518706][ C0] ? worker_thread+0xa29/0x11e0 [ 287.518719][ C0] ? kthread+0x281/0x320 [ 287.518736][ C0] add_timer+0x68/0x80 [ 287.518751][ C0] __queue_delayed_work+0x173/0x200 [ 287.518772][ C0] queue_delayed_work_on+0xe7/0x160 [ 287.518790][ C0] ? __cfi_queue_delayed_work_on+0x10/0x10 [ 287.518810][ C0] kvfree_call_rcu+0x44f/0x7c0 [ 287.518829][ C0] ? __cfi_kvfree_call_rcu+0x10/0x10 [ 287.518846][ C0] ? longest_prefix_match+0x337/0x640 [ 287.518864][ C0] trie_delete_elem+0x572/0x720 [ 287.518882][ C0] bpf_prog_5186c38a4019a4cb+0x42/0x46 [ 287.518896][ C0] bpf_trace_run3+0x123/0x290 [ 287.518915][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 287.518935][ C0] ? calc_wheel_index+0xc8/0x8d0 [ 287.518952][ C0] ? __cfi_bpf_trace_run3+0x10/0x10 [ 287.518971][ C0] ? debug_smp_processor_id+0x17/0x20 [ 287.518985][ C0] ? get_nohz_timer_target+0x7a/0x560 [ 287.519002][ C0] __bpf_trace_timer_start+0x2b/0x40 [ 287.519017][ C0] enqueue_timer+0x337/0x480 [ 287.519036][ C0] __mod_timer+0x84c/0xc00 [ 287.519051][ C0] ? ____kasan_slab_free+0x132/0x180 [ 287.519067][ C0] ? __kasan_slab_free+0x11/0x20 [ 287.519085][ C0] add_timer+0x68/0x80 [ 287.519100][ C0] __queue_delayed_work+0x173/0x200 [ 287.519119][ C0] queue_delayed_work_on+0xe7/0x160 [ 287.519137][ C0] ? __cfi_queue_delayed_work_on+0x10/0x10 [ 287.519155][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 287.519171][ C0] ? srcu_gp_start+0x18c/0x2e0 [ 287.519186][ C0] srcu_gp_start_if_needed+0xcf7/0x1010 [ 287.519203][ C0] ? start_poll_synchronize_srcu+0x20/0x20 [ 287.519219][ C0] ? radix_tree_node_rcu_free+0x85/0x90 [ 287.519239][ C0] ? kmem_cache_free+0x12d/0x300 [ 287.519258][ C0] ? __cfi_srcu_free_old_probes+0x10/0x10 [ 287.519276][ C0] ? __cfi_rcu_free_old_probes+0x10/0x10 [ 287.519294][ C0] call_srcu+0x49/0x50 [ 287.519307][ C0] rcu_free_old_probes+0x23/0x30 [ 287.519324][ C0] rcu_do_batch+0x52a/0xbc0 [ 287.519340][ C0] ? rcu_core+0xe80/0xe80 [ 287.519354][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 287.519371][ C0] ? rcu_report_qs_rnp+0x2bc/0x390 [ 287.519390][ C0] rcu_core+0x5c3/0xe80 [ 287.519404][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 287.519418][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 287.519439][ C0] ? irqtime_account_irq+0x75/0x240 [ 287.519459][ C0] rcu_core_si+0x9/0x10 [ 287.519476][ C0] handle_softirqs+0x1d7/0x600 [ 287.519493][ C0] __irq_exit_rcu+0x52/0xf0 [ 287.519508][ C0] irq_exit_rcu+0x9/0x10 [ 287.519522][ C0] sysvec_call_function_single+0xa6/0xc0 [ 287.519590][ C0] [ 287.519595][ C0] [ 287.519600][ C0] asm_sysvec_call_function_single+0x1b/0x20 [ 287.519626][ C0] RIP: 0010:rcu_gp_is_normal+0x29/0x90 [ 287.519647][ C0] Code: 7f 55 48 89 e5 53 48 bb 00 00 00 00 00 fc ff df 48 c7 c0 00 09 97 87 48 c1 e8 03 0f b6 04 18 84 c0 75 2d 83 3d 87 44 3b 06 00 <74> 1f 48 c7 c0 a0 90 72 87 48 c1 e8 03 0f b6 04 18 84 c0 75 30 83 [ 287.519658][ C0] RSP: 0018:ffffc900002cfc08 EFLAGS: 00000246 [ 287.519670][ C0] RAX: 0000000000000004 RBX: dffffc0000000000 RCX: ffffffff87970903 [ 287.519680][ C0] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000000000000040 [ 287.519689][ C0] RBP: ffffc900002cfc10 R08: 0000000000000003 R09: 0000000000000004 [ 287.519698][ C0] R10: 0000000000000000 R11: ffffffff812e92b0 R12: 1ffffffff0f398fa [ 287.519707][ C0] R13: 00000000000005d8 R14: 1ffffffff0f398fb R15: ffffffff879cc7d0 [ 287.519718][ C0] ? __cfi_read_tsc+0x10/0x10 [ 287.519739][ C0] synchronize_srcu+0x1c9/0x1f0 [ 287.519754][ C0] fsnotify_mark_destroy_workfn+0x106/0x300 [ 287.519769][ C0] ? ttwu_do_activate+0x174/0x280 [ 287.519786][ C0] ? __cfi_fsnotify_mark_destroy_workfn+0x10/0x10 [ 287.519803][ C0] process_one_work+0x71f/0xc40 [ 287.519818][ C0] worker_thread+0xa29/0x11e0 [ 287.519835][ C0] ? __kthread_parkme+0x142/0x180 [ 287.519849][ C0] kthread+0x281/0x320 [ 287.519862][ C0] ? __cfi_worker_thread+0x10/0x10 [ 287.519876][ C0] ? __cfi_kthread+0x10/0x10 [ 287.519890][ C0] ret_from_fork+0x1f/0x30 [ 287.519910][ C0]