Warning: Permanently added '10.128.0.178' (ED25519) to the list of known hosts. 2025/12/21 16:13:55 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 48.328494][ T28] audit: type=1400 audit(1766333636.354:106): avc: denied { unlink } for pid=400 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 48.406524][ T400] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.269921][ T28] audit: type=1401 audit(1766333637.294:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 49.353632][ T28] audit: type=1400 audit(1766333637.374:108): avc: denied { create } for pid=420 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.741702][ T443] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.749084][ T443] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.756471][ T443] device bridge_slave_0 entered promiscuous mode [ 49.763471][ T443] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.770574][ T443] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.778414][ T443] device bridge_slave_1 entered promiscuous mode [ 49.831551][ T443] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.838640][ T443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.845966][ T443] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.853057][ T443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.873650][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.881387][ T431] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.888947][ T431] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.898326][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.906517][ T431] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.913617][ T431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.922346][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.930803][ T431] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.937846][ T431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.951409][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.960856][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.975522][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.987361][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.995659][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.003532][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.012021][ T443] device veth0_vlan entered promiscuous mode [ 50.022805][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.032131][ T443] device veth1_macvtap entered promiscuous mode [ 50.042014][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.052293][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/12/21 16:13:58 executed programs: 0 [ 50.418070][ T471] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.426219][ T471] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.433819][ T471] device bridge_slave_0 entered promiscuous mode [ 50.448221][ T471] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.455294][ T471] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.462816][ T471] device bridge_slave_1 entered promiscuous mode [ 50.525762][ T471] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.532844][ T471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.540260][ T471] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.547313][ T471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.568917][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.576581][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.584203][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.599750][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.608024][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.615097][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.624019][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.632300][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.639458][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.654165][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.675133][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.684007][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.696838][ T471] device veth0_vlan entered promiscuous mode [ 50.703215][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.711292][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.718921][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.733736][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.741932][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.751723][ T471] device veth1_macvtap entered promiscuous mode [ 50.761797][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.769737][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.778722][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.789484][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.797798][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.822890][ T28] audit: type=1400 audit(1766333638.844:109): avc: denied { bpf } for pid=482 comm="syz.2.17" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 50.843912][ T28] audit: type=1400 audit(1766333638.844:110): avc: denied { prog_load } for pid=482 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 50.863795][ T28] audit: type=1400 audit(1766333638.844:111): avc: denied { map_create } for pid=482 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 50.883844][ T28] audit: type=1400 audit(1766333638.844:112): avc: denied { map_read map_write } for pid=482 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 50.904169][ T28] audit: type=1400 audit(1766333638.844:113): avc: denied { perfmon } for pid=482 comm="syz.2.17" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 50.930219][ T28] audit: type=1400 audit(1766333638.844:114): avc: denied { prog_run } for pid=482 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 51.439272][ T313] device bridge_slave_1 left promiscuous mode [ 51.445419][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.453316][ T313] device bridge_slave_0 left promiscuous mode [ 51.461485][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.470304][ T313] device veth1_macvtap left promiscuous mode [ 51.478823][ T313] device veth0_vlan left promiscuous mode 2025/12/21 16:14:03 executed programs: 225 2025/12/21 16:14:08 executed programs: 476 [ 63.017261][ T1683] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.024490][ T1683] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.032442][ T1683] device bridge_slave_0 entered promiscuous mode [ 63.039418][ T1683] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.046452][ T1683] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.054149][ T1683] device bridge_slave_1 entered promiscuous mode [ 63.107863][ T1683] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.114936][ T1683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.122251][ T1683] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.129395][ T1683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.149207][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.156995][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.164553][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.175435][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.183736][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.190777][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.199876][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.208169][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.215212][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.227514][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.238998][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.253240][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.265032][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.273375][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.281027][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.291319][ T1683] device veth0_vlan entered promiscuous mode [ 63.302278][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.311904][ T1683] device veth1_macvtap entered promiscuous mode [ 63.323337][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.333350][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.499298][ T431] device bridge_slave_1 left promiscuous mode [ 63.505684][ T431] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.518799][ T431] device bridge_slave_0 left promiscuous mode [ 63.525690][ T431] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.534308][ T431] device veth1_macvtap left promiscuous mode [ 63.540531][ T431] device veth0_vlan left promiscuous mode [ 163.628067][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 163.635085][ C1] rcu: 0-...!: (1 GPs behind) idle=951c/1/0x4000000000000000 softirq=7823/7824 fqs=0 [ 163.644901][ C1] (detected by 1, t=10006 jiffies, g=6861, q=273 ncpus=2) [ 163.652114][ C1] Sending NMI from CPU 1 to CPUs 0: [ 163.657395][ C0] NMI backtrace for cpu 0 [ 163.657418][ C0] CPU: 0 PID: 431 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 163.657435][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.657453][ C0] Workqueue: netns cleanup_net [ 163.657498][ C0] RIP: 0010:kvm_wait+0xcc/0x140 [ 163.657523][ C0] Code: 20 f6 44 24 21 02 75 24 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 48 0f b6 07 40 38 f0 75 a6 66 90 0f 00 2d 95 96 13 04 f4 9a fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 [ 163.657537][ C0] RSP: 0018:ffffc90000c06f00 EFLAGS: 00000046 [ 163.657550][ C0] RAX: 0000000000000003 RBX: ffff8881f7027a80 RCX: ffffffff84f49de2 [ 163.657562][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881f7027a80 [ 163.657573][ C0] RBP: ffffc90000c06f90 R08: dffffc0000000000 R09: ffffed103ee04f51 [ 163.657586][ C0] R10: ffffed103ee04f51 R11: 1ffff1103ee04f50 R12: 1ffff1103ee00001 [ 163.657598][ C0] R13: ffff8881f7038cd4 R14: dffffc0000000000 R15: 1ffff92000180de0 [ 163.657611][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 163.657626][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.657637][ C0] CR2: 0000000000000000 CR3: 000000010f7b4000 CR4: 00000000003506b0 [ 163.657651][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 163.657660][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 163.657670][ C0] Call Trace: [ 163.657677][ C0] [ 163.657685][ C0] ? __cfi_kvm_wait+0x10/0x10 [ 163.657706][ C0] ? bpf_prog_41385012b43a9f2e+0x40/0x44 [ 163.657730][ C0] ? pv_hash+0x86/0x150 [ 163.657745][ C0] __pv_queued_spin_lock_slowpath+0x690/0xc40 [ 163.657769][ C0] ? process_one_work+0x71f/0xc40 [ 163.657785][ C0] ? worker_thread+0xa29/0x11f0 [ 163.657801][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 163.657826][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 163.657860][ C0] _raw_spin_lock+0xd8/0xe0 [ 163.657878][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 163.657898][ C0] kvfree_call_rcu+0x100/0x7a0 [ 163.657918][ C0] ? __cfi_kvfree_call_rcu+0x10/0x10 [ 163.657937][ C0] ? longest_prefix_match+0x43c/0x640 [ 163.657958][ C0] trie_delete_elem+0x572/0x720 [ 163.657978][ C0] bpf_prog_41385012b43a9f2e+0x40/0x44 [ 163.657992][ C0] bpf_trace_run3+0x113/0x270 [ 163.658015][ C0] ? __cfi_bpf_trace_run3+0x10/0x10 [ 163.658038][ C0] ? debug_smp_processor_id+0x17/0x20 [ 163.658053][ C0] ? get_nohz_timer_target+0x74/0x540 [ 163.658072][ C0] __bpf_trace_timer_start+0x2b/0x40 [ 163.658090][ C0] enqueue_timer+0x337/0x480 [ 163.658112][ C0] __mod_timer+0x84a/0xbf0 [ 163.658132][ C0] add_timer+0x68/0x80 [ 163.658150][ C0] __queue_delayed_work+0x173/0x200 [ 163.658172][ C0] queue_delayed_work_on+0xdb/0x150 [ 163.658193][ C0] ? __cfi_queue_delayed_work_on+0x10/0x10 [ 163.658217][ C0] kvfree_call_rcu+0x436/0x7a0 [ 163.658237][ C0] ? __cfi_kvfree_call_rcu+0x10/0x10 [ 163.658255][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 163.658273][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 163.658293][ C0] drop_sysctl_table+0x2ef/0x410 [ 163.658311][ C0] ? insert_header+0xeb0/0xeb0 [ 163.658326][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 163.658343][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 163.658362][ C0] ? __cfi_call_rcu+0x10/0x10 [ 163.658380][ C0] ? count_subheaders+0xc9/0x100 [ 163.658396][ C0] unregister_sysctl_table+0x75/0x120 [ 163.658413][ C0] ? unregister_net_sysctl_table+0xd/0x20 [ 163.658430][ C0] unregister_net_sysctl_table+0x15/0x20 [ 163.658447][ C0] inetdev_event+0x808/0x10e0 [ 163.658466][ C0] ? __cfi_inetdev_event+0x10/0x10 [ 163.658486][ C0] ? arp_netdev_event+0xd4/0x2b0 [ 163.658511][ C0] raw_notifier_call_chain+0xa1/0x110 [ 163.658537][ C0] unregister_netdevice_many+0xf8f/0x1820 [ 163.658565][ C0] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 163.658590][ C0] ? unregister_netdevice_queue+0x1aa/0x360 [ 163.658615][ C0] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 163.658639][ C0] ? br_dev_delete+0xfc/0x110 [ 163.658655][ C0] default_device_exit_batch+0x9b9/0xa50 [ 163.658672][ C0] ? idr_destroy+0x21e/0x290 [ 163.658697][ C0] ? __cfi_mutex_lock+0x10/0x10 [ 163.658718][ C0] ? __cfi_default_device_exit_batch+0x10/0x10 [ 163.658736][ C0] ? __cfi_xfrmi_exit_batch_net+0x10/0x10 [ 163.658758][ C0] ? rtnl_unlock+0xe/0x10 [ 163.658773][ C0] ? __cfi_default_device_exit_batch+0x10/0x10 [ 163.658790][ C0] cleanup_net+0x62d/0xb00 [ 163.658813][ C0] ? __cfi_cleanup_net+0x10/0x10 [ 163.658838][ C0] process_one_work+0x71f/0xc40 [ 163.658863][ C0] worker_thread+0xa29/0x11f0 [ 163.658878][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 163.658901][ C0] ? __kthread_parkme+0x142/0x180 [ 163.658917][ C0] kthread+0x281/0x320 [ 163.658933][ C0] ? __cfi_worker_thread+0x10/0x10 [ 163.658948][ C0] ? __cfi_kthread+0x10/0x10 [ 163.658965][ C0] ret_from_fork+0x1f/0x30 [ 163.658987][ C0] [ 163.659375][ C1] rcu: rcu_preempt kthread starved for 10006 jiffies! g6861 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 164.149374][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 164.159338][ C1] rcu: RCU grace-period kthread stack dump: [ 164.165227][ C1] task:rcu_preempt state:R running task stack:28528 pid:14 ppid:2 flags:0x00004000 [ 164.176008][ C1] Call Trace: [ 164.179291][ C1] [ 164.182219][ C1] __schedule+0xb87/0x14e0 [ 164.186640][ C1] ? __sched_text_start+0x8/0x8 [ 164.191513][ C1] schedule+0xbd/0x170 [ 164.195590][ C1] schedule_timeout+0x12c/0x2e0 [ 164.200446][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 164.205839][ C1] ? __cfi_process_timeout+0x10/0x10 [ 164.211122][ C1] ? prepare_to_swait_event+0x308/0x320 [ 164.216756][ C1] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 164.221608][ C1] ? rcu_gp_init+0xf10/0xf10 [ 164.226207][ C1] rcu_gp_kthread+0x95/0x370 [ 164.230795][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 164.235993][ C1] ? set_cpus_allowed_ptr+0x82/0xc0 [ 164.241187][ C1] ? __kasan_check_read+0x11/0x20 [ 164.246205][ C1] ? __kthread_parkme+0x142/0x180 [ 164.251247][ C1] kthread+0x281/0x320 [ 164.255320][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 164.260527][ C1] ? __cfi_kthread+0x10/0x10 [ 164.265111][ C1] ret_from_fork+0x1f/0x30 [ 164.269528][ C1] [ 164.272556][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 164.278894][ C1] CPU: 1 PID: 1713 Comm: syz.2.627 Not tainted syzkaller #0 [ 164.286174][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.296243][ C1] RIP: 0010:smp_call_function_many_cond+0x872/0x960 [ 164.302830][ C1] Code: 41 8b 1f 89 de 83 e6 01 31 ff e8 99 65 09 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 65 61 09 00 e9 38 ff ff ff f3 90 <41> 0f b6 44 1d 00 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 1a ff ff [ 164.322453][ C1] RSP: 0018:ffffc90001cc77c0 EFLAGS: 00000293 [ 164.328522][ C1] RAX: ffffffff8166c8be RBX: dffffc0000000000 RCX: ffff888112f41440 [ 164.336490][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 164.344454][ C1] RBP: ffffc90001cc78f8 R08: dffffc0000000000 R09: ffffed103ee2721b [ 164.352434][ C1] R10: 0000000000000000 R11: ffffffff81343830 R12: 1ffff1103ee27218 [ 164.360399][ C1] R13: 1ffff1103ee07ae1 R14: 0000000000000000 R15: ffff8881f703d708 [ 164.368452][ C1] FS: 000055557fef2500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 164.377465][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.384042][ C1] CR2: 00007f1f36a51762 CR3: 000000011039f000 CR4: 00000000003506a0 [ 164.392013][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 164.400001][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 164.407976][ C1] Call Trace: [ 164.411266][ C1] [ 164.414210][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 164.419262][ C1] ? smp_call_function_many+0x40/0x40 [ 164.424635][ C1] ? enqueue_timer+0x16a/0x480 [ 164.429398][ C1] ? text_poke+0x30/0x30 [ 164.433642][ C1] ? text_poke_loc_init+0x349/0x570 [ 164.438847][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 164.443886][ C1] on_each_cpu_cond_mask+0x43/0x80 [ 164.449025][ C1] text_poke_bp_batch+0x1cc/0x580 [ 164.454077][ C1] ? text_poke_loc_init+0x570/0x570 [ 164.459289][ C1] ? __kasan_check_write+0x14/0x20 [ 164.464423][ C1] ? mutex_lock+0x8d/0x1a0 [ 164.469028][ C1] ? __cfi_mutex_lock+0x10/0x10 [ 164.473889][ C1] ? enqueue_timer+0x16a/0x480 [ 164.478662][ C1] text_poke_finish+0x1a/0x30 [ 164.483346][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 164.489344][ C1] __jump_label_update+0x37c/0x3a0 [ 164.494476][ C1] jump_label_update+0x39b/0x450 [ 164.499459][ C1] static_key_disable_cpuslocked+0xc9/0x1a0 [ 164.505377][ C1] static_key_disable+0x1a/0x30 [ 164.510255][ C1] tracepoint_probe_unregister+0x624/0x8b0 [ 164.516225][ C1] bpf_probe_unregister+0x61/0x70 [ 164.521312][ C1] bpf_raw_tp_link_release+0x63/0x90 [ 164.526621][ C1] bpf_link_free+0x13a/0x390 [ 164.531221][ C1] ? bpf_link_put_deferred+0x20/0x20 [ 164.536526][ C1] ? __kasan_record_aux_stack+0xb6/0xc0 [ 164.542091][ C1] ? __kasan_check_write+0x14/0x20 [ 164.547218][ C1] ? task_work_add+0x250/0x330 [ 164.552523][ C1] bpf_link_release+0x15f/0x170 [ 164.557373][ C1] ? __cfi_bpf_link_release+0x10/0x10 [ 164.562773][ C1] __fput+0x1fc/0x8f0 [ 164.566778][ C1] ____fput+0x15/0x20 [ 164.570775][ C1] task_work_run+0x1db/0x240 [ 164.575418][ C1] ? __cfi_task_work_run+0x10/0x10 [ 164.580537][ C1] ? __cfi___close_range+0x10/0x10 [ 164.585655][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 164.590874][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 164.596341][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 164.601805][ C1] do_syscall_64+0x58/0xa0 [ 164.606219][ C1] ? clear_bhb_loop+0x30/0x80 [ 164.610901][ C1] ? clear_bhb_loop+0x30/0x80 [ 164.615590][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.621490][ C1] RIP: 0033:0x7f1f3698f749 [ 164.625900][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.645590][ C1] RSP: 002b:00007ffdf69d6e98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 164.654094][ C1] RAX: 0000000000000000 RBX: 000000000000f825 RCX: 00007f1f3698f749 [ 164.662063][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 164.670056][ C1] RBP: 00007f1f36be7da0 R08: 0000000000000001 R09: 00000008f69d718f [ 164.678029][ C1] R10: 0000001b2d220000 R11: 0000000000000246 R12: 00007f1f36be5fac [ 164.686084][ C1] R13: 00007f1f36be5fa0 R14: ffffffffffffffff R15: 00007ffdf69d6fb0 [ 164.694165][ C1] [ 309.262936][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 246s! [syz.2.627:1713] [ 309.271176][ C1] Modules linked in: [ 309.275101][ C1] CPU: 1 PID: 1713 Comm: syz.2.627 Not tainted syzkaller #0 [ 309.282389][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 309.292446][ C1] RIP: 0010:smp_call_function_many_cond+0x878/0x960 [ 309.299071][ C1] Code: e6 01 31 ff e8 99 65 09 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 65 61 09 00 e9 38 ff ff ff f3 90 41 0f b6 44 1d 00 <84> c0 75 14 41 f7 07 01 00 00 00 0f 84 1a ff ff ff e8 42 61 09 00 [ 309.318780][ C1] RSP: 0018:ffffc90001cc77c0 EFLAGS: 00000293 [ 309.324863][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888112f41440 [ 309.332843][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 309.340841][ C1] RBP: ffffc90001cc78f8 R08: dffffc0000000000 R09: ffffed103ee2721b [ 309.348821][ C1] R10: 0000000000000000 R11: ffffffff81343830 R12: 1ffff1103ee27218 [ 309.356790][ C1] R13: 1ffff1103ee07ae1 R14: 0000000000000000 R15: ffff8881f703d708 [ 309.364768][ C1] FS: 000055557fef2500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 309.373804][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.380384][ C1] CR2: 00007f1f36a51762 CR3: 000000011039f000 CR4: 00000000003506a0 [ 309.388360][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 309.396414][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.404379][ C1] Call Trace: [ 309.407652][ C1] [ 309.410583][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 309.415614][ C1] ? smp_call_function_many+0x40/0x40 [ 309.420992][ C1] ? enqueue_timer+0x16a/0x480 [ 309.425845][ C1] ? text_poke+0x30/0x30 [ 309.430120][ C1] ? text_poke_loc_init+0x349/0x570 [ 309.435338][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 309.440359][ C1] on_each_cpu_cond_mask+0x43/0x80 [ 309.445469][ C1] text_poke_bp_batch+0x1cc/0x580 [ 309.450494][ C1] ? text_poke_loc_init+0x570/0x570 [ 309.455729][ C1] ? __kasan_check_write+0x14/0x20 [ 309.460857][ C1] ? mutex_lock+0x8d/0x1a0 [ 309.465285][ C1] ? __cfi_mutex_lock+0x10/0x10 [ 309.470140][ C1] ? enqueue_timer+0x16a/0x480 [ 309.474907][ C1] text_poke_finish+0x1a/0x30 [ 309.479580][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 309.485563][ C1] __jump_label_update+0x37c/0x3a0 [ 309.490766][ C1] jump_label_update+0x39b/0x450 [ 309.495700][ C1] static_key_disable_cpuslocked+0xc9/0x1a0 [ 309.501594][ C1] static_key_disable+0x1a/0x30 [ 309.506447][ C1] tracepoint_probe_unregister+0x624/0x8b0 [ 309.512252][ C1] bpf_probe_unregister+0x61/0x70 [ 309.517300][ C1] bpf_raw_tp_link_release+0x63/0x90 [ 309.522671][ C1] bpf_link_free+0x13a/0x390 [ 309.527265][ C1] ? bpf_link_put_deferred+0x20/0x20 [ 309.532558][ C1] ? __kasan_record_aux_stack+0xb6/0xc0 [ 309.538192][ C1] ? __kasan_check_write+0x14/0x20 [ 309.543296][ C1] ? task_work_add+0x250/0x330 [ 309.548105][ C1] bpf_link_release+0x15f/0x170 [ 309.552966][ C1] ? __cfi_bpf_link_release+0x10/0x10 [ 309.558359][ C1] __fput+0x1fc/0x8f0 [ 309.562348][ C1] ____fput+0x15/0x20 [ 309.566326][ C1] task_work_run+0x1db/0x240 [ 309.570918][ C1] ? __cfi_task_work_run+0x10/0x10 [ 309.576030][ C1] ? __cfi___close_range+0x10/0x10 [ 309.581139][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 309.586335][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 309.591876][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 309.597332][ C1] do_syscall_64+0x58/0xa0 [ 309.601742][ C1] ? clear_bhb_loop+0x30/0x80 [ 309.606425][ C1] ? clear_bhb_loop+0x30/0x80 [ 309.611122][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.617023][ C1] RIP: 0033:0x7f1f3698f749 [ 309.621612][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.641241][ C1] RSP: 002b:00007ffdf69d6e98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 309.649674][ C1] RAX: 0000000000000000 RBX: 000000000000f825 RCX: 00007f1f3698f749 [ 309.657655][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 309.665710][ C1] RBP: 00007f1f36be7da0 R08: 0000000000000001 R09: 00000008f69d718f [ 309.673676][ C1] R10: 0000001b2d220000 R11: 0000000000000246 R12: 00007f1f36be5fac [ 309.681649][ C1] R13: 00007f1f36be5fa0 R14: ffffffffffffffff R15: 00007ffdf69d6fb0 [ 309.689707][ C1] [ 309.692731][ C1] Sending NMI from CPU 1 to CPUs 0: [ 309.698061][ C0] NMI backtrace for cpu 0 [ 309.698076][ C0] CPU: 0 PID: 431 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 309.698107][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 309.698117][ C0] Workqueue: netns cleanup_net [ 309.698170][ C0] RIP: 0010:kvm_wait+0xcc/0x140 [ 309.698198][ C0] Code: 20 f6 44 24 21 02 75 24 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 48 0f b6 07 40 38 f0 75 a6 66 90 0f 00 2d 95 96 13 04 f4 9a fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 [ 309.698211][ C0] RSP: 0018:ffffc90000c06f00 EFLAGS: 00000046 [ 309.698224][ C0] RAX: 0000000000000003 RBX: ffff8881f7027a80 RCX: ffffffff84f49de2 [ 309.698236][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881f7027a80 [ 309.698247][ C0] RBP: ffffc90000c06f90 R08: dffffc0000000000 R09: ffffed103ee04f51 [ 309.698259][ C0] R10: ffffed103ee04f51 R11: 1ffff1103ee04f50 R12: 1ffff1103ee00001 [ 309.698272][ C0] R13: ffff8881f7038cd4 R14: dffffc0000000000 R15: 1ffff92000180de0 [ 309.698284][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 309.698298][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.698309][ C0] CR2: 0000000000000000 CR3: 000000010f7b4000 CR4: 00000000003506b0 [ 309.698323][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 309.698333][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.698342][ C0] Call Trace: [ 309.698348][ C0] [ 309.698355][ C0] ? __cfi_kvm_wait+0x10/0x10 [ 309.698387][ C0] ? bpf_prog_41385012b43a9f2e+0x40/0x44 [ 309.698405][ C0] ? pv_hash+0x86/0x150 [ 309.698420][ C0] __pv_queued_spin_lock_slowpath+0x690/0xc40 [ 309.698444][ C0] ? process_one_work+0x71f/0xc40 [ 309.698459][ C0] ? worker_thread+0xa29/0x11f0 [ 309.698476][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 309.698501][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 309.698527][ C0] _raw_spin_lock+0xd8/0xe0 [ 309.698544][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 309.698564][ C0] kvfree_call_rcu+0x100/0x7a0 [ 309.698585][ C0] ? __cfi_kvfree_call_rcu+0x10/0x10 [ 309.698604][ C0] ? longest_prefix_match+0x43c/0x640 [ 309.698626][ C0] trie_delete_elem+0x572/0x720 [ 309.698645][ C0] bpf_prog_41385012b43a9f2e+0x40/0x44 [ 309.698660][ C0] bpf_trace_run3+0x113/0x270 [ 309.698683][ C0] ? __cfi_bpf_trace_run3+0x10/0x10 [ 309.698705][ C0] ? debug_smp_processor_id+0x17/0x20 [ 309.698721][ C0] ? get_nohz_timer_target+0x74/0x540 [ 309.698740][ C0] __bpf_trace_timer_start+0x2b/0x40 [ 309.698758][ C0] enqueue_timer+0x337/0x480 [ 309.698780][ C0] __mod_timer+0x84a/0xbf0 [ 309.698801][ C0] add_timer+0x68/0x80 [ 309.698818][ C0] __queue_delayed_work+0x173/0x200 [ 309.698841][ C0] queue_delayed_work_on+0xdb/0x150 [ 309.698862][ C0] ? __cfi_queue_delayed_work_on+0x10/0x10 [ 309.698886][ C0] kvfree_call_rcu+0x436/0x7a0 [ 309.698905][ C0] ? __cfi_kvfree_call_rcu+0x10/0x10 [ 309.698924][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 309.698941][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 309.698961][ C0] drop_sysctl_table+0x2ef/0x410 [ 309.698979][ C0] ? insert_header+0xeb0/0xeb0 [ 309.698994][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 309.699011][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 309.699030][ C0] ? __cfi_call_rcu+0x10/0x10 [ 309.699047][ C0] ? count_subheaders+0xc9/0x100 [ 309.699064][ C0] unregister_sysctl_table+0x75/0x120 [ 309.699080][ C0] ? unregister_net_sysctl_table+0xd/0x20 [ 309.699104][ C0] unregister_net_sysctl_table+0x15/0x20 [ 309.699121][ C0] inetdev_event+0x808/0x10e0 [ 309.699141][ C0] ? __cfi_inetdev_event+0x10/0x10 [ 309.699160][ C0] ? arp_netdev_event+0xd4/0x2b0 [ 309.699185][ C0] raw_notifier_call_chain+0xa1/0x110 [ 309.699212][ C0] unregister_netdevice_many+0xf8f/0x1820 [ 309.699239][ C0] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 309.699264][ C0] ? unregister_netdevice_queue+0x1aa/0x360 [ 309.699288][ C0] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 309.699312][ C0] ? br_dev_delete+0xfc/0x110 [ 309.699328][ C0] default_device_exit_batch+0x9b9/0xa50 [ 309.699344][ C0] ? idr_destroy+0x21e/0x290 [ 309.699368][ C0] ? __cfi_mutex_lock+0x10/0x10 [ 309.699390][ C0] ? __cfi_default_device_exit_batch+0x10/0x10 [ 309.699407][ C0] ? __cfi_xfrmi_exit_batch_net+0x10/0x10 [ 309.699441][ C0] ? rtnl_unlock+0xe/0x10 [ 309.699455][ C0] ? __cfi_default_device_exit_batch+0x10/0x10 [ 309.699472][ C0] cleanup_net+0x62d/0xb00 [ 309.699494][ C0] ? __cfi_cleanup_net+0x10/0x10 [ 309.699517][ C0] process_one_work+0x71f/0xc40 [ 309.699535][ C0] worker_thread+0xa29/0x11f0 [ 309.699550][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 309.699571][ C0] ? __kthread_parkme+0x142/0x180 [ 309.699587][ C0] kthread+0x281/0x320 [ 309.699602][ C0] ? __cfi_worker_thread+0x10/0x10 [ 309.699617][ C0] ? __cfi_kthread+0x10/0x10 [ 309.699633][ C0] ret_from_fork+0x1f/0x30 [ 309.699654][ C0]