[ 77.880863][ T25] rxe_eth0 speed is unknown, defaulting to 1000
[ 78.000844][ T31] audit: type=1400 audit(1794723789.219:206): avc: denied { write } for pid=5988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 78.065398][ T31] audit: type=1400 audit(1794723789.279:207): avc: denied { write } for pid=5999 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '10.128.1.72' (ED25519) to the list of known hosts.
[*] Starting reproducer for WARNING in io_wq_put_and_exit...
[*] Configuring /proc/sys/kernel/hung_task_timeout_secs...
[+] open /proc/sys/kernel/hung_task_timeout_secs successful.
[+] write to /proc/sys/kernel/hung_task_timeout_secs successful.
[+] close /proc/sys/kernel/hung_task_timeout_secs successful.
[*] Initializing MSR device access...
[+] Enabled /sys/module/msr/parameters/allow_writes
[+] Successfully opened MSR device for CPU 0 (fd=3)
[+] Successfully opened MSR device for CPU 1 (fd=4)
[*] Setting up user and mount namespaces...
[+] unshare(CLONE_NEWUSER | CLONE_NEWNS) successful.
[+] open /proc/self/setgroups successful.
[+] write to /proc/self/setgroups successful.
[+] close /proc/self/setgroups successful.
[+] open /proc/self/uid_map successful.
[+] write to /proc/self/uid_map successful.
[+] close /proc/self/uid_map successful.
[+] open /proc/self/gid_map successful.
[+] write to /proc/self/gid_map successful.
[+] close /proc/self/gid_map successful.
[*] Opening /dev/fuse...
[+] open /dev/fuse successful (fuse_fd=5).
[+] mkdir /tmp/fuse_mnt successful.
[*] Mounting FUSE on /tmp/fuse_mnt with options: fd=5,rootmode=0040755,user_id=0,group_id=0...
[ 82.199746][ T31] audit: type=1400 audit(1794723793.419:208): avc: denied { read write } for pid=6013 comm="syz-executor273" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 82.200045][ T31] audit: type=1400 audit(1794723793.419:209): avc: denied { open } for pid=6013 comm="syz-executor273" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[+] mount FUSE on /tmp/fuse_mnt successful.
[*] Reading FUSE_INIT request from /dev/fuse...
[+] Read FUSE_INIT request (104 bytes).
[+] Received FUSE_INIT (unique=2, major=7, minor=47).
[*] Writing FUSE_INIT reply...
[+] FUSE_INIT reply written successfully. FUSE filesystem initialized.
[*] Spawning submitter thread (Thread B)...
[+] Submitter thread spawned successfully.
[*] Waiting to read FUSE_LOOKUP request from /dev/fuse...
[*] [Thread B] Submitter thread started.
[ 82.202884][ T31] audit: type=1400 audit(1794723793.419:210): avc: denied { read write } for pid=6013 comm="syz-executor273" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 82.203329][ T31] audit: type=1400 audit(1794723793.419:211): avc: denied { open } for pid=6013 comm="syz-executor273" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[+] [Thread B] io_uring_setup successful (ring_fd=6, sq_entries=8).
[+] [Thread B] mmap SQ_RING successful.
[+] [Thread B] mmap SQES successful.
[*] [Thread B] Submitting async OPENAT request via io_uring_enter...
[+] [Thread B] io_uring_enter submitted 1 request.
[*] [Thread B] Waiting for main thread to read FUSE request...
[+] Read FUSE request (51 bytes) into userspace.
[+] Request details: opcode=1 unique=4 nodeid=1.
[+] Signaled submitter thread. io-wq worker is trapped in request_wait_answer().
[*] Waiting 1 second for Thread B to enter do_exit() -> io_wq_exit_workers()...
[+] [Thread B] Main thread confirmed request read into userspace.
[ 82.304288][ T31] audit: type=1400 audit(1794723793.519:212): avc: denied { allowed } for pid=6013 comm="syz-executor273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 82.305046][ T31] audit: type=1400 audit(1794723793.519:213): avc: denied { create } for pid=6013 comm="syz-executor273" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[+] [Thread B] Exiting via sys_exit to enter do_exit() and io_wq_exit_workers()...
[ 82.305769][ T31] audit: type=1400 audit(1794723793.519:214): avc: denied { map } for pid=6013 comm="syz-executor273" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 82.305980][ T31] audit: type=1400 audit(1794723793.519:215): avc: denied { read write } for pid=6013 comm="syz-executor273" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[+] Measured TSC frequency: 2818912100 Hz
[*] Advancing TSC by 400 seconds (1127564840000 cycles) to fast-forward kernel jiffies...
[+] CPU 0: Written MSR_IA32_TSC_ADJUST (+1127564840000 cycles)
[+] CPU 1: Written MSR_IA32_TSC_ADJUST (+1127564840000 cycles)
[+] Advanced TSC on 2 CPU(s). Sleeping 10s to let WARN_ON_ONCE trigger and print to dmesg...
[ 83.339441][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[ 83.339486][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[ 83.341040][ T6014] ------------[ cut here ]------------
[ 83.341109][ T6014] time_after(jiffies, warn_timeout)
[ 83.341152][ T6014] WARNING: io_uring/io-wq.c:1482 at io_wq_put_and_exit+0x372/0x9d0, CPU#0: syz-executor273/6014
[ 83.374988][ T6014] Modules linked in:
[ 83.378883][ T6014] CPU: 0 UID: 0 PID: 6014 Comm: syz-executor273 Tainted: G S syzkaller #0 PREEMPT(full)
[ 83.390208][ T6014] Tainted: [S]=CPU_OUT_OF_SPEC
[ 83.395011][ T6014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[ 83.405101][ T6014] RIP: 0010:io_wq_put_and_exit+0x372/0x9d0
[ 83.410922][ T6014] Code: 00 00 0f 85 7d 05 00 00 48 8b 15 e9 74 8a 0a 4d 89 e7 31 ff 49 29 d7 4c 89 fe e8 f9 fd d7 fc 4d 85 ff 79 aa e8 4f 03 d8 fc 90 <0f> 0b 90 eb 9f e8 44 03 d8 fc 4c 8d 63 08 48 b8 00 00 00 00 00 fc
[ 83.430614][ T6014] RSP: 0018:ffffc90003abfb10 EFLAGS: 00010293
[ 83.436719][ T6014] RAX: 0000000000000000 RBX: ffff888038fb1000 RCX: 0000000000000000
[ 83.444930][ T6014] RDX: ffff88802b0d2580 RSI: ffffffff85367db1 RDI: 0000000000000007
[ 83.453070][ T6014] RBP: fffffbfff1f81e50 R08: 0000000000000000 R09: ffffffffffffd785
[ 83.461072][ T6014] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000100001f9b
[ 83.469071][ T6014] R13: 0000000000000064 R14: ffff888038fb1018 R15: ffffffffffffd785
[ 83.477329][ T6014] FS: 00007f00678c46c0(0000) GS:ffff88812246c000(0000) knlGS:0000000000000000
[ 83.486441][ T6014] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 83.493165][ T6014] CR2: 00007ffe270457d0 CR3: 0000000023abe000 CR4: 00000000003526f0
[ 83.501348][ T6014] Call Trace:
[ 83.504707][ T6014]
[ 83.507639][ T6014] ? __pfx_io_wq_put_and_exit+0x10/0x10
[ 83.513254][ T6014] ? __pfx___might_resched+0x10/0x10
[ 83.518625][ T6014] ? io_wq_set_exit_on_idle+0x156/0x290
[ 83.524185][ T6014] io_uring_clean_tctx+0x117/0x180
[ 83.529672][ T6014] ? __pfx_io_uring_clean_tctx+0x10/0x10
[ 83.535476][ T6014] ? percpu_counter_add_batch+0xb9/0x230
[ 83.541112][ T6014] ? __refcount_sub_and_test.constprop.0+0x82/0x90
[ 83.547650][ T6014] io_uring_cancel_generic+0xa9e/0xb00
[ 83.553121][ T6014] ? __pfx_io_uring_cancel_generic+0x10/0x10
[ 83.558571][ T31] audit: type=1400 audit(1794724197.469:216): avc: denied { write } for pid=6017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 83.582348][ T6014] ? lock_acquire+0x1d1/0x380
[ 83.587102][ T6014] ? __pfx_autoremove_wake_function+0x10/0x10
[ 83.593216][ T6014] ? do_exit+0x2b6/0x2a00
[ 83.597601][ T6014] ? rcu_is_watching+0x13/0xc0
[ 83.602370][ T6014] ? io_uring_unreg_ringfd+0xca/0x140
[ 83.607774][ T6014] do_exit+0x344/0x2a00
[ 83.611941][ T6014] ? fput+0x7c/0x100
[ 83.615873][ T6014] ? __pfx_do_exit+0x10/0x10
[ 83.617120][ T31] audit: type=1400 audit(1794724197.539:217): avc: denied { write } for pid=6029 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 83.642293][ T6014] ? __pfx_ksys_write+0x10/0x10
[ 83.647196][ T6014] __x64_sys_exit+0x42/0x50
[ 83.651707][ T6014] x64_sys_call+0x156c/0x1570
[ 83.656418][ T6014] do_syscall_64+0x123/0x7b0
[ 83.661017][ T6014] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 83.666939][ T6014] RIP: 0033:0x7f00678f9a99
[ 83.671350][ T6014] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 83.690999][ T6014] RSP: 002b:00007f00678c3fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 83.699470][ T6014] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f00678f9a99
[ 83.707481][ T6014] RDX: 00007f00678f9086 RSI: 0000000000000001 RDI: 0000000000000000
[ 83.715493][ T6014] RBP: 00007f00670c3140 R08: 0000000000000000 R09: 0000001000000008
[ 83.723474][ T6014] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f00670c3004
[ 83.726431][ T0] [Firmware Bug]: TSC ADJUST differs: CPU1 0 --> 1127564840000. Restoring
[ 83.739978][ T6014] R13: 00007f006796b0e5 R14: 0000000000000006 R15: 00007f00678c40e0
[ 83.747965][ T6014]
[ 83.750984][ T6014] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 83.758247][ T6014] CPU: 0 UID: 0 PID: 6014 Comm: syz-executor273 Tainted: G S syzkaller #0 PREEMPT(full)
[ 83.769496][ T6014] Tainted: [S]=CPU_OUT_OF_SPEC
[ 83.774225][ T6014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[ 83.784250][ T6014] Call Trace:
[ 83.787501][ T6014]
[ 83.790406][ T6014] dump_stack_lvl+0x100/0x190
[ 83.795063][ T6014] vpanic+0x2dc/0x6f8
[ 83.799021][ T6014] panic+0xd1/0xe0
[ 83.802711][ T6014] ? __pfx_panic+0x10/0x10
[ 83.807102][ T6014] check_panic_on_warn.cold+0x19/0x34
[ 83.812444][ T6014] ? io_wq_put_and_exit+0x372/0x9d0
[ 83.817616][ T6014] __warn.cold+0x191/0x321
[ 83.822008][ T6014] __report_bug+0x30f/0x440
[ 83.826504][ T6014] ? io_wq_put_and_exit+0x372/0x9d0
[ 83.831675][ T6014] ? __pfx___report_bug+0x10/0x10
[ 83.836685][ T6014] ? lock_acquire+0x1d1/0x380
[ 83.841347][ T6014] ? do_raw_spin_lock+0x128/0x260
[ 83.846339][ T6014] ? find_held_lock+0x2b/0x80
[ 83.850987][ T6014] ? __wait_for_common+0x1f2/0x500
[ 83.856072][ T6014] ? rcu_is_watching+0x13/0xc0
[ 83.860807][ T6014] ? io_wq_put_and_exit+0x372/0x9d0
[ 83.865978][ T6014] report_bug+0xb3/0x220
[ 83.870194][ T6014] ? io_wq_put_and_exit+0x372/0x9d0
[ 83.875375][ T6014] handle_bug+0x16a/0x2a0
[ 83.879689][ T6014] exc_invalid_op+0x17/0x50
[ 83.884181][ T6014] asm_exc_invalid_op+0x1a/0x20
[ 83.889002][ T6014] RIP: 0010:io_wq_put_and_exit+0x372/0x9d0
[ 83.894780][ T6014] Code: 00 00 0f 85 7d 05 00 00 48 8b 15 e9 74 8a 0a 4d 89 e7 31 ff 49 29 d7 4c 89 fe e8 f9 fd d7 fc 4d 85 ff 79 aa e8 4f 03 d8 fc 90 <0f> 0b 90 eb 9f e8 44 03 d8 fc 4c 8d 63 08 48 b8 00 00 00 00 00 fc
[ 83.914355][ T6014] RSP: 0018:ffffc90003abfb10 EFLAGS: 00010293
[ 83.920391][ T6014] RAX: 0000000000000000 RBX: ffff888038fb1000 RCX: 0000000000000000
[ 83.928332][ T6014] RDX: ffff88802b0d2580 RSI: ffffffff85367db1 RDI: 0000000000000007
[ 83.936272][ T6014] RBP: fffffbfff1f81e50 R08: 0000000000000000 R09: ffffffffffffd785
[ 83.944214][ T6014] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000100001f9b
[ 83.952160][ T6014] R13: 0000000000000064 R14: ffff888038fb1018 R15: ffffffffffffd785
[ 83.960120][ T6014] ? io_wq_put_and_exit+0x371/0x9d0
[ 83.965312][ T6014] ? __pfx_io_wq_put_and_exit+0x10/0x10
[ 83.970838][ T6014] ? __pfx___might_resched+0x10/0x10
[ 83.976097][ T6014] ? io_wq_set_exit_on_idle+0x156/0x290
[ 83.981628][ T6014] io_uring_clean_tctx+0x117/0x180
[ 83.986726][ T6014] ? __pfx_io_uring_clean_tctx+0x10/0x10
[ 83.992330][ T6014] ? percpu_counter_add_batch+0xb9/0x230
[ 83.997932][ T6014] ? __refcount_sub_and_test.constprop.0+0x82/0x90
[ 84.004404][ T6014] io_uring_cancel_generic+0xa9e/0xb00
[ 84.009841][ T6014] ? __pfx_io_uring_cancel_generic+0x10/0x10
[ 84.015797][ T6014] ? lock_acquire+0x1d1/0x380
[ 84.020448][ T6014] ? __pfx_autoremove_wake_function+0x10/0x10
[ 84.026488][ T6014] ? do_exit+0x2b6/0x2a00
[ 84.030792][ T6014] ? rcu_is_watching+0x13/0xc0
[ 84.035529][ T6014] ? io_uring_unreg_ringfd+0xca/0x140
[ 84.040871][ T6014] do_exit+0x344/0x2a00
[ 84.045002][ T6014] ? fput+0x7c/0x100
[ 84.048869][ T6014] ? __pfx_do_exit+0x10/0x10
[ 84.053434][ T6014] ? __pfx_ksys_write+0x10/0x10
[ 84.058270][ T6014] __x64_sys_exit+0x42/0x50
[ 84.062747][ T6014] x64_sys_call+0x156c/0x1570
[ 84.067397][ T6014] do_syscall_64+0x123/0x7b0
[ 84.071964][ T6014] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 84.077828][ T6014] RIP: 0033:0x7f00678f9a99
[ 84.082213][ T6014] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 84.101788][ T6014] RSP: 002b:00007f00678c3fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 84.110168][ T6014] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f00678f9a99
[ 84.118108][ T6014] RDX: 00007f00678f9086 RSI: 0000000000000001 RDI: 0000000000000000
[ 84.126058][ T6014] RBP: 00007f00670c3140 R08: 0000000000000000 R09: 0000001000000008
[ 84.133997][ T6014] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f00670c3004
[ 84.141937][ T6014] R13: 00007f006796b0e5 R14: 0000000000000006 R15: 00007f00678c40e0
[ 84.149883][ T6014]
[ 84.153064][ T6014] Kernel Offset: disabled
[ 84.157360][ T6014] Rebooting in 86400 seconds..