syzkaller syzkaller login: [ 7.606659][ T104] udevd (104) used greatest stack depth: 22888 bytes left [ 14.000716][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 14.000729][ T30] audit: type=1400 audit(1783228207.223:59): avc: denied { transition } for pid=223 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.009035][ T30] audit: type=1400 audit(1783228207.223:60): avc: denied { noatsecure } for pid=223 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.012351][ T30] audit: type=1400 audit(1783228207.223:61): avc: denied { write } for pid=223 comm="sh" path="pipe:[14756]" dev="pipefs" ino=14756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.018540][ T30] audit: type=1400 audit(1783228207.223:62): avc: denied { rlimitinh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.024578][ T30] audit: type=1400 audit(1783228207.223:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 154.722650][ T272] sshd-session (272) used greatest stack depth: 22824 bytes left Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. 2026/07/05 05:12:35 parsed 1 programs 2026/07/05 05:12:35 serving rpc on tcp://36911 [ 162.467709][ T30] audit: type=1400 audit(1783228355.683:64): avc: denied { node_bind } for pid=293 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 162.488463][ T30] audit: type=1400 audit(1783228355.683:65): avc: denied { module_request } for pid=293 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 163.116609][ T30] audit: type=1400 audit(1783228356.333:66): avc: denied { mounton } for pid=299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 163.118013][ T299] cgroup: Unknown subsys name 'net' [ 163.139276][ T30] audit: type=1400 audit(1783228356.333:67): avc: denied { mount } for pid=299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 163.166498][ T30] audit: type=1400 audit(1783228356.363:68): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 163.166676][ T299] cgroup: Unknown subsys name 'devices' [ 163.250590][ T299] cgroup: Unknown subsys name 'hugetlb' [ 163.256197][ T299] cgroup: Unknown subsys name 'rlimit' [ 163.398076][ T30] audit: type=1400 audit(1783228356.613:69): avc: denied { setattr } for pid=299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 163.421283][ T30] audit: type=1400 audit(1783228356.613:70): avc: denied { create } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 163.441834][ T30] audit: type=1400 audit(1783228356.613:71): avc: denied { write } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 163.447226][ T303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 163.462300][ T30] audit: type=1400 audit(1783228356.613:72): avc: denied { read } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 163.490902][ T30] audit: type=1400 audit(1783228356.613:73): avc: denied { mounton } for pid=299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 163.520563][ T299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 163.989778][ T310] request_module fs-gadgetfs succeeded, but still no fs? [ 164.099742][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.106798][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.123664][ T309] device bridge_slave_0 entered promiscuous mode [ 164.131560][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.138603][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.145953][ T309] device bridge_slave_1 entered promiscuous mode [ 164.366008][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.373071][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.380355][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.387377][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.403810][ T328] syz-executor (328) used greatest stack depth: 22112 bytes left [ 164.458035][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.474495][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.483681][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.491501][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.529092][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.538249][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.545319][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.552898][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.561099][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.568127][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.576340][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.584377][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.602327][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.622647][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.632400][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.640457][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.648557][ T309] device veth0_vlan entered promiscuous mode [ 164.671657][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.685039][ T309] device veth1_macvtap entered promiscuous mode [ 164.695184][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 2026/07/05 05:12:37 executed programs: 0 [ 164.720335][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.789317][ T309] syz-executor (309) used greatest stack depth: 21664 bytes left [ 164.892744][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.899904][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.907158][ T369] device bridge_slave_0 entered promiscuous mode [ 164.914891][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.922045][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.929451][ T369] device bridge_slave_1 entered promiscuous mode [ 165.035152][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.042254][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.049740][ T374] device bridge_slave_0 entered promiscuous mode [ 165.056517][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.063584][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.071030][ T374] device bridge_slave_1 entered promiscuous mode [ 165.111351][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.118397][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.125866][ T371] device bridge_slave_0 entered promiscuous mode [ 165.132725][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.139828][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.147233][ T371] device bridge_slave_1 entered promiscuous mode [ 165.177736][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.185009][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.192397][ T368] device bridge_slave_0 entered promiscuous mode [ 165.199007][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.206025][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.213403][ T377] device bridge_slave_0 entered promiscuous mode [ 165.220392][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.227418][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.234901][ T377] device bridge_slave_1 entered promiscuous mode [ 165.265170][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.272276][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.279580][ T368] device bridge_slave_1 entered promiscuous mode [ 165.394763][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.402226][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.410121][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.418489][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.426844][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.433894][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.441375][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.462621][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.470976][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.479306][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.486332][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.494519][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.502573][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.529867][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.537354][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.545005][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.553659][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.562050][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.569091][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.576466][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.601645][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.609788][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.617652][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.626249][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.634613][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.641655][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.669636][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.677012][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.684439][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.692900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.701277][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.708290][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.715749][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.724020][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.732172][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.739200][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.746492][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.754483][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.762372][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.773625][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.781935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.791584][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.807607][ T369] device veth0_vlan entered promiscuous mode [ 165.817507][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.825345][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.833451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.841479][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.849054][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.864464][ T371] device veth0_vlan entered promiscuous mode [ 165.878969][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.887357][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.895999][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.903558][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.930535][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.938412][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.945883][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.953466][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.961789][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.968834][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.976222][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.984542][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.992617][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.000764][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.007767][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.015121][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.023371][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.030395][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.037733][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.045406][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.059870][ T369] device veth1_macvtap entered promiscuous mode [ 166.081230][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.089649][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.097225][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.105476][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.112513][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.120006][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.129043][ T371] device veth1_macvtap entered promiscuous mode [ 166.137426][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 166.145908][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.163156][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.171500][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.179865][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.187977][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.196466][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.204673][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.212782][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.220915][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.228933][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.236902][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.249687][ T374] device veth0_vlan entered promiscuous mode [ 166.278520][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 166.286630][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.296529][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.309572][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.318135][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.327045][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.335801][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.343792][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.328578][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 266.335572][ C0] (detected by 0, t=10002 jiffies, g=1413, q=405) [ 266.342070][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 9999 (4294963855-4294953856), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 266.355346][ C0] rcu: rcu_preempt kthread starved for 10000 jiffies! g1413 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 266.366447][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 266.376409][ C0] rcu: RCU grace-period kthread stack dump: [ 266.382295][ C0] task:rcu_preempt state:R running task stack:28688 pid: 14 ppid: 2 flags:0x00004000 [ 266.393093][ C0] Call Trace: [ 266.396370][ C0] [ 266.399299][ C0] __schedule+0xbcf/0x14a0 [ 266.403736][ C0] ? release_firmware_map_entry+0x190/0x190 [ 266.409625][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 266.415431][ C0] ? __mod_timer+0x7c0/0xb40 [ 266.420022][ C0] schedule+0x11e/0x1e0 [ 266.424177][ C0] schedule_timeout+0x159/0x340 [ 266.429025][ C0] ? console_conditional_schedule+0x30/0x30 [ 266.434919][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 266.440375][ C0] ? update_process_times+0x200/0x200 [ 266.445751][ C0] ? prepare_to_swait_event+0x30f/0x330 [ 266.451292][ C0] rcu_gp_fqs_loop+0x2ae/0xfa0 [ 266.456053][ C0] ? dyntick_save_progress_counter+0x1e0/0x1e0 [ 266.462204][ C0] ? rcu_gp_init+0xc30/0xc30 [ 266.466793][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 266.471990][ C0] ? rcu_gp_init+0x9cf/0xc30 [ 266.476574][ C0] rcu_gp_kthread+0x9a/0x360 [ 266.481158][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 266.485830][ C0] ? __kasan_check_read+0x11/0x20 [ 266.490850][ C0] ? __kthread_parkme+0xab/0x1f0 [ 266.495784][ C0] kthread+0x3f5/0x4f0 [ 266.499848][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 266.504521][ C0] ? kthread_blkcg+0xd0/0xd0 [ 266.509108][ C0] ret_from_fork+0x1f/0x30 [ 266.513518][ C0] [ 266.516541][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 266.522855][ C0] Sending NMI from CPU 0 to CPUs 1: [ 266.528063][ C1] NMI backtrace for cpu 1 [ 266.528080][ C1] CPU: 1 PID: 394 Comm: syz.6.17 Not tainted syzkaller #0 [ 266.528094][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 266.528105][ C1] RIP: 0010:lapic_next_deadline+0x25/0x40 [ 266.528127][ C1] Code: 00 00 0f 1f 00 55 48 89 e5 0f ae f0 0f ae e8 0f 31 48 c1 e2 20 48 09 c2 48 8d 04 fa 48 89 c2 48 c1 ea 20 b9 e0 06 00 00 0f 30 <66> 90 31 c0 5d c3 bf e0 06 00 00 48 89 c6 31 d2 e8 36 53 3f 01 eb [ 266.528138][ C1] RSP: 0018:ffffc90002457918 EFLAGS: 00000003 [ 266.528152][ C1] RAX: 0000008ac4e60a20 RBX: ffff8881f7126e98 RCX: 00000000000006e0 [ 266.528162][ C1] RDX: 000000000000008a RSI: ffff8881f7126e80 RDI: 0000000000000113 [ 266.528172][ C1] RBP: ffffc90002457918 R08: ffff8881134c62c0 R09: 0000000000000002 [ 266.528182][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000113 [ 266.528190][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000019 [ 266.528200][ C1] FS: 00007fb8af5e76c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 266.528213][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.528223][ C1] CR2: 0000001b33a63fff CR3: 000000012e71e000 CR4: 00000000003506a0 [ 266.528236][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 266.528244][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 266.528253][ C1] Call Trace: [ 266.528257][ C1] [ 266.528262][ C1] clockevents_program_min_delta+0x19d/0x340 [ 266.528280][ C1] clockevents_program_event+0x21f/0x300 [ 266.528294][ C1] tick_program_event+0xa3/0x120 [ 266.528308][ C1] hrtimer_reprogram+0x351/0x400 [ 266.528325][ C1] hrtimer_start_range_ns+0xa27/0xb80 [ 266.528342][ C1] common_hrtimer_rearm+0xf6/0x100 [ 266.528358][ C1] posixtimer_rearm+0x139/0x330 [ 266.528372][ C1] dequeue_signal+0x173/0x450 [ 266.528386][ C1] ? _copy_from_user+0x95/0xd0 [ 266.528400][ C1] get_signal+0x67b/0x1430 [ 266.528417][ C1] arch_do_signal_or_restart+0xe2/0x1100 [ 266.528432][ C1] ? load_gs_index+0xc0/0xc0 [ 266.528445][ C1] ? get_sigframe_size+0x10/0x10 [ 266.528460][ C1] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 266.528483][ C1] exit_to_user_mode_loop+0xa7/0xe0 [ 266.528497][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 266.528510][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 266.528524][ C1] do_syscall_64+0x58/0xa0 [ 266.528539][ C1] ? clear_bhb_loop+0x50/0xa0 [ 266.528553][ C1] ? clear_bhb_loop+0x50/0xa0 [ 266.528566][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 266.528580][ C1] RIP: 0033:0x7fb8af785e57 [ 266.528603][ C1] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 266.528614][ C1] RSP: 002b:00007fb8af5e70e8 EFLAGS: 00000246 [ 266.528626][ C1] RAX: 00000000000000ca RBX: 00007fb8afa0dfa8 RCX: 00007fb8af785e59 [ 266.528635][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb8afa0dfa8 [ 266.528645][ C1] RBP: 00007fb8afa0dfa0 R08: 0000000000000000 R09: 0000000000000000 [ 266.528653][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.528662][ C1] R13: 00007fb8afa0e038 R14: 00007fff1cb623a0 R15: 00007fff1cb62488 [ 266.528674][ C1] [ 428.759032][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 262s! [ 428.768003][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 262s! [ 428.776893][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 258s! [ 428.785957][ C0] Showing busy workqueues and worker pools: [ 428.791848][ C0] workqueue events: flags=0x0 [ 428.796515][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=7/256 refcnt=8 [ 428.796556][ C0] pending: kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 428.796681][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 428.796715][ C0] pending: vmstat_shepherd, psi_avgs_work, kfree_rcu_monitor [ 428.796767][ C0] workqueue events_long: flags=0x0 [ 428.840676][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 428.840721][ C0] pending: br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work [ 428.840814][ C0] workqueue events_unbound: flags=0x2 [ 428.869137][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 428.869185][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 428.869233][ C0] workqueue events_power_efficient: flags=0x80 [ 428.890122][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 428.890168][ C0] pending: neigh_periodic_work, gc_worker [ 428.890208][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 428.890249][ C0] pending: wg_ratelimiter_gc_entries, neigh_periodic_work, check_lifetime [ 428.890305][ C0] workqueue netns: flags=0xe000a [ 428.925333][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=3 [ 428.925372][ C0] in-flight: 45:cleanup_net [ 428.925404][ C0] workqueue mm_percpu_wq: flags=0x8 [ 428.942441][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 428.942483][ C0] pending: vmstat_update [ 428.942511][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 428.942545][ C0] pending: vmstat_update [ 428.942572][ C0] workqueue writeback: flags=0x4a [ 428.971969][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 428.972008][ C0] pending: wb_workfn [ 428.972034][ C0] workqueue kblockd: flags=0x18 [ 428.988281][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 428.988323][ C0] pending: blk_mq_timeout_work [ 428.988359][ C0] workqueue dm_bufio_cache: flags=0x8 [ 429.006612][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.006656][ C0] pending: work_fn [ 429.006679][ C0] workqueue mld: flags=0x40008 [ 429.023104][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=53 [ 429.023142][ C0] pending: mld_ifc_work [ 429.023166][ C0] inactive: mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_dad_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work [ 429.023663][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=49 [ 429.023697][ C0] pending: mld_ifc_work [ 429.023714][ C0] inactive: mld_dad_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_dad_work, mld_dad_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_dad_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_ifc_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_ifc_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work [ 429.024166][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 429.179681][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=109 [ 429.179724][ C0] in-flight: 39:addrconf_dad_work [ 429.179756][ C0] inactive: addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work [ 429.180320][ C0] , addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work [ 429.180879][ C0] , addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work [ 429.180949][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=102 [ 429.180984][ C0] in-flight: 20:addrconf_dad_work [ 429.181008][ C0] inactive: addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work [ 429.181568][ C0] , addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_verify_work [ 429.182126][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.568599][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.568645][ C0] pending: wg_packet_handshake_send_worker [ 429.568678][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.587270][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.587312][ C0] pending: wg_packet_encrypt_worker [ 429.587344][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.587380][ C0] pending: wg_packet_encrypt_worker [ 429.587405][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.618716][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.618755][ C0] pending: wg_packet_handshake_send_worker [ 429.618783][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.637394][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.637446][ C0] pending: wg_packet_encrypt_worker [ 429.637479][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.637516][ C0] pending: wg_packet_encrypt_worker [ 429.637541][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.669148][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.669193][ C0] pending: wg_packet_encrypt_worker [ 429.669222][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.669258][ C0] pending: wg_packet_encrypt_worker [ 429.669284][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.700583][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.700623][ C0] pending: wg_packet_handshake_send_worker [ 429.700650][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.719260][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.719304][ C0] pending: wg_packet_encrypt_worker [ 429.719333][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.719368][ C0] pending: wg_packet_encrypt_worker [ 429.719393][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.750705][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.750746][ C0] pending: wg_packet_handshake_send_worker [ 429.750774][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.769375][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.769418][ C0] pending: wg_packet_encrypt_worker [ 429.769448][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.769484][ C0] pending: wg_packet_encrypt_worker [ 429.769509][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.800817][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.800857][ C0] pending: wg_packet_handshake_send_worker [ 429.800885][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.819482][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.819522][ C0] pending: wg_packet_encrypt_worker [ 429.819549][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.819584][ C0] pending: wg_packet_encrypt_worker [ 429.819615][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.851176][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.851218][ C0] pending: wg_packet_encrypt_worker [ 429.851247][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.851281][ C0] pending: wg_packet_encrypt_worker [ 429.851306][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.882866][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.882910][ C0] pending: wg_packet_encrypt_worker [ 429.882938][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.882986][ C0] pending: wg_packet_encrypt_worker [ 429.883010][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.914578][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.914621][ C0] pending: wg_packet_encrypt_worker [ 429.914656][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.914691][ C0] pending: wg_packet_encrypt_worker [ 429.914722][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=263s workers=4 idle: 349 376 6 [ 429.914774][ C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=263s workers=3 idle: 26 60 [ 429.914819][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=263s workers=5 idle: 10 357 8 327