Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts. 2026/03/07 08:33:01 parsed 1 programs [ 43.667861][ T24] kauditd_printk_skb: 30 callbacks suppressed [ 43.667872][ T24] audit: type=1400 audit(1772872382.210:104): avc: denied { unlink } for pid=407 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 43.779756][ T407] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.378890][ T24] audit: type=1400 audit(1772872382.920:105): avc: denied { create } for pid=420 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.574291][ T24] audit: type=1401 audit(1772872383.120:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 44.861729][ T457] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.868767][ T457] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.876238][ T457] device bridge_slave_0 entered promiscuous mode [ 44.883016][ T457] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.890077][ T457] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.897643][ T457] device bridge_slave_1 entered promiscuous mode [ 44.928118][ T457] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.935247][ T457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.942592][ T457] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.949649][ T457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.965873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.973494][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.980851][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.990387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.998656][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.005781][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.014364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.022648][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.029705][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.041227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.050494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.063442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.073879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.082127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.089956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.098116][ T457] device veth0_vlan entered promiscuous mode [ 45.107598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.116623][ T457] device veth1_macvtap entered promiscuous mode [ 45.125608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.135782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/03/07 08:33:03 executed programs: 0 [ 45.353075][ T24] audit: type=1400 audit(1772872383.900:107): avc: denied { write } for pid=398 comm="syz-execprog" path="pipe:[15145]" dev="pipefs" ino=15145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.397067][ T467] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.404302][ T467] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.411830][ T467] device bridge_slave_0 entered promiscuous mode [ 45.418685][ T467] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.426216][ T467] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.433626][ T467] device bridge_slave_1 entered promiscuous mode [ 45.469754][ T467] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.476962][ T467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.484630][ T467] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.491774][ T467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.508096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.515854][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.523379][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.537391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.545835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.554183][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.561334][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.574693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.583142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.591809][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.598856][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.614268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.622365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.631429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.639878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.660190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.668689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.679297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.688112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.696314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.703998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.713420][ T467] device veth0_vlan entered promiscuous mode [ 45.724624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.733082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.742661][ T467] device veth1_macvtap entered promiscuous mode [ 45.761930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.770495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.780926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.786988][ T24] audit: type=1400 audit(1772872384.330:108): avc: denied { create } for pid=489 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.789612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.808813][ T24] audit: type=1400 audit(1772872384.330:109): avc: denied { write } for pid=489 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.817377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.844899][ T24] audit: type=1400 audit(1772872384.390:110): avc: denied { setopt } for pid=489 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.909313][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 145.915940][ C0] rcu: 0-...!: (10000 ticks this GP) idle=126/1/0x4000000000000000 softirq=2806/2806 fqs=0 last_accelerate: 9c72/c382 dyntick_enabled: 1 [ 145.930566][ C0] (t=10000 jiffies g=1585 q=17) [ 145.935632][ C0] rcu: rcu_preempt kthread starved for 10000 jiffies! g1585 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 145.947162][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 145.957283][ C0] rcu: RCU grace-period kthread stack dump: [ 145.963167][ C0] task:rcu_preempt state:I stack: 0 pid: 13 ppid: 2 flags:0x00004000 [ 145.972340][ C0] Call Trace: [ 145.975627][ C0] __schedule+0xb53/0x1320 [ 145.980032][ C0] ? __sched_text_start+0x8/0x8 [ 145.984869][ C0] ? __mod_timer+0x7da/0xb50 [ 145.989458][ C0] schedule+0x13c/0x1d0 [ 145.993611][ C0] schedule_timeout+0x159/0x330 [ 145.998460][ C0] ? console_conditional_schedule+0x10/0x10 [ 146.004348][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 146.009879][ C0] ? run_local_timers+0x160/0x160 [ 146.014994][ C0] ? prepare_to_swait_event+0x320/0x340 [ 146.020520][ C0] rcu_gp_kthread+0x1045/0x2730 [ 146.025477][ C0] ? rcu_barrier_callback+0x50/0x50 [ 146.030782][ C0] ? __kasan_check_read+0x11/0x20 [ 146.036003][ C0] ? __kthread_parkme+0xb9/0x1c0 [ 146.041211][ C0] kthread+0x346/0x3d0 [ 146.045268][ C0] ? rcu_barrier_callback+0x50/0x50 [ 146.050452][ C0] ? kthread_blkcg+0xd0/0xd0 [ 146.055104][ C0] ret_from_fork+0x1f/0x30 [ 146.059714][ C0] NMI backtrace for cpu 0 [ 146.064152][ C0] CPU: 0 PID: 494 Comm: syz.2.17 Not tainted syzkaller #0 [ 146.071257][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 146.081806][ C0] Call Trace: [ 146.085077][ C0] [ 146.087922][ C0] __dump_stack+0x21/0x24 [ 146.092233][ C0] dump_stack_lvl+0x1a7/0x208 [ 146.096978][ C0] ? show_regs_print_info+0x18/0x18 [ 146.102154][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 146.107666][ C0] ? _raw_spin_lock+0xf0/0xf0 [ 146.112351][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 146.118524][ C0] dump_stack+0x15/0x1c [ 146.122922][ C0] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 146.129716][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 146.136298][ C0] rcu_dump_cpu_stacks+0x19c/0x2c0 [ 146.141452][ C0] rcu_sched_clock_irq+0xf88/0x1880 [ 146.146652][ C0] ? rcutree_dead_cpu+0x310/0x310 [ 146.151919][ C0] ? hrtimer_run_queues+0x166/0x430 [ 146.157131][ C0] update_process_times+0x198/0x200 [ 146.162339][ C0] tick_sched_timer+0x17c/0x240 [ 146.167181][ C0] ? tick_setup_sched_timer+0x450/0x450 [ 146.172725][ C0] __hrtimer_run_queues+0x380/0x970 [ 146.177920][ C0] ? hrtimer_interrupt+0xdc0/0xdc0 [ 146.183042][ C0] ? ktime_get_update_offsets_now+0x293/0x2b0 [ 146.189095][ C0] hrtimer_interrupt+0x3a6/0xdc0 [ 146.194362][ C0] ? sched_clock_cpu+0x1b/0x3d0 [ 146.199293][ C0] ? do_sync_core+0x22/0x30 [ 146.203798][ C0] __sysvec_apic_timer_interrupt+0xfa/0x3f0 [ 146.209774][ C0] asm_call_irq_on_stack+0xf/0x20 [ 146.215342][ C0] [ 146.218610][ C0] sysvec_apic_timer_interrupt+0x85/0xe0 [ 146.224354][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 146.230418][ C0] RIP: 0010:_raw_spin_lock_bh+0xa1/0xf0 [ 146.236121][ C0] Code: 00 00 00 48 89 df be 04 00 00 00 e8 59 96 1c fd 4c 89 f7 be 04 00 00 00 e8 4c 96 1c fd 8b 44 24 20 b9 01 00 00 00 f0 0f b1 0b <75> 33 43 c6 44 27 04 f8 48 c7 04 24 0e 36 e0 45 4b c7 04 27 00 00 [ 146.256245][ C0] RSP: 0018:ffffc90001056a00 EFLAGS: 00000246 [ 146.262820][ C0] RAX: 0000000000000000 RBX: ffffc90001056ed4 RCX: 0000000000000001 [ 146.271605][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90001056a20 [ 146.279923][ C0] RBP: ffffc90001056a90 R08: 0000000000000003 R09: 0000000000000004 [ 146.287978][ C0] R10: dffffc0000000000 R11: fffff5200020ad44 R12: dffffc0000000000 [ 146.296030][ C0] R13: ffff88812a177780 R14: ffffc90001056a20 R15: 1ffff9200020ad40 [ 146.304220][ C0] ? _raw_spin_lock_irq+0xf0/0xf0 [ 146.309245][ C0] ? tipc_sk_rcv+0x191a/0x1dc0 [ 146.314006][ C0] tipc_sk_rcv+0x230/0x1dc0 [ 146.318639][ C0] ? __stack_depot_save+0x47d/0x4c0 [ 146.324222][ C0] ? kasan_set_track+0x5b/0x70 [ 146.329255][ C0] ? kasan_set_track+0x4a/0x70 [ 146.334116][ C0] ? ____kasan_slab_free+0x125/0x160 [ 146.339411][ C0] ? __kasan_slab_free+0x11/0x20 [ 146.344480][ C0] ? slab_free_freelist_hook+0xc5/0x190 [ 146.350022][ C0] ? kmem_cache_free+0x100/0x2d0 [ 146.354967][ C0] ? kfree_skbmem+0x10c/0x180 [ 146.359719][ C0] ? kfree_skb+0xc1/0x2f0 [ 146.364047][ C0] ? tipc_msg_reverse+0x698/0x900 [ 146.369064][ C0] ? tipc_node_xmit+0x26c/0xd80 [ 146.373891][ C0] ? tipc_sk_filter_rcv+0x15e5/0x3910 [ 146.379239][ C0] ? tipc_sk_rcv+0x742/0x1dc0 [ 146.383894][ C0] ? tipc_node_xmit+0x26c/0xd80 [ 146.388728][ C0] ? exit_to_user_mode_prepare+0x76/0xa0 [ 146.394359][ C0] ? syscall_exit_to_user_mode+0x1d/0x40 [ 146.400014][ C0] ? do_syscall_64+0x3d/0x40 [ 146.404825][ C0] ? __skb_queue_purge+0x170/0x170 [ 146.410170][ C0] tipc_node_xmit+0x26c/0xd80 [ 146.415217][ C0] ? kmem_cache_free+0x100/0x2d0 [ 146.420250][ C0] ? ____kasan_slab_free+0x130/0x160 [ 146.425635][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 146.431159][ C0] ? slab_free_freelist_hook+0xc5/0x190 [ 146.436688][ C0] ? kfree_skbmem+0x10c/0x180 [ 146.441353][ C0] ? kmem_cache_free+0x100/0x2d0 [ 146.446292][ C0] tipc_node_xmit_skb+0xf7/0x150 [ 146.451344][ C0] ? kfree_skb+0xc1/0x2f0 [ 146.455681][ C0] ? __skb_queue_purge+0x170/0x170 [ 146.460965][ C0] ? trace_tipc_sk_rej_msg+0x2c/0x6d0 [ 146.466543][ C0] tipc_sk_rcv+0x1c46/0x1dc0 [ 146.471130][ C0] ? __skb_queue_purge+0x170/0x170 [ 146.476228][ C0] tipc_node_xmit+0x26c/0xd80 [ 146.480901][ C0] ? is_bpf_text_address+0x177/0x190 [ 146.486339][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 146.491878][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 146.497325][ C0] ? _raw_spin_lock+0xf0/0xf0 [ 146.501978][ C0] tipc_sk_filter_rcv+0x15e5/0x3910 [ 146.507163][ C0] ? tipc_sk_dump+0xfc0/0xfc0 [ 146.511905][ C0] ? __kasan_check_write+0x14/0x20 [ 146.517342][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 146.522432][ C0] tipc_sk_rcv+0x742/0x1dc0 [ 146.527012][ C0] ? kfree_skbmem+0x10c/0x180 [ 146.531669][ C0] ? __skb_queue_purge+0x170/0x170 [ 146.536765][ C0] ? tipc_sk_filter_rcv+0x30d7/0x3910 [ 146.542131][ C0] ? ____fput+0x15/0x20 [ 146.546270][ C0] ? task_work_run+0x127/0x190 [ 146.551013][ C0] tipc_node_xmit+0x26c/0xd80 [ 146.555898][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 146.561443][ C0] tipc_node_distr_xmit+0x2a3/0x3b0 [ 146.566755][ C0] ? tipc_node_xmit_skb+0x150/0x150 [ 146.571984][ C0] tipc_sk_backlog_rcv+0x17d/0x210 [ 146.577083][ C0] ? tipc_sk_timeout+0x990/0x990 [ 146.582005][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 146.587445][ C0] __release_sock+0x146/0x360 [ 146.592114][ C0] ? _raw_write_lock_irq+0xf0/0xf0 [ 146.597208][ C0] release_sock+0x60/0x1b0 [ 146.601628][ C0] tipc_release+0xbd4/0x1490 [ 146.606220][ C0] ? down_read_killable+0xe0/0xe0 [ 146.611225][ C0] sock_close+0xe0/0x270 [ 146.615461][ C0] ? sock_mmap+0xa0/0xa0 [ 146.619695][ C0] __fput+0x2fb/0x770 [ 146.623661][ C0] ____fput+0x15/0x20 [ 146.627819][ C0] task_work_run+0x127/0x190 [ 146.632477][ C0] exit_to_user_mode_loop+0xcb/0xe0 [ 146.637653][ C0] exit_to_user_mode_prepare+0x76/0xa0 [ 146.643094][ C0] syscall_exit_to_user_mode+0x1d/0x40 [ 146.648527][ C0] do_syscall_64+0x3d/0x40 [ 146.652926][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 146.658814][ C0] RIP: 0033:0x7f9d3b11d079 [ 146.663218][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.682835][ C0] RSP: 002b:00007f9d3ab82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.691231][ C0] RAX: 00000000000203a0 RBX: 00007f9d3b348fa0 RCX: 00007f9d3b11d079 [ 146.699281][ C0] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 146.707476][ C0] RBP: 00007f9d3b1afa4c R08: 0000000000000000 R09: 0000000000000000 [ 146.715511][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.723486][ C0] R13: 0000000000000000 R14: 00007f9d3b348fa0 R15: 00007ffd7594a668 [ 198.953091][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [syz.2.17:493] [ 198.961101][ C1] Modules linked in: [ 198.965003][ C1] CPU: 1 PID: 493 Comm: syz.2.17 Not tainted syzkaller #0 [ 198.972113][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 198.982349][ C1] RIP: 0010:kvm_wait+0xce/0x130 [ 198.987199][ C1] Code: 38 f0 75 26 41 f7 c4 00 02 00 00 75 0f 0f 1f 44 00 00 0f 00 2d 33 1e b8 03 f4 eb 0e 0f 1f 44 00 00 0f 00 2d 24 1e b8 03 fb f4 <4c> 89 64 24 18 ff 74 24 18 9d 48 c7 44 24 20 0e 36 e0 45 4b c7 04 [ 199.006805][ C1] RSP: 0018:ffffc900010479a0 EFLAGS: 00000246 [ 199.012872][ C1] RAX: 0000000000000003 RBX: ffff88812a177788 RCX: ffffffff814bed9a [ 199.020844][ C1] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff88812a177788 [ 199.028820][ C1] RBP: ffffc90001047a50 R08: ffff88812a177788 R09: 1ffff1102542eef1 [ 199.036888][ C1] R10: dffffc0000000000 R11: ffffed102542eef2 R12: 0000000000000246 [ 199.044875][ C1] R13: 1ffff1102542eef1 R14: dffffc0000000000 R15: 1ffff92000208f38 [ 199.052866][ C1] FS: 000055558ea00500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 199.061807][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.068398][ C1] CR2: 00007f9d3b16a7c0 CR3: 0000000117224000 CR4: 00000000003506a0 [ 199.076381][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.084355][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.092422][ C1] Call Trace: [ 199.095720][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 199.101876][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 199.106985][ C1] ? __pv_queued_spin_lock_slowpath+0x6ba/0xb70 [ 199.113235][ C1] __pv_queued_spin_lock_slowpath+0x714/0xb70 [ 199.119481][ C1] ? __pv_queued_spin_unlock_slowpath+0x280/0x280 [ 199.125911][ C1] ? kasan_save_stack+0x49/0x60 [ 199.130782][ C1] ? __kasan_record_aux_stack+0xd2/0x100 [ 199.136517][ C1] ? kasan_record_aux_stack+0xe/0x10 [ 199.141899][ C1] ? task_work_add+0x27/0x1e0 [ 199.146669][ C1] ? fput+0x1a/0x20 [ 199.150581][ C1] ? filp_close+0x105/0x150 [ 199.155099][ C1] ? __close_range+0x1f4/0x450 [ 199.159881][ C1] ? __x64_sys_close_range+0x7a/0x90 [ 199.165198][ C1] queued_spin_lock_slowpath+0x47/0x50 [ 199.170681][ C1] _raw_spin_lock_bh+0xe4/0xf0 [ 199.175467][ C1] ? _raw_spin_lock_irq+0xf0/0xf0 [ 199.180518][ C1] lock_sock_nested+0x90/0x2a0 [ 199.185309][ C1] ? sock_init_data+0xc0/0xc0 [ 199.189999][ C1] ? fsnotify+0x19ab/0x1a70 [ 199.194514][ C1] tipc_release+0x56/0x1490 [ 199.199027][ C1] ? down_read_killable+0xe0/0xe0 [ 199.204066][ C1] sock_close+0xe0/0x270 [ 199.208320][ C1] ? sock_mmap+0xa0/0xa0 [ 199.212582][ C1] __fput+0x2fb/0x770 [ 199.216597][ C1] ____fput+0x15/0x20 [ 199.220587][ C1] task_work_run+0x127/0x190 [ 199.225199][ C1] exit_to_user_mode_loop+0xcb/0xe0 [ 199.230402][ C1] exit_to_user_mode_prepare+0x76/0xa0 [ 199.235878][ C1] syscall_exit_to_user_mode+0x1d/0x40 [ 199.241342][ C1] do_syscall_64+0x3d/0x40 [ 199.245764][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 199.251757][ C1] RIP: 0033:0x7f9d3b11d079 [ 199.256175][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.275774][ C1] RSP: 002b:00007ffd7594a7c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 199.284711][ C1] RAX: 0000000000000000 RBX: 00007f9d3b34aba0 RCX: 00007f9d3b11d079 [ 199.292688][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 199.300844][ C1] RBP: 00007f9d3b34aba0 R08: 0000000000000006 R09: 0000000000000000 [ 199.309246][ C1] R10: 00007f9d3b34aac0 R11: 0000000000000246 R12: 000000000000b64f [ 199.317214][ C1] R13: 00007f9d3b34908c R14: 000000000000b373 R15: 00007f9d3b349080 [ 199.325186][ C1] Sending NMI from CPU 1 to CPUs 0: [ 199.331139][ C0] NMI backtrace for cpu 0 [ 199.331144][ C0] CPU: 0 PID: 494 Comm: syz.2.17 Not tainted syzkaller #0 [ 199.331149][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 199.331152][ C0] RIP: 0010:_raw_spin_trylock_bh+0x10e/0x150 [ 199.331161][ C0] Code: fc 31 c9 48 c7 04 24 0e 36 e0 45 4b c7 44 25 00 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 40 75 36 89 c8 48 8d 65 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 43 c6 44 25 04 f8 eb b7 89 d9 80 [ 199.331164][ C0] RSP: 0018:ffffc90001056a68 EFLAGS: 00000246 [ 199.331172][ C0] RAX: 0000000000000000 RBX: ffff88812a177788 RCX: 0000000000000000 [ 199.331176][ C0] RDX: 0000000000000000 RSI: 0000000000000201 RDI: 00000000ffffffff [ 199.331180][ C0] RBP: ffffc90001056a90 R08: ffff88812a17778b R09: 1ffff1102542eef1 [ 199.331184][ C0] R10: dffffc0000000000 R11: ffffed102542eef2 R12: dffffc0000000000 [ 199.331188][ C0] R13: 1ffff9200020ad40 R14: ffffffff84678b0a R15: 000000000b521855 [ 199.331193][ C0] FS: 00007f9d3ab826c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 199.331197][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.331201][ C0] CR2: 0000200000011000 CR3: 0000000117224000 CR4: 00000000003506b0 [ 199.331205][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.331209][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.331211][ C0] Call Trace: [ 199.331214][ C0] tipc_sk_rcv+0x37a/0x1dc0 [ 199.331217][ C0] ? __stack_depot_save+0x47d/0x4c0 [ 199.331220][ C0] ? kasan_set_track+0x5b/0x70 [ 199.331223][ C0] ? kasan_set_track+0x4a/0x70 [ 199.331226][ C0] ? ____kasan_slab_free+0x125/0x160 [ 199.331229][ C0] ? __kasan_slab_free+0x11/0x20 [ 199.331232][ C0] ? slab_free_freelist_hook+0xc5/0x190 [ 199.331235][ C0] ? kmem_cache_free+0x100/0x2d0 [ 199.331238][ C0] ? kfree_skbmem+0x10c/0x180 [ 199.331241][ C0] ? kfree_skb+0xc1/0x2f0 [ 199.331244][ C0] ? tipc_msg_reverse+0x698/0x900 [ 199.331247][ C0] ? tipc_node_xmit+0x26c/0xd80 [ 199.331250][ C0] ? tipc_sk_filter_rcv+0x15e5/0x3910 [ 199.331253][ C0] ? tipc_sk_rcv+0x742/0x1dc0 [ 199.331256][ C0] ? tipc_node_xmit+0x26c/0xd80 [ 199.331259][ C0] ? exit_to_user_mode_prepare+0x76/0xa0 [ 199.331262][ C0] ? syscall_exit_to_user_mode+0x1d/0x40 [ 199.331265][ C0] ? do_syscall_64+0x3d/0x40 [ 199.331269][ C0] ? __skb_queue_purge+0x170/0x170 [ 199.331271][ C0] tipc_node_xmit+0x26c/0xd80 [ 199.331274][ C0] ? kmem_cache_free+0x100/0x2d0 [ 199.331277][ C0] ? ____kasan_slab_free+0x130/0x160 [ 199.331281][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 199.331284][ C0] ? slab_free_freelist_hook+0xc5/0x190 [ 199.331287][ C0] ? kfree_skbmem+0x10c/0x180 [ 199.331289][ C0] ? kmem_cache_free+0x100/0x2d0 [ 199.331292][ C0] tipc_node_xmit_skb+0xf7/0x150 [ 199.331295][ C0] ? kfree_skb+0xc1/0x2f0 [ 199.331298][ C0] ? __skb_queue_purge+0x170/0x170 [ 199.331302][ C0] ? trace_tipc_sk_rej_msg+0x2c/0x6d0 [ 199.331304][ C0] tipc_sk_rcv+0x1c46/0x1dc0 [ 199.331307][ C0] ? __skb_queue_purge+0x170/0x170 [ 199.331310][ C0] tipc_node_xmit+0x26c/0xd80 [ 199.331313][ C0] ? is_bpf_text_address+0x177/0x190 [ 199.331316][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 199.331320][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 199.331322][ C0] ? _raw_spin_lock+0xf0/0xf0 [ 199.331326][ C0] tipc_sk_filter_rcv+0x15e5/0x3910 [ 199.331329][ C0] ? tipc_sk_dump+0xfc0/0xfc0 [ 199.331332][ C0] ? __kasan_check_write+0x14/0x20 [ 199.331335][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 199.331337][ C0] tipc_sk_rcv+0x742/0x1dc0 [ 199.331340][ C0] ? kfree_skbmem+0x10c/0x180 [ 199.331343][ C0] ? __skb_queue_purge+0x170/0x170 [ 199.331346][ C0] ? tipc_sk_filter_rcv+0x30d7/0x3910 [ 199.331349][ C0] ? ____fput+0x15/0x20 [ 199.331352][ C0] ? task_work_run+0x127/0x190 [ 199.331355][ C0] tipc_node_xmit+0x26c/0xd80 [ 199.331358][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 199.331362][ C0] tipc_node_distr_xmit+0x2a3/0x3b0 [ 199.331365][ C0] ? tipc_node_xmit_skb+0x150/0x150 [ 199.331368][ C0] tipc_sk_backlog_rcv+0x17d/0x210 [ 199.331371][ C0] ? tipc_sk_timeout+0x990/0x990 [ 199.331374][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 199.331377][ C0] __release_sock+0x146/0x360 [ 199.331380][ C0] ? _raw_write_lock_irq+0xf0/0xf0 [ 199.331383][ C0] release_sock+0x60/0x1b0 [ 199.331386][ C0] tipc_release+0xbd4/0x1490 [ 199.331389][ C0] ? down_read_killable+0xe0/0xe0 [ 199.331391][ C0] sock_close+0xe0/0x270 [ 199.331394][ C0] ? sock_mmap+0xa0/0xa0 [ 199.331397][ C0] __fput+0x2fb/0x770 [ 199.331399][ C0] ____fput+0x15/0x20 [ 199.331402][ C0] task_work_run+0x127/0x190 [ 199.331405][ C0] exit_to_user_mode_loop+0xcb/0xe0 [ 199.331409][ C0] exit_to_user_mode_prepare+0x76/0xa0 [ 199.331412][ C0] syscall_exit_to_user_mode+0x1d/0x40 [ 199.331414][ C0] do_syscall_64+0x3d/0x40 [ 199.331418][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 199.331421][ C0] RIP: 0033:0x7f9d3b11d079 [ 199.331429][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.331433][ C0] RSP: 002b:00007f9d3ab82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.331440][ C0] RAX: 00000000000203a0 RBX: 00007f9d3b348fa0 RCX: 00007f9d3b11d079 [ 199.331444][ C0] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 199.331449][ C0] RBP: 00007f9d3b1afa4c R08: 0000000000000000 R09: 0000000000000000 [ 199.331453][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.331456][ C0] R13: 0000000000000000 R14: 00007f9d3b348fa0 R15: 00007ffd7594a668