Warning: Permanently added '10.128.1.196' (ED25519) to the list of known hosts. 2026/03/17 11:06:15 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 46.680951][ T28] audit: type=1400 audit(1773745576.608:106): avc: denied { unlink } for pid=399 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 46.740307][ T399] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.758167][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.765245][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.772806][ T424] device bridge_slave_0 entered promiscuous mode [ 47.779606][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.786738][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.794039][ T424] device bridge_slave_1 entered promiscuous mode [ 47.835825][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.842888][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.850356][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.857408][ T424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.875958][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.883311][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.890724][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.898151][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.908826][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.917128][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.924174][ T307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.932942][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.941223][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.948260][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.960612][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.970040][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.983635][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.995505][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.003641][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.011308][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.019626][ T424] device veth0_vlan entered promiscuous mode [ 48.031782][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.041230][ T424] device veth1_macvtap entered promiscuous mode [ 48.050245][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.060472][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.248563][ T28] audit: type=1401 audit(1773745578.168:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2026/03/17 11:06:18 executed programs: 0 [ 48.704085][ T469] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.712170][ T469] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.719618][ T469] device bridge_slave_0 entered promiscuous mode [ 48.727935][ T469] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.735342][ T469] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.742883][ T469] device bridge_slave_1 entered promiscuous mode [ 48.802302][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.809932][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.819138][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.827726][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.836064][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.843116][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.851014][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.859713][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.868269][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.876717][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.884285][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.895858][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.904086][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.913287][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.921805][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.935179][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.943761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.954666][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.962703][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.971249][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.978805][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.987200][ T469] device veth0_vlan entered promiscuous mode [ 48.996938][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.005952][ T469] device veth1_macvtap entered promiscuous mode [ 49.015006][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.023734][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.034186][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.042552][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.066770][ T28] audit: type=1400 audit(1773745578.988:108): avc: denied { create } for pid=480 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.086376][ T28] audit: type=1400 audit(1773745578.988:109): avc: denied { write } for pid=480 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.117791][ T28] audit: type=1400 audit(1773745579.038:110): avc: denied { setopt } for pid=480 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.137512][ T482] syz.2.17 (482) used greatest stack depth: 21440 bytes left [ 149.190130][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 149.196849][ C0] rcu: 0-...!: (10000 ticks this GP) idle=482c/1/0x4000000000000000 softirq=3716/3716 fqs=0 [ 149.207084][ C0] (t=10000 jiffies g=2229 q=71 ncpus=2) [ 149.212791][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 9999 jiffies! g2229 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 149.224924][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=951 [ 149.232711][ C0] rcu: rcu_preempt kthread starved for 10000 jiffies! g2229 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 149.244073][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 149.254059][ C0] rcu: RCU grace-period kthread stack dump: [ 149.259936][ C0] task:rcu_preempt state:I stack:28288 pid:14 ppid:2 flags:0x00004000 [ 149.269209][ C0] Call Trace: [ 149.272571][ C0] [ 149.275493][ C0] __schedule+0xba6/0x1500 [ 149.279909][ C0] ? release_firmware_map_entry+0x190/0x190 [ 149.285790][ C0] schedule+0xbd/0x170 [ 149.289950][ C0] schedule_timeout+0x159/0x340 [ 149.294787][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 149.300234][ C0] ? __cfi_process_timeout+0x10/0x10 [ 149.305528][ C0] ? prepare_to_swait_event+0x308/0x320 [ 149.311237][ C0] rcu_gp_fqs_loop+0x2e9/0x10c0 [ 149.316159][ C0] ? _raw_spin_unlock_irq+0x4d/0x70 [ 149.321345][ C0] ? rcu_gp_init+0xf30/0xf30 [ 149.325932][ C0] rcu_gp_kthread+0x99/0x390 [ 149.330504][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 149.335779][ C0] ? __kasan_check_read+0x11/0x20 [ 149.340785][ C0] ? __kthread_parkme+0x142/0x180 [ 149.345803][ C0] kthread+0x281/0x320 [ 149.349859][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 149.355067][ C0] ? __cfi_kthread+0x10/0x10 [ 149.359641][ C0] ret_from_fork+0x1f/0x30 [ 149.364046][ C0] [ 149.367050][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 149.373379][ C0] CPU: 0 PID: 484 Comm: syz.2.18 Not tainted syzkaller #0 [ 149.380474][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 149.390521][ C0] RIP: 0010:tipc_sk_lookup+0x39/0x620 [ 149.395992][ C0] Code: e4 e0 48 81 ec c0 00 00 00 41 89 f6 48 89 fb 65 48 8b 04 25 28 00 00 00 48 89 84 24 a0 00 00 00 49 bf 00 00 00 00 00 fc ff df <48> c7 44 24 60 b3 8a b5 41 48 c7 44 24 68 88 e4 64 86 48 c7 44 24 [ 149.415773][ C0] RSP: 0018:ffffc90000aa6880 EFLAGS: 00000282 [ 149.422002][ C0] RAX: 219d8682ab03bb00 RBX: ffff88811af9d780 RCX: 0000000000000200 [ 149.429963][ C0] RDX: 0000000000000000 RSI: 00000000b4006714 RDI: ffff88811af9d780 [ 149.437936][ C0] RBP: ffffc90000aa6970 R08: 0000000000000003 R09: 0000000000000004 [ 149.445893][ C0] R10: dffffc0000000000 R11: fffff52000154d20 R12: ffffc90000aa6dc0 [ 149.453852][ C0] R13: dffffc0000000000 R14: 00000000b4006714 R15: dffffc0000000000 [ 149.461812][ C0] FS: 00007fd77c2836c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 149.470761][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.477450][ C0] CR2: 0000200000011000 CR3: 000000012d120000 CR4: 00000000003506b0 [ 149.485422][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 149.493647][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 149.501778][ C0] Call Trace: [ 149.505042][ C0] [ 149.508082][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 149.513006][ C0] ? __kasan_check_write+0x14/0x20 [ 149.518117][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 149.523058][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 149.528596][ C0] ? tipc_sk_lookup+0xd/0x620 [ 149.533351][ C0] tipc_sk_rcv+0x416/0x2c10 [ 149.537850][ C0] ? __stack_depot_save+0x445/0x480 [ 149.543036][ C0] ? kasan_set_track+0x60/0x70 [ 149.547785][ C0] ? kasan_set_track+0x4b/0x70 [ 149.552528][ C0] ? kasan_save_free_info+0x31/0x50 [ 149.557738][ C0] ? ____kasan_slab_free+0x132/0x180 [ 149.563012][ C0] ? __kasan_slab_free+0x11/0x20 [ 149.567935][ C0] ? kmem_cache_free+0x12d/0x300 [ 149.572858][ C0] ? kfree_skbmem+0x10c/0x180 [ 149.577622][ C0] ? tipc_msg_reverse+0x6db/0x940 [ 149.582719][ C0] ? tipc_sk_rcv+0x1ce3/0x2c10 [ 149.587482][ C0] ? __release_sock+0x154/0x380 [ 149.592343][ C0] ? __fput+0x1fc/0x8f0 [ 149.596504][ C0] ? syscall_exit_to_user_mode+0x1a/0x30 [ 149.602350][ C0] ? do_syscall_64+0x58/0xa0 [ 149.606957][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.613035][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 149.617983][ C0] tipc_node_xmit+0x26c/0xd90 [ 149.623082][ C0] ? kmem_cache_free+0x12d/0x300 [ 149.628023][ C0] ? ____kasan_slab_free+0x13d/0x180 [ 149.633297][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 149.638482][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 149.644016][ C0] ? kmem_cache_free+0x12d/0x300 [ 149.648953][ C0] tipc_node_xmit_skb+0xf7/0x150 [ 149.653877][ C0] ? kfree_skb_reason+0xdc/0x230 [ 149.658814][ C0] ? __cfi_tipc_node_xmit_skb+0x10/0x10 [ 149.664361][ C0] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 149.669802][ C0] tipc_sk_rcv+0x1d63/0x2c10 [ 149.674412][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 149.680559][ C0] ? arch_stack_walk+0x118/0x150 [ 149.685497][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.691637][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 149.696573][ C0] tipc_node_xmit+0x26c/0xd90 [ 149.701230][ C0] ? is_bpf_text_address+0x177/0x190 [ 149.706517][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 149.711711][ C0] ? kernel_text_address+0xa0/0xd0 [ 149.716814][ C0] ? __kernel_text_address+0xd/0x30 [ 149.721998][ C0] ? __kasan_check_write+0x14/0x20 [ 149.727098][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 149.732547][ C0] tipc_sk_filter_rcv+0x158e/0x2cf0 [ 149.737734][ C0] ? tipc_sk_publish+0x470/0x470 [ 149.742658][ C0] ? __kasan_check_write+0x14/0x20 [ 149.747756][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 149.752694][ C0] tipc_sk_rcv+0x7ed/0x2c10 [ 149.757185][ C0] ? kmem_cache_free+0x12d/0x300 [ 149.762120][ C0] ? tipc_msg_reverse+0x6db/0x940 [ 149.767215][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 149.772168][ C0] ? tipc_sk_filter_rcv+0x2a82/0x2cf0 [ 149.777533][ C0] tipc_node_xmit+0x26c/0xd90 [ 149.782200][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 149.787401][ C0] tipc_node_distr_xmit+0x2a3/0x3b0 [ 149.792705][ C0] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 149.798430][ C0] tipc_sk_backlog_rcv+0x17d/0x210 [ 149.803545][ C0] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 149.809255][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 149.814705][ C0] __release_sock+0x154/0x380 [ 149.819373][ C0] release_sock+0x60/0x1c0 [ 149.823859][ C0] tipc_release+0xd4a/0x1670 [ 149.828435][ C0] ? __cfi_tipc_release+0x10/0x10 [ 149.833444][ C0] sock_close+0xf1/0x290 [ 149.837678][ C0] ? __cfi_sock_close+0x10/0x10 [ 149.842508][ C0] __fput+0x1fc/0x8f0 [ 149.846475][ C0] ____fput+0x15/0x20 [ 149.850445][ C0] task_work_run+0x1e1/0x250 [ 149.855031][ C0] ? __cfi_task_work_run+0x10/0x10 [ 149.860132][ C0] ? __kasan_check_write+0x14/0x20 [ 149.865238][ C0] exit_to_user_mode_loop+0x9b/0xb0 [ 149.870422][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 149.875888][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 149.881363][ C0] do_syscall_64+0x58/0xa0 [ 149.885875][ C0] ? clear_bhb_loop+0x30/0x80 [ 149.890548][ C0] ? clear_bhb_loop+0x30/0x80 [ 149.895230][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.901216][ C0] RIP: 0033:0x7fd77b39aef9 [ 149.905638][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.925795][ C0] RSP: 002b:00007fd77c283028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.934208][ C0] RAX: 00000000000203a0 RBX: 00007fd77b605fa0 RCX: 00007fd77b39aef9 [ 149.942254][ C0] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 149.950317][ C0] RBP: 00007fd77b42fee0 R08: 0000000000000000 R09: 0000000000000000 [ 149.958279][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.966242][ C0] R13: 00007fd77b606038 R14: 00007fd77b605fa0 R15: 00007ffea767e8d8 [ 149.974479][ C0] [ 149.977502][ C0] CPU: 0 PID: 484 Comm: syz.2.18 Not tainted syzkaller #0 [ 149.984679][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 149.994725][ C0] RIP: 0010:tipc_sk_lookup+0x39/0x620 [ 150.000100][ C0] Code: e4 e0 48 81 ec c0 00 00 00 41 89 f6 48 89 fb 65 48 8b 04 25 28 00 00 00 48 89 84 24 a0 00 00 00 49 bf 00 00 00 00 00 fc ff df <48> c7 44 24 60 b3 8a b5 41 48 c7 44 24 68 88 e4 64 86 48 c7 44 24 [ 150.019970][ C0] RSP: 0018:ffffc90000aa6880 EFLAGS: 00000282 [ 150.026042][ C0] RAX: 219d8682ab03bb00 RBX: ffff88811af9d780 RCX: 0000000000000200 [ 150.034134][ C0] RDX: 0000000000000000 RSI: 00000000b4006714 RDI: ffff88811af9d780 [ 150.042194][ C0] RBP: ffffc90000aa6970 R08: 0000000000000003 R09: 0000000000000004 [ 150.050247][ C0] R10: dffffc0000000000 R11: fffff52000154d20 R12: ffffc90000aa6dc0 [ 150.058223][ C0] R13: dffffc0000000000 R14: 00000000b4006714 R15: dffffc0000000000 [ 150.066266][ C0] FS: 00007fd77c2836c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 150.075181][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.081748][ C0] CR2: 0000200000011000 CR3: 000000012d120000 CR4: 00000000003506b0 [ 150.089712][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 150.097674][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 150.105647][ C0] Call Trace: [ 150.108999][ C0] [ 150.111919][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 150.116859][ C0] ? __kasan_check_write+0x14/0x20 [ 150.121989][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 150.126949][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 150.132414][ C0] ? tipc_sk_lookup+0xd/0x620 [ 150.137091][ C0] tipc_sk_rcv+0x416/0x2c10 [ 150.141591][ C0] ? __stack_depot_save+0x445/0x480 [ 150.146875][ C0] ? kasan_set_track+0x60/0x70 [ 150.151626][ C0] ? kasan_set_track+0x4b/0x70 [ 150.156549][ C0] ? kasan_save_free_info+0x31/0x50 [ 150.161763][ C0] ? ____kasan_slab_free+0x132/0x180 [ 150.167068][ C0] ? __kasan_slab_free+0x11/0x20 [ 150.171992][ C0] ? kmem_cache_free+0x12d/0x300 [ 150.176920][ C0] ? kfree_skbmem+0x10c/0x180 [ 150.181584][ C0] ? tipc_msg_reverse+0x6db/0x940 [ 150.186618][ C0] ? tipc_sk_rcv+0x1ce3/0x2c10 [ 150.191367][ C0] ? __release_sock+0x154/0x380 [ 150.196205][ C0] ? __fput+0x1fc/0x8f0 [ 150.200345][ C0] ? syscall_exit_to_user_mode+0x1a/0x30 [ 150.206019][ C0] ? do_syscall_64+0x58/0xa0 [ 150.210772][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.216829][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 150.221929][ C0] tipc_node_xmit+0x26c/0xd90 [ 150.226597][ C0] ? kmem_cache_free+0x12d/0x300 [ 150.231522][ C0] ? ____kasan_slab_free+0x13d/0x180 [ 150.236793][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 150.242060][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 150.247607][ C0] ? kmem_cache_free+0x12d/0x300 [ 150.252643][ C0] tipc_node_xmit_skb+0xf7/0x150 [ 150.257703][ C0] ? kfree_skb_reason+0xdc/0x230 [ 150.262629][ C0] ? __cfi_tipc_node_xmit_skb+0x10/0x10 [ 150.268190][ C0] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 150.273552][ C0] tipc_sk_rcv+0x1d63/0x2c10 [ 150.278127][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 150.284280][ C0] ? arch_stack_walk+0x118/0x150 [ 150.289209][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.295261][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 150.300192][ C0] tipc_node_xmit+0x26c/0xd90 [ 150.304868][ C0] ? is_bpf_text_address+0x177/0x190 [ 150.310144][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 150.315336][ C0] ? kernel_text_address+0xa0/0xd0 [ 150.320437][ C0] ? __kernel_text_address+0xd/0x30 [ 150.325643][ C0] ? __kasan_check_write+0x14/0x20 [ 150.330759][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 150.336841][ C0] tipc_sk_filter_rcv+0x158e/0x2cf0 [ 150.342054][ C0] ? tipc_sk_publish+0x470/0x470 [ 150.347006][ C0] ? __kasan_check_write+0x14/0x20 [ 150.352111][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 150.357043][ C0] tipc_sk_rcv+0x7ed/0x2c10 [ 150.361551][ C0] ? kmem_cache_free+0x12d/0x300 [ 150.366481][ C0] ? tipc_msg_reverse+0x6db/0x940 [ 150.371504][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 150.376549][ C0] ? tipc_sk_filter_rcv+0x2a82/0x2cf0 [ 150.381927][ C0] tipc_node_xmit+0x26c/0xd90 [ 150.386714][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 150.391925][ C0] tipc_node_distr_xmit+0x2a3/0x3b0 [ 150.397166][ C0] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 150.402895][ C0] tipc_sk_backlog_rcv+0x17d/0x210 [ 150.408098][ C0] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 150.413888][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 150.419374][ C0] __release_sock+0x154/0x380 [ 150.424092][ C0] release_sock+0x60/0x1c0 [ 150.428504][ C0] tipc_release+0xd4a/0x1670 [ 150.433104][ C0] ? __cfi_tipc_release+0x10/0x10 [ 150.438220][ C0] sock_close+0xf1/0x290 [ 150.442494][ C0] ? __cfi_sock_close+0x10/0x10 [ 150.447602][ C0] __fput+0x1fc/0x8f0 [ 150.451594][ C0] ____fput+0x15/0x20 [ 150.455609][ C0] task_work_run+0x1e1/0x250 [ 150.460204][ C0] ? __cfi_task_work_run+0x10/0x10 [ 150.465336][ C0] ? __kasan_check_write+0x14/0x20 [ 150.470442][ C0] exit_to_user_mode_loop+0x9b/0xb0 [ 150.475657][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 150.481139][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 150.486619][ C0] do_syscall_64+0x58/0xa0 [ 150.491027][ C0] ? clear_bhb_loop+0x30/0x80 [ 150.495759][ C0] ? clear_bhb_loop+0x30/0x80 [ 150.500462][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.506380][ C0] RIP: 0033:0x7fd77b39aef9 [ 150.510865][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.530488][ C0] RSP: 002b:00007fd77c283028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.538909][ C0] RAX: 00000000000203a0 RBX: 00007fd77b605fa0 RCX: 00007fd77b39aef9 [ 150.546879][ C0] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 150.554881][ C0] RBP: 00007fd77b42fee0 R08: 0000000000000000 R09: 0000000000000000 [ 150.562842][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.570802][ C0] R13: 00007fd77b606038 R14: 00007fd77b605fa0 R15: 00007ffea767e8d8 [ 150.578784][ C0] [ 199.248787][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 143s! [syz.2.18:483] [ 199.256832][ C1] Modules linked in: [ 199.260740][ C1] CPU: 1 PID: 483 Comm: syz.2.18 Not tainted syzkaller #0 [ 199.267860][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 199.278014][ C1] RIP: 0010:kvm_wait+0x105/0x150 [ 199.283003][ C1] Code: 07 33 04 f4 eb 87 fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d 5d 07 33 04 fb f4 5e ff ff ff fb e9 58 ff ff ff e8 1b ba c4 03 89 f9 80 e1 07 38 [ 199.302743][ C1] RSP: 0018:ffffc90000ac78a0 EFLAGS: 00000246 [ 199.308935][ C1] RAX: 0000000000000003 RBX: ffff88810da3c098 RCX: ffffffff8500c8a2 [ 199.316926][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88810da3c098 [ 199.324906][ C1] RBP: ffffc90000ac7930 R08: ffff88810da3c098 R09: 1ffff11021b47813 [ 199.332890][ C1] R10: dffffc0000000000 R11: ffffed1021b47814 R12: 1ffff1103ede0001 [ 199.340869][ C1] R13: ffff8881f6f38cd4 R14: dffffc0000000000 R15: 1ffff92000158f14 [ 199.348848][ C1] FS: 0000555566394500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 199.357791][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.364470][ C1] CR2: 00007fd77b3e8640 CR3: 000000012d120000 CR4: 00000000003506a0 [ 199.372540][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.380607][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.388592][ C1] Call Trace: [ 199.391884][ C1] [ 199.394881][ C1] ? __cfi_kvm_wait+0x10/0x10 [ 199.399613][ C1] ? __pv_queued_spin_lock_slowpath+0x632/0xc40 [ 199.405894][ C1] __pv_queued_spin_lock_slowpath+0x690/0xc40 [ 199.412072][ C1] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 199.418683][ C1] ? stack_trace_save+0xa6/0xf0 [ 199.423575][ C1] ? __stack_depot_save+0x36/0x480 [ 199.428725][ C1] queued_spin_lock_slowpath+0x47/0x50 [ 199.434208][ C1] _raw_spin_lock_bh+0xe4/0xf0 [ 199.438990][ C1] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 199.444557][ C1] ? __kasan_record_aux_stack+0xb6/0xc0 [ 199.450116][ C1] ? task_work_add+0x7f/0x330 [ 199.454812][ C1] ? fput+0xe1/0x1a0 [ 199.458715][ C1] ? filp_close+0x111/0x160 [ 199.463237][ C1] ? __close_range+0x300/0x4f0 [ 199.468004][ C1] ? x64_sys_call+0x43b/0x9a0 [ 199.472789][ C1] ? do_syscall_64+0x4c/0xa0 [ 199.477387][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.483461][ C1] lock_sock_nested+0x90/0x2a0 [ 199.488238][ C1] ? __cfi_lock_sock_nested+0x10/0x10 [ 199.493752][ C1] ? __cfi_locks_remove_file+0x10/0x10 [ 199.499218][ C1] tipc_release+0xb2/0x1670 [ 199.503731][ C1] ? rwsem_write_trylock+0x136/0x300 [ 199.509118][ C1] ? __cfi_tipc_release+0x10/0x10 [ 199.514167][ C1] sock_close+0xf1/0x290 [ 199.518417][ C1] ? __cfi_sock_close+0x10/0x10 [ 199.523278][ C1] __fput+0x1fc/0x8f0 [ 199.527274][ C1] ____fput+0x15/0x20 [ 199.531398][ C1] task_work_run+0x1e1/0x250 [ 199.535997][ C1] ? __cfi_task_work_run+0x10/0x10 [ 199.541116][ C1] ? __cfi___close_range+0x10/0x10 [ 199.546231][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 199.551434][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 199.556896][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 199.562361][ C1] do_syscall_64+0x58/0xa0 [ 199.566784][ C1] ? clear_bhb_loop+0x30/0x80 [ 199.571467][ C1] ? clear_bhb_loop+0x30/0x80 [ 199.576155][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.582052][ C1] RIP: 0033:0x7fd77b39aef9 [ 199.586564][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.606261][ C1] RSP: 002b:00007ffea767ea38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 199.614685][ C1] RAX: 0000000000000000 RBX: 00007fd77b607da0 RCX: 00007fd77b39aef9 [ 199.622834][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 199.630812][ C1] RBP: 00007fd77b607da0 R08: 0000000000000006 R09: 0000000000000000 [ 199.638791][ C1] R10: 00007fd77b607cb0 R11: 0000000000000246 R12: 000000000000c328 [ 199.646767][ C1] R13: 00007fd77b60609c R14: 000000000000c04c R15: 00007fd77b606090 [ 199.654833][ C1] [ 199.657874][ C1] Sending NMI from CPU 1 to CPUs 0: [ 199.663084][ C0] NMI backtrace for cpu 0 [ 199.663093][ C0] CPU: 0 PID: 484 Comm: syz.2.18 Not tainted syzkaller #0 [ 199.663108][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 199.663116][ C0] RIP: 0010:tipc_sk_lookup+0x508/0x620 [ 199.663136][ C0] Code: c4 74 62 49 8d 9c 24 80 00 00 00 48 89 df be 04 00 00 00 e8 ea 3c dd fc 41 be 01 00 00 00 f0 45 0f c1 b4 24 80 00 00 00 31 ff <44> 89 f6 e8 90 02 98 fc 45 85 f6 74 7d bf fe ff ff 7f 44 89 f6 e8 [ 199.663147][ C0] RSP: 0018:ffffc90000aa6880 EFLAGS: 00000246 [ 199.663160][ C0] RAX: 0000000000000301 RBX: ffff88810da3c080 RCX: ffffffff84d96d56 [ 199.663171][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000000 [ 199.663179][ C0] RBP: ffffc90000aa6970 R08: ffff88810da3c083 R09: 1ffff11021b47810 [ 199.663189][ C0] R10: dffffc0000000000 R11: ffffed1021b47811 R12: ffff88810da3c000 [ 199.663200][ C0] R13: 00000000000003f0 R14: 0000000000000004 R15: ffff88811b8450de [ 199.663209][ C0] FS: 00007fd77c2836c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 199.663222][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.663233][ C0] CR2: 0000200000011000 CR3: 000000012d120000 CR4: 00000000003506b0 [ 199.663248][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.663256][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.663266][ C0] Call Trace: [ 199.663271][ C0] [ 199.663277][ C0] ? tipc_sk_rcv+0x2c10/0x2c10 [ 199.663293][ C0] ? tipc_sk_rcv+0x1a25/0x2c10 [ 199.663309][ C0] tipc_sk_rcv+0x416/0x2c10 [ 199.663324][ C0] ? __stack_depot_save+0x445/0x480 [ 199.663340][ C0] ? kasan_set_track+0x60/0x70 [ 199.663356][ C0] ? kasan_set_track+0x4b/0x70 [ 199.663370][ C0] ? kasan_save_free_info+0x31/0x50 [ 199.663389][ C0] ? ____kasan_slab_free+0x132/0x180 [ 199.663405][ C0] ? __kasan_slab_free+0x11/0x20 [ 199.663421][ C0] ? kmem_cache_free+0x12d/0x300 [ 199.663437][ C0] ? kfree_skbmem+0x10c/0x180 [ 199.663453][ C0] ? tipc_msg_reverse+0x6db/0x940 [ 199.663468][ C0] ? tipc_sk_rcv+0x1ce3/0x2c10 [ 199.663483][ C0] ? __release_sock+0x154/0x380 [ 199.663502][ C0] ? __fput+0x1fc/0x8f0 [ 199.663518][ C0] ? syscall_exit_to_user_mode+0x1a/0x30 [ 199.663534][ C0] ? do_syscall_64+0x58/0xa0 [ 199.663551][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.663565][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 199.663583][ C0] tipc_node_xmit+0x26c/0xd90 [ 199.663597][ C0] ? kmem_cache_free+0x12d/0x300 [ 199.663614][ C0] ? ____kasan_slab_free+0x13d/0x180 [ 199.663630][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 199.663643][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 199.663664][ C0] ? kmem_cache_free+0x12d/0x300 [ 199.663682][ C0] tipc_node_xmit_skb+0xf7/0x150 [ 199.663696][ C0] ? kfree_skb_reason+0xdc/0x230 [ 199.663712][ C0] ? __cfi_tipc_node_xmit_skb+0x10/0x10 [ 199.663727][ C0] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 199.663743][ C0] tipc_sk_rcv+0x1d63/0x2c10 [ 199.663758][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 199.663784][ C0] ? arch_stack_walk+0x118/0x150 [ 199.663805][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.663822][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 199.663840][ C0] tipc_node_xmit+0x26c/0xd90 [ 199.663854][ C0] ? is_bpf_text_address+0x177/0x190 [ 199.663872][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 199.663886][ C0] ? kernel_text_address+0xa0/0xd0 [ 199.663902][ C0] ? __kernel_text_address+0xd/0x30 [ 199.663919][ C0] ? __kasan_check_write+0x14/0x20 [ 199.663932][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 199.663952][ C0] tipc_sk_filter_rcv+0x158e/0x2cf0 [ 199.663975][ C0] ? tipc_sk_publish+0x470/0x470 [ 199.663992][ C0] ? __kasan_check_write+0x14/0x20 [ 199.664005][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 199.664024][ C0] tipc_sk_rcv+0x7ed/0x2c10 [ 199.664041][ C0] ? kmem_cache_free+0x12d/0x300 [ 199.664059][ C0] ? tipc_msg_reverse+0x6db/0x940 [ 199.664074][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 199.664091][ C0] ? tipc_sk_filter_rcv+0x2a82/0x2cf0 [ 199.664109][ C0] tipc_node_xmit+0x26c/0xd90 [ 199.664123][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 199.664139][ C0] tipc_node_distr_xmit+0x2a3/0x3b0 [ 199.664154][ C0] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 199.664170][ C0] tipc_sk_backlog_rcv+0x17d/0x210 [ 199.664188][ C0] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 199.664204][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 199.664224][ C0] __release_sock+0x154/0x380 [ 199.664243][ C0] release_sock+0x60/0x1c0 [ 199.664259][ C0] tipc_release+0xd4a/0x1670 [ 199.664277][ C0] ? __cfi_tipc_release+0x10/0x10 [ 199.664295][ C0] sock_close+0xf1/0x290 [ 199.664308][ C0] ? __cfi_sock_close+0x10/0x10 [ 199.664322][ C0] __fput+0x1fc/0x8f0 [ 199.664338][ C0] ____fput+0x15/0x20 [ 199.664353][ C0] task_work_run+0x1e1/0x250 [ 199.664370][ C0] ? __cfi_task_work_run+0x10/0x10 [ 199.664386][ C0] ? __kasan_check_write+0x14/0x20 [ 199.664400][ C0] exit_to_user_mode_loop+0x9b/0xb0 [ 199.664414][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 199.664429][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 199.664444][ C0] do_syscall_64+0x58/0xa0 [ 199.664461][ C0] ? clear_bhb_loop+0x30/0x80 [ 199.664474][ C0] ? clear_bhb_loop+0x30/0x80 [ 199.664488][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.664501][ C0] RIP: 0033:0x7fd77b39aef9 [ 199.664512][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.664523][ C0] RSP: 002b:00007fd77c283028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.664537][ C0] RAX: 00000000000203a0 RBX: 00007fd77b605fa0 RCX: 00007fd77b39aef9 [ 199.664547][ C0] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 199.664556][ C0] RBP: 00007fd77b42fee0 R08: 0000000000000000 R09: 0000000000000000 [ 199.664564][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.664573][ C0] R13: 00007fd77b606038 R14: 00007fd77b605fa0 R15: 00007ffea767e8d8 [ 199.664585][ C0]