Warning: Permanently added '10.128.1.218' (ED25519) to the list of known hosts. 2025/10/19 20:05:58 parsed 1 programs [ 49.123117][ T24] kauditd_printk_skb: 33 callbacks suppressed [ 49.123122][ T24] audit: type=1400 audit(1760904358.980:93): avc: denied { unlink } for pid=428 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.159064][ T428] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.484565][ T24] audit: type=1401 audit(1760904359.340:94): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 49.580542][ T24] audit: type=1400 audit(1760904359.440:95): avc: denied { create } for pid=461 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.651340][ T448] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.658227][ T448] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.665527][ T448] device bridge_slave_0 entered promiscuous mode [ 49.672976][ T448] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.679803][ T448] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.687178][ T448] device bridge_slave_1 entered promiscuous mode [ 49.739578][ T448] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.746451][ T448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.753668][ T448] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.760490][ T448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.778464][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.795310][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.810574][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.822528][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.831931][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.842979][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.849904][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.864603][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.872918][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.879753][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.887258][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.895985][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.911990][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.921585][ T448] device veth0_vlan entered promiscuous mode [ 49.927900][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.935844][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 2025/10/19 20:05:59 executed programs: 0 [ 49.943185][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.952503][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.961961][ T448] device veth1_macvtap entered promiscuous mode [ 49.969908][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.979552][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.103355][ T484] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.110368][ T484] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.117391][ T484] device bridge_slave_0 entered promiscuous mode [ 50.124911][ T484] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.132073][ T484] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.139311][ T484] device bridge_slave_1 entered promiscuous mode [ 50.171180][ T483] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.178028][ T483] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.185231][ T483] device bridge_slave_0 entered promiscuous mode [ 50.192600][ T487] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.199790][ T487] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.207513][ T487] device bridge_slave_0 entered promiscuous mode [ 50.215853][ T487] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.223115][ T487] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.230445][ T487] device bridge_slave_1 entered promiscuous mode [ 50.241426][ T483] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.248689][ T483] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.255964][ T483] device bridge_slave_1 entered promiscuous mode [ 50.269547][ T486] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.276801][ T486] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.284518][ T486] device bridge_slave_0 entered promiscuous mode [ 50.291266][ T486] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.298129][ T486] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.305740][ T486] device bridge_slave_1 entered promiscuous mode [ 50.349230][ T488] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.356239][ T488] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.363360][ T488] device bridge_slave_0 entered promiscuous mode [ 50.372428][ T488] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.379346][ T488] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.386702][ T488] device bridge_slave_1 entered promiscuous mode [ 50.474317][ T484] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.481281][ T484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.488647][ T484] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.495525][ T484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.508982][ T487] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.516173][ T487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.523396][ T487] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.530366][ T487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.546879][ T488] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.553734][ T488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.560825][ T488] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.567612][ T488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.580823][ T478] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.587776][ T478] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.594914][ T478] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.602486][ T478] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.610051][ T478] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.617139][ T478] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.643239][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.650957][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.658809][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.667472][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.676052][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.682999][ T478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.730766][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.738198][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.746797][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.755123][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.763387][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.770578][ T478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.778229][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.786624][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.794570][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.801392][ T478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.808687][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.816041][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.823274][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.831485][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.839356][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.846119][ T478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.853384][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.861634][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.869727][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.876603][ T478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.883961][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.892033][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.900211][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.907301][ T478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.914576][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.922477][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.930275][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.938102][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.945935][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.953852][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.961970][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.969343][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.977055][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.985406][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.994774][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.002294][ T478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.011301][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.021229][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.029462][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.037239][ T478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.044627][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.052701][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.060521][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.069216][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.077549][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.084381][ T478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.091688][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.099801][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.107951][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.114783][ T478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.122318][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.129955][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.142041][ T484] device veth0_vlan entered promiscuous mode [ 51.148878][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.156522][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.163923][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.171404][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.181097][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.188773][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.197133][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.207514][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.216606][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.232996][ T488] device veth0_vlan entered promiscuous mode [ 51.241006][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.249153][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.258098][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.265526][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.280943][ T486] device veth0_vlan entered promiscuous mode [ 51.288218][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.296426][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.304332][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.311668][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.318883][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.326926][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.345957][ T488] device veth1_macvtap entered promiscuous mode [ 51.355348][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.363305][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.374286][ T486] device veth1_macvtap entered promiscuous mode [ 51.385576][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.394283][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.402833][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.411277][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.419113][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.429299][ T484] device veth1_macvtap entered promiscuous mode [ 51.443763][ T487] device veth0_vlan entered promiscuous mode [ 51.452792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.460682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.468063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.475389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.489153][ T487] device veth1_macvtap entered promiscuous mode [ 51.511379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.512247][ T24] audit: type=1400 audit(1760904361.370:96): avc: denied { create } for pid=504 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.539104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.547271][ T24] audit: type=1400 audit(1760904361.370:97): avc: denied { setopt } for pid=504 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.547755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.566561][ T24] audit: type=1400 audit(1760904361.370:98): avc: denied { write } for pid=504 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.574602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.593821][ T24] audit: type=1400 audit(1760904361.370:99): avc: denied { read } for pid=504 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.602577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.628685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.667016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.675155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.683086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.691724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.700326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.708595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.717155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.725358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.733636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.741244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.754524][ T483] device veth0_vlan entered promiscuous mode [ 51.763688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.772151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.785891][ T483] device veth1_macvtap entered promiscuous mode [ 51.794351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.802601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.811268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.821217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.829215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.931899][ T7] device bridge_slave_1 left promiscuous mode [ 51.938172][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.945507][ T7] device bridge_slave_0 left promiscuous mode [ 51.951567][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.959472][ T7] device veth1_macvtap left promiscuous mode [ 51.965454][ T7] device veth0_vlan left promiscuous mode 2025/10/19 20:06:04 executed programs: 31 2025/10/19 20:06:09 executed programs: 61 2025/10/19 20:06:14 executed programs: 91 [ 198.963565][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [syz.6.103:803] [ 198.971543][ C1] Modules linked in: [ 198.975278][ C1] CPU: 1 PID: 803 Comm: syz.6.103 Not tainted syzkaller #0 [ 198.982303][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.992214][ C1] RIP: 0010:_raw_spin_unlock_bh+0x19/0x60 [ 198.997750][ C1] Code: 89 e7 89 45 b0 e8 a7 91 7e fd eb c9 e8 30 d9 fd ff 48 c7 c0 b8 b2 11 85 55 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 48 89 e5 <53> 48 89 fb 80 3c 10 00 75 2a 48 83 3d ad 33 4a 01 00 74 1e 48 89 [ 199.017202][ C1] RSP: 0018:ffffc90001886c10 EFLAGS: 00000a02 [ 199.023089][ C1] RAX: 1ffffffff0a23657 RBX: ffff888119950a00 RCX: ffffc90001886f00 [ 199.030898][ C1] RDX: dffffc0000000000 RSI: 000000009392bdd3 RDI: ffffc90001886f14 [ 199.038708][ C1] RBP: ffffc90001886c10 R08: 0000000000000001 R09: 0000000000000003 [ 199.046717][ C1] R10: fffff52000310d77 R11: 0000000000000000 R12: ffffc90001886f00 [ 199.054674][ C1] R13: 000000009392bdd3 R14: 0000000000000001 R15: dffffc0000000000 [ 199.062475][ C1] FS: 00007f65dd0ab6c0(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 [ 199.071584][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.078021][ C1] CR2: 00007f65dd0aaf98 CR3: 0000000116cf7000 CR4: 00000000003506a0 [ 199.085826][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.093636][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.101451][ C1] Call Trace: [ 199.104862][ C1] tipc_sk_rcv+0x23b/0x18f0 [ 199.109176][ C1] ? tipc_node_xmit+0x1b4/0x1810 [ 199.113949][ C1] ? release_sock+0x4f/0x170 [ 199.118378][ C1] ? tipc_wait_for_rcvmsg.isra.0+0x26b/0x4b0 [ 199.124192][ C1] ? tipc_recvstream+0x204/0x8b0 [ 199.128959][ C1] ? ___sys_recvmsg+0x109/0x1d0 [ 199.133642][ C1] ? tipc_sk_overlimit1+0x370/0x370 [ 199.138674][ C1] ? __release_sock+0x14f/0x2b0 [ 199.143373][ C1] ? release_sock+0x4f/0x170 [ 199.147923][ C1] ? tipc_wait_for_rcvmsg.isra.0+0x26b/0x4b0 [ 199.153736][ C1] ? tipc_recvstream+0x204/0x8b0 [ 199.158509][ C1] ? ____sys_recvmsg+0x286/0x700 [ 199.163370][ C1] ? ___sys_recvmsg+0x109/0x1d0 [ 199.168062][ C1] ? __sys_recvmsg+0xc0/0x160 [ 199.172577][ C1] ? __x64_sys_recvmsg+0x73/0xb0 [ 199.177349][ C1] ? do_syscall_64+0x32/0x50 [ 199.181785][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 199.187684][ C1] ? debug_smp_processor_id+0x17/0x20 [ 199.192892][ C1] tipc_node_xmit+0x1b4/0x1810 [ 199.197495][ C1] ? debug_smp_processor_id+0x17/0x20 [ 199.202692][ C1] ? tipc_node_get_linkname+0x180/0x180 [ 199.208075][ C1] ? slab_free_freelist_hook+0x9b/0x1a0 [ 199.213450][ C1] ? kfree_skbmem+0xf6/0x140 [ 199.217875][ C1] tipc_node_distr_xmit+0x34c/0x690 [ 199.222920][ C1] ? tipc_node_xmit_skb+0x180/0x180 [ 199.227958][ C1] ? tipc_msg_reverse+0x57c/0x860 [ 199.232812][ C1] tipc_sk_rcv+0x8cc/0x18f0 [ 199.237146][ C1] ? tipc_sk_overlimit1+0x370/0x370 [ 199.242295][ C1] ? is_bpf_text_address+0x1f/0x30 [ 199.247222][ C1] ? unwind_get_return_address+0x58/0xa0 [ 199.252792][ C1] ? create_prof_cpu_mask+0x20/0x20 [ 199.257826][ C1] ? __kasan_check_write+0x14/0x20 [ 199.262918][ C1] tipc_node_xmit+0x1b4/0x1810 [ 199.267517][ C1] ? tipc_node_get_linkname+0x180/0x180 [ 199.272902][ C1] tipc_sk_push_backlog+0x2c8/0x770 [ 199.277928][ C1] ? tsk_peer_msg+0xc9/0x3b0 [ 199.282354][ C1] tipc_sk_filter_rcv+0x2285/0x3030 [ 199.287384][ C1] ? tipc_recvstream+0x204/0x8b0 [ 199.292268][ C1] ? ____sys_recvmsg+0x286/0x700 [ 199.297036][ C1] ? ___sys_recvmsg+0x109/0x1d0 [ 199.301720][ C1] ? __sys_recvmsg+0xc0/0x160 [ 199.306319][ C1] ? __x64_sys_recvmsg+0x73/0xb0 [ 199.311096][ C1] ? do_syscall_64+0x32/0x50 [ 199.315522][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 199.321559][ C1] ? tipc_disc_rcv+0x320/0x11d0 [ 199.326243][ C1] ? tipc_release+0xfe0/0xfe0 [ 199.330742][ C1] ? tipc_sk_lookup+0x330/0x500 [ 199.335431][ C1] ? __kasan_check_write+0x14/0x20 [ 199.340375][ C1] ? _raw_spin_unlock_bh+0x60/0x60 [ 199.345317][ C1] tipc_sk_rcv+0xadc/0x18f0 [ 199.349659][ C1] ? tipc_sk_overlimit1+0x370/0x370 [ 199.354778][ C1] ? kfree_skbmem+0xf6/0x140 [ 199.359204][ C1] ? kmem_cache_free+0x109/0x490 [ 199.363976][ C1] ? skb_release_data+0x4c0/0x6d0 [ 199.368837][ C1] ? tipc_msg_reverse+0x57c/0x860 [ 199.373705][ C1] ? kfree_skbmem+0xf6/0x140 [ 199.378211][ C1] tipc_node_xmit+0x1b4/0x1810 [ 199.382899][ C1] ? tipc_node_get_linkname+0x180/0x180 [ 199.388369][ C1] tipc_node_distr_xmit+0x34c/0x690 [ 199.393400][ C1] ? ___sys_recvmsg+0x109/0x1d0 [ 199.398085][ C1] ? __sys_recvmsg+0xc0/0x160 [ 199.402599][ C1] ? __x64_sys_recvmsg+0x73/0xb0 [ 199.407375][ C1] ? tipc_node_xmit_skb+0x180/0x180 [ 199.412409][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 199.417884][ C1] ? __pv_queued_spin_lock_slowpath+0x260/0xc10 [ 199.423961][ C1] tipc_sk_backlog_rcv+0x162/0x1d0 [ 199.428906][ C1] ? tipc_sk_filter_rcv+0x3030/0x3030 [ 199.434233][ C1] __release_sock+0x14f/0x2b0 [ 199.438862][ C1] release_sock+0x4f/0x170 [ 199.443146][ C1] tipc_wait_for_rcvmsg.isra.0+0x26b/0x4b0 [ 199.448743][ C1] ? tipc_sock_destruct+0x2d0/0x2d0 [ 199.453780][ C1] ? preempt_schedule_irq+0x90/0x90 [ 199.458806][ C1] ? kfree_skbmem+0xf6/0x140 [ 199.463235][ C1] ? kfree_skb+0xb9/0x2a0 [ 199.467415][ C1] tipc_recvstream+0x204/0x8b0 [ 199.472186][ C1] ? tipc_recvmsg+0xef0/0xef0 [ 199.476693][ C1] ? security_socket_recvmsg+0x56/0xa0 [ 199.482200][ C1] ____sys_recvmsg+0x286/0x700 [ 199.486807][ C1] ? move_addr_to_kernel.part.0+0xd0/0xd0 [ 199.492363][ C1] ? iovec_from_user+0x69/0x220 [ 199.497038][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 199.502413][ C1] ? __import_iovec+0x51/0x470 [ 199.507028][ C1] ? import_iovec+0x4a/0x80 [ 199.511415][ C1] ___sys_recvmsg+0x109/0x1d0 [ 199.515868][ C1] ? __copy_msghdr_from_user+0x4f0/0x4f0 [ 199.521334][ C1] ? ___handle_speculative_fault+0xd5e/0x1530 [ 199.527341][ C1] ? handle_pte_fault+0x3210/0x3210 [ 199.532493][ C1] ? __fget_light.part.0+0x19d/0x330 [ 199.537632][ C1] ? __fdget+0x8b/0x1d0 [ 199.541597][ C1] ? sockfd_lookup_light+0x1c/0x150 [ 199.546627][ C1] __sys_recvmsg+0xc0/0x160 [ 199.550966][ C1] ? __sys_recvmsg_sock+0x10/0x10 [ 199.555834][ C1] ? debug_smp_processor_id+0x17/0x20 [ 199.561033][ C1] ? fpregs_assert_state_consistent+0x49/0xb0 [ 199.566943][ C1] ? debug_smp_processor_id+0x17/0x20 [ 199.572144][ C1] ? exit_to_user_mode_prepare+0x36/0x160 [ 199.577695][ C1] __x64_sys_recvmsg+0x73/0xb0 [ 199.582298][ C1] ? exc_page_fault+0x71/0xc0 [ 199.586810][ C1] do_syscall_64+0x32/0x50 [ 199.591153][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 199.596963][ C1] RIP: 0033:0x7f65dd65b169 [ 199.601232][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.620885][ C1] RSP: 002b:00007f65dd0ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 199.629125][ C1] RAX: ffffffffffffffda RBX: 00007f65dd883080 RCX: 00007f65dd65b169 [ 199.636941][ C1] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 199.644746][ C1] RBP: 00007f65dd6dda68 R08: 0000000000000000 R09: 0000000000000000 [ 199.652590][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.660377][ C1] R13: 0000000000000001 R14: 00007f65dd883080 R15: 00007fff624fbbd8 [ 199.668294][ C1] Sending NMI from CPU 1 to CPUs 0: [ 199.673507][ C0] NMI backtrace for cpu 0 [ 199.673509][ C0] CPU: 0 PID: 802 Comm: syz.6.103 Not tainted syzkaller #0 [ 199.673511][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 199.673512][ C0] RIP: 0010:kvm_wait+0x70/0x90 [ 199.673515][ C0] Code: 9d 48 8b 5d f8 c9 c3 f6 c7 02 75 10 0f 1f 44 00 00 0f 00 2d 82 ca fd 02 f4 eb e4 c3 0f 1f 44 00 00 0f 00 2d 72 ca fd 02 fb f4 d3 89 75 ec 48 89 7d f0 e8 22 08 68 00 8b 75 ec 48 8b 7d f0 eb [ 199.673517][ C0] RSP: 0018:ffffc900018778e8 EFLAGS: 00000242 [ 199.673520][ C0] RAX: 0000000000000003 RBX: 0000000000000286 RCX: 1ffff1102332a151 [ 199.673522][ C0] RDX: 0000000000000000 RSI: 0000000000000003 RDI: ffff888119950a88 [ 199.673524][ C0] RBP: ffffc90001877900 R08: 0000000000000001 R09: ffff888119950a88 [ 199.673525][ C0] R10: ffffed102332a151 R11: 0000000000000000 R12: ffff888119950a88 [ 199.673527][ C0] R13: ffffed102332a151 R14: 0000000000000001 R15: 0000000000000000 [ 199.673528][ C0] FS: 00007f65dd0cc6c0(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 199.673530][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.673532][ C0] CR2: 00007f65dd0abd58 CR3: 0000000116cf7000 CR4: 00000000003506b0 [ 199.673533][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.673535][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.673536][ C0] Call Trace: [ 199.673537][ C0] ? __pv_queued_spin_lock_slowpath+0x3fd/0xc10 [ 199.673539][ C0] __pv_queued_spin_lock_slowpath+0x939/0xc10 [ 199.673540][ C0] ? pv_hash+0xf0/0xf0 [ 199.673541][ C0] ? selinux_socket_sock_rcv_skb+0x650/0x650 [ 199.673542][ C0] _raw_spin_lock_bh+0xeb/0x110 [ 199.673544][ C0] ? _raw_spin_unlock_bh+0x60/0x60 [ 199.673545][ C0] ? _copy_from_user+0x64/0x90 [ 199.673546][ C0] lock_sock_nested+0x1b/0xc0 [ 199.673547][ C0] ? __tipc_sendstream+0xe30/0xe30 [ 199.673549][ C0] tipc_sendstream+0x3f/0x70 [ 199.673550][ C0] __sock_sendmsg+0xb5/0xf0 [ 199.673551][ C0] ____sys_sendmsg+0x694/0x990 [ 199.673552][ C0] ? kernel_sendmsg+0x30/0x30 [ 199.673553][ C0] ? do_recvmmsg+0x570/0x570 [ 199.673555][ C0] ? __kasan_check_write+0x14/0x20 [ 199.673556][ C0] ___sys_sendmsg+0xfc/0x190 [ 199.673557][ C0] ? sendmsg_copy_msghdr+0x110/0x110 [ 199.673558][ C0] ? __local_bh_enable_ip+0x32/0x70 [ 199.673560][ C0] ? _raw_spin_unlock_bh+0x45/0x60 [ 199.673561][ C0] ? release_sock+0x130/0x170 [ 199.673562][ C0] ? sock_setsockopt+0x29e/0x1f70 [ 199.673563][ C0] ? selinux_socket_setsockopt+0x202/0x2f0 [ 199.673565][ C0] ? futex_exit_release+0x200/0x200 [ 199.673566][ C0] ? __fget_light.part.0+0x19d/0x330 [ 199.673567][ C0] ? __fdget+0x8b/0x1d0 [ 199.673569][ C0] ? sockfd_lookup_light+0x1c/0x150 [ 199.673570][ C0] __sys_sendmsg+0xc3/0x160 [ 199.673571][ C0] ? __sys_sendmsg_sock+0x20/0x20 [ 199.673572][ C0] ? debug_smp_processor_id+0x17/0x20 [ 199.673574][ C0] ? fpregs_assert_state_consistent+0x49/0xb0 [ 199.673575][ C0] __x64_sys_sendmsg+0x73/0xb0 [ 199.673576][ C0] ? syscall_exit_to_user_mode+0x2c/0x160 [ 199.673578][ C0] do_syscall_64+0x32/0x50 [ 199.673579][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 199.673580][ C0] RIP: 0033:0x7f65dd65b169 [ 199.673583][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.673585][ C0] RSP: 002b:00007f65dd0cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.673588][ C0] RAX: ffffffffffffffda RBX: 00007f65dd882fa0 RCX: 00007f65dd65b169 [ 199.673590][ C0] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 199.673591][ C0] RBP: 00007f65dd6dda68 R08: 0000000000000000 R09: 0000000000000000 [ 199.673593][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.673594][ C0] R13: 0000000000000000 R14: 00007f65dd882fa0 R15: 00007fff624fbbd8