Warning: Permanently added '10.128.1.242' (ED25519) to the list of known hosts. 2026/05/14 03:13:28 parsed 1 programs [ 49.064464][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 49.064475][ T24] audit: type=1400 audit(1778728409.540:105): avc: denied { unlink } for pid=453 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.104602][ T453] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.552499][ T24] audit: type=1400 audit(1778728410.030:106): avc: denied { create } for pid=462 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.966506][ T24] audit: type=1401 audit(1778728410.440:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 50.004214][ T496] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.011421][ T496] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.019157][ T496] device bridge_slave_0 entered promiscuous mode [ 50.026545][ T496] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.033701][ T496] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.041358][ T496] device bridge_slave_1 entered promiscuous mode [ 50.074794][ T496] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.082426][ T496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.090294][ T496] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.097444][ T496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.114036][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.121965][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.130209][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.140891][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.149578][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.156947][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.164711][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.173931][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.181060][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.193000][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.203347][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.217189][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.228955][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.237345][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.245073][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.253707][ T496] device veth0_vlan entered promiscuous mode [ 50.263383][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.272675][ T496] device veth1_macvtap entered promiscuous mode [ 50.282051][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.292114][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/05/14 03:13:31 executed programs: 0 [ 50.636762][ T24] audit: type=1400 audit(1778728411.110:108): avc: denied { write } for pid=444 comm="syz-execprog" path="pipe:[15783]" dev="pipefs" ino=15783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 50.678469][ T518] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.686127][ T518] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.693779][ T518] device bridge_slave_0 entered promiscuous mode [ 50.700970][ T518] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.708484][ T518] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.716074][ T518] device bridge_slave_1 entered promiscuous mode [ 50.760619][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.768459][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.783968][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.792460][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.801541][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.808719][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.817366][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.829946][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.838549][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.847292][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.854562][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.871891][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.881193][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.899186][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.910793][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.919845][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.928073][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.936786][ T518] device veth0_vlan entered promiscuous mode [ 50.949264][ T518] device veth1_macvtap entered promiscuous mode [ 50.956516][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.968123][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.978732][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.001712][ T24] audit: type=1400 audit(1778728411.470:109): avc: denied { create } for pid=522 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.021721][ T24] audit: type=1400 audit(1778728411.470:110): avc: denied { write } for pid=522 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.063880][ T24] audit: type=1400 audit(1778728411.540:111): avc: denied { setopt } for pid=522 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.152235][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 151.159812][ C1] rcu: 1-...!: (1 GPs behind) idle=0d2/1/0x4000000000000000 softirq=2496/2499 fqs=38 last_accelerate: 9e70/c582 dyntick_enabled: 1 [ 151.176227][ C1] (t=10003 jiffies g=1877 q=77) [ 151.181367][ C1] rcu: rcu_preempt kthread starved for 9927 jiffies! g1877 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 151.192842][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 151.203011][ C1] rcu: RCU grace-period kthread stack dump: [ 151.209033][ C1] task:rcu_preempt state:I stack: 0 pid: 13 ppid: 2 flags:0x00004000 [ 151.218238][ C1] Call Trace: [ 151.221778][ C1] __schedule+0xb53/0x1320 [ 151.226210][ C1] ? __sched_text_start+0x8/0x8 [ 151.231054][ C1] ? __mod_timer+0x7da/0xb50 [ 151.235905][ C1] schedule+0x13c/0x1d0 [ 151.240063][ C1] schedule_timeout+0x159/0x330 [ 151.245019][ C1] ? console_conditional_schedule+0x10/0x10 [ 151.251109][ C1] ? run_local_timers+0x160/0x160 [ 151.256317][ C1] ? prepare_to_swait_event+0x320/0x340 [ 151.261869][ C1] rcu_gp_kthread+0x1045/0x2730 [ 151.266841][ C1] ? dyntick_save_progress_counter+0x1b0/0x1b0 [ 151.273181][ C1] ? rcu_barrier_callback+0x50/0x50 [ 151.278751][ C1] ? __kasan_check_read+0x11/0x20 [ 151.283869][ C1] ? __kthread_parkme+0xb9/0x1c0 [ 151.289193][ C1] kthread+0x346/0x3d0 [ 151.293276][ C1] ? rcu_barrier_callback+0x50/0x50 [ 151.298777][ C1] ? kthread_blkcg+0xd0/0xd0 [ 151.303802][ C1] ret_from_fork+0x1f/0x30 [ 151.309789][ C1] NMI backtrace for cpu 1 [ 151.314338][ C1] CPU: 1 PID: 526 Comm: syz.2.18 Not tainted syzkaller #0 [ 151.322286][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 151.333188][ C1] Call Trace: [ 151.336711][ C1] [ 151.339691][ C1] __dump_stack+0x21/0x24 [ 151.344529][ C1] dump_stack_lvl+0x1a7/0x208 [ 151.349717][ C1] ? show_regs_print_info+0x18/0x18 [ 151.355515][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 151.361568][ C1] ? _raw_spin_lock+0xf0/0xf0 [ 151.366352][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 151.373110][ C1] dump_stack+0x15/0x1c [ 151.377389][ C1] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 151.383592][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 151.390029][ C1] rcu_dump_cpu_stacks+0x19c/0x2c0 [ 151.395464][ C1] rcu_sched_clock_irq+0xf88/0x1880 [ 151.401014][ C1] ? rcutree_dead_cpu+0x310/0x310 [ 151.406053][ C1] ? hrtimer_run_queues+0x166/0x430 [ 151.411264][ C1] update_process_times+0x198/0x200 [ 151.416450][ C1] tick_sched_timer+0x17c/0x240 [ 151.421447][ C1] ? tick_setup_sched_timer+0x450/0x450 [ 151.427180][ C1] __hrtimer_run_queues+0x34f/0x820 [ 151.433164][ C1] ? hrtimer_interrupt+0xdc0/0xdc0 [ 151.438291][ C1] ? ktime_get_update_offsets_now+0x293/0x2b0 [ 151.444453][ C1] hrtimer_interrupt+0x3a6/0xdc0 [ 151.449772][ C1] __sysvec_apic_timer_interrupt+0xfa/0x3f0 [ 151.455939][ C1] asm_call_irq_on_stack+0xf/0x20 [ 151.461148][ C1] [ 151.464467][ C1] sysvec_apic_timer_interrupt+0x85/0xe0 [ 151.470311][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 151.476491][ C1] RIP: 0010:preempt_count_add+0x32/0x1b0 [ 151.482338][ C1] Code: 53 49 bf 00 00 00 00 00 fc ff df 48 c7 c0 c0 18 e8 86 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 01 01 00 00 83 3d 1e 46 a3 05 00 <75> 07 65 8b 05 e1 9a bd 7e 65 01 3d da 9a bd 7e 48 c7 c0 c0 18 e8 [ 151.502566][ C1] RSP: 0018:ffffc900030b69d8 EFLAGS: 00000246 [ 151.509094][ C1] RAX: 0000000000000004 RBX: ffff888128773788 RCX: ffffffff86e81803 [ 151.517633][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000201 [ 151.526695][ C1] RBP: ffffc900030b69f0 R08: ffff888128773783 R09: 1ffff110250ee6f0 [ 151.535496][ C1] R10: dffffc0000000000 R11: ffffed10250ee6f1 R12: dffffc0000000000 [ 151.543760][ C1] R13: 1ffff92000616d40 R14: ffffffff8467c45a R15: dffffc0000000000 [ 151.552375][ C1] ? tipc_sk_rcv+0x37a/0x1dc0 [ 151.557263][ C1] ? tipc_sk_rcv+0x37a/0x1dc0 [ 151.561937][ C1] _raw_spin_trylock_bh+0x6e/0x150 [ 151.567055][ C1] ? _raw_spin_trylock+0x150/0x150 [ 151.572400][ C1] ? tipc_sk_rcv+0x18fe/0x1dc0 [ 151.577163][ C1] tipc_sk_rcv+0x37a/0x1dc0 [ 151.581757][ C1] ? __stack_depot_save+0x47d/0x4c0 [ 151.587142][ C1] ? kasan_set_track+0x5b/0x70 [ 151.592032][ C1] ? kasan_set_track+0x4a/0x70 [ 151.597074][ C1] ? ____kasan_slab_free+0x125/0x160 [ 151.602562][ C1] ? __kasan_slab_free+0x11/0x20 [ 151.607523][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 151.613348][ C1] ? kmem_cache_free+0x100/0x2d0 [ 151.618385][ C1] ? kfree_skbmem+0x10c/0x180 [ 151.623632][ C1] ? kfree_skb+0xc1/0x2f0 [ 151.628156][ C1] ? tipc_msg_reverse+0x698/0x900 [ 151.633353][ C1] ? tipc_node_xmit+0x26c/0xd80 [ 151.638401][ C1] ? tipc_sk_filter_rcv+0x15e5/0x39d0 [ 151.643867][ C1] ? tipc_sk_rcv+0x742/0x1dc0 [ 151.648995][ C1] ? tipc_node_xmit+0x26c/0xd80 [ 151.654056][ C1] ? exit_to_user_mode_prepare+0x76/0xa0 [ 151.660063][ C1] ? syscall_exit_to_user_mode+0x1d/0x40 [ 151.665823][ C1] ? do_syscall_64+0x3d/0x40 [ 151.670570][ C1] ? __skb_queue_purge+0x170/0x170 [ 151.676016][ C1] tipc_node_xmit+0x26c/0xd80 [ 151.680695][ C1] ? kmem_cache_free+0x100/0x2d0 [ 151.685862][ C1] ? ____kasan_slab_free+0x130/0x160 [ 151.691154][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 151.696870][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 151.702692][ C1] ? kfree_skbmem+0x10c/0x180 [ 151.707617][ C1] ? kmem_cache_free+0x100/0x2d0 [ 151.712768][ C1] tipc_node_xmit_skb+0xf7/0x150 [ 151.717968][ C1] ? kfree_skb+0xc1/0x2f0 [ 151.722373][ C1] ? __skb_queue_purge+0x170/0x170 [ 151.727483][ C1] ? trace_tipc_sk_rej_msg+0x2c/0x6d0 [ 151.733121][ C1] tipc_sk_rcv+0x1c46/0x1dc0 [ 151.738211][ C1] ? __fput+0x2fb/0x770 [ 151.742833][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 151.748831][ C1] ? __stack_depot_save+0x47d/0x4c0 [ 151.754034][ C1] ? __skb_queue_purge+0x170/0x170 [ 151.759320][ C1] tipc_node_xmit+0x26c/0xd80 [ 151.764097][ C1] ? is_bpf_text_address+0x177/0x190 [ 151.769511][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 151.775210][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 151.780802][ C1] ? _raw_spin_lock+0xf0/0xf0 [ 151.785691][ C1] tipc_sk_filter_rcv+0x15e5/0x39d0 [ 151.790889][ C1] ? tipc_sk_dump+0xfc0/0xfc0 [ 151.795918][ C1] ? __kasan_check_write+0x14/0x20 [ 151.801050][ C1] ? _raw_spin_lock_bh+0x94/0xf0 [ 151.806258][ C1] tipc_sk_rcv+0x742/0x1dc0 [ 151.810752][ C1] ? kfree_skbmem+0x10c/0x180 [ 151.815564][ C1] ? __skb_queue_purge+0x170/0x170 [ 151.821054][ C1] ? tipc_sk_filter_rcv+0x318b/0x39d0 [ 151.826775][ C1] ? ____fput+0x15/0x20 [ 151.830925][ C1] ? task_work_run+0x127/0x190 [ 151.835881][ C1] tipc_node_xmit+0x26c/0xd80 [ 151.841014][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 151.846654][ C1] tipc_node_distr_xmit+0x2a3/0x3b0 [ 151.851939][ C1] ? tipc_node_xmit_skb+0x150/0x150 [ 151.857314][ C1] tipc_sk_backlog_rcv+0x17d/0x210 [ 151.862527][ C1] ? tipc_sk_timeout+0x990/0x990 [ 151.867470][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 151.873077][ C1] __release_sock+0x146/0x360 [ 151.878104][ C1] ? _raw_write_lock_irq+0xf0/0xf0 [ 151.883572][ C1] release_sock+0x60/0x1b0 [ 151.888088][ C1] tipc_release+0xbd4/0x1490 [ 151.892764][ C1] ? down_read_killable+0xe0/0xe0 [ 151.897886][ C1] sock_close+0xe0/0x270 [ 151.902120][ C1] ? sock_mmap+0xa0/0xa0 [ 151.906568][ C1] __fput+0x2fb/0x770 [ 151.910651][ C1] ____fput+0x15/0x20 [ 151.914734][ C1] task_work_run+0x127/0x190 [ 151.919463][ C1] exit_to_user_mode_loop+0xcb/0xe0 [ 151.925213][ C1] exit_to_user_mode_prepare+0x76/0xa0 [ 151.930675][ C1] syscall_exit_to_user_mode+0x1d/0x40 [ 151.936240][ C1] do_syscall_64+0x3d/0x40 [ 151.940866][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 151.946770][ C1] RIP: 0033:0x7facc518f379 [ 151.951192][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.971502][ C1] RSP: 002b:00007facc4ff4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.980653][ C1] RAX: 00000000000203a0 RBX: 00007facc53dafa0 RCX: 00007facc518f379 [ 151.988754][ C1] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 151.997143][ C1] RBP: 00007facc5222d68 R08: 0000000000000000 R09: 0000000000000000 [ 152.005254][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.013317][ C1] R13: 00007facc53db038 R14: 00007facc53dafa0 R15: 00007fff5cd12ca8 [ 199.107700][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 123s! [syz.2.18:525] [ 199.115741][ C0] Modules linked in: [ 199.119644][ C0] CPU: 0 PID: 525 Comm: syz.2.18 Not tainted syzkaller #0 [ 199.126765][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.137034][ C0] RIP: 0010:kvm_wait+0xce/0x130 [ 199.141900][ C0] Code: 38 f0 75 26 41 f7 c4 00 02 00 00 75 0f 0f 1f 44 00 00 0f 00 2d c3 1c b8 03 f4 eb 0e 0f 1f 44 00 00 0f 00 2d b4 1c b8 03 fb f4 <4c> 89 64 24 18 ff 74 24 18 9d 48 c7 44 24 20 0e 36 e0 45 4b c7 04 [ 199.161967][ C0] RSP: 0018:ffffc900030a79a0 EFLAGS: 00000246 [ 199.168229][ C0] RAX: 0000000000000003 RBX: ffff888128773788 RCX: ffffffff814beeba [ 199.176568][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff888128773788 [ 199.184657][ C0] RBP: ffffc900030a7a50 R08: ffff888128773788 R09: 1ffff110250ee6f1 [ 199.192721][ C0] R10: dffffc0000000000 R11: ffffed10250ee6f2 R12: 0000000000000246 [ 199.200697][ C0] R13: 1ffff110250ee6f1 R14: dffffc0000000000 R15: 1ffff92000614f38 [ 199.208773][ C0] FS: 000055557c32c500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 199.217973][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.224668][ C0] CR2: 00007facc51dcac0 CR3: 00000001182c2000 CR4: 00000000003506b0 [ 199.232933][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.240916][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.248898][ C0] Call Trace: [ 199.252208][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 199.258463][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 199.263593][ C0] ? __pv_queued_spin_lock_slowpath+0x6ba/0xb70 [ 199.269936][ C0] __pv_queued_spin_lock_slowpath+0x714/0xb70 [ 199.276110][ C0] ? __pv_queued_spin_unlock_slowpath+0x280/0x280 [ 199.282638][ C0] ? kasan_save_stack+0x49/0x60 [ 199.287485][ C0] ? __kasan_record_aux_stack+0xd2/0x100 [ 199.293113][ C0] ? kasan_record_aux_stack+0xe/0x10 [ 199.298397][ C0] ? task_work_add+0x27/0x1e0 [ 199.303077][ C0] ? fput+0x1a/0x20 [ 199.306997][ C0] ? filp_close+0x105/0x150 [ 199.311508][ C0] ? __close_range+0x1f4/0x450 [ 199.316347][ C0] ? __x64_sys_close_range+0x7a/0x90 [ 199.321759][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 199.327423][ C0] _raw_spin_lock_bh+0xe4/0xf0 [ 199.332428][ C0] ? _raw_spin_lock_irq+0xf0/0xf0 [ 199.337558][ C0] lock_sock_nested+0x90/0x2a0 [ 199.342328][ C0] ? sock_init_data+0xc0/0xc0 [ 199.347008][ C0] ? fsnotify+0x19ab/0x1a70 [ 199.351583][ C0] tipc_release+0x56/0x1490 [ 199.356091][ C0] ? down_read_killable+0xe0/0xe0 [ 199.361130][ C0] sock_close+0xe0/0x270 [ 199.365536][ C0] ? sock_mmap+0xa0/0xa0 [ 199.369793][ C0] __fput+0x2fb/0x770 [ 199.373802][ C0] ____fput+0x15/0x20 [ 199.377787][ C0] task_work_run+0x127/0x190 [ 199.382553][ C0] exit_to_user_mode_loop+0xcb/0xe0 [ 199.387753][ C0] exit_to_user_mode_prepare+0x76/0xa0 [ 199.393401][ C0] syscall_exit_to_user_mode+0x1d/0x40 [ 199.398947][ C0] do_syscall_64+0x3d/0x40 [ 199.403454][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 199.409525][ C0] RIP: 0033:0x7facc518f379 [ 199.414344][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.434294][ C0] RSP: 002b:00007fff5cd12e08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 199.442725][ C0] RAX: 0000000000000000 RBX: 00007facc53dcda0 RCX: 00007facc518f379 [ 199.450713][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 199.458823][ C0] RBP: 00007facc53dcda0 R08: 0000000000000006 R09: 0000000000000000 [ 199.467258][ C0] R10: 00007facc53dccb0 R11: 0000000000000246 R12: 000000000000caaf [ 199.475328][ C0] R13: 00007facc53db09c R14: 000000000000c7d4 R15: 00007facc53db090 [ 199.483320][ C0] Sending NMI from CPU 0 to CPUs 1: [ 199.489291][ C1] NMI backtrace for cpu 1 [ 199.489296][ C1] CPU: 1 PID: 526 Comm: syz.2.18 Not tainted syzkaller #0 [ 199.489301][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.489312][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x30/0x90 [ 199.489321][ C1] Code: 45 08 65 48 8b 15 30 b2 9d 7e 65 8b 0d 35 b2 9d 7e f7 c1 00 01 ff 00 74 11 f7 c1 00 01 00 00 74 5b 83 ba dc 0a 00 00 00 74 52 <8b> 8a b8 0a 00 00 83 f9 03 75 47 48 8b 8a c0 0a 00 00 44 8b 8a bc [ 199.489325][ C1] RSP: 0018:ffffc900030b6a90 EFLAGS: 00000246 [ 199.489332][ C1] RAX: ffffffff8467c340 RBX: dffffc0000000000 RCX: 0000000000000402 [ 199.489336][ C1] RDX: ffff888118e24f00 RSI: 00000000c00576b6 RDI: 0000000000000000 [ 199.489340][ C1] RBP: ffffc900030b6a90 R08: 0000000000000003 R09: 0000000000000004 [ 199.489345][ C1] R10: dffffc0000000000 R11: fffff52000616d44 R12: ffff888118c91900 [ 199.489349][ C1] R13: ffff888128773780 R14: 00000000c00576b6 R15: 00000000c00576b6 [ 199.489353][ C1] FS: 00007facc4ff46c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 199.489357][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.489361][ C1] CR2: 00007facc4fd2ff8 CR3: 00000001182c2000 CR4: 00000000003506a0 [ 199.489365][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.489369][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.489371][ C1] Call Trace: [ 199.489374][ C1] tipc_sk_rcv+0x260/0x1dc0 [ 199.489377][ C1] ? __stack_depot_save+0x47d/0x4c0 [ 199.489380][ C1] ? kasan_set_track+0x5b/0x70 [ 199.489383][ C1] ? kasan_set_track+0x4a/0x70 [ 199.489386][ C1] ? ____kasan_slab_free+0x125/0x160 [ 199.489389][ C1] ? __kasan_slab_free+0x11/0x20 [ 199.489392][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 199.489395][ C1] ? kmem_cache_free+0x100/0x2d0 [ 199.489398][ C1] ? kfree_skbmem+0x10c/0x180 [ 199.489401][ C1] ? kfree_skb+0xc1/0x2f0 [ 199.489404][ C1] ? tipc_msg_reverse+0x698/0x900 [ 199.489406][ C1] ? tipc_node_xmit+0x26c/0xd80 [ 199.489410][ C1] ? tipc_sk_filter_rcv+0x15e5/0x39d0 [ 199.489412][ C1] ? tipc_sk_rcv+0x742/0x1dc0 [ 199.489415][ C1] ? tipc_node_xmit+0x26c/0xd80 [ 199.489419][ C1] ? exit_to_user_mode_prepare+0x76/0xa0 [ 199.489422][ C1] ? syscall_exit_to_user_mode+0x1d/0x40 [ 199.489425][ C1] ? do_syscall_64+0x3d/0x40 [ 199.489427][ C1] ? __skb_queue_purge+0x170/0x170 [ 199.489430][ C1] tipc_node_xmit+0x26c/0xd80 [ 199.489433][ C1] ? kmem_cache_free+0x100/0x2d0 [ 199.489436][ C1] ? ____kasan_slab_free+0x130/0x160 [ 199.489440][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 199.489443][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 199.489445][ C1] ? kfree_skbmem+0x10c/0x180 [ 199.489448][ C1] ? kmem_cache_free+0x100/0x2d0 [ 199.489451][ C1] tipc_node_xmit_skb+0xf7/0x150 [ 199.489454][ C1] ? kfree_skb+0xc1/0x2f0 [ 199.489457][ C1] ? __skb_queue_purge+0x170/0x170 [ 199.489460][ C1] ? trace_tipc_sk_rej_msg+0x2c/0x6d0 [ 199.489463][ C1] tipc_sk_rcv+0x1c46/0x1dc0 [ 199.489466][ C1] ? __fput+0x2fb/0x770 [ 199.489469][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 199.489472][ C1] ? __stack_depot_save+0x47d/0x4c0 [ 199.489475][ C1] ? __skb_queue_purge+0x170/0x170 [ 199.489478][ C1] tipc_node_xmit+0x26c/0xd80 [ 199.489481][ C1] ? is_bpf_text_address+0x177/0x190 [ 199.489484][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 199.489487][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 199.489490][ C1] ? _raw_spin_lock+0xf0/0xf0 [ 199.489493][ C1] tipc_sk_filter_rcv+0x15e5/0x39d0 [ 199.489496][ C1] ? tipc_sk_dump+0xfc0/0xfc0 [ 199.489498][ C1] ? __kasan_check_write+0x14/0x20 [ 199.489501][ C1] ? _raw_spin_lock_bh+0x94/0xf0 [ 199.489504][ C1] tipc_sk_rcv+0x742/0x1dc0 [ 199.489507][ C1] ? kfree_skbmem+0x10c/0x180 [ 199.489510][ C1] ? __skb_queue_purge+0x170/0x170 [ 199.489513][ C1] ? tipc_sk_filter_rcv+0x318b/0x39d0 [ 199.489516][ C1] ? ____fput+0x15/0x20 [ 199.489519][ C1] ? task_work_run+0x127/0x190 [ 199.489521][ C1] tipc_node_xmit+0x26c/0xd80 [ 199.489524][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 199.489527][ C1] tipc_node_distr_xmit+0x2a3/0x3b0 [ 199.489530][ C1] ? tipc_node_xmit_skb+0x150/0x150 [ 199.489533][ C1] tipc_sk_backlog_rcv+0x17d/0x210 [ 199.489536][ C1] ? tipc_sk_timeout+0x990/0x990 [ 199.489540][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 199.489542][ C1] __release_sock+0x146/0x360 [ 199.489545][ C1] ? _raw_write_lock_irq+0xf0/0xf0 [ 199.489548][ C1] release_sock+0x60/0x1b0 [ 199.489551][ C1] tipc_release+0xbd4/0x1490 [ 199.489554][ C1] ? down_read_killable+0xe0/0xe0 [ 199.489556][ C1] sock_close+0xe0/0x270 [ 199.489559][ C1] ? sock_mmap+0xa0/0xa0 [ 199.489562][ C1] __fput+0x2fb/0x770 [ 199.489565][ C1] ____fput+0x15/0x20 [ 199.489568][ C1] task_work_run+0x127/0x190 [ 199.489571][ C1] exit_to_user_mode_loop+0xcb/0xe0 [ 199.489574][ C1] exit_to_user_mode_prepare+0x76/0xa0 [ 199.489577][ C1] syscall_exit_to_user_mode+0x1d/0x40 [ 199.489580][ C1] do_syscall_64+0x3d/0x40 [ 199.489583][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 199.489586][ C1] RIP: 0033:0x7facc518f379 [ 199.489594][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.489598][ C1] RSP: 002b:00007facc4ff4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.489605][ C1] RAX: 00000000000203a0 RBX: 00007facc53dafa0 RCX: 00007facc518f379 [ 199.489609][ C1] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 199.489613][ C1] RBP: 00007facc5222d68 R08: 0000000000000000 R09: 0000000000000000 [ 199.489617][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.489621][ C1] R13: 00007facc53db038 R14: 00007facc53dafa0 R15: 00007fff5cd12ca8