Warning: Permanently added '10.128.0.141' (ED25519) to the list of known hosts. 2026/02/07 21:19:04 parsed 1 programs [ 44.821471][ T30] audit: type=1400 audit(1770499144.770:105): avc: denied { unlink } for pid=395 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 44.849025][ T395] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.217448][ T30] audit: type=1401 audit(1770499145.160:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 45.711570][ T432] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.718674][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.732319][ T432] device bridge_slave_0 entered promiscuous mode [ 45.755872][ T432] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.763058][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.771427][ T432] device bridge_slave_1 entered promiscuous mode [ 45.861167][ T432] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.868257][ T432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.875575][ T432] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.882623][ T432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.908027][ T436] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.915972][ T436] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.924525][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.932039][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.940903][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.949062][ T436] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.956203][ T436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.964611][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.972897][ T436] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.979918][ T436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.991423][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.000842][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.013350][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.024169][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.032458][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.039941][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.048040][ T432] device veth0_vlan entered promiscuous mode 2026/02/07 21:19:06 executed programs: 0 [ 46.057492][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.066539][ T432] device veth1_macvtap entered promiscuous mode [ 46.075408][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.085023][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.238795][ T465] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.245892][ T465] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.253251][ T465] device bridge_slave_0 entered promiscuous mode [ 46.268620][ T465] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.275777][ T465] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.283145][ T465] device bridge_slave_1 entered promiscuous mode [ 46.312551][ T469] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.319620][ T469] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.327350][ T469] device bridge_slave_0 entered promiscuous mode [ 46.338741][ T467] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.347575][ T467] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.355240][ T467] device bridge_slave_0 entered promiscuous mode [ 46.362225][ T467] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.369262][ T467] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.376796][ T467] device bridge_slave_1 entered promiscuous mode [ 46.386974][ T469] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.394063][ T469] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.401395][ T469] device bridge_slave_1 entered promiscuous mode [ 46.485169][ T471] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.492258][ T471] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.499560][ T471] device bridge_slave_0 entered promiscuous mode [ 46.507932][ T471] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.515038][ T471] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.522444][ T471] device bridge_slave_1 entered promiscuous mode [ 46.535234][ T472] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.542325][ T472] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.549759][ T472] device bridge_slave_0 entered promiscuous mode [ 46.557061][ T472] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.564115][ T472] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.571545][ T472] device bridge_slave_1 entered promiscuous mode [ 46.770081][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.777519][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.806393][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.813910][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.843115][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.851399][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.859540][ T436] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.866595][ T436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.874029][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.882445][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.890994][ T436] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.898013][ T436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.905507][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.912922][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.920321][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.928789][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.936999][ T436] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.944056][ T436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.951594][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.960045][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.968444][ T436] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.975470][ T436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.982928][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.991281][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.999431][ T436] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.006506][ T436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.014119][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.022462][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.030544][ T436] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.037581][ T436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.044909][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.053025][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.061130][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.068903][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.076529][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.090107][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.098229][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.106192][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.114342][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.122265][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.129602][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.137229][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.145877][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.153894][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.161933][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.187899][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.195912][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.203968][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.213233][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.221479][ T436] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.228574][ T436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.235928][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.244502][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.252698][ T436] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.259711][ T436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.267293][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.275333][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.283399][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.290981][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.298357][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.313601][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.321977][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.330271][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.339045][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.347614][ T436] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.354746][ T436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.363688][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.371364][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.386052][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.394096][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.401718][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.411031][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.419474][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.427741][ T436] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.434767][ T436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.450768][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.459166][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.467470][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.475113][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.482753][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.490732][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.498379][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.506377][ T469] device veth0_vlan entered promiscuous mode [ 47.522022][ T471] device veth0_vlan entered promiscuous mode [ 47.528700][ T465] device veth0_vlan entered promiscuous mode [ 47.543926][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.552186][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.567025][ T467] device veth0_vlan entered promiscuous mode [ 47.574690][ T469] device veth1_macvtap entered promiscuous mode [ 47.581676][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.590039][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.598292][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.606044][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.614569][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.625290][ T471] device veth1_macvtap entered promiscuous mode [ 47.639097][ T465] device veth1_macvtap entered promiscuous mode [ 47.645749][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.654040][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.662385][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.669890][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.678124][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.686325][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.710741][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.718877][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.729486][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.738594][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.747059][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.755437][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.765093][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.773393][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.787509][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.796500][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.804960][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.813307][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.821851][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.830164][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.844533][ T467] device veth1_macvtap entered promiscuous mode [ 47.856081][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.864876][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.873471][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.882158][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.890189][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.898375][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.905930][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.916647][ T472] device veth0_vlan entered promiscuous mode [ 47.937710][ T30] audit: type=1400 audit(1770499147.880:107): avc: denied { create } for pid=522 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.957701][ T30] audit: type=1400 audit(1770499147.880:108): avc: denied { setopt } for pid=522 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.978925][ T30] audit: type=1400 audit(1770499147.880:109): avc: denied { write } for pid=522 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.980463][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.999160][ T30] audit: type=1400 audit(1770499147.910:110): avc: denied { read } for pid=525 comm="syz.6.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.026624][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.035407][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.045329][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.060699][ T472] device veth1_macvtap entered promiscuous mode [ 48.070273][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.078639][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.086985][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.103297][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.111937][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.120316][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.128679][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.802230][ T45] device bridge_slave_1 left promiscuous mode [ 48.808475][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.815964][ T45] device bridge_slave_0 left promiscuous mode [ 48.822229][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.829866][ T45] device veth1_macvtap left promiscuous mode [ 48.836112][ T45] device veth0_vlan left promiscuous mode 2026/02/07 21:19:11 executed programs: 30 2026/02/07 21:19:16 executed programs: 60 2026/02/07 21:19:21 executed programs: 90 2026/02/07 21:19:26 executed programs: 120 2026/02/07 21:19:31 executed programs: 150 2026/02/07 21:19:36 executed programs: 180 [ 221.091495][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 143s! [syz.5.205:1090] [ 221.099750][ C0] Modules linked in: [ 221.103661][ C0] CPU: 0 PID: 1090 Comm: syz.5.205 Not tainted syzkaller #0 [ 221.111022][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 221.121340][ C0] RIP: 0010:kvm_wait+0x105/0x150 [ 221.126285][ C0] Code: 1d d6 03 f4 eb 87 fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d ad 1d d6 03 fb f4 5e ff ff ff fb e9 58 ff ff ff e8 cb 12 7d 03 89 f9 80 e1 07 38 [ 221.146152][ C0] RSP: 0018:ffffc90001c276c0 EFLAGS: 00000246 [ 221.152213][ C0] RAX: 0000000000000003 RBX: ffff88810abdad88 RCX: ffffffff81500889 [ 221.160261][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff88810abdad88 [ 221.168222][ C0] RBP: ffffc90001c27750 R08: ffff88810abdad88 R09: 1ffff1102157b5b1 [ 221.176187][ C0] R10: dffffc0000000000 R11: ffffed102157b5b2 R12: 1ffff1103ee00001 [ 221.184147][ C0] R13: ffff8881f7038ad4 R14: dffffc0000000000 R15: 1ffff92000384ed8 [ 221.192912][ C0] FS: 00007f7a13ed96c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 221.201835][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 221.208429][ C0] CR2: 00007f7a13eb8d58 CR3: 00000001220a1000 CR4: 00000000003506b0 [ 221.216584][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 221.224554][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 221.232605][ C0] Call Trace: [ 221.235970][ C0] [ 221.238910][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 221.244050][ C0] ? __pv_queued_spin_lock_slowpath+0x5b9/0x9c0 [ 221.250288][ C0] __pv_queued_spin_lock_slowpath+0x60f/0x9c0 [ 221.256405][ C0] ? __pv_queued_spin_unlock_slowpath+0x300/0x300 [ 221.262809][ C0] ? avc_has_perm+0x163/0x250 [ 221.267481][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 221.272932][ C0] _raw_spin_lock_bh+0xe4/0xf0 [ 221.277688][ C0] ? _raw_spin_lock_irq+0xf0/0xf0 [ 221.282704][ C0] ? selinux_socket_sendmsg+0x22f/0x340 [ 221.288244][ C0] lock_sock_nested+0x95/0x2a0 [ 221.293120][ C0] ? sock_init_data+0xc0/0xc0 [ 221.297787][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 221.302725][ C0] ? _raw_spin_unlock_bh+0x51/0x60 [ 221.308014][ C0] tipc_sendstream+0x47/0x70 [ 221.312824][ C0] ? tipc_getsockopt+0x4d0/0x4d0 [ 221.317774][ C0] ____sys_sendmsg+0x5b7/0x8f0 [ 221.322533][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 221.327645][ C0] ? lock_sock_nested+0x21c/0x2a0 [ 221.332661][ C0] ? import_iovec+0x7c/0xb0 [ 221.337154][ C0] ___sys_sendmsg+0x236/0x2e0 [ 221.341827][ C0] ? __sys_sendmsg+0x280/0x280 [ 221.346585][ C0] ? memcpy+0x56/0x70 [ 221.350560][ C0] ? __fdget+0x1a1/0x230 [ 221.354794][ C0] __x64_sys_sendmsg+0x206/0x2f0 [ 221.359806][ C0] ? ___sys_sendmsg+0x2e0/0x2e0 [ 221.364657][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 221.370717][ C0] x64_sys_call+0x4b/0x9a0 [ 221.375122][ C0] do_syscall_64+0x4c/0xa0 [ 221.379534][ C0] ? clear_bhb_loop+0x50/0xa0 [ 221.384199][ C0] ? clear_bhb_loop+0x50/0xa0 [ 221.388870][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 221.394754][ C0] RIP: 0033:0x7f7a14471479 [ 221.399171][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.419215][ C0] RSP: 002b:00007f7a13ed9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.427632][ C0] RAX: ffffffffffffffda RBX: 00007f7a1469ffa0 RCX: 00007f7a14471479 [ 221.435599][ C0] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 221.443589][ C0] RBP: 00007f7a145021bc R08: 0000000000000000 R09: 0000000000000000 [ 221.451553][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.459520][ C0] R13: 0000000000000000 R14: 00007f7a1469ffa0 R15: 00007ffd701d8228 [ 221.467501][ C0] [ 221.470752][ C0] Sending NMI from CPU 0 to CPUs 1: [ 221.476097][ C1] NMI backtrace for cpu 1 [ 221.476106][ C1] CPU: 1 PID: 1091 Comm: syz.5.205 Not tainted syzkaller #0 [ 221.476121][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 221.476129][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60 [ 221.476153][ C1] Code: c0 a0 98 7e 65 8b 15 c1 a0 98 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 5c 0b 00 00 00 74 2c 8b 91 38 0b 00 00 <83> fa 02 75 21 48 8b 91 40 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 3c [ 221.476164][ C1] RSP: 0018:ffffc90001d66390 EFLAGS: 00000246 [ 221.476183][ C1] RAX: ffffffff84982a48 RBX: 0000000000000005 RCX: ffff88811a838000 [ 221.476194][ C1] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 221.476202][ C1] RBP: ffffc90001d66390 R08: ffff88810abdad83 R09: 1ffff1102157b5b0 [ 221.476213][ C1] R10: dffffc0000000000 R11: ffffed102157b5b1 R12: ffff88810abdad00 [ 221.476224][ C1] R13: dffffc0000000000 R14: ffff88810abdad80 R15: 00000000f3cb00dd [ 221.476235][ C1] FS: 00007f7a13eb86c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 221.476248][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 221.476258][ C1] CR2: 00007f7a13eb7ff8 CR3: 00000001220a1000 CR4: 00000000003506a0 [ 221.476271][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 221.476279][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 221.476293][ C1] Call Trace: [ 221.476298][ C1] [ 221.476303][ C1] tipc_sk_rcv+0x1a78/0x2c20 [ 221.476318][ C1] ? stack_trace_save+0xa6/0xf0 [ 221.476336][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 221.476354][ C1] ? kasan_set_track+0x5b/0x70 [ 221.476368][ C1] ? kasan_set_free_info+0x23/0x40 [ 221.476382][ C1] ? tipc_sk_rcv+0x1b82/0x2c20 [ 221.476395][ C1] ? tipc_sk_proto_rcv+0xa65/0x1560 [ 221.476412][ C1] ? tipc_sk_backlog_rcv+0x17d/0x210 [ 221.476425][ C1] ? __release_sock+0x17c/0x3f0 [ 221.476440][ C1] ? release_sock+0x60/0x1b0 [ 221.476453][ C1] ? __skb_queue_purge+0x170/0x170 [ 221.476465][ C1] ? x64_sys_call+0x705/0x9a0 [ 221.476480][ C1] ? do_syscall_64+0x4c/0xa0 [ 221.476499][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 221.476518][ C1] tipc_node_xmit+0x26c/0xd80 [ 221.476535][ C1] ? debug_smp_processor_id+0x17/0x20 [ 221.476548][ C1] ? kasan_quarantine_put+0x34/0x190 [ 221.476563][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 221.476578][ C1] ? ____kasan_slab_free+0x130/0x160 [ 221.476593][ C1] ? __kasan_slab_free+0x11/0x20 [ 221.476606][ C1] ? kfree_skbmem+0x10c/0x180 [ 221.476622][ C1] tipc_node_distr_xmit+0x2a3/0x3b0 [ 221.476639][ C1] ? tipc_node_xmit_skb+0x150/0x150 [ 221.476657][ C1] tipc_sk_rcv+0x19f7/0x2c20 [ 221.476674][ C1] ? __skb_queue_purge+0x170/0x170 [ 221.476687][ C1] ? tipc_recvstream+0x1f7/0xe80 [ 221.476701][ C1] ? __stack_depot_save+0x442/0x480 [ 221.476719][ C1] tipc_node_xmit+0x26c/0xd80 [ 221.476735][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 221.476753][ C1] tipc_sk_push_backlog+0x4dd/0x790 [ 221.476767][ C1] tipc_sk_proto_rcv+0xa65/0x1560 [ 221.476782][ C1] ? tipc_sk_filter_rcv+0x2cb0/0x2cb0 [ 221.476796][ C1] ? __kasan_check_write+0x14/0x20 [ 221.476810][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 221.476824][ C1] ? _raw_spin_lock+0xf0/0xf0 [ 221.476839][ C1] tipc_sk_filter_rcv+0x2ac0/0x2cb0 [ 221.476852][ C1] ? stack_trace_save+0xa6/0xf0 [ 221.476866][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 221.476881][ C1] ? __stack_depot_save+0x442/0x480 [ 221.476897][ C1] ? kasan_set_track+0x5b/0x70 [ 221.476909][ C1] ? kasan_set_track+0x4a/0x70 [ 221.476921][ C1] ? kasan_set_free_info+0x23/0x40 [ 221.476935][ C1] ? ____kasan_slab_free+0x125/0x160 [ 221.476952][ C1] ? __kasan_slab_free+0x11/0x20 [ 221.476965][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 221.476981][ C1] ? kmem_cache_free+0x100/0x320 [ 221.476996][ C1] ? kfree_skbmem+0x10c/0x180 [ 221.477010][ C1] ? kfree_skb+0xc1/0x2f0 [ 221.477024][ C1] ? tipc_msg_reverse+0x698/0x900 [ 221.477038][ C1] ? tipc_sk_filter_rcv+0xc05/0x2cb0 [ 221.477051][ C1] ? tipc_sk_backlog_rcv+0x117/0x210 [ 221.477064][ C1] ? __release_sock+0x17c/0x3f0 [ 221.477077][ C1] ? release_sock+0x60/0x1b0 [ 221.477096][ C1] ? tipc_recvstream+0x1f7/0xe80 [ 221.477108][ C1] ? ____sys_recvmsg+0x2cd/0x5e0 [ 221.477124][ C1] ? __x64_sys_recvmsg+0x203/0x2f0 [ 221.477136][ C1] ? x64_sys_call+0x705/0x9a0 [ 221.477149][ C1] ? do_syscall_64+0x4c/0xa0 [ 221.477164][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 221.477181][ C1] ? tipc_sk_publish+0x470/0x470 [ 221.477194][ C1] ? __kasan_check_write+0x14/0x20 [ 221.477209][ C1] ? _raw_spin_lock_bh+0x94/0xf0 [ 221.477225][ C1] tipc_sk_rcv+0x794/0x2c20 [ 221.477239][ C1] ? kmem_cache_free+0x100/0x320 [ 221.477256][ C1] ? __skb_queue_purge+0x170/0x170 [ 221.477270][ C1] ? tipc_sk_filter_rcv+0x2a3e/0x2cb0 [ 221.477284][ C1] tipc_node_xmit+0x26c/0xd80 [ 221.477301][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 221.477318][ C1] tipc_node_distr_xmit+0x2a3/0x3b0 [ 221.477335][ C1] ? tipc_node_xmit_skb+0x150/0x150 [ 221.477350][ C1] ? ___sys_recvmsg+0x21a/0x5c0 [ 221.477362][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 221.477380][ C1] tipc_sk_backlog_rcv+0x17d/0x210 [ 221.477394][ C1] ? tipc_sk_timeout+0x990/0x990 [ 221.477406][ C1] ? __kasan_check_write+0x14/0x20 [ 221.477422][ C1] __release_sock+0x17c/0x3f0 [ 221.477436][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 221.477451][ C1] release_sock+0x60/0x1b0 [ 221.477464][ C1] tipc_wait_for_rcvmsg+0x2d7/0x5e0 [ 221.477479][ C1] ? tsk_importance+0x150/0x150 [ 221.477493][ C1] ? wait_woken+0x170/0x170 [ 221.477506][ C1] ? kfree_skbmem+0x10c/0x180 [ 221.477520][ C1] ? tsk_advance_rx_queue+0x125/0x260 [ 221.477534][ C1] tipc_recvstream+0x1f7/0xe80 [ 221.477549][ C1] ? tipc_sendstream+0x70/0x70 [ 221.477562][ C1] ____sys_recvmsg+0x2cd/0x5e0 [ 221.477579][ C1] ? __sys_recvmsg_sock+0x50/0x50 [ 221.477593][ C1] ? memset+0x35/0x40 [ 221.477608][ C1] ? import_iovec+0x7c/0xb0 [ 221.477623][ C1] ___sys_recvmsg+0x21a/0x5c0 [ 221.477636][ C1] ? __sys_recvmsg+0x270/0x270 [ 221.477655][ C1] ? __fdget+0x1a1/0x230 [ 221.477671][ C1] __x64_sys_recvmsg+0x203/0x2f0 [ 221.477684][ C1] ? ___sys_recvmsg+0x5c0/0x5c0 [ 221.477698][ C1] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 221.477716][ C1] x64_sys_call+0x705/0x9a0 [ 221.477729][ C1] do_syscall_64+0x4c/0xa0 [ 221.477743][ C1] ? clear_bhb_loop+0x50/0xa0 [ 221.477755][ C1] ? clear_bhb_loop+0x50/0xa0 [ 221.477768][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 221.477783][ C1] RIP: 0033:0x7f7a14471479 [ 221.477797][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.477808][ C1] RSP: 002b:00007f7a13eb8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 221.477823][ C1] RAX: ffffffffffffffda RBX: 00007f7a146a0080 RCX: 00007f7a14471479 [ 221.477833][ C1] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 221.477841][ C1] RBP: 00007f7a145021bc R08: 0000000000000000 R09: 0000000000000000 [ 221.477850][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.477859][ C1] R13: 0000000000000001 R14: 00007f7a146a0080 R15: 00007ffd701d8228 [ 221.477871][ C1]