Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. 2025/08/27 16:22:38 parsed 1 programs [ 48.085074][ T28] audit: type=1400 audit(1756311759.468:106): avc: denied { unlink } for pid=399 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 48.163148][ T399] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.052511][ T28] audit: type=1401 audit(1756311760.428:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 49.112889][ T436] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.120134][ T436] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.127711][ T436] device bridge_slave_0 entered promiscuous mode [ 49.135340][ T436] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.142632][ T436] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.150096][ T436] device bridge_slave_1 entered promiscuous mode [ 49.189005][ T436] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.196115][ T436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.203386][ T436] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.210542][ T436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.227608][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.235393][ T427] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.242689][ T427] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.251787][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.260055][ T427] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.267219][ T427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.276637][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.285245][ T427] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.292377][ T427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.304442][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.313839][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.328004][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.338790][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.347036][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.354425][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.362657][ T436] device veth0_vlan entered promiscuous mode [ 49.374748][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.383867][ T436] device veth1_macvtap entered promiscuous mode [ 49.392906][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.404761][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.503134][ T28] audit: type=1400 audit(1756311760.878:108): avc: denied { create } for pid=456 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 2025/08/27 16:22:41 executed programs: 0 [ 49.839747][ T469] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.846987][ T469] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.854663][ T469] device bridge_slave_0 entered promiscuous mode [ 49.865984][ T469] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.873149][ T469] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.880610][ T469] device bridge_slave_1 entered promiscuous mode [ 49.925419][ T469] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.932504][ T469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.939843][ T469] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.946888][ T469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.964157][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.971916][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.979908][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.994064][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.002458][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.009541][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.018502][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.026691][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.033853][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.051586][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.060789][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.073741][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.085984][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.093982][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.101612][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.112155][ T469] device veth0_vlan entered promiscuous mode [ 50.122353][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.131587][ T469] device veth1_macvtap entered promiscuous mode [ 50.140895][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.153937][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.177806][ T28] audit: type=1400 audit(1756311761.558:109): avc: denied { create } for pid=479 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.197980][ T28] audit: type=1400 audit(1756311761.558:110): avc: denied { write } for pid=479 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.217628][ T28] audit: type=1400 audit(1756311761.558:111): avc: denied { setopt } for pid=479 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.895962][ T43] device bridge_slave_1 left promiscuous mode [ 50.902226][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.910051][ T43] device bridge_slave_0 left promiscuous mode [ 50.916581][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.925347][ T43] device veth1_macvtap left promiscuous mode [ 50.931489][ T43] device veth0_vlan left promiscuous mode [ 154.274509][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 154.281209][ C0] rcu: 0-...!: (9999 ticks this GP) idle=8824/1/0x4000000000000000 softirq=4986/4986 fqs=1 [ 154.291628][ C0] (t=10000 jiffies g=3157 q=274 ncpus=2) [ 154.297341][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 9997 jiffies! g3157 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 154.309575][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=929 [ 154.317297][ C0] rcu: rcu_preempt kthread starved for 9998 jiffies! g3157 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 154.328486][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 154.338445][ C0] rcu: RCU grace-period kthread stack dump: [ 154.344368][ C0] task:rcu_preempt state:I stack:28528 pid:14 ppid:2 flags:0x00004000 [ 154.353593][ C0] Call Trace: [ 154.356952][ C0] [ 154.359899][ C0] __schedule+0xb87/0x14e0 [ 154.364370][ C0] ? release_firmware_map_entry+0x194/0x194 [ 154.370276][ C0] ? __mod_timer+0x7ae/0xb30 [ 154.374874][ C0] schedule+0xbd/0x170 [ 154.379026][ C0] schedule_timeout+0x12c/0x2e0 [ 154.383919][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 154.389396][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 154.394897][ C0] ? __cfi_process_timeout+0x10/0x10 [ 154.400180][ C0] ? prepare_to_swait_event+0x308/0x320 [ 154.405726][ C0] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 154.410577][ C0] ? __cfi_dyntick_save_progress_counter+0x10/0x10 [ 154.417086][ C0] ? rcu_gp_init+0xf10/0xf10 [ 154.421762][ C0] rcu_gp_kthread+0x95/0x370 [ 154.426359][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 154.431583][ C0] ? __kasan_check_read+0x11/0x20 [ 154.436611][ C0] ? __kthread_parkme+0x142/0x180 [ 154.441681][ C0] kthread+0x281/0x320 [ 154.445744][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 154.450941][ C0] ? __cfi_kthread+0x10/0x10 [ 154.455525][ C0] ret_from_fork+0x1f/0x30 [ 154.459944][ C0] [ 154.462959][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 154.469278][ C0] Sending NMI from CPU 0 to CPUs 1: [ 154.474490][ C1] NMI backtrace for cpu 1 [ 154.474508][ C1] CPU: 1 PID: 1219 Comm: syz.2.263 Not tainted syzkaller #0 [ 154.474524][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.474536][ C1] RIP: 0010:__update_load_avg_cfs_rq+0x0/0x2f0 [ 154.474563][ C1] Code: 4c 89 f7 e8 32 f8 63 00 e9 b1 fe ff ff e8 54 0f b0 ff e9 54 ff ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 b8 63 80 18 8a <55> 48 89 e5 41 57 41 56 41 55 41 54 53 50 48 89 f3 48 89 7d d0 49 [ 154.474576][ C1] RSP: 0018:ffffc900001b0ab0 EFLAGS: 00000046 [ 154.474590][ C1] RAX: 0000000000000000 RBX: ffff888117af4cc4 RCX: b2b3042d65e09700 [ 154.474601][ C1] RDX: 00000000000000a0 RSI: ffff888117af4c00 RDI: 00000023c9fd63cf [ 154.474612][ C1] RBP: ffffc900001b0b50 R08: 0000000000000009 R09: 0000000000000358 [ 154.474622][ C1] R10: ffff88810bde29d8 R11: ffffffff814ecd70 R12: ffff88810bde2900 [ 154.474634][ C1] R13: dffffc0000000000 R14: 1ffff11022f5e998 R15: ffff888117af4c00 [ 154.474647][ C1] FS: 00007fdb1bbf76c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 154.474661][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.474673][ C1] CR2: 00007fdb1bbf6f98 CR3: 000000011b7c1000 CR4: 00000000003506a0 [ 154.474688][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 154.474697][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 154.474707][ C1] Call Trace: [ 154.474712][ C1] [ 154.474717][ C1] ? update_load_avg+0x4c2/0x13f0 [ 154.474739][ C1] task_tick_fair+0xf9/0x8a0 [ 154.474755][ C1] ? __cfi_task_tick_fair+0x10/0x10 [ 154.474769][ C1] ? update_irq_load_avg+0x10f/0x350 [ 154.474795][ C1] ? update_rq_clock+0x1c1/0x5c0 [ 154.474811][ C1] scheduler_tick+0x163/0x480 [ 154.474832][ C1] update_process_times+0x17c/0x1b0 [ 154.474851][ C1] tick_sched_timer+0x17c/0x240 [ 154.474876][ C1] ? __cfi_tick_sched_timer+0x10/0x10 [ 154.474991][ C1] __hrtimer_run_queues+0x3cd/0x9f0 [ 154.475018][ C1] ? hrtimer_interrupt+0x8c0/0x8c0 [ 154.475038][ C1] ? ktime_get_update_offsets_now+0x30c/0x320 [ 154.475057][ C1] hrtimer_interrupt+0x3c7/0x8c0 [ 154.475081][ C1] __sysvec_apic_timer_interrupt+0x11e/0x440 [ 154.475103][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 154.475122][ C1] [ 154.475127][ C1] [ 154.475136][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 154.475154][ C1] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x1/0x17 [ 154.475174][ C1] Code: cc 00 00 cc cc 55 48 89 e5 51 52 56 57 41 50 41 51 41 52 41 53 e8 bb 09 00 00 41 5b 41 5a 41 59 41 58 5f 5e 5a 59 5d c3 90 55 <48> 89 e5 52 b8 01 00 00 00 31 d2 f0 0f b0 17 3c 01 75 03 5a 5d c3 [ 154.475187][ C1] RSP: 0018:ffffc9000205e718 EFLAGS: 00000282 [ 154.475201][ C1] RAX: 1ffffffff0ddbaa0 RBX: ffff88811a4ef180 RCX: dffffc0000000000 [ 154.475214][ C1] RDX: 0000000000000000 RSI: 00000000aeb5464f RDI: ffffc9000205ebd4 [ 154.475225][ C1] RBP: ffffc9000205e730 R08: 0000000000000004 R09: 0000000000000003 [ 154.475235][ C1] R10: fffff5200040bcd8 R11: 1ffff9200040bcd8 R12: ffff88810e2ca300 [ 154.475251][ C1] R13: dffffc0000000000 R14: ffffc9000205ebc0 R15: 00000000aeb5464f [ 154.475266][ C1] ? _raw_spin_unlock_bh+0x41/0x60 [ 154.475288][ C1] tipc_sk_rcv+0x40e/0x2cc0 [ 154.475308][ C1] ? stack_trace_save+0x98/0xe0 [ 154.475326][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 154.475348][ C1] ? __stack_depot_save+0x445/0x480 [ 154.475372][ C1] ? kasan_set_track+0x60/0x70 [ 154.475387][ C1] ? kasan_set_track+0x4b/0x70 [ 154.475403][ C1] ? ____kasan_slab_free+0x132/0x180 [ 154.475420][ C1] ? tipc_node_xmit+0x257/0xd00 [ 154.475437][ C1] ? tipc_sk_backlog_rcv+0x16f/0x1f0 [ 154.475458][ C1] ? __release_sock+0x154/0x380 [ 154.475473][ C1] ? sockopt_release_sock+0x95/0x1f0 [ 154.475494][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 154.475512][ C1] ? do_syscall_64+0x4c/0xa0 [ 154.475533][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.475553][ C1] tipc_node_xmit+0x257/0xd00 [ 154.475569][ C1] ? kasan_quarantine_put+0x34/0x190 [ 154.475584][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 154.475599][ C1] ? ____kasan_slab_free+0x13d/0x180 [ 154.475617][ C1] ? __kasan_slab_free+0x11/0x20 [ 154.475633][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 154.475656][ C1] ? kfree_skbmem+0x10c/0x180 [ 154.475676][ C1] tipc_node_distr_xmit+0x292/0x390 [ 154.475695][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 154.475713][ C1] tipc_sk_rcv+0x1aa3/0x2cc0 [ 154.475735][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 154.475755][ C1] tipc_node_xmit+0x257/0xd00 [ 154.475773][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 154.475801][ C1] tipc_sk_push_backlog+0x4dd/0x790 [ 154.475826][ C1] tipc_sk_proto_rcv+0x98d/0x1580 [ 154.475848][ C1] ? tipc_sk_filter_rcv+0x2c80/0x2c80 [ 154.475869][ C1] ? unwind_get_return_address+0x4d/0x90 [ 154.475887][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 154.475908][ C1] ? arch_stack_walk+0x10/0x150 [ 154.475932][ C1] tipc_sk_filter_rcv+0x2a93/0x2c80 [ 154.475953][ C1] ? stack_trace_save+0x98/0xe0 [ 154.475972][ C1] ? __stack_depot_save+0x36/0x480 [ 154.476004][ C1] ? ____kasan_slab_free+0x132/0x180 [ 154.476021][ C1] ? __kasan_slab_free+0x11/0x20 [ 154.476037][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 154.476059][ C1] ? __kmem_cache_free+0xb7/0x1b0 [ 154.476078][ C1] ? kasan_set_track+0x60/0x70 [ 154.476094][ C1] ? kasan_set_track+0x4b/0x70 [ 154.476109][ C1] ? kasan_save_free_info+0x31/0x50 [ 154.476131][ C1] ? ____kasan_slab_free+0x132/0x180 [ 154.476148][ C1] ? __kasan_slab_free+0x11/0x20 [ 154.476164][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 154.476186][ C1] ? kmem_cache_free+0x12d/0x300 [ 154.476205][ C1] ? kfree_skbmem+0x10c/0x180 [ 154.476224][ C1] ? kfree_skb_reason+0xdc/0x230 [ 154.476243][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 154.476261][ C1] ? tipc_sk_filter_rcv+0xbf3/0x2c80 [ 154.476281][ C1] ? tipc_sk_backlog_rcv+0x109/0x1f0 [ 154.476301][ C1] ? __release_sock+0x154/0x380 [ 154.476316][ C1] ? sk_setsockopt+0x1355/0x2590 [ 154.476337][ C1] ? sock_setsockopt+0x5a/0x70 [ 154.476358][ C1] ? __x64_sys_setsockopt+0xbf/0xd0 [ 154.476381][ C1] ? x64_sys_call+0x124/0x9a0 [ 154.476399][ C1] ? do_syscall_64+0x4c/0xa0 [ 154.476419][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.476437][ C1] ? tipc_sk_publish+0x440/0x440 [ 154.476458][ C1] ? __kasan_check_write+0x14/0x20 [ 154.476481][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 154.476504][ C1] tipc_sk_rcv+0x7d9/0x2cc0 [ 154.476528][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 154.476547][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 154.476568][ C1] ? tipc_sk_filter_rcv+0x2a1c/0x2c80 [ 154.476590][ C1] tipc_node_xmit+0x257/0xd00 [ 154.476607][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 154.476627][ C1] tipc_node_distr_xmit+0x292/0x390 [ 154.476646][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 154.476665][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 154.476687][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 154.476711][ C1] __release_sock+0x154/0x380 [ 154.476727][ C1] sockopt_release_sock+0x95/0x1f0 [ 154.476747][ C1] sk_setsockopt+0x1355/0x2590 [ 154.476768][ C1] ? __cfi_sk_setsockopt+0x10/0x10 [ 154.476791][ C1] ? selinux_socket_setsockopt+0x21c/0x300 [ 154.476813][ C1] ? handle_mm_fault+0x17be/0x2640 [ 154.476836][ C1] ? __fget_files+0x2d5/0x330 [ 154.476861][ C1] sock_setsockopt+0x5a/0x70 [ 154.476881][ C1] __sys_setsockopt+0x270/0x4e0 [ 154.476904][ C1] ? __cfi___sys_setsockopt+0x10/0x10 [ 154.476927][ C1] ? do_user_addr_fault+0x9ac/0x1050 [ 154.476950][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 154.476972][ C1] x64_sys_call+0x124/0x9a0 [ 154.477000][ C1] do_syscall_64+0x4c/0xa0 [ 154.477021][ C1] ? clear_bhb_loop+0x30/0x80 [ 154.477037][ C1] ? clear_bhb_loop+0x30/0x80 [ 154.477054][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.477070][ C1] RIP: 0033:0x7fdb1ad8ebe9 [ 154.477098][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.477110][ C1] RSP: 002b:00007fdb1bbf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 154.477127][ C1] RAX: ffffffffffffffda RBX: 00007fdb1afb6090 RCX: 00007fdb1ad8ebe9 [ 154.477139][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 154.477148][ C1] RBP: 00007fdb1ae11e19 R08: 0000000000000004 R09: 0000000000000000 [ 154.477159][ C1] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000000 [ 154.477169][ C1] R13: 00007fdb1afb6128 R14: 00007fdb1afb6090 R15: 00007ffda06bb5a8 [ 154.477183][ C1] [ 154.477565][ C0] CPU: 0 PID: 1218 Comm: syz.2.263 Not tainted syzkaller #0 [ 155.319661][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.329719][ C0] RIP: 0010:kvm_wait+0xf2/0x140 [ 155.334572][ C0] Code: ab 13 04 f4 eb 9a fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d b0 ab 13 04 fb f4 71 ff ff ff fb e9 6b ff ff ff e8 0e 1d b8 03 89 f9 80 e1 07 38 [ 155.354270][ C0] RSP: 0018:ffffc90001dcf680 EFLAGS: 00000246 [ 155.360505][ C0] RAX: 0000000000000003 RBX: ffff88812e698598 RCX: ffffffff84f37c82 [ 155.368470][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88812e698598 [ 155.376434][ C0] RBP: ffffc90001dcf710 R08: dffffc0000000000 R09: ffffed1025cd30b4 [ 155.384405][ C0] R10: ffffed1025cd30b4 R11: 1ffff11025cd30b3 R12: 1ffff1103ee00001 [ 155.392485][ C0] R13: ffff8881f7038c94 R14: dffffc0000000000 R15: 1ffff920003b9ed0 [ 155.400539][ C0] FS: 00007fdb1bc186c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 155.409457][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.416040][ C0] CR2: 0000200000000000 CR3: 000000011b7c1000 CR4: 00000000003506b0 [ 155.424003][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 155.431966][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 155.439932][ C0] Call Trace: [ 155.443203][ C0] [ 155.446123][ C0] ? __cfi_kvm_wait+0x10/0x10 [ 155.450803][ C0] ? __pv_queued_spin_lock_slowpath+0x632/0xc40 [ 155.457044][ C0] __pv_queued_spin_lock_slowpath+0x690/0xc40 [ 155.463191][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 155.469776][ C0] ? avc_has_perm+0x158/0x240 [ 155.474445][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 155.479902][ C0] _raw_spin_lock_bh+0xd8/0xe0 [ 155.484665][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 155.490118][ C0] lock_sock_nested+0x92/0x280 [ 155.494881][ C0] ? __cfi_lock_sock_nested+0x10/0x10 [ 155.500245][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 155.505176][ C0] ? _raw_spin_unlock_bh+0x50/0x60 [ 155.510286][ C0] tipc_sendstream+0x47/0x70 [ 155.514874][ C0] ? __cfi_tipc_sendstream+0x10/0x10 [ 155.520152][ C0] ____sys_sendmsg+0x5a9/0x990 [ 155.524916][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 155.529941][ C0] ? import_iovec+0x7c/0xb0 [ 155.534437][ C0] ___sys_sendmsg+0x21c/0x290 [ 155.539104][ C0] ? __sys_sendmsg+0x270/0x270 [ 155.543865][ C0] ? __fdget+0x19c/0x220 [ 155.548110][ C0] __x64_sys_sendmsg+0x1f0/0x2c0 [ 155.553039][ C0] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 155.558580][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 155.564645][ C0] x64_sys_call+0x171/0x9a0 [ 155.569141][ C0] do_syscall_64+0x4c/0xa0 [ 155.573581][ C0] ? clear_bhb_loop+0x30/0x80 [ 155.578249][ C0] ? clear_bhb_loop+0x30/0x80 [ 155.582915][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.588814][ C0] RIP: 0033:0x7fdb1ad8ebe9 [ 155.593221][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.612856][ C0] RSP: 002b:00007fdb1bc18038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.621267][ C0] RAX: ffffffffffffffda RBX: 00007fdb1afb5fa0 RCX: 00007fdb1ad8ebe9 [ 155.629334][ C0] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 155.637317][ C0] RBP: 00007fdb1ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 155.645375][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.653340][ C0] R13: 00007fdb1afb6038 R14: 00007fdb1afb5fa0 R15: 00007ffda06bb5a8 [ 155.661396][ C0] [ 287.122046][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 225s! [syz.2.263:1219] [ 287.130346][ C1] Modules linked in: [ 287.134231][ C1] CPU: 1 PID: 1219 Comm: syz.2.263 Not tainted syzkaller #0 [ 287.141490][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.151525][ C1] RIP: 0010:tipc_sk_rcv+0x1aca/0x2cc0 [ 287.156994][ C1] Code: 06 ff ff 48 8b 7c 24 70 48 83 ef 80 48 89 7c 24 70 be 04 00 00 00 e8 f5 f4 e7 fc bb ff ff ff ff f0 41 0f c1 9c 24 80 00 00 00 01 00 00 00 89 de e8 fa 9a a3 fc 83 fb 01 75 0f e8 d0 96 a3 fc [ 287.176882][ C1] RSP: 0018:ffffc9000205e740 EFLAGS: 00000213 [ 287.182932][ C1] RAX: 0000000000000001 RBX: 0000000000000005 RCX: ffffffff84cc706b [ 287.190887][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88812e698580 [ 287.199270][ C1] RBP: ffffc9000205e9d0 R08: dffffc0000000000 R09: ffffed1025cd30b1 [ 287.207482][ C1] R10: ffffed1025cd30b1 R11: 1ffff11025cd30b0 R12: ffff88812e698500 [ 287.215456][ C1] R13: dffffc0000000000 R14: ffffc9000205ebc0 R15: 00000000aeb5464f [ 287.223496][ C1] FS: 00007fdb1bbf76c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 287.232507][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.239075][ C1] CR2: 00007fdb1bbf6f98 CR3: 000000011b7c1000 CR4: 00000000003506a0 [ 287.247201][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.255151][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.263112][ C1] Call Trace: [ 287.266409][ C1] [ 287.269444][ C1] ? stack_trace_save+0x98/0xe0 [ 287.274294][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 287.280119][ C1] ? __stack_depot_save+0x445/0x480 [ 287.285309][ C1] ? kasan_set_track+0x60/0x70 [ 287.290055][ C1] ? kasan_set_track+0x4b/0x70 [ 287.294809][ C1] ? ____kasan_slab_free+0x132/0x180 [ 287.300122][ C1] ? tipc_node_xmit+0x257/0xd00 [ 287.305228][ C1] ? tipc_sk_backlog_rcv+0x16f/0x1f0 [ 287.310704][ C1] ? __release_sock+0x154/0x380 [ 287.315546][ C1] ? sockopt_release_sock+0x95/0x1f0 [ 287.320933][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 287.325876][ C1] ? do_syscall_64+0x4c/0xa0 [ 287.330457][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.336503][ C1] tipc_node_xmit+0x257/0xd00 [ 287.341153][ C1] ? kasan_quarantine_put+0x34/0x190 [ 287.346410][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 287.351668][ C1] ? ____kasan_slab_free+0x13d/0x180 [ 287.356924][ C1] ? __kasan_slab_free+0x11/0x20 [ 287.361859][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 287.367656][ C1] ? kfree_skbmem+0x10c/0x180 [ 287.372313][ C1] tipc_node_distr_xmit+0x292/0x390 [ 287.377484][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 287.383192][ C1] tipc_sk_rcv+0x1aa3/0x2cc0 [ 287.387797][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 287.392719][ C1] tipc_node_xmit+0x257/0xd00 [ 287.397378][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 287.402572][ C1] tipc_sk_push_backlog+0x4dd/0x790 [ 287.407753][ C1] tipc_sk_proto_rcv+0x98d/0x1580 [ 287.412767][ C1] ? tipc_sk_filter_rcv+0x2c80/0x2c80 [ 287.418302][ C1] ? unwind_get_return_address+0x4d/0x90 [ 287.423928][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 287.430102][ C1] ? arch_stack_walk+0x10/0x150 [ 287.435027][ C1] tipc_sk_filter_rcv+0x2a93/0x2c80 [ 287.440213][ C1] ? stack_trace_save+0x98/0xe0 [ 287.445045][ C1] ? __stack_depot_save+0x36/0x480 [ 287.450221][ C1] ? ____kasan_slab_free+0x132/0x180 [ 287.455569][ C1] ? __kasan_slab_free+0x11/0x20 [ 287.460515][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 287.466057][ C1] ? __kmem_cache_free+0xb7/0x1b0 [ 287.471075][ C1] ? kasan_set_track+0x60/0x70 [ 287.475836][ C1] ? kasan_set_track+0x4b/0x70 [ 287.480588][ C1] ? kasan_save_free_info+0x31/0x50 [ 287.485800][ C1] ? ____kasan_slab_free+0x132/0x180 [ 287.491063][ C1] ? __kasan_slab_free+0x11/0x20 [ 287.496001][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 287.501559][ C1] ? kmem_cache_free+0x12d/0x300 [ 287.506520][ C1] ? kfree_skbmem+0x10c/0x180 [ 287.511264][ C1] ? kfree_skb_reason+0xdc/0x230 [ 287.516215][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 287.521251][ C1] ? tipc_sk_filter_rcv+0xbf3/0x2c80 [ 287.526559][ C1] ? tipc_sk_backlog_rcv+0x109/0x1f0 [ 287.531828][ C1] ? __release_sock+0x154/0x380 [ 287.536839][ C1] ? sk_setsockopt+0x1355/0x2590 [ 287.542031][ C1] ? sock_setsockopt+0x5a/0x70 [ 287.546795][ C1] ? __x64_sys_setsockopt+0xbf/0xd0 [ 287.551986][ C1] ? x64_sys_call+0x124/0x9a0 [ 287.556646][ C1] ? do_syscall_64+0x4c/0xa0 [ 287.561224][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.567320][ C1] ? tipc_sk_publish+0x440/0x440 [ 287.572236][ C1] ? __kasan_check_write+0x14/0x20 [ 287.577328][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 287.582241][ C1] tipc_sk_rcv+0x7d9/0x2cc0 [ 287.586859][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 287.591885][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 287.596802][ C1] ? tipc_sk_filter_rcv+0x2a1c/0x2c80 [ 287.602165][ C1] tipc_node_xmit+0x257/0xd00 [ 287.606814][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 287.611987][ C1] tipc_node_distr_xmit+0x292/0x390 [ 287.617421][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 287.623206][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 287.628319][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 287.633929][ C1] __release_sock+0x154/0x380 [ 287.638599][ C1] sockopt_release_sock+0x95/0x1f0 [ 287.643724][ C1] sk_setsockopt+0x1355/0x2590 [ 287.648495][ C1] ? __cfi_sk_setsockopt+0x10/0x10 [ 287.653602][ C1] ? selinux_socket_setsockopt+0x21c/0x300 [ 287.659421][ C1] ? handle_mm_fault+0x17be/0x2640 [ 287.664522][ C1] ? __fget_files+0x2d5/0x330 [ 287.669190][ C1] sock_setsockopt+0x5a/0x70 [ 287.673760][ C1] __sys_setsockopt+0x270/0x4e0 [ 287.679023][ C1] ? __cfi___sys_setsockopt+0x10/0x10 [ 287.684384][ C1] ? do_user_addr_fault+0x9ac/0x1050 [ 287.689656][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 287.694669][ C1] x64_sys_call+0x124/0x9a0 [ 287.699163][ C1] do_syscall_64+0x4c/0xa0 [ 287.703558][ C1] ? clear_bhb_loop+0x30/0x80 [ 287.708208][ C1] ? clear_bhb_loop+0x30/0x80 [ 287.712881][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.718765][ C1] RIP: 0033:0x7fdb1ad8ebe9 [ 287.723288][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.742895][ C1] RSP: 002b:00007fdb1bbf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 287.751436][ C1] RAX: ffffffffffffffda RBX: 00007fdb1afb6090 RCX: 00007fdb1ad8ebe9 [ 287.759474][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 287.767422][ C1] RBP: 00007fdb1ae11e19 R08: 0000000000000004 R09: 0000000000000000 [ 287.775372][ C1] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000000 [ 287.783414][ C1] R13: 00007fdb1afb6128 R14: 00007fdb1afb6090 R15: 00007ffda06bb5a8 [ 287.791371][ C1] [ 287.794386][ C1] Sending NMI from CPU 1 to CPUs 0: [ 287.799599][ C0] NMI backtrace for cpu 0 [ 287.799613][ C0] CPU: 0 PID: 1218 Comm: syz.2.263 Not tainted syzkaller #0 [ 287.799629][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.799638][ C0] RIP: 0010:kvm_wait+0xf2/0x140 [ 287.799662][ C0] Code: ab 13 04 f4 eb 9a fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d b0 ab 13 04 fb f4 71 ff ff ff fb e9 6b ff ff ff e8 0e 1d b8 03 89 f9 80 e1 07 38 [ 287.799675][ C0] RSP: 0018:ffffc90001dcf680 EFLAGS: 00000246 [ 287.799689][ C0] RAX: 0000000000000003 RBX: ffff88812e698598 RCX: ffffffff84f37c82 [ 287.799701][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88812e698598 [ 287.799712][ C0] RBP: ffffc90001dcf710 R08: dffffc0000000000 R09: ffffed1025cd30b4 [ 287.799724][ C0] R10: ffffed1025cd30b4 R11: 1ffff11025cd30b3 R12: 1ffff1103ee00001 [ 287.799735][ C0] R13: ffff8881f7038c94 R14: dffffc0000000000 R15: 1ffff920003b9ed0 [ 287.799747][ C0] FS: 00007fdb1bc186c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 287.799762][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.799773][ C0] CR2: 0000200000000000 CR3: 000000011b7c1000 CR4: 00000000003506b0 [ 287.799787][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.799796][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.799806][ C0] Call Trace: [ 287.799811][ C0] [ 287.799816][ C0] ? __cfi_kvm_wait+0x10/0x10 [ 287.799836][ C0] ? __pv_queued_spin_lock_slowpath+0x632/0xc40 [ 287.799854][ C0] __pv_queued_spin_lock_slowpath+0x690/0xc40 [ 287.799871][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 287.799886][ C0] ? avc_has_perm+0x158/0x240 [ 287.799907][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 287.799932][ C0] _raw_spin_lock_bh+0xd8/0xe0 [ 287.799953][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 287.799975][ C0] lock_sock_nested+0x92/0x280 [ 287.799993][ C0] ? __cfi_lock_sock_nested+0x10/0x10 [ 287.800009][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 287.800032][ C0] ? _raw_spin_unlock_bh+0x50/0x60 [ 287.800053][ C0] tipc_sendstream+0x47/0x70 [ 287.800075][ C0] ? __cfi_tipc_sendstream+0x10/0x10 [ 287.800096][ C0] ____sys_sendmsg+0x5a9/0x990 [ 287.800112][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 287.800126][ C0] ? import_iovec+0x7c/0xb0 [ 287.800146][ C0] ___sys_sendmsg+0x21c/0x290 [ 287.800160][ C0] ? __sys_sendmsg+0x270/0x270 [ 287.800180][ C0] ? __fdget+0x19c/0x220 [ 287.800202][ C0] __x64_sys_sendmsg+0x1f0/0x2c0 [ 287.800217][ C0] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 287.800233][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 287.800253][ C0] x64_sys_call+0x171/0x9a0 [ 287.800271][ C0] do_syscall_64+0x4c/0xa0 [ 287.800298][ C0] ? clear_bhb_loop+0x30/0x80 [ 287.800314][ C0] ? clear_bhb_loop+0x30/0x80 [ 287.800330][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.800346][ C0] RIP: 0033:0x7fdb1ad8ebe9 [ 287.800359][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.800371][ C0] RSP: 002b:00007fdb1bc18038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.800386][ C0] RAX: ffffffffffffffda RBX: 00007fdb1afb5fa0 RCX: 00007fdb1ad8ebe9 [ 287.800397][ C0] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 287.800407][ C0] RBP: 00007fdb1ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 287.800416][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.800426][ C0] R13: 00007fdb1afb6038 R14: 00007fdb1afb5fa0 R15: 00007ffda06bb5a8 [ 287.800439][ C0]