Warning: Permanently added '10.128.1.232' (ED25519) to the list of known hosts. 2025/10/07 10:56:44 parsed 1 programs [ 45.362794][ T28] audit: type=1400 audit(1759834604.759:106): avc: denied { unlink } for pid=397 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 45.409906][ T397] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.199143][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.206268][ T418] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.213735][ T418] device bridge_slave_0 entered promiscuous mode [ 46.220687][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.227808][ T418] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.235338][ T418] device bridge_slave_1 entered promiscuous mode [ 46.272699][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.279748][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.287071][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.294128][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.311996][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.319717][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.327214][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.334906][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.344555][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.352863][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.359873][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.368427][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.376682][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.383792][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.395569][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.404589][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.417430][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.428045][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.436307][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.444108][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.452890][ T418] device veth0_vlan entered promiscuous mode [ 46.462054][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.471174][ T418] device veth1_macvtap entered promiscuous mode [ 46.480130][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.489829][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.515880][ T418] syz-executor (418) used greatest stack depth: 22016 bytes left [ 46.616455][ T28] audit: type=1401 audit(1759834606.009:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/10/07 10:56:46 executed programs: 0 [ 47.096755][ T464] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.103942][ T464] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.111227][ T464] device bridge_slave_0 entered promiscuous mode [ 47.121232][ T464] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.128494][ T464] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.136032][ T464] device bridge_slave_1 entered promiscuous mode [ 47.177766][ T464] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.184840][ T464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.192093][ T464] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.199141][ T464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.208336][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.216097][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.234756][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.242399][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.250962][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.259402][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.267747][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.274806][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.283329][ T8] device bridge_slave_1 left promiscuous mode [ 47.289427][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.296826][ T8] device bridge_slave_0 left promiscuous mode [ 47.303044][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.310884][ T8] device veth1_macvtap left promiscuous mode [ 47.317281][ T8] device veth0_vlan left promiscuous mode [ 47.367792][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.376194][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.384761][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.391796][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.402140][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.410303][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.419438][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.427589][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.440022][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.448680][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.459180][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.467150][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.475313][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.483128][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.491109][ T464] device veth0_vlan entered promiscuous mode [ 47.500727][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.509254][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.518162][ T464] device veth1_macvtap entered promiscuous mode [ 47.527027][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.535244][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.543717][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.553310][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.561557][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.582976][ T28] audit: type=1400 audit(1759834606.979:108): avc: denied { create } for pid=474 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.602931][ T28] audit: type=1400 audit(1759834606.979:109): avc: denied { write } for pid=474 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.622929][ T28] audit: type=1400 audit(1759834606.979:110): avc: denied { setopt } for pid=474 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 2025/10/07 10:56:51 executed programs: 270 [ 152.152107][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 152.158910][ C0] rcu: 0-...!: (1 GPs behind) idle=6cd4/1/0x4000000000000000 softirq=4611/4612 fqs=0 [ 152.168548][ C0] (t=10001 jiffies g=3253 q=7 ncpus=2) [ 152.174112][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10001 jiffies! g3253 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 152.186425][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=1021 [ 152.194221][ C0] rcu: rcu_preempt kthread starved for 10004 jiffies! g3253 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 152.205488][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 152.215453][ C0] rcu: RCU grace-period kthread stack dump: [ 152.221720][ C0] task:rcu_preempt state:I stack:28528 pid:14 ppid:2 flags:0x00004000 [ 152.230974][ C0] Call Trace: [ 152.234246][ C0] [ 152.237182][ C0] __schedule+0xb87/0x14e0 [ 152.241613][ C0] ? release_firmware_map_entry+0x194/0x194 [ 152.247502][ C0] ? __mod_timer+0x7ae/0xb30 [ 152.252093][ C0] schedule+0xbd/0x170 [ 152.256155][ C0] schedule_timeout+0x12c/0x2e0 [ 152.261036][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 152.266404][ C0] ? __cfi_process_timeout+0x10/0x10 [ 152.271691][ C0] ? prepare_to_swait_event+0x308/0x320 [ 152.277236][ C0] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 152.282081][ C0] ? rcu_gp_init+0xf10/0xf10 [ 152.286661][ C0] rcu_gp_kthread+0x95/0x370 [ 152.291241][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 152.296434][ C0] ? __kasan_check_read+0x11/0x20 [ 152.301453][ C0] ? __kthread_parkme+0x142/0x180 [ 152.306646][ C0] kthread+0x281/0x320 [ 152.310704][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 152.316068][ C0] ? __cfi_kthread+0x10/0x10 [ 152.320643][ C0] ret_from_fork+0x1f/0x30 [ 152.325060][ C0] [ 152.328104][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 152.334528][ C0] Sending NMI from CPU 0 to CPUs 1: [ 152.339759][ C1] NMI backtrace for cpu 1 [ 152.339778][ C1] CPU: 1 PID: 1296 Comm: syz.2.289 Not tainted syzkaller #0 [ 152.339792][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 152.339804][ C1] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x0/0x17 [ 152.339834][ C1] Code: cc cc 00 00 cc cc 55 48 89 e5 51 52 56 57 41 50 41 51 41 52 41 53 e8 bb 09 00 00 41 5b 41 5a 41 59 41 58 5f 5e 5a 59 5d c3 90 <55> 48 89 e5 52 b8 01 00 00 00 31 d2 f0 0f b0 17 3c 01 75 03 5a 5d [ 152.339847][ C1] RSP: 0018:ffffc9000247e720 EFLAGS: 00000286 [ 152.339861][ C1] RAX: 1ffffffff0ddba20 RBX: ffff88811540c000 RCX: dffffc0000000000 [ 152.339872][ C1] RDX: 0000000000000000 RSI: 0000000076c61e13 RDI: ffffc9000247ebd4 [ 152.339881][ C1] RBP: ffffc9000247e730 R08: 0000000000000004 R09: 0000000000000003 [ 152.339890][ C1] R10: fffff5200048fcd8 R11: 1ffff9200048fcd8 R12: ffff888119028000 [ 152.339901][ C1] R13: dffffc0000000000 R14: ffffc9000247ebc0 R15: 0000000076c61e13 [ 152.339911][ C1] FS: 00007fc9d798a6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 152.339923][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.339933][ C1] CR2: 00007fc9d7989f98 CR3: 000000012d717000 CR4: 00000000003506a0 [ 152.339945][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.339953][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 152.339962][ C1] Call Trace: [ 152.339967][ C1] [ 152.339973][ C1] ? _raw_spin_unlock_bh+0x41/0x60 [ 152.339990][ C1] tipc_sk_rcv+0x40e/0x2cc0 [ 152.340012][ C1] ? stack_trace_save+0x98/0xe0 [ 152.340030][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 152.340045][ C1] ? __stack_depot_save+0x445/0x480 [ 152.340061][ C1] ? kasan_set_track+0x60/0x70 [ 152.340076][ C1] ? kasan_set_track+0x4b/0x70 [ 152.340090][ C1] ? ____kasan_slab_free+0x132/0x180 [ 152.340106][ C1] ? tipc_node_xmit+0x257/0xd00 [ 152.340124][ C1] ? tipc_sk_backlog_rcv+0x16f/0x1f0 [ 152.340137][ C1] ? __release_sock+0x154/0x380 [ 152.340155][ C1] ? sockopt_release_sock+0x95/0x1f0 [ 152.340169][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 152.340188][ C1] ? do_syscall_64+0x4c/0xa0 [ 152.340203][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.340223][ C1] tipc_node_xmit+0x257/0xd00 [ 152.340241][ C1] ? kasan_quarantine_put+0x34/0x190 [ 152.340256][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 152.340273][ C1] ? ____kasan_slab_free+0x13d/0x180 [ 152.340289][ C1] ? __kasan_slab_free+0x11/0x20 [ 152.340310][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 152.340332][ C1] ? kfree_skbmem+0x10c/0x180 [ 152.340346][ C1] tipc_node_distr_xmit+0x292/0x390 [ 152.340365][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 152.340385][ C1] tipc_sk_rcv+0x1aa3/0x2cc0 [ 152.340410][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 152.340433][ C1] tipc_node_xmit+0x257/0xd00 [ 152.340452][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 152.340472][ C1] tipc_sk_push_backlog+0x4dd/0x790 [ 152.340486][ C1] tipc_sk_proto_rcv+0x98d/0x1580 [ 152.340501][ C1] ? tipc_sk_filter_rcv+0x2c80/0x2c80 [ 152.340513][ C1] ? unwind_get_return_address+0x4d/0x90 [ 152.340530][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 152.340548][ C1] ? arch_stack_walk+0xd0/0x150 [ 152.340572][ C1] tipc_sk_filter_rcv+0x2a93/0x2c80 [ 152.340585][ C1] ? stack_trace_save+0x98/0xe0 [ 152.340602][ C1] ? __stack_depot_save+0x36/0x480 [ 152.340614][ C1] ? ____kasan_slab_free+0x132/0x180 [ 152.340630][ C1] ? __kasan_slab_free+0x11/0x20 [ 152.340645][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 152.340665][ C1] ? __kmem_cache_free+0xb7/0x1b0 [ 152.340683][ C1] ? kasan_set_track+0x60/0x70 [ 152.340697][ C1] ? kasan_set_track+0x4b/0x70 [ 152.340710][ C1] ? kasan_save_free_info+0x31/0x50 [ 152.340730][ C1] ? ____kasan_slab_free+0x132/0x180 [ 152.340745][ C1] ? __kasan_slab_free+0x11/0x20 [ 152.340760][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 152.340780][ C1] ? kmem_cache_free+0x12d/0x300 [ 152.340797][ C1] ? kfree_skbmem+0x10c/0x180 [ 152.340808][ C1] ? kfree_skb_reason+0xdc/0x230 [ 152.340820][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 152.340839][ C1] ? tipc_sk_filter_rcv+0xbf3/0x2c80 [ 152.340852][ C1] ? tipc_sk_backlog_rcv+0x109/0x1f0 [ 152.340865][ C1] ? __release_sock+0x154/0x380 [ 152.340881][ C1] ? sk_setsockopt+0x1355/0x2590 [ 152.340894][ C1] ? sock_setsockopt+0x5a/0x70 [ 152.340907][ C1] ? __x64_sys_setsockopt+0xbf/0xd0 [ 152.340923][ C1] ? x64_sys_call+0x124/0x9a0 [ 152.340940][ C1] ? do_syscall_64+0x4c/0xa0 [ 152.340953][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.340972][ C1] ? tipc_sk_publish+0x440/0x440 [ 152.340985][ C1] ? __kasan_check_write+0x14/0x20 [ 152.340997][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 152.341013][ C1] tipc_sk_rcv+0x7d9/0x2cc0 [ 152.341037][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 152.341056][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 152.341077][ C1] ? tipc_sk_filter_rcv+0x2a1c/0x2c80 [ 152.341091][ C1] tipc_node_xmit+0x257/0xd00 [ 152.341110][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 152.341131][ C1] tipc_node_distr_xmit+0x292/0x390 [ 152.341150][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 152.341170][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 152.341184][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 152.341199][ C1] __release_sock+0x154/0x380 [ 152.341217][ C1] sockopt_release_sock+0x95/0x1f0 [ 152.341230][ C1] sk_setsockopt+0x1355/0x2590 [ 152.341245][ C1] ? __cfi_sk_setsockopt+0x10/0x10 [ 152.341259][ C1] ? selinux_socket_setsockopt+0x21c/0x300 [ 152.341281][ C1] ? handle_mm_fault+0x17be/0x2640 [ 152.341308][ C1] ? __fget_files+0x2d5/0x330 [ 152.341323][ C1] sock_setsockopt+0x5a/0x70 [ 152.341336][ C1] __sys_setsockopt+0x270/0x4e0 [ 152.341352][ C1] ? __cfi___sys_setsockopt+0x10/0x10 [ 152.341367][ C1] ? do_user_addr_fault+0x9ac/0x1050 [ 152.341386][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 152.341402][ C1] x64_sys_call+0x124/0x9a0 [ 152.341417][ C1] do_syscall_64+0x4c/0xa0 [ 152.341435][ C1] ? clear_bhb_loop+0x30/0x80 [ 152.341454][ C1] ? clear_bhb_loop+0x30/0x80 [ 152.341471][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.341488][ C1] RIP: 0033:0x7fc9d6b8d169 [ 152.341510][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.341520][ C1] RSP: 002b:00007fc9d798a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 152.341534][ C1] RAX: ffffffffffffffda RBX: 00007fc9d6da6080 RCX: 00007fc9d6b8d169 [ 152.341544][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 152.341552][ C1] RBP: 00007fc9d6c0e990 R08: 0000000000000004 R09: 0000000000000000 [ 152.341560][ C1] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000000 [ 152.341569][ C1] R13: 0000000000000001 R14: 00007fc9d6da6080 R15: 00007ffd8883b168 [ 152.341580][ C1] [ 152.341832][ C0] CPU: 0 PID: 1295 Comm: syz.2.289 Not tainted syzkaller #0 [ 153.021365][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 153.031422][ C0] RIP: 0010:kvm_wait+0xf2/0x140 [ 153.036301][ C0] Code: 96 13 04 f4 eb 9a fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d 20 96 13 04 fb f4 71 ff ff ff fb e9 6b ff ff ff e8 ae c9 b8 03 89 f9 80 e1 07 38 [ 153.056336][ C0] RSP: 0018:ffffc9000238f680 EFLAGS: 00000246 [ 153.062498][ C0] RAX: 0000000000000003 RBX: ffff888114a8d498 RCX: ffffffff84f43dc2 [ 153.070462][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888114a8d498 [ 153.078427][ C0] RBP: ffffc9000238f710 R08: dffffc0000000000 R09: ffffed1022951a94 [ 153.086407][ C0] R10: ffffed1022951a94 R11: 1ffff11022951a93 R12: 1ffff1103ee00001 [ 153.094457][ C0] R13: ffff8881f7038cd4 R14: dffffc0000000000 R15: 1ffff92000471ed0 [ 153.102591][ C0] FS: 00007fc9d79ab6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 153.111528][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.118099][ C0] CR2: 0000200000000000 CR3: 000000012d717000 CR4: 00000000003506b0 [ 153.126233][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 153.134197][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 153.142338][ C0] Call Trace: [ 153.145608][ C0] [ 153.148557][ C0] ? __cfi_kvm_wait+0x10/0x10 [ 153.153234][ C0] ? avc_has_perm_noaudit+0x2f4/0x460 [ 153.158605][ C0] ? pv_hash+0x86/0x150 [ 153.162749][ C0] __pv_queued_spin_lock_slowpath+0x690/0xc40 [ 153.168812][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 153.175391][ C0] ? avc_has_perm+0x158/0x240 [ 153.180064][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 153.185522][ C0] _raw_spin_lock_bh+0xd8/0xe0 [ 153.190388][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 153.195878][ C0] lock_sock_nested+0x92/0x280 [ 153.200746][ C0] ? __cfi_lock_sock_nested+0x10/0x10 [ 153.206219][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 153.211210][ C0] ? _raw_spin_unlock_bh+0x50/0x60 [ 153.216409][ C0] tipc_sendstream+0x47/0x70 [ 153.220993][ C0] ? __cfi_tipc_sendstream+0x10/0x10 [ 153.226268][ C0] ____sys_sendmsg+0x5a9/0x990 [ 153.231035][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 153.236077][ C0] ? import_iovec+0x7c/0xb0 [ 153.240590][ C0] ___sys_sendmsg+0x21c/0x290 [ 153.245291][ C0] ? __sys_sendmsg+0x270/0x270 [ 153.250072][ C0] ? __fdget+0x19c/0x220 [ 153.254316][ C0] __x64_sys_sendmsg+0x1f0/0x2c0 [ 153.259253][ C0] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 153.264704][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 153.270789][ C0] x64_sys_call+0x171/0x9a0 [ 153.275814][ C0] do_syscall_64+0x4c/0xa0 [ 153.280226][ C0] ? clear_bhb_loop+0x30/0x80 [ 153.284900][ C0] ? clear_bhb_loop+0x30/0x80 [ 153.289600][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.295489][ C0] RIP: 0033:0x7fc9d6b8d169 [ 153.299985][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.319579][ C0] RSP: 002b:00007fc9d79ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.328167][ C0] RAX: ffffffffffffffda RBX: 00007fc9d6da5fa0 RCX: 00007fc9d6b8d169 [ 153.336171][ C0] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 153.344249][ C0] RBP: 00007fc9d6c0e990 R08: 0000000000000000 R09: 0000000000000000 [ 153.352230][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.360205][ C0] R13: 0000000000000000 R14: 00007fc9d6da5fa0 R15: 00007ffd8883b168 [ 153.368183][ C0] [ 287.080005][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 226s! [syz.2.289:1296] [ 287.088285][ C1] Modules linked in: [ 287.092171][ C1] CPU: 1 PID: 1296 Comm: syz.2.289 Not tainted syzkaller #0 [ 287.099619][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 287.109693][ C1] RIP: 0010:tipc_sk_lookup+0x56d/0x620 [ 287.115178][ C1] Code: e8 48 d1 a2 fc eb 05 e8 41 d1 a2 fc 45 31 e4 e8 69 7f 8f fc 48 c7 44 24 60 0e 36 e0 45 48 8b 44 24 40 4a c7 04 30 00 00 00 00 <65> 48 8b 04 25 28 00 00 00 48 3b 84 24 a0 00 00 00 75 78 4c 89 e0 [ 287.134863][ C1] RSP: 0018:ffffc9000247e640 EFLAGS: 00000246 [ 287.140923][ C1] RAX: 1ffff9200048fcd4 RBX: ffff888114a8d480 RCX: ffff88811c7e9440 [ 287.148917][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88811c7e9440 [ 287.156911][ C1] RBP: ffffc9000247e730 R08: dffffc0000000000 R09: ffffed1022951a91 [ 287.164884][ C1] R10: ffffed1022951a91 R11: 1ffff11022951a90 R12: ffff888114a8d400 [ 287.172863][ C1] R13: 00000000000003f0 R14: dffffc0000000000 R15: ffff88811ac3d0de [ 287.180833][ C1] FS: 00007fc9d798a6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 287.189757][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.196318][ C1] CR2: 00007fc9d7989f98 CR3: 000000012d717000 CR4: 00000000003506a0 [ 287.204264][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.212217][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.220163][ C1] Call Trace: [ 287.223452][ C1] [ 287.226369][ C1] ? tipc_sk_rcv+0x2cc0/0x2cc0 [ 287.231120][ C1] tipc_sk_rcv+0x419/0x2cc0 [ 287.235599][ C1] ? stack_trace_save+0x98/0xe0 [ 287.240512][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 287.246322][ C1] ? __stack_depot_save+0x445/0x480 [ 287.251534][ C1] ? kasan_set_track+0x60/0x70 [ 287.256281][ C1] ? kasan_set_track+0x4b/0x70 [ 287.261028][ C1] ? ____kasan_slab_free+0x132/0x180 [ 287.266315][ C1] ? tipc_node_xmit+0x257/0xd00 [ 287.271159][ C1] ? tipc_sk_backlog_rcv+0x16f/0x1f0 [ 287.276425][ C1] ? __release_sock+0x154/0x380 [ 287.281278][ C1] ? sockopt_release_sock+0x95/0x1f0 [ 287.286546][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 287.291459][ C1] ? do_syscall_64+0x4c/0xa0 [ 287.296034][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.302080][ C1] tipc_node_xmit+0x257/0xd00 [ 287.306739][ C1] ? kasan_quarantine_put+0x34/0x190 [ 287.311997][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 287.317258][ C1] ? ____kasan_slab_free+0x13d/0x180 [ 287.322527][ C1] ? __kasan_slab_free+0x11/0x20 [ 287.327443][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 287.332989][ C1] ? kfree_skbmem+0x10c/0x180 [ 287.337650][ C1] tipc_node_distr_xmit+0x292/0x390 [ 287.342845][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 287.348567][ C1] tipc_sk_rcv+0x1aa3/0x2cc0 [ 287.353140][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 287.358146][ C1] tipc_node_xmit+0x257/0xd00 [ 287.362801][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 287.367996][ C1] tipc_sk_push_backlog+0x4dd/0x790 [ 287.373224][ C1] tipc_sk_proto_rcv+0x98d/0x1580 [ 287.378245][ C1] ? tipc_sk_filter_rcv+0x2c80/0x2c80 [ 287.383600][ C1] ? unwind_get_return_address+0x4d/0x90 [ 287.389232][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 287.395756][ C1] ? arch_stack_walk+0xd0/0x150 [ 287.400591][ C1] tipc_sk_filter_rcv+0x2a93/0x2c80 [ 287.405804][ C1] ? stack_trace_save+0x98/0xe0 [ 287.410630][ C1] ? __stack_depot_save+0x36/0x480 [ 287.415713][ C1] ? ____kasan_slab_free+0x132/0x180 [ 287.420971][ C1] ? __kasan_slab_free+0x11/0x20 [ 287.425879][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 287.431402][ C1] ? __kmem_cache_free+0xb7/0x1b0 [ 287.436417][ C1] ? kasan_set_track+0x60/0x70 [ 287.441168][ C1] ? kasan_set_track+0x4b/0x70 [ 287.445905][ C1] ? kasan_save_free_info+0x31/0x50 [ 287.451089][ C1] ? ____kasan_slab_free+0x132/0x180 [ 287.456359][ C1] ? __kasan_slab_free+0x11/0x20 [ 287.461357][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 287.466886][ C1] ? kmem_cache_free+0x12d/0x300 [ 287.471814][ C1] ? kfree_skbmem+0x10c/0x180 [ 287.476615][ C1] ? kfree_skb_reason+0xdc/0x230 [ 287.481556][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 287.486683][ C1] ? tipc_sk_filter_rcv+0xbf3/0x2c80 [ 287.492003][ C1] ? tipc_sk_backlog_rcv+0x109/0x1f0 [ 287.497292][ C1] ? __release_sock+0x154/0x380 [ 287.502144][ C1] ? sk_setsockopt+0x1355/0x2590 [ 287.507239][ C1] ? sock_setsockopt+0x5a/0x70 [ 287.512084][ C1] ? __x64_sys_setsockopt+0xbf/0xd0 [ 287.517287][ C1] ? x64_sys_call+0x124/0x9a0 [ 287.521950][ C1] ? do_syscall_64+0x4c/0xa0 [ 287.526601][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.532651][ C1] ? tipc_sk_publish+0x440/0x440 [ 287.537576][ C1] ? __kasan_check_write+0x14/0x20 [ 287.542658][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 287.547664][ C1] tipc_sk_rcv+0x7d9/0x2cc0 [ 287.552153][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 287.557244][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 287.562250][ C1] ? tipc_sk_filter_rcv+0x2a1c/0x2c80 [ 287.567636][ C1] tipc_node_xmit+0x257/0xd00 [ 287.572308][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 287.577499][ C1] tipc_node_distr_xmit+0x292/0x390 [ 287.582680][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 287.588388][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 287.593477][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 287.599087][ C1] __release_sock+0x154/0x380 [ 287.603747][ C1] sockopt_release_sock+0x95/0x1f0 [ 287.608940][ C1] sk_setsockopt+0x1355/0x2590 [ 287.613762][ C1] ? __cfi_sk_setsockopt+0x10/0x10 [ 287.618887][ C1] ? selinux_socket_setsockopt+0x21c/0x300 [ 287.624811][ C1] ? handle_mm_fault+0x17be/0x2640 [ 287.629988][ C1] ? __fget_files+0x2d5/0x330 [ 287.634748][ C1] sock_setsockopt+0x5a/0x70 [ 287.639323][ C1] __sys_setsockopt+0x270/0x4e0 [ 287.644146][ C1] ? __cfi___sys_setsockopt+0x10/0x10 [ 287.649513][ C1] ? do_user_addr_fault+0x9ac/0x1050 [ 287.654784][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 287.659805][ C1] x64_sys_call+0x124/0x9a0 [ 287.664317][ C1] do_syscall_64+0x4c/0xa0 [ 287.668830][ C1] ? clear_bhb_loop+0x30/0x80 [ 287.673511][ C1] ? clear_bhb_loop+0x30/0x80 [ 287.678175][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.684145][ C1] RIP: 0033:0x7fc9d6b8d169 [ 287.688611][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.708226][ C1] RSP: 002b:00007fc9d798a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 287.716627][ C1] RAX: ffffffffffffffda RBX: 00007fc9d6da6080 RCX: 00007fc9d6b8d169 [ 287.724674][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 287.732635][ C1] RBP: 00007fc9d6c0e990 R08: 0000000000000004 R09: 0000000000000000 [ 287.740616][ C1] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000000 [ 287.748704][ C1] R13: 0000000000000001 R14: 00007fc9d6da6080 R15: 00007ffd8883b168 [ 287.757110][ C1] [ 287.760123][ C1] Sending NMI from CPU 1 to CPUs 0: [ 287.765349][ C0] NMI backtrace for cpu 0 [ 287.765361][ C0] CPU: 0 PID: 1295 Comm: syz.2.289 Not tainted syzkaller #0 [ 287.765375][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 287.765384][ C0] RIP: 0010:kvm_wait+0xf2/0x140 [ 287.765412][ C0] Code: 96 13 04 f4 eb 9a fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d 20 96 13 04 fb f4 71 ff ff ff fb e9 6b ff ff ff e8 ae c9 b8 03 89 f9 80 e1 07 38 [ 287.765424][ C0] RSP: 0018:ffffc9000238f680 EFLAGS: 00000246 [ 287.765438][ C0] RAX: 0000000000000003 RBX: ffff888114a8d498 RCX: ffffffff84f43dc2 [ 287.765449][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888114a8d498 [ 287.765459][ C0] RBP: ffffc9000238f710 R08: dffffc0000000000 R09: ffffed1022951a94 [ 287.765469][ C0] R10: ffffed1022951a94 R11: 1ffff11022951a93 R12: 1ffff1103ee00001 [ 287.765479][ C0] R13: ffff8881f7038cd4 R14: dffffc0000000000 R15: 1ffff92000471ed0 [ 287.765490][ C0] FS: 00007fc9d79ab6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 287.765503][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.765513][ C0] CR2: 0000200000000000 CR3: 000000012d717000 CR4: 00000000003506b0 [ 287.765525][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.765533][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.765541][ C0] Call Trace: [ 287.765547][ C0] [ 287.765554][ C0] ? __cfi_kvm_wait+0x10/0x10 [ 287.765573][ C0] ? __pv_queued_spin_lock_slowpath+0x632/0xc40 [ 287.765593][ C0] __pv_queued_spin_lock_slowpath+0x690/0xc40 [ 287.765613][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 287.765630][ C0] ? avc_has_perm+0x158/0x240 [ 287.765652][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 287.765675][ C0] _raw_spin_lock_bh+0xd8/0xe0 [ 287.765689][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 287.765704][ C0] lock_sock_nested+0x92/0x280 [ 287.765724][ C0] ? __cfi_lock_sock_nested+0x10/0x10 [ 287.765742][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 287.765757][ C0] ? _raw_spin_unlock_bh+0x50/0x60 [ 287.765772][ C0] tipc_sendstream+0x47/0x70 [ 287.765788][ C0] ? __cfi_tipc_sendstream+0x10/0x10 [ 287.765802][ C0] ____sys_sendmsg+0x5a9/0x990 [ 287.765820][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 287.765837][ C0] ? import_iovec+0x7c/0xb0 [ 287.765856][ C0] ___sys_sendmsg+0x21c/0x290 [ 287.765870][ C0] ? __sys_sendmsg+0x270/0x270 [ 287.765891][ C0] ? __fdget+0x19c/0x220 [ 287.765905][ C0] __x64_sys_sendmsg+0x1f0/0x2c0 [ 287.765921][ C0] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 287.765939][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 287.765958][ C0] x64_sys_call+0x171/0x9a0 [ 287.765975][ C0] do_syscall_64+0x4c/0xa0 [ 287.765990][ C0] ? clear_bhb_loop+0x30/0x80 [ 287.766008][ C0] ? clear_bhb_loop+0x30/0x80 [ 287.766026][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.766043][ C0] RIP: 0033:0x7fc9d6b8d169 [ 287.766057][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.766067][ C0] RSP: 002b:00007fc9d79ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.766081][ C0] RAX: ffffffffffffffda RBX: 00007fc9d6da5fa0 RCX: 00007fc9d6b8d169 [ 287.766090][ C0] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 287.766105][ C0] RBP: 00007fc9d6c0e990 R08: 0000000000000000 R09: 0000000000000000 [ 287.766113][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.766121][ C0] R13: 0000000000000000 R14: 00007fc9d6da5fa0 R15: 00007ffd8883b168 [ 287.766132][ C0]