Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts. 2026/03/10 13:29:03 parsed 1 programs [ 46.134390][ T30] audit: type=1400 audit(1773149344.407:105): avc: denied { unlink } for pid=381 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 46.210595][ T381] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.127644][ T30] audit: type=1401 audit(1773149345.397:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 47.175363][ T421] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.182453][ T421] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.190068][ T421] device bridge_slave_0 entered promiscuous mode [ 47.196992][ T421] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.204167][ T421] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.211891][ T421] device bridge_slave_1 entered promiscuous mode [ 47.260898][ T421] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.268021][ T421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.275397][ T421] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.282449][ T421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.304105][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.311910][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.319595][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.329778][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.338389][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.346005][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.355166][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.363903][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.370969][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.384499][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.393850][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.407664][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.418973][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.427367][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.435008][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.443935][ T421] device veth0_vlan entered promiscuous mode [ 47.454261][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.464200][ T421] device veth1_macvtap entered promiscuous mode [ 47.473812][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.484351][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/03/10 13:29:06 executed programs: 0 [ 47.895371][ T442] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.902444][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.909940][ T442] device bridge_slave_0 entered promiscuous mode [ 47.916904][ T442] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.924260][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.931723][ T442] device bridge_slave_1 entered promiscuous mode [ 47.983317][ T442] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.990410][ T442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.997933][ T442] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.005100][ T442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.025131][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.032911][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.040904][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.054369][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.062793][ T432] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.069917][ T432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.079285][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.087945][ T432] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.095040][ T432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.107402][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.122782][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.136629][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.148726][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.156954][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.164817][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.173189][ T442] device veth0_vlan entered promiscuous mode [ 48.185656][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.195393][ T442] device veth1_macvtap entered promiscuous mode [ 48.206002][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.226943][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.263600][ T30] audit: type=1400 audit(1773149346.527:107): avc: denied { create } for pid=446 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.284305][ T30] audit: type=1400 audit(1773149346.557:108): avc: denied { write } for pid=446 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.303757][ T30] audit: type=1400 audit(1773149346.557:109): avc: denied { setopt } for pid=446 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.875178][ T311] device bridge_slave_1 left promiscuous mode [ 48.881420][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.889729][ T311] device bridge_slave_0 left promiscuous mode [ 48.898143][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.913077][ T311] device veth1_macvtap left promiscuous mode [ 48.920821][ T311] device veth0_vlan left promiscuous mode [ 151.043562][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 151.050349][ C1] rcu: 1-...!: (10000 ticks this GP) idle=185/1/0x4000000000000000 softirq=5076/5082 fqs=0 last_accelerate: 9e60/c570 dyntick_enabled: 1 [ 151.064518][ C1] (t=10000 jiffies g=3673 q=2) [ 151.069386][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 9999 jiffies! g3673 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 151.081617][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=817 [ 151.089441][ C1] rcu: rcu_preempt kthread starved for 10000 jiffies! g3673 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 151.100830][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 151.111035][ C1] rcu: RCU grace-period kthread stack dump: [ 151.117504][ C1] task:rcu_preempt state:I stack:28640 pid: 14 ppid: 2 flags:0x00004000 [ 151.126826][ C1] Call Trace: [ 151.130212][ C1] [ 151.133151][ C1] __schedule+0xb6e/0x14c0 [ 151.137583][ C1] ? release_firmware_map_entry+0x190/0x190 [ 151.143673][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 151.149668][ C1] ? __mod_timer+0x7da/0xb50 [ 151.154389][ C1] schedule+0x11e/0x1e0 [ 151.158677][ C1] schedule_timeout+0x159/0x340 [ 151.163566][ C1] ? console_conditional_schedule+0x30/0x30 [ 151.169480][ C1] ? update_process_times+0x200/0x200 [ 151.174869][ C1] ? prepare_to_swait_event+0x308/0x320 [ 151.180839][ C1] rcu_gp_fqs_loop+0x2ae/0xf80 [ 151.185630][ C1] ? __kasan_check_write+0x14/0x20 [ 151.190766][ C1] ? debug_smp_processor_id+0x17/0x20 [ 151.196147][ C1] ? __note_gp_changes+0x4e2/0x9e0 [ 151.201272][ C1] ? rcu_gp_init+0xc00/0xc00 [ 151.205950][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 151.211157][ C1] ? rcu_gp_init+0x9a7/0xc00 [ 151.215761][ C1] rcu_gp_kthread+0x9b/0x360 [ 151.220392][ C1] ? _raw_spin_lock+0xf0/0xf0 [ 151.225325][ C1] ? wake_nocb_gp+0x1d0/0x1d0 [ 151.230040][ C1] ? __kasan_check_read+0x11/0x20 [ 151.235169][ C1] ? __kthread_parkme+0xac/0x200 [ 151.240115][ C1] kthread+0x411/0x500 [ 151.244193][ C1] ? wake_nocb_gp+0x1d0/0x1d0 [ 151.248881][ C1] ? kthread_blkcg+0xd0/0xd0 [ 151.253531][ C1] ret_from_fork+0x1f/0x30 [ 151.258141][ C1] [ 151.261264][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 151.267697][ C1] Sending NMI from CPU 1 to CPUs 0: [ 151.272988][ C0] NMI backtrace for cpu 0 [ 151.273007][ C0] CPU: 0 PID: 933 Comm: syz.2.178 Not tainted syzkaller #0 [ 151.273024][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.273037][ C0] RIP: 0010:kvm_wait+0x105/0x150 [ 151.273061][ C0] Code: 1d d6 03 f4 eb 87 fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d 3d 1d d6 03 fb f4 5e ff ff ff fb e9 58 ff ff ff e8 5b 52 7d 03 89 f9 80 e1 07 38 [ 151.273075][ C0] RSP: 0018:ffffc90003b4f6c0 EFLAGS: 00000246 [ 151.273090][ C0] RAX: 0000000000000003 RBX: ffff888110ca4a88 RCX: ffffffff81500419 [ 151.273102][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff888110ca4a88 [ 151.273112][ C0] RBP: ffffc90003b4f750 R08: ffff888110ca4a88 R09: 1ffff11022194951 [ 151.273125][ C0] R10: dffffc0000000000 R11: ffffed1022194952 R12: 1ffff1103ee00001 [ 151.273137][ C0] R13: ffff8881f7038ad4 R14: dffffc0000000000 R15: 1ffff92000769ed8 [ 151.273150][ C0] FS: 00007f84ebee96c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 151.273171][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.273182][ C0] CR2: 0000000020000000 CR3: 000000011d097000 CR4: 00000000003506b0 [ 151.273197][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 151.273207][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 151.273217][ C0] Call Trace: [ 151.273223][ C0] [ 151.273230][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 151.273249][ C0] __pv_queued_spin_lock_slowpath+0x60f/0x9c0 [ 151.273270][ C0] ? __pv_queued_spin_unlock_slowpath+0x300/0x300 [ 151.273287][ C0] ? avc_has_perm+0x163/0x250 [ 151.273305][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 151.273322][ C0] _raw_spin_lock_bh+0xe4/0xf0 [ 151.273340][ C0] ? _raw_spin_lock_irq+0xf0/0xf0 [ 151.273358][ C0] ? selinux_socket_sendmsg+0x22f/0x340 [ 151.273377][ C0] lock_sock_nested+0x95/0x2a0 [ 151.273395][ C0] ? sock_init_data+0xc0/0xc0 [ 151.273411][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 151.273436][ C0] ? _raw_spin_unlock_bh+0x51/0x60 [ 151.273454][ C0] tipc_sendstream+0x47/0x70 [ 151.273470][ C0] ? tipc_getsockopt+0x4d0/0x4d0 [ 151.273485][ C0] ____sys_sendmsg+0x5b7/0x8f0 [ 151.273509][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 151.273529][ C0] ? import_iovec+0x7c/0xb0 [ 151.273547][ C0] ___sys_sendmsg+0x236/0x2e0 [ 151.273566][ C0] ? __sys_sendmsg+0x280/0x280 [ 151.273585][ C0] ? memcpy+0x56/0x70 [ 151.273605][ C0] ? __fdget+0x1a1/0x230 [ 151.273629][ C0] __x64_sys_sendmsg+0x206/0x2f0 [ 151.273651][ C0] ? ___sys_sendmsg+0x2e0/0x2e0 [ 151.273671][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 151.273691][ C0] x64_sys_call+0x4b/0x9a0 [ 151.273707][ C0] do_syscall_64+0x4c/0xa0 [ 151.273725][ C0] ? clear_bhb_loop+0x50/0xa0 [ 151.273739][ C0] ? clear_bhb_loop+0x50/0xa0 [ 151.273753][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.273772][ C0] RIP: 0033:0x7f84ec481479 [ 151.273797][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.273810][ C0] RSP: 002b:00007f84ebee9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.273826][ C0] RAX: ffffffffffffffda RBX: 00007f84ec6affa0 RCX: 00007f84ec481479 [ 151.273838][ C0] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 151.273847][ C0] RBP: 00007f84ec5121bc R08: 0000000000000000 R09: 0000000000000000 [ 151.273858][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.273867][ C0] R13: 0000000000000000 R14: 00007f84ec6affa0 R15: 00007ffe35af7ce8 [ 151.273881][ C0] [ 151.274069][ C1] NMI backtrace for cpu 1 [ 151.640968][ C1] CPU: 1 PID: 934 Comm: syz.2.178 Not tainted syzkaller #0 [ 151.648537][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.658604][ C1] Call Trace: [ 151.661978][ C1] [ 151.664827][ C1] __dump_stack+0x21/0x30 [ 151.669178][ C1] dump_stack_lvl+0x110/0x170 [ 151.673870][ C1] ? show_regs_print_info+0x20/0x20 [ 151.679096][ C1] ? resched_curr+0xa0/0x320 [ 151.683701][ C1] ? wake_up_process+0x20/0x20 [ 151.688504][ C1] dump_stack+0x15/0x20 [ 151.692663][ C1] nmi_cpu_backtrace+0x2af/0x2c0 [ 151.697698][ C1] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 151.703974][ C1] ? __kasan_check_write+0x14/0x20 [ 151.709121][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 151.714771][ C1] ? _raw_spin_lock+0xf0/0xf0 [ 151.719468][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 151.725625][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 151.731702][ C1] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 151.737791][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 151.744043][ C1] rcu_dump_cpu_stacks+0x1c7/0x300 [ 151.749178][ C1] print_cpu_stall+0x320/0x600 [ 151.753958][ C1] rcu_sched_clock_irq+0x759/0x12c0 [ 151.759261][ C1] ? rcu_boost_kthread_setaffinity+0x320/0x320 [ 151.765432][ C1] ? raise_softirq+0x7d/0xf0 [ 151.770206][ C1] ? __raise_softirq_irqoff+0xd0/0xd0 [ 151.775793][ C1] ? hrtimer_run_queues+0x166/0x430 [ 151.781292][ C1] update_process_times+0x198/0x200 [ 151.786584][ C1] tick_sched_timer+0x17c/0x240 [ 151.791459][ C1] ? tick_setup_sched_timer+0x450/0x450 [ 151.797158][ C1] __hrtimer_run_queues+0x39f/0x8c0 [ 151.802473][ C1] ? __kasan_check_write+0x14/0x20 [ 151.807692][ C1] ? hrtimer_interrupt+0x8c0/0x8c0 [ 151.812934][ C1] ? ktime_get_update_offsets_now+0x2fa/0x310 [ 151.819107][ C1] hrtimer_interrupt+0x3c7/0x8c0 [ 151.824330][ C1] __sysvec_apic_timer_interrupt+0xfa/0x3e0 [ 151.830378][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 151.836105][ C1] [ 151.839412][ C1] [ 151.842337][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 151.848413][ C1] RIP: 0010:kasan_check_range+0x13/0x2a0 [ 151.854236][ C1] Code: 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc b0 01 48 85 f6 0f 84 c0 01 00 00 55 48 89 e5 41 57 41 56 <41> 55 41 54 53 49 89 f8 49 01 f0 0f 82 1d 02 00 00 49 89 f8 49 c1 [ 151.874387][ C1] RSP: 0018:ffffc90003b5e690 EFLAGS: 00000202 [ 151.880464][ C1] RAX: 0000000000000301 RBX: ffff888110ca4a80 RCX: ffffffff84987e0d [ 151.888441][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888110ca4a80 [ 151.896848][ C1] RBP: ffffc90003b5e6a0 R08: 0000000000000004 R09: 0000000003b5e703 [ 151.904925][ C1] R10: dffffc0000000000 R11: fffff5200076bce8 R12: dffffc0000000000 [ 151.913068][ C1] R13: ffff888110ca4a00 R14: 0000000000000000 R15: fffffffffffffc08 [ 151.921133][ C1] ? tipc_sk_lookup+0x4dd/0x5f0 [ 151.926010][ C1] __kasan_check_write+0x14/0x20 [ 151.931112][ C1] tipc_sk_lookup+0x4dd/0x5f0 [ 151.935918][ C1] ? tipc_sk_rcv+0x2c20/0x2c20 [ 151.940801][ C1] ? tipc_sk_rcv+0x1a08/0x2c20 [ 151.945734][ C1] tipc_sk_rcv+0x3aa/0x2c20 [ 151.950261][ C1] ? stack_trace_save+0xa6/0xf0 [ 151.955306][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 151.961153][ C1] ? kasan_set_track+0x5b/0x70 [ 151.965931][ C1] ? kasan_set_free_info+0x23/0x40 [ 151.971068][ C1] ? tipc_sk_rcv+0x1b82/0x2c20 [ 151.975848][ C1] ? tipc_sk_proto_rcv+0xa65/0x1560 [ 151.981078][ C1] ? tipc_sk_backlog_rcv+0x17d/0x210 [ 151.986383][ C1] ? __release_sock+0x17c/0x3f0 [ 151.991421][ C1] ? sock_setsockopt+0x1d7a/0x2490 [ 151.996543][ C1] ? __skb_queue_purge+0x170/0x170 [ 152.001836][ C1] tipc_node_xmit+0x26c/0xd80 [ 152.006516][ C1] ? debug_smp_processor_id+0x17/0x20 [ 152.011904][ C1] ? kasan_quarantine_put+0x34/0x190 [ 152.017393][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 152.022949][ C1] ? ____kasan_slab_free+0x130/0x160 [ 152.028322][ C1] ? __kasan_slab_free+0x11/0x20 [ 152.033281][ C1] ? kfree_skbmem+0x10c/0x180 [ 152.037963][ C1] tipc_node_distr_xmit+0x2a3/0x3b0 [ 152.043439][ C1] ? tipc_node_xmit_skb+0x150/0x150 [ 152.048762][ C1] tipc_sk_rcv+0x19f7/0x2c20 [ 152.053382][ C1] ? __skb_queue_purge+0x170/0x170 [ 152.058596][ C1] tipc_node_xmit+0x26c/0xd80 [ 152.063286][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 152.068842][ C1] tipc_sk_push_backlog+0x4dd/0x790 [ 152.074061][ C1] tipc_sk_proto_rcv+0xa65/0x1560 [ 152.079274][ C1] ? tipc_sk_filter_rcv+0x2cb0/0x2cb0 [ 152.084654][ C1] ? unwind_get_return_address+0x4d/0x90 [ 152.090394][ C1] ? stack_trace_save+0xf0/0xf0 [ 152.095371][ C1] ? arch_stack_walk+0x50/0x140 [ 152.100342][ C1] tipc_sk_filter_rcv+0x2ac0/0x2cb0 [ 152.105554][ C1] ? stack_trace_save+0xa6/0xf0 [ 152.110602][ C1] ? __stack_depot_save+0x34/0x480 [ 152.115911][ C1] ? kasan_set_track+0x5b/0x70 [ 152.120694][ C1] ? kasan_set_track+0x5b/0x70 [ 152.125550][ C1] ? kasan_set_track+0x4a/0x70 [ 152.130408][ C1] ? kasan_set_free_info+0x23/0x40 [ 152.135519][ C1] ? ____kasan_slab_free+0x125/0x160 [ 152.140812][ C1] ? __kasan_slab_free+0x11/0x20 [ 152.145751][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 152.151405][ C1] ? kmem_cache_free+0x100/0x320 [ 152.156344][ C1] ? kfree_skbmem+0x10c/0x180 [ 152.161035][ C1] ? kfree_skb+0xc1/0x2f0 [ 152.165373][ C1] ? tipc_msg_reverse+0x698/0x900 [ 152.170573][ C1] ? tipc_sk_filter_rcv+0xc05/0x2cb0 [ 152.175865][ C1] ? tipc_sk_backlog_rcv+0x117/0x210 [ 152.181174][ C1] ? __release_sock+0x17c/0x3f0 [ 152.186138][ C1] ? sock_setsockopt+0x1d7a/0x2490 [ 152.191261][ C1] ? __x64_sys_setsockopt+0xbf/0xd0 [ 152.196559][ C1] ? x64_sys_call+0x982/0x9a0 [ 152.201244][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.207587][ C1] ? tipc_sk_publish+0x470/0x470 [ 152.212678][ C1] ? __kasan_check_write+0x14/0x20 [ 152.217888][ C1] ? _raw_spin_lock_bh+0x94/0xf0 [ 152.222961][ C1] tipc_sk_rcv+0x794/0x2c20 [ 152.227586][ C1] ? kmem_cache_free+0x100/0x320 [ 152.232542][ C1] ? __skb_queue_purge+0x170/0x170 [ 152.237661][ C1] ? tipc_sk_filter_rcv+0x2a3e/0x2cb0 [ 152.243215][ C1] tipc_node_xmit+0x26c/0xd80 [ 152.247897][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 152.253451][ C1] tipc_node_distr_xmit+0x2a3/0x3b0 [ 152.258766][ C1] ? tipc_node_xmit_skb+0x150/0x150 [ 152.263979][ C1] tipc_sk_backlog_rcv+0x17d/0x210 [ 152.269191][ C1] ? tipc_sk_timeout+0x990/0x990 [ 152.274328][ C1] ? lock_sock_nested+0x21c/0x2a0 [ 152.279455][ C1] __release_sock+0x17c/0x3f0 [ 152.284146][ C1] sock_setsockopt+0x1d7a/0x2490 [ 152.289210][ C1] ? __sock_set_mark+0x160/0x160 [ 152.294159][ C1] ? selinux_socket_setsockopt+0x282/0x360 [ 152.299976][ C1] ? selinux_socket_getsockopt+0x340/0x340 [ 152.305785][ C1] ? __fget_files+0x2c4/0x320 [ 152.310737][ C1] ? security_socket_setsockopt+0x82/0xa0 [ 152.316462][ C1] __sys_setsockopt+0x261/0x470 [ 152.321328][ C1] ? __ia32_sys_recv+0xb0/0xb0 [ 152.326106][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 152.331145][ C1] x64_sys_call+0x982/0x9a0 [ 152.335826][ C1] do_syscall_64+0x4c/0xa0 [ 152.340432][ C1] ? clear_bhb_loop+0x50/0xa0 [ 152.345209][ C1] ? clear_bhb_loop+0x50/0xa0 [ 152.349890][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.355790][ C1] RIP: 0033:0x7f84ec481479 [ 152.360215][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.379905][ C1] RSP: 002b:00007f84ebec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 152.388493][ C1] RAX: ffffffffffffffda RBX: 00007f84ec6b0080 RCX: 00007f84ec481479 [ 152.396665][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 152.404759][ C1] RBP: 00007f84ec5121bc R08: 0000000000000004 R09: 0000000000000000 [ 152.412863][ C1] R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000000 [ 152.421035][ C1] R13: 0000000000000001 R14: 00007f84ec6b0080 R15: 00007ffe35af7ce8 [ 152.429022][ C1] [ 287.309612][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 225s! [syz.2.178:933] [ 287.317875][ C0] Modules linked in: [ 287.322174][ C0] CPU: 0 PID: 933 Comm: syz.2.178 Not tainted syzkaller #0 [ 287.329400][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 287.339747][ C0] RIP: 0010:kvm_wait+0x105/0x150 [ 287.344737][ C0] Code: 1d d6 03 f4 eb 87 fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d 3d 1d d6 03 fb f4 5e ff ff ff fb e9 58 ff ff ff e8 5b 52 7d 03 89 f9 80 e1 07 38 [ 287.364587][ C0] RSP: 0018:ffffc90003b4f6c0 EFLAGS: 00000246 [ 287.370782][ C0] RAX: 0000000000000003 RBX: ffff888110ca4a88 RCX: ffffffff81500419 [ 287.378901][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff888110ca4a88 [ 287.386925][ C0] RBP: ffffc90003b4f750 R08: ffff888110ca4a88 R09: 1ffff11022194951 [ 287.394924][ C0] R10: dffffc0000000000 R11: ffffed1022194952 R12: 1ffff1103ee00001 [ 287.403243][ C0] R13: ffff8881f7038ad4 R14: dffffc0000000000 R15: 1ffff92000769ed8 [ 287.411339][ C0] FS: 00007f84ebee96c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 287.420394][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.427006][ C0] CR2: 0000000020000000 CR3: 000000011d097000 CR4: 00000000003506b0 [ 287.435113][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.443202][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.451203][ C0] Call Trace: [ 287.454521][ C0] [ 287.457514][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 287.462659][ C0] ? __pv_queued_spin_lock_slowpath+0x5b9/0x9c0 [ 287.469055][ C0] __pv_queued_spin_lock_slowpath+0x60f/0x9c0 [ 287.475151][ C0] ? __pv_queued_spin_unlock_slowpath+0x300/0x300 [ 287.481691][ C0] ? avc_has_perm+0x163/0x250 [ 287.486453][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 287.492123][ C0] _raw_spin_lock_bh+0xe4/0xf0 [ 287.497036][ C0] ? _raw_spin_lock_irq+0xf0/0xf0 [ 287.502087][ C0] ? selinux_socket_sendmsg+0x22f/0x340 [ 287.507672][ C0] lock_sock_nested+0x95/0x2a0 [ 287.512829][ C0] ? sock_init_data+0xc0/0xc0 [ 287.517537][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 287.522497][ C0] ? _raw_spin_unlock_bh+0x51/0x60 [ 287.527627][ C0] tipc_sendstream+0x47/0x70 [ 287.532643][ C0] ? tipc_getsockopt+0x4d0/0x4d0 [ 287.537633][ C0] ____sys_sendmsg+0x5b7/0x8f0 [ 287.542627][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 287.547689][ C0] ? import_iovec+0x7c/0xb0 [ 287.552221][ C0] ___sys_sendmsg+0x236/0x2e0 [ 287.556933][ C0] ? __sys_sendmsg+0x280/0x280 [ 287.561718][ C0] ? memcpy+0x56/0x70 [ 287.565734][ C0] ? __fdget+0x1a1/0x230 [ 287.570190][ C0] __x64_sys_sendmsg+0x206/0x2f0 [ 287.575159][ C0] ? ___sys_sendmsg+0x2e0/0x2e0 [ 287.580216][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 287.586305][ C0] x64_sys_call+0x4b/0x9a0 [ 287.590785][ C0] do_syscall_64+0x4c/0xa0 [ 287.595233][ C0] ? clear_bhb_loop+0x50/0xa0 [ 287.599926][ C0] ? clear_bhb_loop+0x50/0xa0 [ 287.604658][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.610771][ C0] RIP: 0033:0x7f84ec481479 [ 287.615226][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.635416][ C0] RSP: 002b:00007f84ebee9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.644409][ C0] RAX: ffffffffffffffda RBX: 00007f84ec6affa0 RCX: 00007f84ec481479 [ 287.652524][ C0] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 287.660942][ C0] RBP: 00007f84ec5121bc R08: 0000000000000000 R09: 0000000000000000 [ 287.669282][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.677291][ C0] R13: 0000000000000000 R14: 00007f84ec6affa0 R15: 00007ffe35af7ce8 [ 287.685570][ C0] [ 287.688738][ C0] Sending NMI from CPU 0 to CPUs 1: [ 287.694007][ C1] NMI backtrace for cpu 1 [ 287.694024][ C1] CPU: 1 PID: 934 Comm: syz.2.178 Not tainted syzkaller #0 [ 287.694040][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 287.694049][ C1] RIP: 0010:tipc_sk_lookup+0xe3/0x5f0 [ 287.694071][ C1] Code: e8 a2 7b 10 fd 49 c1 e6 03 4c 03 33 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 85 7b 10 fd 49 8b 1e e8 ed 2a bf fc 98 2a bf fc 48 8d bb c8 10 00 00 48 89 f8 48 c1 e8 03 42 80 3c [ 287.694084][ C1] RSP: 0018:ffffc90003b5e6c0 EFLAGS: 00000246 [ 287.694100][ C1] RAX: 0000000000000000 RBX: ffff888117468000 RCX: dffffc0000000000 [ 287.694112][ C1] RDX: 0000000000000000 RSI: 00000000f0a9958d RDI: ffff88810dc52780 [ 287.694123][ C1] RBP: ffffc90003b5e7b0 R08: 0000000000000003 R09: 0000000000000004 [ 287.694133][ C1] R10: dffffc0000000000 R11: fffff5200076bce8 R12: dffffc0000000000 [ 287.694146][ C1] R13: dffffc0000000000 R14: ffff8881112ad130 R15: 00000000f0a9958d [ 287.694158][ C1] FS: 00007f84ebec86c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 287.694172][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.694184][ C1] CR2: 00007f84ebec7ff8 CR3: 000000011d097000 CR4: 00000000003506a0 [ 287.694199][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.694209][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.694219][ C1] Call Trace: [ 287.694224][ C1] [ 287.694231][ C1] ? __kasan_check_write+0x14/0x20 [ 287.694249][ C1] ? _raw_spin_lock_bh+0x94/0xf0 [ 287.694268][ C1] ? tipc_sk_rcv+0x2c20/0x2c20 [ 287.694284][ C1] tipc_sk_rcv+0x3aa/0x2c20 [ 287.694298][ C1] ? stack_trace_save+0xa6/0xf0 [ 287.694314][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 287.694334][ C1] ? kasan_set_track+0x5b/0x70 [ 287.694348][ C1] ? kasan_set_free_info+0x23/0x40 [ 287.694365][ C1] ? tipc_sk_rcv+0x1b82/0x2c20 [ 287.694379][ C1] ? tipc_sk_proto_rcv+0xa65/0x1560 [ 287.694394][ C1] ? tipc_sk_backlog_rcv+0x17d/0x210 [ 287.694417][ C1] ? __release_sock+0x17c/0x3f0 [ 287.694433][ C1] ? sock_setsockopt+0x1d7a/0x2490 [ 287.694449][ C1] ? __skb_queue_purge+0x170/0x170 [ 287.694468][ C1] tipc_node_xmit+0x26c/0xd80 [ 287.694486][ C1] ? debug_smp_processor_id+0x17/0x20 [ 287.694502][ C1] ? kasan_quarantine_put+0x34/0x190 [ 287.694519][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 287.694536][ C1] ? ____kasan_slab_free+0x130/0x160 [ 287.694552][ C1] ? __kasan_slab_free+0x11/0x20 [ 287.694568][ C1] ? kfree_skbmem+0x10c/0x180 [ 287.694585][ C1] tipc_node_distr_xmit+0x2a3/0x3b0 [ 287.694605][ C1] ? tipc_node_xmit_skb+0x150/0x150 [ 287.694625][ C1] tipc_sk_rcv+0x19f7/0x2c20 [ 287.694645][ C1] ? __skb_queue_purge+0x170/0x170 [ 287.694664][ C1] tipc_node_xmit+0x26c/0xd80 [ 287.694683][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 287.694704][ C1] tipc_sk_push_backlog+0x4dd/0x790 [ 287.694721][ C1] tipc_sk_proto_rcv+0xa65/0x1560 [ 287.694738][ C1] ? tipc_sk_filter_rcv+0x2cb0/0x2cb0 [ 287.694753][ C1] ? unwind_get_return_address+0x4d/0x90 [ 287.694771][ C1] ? stack_trace_save+0xf0/0xf0 [ 287.694786][ C1] ? arch_stack_walk+0x50/0x140 [ 287.694805][ C1] tipc_sk_filter_rcv+0x2ac0/0x2cb0 [ 287.694821][ C1] ? stack_trace_save+0xa6/0xf0 [ 287.694836][ C1] ? __stack_depot_save+0x34/0x480 [ 287.694854][ C1] ? kasan_set_track+0x5b/0x70 [ 287.694869][ C1] ? kasan_set_track+0x5b/0x70 [ 287.694883][ C1] ? kasan_set_track+0x4a/0x70 [ 287.694896][ C1] ? kasan_set_free_info+0x23/0x40 [ 287.694912][ C1] ? ____kasan_slab_free+0x125/0x160 [ 287.694927][ C1] ? __kasan_slab_free+0x11/0x20 [ 287.694941][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 287.694959][ C1] ? kmem_cache_free+0x100/0x320 [ 287.694975][ C1] ? kfree_skbmem+0x10c/0x180 [ 287.694991][ C1] ? kfree_skb+0xc1/0x2f0 [ 287.695007][ C1] ? tipc_msg_reverse+0x698/0x900 [ 287.695022][ C1] ? tipc_sk_filter_rcv+0xc05/0x2cb0 [ 287.695038][ C1] ? tipc_sk_backlog_rcv+0x117/0x210 [ 287.695053][ C1] ? __release_sock+0x17c/0x3f0 [ 287.695068][ C1] ? sock_setsockopt+0x1d7a/0x2490 [ 287.695084][ C1] ? __x64_sys_setsockopt+0xbf/0xd0 [ 287.695102][ C1] ? x64_sys_call+0x982/0x9a0 [ 287.695118][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.695139][ C1] ? tipc_sk_publish+0x470/0x470 [ 287.695154][ C1] ? __kasan_check_write+0x14/0x20 [ 287.695170][ C1] ? _raw_spin_lock_bh+0x94/0xf0 [ 287.695189][ C1] tipc_sk_rcv+0x794/0x2c20 [ 287.695206][ C1] ? kmem_cache_free+0x100/0x320 [ 287.695225][ C1] ? __skb_queue_purge+0x170/0x170 [ 287.695241][ C1] ? tipc_sk_filter_rcv+0x2a3e/0x2cb0 [ 287.695258][ C1] tipc_node_xmit+0x26c/0xd80 [ 287.695276][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 287.695303][ C1] tipc_node_distr_xmit+0x2a3/0x3b0 [ 287.695323][ C1] ? tipc_node_xmit_skb+0x150/0x150 [ 287.695343][ C1] tipc_sk_backlog_rcv+0x17d/0x210 [ 287.695359][ C1] ? tipc_sk_timeout+0x990/0x990 [ 287.695373][ C1] ? lock_sock_nested+0x21c/0x2a0 [ 287.695391][ C1] __release_sock+0x17c/0x3f0 [ 287.695413][ C1] sock_setsockopt+0x1d7a/0x2490 [ 287.695430][ C1] ? __sock_set_mark+0x160/0x160 [ 287.695445][ C1] ? selinux_socket_setsockopt+0x282/0x360 [ 287.695465][ C1] ? selinux_socket_getsockopt+0x340/0x340 [ 287.695485][ C1] ? __fget_files+0x2c4/0x320 [ 287.695504][ C1] ? security_socket_setsockopt+0x82/0xa0 [ 287.695521][ C1] __sys_setsockopt+0x261/0x470 [ 287.695539][ C1] ? __ia32_sys_recv+0xb0/0xb0 [ 287.695559][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 287.695577][ C1] x64_sys_call+0x982/0x9a0 [ 287.695592][ C1] do_syscall_64+0x4c/0xa0 [ 287.695608][ C1] ? clear_bhb_loop+0x50/0xa0 [ 287.695622][ C1] ? clear_bhb_loop+0x50/0xa0 [ 287.695636][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.695655][ C1] RIP: 0033:0x7f84ec481479 [ 287.695670][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.695683][ C1] RSP: 002b:00007f84ebec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 287.695698][ C1] RAX: ffffffffffffffda RBX: 00007f84ec6b0080 RCX: 00007f84ec481479 [ 287.695710][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 287.695720][ C1] RBP: 00007f84ec5121bc R08: 0000000000000004 R09: 0000000000000000 [ 287.695730][ C1] R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000000 [ 287.695740][ C1] R13: 0000000000000001 R14: 00007f84ec6b0080 R15: 00007ffe35af7ce8 [ 287.695753][ C1]