Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts. 2025/10/02 22:42:09 parsed 1 programs [ 47.376560][ T28] audit: type=1400 audit(1759444930.642:106): avc: denied { unlink } for pid=397 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 47.434578][ T397] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.199591][ T28] audit: type=1400 audit(1759444931.462:107): avc: denied { create } for pid=420 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.235501][ T28] audit: type=1401 audit(1759444931.492:108): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 48.670632][ T447] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.677838][ T447] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.685130][ T447] device bridge_slave_0 entered promiscuous mode [ 48.692021][ T447] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.699143][ T447] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.706500][ T447] device bridge_slave_1 entered promiscuous mode [ 48.743961][ T447] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.751023][ T447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.758396][ T447] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.765431][ T447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.782765][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.790703][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.798285][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.807537][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.815830][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.822884][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.831656][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.840465][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.847514][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.859390][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.869147][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.882333][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.893152][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.901401][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.909108][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.917704][ T447] device veth0_vlan entered promiscuous mode [ 48.927701][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.937045][ T447] device veth1_macvtap entered promiscuous mode [ 48.946453][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.956498][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/10/02 22:42:12 executed programs: 0 [ 49.115647][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.123662][ T463] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.131359][ T463] device bridge_slave_0 entered promiscuous mode [ 49.144706][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.152023][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.159516][ T463] device bridge_slave_1 entered promiscuous mode [ 49.206355][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.213411][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.220693][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.227726][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.253914][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.262025][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.269672][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.279154][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.288574][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.295792][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.309075][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.317360][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.324377][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.335708][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.348909][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.361625][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.372848][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.381095][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.388572][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.403013][ T463] device veth0_vlan entered promiscuous mode [ 49.412177][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.420447][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.429835][ T463] device veth1_macvtap entered promiscuous mode [ 49.438465][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.446530][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.454759][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.471867][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.480108][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.508580][ T28] audit: type=1400 audit(1759444932.772:109): avc: denied { create } for pid=473 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.528150][ T28] audit: type=1400 audit(1759444932.772:110): avc: denied { write } for pid=473 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.565450][ T28] audit: type=1400 audit(1759444932.822:111): avc: denied { setopt } for pid=473 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 149.645907][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 149.652575][ C1] rcu: 1-...!: (10001 ticks this GP) idle=460c/1/0x4000000000000000 softirq=3256/3256 fqs=0 [ 149.662747][ C1] (t=10002 jiffies g=2229 q=78 ncpus=2) [ 149.668370][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10002 jiffies! g2229 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 149.680607][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=679 [ 149.688728][ C1] rcu: rcu_preempt kthread starved for 10005 jiffies! g2229 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 149.699985][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 149.709959][ C1] rcu: RCU grace-period kthread stack dump: [ 149.715865][ C1] task:rcu_preempt state:I stack:28352 pid:14 ppid:2 flags:0x00004000 [ 149.725102][ C1] Call Trace: [ 149.728369][ C1] [ 149.731304][ C1] __schedule+0xb87/0x14e0 [ 149.735718][ C1] ? release_firmware_map_entry+0x194/0x194 [ 149.741674][ C1] ? __mod_timer+0x7ae/0xb30 [ 149.746288][ C1] schedule+0xbd/0x170 [ 149.750354][ C1] schedule_timeout+0x12c/0x2e0 [ 149.755184][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 149.760560][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 149.766020][ C1] ? __cfi_process_timeout+0x10/0x10 [ 149.771392][ C1] ? prepare_to_swait_event+0x308/0x320 [ 149.776936][ C1] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 149.781784][ C1] ? rcu_gp_init+0xf10/0xf10 [ 149.786465][ C1] rcu_gp_kthread+0x95/0x370 [ 149.791060][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 149.796239][ C1] ? __kasan_check_read+0x11/0x20 [ 149.801424][ C1] ? __kthread_parkme+0x142/0x180 [ 149.806432][ C1] kthread+0x281/0x320 [ 149.810484][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 149.815662][ C1] ? __cfi_kthread+0x10/0x10 [ 149.820224][ C1] ret_from_fork+0x1f/0x30 [ 149.824619][ C1] [ 149.827644][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 149.833959][ C1] CPU: 1 PID: 477 Comm: syz.2.17 Not tainted syzkaller #0 [ 149.841051][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 149.851193][ C1] RIP: 0010:tipc_sk_rcv+0x1aca/0x2cc0 [ 149.856562][ C1] Code: 06 ff ff 48 8b 7c 24 70 48 83 ef 80 48 89 7c 24 70 be 04 00 00 00 e8 25 59 e7 fc bb ff ff ff ff f0 41 0f c1 9c 24 80 00 00 00 01 00 00 00 89 de e8 ba eb a2 fc 83 fb 01 75 0f e8 90 e7 a2 fc [ 149.876161][ C1] RSP: 0018:ffffc90000a96980 EFLAGS: 00000213 [ 149.882235][ C1] RAX: 0000000000000001 RBX: 0000000000000005 RCX: ffffffff84cd364b [ 149.890274][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff8881207c4a80 [ 149.898312][ C1] RBP: ffffc90000a96c10 R08: dffffc0000000000 R09: ffffed10240f8951 [ 149.906261][ C1] R10: ffffed10240f8951 R11: 1ffff110240f8950 R12: ffff8881207c4a00 [ 149.914217][ C1] R13: dffffc0000000000 R14: ffffc90000a96dc0 R15: 00000000c638636f [ 149.922282][ C1] FS: 00007fd6e13ff6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 149.931200][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.937786][ C1] CR2: 00007fd6e13ddf98 CR3: 000000010fde7000 CR4: 00000000003506a0 [ 149.945747][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 149.953881][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 149.961859][ C1] Call Trace: [ 149.965129][ C1] [ 149.968042][ C1] ? __stack_depot_save+0x445/0x480 [ 149.973221][ C1] ? kasan_set_track+0x60/0x70 [ 149.978649][ C1] ? kasan_set_track+0x4b/0x70 [ 149.983499][ C1] ? kasan_save_free_info+0x31/0x50 [ 149.988790][ C1] ? ____kasan_slab_free+0x132/0x180 [ 149.994064][ C1] ? __kasan_slab_free+0x11/0x20 [ 149.999008][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 150.004741][ C1] ? kmem_cache_free+0x12d/0x300 [ 150.009844][ C1] ? kfree_skbmem+0x10c/0x180 [ 150.014495][ C1] ? kfree_skb_reason+0xdc/0x230 [ 150.019406][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 150.024411][ C1] ? tipc_node_xmit+0x257/0xd00 [ 150.029234][ C1] ? tipc_release+0xd32/0x1650 [ 150.033971][ C1] ? syscall_exit_to_user_mode+0x1a/0x30 [ 150.039589][ C1] ? do_syscall_64+0x58/0xa0 [ 150.044160][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.050320][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 150.055273][ C1] tipc_node_xmit+0x257/0xd00 [ 150.060033][ C1] ? ____kasan_slab_free+0x13d/0x180 [ 150.065416][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 150.070609][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 150.076226][ C1] ? kfree_skbmem+0x10c/0x180 [ 150.080894][ C1] ? kmem_cache_free+0x12d/0x300 [ 150.085829][ C1] tipc_node_xmit_skb+0xe9/0x130 [ 150.090949][ C1] ? kfree_skb_reason+0xdc/0x230 [ 150.096131][ C1] ? __cfi_tipc_node_xmit_skb+0x10/0x10 [ 150.101693][ C1] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 150.107058][ C1] tipc_sk_rcv+0x1def/0x2cc0 [ 150.111642][ C1] ? _raw_spin_unlock+0x4c/0x70 [ 150.116467][ C1] ? finish_task_switch+0x16b/0x7b0 [ 150.121658][ C1] ? __switch_to_asm+0x3a/0x60 [ 150.126488][ C1] ? __schedule+0xb8f/0x14e0 [ 150.131066][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 150.135999][ C1] tipc_node_xmit+0x257/0xd00 [ 150.140836][ C1] ? is_bpf_text_address+0x177/0x190 [ 150.146107][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 150.151382][ C1] ? kernel_text_address+0xa0/0xd0 [ 150.156500][ C1] ? __kernel_text_address+0xd/0x30 [ 150.161705][ C1] ? unwind_get_return_address+0x4d/0x90 [ 150.167461][ C1] ? __kasan_check_write+0x14/0x20 [ 150.172553][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 150.178078][ C1] tipc_sk_filter_rcv+0x155f/0x2c80 [ 150.183260][ C1] ? tipc_sk_publish+0x440/0x440 [ 150.188372][ C1] ? __kasan_check_write+0x14/0x20 [ 150.193459][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 150.198379][ C1] tipc_sk_rcv+0x7d9/0x2cc0 [ 150.202953][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 150.207964][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 150.212921][ C1] ? tipc_sk_filter_rcv+0x2a1c/0x2c80 [ 150.218279][ C1] tipc_node_xmit+0x257/0xd00 [ 150.222946][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 150.228125][ C1] ? kasan_quarantine_put+0x34/0x190 [ 150.233543][ C1] tipc_node_distr_xmit+0x292/0x390 [ 150.238917][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 150.244705][ C1] ? kfree_skbmem+0x10c/0x180 [ 150.249362][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 150.254460][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 150.260069][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 150.265523][ C1] __release_sock+0x154/0x380 [ 150.270319][ C1] release_sock+0x60/0x1c0 [ 150.274706][ C1] tipc_release+0xd32/0x1650 [ 150.279339][ C1] ? __cfi_tipc_release+0x10/0x10 [ 150.284346][ C1] sock_close+0xf1/0x290 [ 150.288579][ C1] ? __cfi_sock_close+0x10/0x10 [ 150.293420][ C1] __fput+0x1fc/0x8f0 [ 150.297410][ C1] ____fput+0x15/0x20 [ 150.301480][ C1] task_work_run+0x1db/0x240 [ 150.306061][ C1] ? __cfi_task_work_run+0x10/0x10 [ 150.311171][ C1] ? __kasan_check_write+0x14/0x20 [ 150.316378][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 150.321575][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 150.327100][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 150.332538][ C1] do_syscall_64+0x58/0xa0 [ 150.336930][ C1] ? clear_bhb_loop+0x30/0x80 [ 150.341603][ C1] ? clear_bhb_loop+0x30/0x80 [ 150.346361][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.352249][ C1] RIP: 0033:0x7fd6e158e929 [ 150.356674][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.376704][ C1] RSP: 002b:00007fd6e13ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.385191][ C1] RAX: 00000000000203a0 RBX: 00007fd6e17b5fa0 RCX: 00007fd6e158e929 [ 150.393228][ C1] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 150.401180][ C1] RBP: 00007fd6e1610b39 R08: 0000000000000000 R09: 0000000000000000 [ 150.409234][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.417195][ C1] R13: 0000000000000000 R14: 00007fd6e17b5fa0 R15: 00007ffcee0026f8 [ 150.425237][ C1] [ 150.428382][ C1] CPU: 1 PID: 477 Comm: syz.2.17 Not tainted syzkaller #0 [ 150.435550][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 150.445681][ C1] RIP: 0010:tipc_sk_rcv+0x1aca/0x2cc0 [ 150.451041][ C1] Code: 06 ff ff 48 8b 7c 24 70 48 83 ef 80 48 89 7c 24 70 be 04 00 00 00 e8 25 59 e7 fc bb ff ff ff ff f0 41 0f c1 9c 24 80 00 00 00 01 00 00 00 89 de e8 ba eb a2 fc 83 fb 01 75 0f e8 90 e7 a2 fc [ 150.470627][ C1] RSP: 0018:ffffc90000a96980 EFLAGS: 00000213 [ 150.476857][ C1] RAX: 0000000000000001 RBX: 0000000000000005 RCX: ffffffff84cd364b [ 150.484805][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff8881207c4a80 [ 150.492861][ C1] RBP: ffffc90000a96c10 R08: dffffc0000000000 R09: ffffed10240f8951 [ 150.500812][ C1] R10: ffffed10240f8951 R11: 1ffff110240f8950 R12: ffff8881207c4a00 [ 150.508800][ C1] R13: dffffc0000000000 R14: ffffc90000a96dc0 R15: 00000000c638636f [ 150.516853][ C1] FS: 00007fd6e13ff6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 150.525863][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.532440][ C1] CR2: 00007fd6e13ddf98 CR3: 000000010fde7000 CR4: 00000000003506a0 [ 150.540414][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 150.548372][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 150.556326][ C1] Call Trace: [ 150.559596][ C1] [ 150.562515][ C1] ? __stack_depot_save+0x445/0x480 [ 150.567693][ C1] ? kasan_set_track+0x60/0x70 [ 150.572560][ C1] ? kasan_set_track+0x4b/0x70 [ 150.577443][ C1] ? kasan_save_free_info+0x31/0x50 [ 150.582638][ C1] ? ____kasan_slab_free+0x132/0x180 [ 150.587992][ C1] ? __kasan_slab_free+0x11/0x20 [ 150.592916][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 150.598450][ C1] ? kmem_cache_free+0x12d/0x300 [ 150.603371][ C1] ? kfree_skbmem+0x10c/0x180 [ 150.608123][ C1] ? kfree_skb_reason+0xdc/0x230 [ 150.613068][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 150.618093][ C1] ? tipc_node_xmit+0x257/0xd00 [ 150.622934][ C1] ? tipc_release+0xd32/0x1650 [ 150.627776][ C1] ? syscall_exit_to_user_mode+0x1a/0x30 [ 150.633660][ C1] ? do_syscall_64+0x58/0xa0 [ 150.638247][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.644410][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 150.649330][ C1] tipc_node_xmit+0x257/0xd00 [ 150.653985][ C1] ? ____kasan_slab_free+0x13d/0x180 [ 150.659245][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 150.664416][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 150.669940][ C1] ? kfree_skbmem+0x10c/0x180 [ 150.674645][ C1] ? kmem_cache_free+0x12d/0x300 [ 150.679621][ C1] tipc_node_xmit_skb+0xe9/0x130 [ 150.684724][ C1] ? kfree_skb_reason+0xdc/0x230 [ 150.689742][ C1] ? __cfi_tipc_node_xmit_skb+0x10/0x10 [ 150.695292][ C1] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 150.700667][ C1] tipc_sk_rcv+0x1def/0x2cc0 [ 150.705246][ C1] ? _raw_spin_unlock+0x4c/0x70 [ 150.710080][ C1] ? finish_task_switch+0x16b/0x7b0 [ 150.715288][ C1] ? __switch_to_asm+0x3a/0x60 [ 150.720042][ C1] ? __schedule+0xb8f/0x14e0 [ 150.724661][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 150.729676][ C1] tipc_node_xmit+0x257/0xd00 [ 150.734329][ C1] ? is_bpf_text_address+0x177/0x190 [ 150.739605][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 150.744802][ C1] ? kernel_text_address+0xa0/0xd0 [ 150.749920][ C1] ? __kernel_text_address+0xd/0x30 [ 150.755097][ C1] ? unwind_get_return_address+0x4d/0x90 [ 150.760705][ C1] ? __kasan_check_write+0x14/0x20 [ 150.765792][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 150.771411][ C1] tipc_sk_filter_rcv+0x155f/0x2c80 [ 150.776664][ C1] ? tipc_sk_publish+0x440/0x440 [ 150.781610][ C1] ? __kasan_check_write+0x14/0x20 [ 150.786908][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 150.791842][ C1] tipc_sk_rcv+0x7d9/0x2cc0 [ 150.796335][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 150.801355][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 150.806296][ C1] ? tipc_sk_filter_rcv+0x2a1c/0x2c80 [ 150.811654][ C1] tipc_node_xmit+0x257/0xd00 [ 150.816326][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 150.821641][ C1] ? kasan_quarantine_put+0x34/0x190 [ 150.827002][ C1] tipc_node_distr_xmit+0x292/0x390 [ 150.832188][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 150.838015][ C1] ? kfree_skbmem+0x10c/0x180 [ 150.843133][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 150.848256][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 150.853875][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 150.859344][ C1] __release_sock+0x154/0x380 [ 150.864109][ C1] release_sock+0x60/0x1c0 [ 150.868508][ C1] tipc_release+0xd32/0x1650 [ 150.873080][ C1] ? __cfi_tipc_release+0x10/0x10 [ 150.878180][ C1] sock_close+0xf1/0x290 [ 150.882405][ C1] ? __cfi_sock_close+0x10/0x10 [ 150.887425][ C1] __fput+0x1fc/0x8f0 [ 150.891405][ C1] ____fput+0x15/0x20 [ 150.895379][ C1] task_work_run+0x1db/0x240 [ 150.899952][ C1] ? __cfi_task_work_run+0x10/0x10 [ 150.905059][ C1] ? __kasan_check_write+0x14/0x20 [ 150.910187][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 150.915382][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 150.920820][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 150.926275][ C1] do_syscall_64+0x58/0xa0 [ 150.930675][ C1] ? clear_bhb_loop+0x30/0x80 [ 150.935420][ C1] ? clear_bhb_loop+0x30/0x80 [ 150.940072][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.945945][ C1] RIP: 0033:0x7fd6e158e929 [ 150.950364][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.970258][ C1] RSP: 002b:00007fd6e13ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.978771][ C1] RAX: 00000000000203a0 RBX: 00007fd6e17b5fa0 RCX: 00007fd6e158e929 [ 150.986916][ C1] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 150.994892][ C1] RBP: 00007fd6e1610b39 R08: 0000000000000000 R09: 0000000000000000 [ 151.002860][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.010875][ C1] R13: 0000000000000000 R14: 00007fd6e17b5fa0 R15: 00007ffcee0026f8 [ 151.018847][ C1] [ 199.412594][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 143s! [syz.2.17:476] [ 199.420660][ C0] Modules linked in: [ 199.424581][ C0] CPU: 0 PID: 476 Comm: syz.2.17 Not tainted syzkaller #0 [ 199.431673][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 199.441730][ C0] RIP: 0010:kvm_wait+0xf2/0x140 [ 199.446586][ C0] Code: 96 13 04 f4 eb 9a fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d 20 96 13 04 fb f4 71 ff ff ff fb e9 6b ff ff ff e8 ae c9 b8 03 89 f9 80 e1 07 38 [ 199.466179][ C0] RSP: 0018:ffffc90000ba78a0 EFLAGS: 00000246 [ 199.472246][ C0] RAX: 0000000000000003 RBX: ffff8881207c4a98 RCX: ffffffff84f43dc2 [ 199.480209][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881207c4a98 [ 199.488175][ C0] RBP: ffffc90000ba7930 R08: dffffc0000000000 R09: ffffed10240f8954 [ 199.496224][ C0] R10: ffffed10240f8954 R11: 1ffff110240f8953 R12: 1ffff1103ee00001 [ 199.504186][ C0] R13: ffff8881f7038cd4 R14: dffffc0000000000 R15: 1ffff92000174f14 [ 199.512325][ C0] FS: 0000555577951500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 199.521243][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.527824][ C0] CR2: 0000200000009000 CR3: 000000010fde7000 CR4: 00000000003506b0 [ 199.535784][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.543741][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.551701][ C0] Call Trace: [ 199.554979][ C0] [ 199.557914][ C0] ? __cfi_kvm_wait+0x10/0x10 [ 199.562586][ C0] ? __pv_queued_spin_lock_slowpath+0x632/0xc40 [ 199.568879][ C0] __pv_queued_spin_lock_slowpath+0x690/0xc40 [ 199.574941][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 199.581521][ C0] ? __stack_depot_save+0x36/0x480 [ 199.586623][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 199.592081][ C0] _raw_spin_lock_bh+0xd8/0xe0 [ 199.596861][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 199.602315][ C0] ? do_syscall_64+0x4c/0xa0 [ 199.606895][ C0] lock_sock_nested+0x92/0x280 [ 199.611655][ C0] ? __cfi_lock_sock_nested+0x10/0x10 [ 199.617023][ C0] ? __cfi_locks_remove_file+0x10/0x10 [ 199.622511][ C0] tipc_release+0xb2/0x1650 [ 199.627012][ C0] ? rwsem_write_trylock+0x130/0x300 [ 199.632300][ C0] ? __cfi_tipc_release+0x10/0x10 [ 199.637333][ C0] ? task_work_add+0x2b1/0x330 [ 199.642110][ C0] sock_close+0xf1/0x290 [ 199.646561][ C0] ? __cfi_sock_close+0x10/0x10 [ 199.651411][ C0] __fput+0x1fc/0x8f0 [ 199.655400][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 199.660342][ C0] ____fput+0x15/0x20 [ 199.664344][ C0] task_work_run+0x1db/0x240 [ 199.668928][ C0] ? __cfi_task_work_run+0x10/0x10 [ 199.674118][ C0] ? __cfi___close_range+0x10/0x10 [ 199.679225][ C0] exit_to_user_mode_loop+0x9b/0xb0 [ 199.684436][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 199.689912][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 199.695369][ C0] do_syscall_64+0x58/0xa0 [ 199.699786][ C0] ? clear_bhb_loop+0x30/0x80 [ 199.704465][ C0] ? clear_bhb_loop+0x30/0x80 [ 199.709143][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.715113][ C0] RIP: 0033:0x7fd6e158e929 [ 199.719524][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.739115][ C0] RSP: 002b:00007ffcee002858 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 199.747605][ C0] RAX: 0000000000000000 RBX: 00007fd6e17b7ba0 RCX: 00007fd6e158e929 [ 199.755563][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 199.763524][ C0] RBP: 00007fd6e17b7ba0 R08: 0000000000000000 R09: 00000005ee002b4f [ 199.771566][ C0] R10: 00007fd6e17b7ac0 R11: 0000000000000246 R12: 000000000000c4dc [ 199.779529][ C0] R13: 00007fd6e17b6080 R14: ffffffffffffffff R15: 00007ffcee002970 [ 199.787503][ C0] [ 199.790526][ C0] Sending NMI from CPU 0 to CPUs 1: [ 199.795738][ C1] NMI backtrace for cpu 1 [ 199.795747][ C1] CPU: 1 PID: 477 Comm: syz.2.17 Not tainted syzkaller #0 [ 199.795760][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 199.795768][ C1] RIP: 0010:tipc_sk_lookup+0x75/0x620 [ 199.795794][ C1] Code: 48 c7 44 24 70 50 48 cd 84 48 8d 4c 24 60 48 c1 e9 03 48 b8 f1 f1 f1 f1 04 f3 f3 f3 48 89 4c 24 40 4a 89 04 39 e8 3b d5 a2 fc <44> 89 b4 24 80 00 00 00 48 c7 c0 f8 99 73 87 48 c1 e8 03 42 0f b6 [ 199.795805][ C1] RSP: 0018:ffffc90000a96880 EFLAGS: 00000293 [ 199.795817][ C1] RAX: ffffffff84cd48c5 RBX: ffff88811cad8000 RCX: ffff88811ccb1440 [ 199.795827][ C1] RDX: 0000000000000000 RSI: 00000000c638636f RDI: ffff88811cad8000 [ 199.795837][ C1] RBP: ffffc90000a96970 R08: 0000000000000004 R09: 0000000000000003 [ 199.795845][ C1] R10: fffff52000152d20 R11: 1ffff92000152d20 R12: ffff88811cad8000 [ 199.795855][ C1] R13: dffffc0000000000 R14: 00000000c638636f R15: dffffc0000000000 [ 199.795868][ C1] FS: 00007fd6e13ff6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 199.795880][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.795889][ C1] CR2: 00007fd6e13ddf98 CR3: 000000010fde7000 CR4: 00000000003506a0 [ 199.795902][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.795910][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.795918][ C1] Call Trace: [ 199.795923][ C1] [ 199.795928][ C1] ? kasan_check_range+0x11/0x290 [ 199.795948][ C1] ? __kasan_check_write+0x14/0x20 [ 199.795960][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 199.795974][ C1] ? tipc_sk_rcv+0x2cc0/0x2cc0 [ 199.795994][ C1] ? kasan_check_range+0x7f/0x290 [ 199.796017][ C1] tipc_sk_rcv+0x419/0x2cc0 [ 199.796036][ C1] ? __stack_depot_save+0x445/0x480 [ 199.796051][ C1] ? kasan_set_track+0x60/0x70 [ 199.796065][ C1] ? kasan_set_track+0x4b/0x70 [ 199.796078][ C1] ? kasan_save_free_info+0x31/0x50 [ 199.796098][ C1] ? ____kasan_slab_free+0x132/0x180 [ 199.796113][ C1] ? __kasan_slab_free+0x11/0x20 [ 199.796128][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 199.796148][ C1] ? kmem_cache_free+0x12d/0x300 [ 199.796165][ C1] ? kfree_skbmem+0x10c/0x180 [ 199.796177][ C1] ? kfree_skb_reason+0xdc/0x230 [ 199.796189][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 199.796208][ C1] ? tipc_node_xmit+0x257/0xd00 [ 199.796226][ C1] ? tipc_release+0xd32/0x1650 [ 199.796239][ C1] ? syscall_exit_to_user_mode+0x1a/0x30 [ 199.796258][ C1] ? do_syscall_64+0x58/0xa0 [ 199.796284][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.796302][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 199.796324][ C1] tipc_node_xmit+0x257/0xd00 [ 199.796342][ C1] ? ____kasan_slab_free+0x13d/0x180 [ 199.796358][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 199.796375][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 199.796396][ C1] ? kfree_skbmem+0x10c/0x180 [ 199.796408][ C1] ? kmem_cache_free+0x12d/0x300 [ 199.796426][ C1] tipc_node_xmit_skb+0xe9/0x130 [ 199.796444][ C1] ? kfree_skb_reason+0xdc/0x230 [ 199.796456][ C1] ? __cfi_tipc_node_xmit_skb+0x10/0x10 [ 199.796475][ C1] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 199.796495][ C1] tipc_sk_rcv+0x1def/0x2cc0 [ 199.796514][ C1] ? _raw_spin_unlock+0x4c/0x70 [ 199.796528][ C1] ? finish_task_switch+0x16b/0x7b0 [ 199.796546][ C1] ? __switch_to_asm+0x3a/0x60 [ 199.796563][ C1] ? __schedule+0xb8f/0x14e0 [ 199.796581][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 199.796604][ C1] tipc_node_xmit+0x257/0xd00 [ 199.796621][ C1] ? is_bpf_text_address+0x177/0x190 [ 199.796640][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 199.796657][ C1] ? kernel_text_address+0xa0/0xd0 [ 199.796675][ C1] ? __kernel_text_address+0xd/0x30 [ 199.796691][ C1] ? unwind_get_return_address+0x4d/0x90 [ 199.796707][ C1] ? __kasan_check_write+0x14/0x20 [ 199.796719][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 199.796734][ C1] tipc_sk_filter_rcv+0x155f/0x2c80 [ 199.796754][ C1] ? tipc_sk_publish+0x440/0x440 [ 199.796767][ C1] ? __kasan_check_write+0x14/0x20 [ 199.796779][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 199.796794][ C1] tipc_sk_rcv+0x7d9/0x2cc0 [ 199.796818][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 199.796837][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 199.796858][ C1] ? tipc_sk_filter_rcv+0x2a1c/0x2c80 [ 199.796873][ C1] tipc_node_xmit+0x257/0xd00 [ 199.796891][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 199.796910][ C1] ? kasan_quarantine_put+0x34/0x190 [ 199.796924][ C1] tipc_node_distr_xmit+0x292/0x390 [ 199.796944][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 199.796963][ C1] ? kfree_skbmem+0x10c/0x180 [ 199.796975][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 199.796989][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 199.797001][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 199.797023][ C1] __release_sock+0x154/0x380 [ 199.797041][ C1] release_sock+0x60/0x1c0 [ 199.797053][ C1] tipc_release+0xd32/0x1650 [ 199.797067][ C1] ? __cfi_tipc_release+0x10/0x10 [ 199.797081][ C1] sock_close+0xf1/0x290 [ 199.797099][ C1] ? __cfi_sock_close+0x10/0x10 [ 199.797117][ C1] __fput+0x1fc/0x8f0 [ 199.797134][ C1] ____fput+0x15/0x20 [ 199.797149][ C1] task_work_run+0x1db/0x240 [ 199.797165][ C1] ? __cfi_task_work_run+0x10/0x10 [ 199.797182][ C1] ? __kasan_check_write+0x14/0x20 [ 199.797194][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 199.797209][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 199.797224][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 199.797243][ C1] do_syscall_64+0x58/0xa0 [ 199.797256][ C1] ? clear_bhb_loop+0x30/0x80 [ 199.797274][ C1] ? clear_bhb_loop+0x30/0x80 [ 199.797292][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.797309][ C1] RIP: 0033:0x7fd6e158e929 [ 199.797320][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.797330][ C1] RSP: 002b:00007fd6e13ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.797344][ C1] RAX: 00000000000203a0 RBX: 00007fd6e17b5fa0 RCX: 00007fd6e158e929 [ 199.797353][ C1] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 199.797361][ C1] RBP: 00007fd6e1610b39 R08: 0000000000000000 R09: 0000000000000000 [ 199.797369][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.797377][ C1] R13: 0000000000000000 R14: 00007fd6e17b5fa0 R15: 00007ffcee0026f8 [ 199.797388][ C1]