Warning: Permanently added '10.128.0.149' (ED25519) to the list of known hosts. 2026/02/15 07:50:23 parsed 1 programs [ 104.975156][ T28] audit: type=1400 audit(1771141823.799:64): avc: denied { node_bind } for pid=282 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 104.996178][ T28] audit: type=1400 audit(1771141823.799:65): avc: denied { module_request } for pid=282 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 106.087279][ T28] audit: type=1400 audit(1771141824.909:66): avc: denied { mounton } for pid=289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 106.091121][ T289] cgroup: Unknown subsys name 'net' [ 106.110394][ T28] audit: type=1400 audit(1771141824.909:67): avc: denied { mount } for pid=289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 106.137309][ T28] audit: type=1400 audit(1771141824.939:68): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 106.137825][ T289] cgroup: Unknown subsys name 'devices' [ 106.250958][ T289] cgroup: Unknown subsys name 'hugetlb' [ 106.256668][ T289] cgroup: Unknown subsys name 'rlimit' [ 106.398831][ T28] audit: type=1400 audit(1771141825.229:69): avc: denied { setattr } for pid=289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.422079][ T28] audit: type=1400 audit(1771141825.229:70): avc: denied { create } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.442520][ T28] audit: type=1400 audit(1771141825.229:71): avc: denied { write } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.462845][ T28] audit: type=1400 audit(1771141825.229:72): avc: denied { read } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.480857][ T293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 106.483610][ T28] audit: type=1400 audit(1771141825.229:73): avc: denied { mounton } for pid=289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 106.541158][ T289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.291638][ T299] request_module fs-gadgetfs succeeded, but still no fs? [ 107.408943][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.446667][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.488138][ T301] device bridge_slave_0 entered promiscuous mode [ 107.499620][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.506681][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.556157][ T301] device bridge_slave_1 entered promiscuous mode [ 107.885154][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.892277][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.899627][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.906670][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.981365][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.990109][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.000036][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.007574][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.041318][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.057283][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.077131][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.100842][ T301] device veth0_vlan entered promiscuous mode [ 108.109969][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.118111][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.129342][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.149335][ T301] device veth1_macvtap entered promiscuous mode [ 108.156553][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.174112][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.185691][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/02/15 07:50:27 executed programs: 0 [ 108.321330][ T301] syz-executor (301) used greatest stack depth: 20864 bytes left [ 108.501435][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.508593][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.516053][ T373] device bridge_slave_0 entered promiscuous mode [ 108.524901][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.532059][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.539559][ T373] device bridge_slave_1 entered promiscuous mode [ 108.546214][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.553362][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.560792][ T374] device bridge_slave_0 entered promiscuous mode [ 108.569691][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.576747][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.584309][ T374] device bridge_slave_1 entered promiscuous mode [ 108.639151][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.646243][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.653718][ T372] device bridge_slave_0 entered promiscuous mode [ 108.663694][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.670933][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.678605][ T372] device bridge_slave_1 entered promiscuous mode [ 108.701675][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.708784][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.716153][ T369] device bridge_slave_0 entered promiscuous mode [ 108.726322][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.733433][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.741334][ T369] device bridge_slave_1 entered promiscuous mode [ 108.766521][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.773732][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.781298][ T375] device bridge_slave_0 entered promiscuous mode [ 108.819522][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.826599][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.834847][ T375] device bridge_slave_1 entered promiscuous mode [ 109.031369][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.038468][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.045740][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.052793][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.062072][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.069142][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.076443][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.083508][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.104980][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.112078][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.119384][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.126417][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.136298][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.143373][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.150663][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.157692][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.176210][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.183310][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.190603][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.197636][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.245223][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.252954][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.261516][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.269138][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.276362][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.283854][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.291160][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.298463][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.305704][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.312953][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.320363][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.327670][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.353323][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.361638][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.368816][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.376564][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.384548][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.392106][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.400593][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.409380][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.416446][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.424008][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.432514][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.440725][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.447757][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.478719][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.487081][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.496407][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.503505][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.511762][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.520156][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.528316][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.535418][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.542857][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.551191][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.559342][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.567366][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.575622][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.583776][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.591752][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.599969][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.607909][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.616401][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.624904][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.633403][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.641735][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.648807][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.658866][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.667246][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.688601][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.696127][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.703968][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.713507][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.722479][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.729524][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.737040][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.745274][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.753367][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.761406][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.774273][ T373] device veth0_vlan entered promiscuous mode [ 109.784333][ T374] device veth0_vlan entered promiscuous mode [ 109.800022][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.808537][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.816713][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.823787][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.831362][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.839744][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.847794][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.855796][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.863813][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.871485][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.879102][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.887415][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.895837][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.902919][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.910402][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.918829][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.926995][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.934055][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.941702][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.949255][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.956667][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.964356][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.987872][ T374] device veth1_macvtap entered promiscuous mode [ 109.998905][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.007543][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.015935][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.026353][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.034512][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.044993][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.053432][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.062988][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.083296][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.091405][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.103538][ T369] device veth0_vlan entered promiscuous mode [ 110.111783][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.120901][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.130117][ T373] device veth1_macvtap entered promiscuous mode [ 110.142404][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.149999][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.157456][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.165917][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.179326][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.187666][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.196287][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.204849][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.213345][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.221777][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.235483][ T372] device veth0_vlan entered promiscuous mode [ 110.248981][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.257083][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.264808][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.272546][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.294638][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.303162][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.312343][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.321242][ T369] device veth1_macvtap entered promiscuous mode [ 110.353738][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 110.353754][ T28] audit: type=1400 audit(1771141829.179:106): avc: denied { create } for pid=423 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.380150][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.390613][ T28] audit: type=1400 audit(1771141829.189:107): avc: denied { setopt } for pid=423 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.415078][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.422513][ T28] audit: type=1400 audit(1771141829.189:108): avc: denied { write } for pid=422 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.442881][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.451924][ T372] device veth1_macvtap entered promiscuous mode [ 110.463392][ T375] device veth0_vlan entered promiscuous mode [ 110.488834][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.497967][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.508617][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.516943][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.526223][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.535485][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.561139][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.570250][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.607549][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.640015][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.670683][ T375] device veth1_macvtap entered promiscuous mode [ 110.710236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.723242][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.753680][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.801404][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.827733][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.079686][ T43] device bridge_slave_1 left promiscuous mode [ 111.085871][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.112786][ T43] device bridge_slave_0 left promiscuous mode [ 111.132768][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.163083][ T43] device veth1_macvtap left promiscuous mode [ 111.183608][ T43] device veth0_vlan left promiscuous mode 2026/02/15 07:50:32 executed programs: 538 [ 217.328352][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 217.335053][ C0] rcu: 0-...!: (10000 ticks this GP) idle=bf54/1/0x4000000000000000 softirq=8490/8490 fqs=0 [ 217.345233][ C0] (t=10000 jiffies g=4825 q=820 ncpus=2) [ 217.350982][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 9999 jiffies! g4825 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 217.363145][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=1452 [ 217.370968][ C0] rcu: rcu_preempt kthread starved for 10000 jiffies! g4825 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 217.382285][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 217.392270][ C0] rcu: RCU grace-period kthread stack dump: [ 217.398185][ C0] task:rcu_preempt state:I stack:28496 pid:14 ppid:2 flags:0x00004000 [ 217.407481][ C0] Call Trace: [ 217.410784][ C0] [ 217.413745][ C0] __schedule+0xba6/0x1500 [ 217.418199][ C0] ? release_firmware_map_entry+0x190/0x190 [ 217.424123][ C0] schedule+0xbd/0x170 [ 217.428234][ C0] schedule_timeout+0x159/0x340 [ 217.433115][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 217.438512][ C0] ? __cfi_process_timeout+0x10/0x10 [ 217.443818][ C0] ? prepare_to_swait_event+0x308/0x320 [ 217.449384][ C0] rcu_gp_fqs_loop+0x2e9/0x10c0 [ 217.454251][ C0] ? _raw_spin_unlock_irq+0x4d/0x70 [ 217.459469][ C0] ? rcu_gp_init+0xf30/0xf30 [ 217.464072][ C0] rcu_gp_kthread+0x99/0x390 [ 217.468677][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 217.473889][ C0] ? __kasan_check_read+0x11/0x20 [ 217.478927][ C0] ? __kthread_parkme+0x142/0x180 [ 217.483966][ C0] kthread+0x281/0x320 [ 217.488049][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 217.493259][ C0] ? __cfi_kthread+0x10/0x10 [ 217.497865][ C0] ret_from_fork+0x1f/0x30 [ 217.502305][ C0] [ 217.505345][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 217.511692][ C0] CPU: 0 PID: 4808 Comm: syz.2.1479 Not tainted syzkaller #0 [ 217.519083][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.529235][ C0] RIP: 0010:kvm_wait+0x105/0x150 [ 217.534234][ C0] Code: 09 33 04 f4 eb 87 fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d 2d 09 33 04 fb f4 5e ff ff ff fb e9 58 ff ff ff e8 db 6a c4 03 89 f9 80 e1 07 38 [ 217.553861][ C0] RSP: 0018:ffffc9000338f660 EFLAGS: 00000246 [ 217.559946][ C0] RAX: 0000000000000003 RBX: ffff88812a8c0098 RCX: ffffffff85007792 [ 217.567931][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88812a8c0098 [ 217.575924][ C0] RBP: ffffc9000338f6f0 R08: ffff88812a8c0098 R09: 1ffff11025518013 [ 217.583912][ C0] R10: dffffc0000000000 R11: ffffed1025518014 R12: 1ffff1103edc0001 [ 217.591906][ C0] R13: ffff8881f6e38cd4 R14: dffffc0000000000 R15: 1ffff92000671ecc [ 217.599897][ C0] FS: 00007fd42bdd66c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 217.608840][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.615436][ C0] CR2: 0000200000000000 CR3: 0000000131d56000 CR4: 00000000003506b0 [ 217.623424][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 217.631410][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 217.639395][ C0] Call Trace: [ 217.642704][ C0] [ 217.645654][ C0] ? __cfi_kvm_wait+0x10/0x10 [ 217.650368][ C0] ? __pv_queued_spin_lock_slowpath+0x632/0xc40 [ 217.656645][ C0] __pv_queued_spin_lock_slowpath+0x690/0xc40 [ 217.662771][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 217.669395][ C0] ? avc_has_perm+0x163/0x250 [ 217.674098][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 217.679574][ C0] _raw_spin_lock_bh+0xe4/0xf0 [ 217.684359][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 217.689843][ C0] ? selinux_socket_sendmsg+0x22f/0x340 [ 217.695418][ C0] lock_sock_nested+0x90/0x2a0 [ 217.700199][ C0] ? __cfi_lock_sock_nested+0x10/0x10 [ 217.705601][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 217.710580][ C0] ? _raw_spin_unlock_bh+0x50/0x60 [ 217.715716][ C0] tipc_sendstream+0x47/0x70 [ 217.720329][ C0] ? __cfi_tipc_sendstream+0x10/0x10 [ 217.725640][ C0] ____sys_sendmsg+0x5cc/0x990 [ 217.730441][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 217.735486][ C0] ? import_iovec+0x7c/0xb0 [ 217.740025][ C0] ___sys_sendmsg+0x2a2/0x360 [ 217.744727][ C0] ? __sys_sendmsg+0x290/0x290 [ 217.749525][ C0] ? __fdget+0x19c/0x220 [ 217.753791][ C0] __x64_sys_sendmsg+0x205/0x2d0 [ 217.758750][ C0] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 217.764229][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 217.770318][ C0] x64_sys_call+0x171/0x9a0 [ 217.774838][ C0] do_syscall_64+0x4c/0xa0 [ 217.779280][ C0] ? clear_bhb_loop+0x30/0x80 [ 217.783981][ C0] ? clear_bhb_loop+0x30/0x80 [ 217.788680][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.794595][ C0] RIP: 0033:0x7fd42af9bf79 [ 217.799032][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.818645][ C0] RSP: 002b:00007fd42bdd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.827093][ C0] RAX: ffffffffffffffda RBX: 00007fd42b215fa0 RCX: 00007fd42af9bf79 [ 217.835094][ C0] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 217.843090][ C0] RBP: 00007fd42b0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 217.851093][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.859080][ C0] R13: 00007fd42b216038 R14: 00007fd42b215fa0 R15: 00007ffc05a91468 [ 217.867073][ C0] [ 217.870174][ C0] CPU: 0 PID: 4808 Comm: syz.2.1479 Not tainted syzkaller #0 [ 217.877577][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.887649][ C0] RIP: 0010:kvm_wait+0x105/0x150 [ 217.892610][ C0] Code: 09 33 04 f4 eb 87 fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d 2d 09 33 04 fb f4 5e ff ff ff fb e9 58 ff ff ff e8 db 6a c4 03 89 f9 80 e1 07 38 [ 217.912231][ C0] RSP: 0018:ffffc9000338f660 EFLAGS: 00000246 [ 217.918317][ C0] RAX: 0000000000000003 RBX: ffff88812a8c0098 RCX: ffffffff85007792 [ 217.926307][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88812a8c0098 [ 217.934294][ C0] RBP: ffffc9000338f6f0 R08: ffff88812a8c0098 R09: 1ffff11025518013 [ 217.942283][ C0] R10: dffffc0000000000 R11: ffffed1025518014 R12: 1ffff1103edc0001 [ 217.950278][ C0] R13: ffff8881f6e38cd4 R14: dffffc0000000000 R15: 1ffff92000671ecc [ 217.958256][ C0] FS: 00007fd42bdd66c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 217.967201][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.973795][ C0] CR2: 0000200000000000 CR3: 0000000131d56000 CR4: 00000000003506b0 [ 217.981787][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 217.989781][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 217.997766][ C0] Call Trace: [ 218.001056][ C0] [ 218.003996][ C0] ? __cfi_kvm_wait+0x10/0x10 [ 218.008685][ C0] ? __pv_queued_spin_lock_slowpath+0x632/0xc40 [ 218.014948][ C0] __pv_queued_spin_lock_slowpath+0x690/0xc40 [ 218.021064][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 218.027679][ C0] ? avc_has_perm+0x163/0x250 [ 218.032395][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 218.037870][ C0] _raw_spin_lock_bh+0xe4/0xf0 [ 218.042667][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 218.048148][ C0] ? selinux_socket_sendmsg+0x22f/0x340 [ 218.053710][ C0] lock_sock_nested+0x90/0x2a0 [ 218.058487][ C0] ? __cfi_lock_sock_nested+0x10/0x10 [ 218.063872][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 218.068835][ C0] ? _raw_spin_unlock_bh+0x50/0x60 [ 218.073965][ C0] tipc_sendstream+0x47/0x70 [ 218.078586][ C0] ? __cfi_tipc_sendstream+0x10/0x10 [ 218.083894][ C0] ____sys_sendmsg+0x5cc/0x990 [ 218.088683][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 218.093731][ C0] ? import_iovec+0x7c/0xb0 [ 218.098250][ C0] ___sys_sendmsg+0x2a2/0x360 [ 218.102947][ C0] ? __sys_sendmsg+0x290/0x290 [ 218.107744][ C0] ? __fdget+0x19c/0x220 [ 218.112003][ C0] __x64_sys_sendmsg+0x205/0x2d0 [ 218.116977][ C0] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 218.122492][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 218.128581][ C0] x64_sys_call+0x171/0x9a0 [ 218.133118][ C0] do_syscall_64+0x4c/0xa0 [ 218.137565][ C0] ? clear_bhb_loop+0x30/0x80 [ 218.142255][ C0] ? clear_bhb_loop+0x30/0x80 [ 218.146944][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.152859][ C0] RIP: 0033:0x7fd42af9bf79 [ 218.157319][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.176928][ C0] RSP: 002b:00007fd42bdd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.185361][ C0] RAX: ffffffffffffffda RBX: 00007fd42b215fa0 RCX: 00007fd42af9bf79 [ 218.193349][ C0] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 218.201340][ C0] RBP: 00007fd42b0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 218.209320][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.217310][ C0] R13: 00007fd42b216038 R14: 00007fd42b215fa0 R15: 00007ffc05a91468 [ 218.225303][ C0] [ 218.228336][ C0] Sending NMI from CPU 0 to CPUs 1: [ 218.233596][ C1] NMI backtrace for cpu 1 [ 218.233606][ C1] CPU: 1 PID: 4809 Comm: syz.2.1479 Not tainted syzkaller #0 [ 218.233622][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 218.233631][ C1] RIP: 0010:_raw_spin_lock_bh+0x87/0xf0 [ 218.233657][ C1] Code: df 4b 89 04 27 bf 01 02 00 00 e8 84 4a 4c fc 43 c6 44 27 04 04 c7 44 24 20 00 00 00 00 48 89 df be 04 00 00 00 e8 f9 46 b6 fc <4c> 89 f7 be 04 00 00 00 e8 ec 46 b6 fc 8b 44 24 20 b9 01 00 00 00 [ 218.233670][ C1] RSP: 0018:ffffc900032f66a0 EFLAGS: 00000256 [ 218.233684][ C1] RAX: 0000000000000401 RBX: ffffc900032f6bd4 RCX: ffffffff85005597 [ 218.233696][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc900032f6bd4 [ 218.233706][ C1] RBP: ffffc900032f6730 R08: ffffc900032f6bd7 R09: 1ffff9200065ed7a [ 218.233719][ C1] R10: dffffc0000000000 R11: fffff5200065ed7b R12: dffffc0000000000 [ 218.233731][ C1] R13: dffffc0000000000 R14: ffffc900032f66c0 R15: 1ffff9200065ecd4 [ 218.233743][ C1] FS: 00007fd42bdb56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 218.233758][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 218.233769][ C1] CR2: 00007fd42bdb4ff8 CR3: 0000000131d56000 CR4: 00000000003506a0 [ 218.233784][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 218.233794][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 218.233804][ C1] Call Trace: [ 218.233809][ C1] [ 218.233815][ C1] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 218.233837][ C1] ? tipc_sk_rcv+0x449/0x2c10 [ 218.233856][ C1] tipc_sk_rcv+0x270/0x2c10 [ 218.233874][ C1] ? stack_trace_save+0xa6/0xf0 [ 218.233895][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 218.233917][ C1] ? __stack_depot_save+0x445/0x480 [ 218.233936][ C1] ? kasan_set_track+0x4b/0x70 [ 218.233955][ C1] ? kasan_save_free_info+0x31/0x50 [ 218.233980][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 218.233997][ C1] ? tipc_sk_proto_rcv+0xa7c/0x15a0 [ 218.234017][ C1] ? tipc_sk_backlog_rcv+0x17d/0x210 [ 218.234036][ C1] ? __release_sock+0x154/0x380 [ 218.234059][ C1] ? sockopt_release_sock+0x95/0x1f0 [ 218.234079][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 218.234097][ C1] ? do_syscall_64+0x4c/0xa0 [ 218.234118][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.234148][ C1] tipc_node_xmit+0x26c/0xd90 [ 218.234163][ C1] ? debug_smp_processor_id+0x17/0x20 [ 218.234182][ C1] ? kasan_quarantine_put+0x34/0x190 [ 218.234199][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 218.234213][ C1] ? ____kasan_slab_free+0x13d/0x180 [ 218.234234][ C1] ? __kasan_slab_free+0x11/0x20 [ 218.234256][ C1] tipc_node_distr_xmit+0x2a3/0x3b0 [ 218.234274][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 218.234292][ C1] tipc_sk_rcv+0x1a14/0x2c10 [ 218.234316][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 218.234343][ C1] tipc_node_xmit+0x26c/0xd90 [ 218.234359][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 218.234378][ C1] tipc_sk_push_backlog+0x4dd/0x790 [ 218.234399][ C1] tipc_sk_proto_rcv+0xa7c/0x15a0 [ 218.234421][ C1] ? tipc_sk_filter_rcv+0x2cf0/0x2cf0 [ 218.234441][ C1] ? unwind_get_return_address+0x4d/0x90 [ 218.234460][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 218.234482][ C1] ? arch_stack_walk+0x20/0x150 [ 218.234509][ C1] tipc_sk_filter_rcv+0x2b04/0x2cf0 [ 218.234528][ C1] ? stack_trace_save+0xa6/0xf0 [ 218.234549][ C1] ? __stack_depot_save+0x36/0x480 [ 218.234565][ C1] ? ____kasan_slab_free+0x132/0x180 [ 218.234585][ C1] ? __kasan_slab_free+0x11/0x20 [ 218.234605][ C1] ? kasan_set_track+0x60/0x70 [ 218.234622][ C1] ? kasan_set_track+0x4b/0x70 [ 218.234639][ C1] ? kasan_save_free_info+0x31/0x50 [ 218.234663][ C1] ? ____kasan_slab_free+0x132/0x180 [ 218.234683][ C1] ? __kasan_slab_free+0x11/0x20 [ 218.234701][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 218.234727][ C1] ? kmem_cache_free+0x12d/0x300 [ 218.234748][ C1] ? kfree_skbmem+0x10c/0x180 [ 218.234766][ C1] ? kfree_skb_reason+0xdc/0x230 [ 218.234783][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 218.234799][ C1] ? tipc_sk_filter_rcv+0xc13/0x2cf0 [ 218.234818][ C1] ? tipc_sk_backlog_rcv+0x117/0x210 [ 218.234838][ C1] ? __release_sock+0x154/0x380 [ 218.234860][ C1] ? sockopt_release_sock+0x95/0x1f0 [ 218.234879][ C1] ? sock_setsockopt+0x5a/0x70 [ 218.234898][ C1] ? __sys_setsockopt+0x269/0x4e0 [ 218.234919][ C1] ? x64_sys_call+0x124/0x9a0 [ 218.234939][ C1] ? do_syscall_64+0x4c/0xa0 [ 218.234959][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.234986][ C1] ? tipc_sk_publish+0x470/0x470 [ 218.235006][ C1] ? __kasan_check_write+0x14/0x20 [ 218.235021][ C1] ? _raw_spin_lock_bh+0x94/0xf0 [ 218.235044][ C1] tipc_sk_rcv+0x7ed/0x2c10 [ 218.235065][ C1] ? kmem_cache_free+0x12d/0x300 [ 218.235088][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 218.235106][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 218.235126][ C1] ? tipc_sk_filter_rcv+0x2a82/0x2cf0 [ 218.235147][ C1] tipc_node_xmit+0x26c/0xd90 [ 218.235164][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 218.235182][ C1] tipc_node_distr_xmit+0x2a3/0x3b0 [ 218.235199][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 218.235217][ C1] tipc_sk_backlog_rcv+0x17d/0x210 [ 218.235238][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 218.235261][ C1] __release_sock+0x154/0x380 [ 218.235285][ C1] sockopt_release_sock+0x95/0x1f0 [ 218.235305][ C1] sk_setsockopt+0x1442/0x2730 [ 218.235326][ C1] ? __cfi_sk_setsockopt+0x10/0x10 [ 218.235352][ C1] ? selinux_socket_setsockopt+0x282/0x360 [ 218.235368][ C1] ? handle_mm_fault+0x1841/0x26c0 [ 218.235395][ C1] ? __fget_files+0x2d5/0x330 [ 218.235413][ C1] sock_setsockopt+0x5a/0x70 [ 218.235432][ C1] __sys_setsockopt+0x269/0x4e0 [ 218.235454][ C1] ? __cfi___sys_setsockopt+0x10/0x10 [ 218.235477][ C1] ? do_user_addr_fault+0x9ac/0x1050 [ 218.235500][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 218.235521][ C1] x64_sys_call+0x124/0x9a0 [ 218.235540][ C1] do_syscall_64+0x4c/0xa0 [ 218.235560][ C1] ? clear_bhb_loop+0x30/0x80 [ 218.235575][ C1] ? clear_bhb_loop+0x30/0x80 [ 218.235590][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.235615][ C1] RIP: 0033:0x7fd42af9bf79 [ 218.235638][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.235649][ C1] RSP: 002b:00007fd42bdb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 218.235681][ C1] RAX: ffffffffffffffda RBX: 00007fd42b216090 RCX: 00007fd42af9bf79 [ 218.235693][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 218.235702][ C1] RBP: 00007fd42b0327e0 R08: 0000000000000004 R09: 0000000000000000 [ 218.235711][ C1] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000000 [ 218.235721][ C1] R13: 00007fd42b216128 R14: 00007fd42b216090 R15: 00007ffc05a91468 [ 218.235735][ C1] [ 353.159867][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 225s! [syz.2.1479:4808] [ 353.168304][ C0] Modules linked in: [ 353.172225][ C0] CPU: 0 PID: 4808 Comm: syz.2.1479 Not tainted syzkaller #0 [ 353.179608][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 353.189682][ C0] RIP: 0010:__pv_queued_spin_lock_slowpath+0x591/0xc40 [ 353.196578][ C0] Code: 0f 85 33 01 00 00 41 c6 45 00 00 41 0f b6 04 17 84 c0 0f 85 46 01 00 00 48 8b 44 24 10 c6 00 01 41 bd 00 80 ff ff eb 07 f3 90 <41> ff c5 74 5b 41 0f b6 04 16 84 c0 75 35 80 3b 00 75 eb 48 89 df [ 353.216195][ C0] RSP: 0018:ffffc9000338f700 EFLAGS: 00000206 [ 353.222282][ C0] RAX: 0000000000000000 RBX: ffff88812a8c0098 RCX: ffffffff85007792 [ 353.230281][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88812a8c0098 [ 353.238275][ C0] RBP: ffffc9000338f7f0 R08: ffff88812a8c0098 R09: 1ffff11025518013 [ 353.246259][ C0] R10: dffffc0000000000 R11: ffffed1025518014 R12: 1ffff1103edc0001 [ 353.254245][ C0] R13: 00000000ffffeaac R14: 1ffff11025518013 R15: 1ffff11025518013 [ 353.262235][ C0] FS: 00007fd42bdd66c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 353.271229][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.277834][ C0] CR2: 0000200000000000 CR3: 0000000131d56000 CR4: 00000000003506b0 [ 353.285832][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 353.293822][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 353.301808][ C0] Call Trace: [ 353.305136][ C0] [ 353.308105][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 353.314742][ C0] ? avc_has_perm+0x163/0x250 [ 353.319458][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 353.324932][ C0] _raw_spin_lock_bh+0xe4/0xf0 [ 353.329724][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 353.335202][ C0] ? selinux_socket_sendmsg+0x22f/0x340 [ 353.340774][ C0] lock_sock_nested+0x90/0x2a0 [ 353.345556][ C0] ? __cfi_lock_sock_nested+0x10/0x10 [ 353.350941][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 353.355903][ C0] ? _raw_spin_unlock_bh+0x50/0x60 [ 353.361046][ C0] tipc_sendstream+0x47/0x70 [ 353.365659][ C0] ? __cfi_tipc_sendstream+0x10/0x10 [ 353.370978][ C0] ____sys_sendmsg+0x5cc/0x990 [ 353.375774][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 353.380815][ C0] ? import_iovec+0x7c/0xb0 [ 353.385341][ C0] ___sys_sendmsg+0x2a2/0x360 [ 353.390046][ C0] ? __sys_sendmsg+0x290/0x290 [ 353.394850][ C0] ? __fdget+0x19c/0x220 [ 353.399122][ C0] __x64_sys_sendmsg+0x205/0x2d0 [ 353.404088][ C0] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 353.409569][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 353.415655][ C0] x64_sys_call+0x171/0x9a0 [ 353.420198][ C0] do_syscall_64+0x4c/0xa0 [ 353.424645][ C0] ? clear_bhb_loop+0x30/0x80 [ 353.429338][ C0] ? clear_bhb_loop+0x30/0x80 [ 353.434024][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.439938][ C0] RIP: 0033:0x7fd42af9bf79 [ 353.444381][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.464015][ C0] RSP: 002b:00007fd42bdd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.472447][ C0] RAX: ffffffffffffffda RBX: 00007fd42b215fa0 RCX: 00007fd42af9bf79 [ 353.480426][ C0] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 353.488409][ C0] RBP: 00007fd42b0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 353.496394][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.504374][ C0] R13: 00007fd42b216038 R14: 00007fd42b215fa0 R15: 00007ffc05a91468 [ 353.512369][ C0] [ 353.515424][ C0] Sending NMI from CPU 0 to CPUs 1: [ 353.520654][ C1] NMI backtrace for cpu 1 [ 353.520663][ C1] CPU: 1 PID: 4809 Comm: syz.2.1479 Not tainted syzkaller #0 [ 353.520677][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 353.520686][ C1] RIP: 0010:__kasan_check_read+0x0/0x20 [ 353.520704][ C1] Code: 6a 86 eb 0a 48 c7 c7 d0 29 5f 86 48 89 de e8 bf cd 3e 03 45 31 ff eb d1 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 f1 16 b4 ef <55> 48 89 e5 89 f6 48 8b 4d 08 31 d2 e8 cf e7 ff ff 5d c3 66 2e 0f [ 353.520716][ C1] RSP: 0018:ffffc900032f6698 EFLAGS: 00000202 [ 353.520729][ C1] RAX: 0000000000000402 RBX: ffff88812a8c0098 RCX: ffffffff87b77103 [ 353.520740][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88812a8c0098 [ 353.520749][ C1] RBP: ffffc900032f6730 R08: ffff88812a8c0083 R09: 1ffff11025518010 [ 353.520761][ C1] R10: dffffc0000000000 R11: ffffed1025518011 R12: dffffc0000000000 [ 353.520772][ C1] R13: 1ffff9200065ecd4 R14: ffffffff84d8f7ce R15: ffff88812a8c0000 [ 353.520783][ C1] FS: 00007fd42bdb56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 353.520796][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.520806][ C1] CR2: 00007fd42bdb4ff8 CR3: 0000000131d56000 CR4: 00000000003506a0 [ 353.520820][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 353.520828][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 353.520837][ C1] Call Trace: [ 353.520842][ C1] [ 353.520846][ C1] ? _raw_spin_trylock_bh+0x81/0x150 [ 353.520867][ C1] ? __cfi__raw_spin_trylock_bh+0x10/0x10 [ 353.520888][ C1] tipc_sk_rcv+0x43e/0x2c10 [ 353.520905][ C1] ? stack_trace_save+0xa6/0xf0 [ 353.520924][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 353.520944][ C1] ? __stack_depot_save+0x445/0x480 [ 353.520979][ C1] ? kasan_set_track+0x4b/0x70 [ 353.520997][ C1] ? kasan_save_free_info+0x31/0x50 [ 353.521021][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 353.521042][ C1] ? tipc_sk_proto_rcv+0xa7c/0x15a0 [ 353.521062][ C1] ? tipc_sk_backlog_rcv+0x17d/0x210 [ 353.521081][ C1] ? __release_sock+0x154/0x380 [ 353.521104][ C1] ? sockopt_release_sock+0x95/0x1f0 [ 353.521123][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 353.521139][ C1] ? do_syscall_64+0x4c/0xa0 [ 353.521160][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.521189][ C1] tipc_node_xmit+0x26c/0xd90 [ 353.521203][ C1] ? debug_smp_processor_id+0x17/0x20 [ 353.521221][ C1] ? kasan_quarantine_put+0x34/0x190 [ 353.521238][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 353.521252][ C1] ? ____kasan_slab_free+0x13d/0x180 [ 353.521271][ C1] ? __kasan_slab_free+0x11/0x20 [ 353.521293][ C1] tipc_node_distr_xmit+0x2a3/0x3b0 [ 353.521310][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 353.521328][ C1] tipc_sk_rcv+0x1a14/0x2c10 [ 353.521351][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 353.521372][ C1] tipc_node_xmit+0x26c/0xd90 [ 353.521388][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 353.521406][ C1] tipc_sk_push_backlog+0x4dd/0x790 [ 353.521426][ C1] tipc_sk_proto_rcv+0xa7c/0x15a0 [ 353.521448][ C1] ? tipc_sk_filter_rcv+0x2cf0/0x2cf0 [ 353.521467][ C1] ? unwind_get_return_address+0x4d/0x90 [ 353.521485][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 353.521506][ C1] ? arch_stack_walk+0x20/0x150 [ 353.521532][ C1] tipc_sk_filter_rcv+0x2b04/0x2cf0 [ 353.521551][ C1] ? stack_trace_save+0xa6/0xf0 [ 353.521572][ C1] ? __stack_depot_save+0x36/0x480 [ 353.521587][ C1] ? ____kasan_slab_free+0x132/0x180 [ 353.521606][ C1] ? __kasan_slab_free+0x11/0x20 [ 353.521626][ C1] ? kasan_set_track+0x60/0x70 [ 353.521642][ C1] ? kasan_set_track+0x4b/0x70 [ 353.521659][ C1] ? kasan_save_free_info+0x31/0x50 [ 353.521682][ C1] ? ____kasan_slab_free+0x132/0x180 [ 353.521701][ C1] ? __kasan_slab_free+0x11/0x20 [ 353.521719][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 353.521744][ C1] ? kmem_cache_free+0x12d/0x300 [ 353.521764][ C1] ? kfree_skbmem+0x10c/0x180 [ 353.521782][ C1] ? kfree_skb_reason+0xdc/0x230 [ 353.521799][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 353.521814][ C1] ? tipc_sk_filter_rcv+0xc13/0x2cf0 [ 353.521833][ C1] ? tipc_sk_backlog_rcv+0x117/0x210 [ 353.521852][ C1] ? __release_sock+0x154/0x380 [ 353.521873][ C1] ? sockopt_release_sock+0x95/0x1f0 [ 353.521892][ C1] ? sock_setsockopt+0x5a/0x70 [ 353.521910][ C1] ? __sys_setsockopt+0x269/0x4e0 [ 353.521931][ C1] ? x64_sys_call+0x124/0x9a0 [ 353.521950][ C1] ? do_syscall_64+0x4c/0xa0 [ 353.521969][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.521996][ C1] ? tipc_sk_publish+0x470/0x470 [ 353.522015][ C1] ? __kasan_check_write+0x14/0x20 [ 353.522030][ C1] ? _raw_spin_lock_bh+0x94/0xf0 [ 353.522058][ C1] tipc_sk_rcv+0x7ed/0x2c10 [ 353.522078][ C1] ? kmem_cache_free+0x12d/0x300 [ 353.522100][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 353.522116][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 353.522135][ C1] ? tipc_sk_filter_rcv+0x2a82/0x2cf0 [ 353.522156][ C1] tipc_node_xmit+0x26c/0xd90 [ 353.522171][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 353.522189][ C1] tipc_node_distr_xmit+0x2a3/0x3b0 [ 353.522205][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 353.522223][ C1] tipc_sk_backlog_rcv+0x17d/0x210 [ 353.522243][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 353.522265][ C1] __release_sock+0x154/0x380 [ 353.522289][ C1] sockopt_release_sock+0x95/0x1f0 [ 353.522309][ C1] sk_setsockopt+0x1442/0x2730 [ 353.522329][ C1] ? __cfi_sk_setsockopt+0x10/0x10 [ 353.522349][ C1] ? selinux_socket_setsockopt+0x282/0x360 [ 353.522365][ C1] ? handle_mm_fault+0x1841/0x26c0 [ 353.522391][ C1] ? __fget_files+0x2d5/0x330 [ 353.522408][ C1] sock_setsockopt+0x5a/0x70 [ 353.522427][ C1] __sys_setsockopt+0x269/0x4e0 [ 353.522448][ C1] ? __cfi___sys_setsockopt+0x10/0x10 [ 353.522470][ C1] ? do_user_addr_fault+0x9ac/0x1050 [ 353.522493][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 353.522515][ C1] x64_sys_call+0x124/0x9a0 [ 353.522533][ C1] do_syscall_64+0x4c/0xa0 [ 353.522553][ C1] ? clear_bhb_loop+0x30/0x80 [ 353.522567][ C1] ? clear_bhb_loop+0x30/0x80 [ 353.522582][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.522607][ C1] RIP: 0033:0x7fd42af9bf79 [ 353.522619][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.522631][ C1] RSP: 002b:00007fd42bdb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 353.522646][ C1] RAX: ffffffffffffffda RBX: 00007fd42b216090 RCX: 00007fd42af9bf79 [ 353.522657][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 353.522667][ C1] RBP: 00007fd42b0327e0 R08: 0000000000000004 R09: 0000000000000000 [ 353.522676][ C1] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000000 [ 353.522686][ C1] R13: 00007fd42b216128 R14: 00007fd42b216090 R15: 00007ffc05a91468 [ 353.522700][ C1]