Warning: Permanently added '10.128.0.126' (ED25519) to the list of known hosts. 2026/03/21 14:22:24 parsed 1 programs [ 41.693209][ T24] kauditd_printk_skb: 30 callbacks suppressed [ 41.693220][ T24] audit: type=1400 audit(1774102945.240:104): avc: denied { unlink } for pid=409 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 41.792093][ T409] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 42.328454][ T24] audit: type=1400 audit(1774102945.880:105): avc: denied { create } for pid=428 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.564013][ T446] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.571081][ T446] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.578525][ T446] device bridge_slave_0 entered promiscuous mode [ 42.585230][ T446] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.592399][ T446] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.599889][ T446] device bridge_slave_1 entered promiscuous mode [ 42.629835][ T446] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.637059][ T446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.644390][ T446] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.651515][ T446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.667798][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.675332][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.682865][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.690949][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.706685][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.714942][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.722476][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.730284][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.738940][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.746367][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.753882][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.763482][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.776406][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.788065][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.796555][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.804932][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.813059][ T446] device veth0_vlan entered promiscuous mode [ 42.823336][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.833425][ T446] device veth1_macvtap entered promiscuous mode [ 42.842650][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.852277][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.924009][ T24] audit: type=1401 audit(1774102946.470:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2026/03/21 14:22:26 executed programs: 0 [ 43.187382][ T24] audit: type=1400 audit(1774102946.740:107): avc: denied { write } for pid=403 comm="syz-execprog" path="pipe:[15519]" dev="pipefs" ino=15519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 43.228424][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.235554][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.243723][ T473] device bridge_slave_0 entered promiscuous mode [ 43.251251][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.258500][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.266048][ T473] device bridge_slave_1 entered promiscuous mode [ 43.299704][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.307045][ T473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.314406][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.321581][ T473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.343025][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.350573][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.358445][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.370367][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.378513][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.386315][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.395423][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.403705][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.411067][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.425115][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.434089][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.447506][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.459715][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.468372][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.476453][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.484703][ T473] device veth0_vlan entered promiscuous mode [ 43.496543][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.506038][ T473] device veth1_macvtap entered promiscuous mode [ 43.516345][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.530096][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.550907][ T24] audit: type=1400 audit(1774102947.100:108): avc: denied { create } for pid=477 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.570683][ T24] audit: type=1400 audit(1774102947.100:109): avc: denied { write } for pid=477 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.607210][ T24] audit: type=1400 audit(1774102947.160:110): avc: denied { setopt } for pid=477 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.675658][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 143.682399][ C0] rcu: 0-...!: (10000 ticks this GP) idle=772/1/0x4000000000000000 softirq=2445/2445 fqs=0 last_accelerate: 9b90/c2a0 dyntick_enabled: 1 [ 143.696454][ C0] (t=10000 jiffies g=1581 q=67) [ 143.701470][ C0] rcu: rcu_preempt kthread starved for 10000 jiffies! g1581 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 143.712916][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 143.722953][ C0] rcu: RCU grace-period kthread stack dump: [ 143.728910][ C0] task:rcu_preempt state:I stack: 0 pid: 13 ppid: 2 flags:0x00004000 [ 143.738272][ C0] Call Trace: [ 143.741662][ C0] __schedule+0xb53/0x1320 [ 143.746075][ C0] ? __sched_text_start+0x8/0x8 [ 143.750909][ C0] ? __mod_timer+0x7da/0xb50 [ 143.755582][ C0] schedule+0x13c/0x1d0 [ 143.759740][ C0] schedule_timeout+0x159/0x330 [ 143.764661][ C0] ? console_conditional_schedule+0x10/0x10 [ 143.770634][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 143.776163][ C0] ? run_local_timers+0x160/0x160 [ 143.781198][ C0] ? prepare_to_swait_event+0x320/0x340 [ 143.786720][ C0] rcu_gp_kthread+0x1045/0x2730 [ 143.791567][ C0] ? rcu_barrier_callback+0x50/0x50 [ 143.796948][ C0] ? __kasan_check_read+0x11/0x20 [ 143.801990][ C0] ? __kthread_parkme+0xb9/0x1c0 [ 143.806995][ C0] kthread+0x346/0x3d0 [ 143.811044][ C0] ? rcu_barrier_callback+0x50/0x50 [ 143.816308][ C0] ? kthread_blkcg+0xd0/0xd0 [ 143.820963][ C0] ret_from_fork+0x1f/0x30 [ 143.825405][ C0] NMI backtrace for cpu 0 [ 143.829735][ C0] CPU: 0 PID: 481 Comm: syz.2.17 Not tainted syzkaller #0 [ 143.836838][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 143.846961][ C0] Call Trace: [ 143.850242][ C0] [ 143.853077][ C0] __dump_stack+0x21/0x24 [ 143.857408][ C0] dump_stack_lvl+0x1a7/0x208 [ 143.862110][ C0] ? show_regs_print_info+0x18/0x18 [ 143.867297][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 143.872796][ C0] ? _raw_spin_lock+0xf0/0xf0 [ 143.877468][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 143.883522][ C0] dump_stack+0x15/0x1c [ 143.887789][ C0] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 143.893746][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 143.899616][ C0] rcu_dump_cpu_stacks+0x19c/0x2c0 [ 143.904706][ C0] rcu_sched_clock_irq+0xf88/0x1880 [ 143.909969][ C0] ? rcutree_dead_cpu+0x310/0x310 [ 143.914994][ C0] ? hrtimer_run_queues+0x166/0x430 [ 143.920167][ C0] update_process_times+0x198/0x200 [ 143.925452][ C0] tick_sched_timer+0x17c/0x240 [ 143.930885][ C0] ? tick_setup_sched_timer+0x450/0x450 [ 143.936429][ C0] __hrtimer_run_queues+0x34f/0x820 [ 143.941711][ C0] ? hrtimer_interrupt+0xdc0/0xdc0 [ 143.946804][ C0] ? ktime_get_update_offsets_now+0x293/0x2b0 [ 143.953038][ C0] hrtimer_interrupt+0x3a6/0xdc0 [ 143.958046][ C0] __sysvec_apic_timer_interrupt+0xfa/0x3f0 [ 143.963928][ C0] asm_call_irq_on_stack+0xf/0x20 [ 143.968925][ C0] [ 143.971857][ C0] sysvec_apic_timer_interrupt+0x85/0xe0 [ 143.977468][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 143.983426][ C0] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x10/0x17 [ 143.991043][ C0] Code: 41 51 41 52 41 53 e8 6b 08 00 00 41 5b 41 5a 41 59 41 58 5f 5e 5a 59 5d c3 90 55 48 89 e5 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <3c> 01 75 03 5a 5d c3 56 0f b6 f0 e8 bc ff ff ff 5e 5a 5d c3 0f 1f [ 144.010625][ C0] RSP: 0018:ffffc90000d56a70 EFLAGS: 00000246 [ 144.016679][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: dffffc0000000000 [ 144.024639][ C0] RDX: 0000000000000000 RSI: 000000005b18083d RDI: ffffc90000d56ed4 [ 144.032591][ C0] RBP: ffffc90000d56a78 R08: 0000000000000003 R09: 0000000000000004 [ 144.040541][ C0] R10: dffffc0000000000 R11: fffff520001aad44 R12: ffffc90000d56ec0 [ 144.048621][ C0] R13: ffff888118045e01 R14: 000000005b18083d R15: 000000005b18083d [ 144.056597][ C0] _raw_spin_unlock_bh+0x41/0x60 [ 144.061761][ C0] tipc_sk_rcv+0x33d/0x1dc0 [ 144.066262][ C0] ? __stack_depot_save+0x47d/0x4c0 [ 144.071465][ C0] ? kasan_set_track+0x5b/0x70 [ 144.076228][ C0] ? kasan_set_track+0x4a/0x70 [ 144.080994][ C0] ? ____kasan_slab_free+0x125/0x160 [ 144.086626][ C0] ? __kasan_slab_free+0x11/0x20 [ 144.091905][ C0] ? slab_free_freelist_hook+0xc5/0x190 [ 144.098059][ C0] ? kmem_cache_free+0x100/0x2d0 [ 144.103523][ C0] ? kfree_skbmem+0x10c/0x180 [ 144.108694][ C0] ? kfree_skb+0xc1/0x2f0 [ 144.113131][ C0] ? tipc_msg_reverse+0x698/0x900 [ 144.118146][ C0] ? tipc_node_xmit+0x26c/0xd80 [ 144.123031][ C0] ? tipc_sk_filter_rcv+0x15e5/0x3910 [ 144.128646][ C0] ? tipc_sk_rcv+0x742/0x1dc0 [ 144.133320][ C0] ? tipc_node_xmit+0x26c/0xd80 [ 144.138172][ C0] ? exit_to_user_mode_prepare+0x76/0xa0 [ 144.144069][ C0] ? syscall_exit_to_user_mode+0x1d/0x40 [ 144.149869][ C0] ? do_syscall_64+0x3d/0x40 [ 144.154454][ C0] ? __skb_queue_purge+0x170/0x170 [ 144.159560][ C0] tipc_node_xmit+0x26c/0xd80 [ 144.164304][ C0] ? kmem_cache_free+0x100/0x2d0 [ 144.169304][ C0] ? ____kasan_slab_free+0x130/0x160 [ 144.174564][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 144.180100][ C0] ? slab_free_freelist_hook+0xc5/0x190 [ 144.185726][ C0] ? kfree_skbmem+0x10c/0x180 [ 144.190585][ C0] ? kmem_cache_free+0x100/0x2d0 [ 144.195509][ C0] tipc_node_xmit_skb+0xf7/0x150 [ 144.200431][ C0] ? kfree_skb+0xc1/0x2f0 [ 144.204740][ C0] ? __skb_queue_purge+0x170/0x170 [ 144.210005][ C0] ? trace_tipc_sk_rej_msg+0x2c/0x6d0 [ 144.215382][ C0] tipc_sk_rcv+0x1c46/0x1dc0 [ 144.219983][ C0] ? __skb_queue_purge+0x170/0x170 [ 144.225084][ C0] tipc_node_xmit+0x26c/0xd80 [ 144.229752][ C0] ? is_bpf_text_address+0x177/0x190 [ 144.235021][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 144.240570][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 144.246018][ C0] ? _raw_spin_lock+0xf0/0xf0 [ 144.250819][ C0] tipc_sk_filter_rcv+0x15e5/0x3910 [ 144.256107][ C0] ? tipc_sk_dump+0xfc0/0xfc0 [ 144.260870][ C0] ? __kasan_check_write+0x14/0x20 [ 144.265964][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 144.270885][ C0] tipc_sk_rcv+0x742/0x1dc0 [ 144.275381][ C0] ? kfree_skbmem+0x10c/0x180 [ 144.280053][ C0] ? __skb_queue_purge+0x170/0x170 [ 144.285164][ C0] ? tipc_sk_filter_rcv+0x30d7/0x3910 [ 144.290555][ C0] ? ____fput+0x15/0x20 [ 144.295062][ C0] ? task_work_run+0x127/0x190 [ 144.299812][ C0] tipc_node_xmit+0x26c/0xd80 [ 144.304489][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 144.310191][ C0] tipc_node_distr_xmit+0x2a3/0x3b0 [ 144.315395][ C0] ? tipc_node_xmit_skb+0x150/0x150 [ 144.320572][ C0] tipc_sk_backlog_rcv+0x17d/0x210 [ 144.325670][ C0] ? tipc_sk_timeout+0x990/0x990 [ 144.330614][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 144.336053][ C0] __release_sock+0x146/0x360 [ 144.340711][ C0] ? _raw_write_lock_irq+0xf0/0xf0 [ 144.345804][ C0] release_sock+0x60/0x1b0 [ 144.350204][ C0] tipc_release+0xbd4/0x1490 [ 144.354794][ C0] ? down_read_killable+0xe0/0xe0 [ 144.359818][ C0] sock_close+0xe0/0x270 [ 144.364053][ C0] ? sock_mmap+0xa0/0xa0 [ 144.368273][ C0] __fput+0x2fb/0x770 [ 144.372234][ C0] ____fput+0x15/0x20 [ 144.376199][ C0] task_work_run+0x127/0x190 [ 144.380793][ C0] exit_to_user_mode_loop+0xcb/0xe0 [ 144.386147][ C0] exit_to_user_mode_prepare+0x76/0xa0 [ 144.391587][ C0] syscall_exit_to_user_mode+0x1d/0x40 [ 144.397030][ C0] do_syscall_64+0x3d/0x40 [ 144.401550][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 144.407533][ C0] RIP: 0033:0x7fb227c5e3b9 [ 144.411934][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.431521][ C0] RSP: 002b:00007fb2276cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.439914][ C0] RAX: 00000000000203a0 RBX: 00007fb227e63fa0 RCX: 00007fb227c5e3b9 [ 144.447950][ C0] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 144.456007][ C0] RBP: 00007fb227ce9974 R08: 0000000000000000 R09: 0000000000000000 [ 144.464050][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.472087][ C0] R13: 0000000000000000 R14: 00007fb227e63fa0 R15: 00007fff33190588 [ 176.975141][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [syz.2.17:480] [ 176.983227][ C1] Modules linked in: [ 176.987139][ C1] CPU: 1 PID: 480 Comm: syz.2.17 Not tainted syzkaller #0 [ 176.994252][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 177.004342][ C1] RIP: 0010:kvm_wait+0xce/0x130 [ 177.009199][ C1] Code: 38 f0 75 26 41 f7 c4 00 02 00 00 75 0f 0f 1f 44 00 00 0f 00 2d 33 1e b8 03 f4 eb 0e 0f 1f 44 00 00 0f 00 2d 24 1e b8 03 fb f4 <4c> 89 64 24 18 ff 74 24 18 9d 48 c7 44 24 20 0e 36 e0 45 4b c7 04 [ 177.028908][ C1] RSP: 0018:ffffc900025b79a0 EFLAGS: 00000246 [ 177.035062][ C1] RAX: 0000000000000003 RBX: ffff888118045e88 RCX: ffffffff814bebea [ 177.043122][ C1] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff888118045e88 [ 177.051276][ C1] RBP: ffffc900025b7a50 R08: ffff888118045e88 R09: 1ffff11023008bd1 [ 177.059370][ C1] R10: dffffc0000000000 R11: ffffed1023008bd2 R12: 0000000000000246 [ 177.067343][ C1] R13: 1ffff11023008bd1 R14: dffffc0000000000 R15: 1ffff920004b6f38 [ 177.075408][ C1] FS: 0000555575848500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 177.084431][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.091014][ C1] CR2: 00007fb227cabb00 CR3: 00000001173ee000 CR4: 00000000003506a0 [ 177.099115][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.107175][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.115146][ C1] Call Trace: [ 177.118439][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 177.124603][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 177.129730][ C1] ? __pv_queued_spin_lock_slowpath+0x6ba/0xb70 [ 177.136054][ C1] __pv_queued_spin_lock_slowpath+0x714/0xb70 [ 177.142123][ C1] ? __pv_queued_spin_unlock_slowpath+0x280/0x280 [ 177.148756][ C1] ? kasan_save_stack+0x49/0x60 [ 177.153604][ C1] ? __kasan_record_aux_stack+0xd2/0x100 [ 177.159844][ C1] ? kasan_record_aux_stack+0xe/0x10 [ 177.165129][ C1] ? task_work_add+0x27/0x1e0 [ 177.169808][ C1] ? fput+0x1a/0x20 [ 177.173609][ C1] ? filp_close+0x105/0x150 [ 177.178112][ C1] ? __close_range+0x1f4/0x450 [ 177.182875][ C1] ? __x64_sys_close_range+0x7a/0x90 [ 177.188258][ C1] queued_spin_lock_slowpath+0x47/0x50 [ 177.193744][ C1] _raw_spin_lock_bh+0xe4/0xf0 [ 177.198505][ C1] ? _raw_spin_lock_irq+0xf0/0xf0 [ 177.203541][ C1] lock_sock_nested+0x90/0x2a0 [ 177.208300][ C1] ? sock_init_data+0xc0/0xc0 [ 177.212972][ C1] ? fsnotify+0x19ab/0x1a70 [ 177.217476][ C1] tipc_release+0x56/0x1490 [ 177.221981][ C1] ? down_read_killable+0xe0/0xe0 [ 177.227010][ C1] sock_close+0xe0/0x270 [ 177.231365][ C1] ? sock_mmap+0xa0/0xa0 [ 177.235620][ C1] __fput+0x2fb/0x770 [ 177.239634][ C1] ____fput+0x15/0x20 [ 177.243885][ C1] task_work_run+0x127/0x190 [ 177.248799][ C1] exit_to_user_mode_loop+0xcb/0xe0 [ 177.254004][ C1] exit_to_user_mode_prepare+0x76/0xa0 [ 177.259704][ C1] syscall_exit_to_user_mode+0x1d/0x40 [ 177.265260][ C1] do_syscall_64+0x3d/0x40 [ 177.269855][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 177.276287][ C1] RIP: 0033:0x7fb227c5e3b9 [ 177.281607][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.301604][ C1] RSP: 002b:00007fff331906e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 177.310568][ C1] RAX: 0000000000000000 RBX: 00007fb227e65ba0 RCX: 00007fb227c5e3b9 [ 177.318545][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 177.326829][ C1] RBP: 00007fb227e65ba0 R08: 0000000000000001 R09: ffffffffffffffff [ 177.334988][ C1] R10: 00007fb227e65ac0 R11: 0000000000000246 R12: 000000000000ad96 [ 177.343232][ C1] R13: 00007fb227e64080 R14: 0000000000000032 R15: ffffffffffffffff [ 177.351556][ C1] Sending NMI from CPU 1 to CPUs 0: [ 177.357451][ C0] NMI backtrace for cpu 0 [ 177.357456][ C0] CPU: 0 PID: 481 Comm: syz.2.17 Not tainted syzkaller #0 [ 177.357461][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 177.357465][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x17/0x90 [ 177.357473][ C0] Code: ff c2 48 89 11 5d c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 48 8b 45 08 65 48 8b 15 70 b6 9d 7e 65 8b 0d 75 b6 9d 7e c1 00 01 ff 00 74 11 f7 c1 00 01 00 00 74 5b 83 ba dc 0a 00 00 [ 177.357477][ C0] RSP: 0018:ffffc90000d56990 EFLAGS: 00000246 [ 177.357485][ C0] RAX: ffffffff8467bd74 RBX: 00000000000000e8 RCX: 0000000000000201 [ 177.357489][ C0] RDX: ffff8881182c8000 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.357493][ C0] RBP: ffffc90000d56990 R08: 0000000000000003 R09: 0000000000000004 [ 177.357497][ C0] R10: dffffc0000000000 R11: fffff520001aad44 R12: 0000000000000000 [ 177.357501][ C0] R13: ffff8881299d2004 R14: 00000000cc191f6c R15: ffff8881299c50de [ 177.357506][ C0] FS: 00007fb2276cd6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 177.357509][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.357513][ C0] CR2: 00007fb2276abff8 CR3: 00000001173ee000 CR4: 00000000003506b0 [ 177.357517][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.357521][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.357524][ C0] Call Trace: [ 177.357527][ C0] tipc_sk_lookup+0x204/0x5f0 [ 177.357530][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 177.357533][ C0] ? tipc_sk_rcv+0x1dc0/0x1dc0 [ 177.357535][ C0] tipc_sk_rcv+0x350/0x1dc0 [ 177.357539][ C0] ? __stack_depot_save+0x47d/0x4c0 [ 177.357541][ C0] ? kasan_set_track+0x5b/0x70 [ 177.357544][ C0] ? kasan_set_track+0x4a/0x70 [ 177.357547][ C0] ? ____kasan_slab_free+0x125/0x160 [ 177.357550][ C0] ? __kasan_slab_free+0x11/0x20 [ 177.357560][ C0] ? slab_free_freelist_hook+0xc5/0x190 [ 177.357563][ C0] ? kmem_cache_free+0x100/0x2d0 [ 177.357566][ C0] ? kfree_skbmem+0x10c/0x180 [ 177.357569][ C0] ? kfree_skb+0xc1/0x2f0 [ 177.357572][ C0] ? tipc_msg_reverse+0x698/0x900 [ 177.357574][ C0] ? tipc_node_xmit+0x26c/0xd80 [ 177.357578][ C0] ? tipc_sk_filter_rcv+0x15e5/0x3910 [ 177.357580][ C0] ? tipc_sk_rcv+0x742/0x1dc0 [ 177.357583][ C0] ? tipc_node_xmit+0x26c/0xd80 [ 177.357587][ C0] ? exit_to_user_mode_prepare+0x76/0xa0 [ 177.357590][ C0] ? syscall_exit_to_user_mode+0x1d/0x40 [ 177.357593][ C0] ? do_syscall_64+0x3d/0x40 [ 177.357596][ C0] ? __skb_queue_purge+0x170/0x170 [ 177.357598][ C0] tipc_node_xmit+0x26c/0xd80 [ 177.357601][ C0] ? kmem_cache_free+0x100/0x2d0 [ 177.357605][ C0] ? ____kasan_slab_free+0x130/0x160 [ 177.357608][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 177.357611][ C0] ? slab_free_freelist_hook+0xc5/0x190 [ 177.357614][ C0] ? kfree_skbmem+0x10c/0x180 [ 177.357617][ C0] ? kmem_cache_free+0x100/0x2d0 [ 177.357620][ C0] tipc_node_xmit_skb+0xf7/0x150 [ 177.357623][ C0] ? kfree_skb+0xc1/0x2f0 [ 177.357626][ C0] ? __skb_queue_purge+0x170/0x170 [ 177.357629][ C0] ? trace_tipc_sk_rej_msg+0x2c/0x6d0 [ 177.357632][ C0] tipc_sk_rcv+0x1c46/0x1dc0 [ 177.357635][ C0] ? __skb_queue_purge+0x170/0x170 [ 177.357638][ C0] tipc_node_xmit+0x26c/0xd80 [ 177.357641][ C0] ? is_bpf_text_address+0x177/0x190 [ 177.357644][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 177.357647][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 177.357660][ C0] ? _raw_spin_lock+0xf0/0xf0 [ 177.357663][ C0] tipc_sk_filter_rcv+0x15e5/0x3910 [ 177.357666][ C0] ? tipc_sk_dump+0xfc0/0xfc0 [ 177.357669][ C0] ? __kasan_check_write+0x14/0x20 [ 177.357672][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 177.357675][ C0] tipc_sk_rcv+0x742/0x1dc0 [ 177.357678][ C0] ? kfree_skbmem+0x10c/0x180 [ 177.357681][ C0] ? __skb_queue_purge+0x170/0x170 [ 177.357684][ C0] ? tipc_sk_filter_rcv+0x30d7/0x3910 [ 177.357686][ C0] ? ____fput+0x15/0x20 [ 177.357689][ C0] ? task_work_run+0x127/0x190 [ 177.357692][ C0] tipc_node_xmit+0x26c/0xd80 [ 177.357695][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 177.357698][ C0] tipc_node_distr_xmit+0x2a3/0x3b0 [ 177.357701][ C0] ? tipc_node_xmit_skb+0x150/0x150 [ 177.357704][ C0] tipc_sk_backlog_rcv+0x17d/0x210 [ 177.357707][ C0] ? tipc_sk_timeout+0x990/0x990 [ 177.357711][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 177.357713][ C0] __release_sock+0x146/0x360 [ 177.357716][ C0] ? _raw_write_lock_irq+0xf0/0xf0 [ 177.357719][ C0] release_sock+0x60/0x1b0 [ 177.357722][ C0] tipc_release+0xbd4/0x1490 [ 177.357725][ C0] ? down_read_killable+0xe0/0xe0 [ 177.357728][ C0] sock_close+0xe0/0x270 [ 177.357731][ C0] ? sock_mmap+0xa0/0xa0 [ 177.357733][ C0] __fput+0x2fb/0x770 [ 177.357736][ C0] ____fput+0x15/0x20 [ 177.357739][ C0] task_work_run+0x127/0x190 [ 177.357742][ C0] exit_to_user_mode_loop+0xcb/0xe0 [ 177.357745][ C0] exit_to_user_mode_prepare+0x76/0xa0 [ 177.357748][ C0] syscall_exit_to_user_mode+0x1d/0x40 [ 177.357751][ C0] do_syscall_64+0x3d/0x40 [ 177.357754][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 177.357757][ C0] RIP: 0033:0x7fb227c5e3b9 [ 177.357765][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.357768][ C0] RSP: 002b:00007fb2276cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.357775][ C0] RAX: 00000000000203a0 RBX: 00007fb227e63fa0 RCX: 00007fb227c5e3b9 [ 177.357779][ C0] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 177.357783][ C0] RBP: 00007fb227ce9974 R08: 0000000000000000 R09: 0000000000000000 [ 177.357786][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.357790][ C0] R13: 0000000000000000 R14: 00007fb227e63fa0 R15: 00007fff33190588