Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. 2025/10/31 12:44:10 parsed 1 programs [ 45.235073][ T30] audit: type=1400 audit(1761914651.574:105): avc: denied { unlink } for pid=393 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 45.325650][ T393] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.959134][ T410] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.966482][ T410] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.973977][ T410] device bridge_slave_0 entered promiscuous mode [ 45.980950][ T410] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.988033][ T410] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.995548][ T410] device bridge_slave_1 entered promiscuous mode [ 46.036915][ T410] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.044044][ T410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.051472][ T410] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.058646][ T410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.076534][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.084749][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.092274][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.101717][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.110067][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.117419][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.127389][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.135649][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.142808][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.153930][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.163530][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.177471][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.188500][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.197085][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.204861][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.213844][ T410] device veth0_vlan entered promiscuous mode [ 46.223601][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.232852][ T410] device veth1_macvtap entered promiscuous mode [ 46.241859][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.252261][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.563748][ T30] audit: type=1401 audit(1761914652.894:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/10/31 12:44:13 executed programs: 0 [ 46.947817][ T459] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.955108][ T459] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.962445][ T459] device bridge_slave_0 entered promiscuous mode [ 46.969442][ T459] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.976489][ T459] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.983749][ T459] device bridge_slave_1 entered promiscuous mode [ 47.036799][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.044623][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.053593][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.062411][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.070842][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.078256][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.085872][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.097632][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.106060][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.114271][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.121306][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.132612][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.141791][ T278] device bridge_slave_1 left promiscuous mode [ 47.148504][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.156381][ T278] device bridge_slave_0 left promiscuous mode [ 47.162501][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.170741][ T278] device veth1_macvtap left promiscuous mode [ 47.176867][ T278] device veth0_vlan left promiscuous mode [ 47.307258][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.320365][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.330935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.339079][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.346840][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.355771][ T459] device veth0_vlan entered promiscuous mode [ 47.367019][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.375740][ T459] device veth1_macvtap entered promiscuous mode [ 47.385009][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.395442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.419079][ T30] audit: type=1400 audit(1761914653.754:107): avc: denied { create } for pid=469 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.438531][ T30] audit: type=1400 audit(1761914653.754:108): avc: denied { write } for pid=469 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.471239][ T30] audit: type=1400 audit(1761914653.804:109): avc: denied { setopt } for pid=469 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 199.154336][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 143s! [syz.2.17:472] [ 199.162379][ C0] Modules linked in: [ 199.166281][ C0] CPU: 0 PID: 472 Comm: syz.2.17 Not tainted syzkaller #0 [ 199.173489][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 199.183546][ C0] RIP: 0010:__pv_queued_spin_lock_slowpath+0x527/0x9c0 [ 199.190525][ C0] Code: 00 41 c6 45 00 00 48 8b 44 24 10 42 0f b6 04 38 84 c0 0f 85 1c 01 00 00 48 8b 44 24 08 c6 00 01 41 bd 00 80 ff ff eb 07 f3 90 <41> ff c5 74 47 43 0f b6 04 3e 84 c0 75 2b 80 3b 00 75 eb 48 89 df [ 199.210315][ C0] RSP: 0018:ffffc90000b779a0 EFLAGS: 00000206 [ 199.216395][ C0] RAX: 0000000000000000 RBX: ffff8881113cf788 RCX: ffffffff814f4299 [ 199.224492][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff8881113cf788 [ 199.232483][ C0] RBP: ffffc90000b77a90 R08: dffffc0000000000 R09: ffffed1022279ef2 [ 199.240478][ C0] R10: ffffed1022279ef2 R11: 1ffff11022279ef1 R12: 1ffff1103ee00001 [ 199.248460][ C0] R13: 00000000ffff9d8c R14: 1ffff11022279ef1 R15: dffffc0000000000 [ 199.256459][ C0] FS: 00005555631be500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 199.265395][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.272081][ C0] CR2: 00007f00e0734f98 CR3: 000000010fcc8000 CR4: 00000000003506b0 [ 199.280153][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.288217][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.296205][ C0] Call Trace: [ 199.299488][ C0] [ 199.302462][ C0] ? __pv_queued_spin_unlock_slowpath+0x300/0x300 [ 199.308974][ C0] ? stack_trace_save+0x98/0xe0 [ 199.313840][ C0] ? __stack_depot_save+0x34/0x480 [ 199.318964][ C0] ? __schedule+0xb76/0x14c0 [ 199.323800][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 199.329292][ C0] _raw_spin_lock_bh+0xd8/0xe0 [ 199.334074][ C0] ? _raw_spin_lock_irq+0xe0/0xe0 [ 199.339131][ C0] ? task_work_add+0x27/0x1e0 [ 199.343929][ C0] ? fput+0x1a/0x20 [ 199.347767][ C0] ? filp_close+0x105/0x150 [ 199.352297][ C0] ? __close_range+0x203/0x3e0 [ 199.357081][ C0] ? __x64_sys_close_range+0x7a/0x90 [ 199.362380][ C0] ? do_syscall_64+0x4c/0xa0 [ 199.366986][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.373171][ C0] lock_sock_nested+0x97/0x290 [ 199.378055][ C0] ? sock_init_data+0xc0/0xc0 [ 199.382739][ C0] ? locks_remove_posix+0x520/0x520 [ 199.387976][ C0] tipc_release+0xb2/0x1630 [ 199.392497][ C0] ? rwsem_write_trylock+0x130/0x300 [ 199.397914][ C0] ? tipc_sock_destruct+0x180/0x180 [ 199.403132][ C0] ? __kasan_check_write+0x14/0x20 [ 199.408255][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 199.412945][ C0] ? _raw_spin_trylock_bh+0x130/0x130 [ 199.418450][ C0] sock_close+0xe0/0x270 [ 199.422704][ C0] ? sock_mmap+0xa0/0xa0 [ 199.426969][ C0] __fput+0x20b/0x8b0 [ 199.430973][ C0] ____fput+0x15/0x20 [ 199.435049][ C0] task_work_run+0x127/0x190 [ 199.439646][ C0] exit_to_user_mode_loop+0xd0/0xe0 [ 199.444970][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 199.450438][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 199.456478][ C0] do_syscall_64+0x58/0xa0 [ 199.460936][ C0] ? clear_bhb_loop+0x50/0xa0 [ 199.465628][ C0] ? clear_bhb_loop+0x50/0xa0 [ 199.470320][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.476227][ C0] RIP: 0033:0x7f00e0ce3da9 [ 199.480660][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.500476][ C0] RSP: 002b:00007ffec5f83cb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 199.509011][ C0] RAX: 0000000000000000 RBX: 00007f00e0efeba0 RCX: 00007f00e0ce3da9 [ 199.517000][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 199.525083][ C0] RBP: 00007f00e0efeba0 R08: 0000000000000000 R09: 00007ffec5f83fbf [ 199.533236][ C0] R10: 00007f00e0efeac0 R11: 0000000000000246 R12: 000000000000bcbc [ 199.541221][ C0] R13: 00007f00e0efd080 R14: 0000000000000032 R15: ffffffffffffffff [ 199.549375][ C0] [ 199.552409][ C0] Sending NMI from CPU 0 to CPUs 1: [ 199.557620][ C1] NMI backtrace for cpu 1 [ 199.557628][ C1] CPU: 1 PID: 473 Comm: syz.2.17 Not tainted syzkaller #0 [ 199.557643][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 199.557650][ C1] RIP: 0010:__rcu_read_unlock+0x34/0xa0 [ 199.557671][ C1] Code: be 00 00 00 00 00 fc ff df 65 48 8b 3d 25 9f ab 7e 48 8d 9f 4c 04 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 2e ff 0b <75> 1c 48 8d 9f 50 04 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 [ 199.557682][ C1] RSP: 0018:ffffc90000b068b8 EFLAGS: 00000246 [ 199.557703][ C1] RAX: 0000000000000000 RBX: ffff888118663f8c RCX: dffffc0000000000 [ 199.557713][ C1] RDX: 0000000000000000 RSI: 000000007a1f4f4d RDI: ffff888118663b40 [ 199.557722][ C1] RBP: ffffc90000b068d0 R08: 0000000000000004 R09: 0000000000000003 [ 199.557731][ C1] R10: fffff52000160d2c R11: 1ffff92000160d2c R12: dffffc0000000000 [ 199.557742][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: 000000007a1f4f4d [ 199.557752][ C1] FS: 00007f00e07566c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 199.557773][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.557783][ C1] CR2: 0000000020004000 CR3: 000000010fcc8000 CR4: 00000000003506a0 [ 199.557798][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.557806][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.557815][ C1] Call Trace: [ 199.557820][ C1] [ 199.557825][ C1] tipc_sk_lookup+0xe3/0x5f0 [ 199.557840][ C1] ? __kasan_check_write+0x14/0x20 [ 199.557855][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 199.557870][ C1] ? tipc_sk_rcv+0x2c60/0x2c60 [ 199.557883][ C1] tipc_sk_rcv+0x3fe/0x2c60 [ 199.557902][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 199.557916][ C1] ? __stack_depot_save+0x442/0x480 [ 199.557933][ C1] ? kasan_set_track+0x5b/0x70 [ 199.557946][ C1] ? kasan_set_track+0x4a/0x70 [ 199.557957][ C1] ? kasan_set_free_info+0x23/0x40 [ 199.557970][ C1] ? ____kasan_slab_free+0x125/0x160 [ 199.557983][ C1] ? __kasan_slab_free+0x11/0x20 [ 199.557995][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 199.558010][ C1] ? kmem_cache_free+0x100/0x320 [ 199.558024][ C1] ? kfree_skbmem+0x10c/0x180 [ 199.558039][ C1] ? tipc_sk_rcv+0x1ce4/0x2c60 [ 199.558050][ C1] ? tipc_sk_filter_rcv+0x151b/0x2c40 [ 199.558063][ C1] ? tipc_release+0xd0b/0x1630 [ 199.558076][ C1] ? syscall_exit_to_user_mode+0x1a/0x30 [ 199.558089][ C1] ? do_syscall_64+0x58/0xa0 [ 199.558103][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.558118][ C1] ? __skb_queue_purge+0x170/0x170 [ 199.558133][ C1] tipc_node_xmit+0x256/0xce0 [ 199.558149][ C1] ? ____kasan_slab_free+0x130/0x160 [ 199.558162][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 199.558176][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 199.558191][ C1] ? kfree_skbmem+0x10c/0x180 [ 199.558205][ C1] ? kmem_cache_free+0x100/0x320 [ 199.558218][ C1] ? skb_release_data+0x814/0xa10 [ 199.558233][ C1] tipc_node_xmit_skb+0xe9/0x130 [ 199.558248][ C1] ? kfree_skb+0xc1/0x2f0 [ 199.558261][ C1] ? __skb_queue_purge+0x170/0x170 [ 199.558276][ C1] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 199.558289][ C1] tipc_sk_rcv+0x1d5d/0x2c60 [ 199.558301][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 199.558314][ C1] ? handle_pte_fault+0xb60/0x2680 [ 199.558330][ C1] ? fault_around_bytes_set+0xc0/0xc0 [ 199.558345][ C1] ? do_handle_mm_fault+0xf39/0x1d50 [ 199.558358][ C1] ? __skb_queue_purge+0x170/0x170 [ 199.558373][ C1] tipc_node_xmit+0x256/0xce0 [ 199.558388][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 199.558402][ C1] ? __kernel_text_address+0xa0/0x100 [ 199.558416][ C1] ? unwind_get_return_address+0x4d/0x90 [ 199.558433][ C1] ? __kasan_check_write+0x14/0x20 [ 199.558446][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 199.558461][ C1] tipc_sk_filter_rcv+0x151b/0x2c40 [ 199.558479][ C1] ? tipc_sk_publish+0x440/0x440 [ 199.558492][ C1] ? __kasan_check_write+0x14/0x20 [ 199.558505][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 199.558520][ C1] tipc_sk_rcv+0x7b7/0x2c60 [ 199.558534][ C1] ? kfree_skbmem+0x10c/0x180 [ 199.558548][ C1] ? skb_release_data+0x814/0xa10 [ 199.558563][ C1] ? __skb_queue_purge+0x170/0x170 [ 199.558577][ C1] ? tipc_sk_filter_rcv+0x29de/0x2c40 [ 199.558590][ C1] tipc_node_xmit+0x256/0xce0 [ 199.558605][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 199.558621][ C1] ? kasan_quarantine_put+0x34/0x190 [ 199.558635][ C1] tipc_node_distr_xmit+0x292/0x390 [ 199.558651][ C1] ? tipc_node_xmit_skb+0x130/0x130 [ 199.558667][ C1] ? kfree_skbmem+0x10c/0x180 [ 199.558681][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 199.558701][ C1] ? tipc_sk_timeout+0x970/0x970 [ 199.558712][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 199.558728][ C1] __release_sock+0x143/0x350 [ 199.558742][ C1] release_sock+0x60/0x1b0 [ 199.558755][ C1] tipc_release+0xd0b/0x1630 [ 199.558768][ C1] ? tipc_sock_destruct+0x180/0x180 [ 199.558781][ C1] ? kick_process+0xdc/0x150 [ 199.558796][ C1] sock_close+0xe0/0x270 [ 199.558808][ C1] ? sock_mmap+0xa0/0xa0 [ 199.558819][ C1] __fput+0x20b/0x8b0 [ 199.558834][ C1] ____fput+0x15/0x20 [ 199.558846][ C1] task_work_run+0x127/0x190 [ 199.558858][ C1] exit_to_user_mode_loop+0xd0/0xe0 [ 199.558872][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 199.558884][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 199.558897][ C1] do_syscall_64+0x58/0xa0 [ 199.558910][ C1] ? clear_bhb_loop+0x50/0xa0 [ 199.558921][ C1] ? clear_bhb_loop+0x50/0xa0 [ 199.558933][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.558948][ C1] RIP: 0033:0x7f00e0ce3da9 [ 199.558960][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.558971][ C1] RSP: 002b:00007f00e0756038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.558985][ C1] RAX: 00000000000203a0 RBX: 00007f00e0efcfa0 RCX: 00007f00e0ce3da9 [ 199.558995][ C1] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 199.559004][ C1] RBP: 00007f00e0d652a0 R08: 0000000000000000 R09: 0000000000000000 [ 199.559012][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.559021][ C1] R13: 0000000000000000 R14: 00007f00e0efcfa0 R15: 00007ffec5f83b58 [ 199.559032][ C1]