Warning: Permanently added '10.128.1.70' (ED25519) to the list of known hosts. 2025/12/10 21:23:39 parsed 1 programs [ 157.037076][ T30] audit: type=1400 audit(1765401819.615:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 157.058109][ T30] audit: type=1400 audit(1765401819.615:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 158.013842][ T30] audit: type=1400 audit(1765401820.595:66): avc: denied { mounton } for pid=289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 158.015438][ T289] cgroup: Unknown subsys name 'net' [ 158.037661][ T30] audit: type=1400 audit(1765401820.595:67): avc: denied { mount } for pid=289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 158.065083][ T30] audit: type=1400 audit(1765401820.625:68): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 158.065328][ T289] cgroup: Unknown subsys name 'devices' [ 158.211655][ T289] cgroup: Unknown subsys name 'hugetlb' [ 158.218038][ T289] cgroup: Unknown subsys name 'rlimit' [ 158.366306][ T30] audit: type=1400 audit(1765401820.945:69): avc: denied { setattr } for pid=289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.395893][ T30] audit: type=1400 audit(1765401820.945:70): avc: denied { create } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.405434][ T291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 158.422674][ T30] audit: type=1400 audit(1765401820.945:71): avc: denied { write } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 158.454105][ T30] audit: type=1400 audit(1765401820.945:72): avc: denied { read } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.474534][ T30] audit: type=1400 audit(1765401820.945:73): avc: denied { mounton } for pid=289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 158.522474][ T289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 158.972747][ T294] request_module fs-gadgetfs succeeded, but still no fs? [ 159.310993][ T310] syz-executor (310) used greatest stack depth: 20544 bytes left [ 159.621241][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.630893][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.638995][ T338] device bridge_slave_0 entered promiscuous mode [ 159.650779][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.657967][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.665561][ T338] device bridge_slave_1 entered promiscuous mode [ 159.728052][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.736235][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.743925][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.751010][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.772512][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.780795][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.788304][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.801393][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.809675][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.816892][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.825708][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.834372][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.841762][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.854288][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.867096][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.886498][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.897999][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.906419][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.914000][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.922345][ T338] device veth0_vlan entered promiscuous mode [ 159.939805][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.950059][ T338] device veth1_macvtap entered promiscuous mode [ 159.960546][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 159.974923][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/12/10 21:23:42 executed programs: 0 [ 160.262539][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.270392][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.277806][ T360] device bridge_slave_0 entered promiscuous mode [ 160.285723][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.296339][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.303882][ T360] device bridge_slave_1 entered promiscuous mode [ 160.365434][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.372988][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.382294][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.390813][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.399471][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.406547][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.414177][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.422970][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.432177][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.440617][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.447846][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.466929][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.476274][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.491448][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.509165][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.517821][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.525686][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.539254][ T360] device veth0_vlan entered promiscuous mode [ 160.549949][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.564319][ T360] device veth1_macvtap entered promiscuous mode [ 160.574580][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.584876][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 260.659186][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 260.665841][ C0] rcu: 0-...!: (1 GPs behind) idle=fe5/1/0x4000000000000000 softirq=3216/3220 fqs=38 last_accelerate: c933/f043 dyntick_enabled: 1 [ 260.679378][ C0] (t=10000 jiffies g=1477 q=98) [ 260.684310][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 9922 jiffies! g1477 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 260.696448][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=1086 [ 260.704242][ C0] rcu: rcu_preempt kthread starved for 9923 jiffies! g1477 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 260.715430][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 260.725390][ C0] rcu: RCU grace-period kthread stack dump: [ 260.731272][ C0] task:rcu_preempt state:I stack:28752 pid: 14 ppid: 2 flags:0x00004000 [ 260.740502][ C0] Call Trace: [ 260.743789][ C0] [ 260.746724][ C0] __schedule+0xb6e/0x14c0 [ 260.751157][ C0] ? release_firmware_map_entry+0x190/0x190 [ 260.757051][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 260.762852][ C0] ? __mod_timer+0x7ae/0xb30 [ 260.767441][ C0] schedule+0x11e/0x1e0 [ 260.771589][ C0] schedule_timeout+0x12c/0x2e0 [ 260.776433][ C0] ? console_conditional_schedule+0x30/0x30 [ 260.782322][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 260.787780][ C0] ? update_process_times+0x200/0x200 [ 260.793146][ C0] ? prepare_to_swait_event+0x308/0x320 [ 260.798684][ C0] rcu_gp_fqs_loop+0x293/0xf60 [ 260.803445][ C0] ? dyntick_save_progress_counter+0x1e0/0x1e0 [ 260.809603][ C0] ? rcu_gp_init+0xc00/0xc00 [ 260.814220][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 260.819414][ C0] ? rcu_gp_init+0x9a7/0xc00 [ 260.824007][ C0] rcu_gp_kthread+0x98/0x330 [ 260.828602][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 260.833271][ C0] ? __kasan_check_read+0x11/0x20 [ 260.838334][ C0] ? __kthread_parkme+0xac/0x200 [ 260.843292][ C0] ? preempt_count_add+0x90/0x1b0 [ 260.848315][ C0] kthread+0x411/0x500 [ 260.852379][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 260.857049][ C0] ? kthread_blkcg+0xd0/0xd0 [ 260.861638][ C0] ret_from_fork+0x1f/0x30 [ 260.866059][ C0] [ 260.869095][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 260.875427][ C0] Sending NMI from CPU 0 to CPUs 1: [ 260.880781][ C1] NMI backtrace for cpu 1 [ 260.880803][ C1] CPU: 1 PID: 370 Comm: syz.2.17 Not tainted syzkaller #0 [ 260.880820][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 260.880834][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x527/0x9c0 [ 260.880864][ C1] Code: 00 41 c6 45 00 00 48 8b 44 24 10 42 0f b6 04 38 84 c0 0f 85 1c 01 00 00 48 8b 44 24 08 c6 00 01 41 bd 00 80 ff ff eb 07 f3 90 <41> ff c5 74 47 43 0f b6 04 3e 84 c0 75 2b 80 3b 00 75 eb 48 89 df [ 260.880878][ C1] RSP: 0018:ffffc900014479a0 EFLAGS: 00000206 [ 260.880893][ C1] RAX: 0000000000000000 RBX: ffff88810c6e4f88 RCX: ffffffff814f4289 [ 260.880905][ C1] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff88810c6e4f88 [ 260.880916][ C1] RBP: ffffc90001447a90 R08: dffffc0000000000 R09: ffffed10218dc9f2 [ 260.880928][ C1] R10: ffffed10218dc9f2 R11: 1ffff110218dc9f1 R12: 1ffff1103ee20001 [ 260.880941][ C1] R13: 00000000ffffd1d3 R14: 1ffff110218dc9f1 R15: dffffc0000000000 [ 260.880953][ C1] FS: 0000555589780500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 260.880968][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.880979][ C1] CR2: 0000200000003000 CR3: 0000000120e76000 CR4: 00000000003506a0 [ 260.880993][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 260.881003][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 260.881013][ C1] Call Trace: [ 260.881018][ C1] [ 260.881026][ C1] ? __pv_queued_spin_unlock_slowpath+0x300/0x300 [ 260.881045][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 260.881064][ C1] ? __stack_depot_save+0x442/0x480 [ 260.881084][ C1] queued_spin_lock_slowpath+0x47/0x50 [ 260.881101][ C1] _raw_spin_lock_bh+0xd8/0xe0 [ 260.881117][ C1] ? _raw_spin_lock_irq+0xe0/0xe0 [ 260.881134][ C1] ? task_work_add+0x27/0x1e0 [ 260.881148][ C1] ? fput+0x1a/0x20 [ 260.881162][ C1] ? filp_close+0x105/0x150 [ 260.881179][ C1] ? __close_range+0x203/0x3e0 [ 260.881197][ C1] ? __x64_sys_close_range+0x7a/0x90 [ 260.881211][ C1] ? do_syscall_64+0x4c/0xa0 [ 260.881230][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 260.881249][ C1] lock_sock_nested+0x97/0x290 [ 260.881268][ C1] ? sock_init_data+0xc0/0xc0 [ 260.881285][ C1] ? locks_remove_posix+0x520/0x520 [ 260.881305][ C1] tipc_release+0xb2/0x1630 [ 260.881320][ C1] ? rwsem_write_trylock+0x130/0x300 [ 260.881337][ C1] ? tipc_sock_destruct+0x180/0x180 [ 260.881351][ C1] ? __kasan_check_write+0x14/0x20 [ 260.881368][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 260.881384][ C1] ? _raw_spin_trylock_bh+0x130/0x130 [ 260.881401][ C1] sock_close+0xe0/0x270 [ 260.881415][ C1] ? sock_mmap+0xa0/0xa0 [ 260.881429][ C1] __fput+0x20b/0x8b0 [ 260.881446][ C1] ____fput+0x15/0x20 [ 260.881460][ C1] task_work_run+0x127/0x190 [ 260.881475][ C1] exit_to_user_mode_loop+0xd0/0xe0 [ 260.881492][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 260.881507][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 260.881522][ C1] do_syscall_64+0x58/0xa0 [ 260.881538][ C1] ? clear_bhb_loop+0x50/0xa0 [ 260.881551][ C1] ? clear_bhb_loop+0x50/0xa0 [ 260.881565][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 260.881583][ C1] RIP: 0033:0x7f534f6b2749 [ 260.881617][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.881630][ C1] RSP: 002b:00007ffd96f520c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 260.881650][ C1] RAX: 0000000000000000 RBX: 00007f534f90ada0 RCX: 00007f534f6b2749 [ 260.881660][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 260.881670][ C1] RBP: 00007f534f90ada0 R08: 0000000000000000 R09: 0000000596f523bf [ 260.881686][ C1] R10: 00007f534f90acb0 R11: 0000000000000246 R12: 0000000000027684 [ 260.881697][ C1] R13: 00007f534f909090 R14: ffffffffffffffff R15: 00007ffd96f521e0 [ 260.881712][ C1] [ 260.881797][ C0] NMI backtrace for cpu 0 [ 261.271856][ C0] CPU: 0 PID: 371 Comm: syz.2.17 Not tainted syzkaller #0 [ 261.280440][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 261.292534][ C0] Call Trace: [ 261.299478][ C0] [ 261.303561][ C0] __dump_stack+0x21/0x30 [ 261.308622][ C0] dump_stack_lvl+0xee/0x150 [ 261.316037][ C0] ? show_regs_print_info+0x20/0x20 [ 261.321343][ C0] ? resched_curr+0x9a/0x310 [ 261.327609][ C0] ? wake_up_process+0x20/0x20 [ 261.332423][ C0] dump_stack+0x15/0x20 [ 261.336848][ C0] nmi_cpu_backtrace+0x2b4/0x2c0 [ 261.341801][ C0] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 261.347961][ C0] ? __kasan_check_write+0x14/0x20 [ 261.353077][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 261.358622][ C0] ? _raw_spin_lock+0xe0/0xe0 [ 261.363298][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 261.369372][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 261.377734][ C0] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 261.388685][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 261.396405][ C0] rcu_dump_cpu_stacks+0x1c7/0x300 [ 261.404824][ C0] print_cpu_stall+0x320/0x600 [ 261.410614][ C0] rcu_sched_clock_irq+0x74a/0x12b0 [ 261.416889][ C0] ? rcu_boost_kthread_setaffinity+0x310/0x310 [ 261.423053][ C0] ? raise_softirq+0x71/0xe0 [ 261.427777][ C0] ? __raise_softirq_irqoff+0xd0/0xd0 [ 261.433160][ C0] ? hrtimer_run_queues+0x166/0x430 [ 261.438447][ C0] update_process_times+0x198/0x200 [ 261.443644][ C0] tick_sched_timer+0x17c/0x240 [ 261.448498][ C0] ? tick_setup_sched_timer+0x450/0x450 [ 261.454076][ C0] __hrtimer_run_queues+0x3b5/0x9e0 [ 261.459289][ C0] ? __kasan_check_write+0x14/0x20 [ 261.464555][ C0] ? hrtimer_interrupt+0x8c0/0x8c0 [ 261.469686][ C0] ? ktime_get_update_offsets_now+0x2fa/0x310 [ 261.478591][ C0] hrtimer_interrupt+0x3c7/0x8c0 [ 261.484849][ C0] __sysvec_apic_timer_interrupt+0xfa/0x3e0 [ 261.492367][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 261.498620][ C0] [ 261.501879][ C0] [ 261.505041][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 261.512335][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x1/0x60 [ 261.518726][ C0] Code: 00 00 0f 0b 0f 1f 44 00 00 55 48 89 e5 53 48 89 fb e8 13 00 00 00 48 8b 3d ec 6e 80 05 48 89 de e8 94 c8 3d 00 5b 5d c3 00 55 <48> 89 e5 48 8b 45 08 65 48 8b 0d 90 ae 99 7e 65 8b 15 91 ae 99 7e [ 261.538631][ C0] RSP: 0018:ffffc900014568b0 EFLAGS: 00000246 [ 261.544706][ C0] RAX: 1ffff9200028ad00 RBX: dffffc0000000000 RCX: ffff88811080cf01 [ 261.552805][ C0] RDX: 0000000000000000 RSI: ffffc90001456ba0 RDI: ffff888109641000 [ 261.560779][ C0] RBP: ffffc900014569d0 R08: dffffc0000000000 R09: ffffed10218dc9f2 [ 261.569098][ C0] R10: ffffed10218dc9f2 R11: 1ffff110218dc9f1 R12: ffff888109641000 [ 261.577281][ C0] R13: ffffc90001456ba0 R14: ffffc90001456ba0 R15: ffff88810c6e4f00 [ 261.585716][ C0] ? tipc_node_distr_xmit+0xb1/0x390 [ 261.591670][ C0] ? tipc_sk_lookup+0x544/0x5f0 [ 261.597420][ C0] ? tipc_sk_rcv+0x42b/0x2c60 [ 261.602964][ C0] ? tipc_node_xmit_skb+0x130/0x130 [ 261.612395][ C0] ? _raw_spin_trylock_bh+0xd5/0x130 [ 261.617702][ C0] ? _raw_spin_trylock+0x140/0x140 [ 261.622815][ C0] tipc_sk_rcv+0x19de/0x2c60 [ 261.627403][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 261.633200][ C0] ? __stack_depot_save+0x442/0x480 [ 261.638392][ C0] ? kasan_set_track+0x5b/0x70 [ 261.643172][ C0] ? kasan_set_track+0x4a/0x70 [ 261.647924][ C0] ? kasan_set_free_info+0x23/0x40 [ 261.653028][ C0] ? ____kasan_slab_free+0x125/0x160 [ 261.658306][ C0] ? __kasan_slab_free+0x11/0x20 [ 261.663240][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 261.668911][ C0] ? kmem_cache_free+0x100/0x320 [ 261.673879][ C0] ? kfree_skbmem+0x10c/0x180 [ 261.678575][ C0] ? tipc_sk_rcv+0x1ce4/0x2c60 [ 261.683428][ C0] ? tipc_sk_filter_rcv+0x151b/0x2c40 [ 261.689100][ C0] ? tipc_release+0xd0b/0x1630 [ 261.694071][ C0] ? syscall_exit_to_user_mode+0x1a/0x30 [ 261.701263][ C0] ? do_syscall_64+0x58/0xa0 [ 261.707896][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 261.715220][ C0] ? __skb_queue_purge+0x170/0x170 [ 261.720637][ C0] tipc_node_xmit+0x256/0xce0 [ 261.726915][ C0] ? ____kasan_slab_free+0x130/0x160 [ 261.732555][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 261.738251][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 261.743818][ C0] ? kfree_skbmem+0x10c/0x180 [ 261.748507][ C0] ? kmem_cache_free+0x100/0x320 [ 261.753543][ C0] ? skb_release_data+0x814/0xa10 [ 261.758580][ C0] tipc_node_xmit_skb+0xe9/0x130 [ 261.763530][ C0] ? kfree_skb+0xc1/0x2f0 [ 261.768078][ C0] ? __skb_queue_purge+0x170/0x170 [ 261.773205][ C0] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 261.780239][ C0] tipc_sk_rcv+0x1d5d/0x2c60 [ 261.785428][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 261.790302][ C0] ? handle_pte_fault+0xb60/0x2680 [ 261.797433][ C0] ? fault_around_bytes_set+0xc0/0xc0 [ 261.803301][ C0] ? do_handle_mm_fault+0xf39/0x1d50 [ 261.808686][ C0] ? __skb_queue_purge+0x170/0x170 [ 261.814295][ C0] tipc_node_xmit+0x256/0xce0 [ 261.819073][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 261.824981][ C0] ? __kernel_text_address+0xa0/0x100 [ 261.830520][ C0] ? unwind_get_return_address+0x4d/0x90 [ 261.836163][ C0] ? __kasan_check_write+0x14/0x20 [ 261.841295][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 261.846761][ C0] tipc_sk_filter_rcv+0x151b/0x2c40 [ 261.851966][ C0] ? tipc_sk_publish+0x440/0x440 [ 261.856917][ C0] ? __kasan_check_write+0x14/0x20 [ 261.862030][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 261.867532][ C0] tipc_sk_rcv+0x7b7/0x2c60 [ 261.872035][ C0] ? kfree_skbmem+0x10c/0x180 [ 261.878734][ C0] ? skb_release_data+0x814/0xa10 [ 261.885178][ C0] ? __skb_queue_purge+0x170/0x170 [ 261.890991][ C0] ? tipc_sk_filter_rcv+0x29de/0x2c40 [ 261.897237][ C0] tipc_node_xmit+0x256/0xce0 [ 261.902716][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 261.908299][ C0] ? kasan_quarantine_put+0x34/0x190 [ 261.913717][ C0] tipc_node_distr_xmit+0x292/0x390 [ 261.919011][ C0] ? tipc_node_xmit_skb+0x130/0x130 [ 261.924503][ C0] ? kfree_skbmem+0x10c/0x180 [ 261.929188][ C0] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 261.934303][ C0] ? tipc_sk_timeout+0x970/0x970 [ 261.939247][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 261.944711][ C0] __release_sock+0x143/0x350 [ 261.949385][ C0] release_sock+0x60/0x1b0 [ 261.953797][ C0] tipc_release+0xd0b/0x1630 [ 261.958381][ C0] ? tipc_sock_destruct+0x180/0x180 [ 261.963686][ C0] ? kick_process+0xdc/0x150 [ 261.968274][ C0] sock_close+0xe0/0x270 [ 261.972527][ C0] ? sock_mmap+0xa0/0xa0 [ 261.977370][ C0] __fput+0x20b/0x8b0 [ 261.981350][ C0] ____fput+0x15/0x20 [ 261.985415][ C0] task_work_run+0x127/0x190 [ 261.990001][ C0] exit_to_user_mode_loop+0xd0/0xe0 [ 261.995427][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 262.000917][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 262.006557][ C0] do_syscall_64+0x58/0xa0 [ 262.010989][ C0] ? clear_bhb_loop+0x50/0xa0 [ 262.015680][ C0] ? clear_bhb_loop+0x50/0xa0 [ 262.021313][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 262.027335][ C0] RIP: 0033:0x7f534f6b2749 [ 262.031784][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.051396][ C0] RSP: 002b:00007f534f522038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.059931][ C0] RAX: 00000000000203a0 RBX: 00007f534f908fa0 RCX: 00007f534f6b2749 [ 262.068075][ C0] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 262.076859][ C0] RBP: 00007f534f736f91 R08: 0000000000000000 R09: 0000000000000000 [ 262.085015][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.093885][ C0] R13: 00007f534f909038 R14: 00007f534f908fa0 R15: 00007ffd96f51f68 [ 262.103123][ C0] [ 397.277008][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 225s! [syz.2.17:371] [ 397.285086][ C0] Modules linked in: [ 397.288975][ C0] CPU: 0 PID: 371 Comm: syz.2.17 Not tainted syzkaller #0 [ 397.296075][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 397.306118][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x60 [ 397.312284][ C0] Code: 89 fb e8 13 00 00 00 48 8b 3d ec 6e 80 05 48 89 de e8 94 c8 3d 00 5b 5d c3 00 55 48 89 e5 48 8b 45 08 65 48 8b 0d 90 ae 99 7e <65> 8b 15 91 ae 99 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 [ 397.331880][ C0] RSP: 0018:ffffc900014568d0 EFLAGS: 00000246 [ 397.337939][ C0] RAX: ffffffff848dbcf2 RBX: 0000000000000048 RCX: ffff88811080cf00 [ 397.345907][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 397.353868][ C0] RBP: ffffc900014568d0 R08: 0000000000000004 R09: 0000000000000003 [ 397.361828][ C0] R10: fffff5200028ad2c R11: 1ffff9200028ad2c R12: 0000000000000000 [ 397.369814][ C0] R13: ffff88810fdc8004 R14: 0000000002148d4b R15: ffff88810fea90de [ 397.377780][ C0] FS: 00007f534f5226c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 397.386702][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.393279][ C0] CR2: 00007f534f500f98 CR3: 0000000120e76000 CR4: 00000000003506b0 [ 397.401249][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 397.409234][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 397.417198][ C0] Call Trace: [ 397.420470][ C0] [ 397.423395][ C0] tipc_sk_lookup+0x212/0x5f0 [ 397.428064][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 397.432994][ C0] ? tipc_sk_rcv+0x2c60/0x2c60 [ 397.437748][ C0] tipc_sk_rcv+0x3fe/0x2c60 [ 397.442236][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 397.448035][ C0] ? __stack_depot_save+0x442/0x480 [ 397.453228][ C0] ? kasan_set_track+0x5b/0x70 [ 397.457984][ C0] ? kasan_set_track+0x4a/0x70 [ 397.462738][ C0] ? kasan_set_free_info+0x23/0x40 [ 397.467843][ C0] ? ____kasan_slab_free+0x125/0x160 [ 397.473118][ C0] ? __kasan_slab_free+0x11/0x20 [ 397.478045][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 397.483581][ C0] ? kmem_cache_free+0x100/0x320 [ 397.488505][ C0] ? kfree_skbmem+0x10c/0x180 [ 397.493195][ C0] ? tipc_sk_rcv+0x1ce4/0x2c60 [ 397.497946][ C0] ? tipc_sk_filter_rcv+0x151b/0x2c40 [ 397.503307][ C0] ? tipc_release+0xd0b/0x1630 [ 397.508060][ C0] ? syscall_exit_to_user_mode+0x1a/0x30 [ 397.513678][ C0] ? do_syscall_64+0x58/0xa0 [ 397.518255][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 397.524312][ C0] ? __skb_queue_purge+0x170/0x170 [ 397.529414][ C0] tipc_node_xmit+0x256/0xce0 [ 397.534089][ C0] ? ____kasan_slab_free+0x130/0x160 [ 397.539361][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 397.544898][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 397.550453][ C0] ? kfree_skbmem+0x10c/0x180 [ 397.555212][ C0] ? kmem_cache_free+0x100/0x320 [ 397.560142][ C0] ? skb_release_data+0x814/0xa10 [ 397.565161][ C0] tipc_node_xmit_skb+0xe9/0x130 [ 397.570090][ C0] ? kfree_skb+0xc1/0x2f0 [ 397.574420][ C0] ? __skb_queue_purge+0x170/0x170 [ 397.579615][ C0] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 397.584985][ C0] tipc_sk_rcv+0x1d5d/0x2c60 [ 397.589564][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 397.594410][ C0] ? handle_pte_fault+0xb60/0x2680 [ 397.599517][ C0] ? fault_around_bytes_set+0xc0/0xc0 [ 397.604888][ C0] ? do_handle_mm_fault+0xf39/0x1d50 [ 397.610270][ C0] ? __skb_queue_purge+0x170/0x170 [ 397.615378][ C0] tipc_node_xmit+0x256/0xce0 [ 397.620055][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 397.625595][ C0] ? __kernel_text_address+0xa0/0x100 [ 397.630955][ C0] ? unwind_get_return_address+0x4d/0x90 [ 397.636581][ C0] ? __kasan_check_write+0x14/0x20 [ 397.641687][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 397.647142][ C0] tipc_sk_filter_rcv+0x151b/0x2c40 [ 397.652333][ C0] ? tipc_sk_publish+0x440/0x440 [ 397.657351][ C0] ? __kasan_check_write+0x14/0x20 [ 397.662453][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 397.667380][ C0] tipc_sk_rcv+0x7b7/0x2c60 [ 397.671956][ C0] ? kfree_skbmem+0x10c/0x180 [ 397.676621][ C0] ? skb_release_data+0x814/0xa10 [ 397.681637][ C0] ? __skb_queue_purge+0x170/0x170 [ 397.686739][ C0] ? tipc_sk_filter_rcv+0x29de/0x2c40 [ 397.692103][ C0] tipc_node_xmit+0x256/0xce0 [ 397.696823][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 397.702362][ C0] ? kasan_quarantine_put+0x34/0x190 [ 397.707641][ C0] tipc_node_distr_xmit+0x292/0x390 [ 397.712832][ C0] ? tipc_node_xmit_skb+0x130/0x130 [ 397.718021][ C0] ? kfree_skbmem+0x10c/0x180 [ 397.722683][ C0] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 397.727785][ C0] ? tipc_sk_timeout+0x970/0x970 [ 397.732705][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 397.738148][ C0] __release_sock+0x143/0x350 [ 397.742810][ C0] release_sock+0x60/0x1b0 [ 397.747211][ C0] tipc_release+0xd0b/0x1630 [ 397.751791][ C0] ? tipc_sock_destruct+0x180/0x180 [ 397.756977][ C0] ? kick_process+0xdc/0x150 [ 397.761558][ C0] sock_close+0xe0/0x270 [ 397.765789][ C0] ? sock_mmap+0xa0/0xa0 [ 397.770022][ C0] __fput+0x20b/0x8b0 [ 397.774010][ C0] ____fput+0x15/0x20 [ 397.777990][ C0] task_work_run+0x127/0x190 [ 397.782579][ C0] exit_to_user_mode_loop+0xd0/0xe0 [ 397.787774][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 397.793224][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 397.798671][ C0] do_syscall_64+0x58/0xa0 [ 397.803073][ C0] ? clear_bhb_loop+0x50/0xa0 [ 397.807736][ C0] ? clear_bhb_loop+0x50/0xa0 [ 397.812402][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 397.818290][ C0] RIP: 0033:0x7f534f6b2749 [ 397.822696][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.842292][ C0] RSP: 002b:00007f534f522038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.850712][ C0] RAX: 00000000000203a0 RBX: 00007f534f908fa0 RCX: 00007f534f6b2749 [ 397.858678][ C0] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 397.866778][ C0] RBP: 00007f534f736f91 R08: 0000000000000000 R09: 0000000000000000 [ 397.874748][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.882711][ C0] R13: 00007f534f909038 R14: 00007f534f908fa0 R15: 00007ffd96f51f68 [ 397.890689][ C0] [ 397.893779][ C0] Sending NMI from CPU 0 to CPUs 1: [ 397.899003][ C1] NMI backtrace for cpu 1 [ 397.899013][ C1] CPU: 1 PID: 370 Comm: syz.2.17 Not tainted syzkaller #0 [ 397.899029][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 397.899039][ C1] RIP: 0010:kvm_wait+0xf2/0x140 [ 397.899061][ C1] Code: 92 d6 03 f4 eb 9a fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d 20 92 d6 03 fb f4 71 ff ff ff fb e9 6b ff ff ff e8 9e b9 72 03 89 f9 80 e1 07 38 [ 397.899074][ C1] RSP: 0018:ffffc90001447900 EFLAGS: 00000246 [ 397.899089][ C1] RAX: 0000000000000003 RBX: ffff88810c6e4f88 RCX: ffffffff814f4289 [ 397.899104][ C1] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff88810c6e4f88 [ 397.899115][ C1] RBP: ffffc90001447990 R08: dffffc0000000000 R09: ffffed10218dc9f2 [ 397.899127][ C1] R10: ffffed10218dc9f2 R11: 1ffff110218dc9f1 R12: 1ffff1103ee20001 [ 397.899138][ C1] R13: ffff8881f7138ad4 R14: dffffc0000000000 R15: 1ffff92000288f20 [ 397.899150][ C1] FS: 0000555589780500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 397.899164][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.899175][ C1] CR2: 0000200000003000 CR3: 0000000120e76000 CR4: 00000000003506a0 [ 397.899190][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 397.899199][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 397.899208][ C1] Call Trace: [ 397.899213][ C1] [ 397.899220][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 397.899237][ C1] ? __pv_queued_spin_lock_slowpath+0x5b9/0x9c0 [ 397.899256][ C1] __pv_queued_spin_lock_slowpath+0x60f/0x9c0 [ 397.899275][ C1] ? __pv_queued_spin_unlock_slowpath+0x300/0x300 [ 397.899292][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 397.899310][ C1] ? __stack_depot_save+0x442/0x480 [ 397.899330][ C1] queued_spin_lock_slowpath+0x47/0x50 [ 397.899346][ C1] _raw_spin_lock_bh+0xd8/0xe0 [ 397.899362][ C1] ? _raw_spin_lock_irq+0xe0/0xe0 [ 397.899377][ C1] ? task_work_add+0x27/0x1e0 [ 397.899391][ C1] ? fput+0x1a/0x20 [ 397.899405][ C1] ? filp_close+0x105/0x150 [ 397.899421][ C1] ? __close_range+0x203/0x3e0 [ 397.899439][ C1] ? __x64_sys_close_range+0x7a/0x90 [ 397.899452][ C1] ? do_syscall_64+0x4c/0xa0 [ 397.899469][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 397.899488][ C1] lock_sock_nested+0x97/0x290 [ 397.899511][ C1] ? sock_init_data+0xc0/0xc0 [ 397.899527][ C1] ? locks_remove_posix+0x520/0x520 [ 397.899546][ C1] tipc_release+0xb2/0x1630 [ 397.899610][ C1] ? rwsem_write_trylock+0x130/0x300 [ 397.899627][ C1] ? tipc_sock_destruct+0x180/0x180 [ 397.899641][ C1] ? __kasan_check_write+0x14/0x20 [ 397.899659][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 397.899675][ C1] ? _raw_spin_trylock_bh+0x130/0x130 [ 397.899701][ C1] sock_close+0xe0/0x270 [ 397.899714][ C1] ? sock_mmap+0xa0/0xa0 [ 397.899728][ C1] __fput+0x20b/0x8b0 [ 397.899744][ C1] ____fput+0x15/0x20 [ 397.899759][ C1] task_work_run+0x127/0x190 [ 397.899774][ C1] exit_to_user_mode_loop+0xd0/0xe0 [ 397.899790][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 397.899805][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 397.899820][ C1] do_syscall_64+0x58/0xa0 [ 397.899836][ C1] ? clear_bhb_loop+0x50/0xa0 [ 397.899850][ C1] ? clear_bhb_loop+0x50/0xa0 [ 397.899863][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 397.899882][ C1] RIP: 0033:0x7f534f6b2749 [ 397.899896][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.899908][ C1] RSP: 002b:00007ffd96f520c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 397.899924][ C1] RAX: 0000000000000000 RBX: 00007f534f90ada0 RCX: 00007f534f6b2749 [ 397.899935][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 397.899945][ C1] RBP: 00007f534f90ada0 R08: 0000000000000000 R09: 0000000596f523bf [ 397.899956][ C1] R10: 00007f534f90acb0 R11: 0000000000000246 R12: 0000000000027684 [ 397.899967][ C1] R13: 00007f534f909090 R14: ffffffffffffffff R15: 00007ffd96f521e0 [ 397.899981][ C1]