Warning: Permanently added '10.128.1.228' (ED25519) to the list of known hosts.
2025/11/26 04:35:35 parsed 1 programs
[ 115.265403][ T30] audit: type=1400 audit(1764131735.043:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 115.286233][ T30] audit: type=1400 audit(1764131735.043:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 115.971114][ T30] audit: type=1400 audit(1764131735.753:66): avc: denied { mounton } for pid=290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 115.972101][ T290] cgroup: Unknown subsys name 'net'
[ 115.993865][ T30] audit: type=1400 audit(1764131735.753:67): avc: denied { mount } for pid=290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 116.021642][ T30] audit: type=1400 audit(1764131735.783:68): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 116.021820][ T290] cgroup: Unknown subsys name 'devices'
[ 116.191291][ T290] cgroup: Unknown subsys name 'hugetlb'
[ 116.196929][ T290] cgroup: Unknown subsys name 'rlimit'
[ 116.338522][ T30] audit: type=1400 audit(1764131736.113:69): avc: denied { setattr } for pid=290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 116.362188][ T30] audit: type=1400 audit(1764131736.113:70): avc: denied { create } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 116.382982][ T30] audit: type=1400 audit(1764131736.123:71): avc: denied { write } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 116.392923][ T292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 116.403558][ T30] audit: type=1400 audit(1764131736.123:72): avc: denied { read } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 116.432645][ T30] audit: type=1400 audit(1764131736.123:73): avc: denied { mounton } for pid=290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 116.437769][ T290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 116.924200][ T294] request_module fs-gadgetfs succeeded, but still no fs?
[ 117.307022][ T321] syz-executor (321) used greatest stack depth: 21664 bytes left
[ 117.317418][ T325] bridge0: port 1(bridge_slave_0) entered blocking state
[ 117.324486][ T325] bridge0: port 1(bridge_slave_0) entered disabled state
[ 117.331968][ T325] device bridge_slave_0 entered promiscuous mode
[ 117.338686][ T325] bridge0: port 2(bridge_slave_1) entered blocking state
[ 117.345752][ T325] bridge0: port 2(bridge_slave_1) entered disabled state
[ 117.353205][ T325] device bridge_slave_1 entered promiscuous mode
[ 117.392596][ T325] bridge0: port 2(bridge_slave_1) entered blocking state
[ 117.399676][ T325] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 117.406959][ T325] bridge0: port 1(bridge_slave_0) entered blocking state
[ 117.413991][ T325] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 117.437288][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 117.444980][ T45] bridge0: port 1(bridge_slave_0) entered disabled state
[ 117.452269][ T45] bridge0: port 2(bridge_slave_1) entered disabled state
[ 117.461615][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 117.470112][ T45] bridge0: port 1(bridge_slave_0) entered blocking state
[ 117.477157][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 117.485731][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 117.494051][ T45] bridge0: port 2(bridge_slave_1) entered blocking state
[ 117.501124][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 117.514049][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 117.523311][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 117.536171][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 117.547217][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 117.555607][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 117.563457][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 117.571854][ T325] device veth0_vlan entered promiscuous mode
[ 117.581700][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 117.590843][ T325] device veth1_macvtap entered promiscuous mode
[ 117.599761][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 117.609863][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 117.643609][ T325] syz-executor (325) used greatest stack depth: 21120 bytes left
2025/11/26 04:35:37 executed programs: 0
[ 118.131635][ T362] bridge0: port 1(bridge_slave_0) entered blocking state
[ 118.138843][ T362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 118.146683][ T362] device bridge_slave_0 entered promiscuous mode
[ 118.153813][ T362] bridge0: port 2(bridge_slave_1) entered blocking state
[ 118.160982][ T362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 118.168699][ T362] device bridge_slave_1 entered promiscuous mode
[ 118.235182][ T362] bridge0: port 2(bridge_slave_1) entered blocking state
[ 118.242287][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 118.249927][ T362] bridge0: port 1(bridge_slave_0) entered blocking state
[ 118.257098][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 118.276998][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 118.284787][ T336] bridge0: port 1(bridge_slave_0) entered disabled state
[ 118.292399][ T336] bridge0: port 2(bridge_slave_1) entered disabled state
[ 118.301365][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 118.309999][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 118.318095][ T336] bridge0: port 1(bridge_slave_0) entered blocking state
[ 118.325466][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 118.336055][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 118.344762][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 118.353590][ T336] bridge0: port 2(bridge_slave_1) entered blocking state
[ 118.360889][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 118.372544][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 118.380798][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 118.389959][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 118.398046][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 118.410591][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 118.419361][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 118.430042][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 118.438019][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 118.446063][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 118.453585][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 118.462079][ T362] device veth0_vlan entered promiscuous mode
[ 118.471623][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 118.479859][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 118.488797][ T362] device veth1_macvtap entered promiscuous mode
[ 118.497335][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 118.505119][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 118.513744][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 118.523206][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 118.531720][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 218.678970][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 218.685947][ C1] (detected by 1, t=10002 jiffies, g=1345, q=107)
[ 218.693150][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4294959081-4294949079), jiffies_till_next_fqs=1, root ->qsmask 0x0
[ 218.706651][ C1] rcu: rcu_preempt kthread starved for 10002 jiffies! g1345 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[ 218.718005][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 218.727969][ C1] rcu: RCU grace-period kthread stack dump:
[ 218.733925][ C1] task:rcu_preempt state:R running task stack:28752 pid: 14 ppid: 2 flags:0x00004000
[ 218.744766][ C1] Call Trace:
[ 218.748038][ C1]
[ 218.751050][ C1] __schedule+0xb6e/0x14c0
[ 218.755459][ C1] ? release_firmware_map_entry+0x190/0x190
[ 218.761507][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80
[ 218.767391][ C1] ? __mod_timer+0x7ae/0xb30
[ 218.772062][ C1] schedule+0x11e/0x1e0
[ 218.776201][ C1] schedule_timeout+0x12c/0x2e0
[ 218.781040][ C1] ? console_conditional_schedule+0x30/0x30
[ 218.786916][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110
[ 218.792447][ C1] ? update_process_times+0x200/0x200
[ 218.797814][ C1] ? prepare_to_swait_event+0x308/0x320
[ 218.803486][ C1] rcu_gp_fqs_loop+0x293/0xf60
[ 218.808260][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110
[ 218.813794][ C1] ? debug_smp_processor_id+0x17/0x20
[ 218.819157][ C1] ? __note_gp_changes+0x4e2/0x9e0
[ 218.824261][ C1] ? rcu_gp_init+0xc00/0xc00
[ 218.828842][ C1] ? _raw_spin_unlock_irq+0x4e/0x70
[ 218.834206][ C1] ? rcu_gp_init+0x9a7/0xc00
[ 218.838884][ C1] rcu_gp_kthread+0x98/0x330
[ 218.843554][ C1] ? wake_nocb_gp+0x1d0/0x1d0
[ 218.848309][ C1] ? __kasan_check_read+0x11/0x20
[ 218.853328][ C1] ? __kthread_parkme+0xac/0x200
[ 218.858270][ C1] ? preempt_count_add+0x90/0x1b0
[ 218.863470][ C1] kthread+0x411/0x500
[ 218.867548][ C1] ? wake_nocb_gp+0x1d0/0x1d0
[ 218.872227][ C1] ? kthread_blkcg+0xd0/0xd0
[ 218.876807][ C1] ret_from_fork+0x1f/0x30
[ 218.881313][ C1]
[ 218.884324][ C1] rcu: Stack dump where RCU GP kthread last ran:
[ 218.890662][ C1] NMI backtrace for cpu 1
[ 218.894970][ C1] CPU: 1 PID: 378 Comm: syz.2.18 Not tainted syzkaller #0
[ 218.902058][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 218.912096][ C1] Call Trace:
[ 218.915366][ C1]
[ 218.918237][ C1] __dump_stack+0x21/0x30
[ 218.922667][ C1] dump_stack_lvl+0xee/0x150
[ 218.927286][ C1] ? show_regs_print_info+0x20/0x20
[ 218.932489][ C1] dump_stack+0x15/0x20
[ 218.936668][ C1] nmi_cpu_backtrace+0x2b4/0x2c0
[ 218.941628][ C1] ? nmi_trigger_cpumask_backtrace+0x240/0x240
[ 218.948177][ C1] ? load_image+0x3a0/0x3a0
[ 218.952676][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20
[ 218.958741][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20
[ 218.964803][ C1] nmi_trigger_cpumask_backtrace+0x138/0x240
[ 218.970799][ C1] arch_trigger_cpumask_backtrace+0x10/0x20
[ 218.976715][ C1] rcu_check_gp_kthread_starvation+0x1e0/0x260
[ 218.982941][ C1] print_other_cpu_stall+0xded/0xfd0
[ 218.988299][ C1] ? print_cpu_stall+0x600/0x600
[ 218.993224][ C1] ? tick_nohz_handler+0x300/0x300
[ 218.998332][ C1] ? accumulate_nsecs_to_secs+0xb1/0x230
[ 219.004231][ C1] ? cgroup_rstat_updated+0xf5/0x370
[ 219.009544][ C1] rcu_sched_clock_irq+0x8a3/0x12b0
[ 219.014746][ C1] ? rcu_boost_kthread_setaffinity+0x310/0x310
[ 219.020896][ C1] ? raise_softirq+0x71/0xe0
[ 219.025601][ C1] ? __raise_softirq_irqoff+0xd0/0xd0
[ 219.031353][ C1] ? hrtimer_run_queues+0x166/0x430
[ 219.036722][ C1] update_process_times+0x198/0x200
[ 219.041931][ C1] tick_sched_timer+0x17c/0x240
[ 219.046785][ C1] ? tick_setup_sched_timer+0x450/0x450
[ 219.052334][ C1] __hrtimer_run_queues+0x3b5/0x9e0
[ 219.057531][ C1] ? __kasan_check_write+0x14/0x20
[ 219.062633][ C1] ? hrtimer_interrupt+0x8c0/0x8c0
[ 219.067918][ C1] ? ktime_get_update_offsets_now+0x2fa/0x310
[ 219.073970][ C1] hrtimer_interrupt+0x3c7/0x8c0
[ 219.078920][ C1] __sysvec_apic_timer_interrupt+0xfa/0x3e0
[ 219.084809][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0
[ 219.090429][ C1]
[ 219.093345][ C1]
[ 219.096264][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 219.102228][ C1] RIP: 0010:tipc_sk_rcv+0x19c6/0x2c60
[ 219.107763][ C1] Code: 16 db fc 4c 8b 74 24 40 48 8b bc 24 78 01 00 00 e8 af 77 1b 00 48 8b 44 24 70 48 8d 78 30 48 89 f8 48 c1 e8 03 42 80 3c 28 00 <74> 05 e8 63 98 19 fd 49 8b 7f 30 48 8d b4 24 c0 01 00 00 e8 a2 09
[ 219.127367][ C1] RSP: 0018:ffffc90000c469e0 EFLAGS: 00000246
[ 219.133432][ C1] RAX: 1ffff110217645a6 RBX: 0000000000000000 RCX: ffff88810d19cf00
[ 219.141574][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810bb22d30
[ 219.149616][ C1] RBP: ffffc90000c46c70 R08: dffffc0000000000 R09: ffffed10217645b2
[ 219.157928][ C1] R10: ffffed10217645b2 R11: 1ffff110217645b1 R12: ffff88812b100000
[ 219.165981][ C1] R13: dffffc0000000000 R14: ffffc90000c46e20 R15: ffff88810bb22d00
[ 219.174039][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80
[ 219.179836][ C1] ? __stack_depot_save+0x442/0x480
[ 219.185174][ C1] ? kasan_set_track+0x5b/0x70
[ 219.190043][ C1] ? kasan_set_track+0x4a/0x70
[ 219.194937][ C1] ? kasan_set_free_info+0x23/0x40
[ 219.200041][ C1] ? ____kasan_slab_free+0x125/0x160
[ 219.205309][ C1] ? __kasan_slab_free+0x11/0x20
[ 219.210230][ C1] ? slab_free_freelist_hook+0xc2/0x190
[ 219.215770][ C1] ? kmem_cache_free+0x100/0x320
[ 219.220716][ C1] ? kfree_skbmem+0x10c/0x180
[ 219.225383][ C1] ? tipc_sk_rcv+0x1ce4/0x2c60
[ 219.230309][ C1] ? tipc_sk_filter_rcv+0x151b/0x2c40
[ 219.235812][ C1] ? tipc_release+0xd0b/0x1630
[ 219.240596][ C1] ? syscall_exit_to_user_mode+0x1a/0x30
[ 219.246236][ C1] ? do_syscall_64+0x58/0xa0
[ 219.250820][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 219.256910][ C1] ? __skb_queue_purge+0x170/0x170
[ 219.262124][ C1] tipc_node_xmit+0x256/0xce0
[ 219.266918][ C1] ? ____kasan_slab_free+0x130/0x160
[ 219.272198][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0
[ 219.277743][ C1] ? slab_free_freelist_hook+0xc2/0x190
[ 219.283371][ C1] ? kfree_skbmem+0x10c/0x180
[ 219.288127][ C1] ? kmem_cache_free+0x100/0x320
[ 219.293589][ C1] ? skb_release_data+0x814/0xa10
[ 219.299152][ C1] tipc_node_xmit_skb+0xe9/0x130
[ 219.304182][ C1] ? kfree_skb+0xc1/0x2f0
[ 219.308618][ C1] ? __skb_queue_purge+0x170/0x170
[ 219.313757][ C1] ? trace_tipc_sk_rej_msg+0x25/0x150
[ 219.319408][ C1] tipc_sk_rcv+0x1d5d/0x2c60
[ 219.324107][ C1] ? _raw_spin_unlock+0x4d/0x70
[ 219.328950][ C1] ? handle_pte_fault+0xb60/0x2680
[ 219.334078][ C1] ? fault_around_bytes_set+0xc0/0xc0
[ 219.339448][ C1] ? do_handle_mm_fault+0xf39/0x1d50
[ 219.344753][ C1] ? __skb_queue_purge+0x170/0x170
[ 219.349866][ C1] tipc_node_xmit+0x256/0xce0
[ 219.354545][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0
[ 219.360075][ C1] ? __kernel_text_address+0xa0/0x100
[ 219.365536][ C1] ? unwind_get_return_address+0x4d/0x90
[ 219.371190][ C1] ? stack_trace_save+0xe0/0xe0
[ 219.376035][ C1] ? arch_stack_walk+0xee/0x140
[ 219.381060][ C1] tipc_sk_filter_rcv+0x151b/0x2c40
[ 219.386368][ C1] ? tipc_sk_publish+0x440/0x440
[ 219.391397][ C1] ? __kasan_check_write+0x14/0x20
[ 219.396887][ C1] ? _raw_spin_lock_bh+0x8e/0xe0
[ 219.402469][ C1] tipc_sk_rcv+0x7b7/0x2c60
[ 219.407332][ C1] ? kfree_skbmem+0x10c/0x180
[ 219.412269][ C1] ? skb_release_data+0x814/0xa10
[ 219.417374][ C1] ? __skb_queue_purge+0x170/0x170
[ 219.422711][ C1] ? tipc_sk_filter_rcv+0x29de/0x2c40
[ 219.428324][ C1] tipc_node_xmit+0x256/0xce0
[ 219.433182][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0
[ 219.438809][ C1] ? kasan_quarantine_put+0x34/0x190
[ 219.444176][ C1] tipc_node_distr_xmit+0x292/0x390
[ 219.449362][ C1] ? tipc_node_xmit_skb+0x130/0x130
[ 219.454644][ C1] ? kfree_skbmem+0x10c/0x180
[ 219.459311][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0
[ 219.464413][ C1] ? tipc_sk_timeout+0x970/0x970
[ 219.469342][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110
[ 219.474808][ C1] __release_sock+0x143/0x350
[ 219.479468][ C1] release_sock+0x60/0x1b0
[ 219.483902][ C1] tipc_release+0xd0b/0x1630
[ 219.488483][ C1] ? tipc_sock_destruct+0x180/0x180
[ 219.493786][ C1] ? kick_process+0xdc/0x150
[ 219.498665][ C1] sock_close+0xe0/0x270
[ 219.503240][ C1] ? sock_mmap+0xa0/0xa0
[ 219.507491][ C1] __fput+0x20b/0x8b0
[ 219.511480][ C1] ____fput+0x15/0x20
[ 219.515640][ C1] task_work_run+0x127/0x190
[ 219.520249][ C1] exit_to_user_mode_loop+0xd0/0xe0
[ 219.525448][ C1] exit_to_user_mode_prepare+0x87/0xd0
[ 219.531155][ C1] syscall_exit_to_user_mode+0x1a/0x30
[ 219.536611][ C1] do_syscall_64+0x58/0xa0
[ 219.541534][ C1] ? clear_bhb_loop+0x50/0xa0
[ 219.546192][ C1] ? clear_bhb_loop+0x50/0xa0
[ 219.550894][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 219.556799][ C1] RIP: 0033:0x7fd965151749
[ 219.561197][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 219.581061][ C1] RSP: 002b:00007fd964fc1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 219.589952][ C1] RAX: 00000000000203a0 RBX: 00007fd9653a7fa0 RCX: 00007fd965151749
[ 219.598149][ C1] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003
[ 219.606516][ C1] RBP: 00007fd9651d5f91 R08: 0000000000000000 R09: 0000000000000000
[ 219.614624][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 219.622598][ C1] R13: 00007fd9653a8038 R14: 00007fd9653a7fa0 R15: 00007ffcbdf01e38
[ 219.631470][ C1]
[ 265.139286][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 143s! [syz.2.18:377]
[ 265.147334][ C0] Modules linked in:
[ 265.151754][ C0] CPU: 0 PID: 377 Comm: syz.2.18 Not tainted syzkaller #0
[ 265.158873][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 265.168929][ C0] RIP: 0010:__pv_queued_spin_lock_slowpath+0x538/0x9c0
[ 265.175798][ C0] Code: c0 0f 85 1c 01 00 00 48 8b 44 24 08 c6 00 01 41 bd 00 80 ff ff eb 07 f3 90 41 ff c5 74 47 43 0f b6 04 3e 84 c0 75 2b 80 3b 00 <75> eb 48 89 df be 02 00 00 00 e8 99 00 58 00 66 b8 00 01 f0 66 44
[ 265.195842][ C0] RSP: 0018:ffffc90000c279a0 EFLAGS: 00000206
[ 265.202029][ C0] RAX: 0000000000000000 RBX: ffff88810bb22d88 RCX: ffffffff814f4289
[ 265.210013][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff88810bb22d88
[ 265.217996][ C0] RBP: ffffc90000c27a90 R08: dffffc0000000000 R09: ffffed10217645b2
[ 265.226154][ C0] R10: ffffed10217645b2 R11: 1ffff110217645b1 R12: 1ffff1103ee00001
[ 265.234132][ C0] R13: 00000000ffffa8b0 R14: 1ffff110217645b1 R15: dffffc0000000000
[ 265.242119][ C0] FS: 0000555587f67500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 265.251409][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 265.258017][ C0] CR2: 0000000000000000 CR3: 000000012040b000 CR4: 00000000003506b0
[ 265.266013][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 265.273988][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 265.282056][ C0] Call Trace:
[ 265.285344][ C0]
[ 265.288372][ C0] ? __pv_queued_spin_unlock_slowpath+0x300/0x300
[ 265.294802][ C0] ? stack_trace_save+0x98/0xe0
[ 265.299662][ C0] ? __stack_depot_save+0x34/0x480
[ 265.304787][ C0] ? __schedule+0xb76/0x14c0
[ 265.309387][ C0] queued_spin_lock_slowpath+0x47/0x50
[ 265.314851][ C0] _raw_spin_lock_bh+0xd8/0xe0
[ 265.319630][ C0] ? _raw_spin_lock_irq+0xe0/0xe0
[ 265.324661][ C0] ? task_work_add+0x27/0x1e0
[ 265.329445][ C0] ? fput+0x1a/0x20
[ 265.333255][ C0] ? filp_close+0x105/0x150
[ 265.337765][ C0] ? __close_range+0x203/0x3e0
[ 265.342534][ C0] ? __x64_sys_close_range+0x7a/0x90
[ 265.348091][ C0] ? do_syscall_64+0x4c/0xa0
[ 265.352693][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 265.358777][ C0] lock_sock_nested+0x97/0x290
[ 265.363550][ C0] ? sock_init_data+0xc0/0xc0
[ 265.368321][ C0] ? locks_remove_posix+0x520/0x520
[ 265.373538][ C0] tipc_release+0xb2/0x1630
[ 265.378135][ C0] ? rwsem_write_trylock+0x130/0x300
[ 265.383428][ C0] ? tipc_sock_destruct+0x180/0x180
[ 265.388633][ C0] ? __kasan_check_write+0x14/0x20
[ 265.393750][ C0] ? _raw_spin_lock+0x8e/0xe0
[ 265.398439][ C0] ? _raw_spin_trylock_bh+0x130/0x130
[ 265.403979][ C0] sock_close+0xe0/0x270
[ 265.408236][ C0] ? sock_mmap+0xa0/0xa0
[ 265.412502][ C0] __fput+0x20b/0x8b0
[ 265.416495][ C0] ____fput+0x15/0x20
[ 265.420480][ C0] task_work_run+0x127/0x190
[ 265.425101][ C0] exit_to_user_mode_loop+0xd0/0xe0
[ 265.430386][ C0] exit_to_user_mode_prepare+0x87/0xd0
[ 265.435854][ C0] syscall_exit_to_user_mode+0x1a/0x30
[ 265.441324][ C0] do_syscall_64+0x58/0xa0
[ 265.445748][ C0] ? clear_bhb_loop+0x50/0xa0
[ 265.450515][ C0] ? clear_bhb_loop+0x50/0xa0
[ 265.455289][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 265.461195][ C0] RIP: 0033:0x7fd965151749
[ 265.465630][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 265.485334][ C0] RSP: 002b:00007ffcbdf01f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 265.493756][ C0] RAX: 0000000000000000 RBX: 00007fd9653a9da0 RCX: 00007fd965151749
[ 265.501737][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 265.509813][ C0] RBP: 00007fd9653a9da0 R08: 0000000000000000 R09: 00000005bdf0228f
[ 265.517800][ C0] R10: 00007fd9653a9cb0 R11: 0000000000000246 R12: 000000000001d282
[ 265.525793][ C0] R13: 00007fd9653a8090 R14: ffffffffffffffff R15: 00007ffcbdf020b0
[ 265.533782][ C0]
[ 265.536808][ C0] Sending NMI from CPU 0 to CPUs 1:
[ 265.542106][ C1] NMI backtrace for cpu 1
[ 265.542114][ C1] CPU: 1 PID: 378 Comm: syz.2.18 Not tainted syzkaller #0
[ 265.542130][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 265.542137][ C1] RIP: 0010:tipc_sk_lookup+0x49b/0x5f0
[ 265.542157][ C1] Code: 24 e9 17 fd ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 20 fd ff ff 4c 89 ef 49 89 f4 e8 1d 81 19 fd 4c 89 e6 e9 0d fd ff ff <4d> 85 ed 74 7c 49 bc 00 00 00 00 00 fc ff df 48 8b 44 24 20 42 0f
[ 265.542169][ C1] RSP: 0018:ffffc90000c468e0 EFLAGS: 00000246
[ 265.542183][ C1] RAX: ffffffff848dbddf RBX: 0000000000000370 RCX: ffff88810d19cf00
[ 265.542195][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 265.542204][ C1] RBP: ffffc90000c469d0 R08: 0000000000000004 R09: 0000000000c46903
[ 265.542213][ C1] R10: fffff52000188d2c R11: 1ffff92000188d2c R12: 0000000000000004
[ 265.542223][ C1] R13: ffff88810bb230f8 R14: 0000000000000000 R15: fffffffffffffc08
[ 265.542234][ C1] FS: 00007fd964fc16c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 265.542247][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 265.542257][ C1] CR2: 0000200000011000 CR3: 000000012040b000 CR4: 00000000003506a0
[ 265.542272][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 265.542281][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 265.542290][ C1] Call Trace:
[ 265.542295][ C1]
[ 265.542302][ C1] ? tipc_sk_rcv+0x2c60/0x2c60
[ 265.542317][ C1] tipc_sk_rcv+0x3fe/0x2c60
[ 265.542330][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80
[ 265.542346][ C1] ? __stack_depot_save+0x442/0x480
[ 265.542364][ C1] ? kasan_set_track+0x5b/0x70
[ 265.542377][ C1] ? kasan_set_track+0x4a/0x70
[ 265.542389][ C1] ? kasan_set_free_info+0x23/0x40
[ 265.542403][ C1] ? ____kasan_slab_free+0x125/0x160
[ 265.542417][ C1] ? __kasan_slab_free+0x11/0x20
[ 265.542429][ C1] ? slab_free_freelist_hook+0xc2/0x190
[ 265.542445][ C1] ? kmem_cache_free+0x100/0x320
[ 265.542467][ C1] ? kfree_skbmem+0x10c/0x180
[ 265.542483][ C1] ? tipc_sk_rcv+0x1ce4/0x2c60
[ 265.542495][ C1] ? tipc_sk_filter_rcv+0x151b/0x2c40
[ 265.542509][ C1] ? tipc_release+0xd0b/0x1630
[ 265.542523][ C1] ? syscall_exit_to_user_mode+0x1a/0x30
[ 265.542536][ C1] ? do_syscall_64+0x58/0xa0
[ 265.542551][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 265.542567][ C1] ? __skb_queue_purge+0x170/0x170
[ 265.542582][ C1] tipc_node_xmit+0x256/0xce0
[ 265.542598][ C1] ? ____kasan_slab_free+0x130/0x160
[ 265.542612][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0
[ 265.542627][ C1] ? slab_free_freelist_hook+0xc2/0x190
[ 265.542643][ C1] ? kfree_skbmem+0x10c/0x180
[ 265.542657][ C1] ? kmem_cache_free+0x100/0x320
[ 265.542671][ C1] ? skb_release_data+0x814/0xa10
[ 265.542687][ C1] tipc_node_xmit_skb+0xe9/0x130
[ 265.542702][ C1] ? kfree_skb+0xc1/0x2f0
[ 265.542716][ C1] ? __skb_queue_purge+0x170/0x170
[ 265.542732][ C1] ? trace_tipc_sk_rej_msg+0x25/0x150
[ 265.542745][ C1] tipc_sk_rcv+0x1d5d/0x2c60
[ 265.542758][ C1] ? _raw_spin_unlock+0x4d/0x70
[ 265.542772][ C1] ? handle_pte_fault+0xb60/0x2680
[ 265.542788][ C1] ? fault_around_bytes_set+0xc0/0xc0
[ 265.542804][ C1] ? do_handle_mm_fault+0xf39/0x1d50
[ 265.542818][ C1] ? __skb_queue_purge+0x170/0x170
[ 265.542834][ C1] tipc_node_xmit+0x256/0xce0
[ 265.542850][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0
[ 265.542865][ C1] ? __kernel_text_address+0xa0/0x100
[ 265.542879][ C1] ? unwind_get_return_address+0x4d/0x90
[ 265.542895][ C1] ? stack_trace_save+0xe0/0xe0
[ 265.542908][ C1] ? arch_stack_walk+0xee/0x140
[ 265.542925][ C1] tipc_sk_filter_rcv+0x151b/0x2c40
[ 265.542944][ C1] ? tipc_sk_publish+0x440/0x440
[ 265.542957][ C1] ? __kasan_check_write+0x14/0x20
[ 265.542971][ C1] ? _raw_spin_lock_bh+0x8e/0xe0
[ 265.542987][ C1] tipc_sk_rcv+0x7b7/0x2c60
[ 265.543002][ C1] ? kfree_skbmem+0x10c/0x180
[ 265.543016][ C1] ? skb_release_data+0x814/0xa10
[ 265.543033][ C1] ? __skb_queue_purge+0x170/0x170
[ 265.543047][ C1] ? tipc_sk_filter_rcv+0x29de/0x2c40
[ 265.543061][ C1] tipc_node_xmit+0x256/0xce0
[ 265.543076][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0
[ 265.543093][ C1] ? kasan_quarantine_put+0x34/0x190
[ 265.543108][ C1] tipc_node_distr_xmit+0x292/0x390
[ 265.543125][ C1] ? tipc_node_xmit_skb+0x130/0x130
[ 265.543141][ C1] ? kfree_skbmem+0x10c/0x180
[ 265.543155][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0
[ 265.543169][ C1] ? tipc_sk_timeout+0x970/0x970
[ 265.543181][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110
[ 265.543198][ C1] __release_sock+0x143/0x350
[ 265.543213][ C1] release_sock+0x60/0x1b0
[ 265.543226][ C1] tipc_release+0xd0b/0x1630
[ 265.543240][ C1] ? tipc_sock_destruct+0x180/0x180
[ 265.543254][ C1] ? kick_process+0xdc/0x150
[ 265.543269][ C1] sock_close+0xe0/0x270
[ 265.543282][ C1] ? sock_mmap+0xa0/0xa0
[ 265.543294][ C1] __fput+0x20b/0x8b0
[ 265.543309][ C1] ____fput+0x15/0x20
[ 265.543322][ C1] task_work_run+0x127/0x190
[ 265.543335][ C1] exit_to_user_mode_loop+0xd0/0xe0
[ 265.543349][ C1] exit_to_user_mode_prepare+0x87/0xd0
[ 265.543362][ C1] syscall_exit_to_user_mode+0x1a/0x30
[ 265.543375][ C1] do_syscall_64+0x58/0xa0
[ 265.543389][ C1] ? clear_bhb_loop+0x50/0xa0
[ 265.543401][ C1] ? clear_bhb_loop+0x50/0xa0
[ 265.543414][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 265.543429][ C1] RIP: 0033:0x7fd965151749
[ 265.543443][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 265.543460][ C1] RSP: 002b:00007fd964fc1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 265.543475][ C1] RAX: 00000000000203a0 RBX: 00007fd9653a7fa0 RCX: 00007fd965151749
[ 265.543485][ C1] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003
[ 265.543494][ C1] RBP: 00007fd9651d5f91 R08: 0000000000000000 R09: 0000000000000000
[ 265.543503][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 265.543512][ C1] R13: 00007fd9653a8038 R14: 00007fd9653a7fa0 R15: 00007ffcbdf01e38
[ 265.543524][ C1]