Warning: Permanently added '10.128.1.80' (ED25519) to the list of known hosts. 2026/08/14 16:49:39 parsed 1 programs [ 39.692297][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 39.692311][ T30] audit: type=1400 audit(1786726180.846:106): avc: denied { unlink } for pid=408 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 39.777571][ T408] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 40.541633][ T30] audit: type=1400 audit(1786726181.686:107): avc: denied { create } for pid=439 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.818301][ T30] audit: type=1401 audit(1786726181.966:108): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 40.903247][ T456] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.910738][ T456] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.918603][ T456] device bridge_slave_0 entered promiscuous mode [ 40.926130][ T456] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.933533][ T456] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.941042][ T456] device bridge_slave_1 entered promiscuous mode [ 40.985106][ T456] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.992744][ T456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.000295][ T456] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.007832][ T456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.029803][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.037546][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.045894][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.054856][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.071654][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.080922][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.088304][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.097860][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.106485][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.114001][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.127130][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.141986][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.156839][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.169277][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.177837][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.186150][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.195124][ T456] device veth0_vlan entered promiscuous mode [ 41.210318][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.219695][ T456] device veth1_macvtap entered promiscuous mode [ 41.229780][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.247014][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/08/14 16:49:42 executed programs: 0 [ 41.583600][ T470] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.591393][ T470] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.599450][ T470] device bridge_slave_0 entered promiscuous mode [ 41.606837][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.614522][ T470] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.623154][ T470] device bridge_slave_1 entered promiscuous mode [ 41.673509][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.680896][ T470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.688457][ T470] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.695941][ T470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.716570][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.724938][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.734240][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.744750][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.753670][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.761143][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.770977][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.779578][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.786811][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.800276][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.809876][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.832274][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.850075][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.859265][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.866990][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.876364][ T470] device veth0_vlan entered promiscuous mode [ 41.890755][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.901304][ T470] device veth1_macvtap entered promiscuous mode [ 41.911971][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.920623][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.936558][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.945573][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.970923][ T30] audit: type=1400 audit(1786726183.116:109): avc: denied { create } for pid=475 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.991775][ T30] audit: type=1400 audit(1786726183.126:110): avc: denied { write } for pid=475 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.031129][ T30] audit: type=1400 audit(1786726183.176:111): avc: denied { setopt } for pid=475 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.111551][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 142.118891][ C0] (detected by 0, t=10002 jiffies, g=2841, q=159) [ 142.125975][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294951411-4294941408), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 142.139836][ C0] rcu: rcu_preempt kthread starved for 10004 jiffies! g2841 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 142.153061][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 142.163068][ C0] rcu: RCU grace-period kthread stack dump: [ 142.169453][ C0] task:rcu_preempt state:R running task stack:28688 pid: 14 ppid: 2 flags:0x00004000 [ 142.180936][ C0] Call Trace: [ 142.184574][ C0] [ 142.187893][ C0] __schedule+0xbcf/0x14a0 [ 142.192379][ C0] ? release_firmware_map_entry+0x190/0x190 [ 142.198477][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 142.204573][ C0] ? __mod_timer+0x7c0/0xb40 [ 142.209197][ C0] schedule+0x11e/0x1e0 [ 142.214035][ C0] schedule_timeout+0x159/0x340 [ 142.219046][ C0] ? console_conditional_schedule+0x30/0x30 [ 142.225412][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 142.231159][ C0] ? update_process_times+0x200/0x200 [ 142.236680][ C0] ? prepare_to_swait_event+0x30f/0x330 [ 142.243301][ C0] rcu_gp_fqs_loop+0x2ae/0xfa0 [ 142.248663][ C0] ? _raw_spin_lock+0xf0/0xf0 [ 142.253724][ C0] ? debug_smp_processor_id+0x17/0x20 [ 142.259464][ C0] ? rcu_gp_init+0xc30/0xc30 [ 142.264082][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 142.269488][ C0] ? rcu_gp_init+0x9cf/0xc30 [ 142.274900][ C0] rcu_gp_kthread+0x9a/0x360 [ 142.280122][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 142.285451][ C0] ? __kasan_check_read+0x11/0x20 [ 142.290852][ C0] ? __kthread_parkme+0xab/0x1f0 [ 142.295901][ C0] kthread+0x3f5/0x4f0 [ 142.300174][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 142.305391][ C0] ? kthread_blkcg+0xd0/0xd0 [ 142.310606][ C0] ret_from_fork+0x1f/0x30 [ 142.315315][ C0] [ 142.318375][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 142.325352][ C0] Sending NMI from CPU 0 to CPUs 1: [ 142.330591][ C1] NMI backtrace for cpu 1 [ 142.330609][ C1] CPU: 1 PID: 479 Comm: syz.2.18 Not tainted syzkaller #0 [ 142.330625][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.330638][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x1/0x60 [ 142.330676][ C1] Code: 00 00 0f 0b 0f 1f 44 00 00 55 48 89 e5 53 48 89 fb e8 13 00 00 00 48 8b 3d 6c 9c 7f 05 48 89 de e8 24 b7 3e 00 5b 5d c3 00 55 <48> 89 e5 48 8b 45 08 65 48 8b 0d 90 b6 98 7e 65 8b 15 91 b6 98 7e [ 142.330690][ C1] RSP: 0018:ffffc90000b968f0 EFLAGS: 00000a06 [ 142.330704][ C1] RAX: f3f8f8f8f1f1f1f1 RBX: dffffc0000000000 RCX: ffff88811851cf00 [ 142.330717][ C1] RDX: 0000000000000000 RSI: ffffc90000b96bc0 RDI: ffff8881169d0000 [ 142.330728][ C1] RBP: ffffc90000b969f0 R08: ffff8881224c1e8b R09: 1ffff110244983d1 [ 142.330741][ C1] R10: dffffc0000000000 R11: ffffed10244983d2 R12: 1ffff92000172d28 [ 142.330753][ C1] R13: ffff8881224c1e00 R14: ffffc90000b96bc0 R15: 00000000fb2fbaf8 [ 142.330765][ C1] FS: 00007fc4910eb6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 142.330779][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.330790][ C1] CR2: 00007fc4910c9ff8 CR3: 000000011339d000 CR4: 00000000003506a0 [ 142.330805][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 142.330814][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 142.330856][ C1] Call Trace: [ 142.330861][ C1] [ 142.330867][ C1] ? tipc_node_distr_xmit+0x7b/0x390 [ 142.330886][ C1] ? tipc_sk_rcv+0x3ac/0x2ca0 [ 142.330902][ C1] ? tipc_node_xmit_skb+0x150/0x150 [ 142.330917][ C1] ? _raw_spin_trylock_bh+0xe5/0x150 [ 142.330932][ C1] ? _raw_spin_trylock+0x150/0x150 [ 142.330947][ C1] ? tipc_sk_rcv+0x351/0x2ca0 [ 142.330963][ C1] tipc_sk_rcv+0x1a3f/0x2ca0 [ 142.330978][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 142.330995][ C1] ? kasan_set_track+0x5b/0x70 [ 142.331018][ C1] ? kasan_set_track+0x4a/0x70 [ 142.331032][ C1] ? ____kasan_slab_free+0x125/0x160 [ 142.331047][ C1] ? __kasan_slab_free+0x11/0x20 [ 142.331066][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 142.331080][ C1] ? kmem_cache_free+0x100/0x320 [ 142.331097][ C1] ? kfree_skbmem+0x10c/0x180 [ 142.331112][ C1] ? kfree_skb+0xc1/0x2f0 [ 142.331126][ C1] ? tipc_sk_rcv+0x1d24/0x2ca0 [ 142.331142][ C1] ? release_sock+0x60/0x1b0 [ 142.331159][ C1] ? exit_to_user_mode_prepare+0x87/0xd0 [ 142.331182][ C1] ? syscall_exit_to_user_mode+0x1a/0x30 [ 142.331198][ C1] ? do_syscall_64+0x58/0xa0 [ 142.331212][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.331229][ C1] ? __skb_queue_purge+0x170/0x170 [ 142.331249][ C1] tipc_node_xmit+0x36f/0xd80 [ 142.331263][ C1] ? kasan_quarantine_put+0x34/0x190 [ 142.331281][ C1] ? kmem_cache_free+0x100/0x320 [ 142.331297][ C1] ? ____kasan_slab_free+0x130/0x160 [ 142.331313][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 142.331328][ C1] ? __kasan_slab_free+0x11/0x20 [ 142.331343][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 142.331358][ C1] ? kmem_cache_free+0x100/0x320 [ 142.331376][ C1] tipc_node_xmit_skb+0xf7/0x150 [ 142.331392][ C1] ? __skb_queue_purge+0x170/0x170 [ 142.331408][ C1] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 142.331425][ C1] tipc_sk_rcv+0x1d9d/0x2ca0 [ 142.331446][ C1] ? __skb_queue_purge+0x170/0x170 [ 142.331465][ C1] tipc_node_xmit+0x36f/0xd80 [ 142.331482][ C1] ? is_bpf_text_address+0x177/0x190 [ 142.331500][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 142.331516][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 142.331531][ C1] ? _raw_spin_lock+0xf0/0xf0 [ 142.331546][ C1] tipc_sk_filter_rcv+0x1993/0x2fd0 [ 142.331570][ C1] ? tipc_sk_publish+0x440/0x440 [ 142.331586][ C1] ? __kasan_check_write+0x14/0x20 [ 142.331602][ C1] ? _raw_spin_lock_bh+0x94/0xf0 [ 142.331619][ C1] tipc_sk_rcv+0x787/0x2ca0 [ 142.331633][ C1] ? ____kasan_slab_free+0x130/0x160 [ 142.331654][ C1] ? __skb_queue_purge+0x170/0x170 [ 142.331676][ C1] ? tipc_sk_filter_rcv+0x2d5b/0x2fd0 [ 142.331694][ C1] tipc_node_xmit+0x36f/0xd80 [ 142.331710][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 142.331728][ C1] tipc_node_distr_xmit+0x277/0x390 [ 142.331745][ C1] ? tipc_node_xmit_skb+0x150/0x150 [ 142.331762][ C1] tipc_sk_backlog_rcv+0x174/0x220 [ 142.331779][ C1] ? tipc_sk_timeout+0x9f0/0x9f0 [ 142.331794][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 142.331811][ C1] __release_sock+0x17c/0x3f0 [ 142.331830][ C1] release_sock+0x60/0x1b0 [ 142.331846][ C1] tipc_release+0xcef/0x1610 [ 142.331861][ C1] ? rwsem_write_trylock+0x136/0x300 [ 142.331879][ C1] ? tipc_sock_destruct+0x180/0x180 [ 142.331895][ C1] ? kick_process+0xdc/0x150 [ 142.331912][ C1] sock_close+0xb8/0x200 [ 142.331926][ C1] ? sock_mmap+0xa0/0xa0 [ 142.331941][ C1] __fput+0x22b/0x900 [ 142.331958][ C1] ____fput+0x15/0x20 [ 142.331972][ C1] task_work_run+0x127/0x190 [ 142.331988][ C1] exit_to_user_mode_loop+0xd0/0xe0 [ 142.332003][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 142.332019][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 142.332035][ C1] do_syscall_64+0x58/0xa0 [ 142.332049][ C1] ? clear_bhb_loop+0x50/0xa0 [ 142.332064][ C1] ? clear_bhb_loop+0x50/0xa0 [ 142.332079][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.332095][ C1] RIP: 0033:0x7fc491288629 [ 142.332119][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.332132][ C1] RSP: 002b:00007fc4910eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.332148][ C1] RAX: 00000000000203a0 RBX: 00007fc491501fa0 RCX: 00007fc491288629 [ 142.332160][ C1] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 142.332170][ C1] RBP: 00007fc49131eb39 R08: 0000000000000000 R09: 0000000000000000 [ 142.332181][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.332190][ C1] R13: 00007fc491502038 R14: 00007fc491501fa0 R15: 00007ffd6ce87c48 [ 142.332205][ C1] [ 287.338572][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [syz.2.18:478] [ 287.347072][ C0] Modules linked in: [ 287.351012][ C0] CPU: 0 PID: 478 Comm: syz.2.18 Not tainted syzkaller #0 [ 287.358839][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.369513][ C0] RIP: 0010:kvm_wait+0x105/0x150 [ 287.374501][ C0] Code: 1b d6 03 f4 eb 87 fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d 5d 1b d6 03 fb f4 5e ff ff ff fb e9 58 ff ff ff e8 1b 09 7d 03 89 f9 80 e1 07 38 [ 287.394931][ C0] RSP: 0018:ffffc90000bc7920 EFLAGS: 00000246 [ 287.401924][ C0] RAX: 0000000000000003 RBX: ffff8881224c1e88 RCX: ffffffff8150044c [ 287.410183][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff8881224c1e88 [ 287.419092][ C0] RBP: ffffc90000bc79b0 R08: ffff8881224c1e88 R09: 1ffff110244983d1 [ 287.427164][ C0] R10: dffffc0000000000 R11: ffffed10244983d2 R12: ffff88823ff52840 [ 287.435951][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff92000178f24 [ 287.444223][ C0] FS: 00005555667eb500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 287.453372][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.460484][ C0] CR2: 00007fc4912d5d40 CR3: 000000011339d000 CR4: 00000000003506b0 [ 287.469442][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.478483][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.486910][ C0] Call Trace: [ 287.490443][ C0] [ 287.493405][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 287.499216][ C0] ? __pv_queued_spin_lock_slowpath+0x5ac/0x9b0 [ 287.507034][ C0] __pv_queued_spin_lock_slowpath+0x605/0x9b0 [ 287.514677][ C0] ? __pv_queued_spin_unlock_slowpath+0x300/0x300 [ 287.521662][ C0] ? __stack_depot_save+0x34/0x480 [ 287.526818][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 287.532677][ C0] _raw_spin_lock_bh+0xe4/0xf0 [ 287.537755][ C0] ? _raw_spin_lock_irq+0xf0/0xf0 [ 287.543061][ C0] ? __close_range+0x25f/0x430 [ 287.548137][ C0] ? x64_sys_call+0x48f/0x9a0 [ 287.553114][ C0] ? do_syscall_64+0x4c/0xa0 [ 287.558032][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.564748][ C0] ? locks_remove_file+0x371/0xff0 [ 287.570342][ C0] lock_sock_nested+0x95/0x2a0 [ 287.575452][ C0] ? sock_init_data+0xc0/0xc0 [ 287.580731][ C0] ? locks_remove_posix+0x550/0x550 [ 287.585987][ C0] tipc_release+0xb3/0x1610 [ 287.590963][ C0] ? rwsem_write_trylock+0x136/0x300 [ 287.596559][ C0] ? tipc_sock_destruct+0x180/0x180 [ 287.602246][ C0] ? _raw_spin_lock+0x94/0xf0 [ 287.607151][ C0] ? _raw_spin_trylock_bh+0x150/0x150 [ 287.612930][ C0] sock_close+0xb8/0x200 [ 287.617595][ C0] ? sock_mmap+0xa0/0xa0 [ 287.622335][ C0] __fput+0x22b/0x900 [ 287.626539][ C0] ____fput+0x15/0x20 [ 287.630555][ C0] task_work_run+0x127/0x190 [ 287.635311][ C0] exit_to_user_mode_loop+0xd0/0xe0 [ 287.640835][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 287.646584][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 287.652248][ C0] do_syscall_64+0x58/0xa0 [ 287.656788][ C0] ? clear_bhb_loop+0x50/0xa0 [ 287.661585][ C0] ? clear_bhb_loop+0x50/0xa0 [ 287.666791][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.673083][ C0] RIP: 0033:0x7fc491288629 [ 287.677840][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.698749][ C0] RSP: 002b:00007ffd6ce87da8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 287.707488][ C0] RAX: 0000000000000000 RBX: 00007fc491503da0 RCX: 00007fc491288629 [ 287.715774][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 287.724267][ C0] RBP: 00007fc491503da0 R08: 0000000000000006 R09: 0000000000000000 [ 287.732722][ C0] R10: 00007fc491503cb0 R11: 0000000000000246 R12: 000000000000a769 [ 287.741539][ C0] R13: 00007fc49150209c R14: 000000000000a48e R15: 00007fc491502090 [ 287.750259][ C0] [ 287.754128][ C0] Sending NMI from CPU 0 to CPUs 1: [ 287.759735][ C1] NMI backtrace for cpu 1 [ 287.759747][ C1] CPU: 1 PID: 479 Comm: syz.2.18 Not tainted syzkaller #0 [ 287.759764][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.759773][ C1] RIP: 0010:tipc_sk_lookup+0x1/0x600 [ 287.759797][ C1] Code: 8c c7 d4 ff ff 49 8d 7c 24 10 e8 da e9 10 fd 49 8d 54 24 10 e9 b3 d4 ff ff e8 8b 11 16 00 66 2e 0f 1f 84 00 00 00 00 00 90 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec c0 00 00 [ 287.759810][ C1] RSP: 0018:ffffc90000b969f0 EFLAGS: 00000202 [ 287.759826][ C1] RAX: 0000000000000201 RBX: dffffc0000000000 RCX: 0000000000000200 [ 287.759837][ C1] RDX: 0000000000000000 RSI: 00000000fb2fbaf8 RDI: ffff8881169d0000 [ 287.759849][ C1] RBP: ffffc90000b96c90 R08: 0000000000000003 R09: 0000000000000004 [ 287.759859][ C1] R10: dffffc0000000000 R11: fffff52000172d30 R12: ffffc90000b96e40 [ 287.759872][ C1] R13: ffff8881224c1e01 R14: ffff8881169d0000 R15: 00000000fb2fbaf8 [ 287.759885][ C1] FS: 00007fc4910eb6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 287.759900][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.759933][ C1] CR2: 00007fc4910c9ff8 CR3: 000000011339d000 CR4: 00000000003506a0 [ 287.759948][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.759957][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.759968][ C1] Call Trace: [ 287.759973][ C1] [ 287.759979][ C1] ? tipc_sk_rcv+0x382/0x2ca0 [ 287.759996][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 287.760014][ C1] ? kasan_set_track+0x5b/0x70 [ 287.760029][ C1] ? kasan_set_track+0x4a/0x70 [ 287.760043][ C1] ? ____kasan_slab_free+0x125/0x160 [ 287.760059][ C1] ? __kasan_slab_free+0x11/0x20 [ 287.760073][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 287.760088][ C1] ? kmem_cache_free+0x100/0x320 [ 287.760105][ C1] ? kfree_skbmem+0x10c/0x180 [ 287.760120][ C1] ? kfree_skb+0xc1/0x2f0 [ 287.760133][ C1] ? tipc_sk_rcv+0x1d24/0x2ca0 [ 287.760149][ C1] ? release_sock+0x60/0x1b0 [ 287.760166][ C1] ? exit_to_user_mode_prepare+0x87/0xd0 [ 287.760183][ C1] ? syscall_exit_to_user_mode+0x1a/0x30 [ 287.760200][ C1] ? do_syscall_64+0x58/0xa0 [ 287.760214][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.760231][ C1] ? __skb_queue_purge+0x170/0x170 [ 287.760250][ C1] tipc_node_xmit+0x36f/0xd80 [ 287.760265][ C1] ? kasan_quarantine_put+0x34/0x190 [ 287.760283][ C1] ? kmem_cache_free+0x100/0x320 [ 287.760300][ C1] ? ____kasan_slab_free+0x130/0x160 [ 287.760337][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 287.760353][ C1] ? __kasan_slab_free+0x11/0x20 [ 287.760367][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 287.760383][ C1] ? kmem_cache_free+0x100/0x320 [ 287.760401][ C1] tipc_node_xmit_skb+0xf7/0x150 [ 287.760417][ C1] ? __skb_queue_purge+0x170/0x170 [ 287.760433][ C1] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 287.760450][ C1] tipc_sk_rcv+0x1d9d/0x2ca0 [ 287.760471][ C1] ? __skb_queue_purge+0x170/0x170 [ 287.760490][ C1] tipc_node_xmit+0x36f/0xd80 [ 287.760505][ C1] ? is_bpf_text_address+0x177/0x190 [ 287.760523][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 287.760540][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 287.760555][ C1] ? _raw_spin_lock+0xf0/0xf0 [ 287.760570][ C1] tipc_sk_filter_rcv+0x1993/0x2fd0 [ 287.760594][ C1] ? tipc_sk_publish+0x440/0x440 [ 287.760611][ C1] ? __kasan_check_write+0x14/0x20 [ 287.760634][ C1] ? _raw_spin_lock_bh+0x94/0xf0 [ 287.760650][ C1] tipc_sk_rcv+0x787/0x2ca0 [ 287.760665][ C1] ? ____kasan_slab_free+0x130/0x160 [ 287.760686][ C1] ? __skb_queue_purge+0x170/0x170 [ 287.760702][ C1] ? tipc_sk_filter_rcv+0x2d5b/0x2fd0 [ 287.760721][ C1] tipc_node_xmit+0x36f/0xd80 [ 287.760737][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 287.760756][ C1] tipc_node_distr_xmit+0x277/0x390 [ 287.760778][ C1] ? tipc_node_xmit_skb+0x150/0x150 [ 287.760799][ C1] tipc_sk_backlog_rcv+0x174/0x220 [ 287.760816][ C1] ? tipc_sk_timeout+0x9f0/0x9f0 [ 287.760832][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 287.760849][ C1] __release_sock+0x17c/0x3f0 [ 287.760867][ C1] release_sock+0x60/0x1b0 [ 287.760883][ C1] tipc_release+0xcef/0x1610 [ 287.760899][ C1] ? rwsem_write_trylock+0x136/0x300 [ 287.760918][ C1] ? tipc_sock_destruct+0x180/0x180 [ 287.760935][ C1] ? kick_process+0xdc/0x150 [ 287.760952][ C1] sock_close+0xb8/0x200 [ 287.760966][ C1] ? sock_mmap+0xa0/0xa0 [ 287.760981][ C1] __fput+0x22b/0x900 [ 287.760999][ C1] ____fput+0x15/0x20 [ 287.761013][ C1] task_work_run+0x127/0x190 [ 287.761029][ C1] exit_to_user_mode_loop+0xd0/0xe0 [ 287.761044][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 287.761060][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 287.761077][ C1] do_syscall_64+0x58/0xa0 [ 287.761090][ C1] ? clear_bhb_loop+0x50/0xa0 [ 287.761107][ C1] ? clear_bhb_loop+0x50/0xa0 [ 287.761123][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.761140][ C1] RIP: 0033:0x7fc491288629 [ 287.761155][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.761168][ C1] RSP: 002b:00007fc4910eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.761184][ C1] RAX: 00000000000203a0 RBX: 00007fc491501fa0 RCX: 00007fc491288629 [ 287.761196][ C1] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 287.761206][ C1] RBP: 00007fc49131eb39 R08: 0000000000000000 R09: 0000000000000000 [ 287.761216][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.761226][ C1] R13: 00007fc491502038 R14: 00007fc491501fa0 R15: 00007ffd6ce87c48 [ 287.761240][ C1] [ 287.761742][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 288.385262][ C0] CPU: 0 PID: 478 Comm: syz.2.18 Tainted: G L syzkaller #0 [ 288.394228][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 288.405567][ C0] Call Trace: [ 288.410479][ C0] [ 288.414109][ C0] __dump_stack+0x21/0x30 [ 288.419209][ C0] dump_stack_lvl+0x110/0x170 [ 288.424437][ C0] ? show_regs_print_info+0x20/0x20 [ 288.430442][ C0] dump_stack+0x15/0x20 [ 288.434821][ C0] panic+0x287/0x790 [ 288.439716][ C0] ? __irq_work_queue_local+0x12a/0x190 [ 288.446441][ C0] ? bpf_jit_dump+0xe0/0xe0 [ 288.451289][ C0] watchdog_timer_fn+0x5b4/0x5c0 [ 288.456778][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 288.463758][ C0] __hrtimer_run_queues+0x38a/0x890 [ 288.469436][ C0] ? hrtimer_interrupt+0x8c0/0x8c0 [ 288.475371][ C0] ? ktime_get_update_offsets_now+0x2fa/0x310 [ 288.481838][ C0] hrtimer_interrupt+0x3ad/0x8c0 [ 288.487913][ C0] __sysvec_apic_timer_interrupt+0xfa/0x3e0 [ 288.494711][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 288.501268][ C0] [ 288.504840][ C0] [ 288.508464][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 288.515235][ C0] RIP: 0010:kvm_wait+0x105/0x150 [ 288.520691][ C0] Code: 1b d6 03 f4 eb 87 fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d 5d 1b d6 03 fb f4 5e ff ff ff fb e9 58 ff ff ff e8 1b 09 7d 03 89 f9 80 e1 07 38 [ 288.543622][ C0] RSP: 0018:ffffc90000bc7920 EFLAGS: 00000246 [ 288.550203][ C0] RAX: 0000000000000003 RBX: ffff8881224c1e88 RCX: ffffffff8150044c [ 288.558473][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff8881224c1e88 [ 288.566668][ C0] RBP: ffffc90000bc79b0 R08: ffff8881224c1e88 R09: 1ffff110244983d1 [ 288.575129][ C0] R10: dffffc0000000000 R11: ffffed10244983d2 R12: ffff88823ff52840 [ 288.583723][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff92000178f24 [ 288.592007][ C0] ? __pv_queued_spin_lock_slowpath+0x5ac/0x9b0 [ 288.598933][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 288.604295][ C0] ? __pv_queued_spin_lock_slowpath+0x5ac/0x9b0 [ 288.610860][ C0] __pv_queued_spin_lock_slowpath+0x605/0x9b0 [ 288.617569][ C0] ? __pv_queued_spin_unlock_slowpath+0x300/0x300 [ 288.624130][ C0] ? __stack_depot_save+0x34/0x480 [ 288.630034][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 288.635878][ C0] _raw_spin_lock_bh+0xe4/0xf0 [ 288.640679][ C0] ? _raw_spin_lock_irq+0xf0/0xf0 [ 288.646262][ C0] ? __close_range+0x25f/0x430 [ 288.651590][ C0] ? x64_sys_call+0x48f/0x9a0 [ 288.656385][ C0] ? do_syscall_64+0x4c/0xa0 [ 288.661204][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 288.668095][ C0] ? locks_remove_file+0x371/0xff0 [ 288.673712][ C0] lock_sock_nested+0x95/0x2a0 [ 288.679270][ C0] ? sock_init_data+0xc0/0xc0 [ 288.684175][ C0] ? locks_remove_posix+0x550/0x550 [ 288.689870][ C0] tipc_release+0xb3/0x1610 [ 288.695256][ C0] ? rwsem_write_trylock+0x136/0x300 [ 288.701258][ C0] ? tipc_sock_destruct+0x180/0x180 [ 288.707142][ C0] ? _raw_spin_lock+0x94/0xf0 [ 288.712201][ C0] ? _raw_spin_trylock_bh+0x150/0x150 [ 288.718361][ C0] sock_close+0xb8/0x200 [ 288.723195][ C0] ? sock_mmap+0xa0/0xa0 [ 288.727620][ C0] __fput+0x22b/0x900 [ 288.731831][ C0] ____fput+0x15/0x20 [ 288.736202][ C0] task_work_run+0x127/0x190 [ 288.740914][ C0] exit_to_user_mode_loop+0xd0/0xe0 [ 288.746992][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 288.752765][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 288.759289][ C0] do_syscall_64+0x58/0xa0 [ 288.764481][ C0] ? clear_bhb_loop+0x50/0xa0 [ 288.770377][ C0] ? clear_bhb_loop+0x50/0xa0 [ 288.776342][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 288.783865][ C0] RIP: 0033:0x7fc491288629 [ 288.788604][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.809399][ C0] RSP: 002b:00007ffd6ce87da8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 288.819026][ C0] RAX: 0000000000000000 RBX: 00007fc491503da0 RCX: 00007fc491288629 [ 288.828085][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 288.836727][ C0] RBP: 00007fc491503da0 R08: 0000000000000006 R09: 0000000000000000 [ 288.845833][ C0] R10: 00007fc491503cb0 R11: 0000000000000246 R12: 000000000000a769 [ 288.855653][ C0] R13: 00007fc49150209c R14: 000000000000a48e R15: 00007fc491502090 [ 288.864682][ C0] [ 288.868748][ C0] Kernel Offset: disabled [ 288.874692][ C0] Rebooting in 86400 seconds..