Warning: Permanently added '10.128.1.97' (ED25519) to the list of known hosts. 2025/10/31 18:45:33 parsed 1 programs [ 46.906611][ T30] audit: type=1400 audit(1761936334.604:105): avc: denied { unlink } for pid=397 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 46.930826][ T397] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.376426][ T30] audit: type=1401 audit(1761936335.074:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 47.518480][ T30] audit: type=1400 audit(1761936335.214:107): avc: denied { create } for pid=415 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.597992][ T421] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.605256][ T421] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.612763][ T421] device bridge_slave_0 entered promiscuous mode [ 47.620359][ T421] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.627455][ T421] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.635050][ T421] device bridge_slave_1 entered promiscuous mode [ 47.682201][ T421] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.689390][ T421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.696717][ T421] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.703777][ T421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.722833][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.730716][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.738115][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.747806][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.756119][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.763219][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.773316][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.781577][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.788608][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.800593][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.809974][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.824764][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.836723][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.844872][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.852452][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.860810][ T421] device veth0_vlan entered promiscuous mode [ 47.870976][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.881769][ T421] device veth1_macvtap entered promiscuous mode [ 47.890794][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.900681][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/10/31 18:45:36 executed programs: 0 [ 48.553683][ T8] device bridge_slave_1 left promiscuous mode [ 48.559985][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.569529][ T8] device bridge_slave_0 left promiscuous mode [ 48.576056][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.584282][ T8] device veth1_macvtap left promiscuous mode [ 48.590481][ T8] device veth0_vlan left promiscuous mode [ 48.746063][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.753181][ T463] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.760617][ T463] device bridge_slave_0 entered promiscuous mode [ 48.767944][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.775091][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.782749][ T463] device bridge_slave_1 entered promiscuous mode [ 48.830850][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.838048][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.845513][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.852580][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.872164][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.879811][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.887492][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.897168][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.905876][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.913236][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.922342][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.930539][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.937706][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.950385][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.960238][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.976626][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.995778][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.004314][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.012385][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.020826][ T463] device veth0_vlan entered promiscuous mode [ 49.032746][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.049778][ T463] device veth1_macvtap entered promiscuous mode [ 49.059317][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.069472][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.099508][ T30] audit: type=1400 audit(1761936336.794:108): avc: denied { create } for pid=473 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.119219][ T30] audit: type=1400 audit(1761936336.794:109): avc: denied { write } for pid=473 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.138414][ T30] audit: type=1400 audit(1761936336.794:110): avc: denied { setopt } for pid=473 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 2025/10/31 18:45:41 executed programs: 270 [ 154.291255][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 154.297934][ C0] rcu: 0-...!: (10000 ticks this GP) idle=96d/1/0x4000000000000000 softirq=6137/6137 fqs=0 last_accelerate: 9faa/c6ba dyntick_enabled: 1 [ 154.312089][ C0] (t=10000 jiffies g=4685 q=239) [ 154.317122][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 9999 jiffies! g4685 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 154.329439][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=721 [ 154.337266][ C0] rcu: rcu_preempt kthread starved for 10000 jiffies! g4685 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 154.348651][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 154.358705][ C0] rcu: RCU grace-period kthread stack dump: [ 154.364595][ C0] task:rcu_preempt state:I stack:28752 pid: 14 ppid: 2 flags:0x00004000 [ 154.373809][ C0] Call Trace: [ 154.377219][ C0] [ 154.380166][ C0] __schedule+0xb6e/0x14c0 [ 154.384591][ C0] ? release_firmware_map_entry+0x190/0x190 [ 154.390480][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 154.396420][ C0] ? __mod_timer+0x7ae/0xb30 [ 154.401014][ C0] schedule+0x11e/0x1e0 [ 154.405355][ C0] schedule_timeout+0x12c/0x2e0 [ 154.410236][ C0] ? console_conditional_schedule+0x30/0x30 [ 154.416244][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 154.421799][ C0] ? update_process_times+0x200/0x200 [ 154.427268][ C0] ? prepare_to_swait_event+0x308/0x320 [ 154.432971][ C0] rcu_gp_fqs_loop+0x293/0xf60 [ 154.437748][ C0] ? debug_smp_processor_id+0x17/0x20 [ 154.443118][ C0] ? __note_gp_changes+0x4e2/0x9e0 [ 154.448405][ C0] ? rcu_gp_init+0xc00/0xc00 [ 154.452994][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 154.458188][ C0] ? rcu_gp_init+0x9a7/0xc00 [ 154.462776][ C0] rcu_gp_kthread+0x98/0x330 [ 154.467368][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 154.472137][ C0] ? __kasan_check_read+0x11/0x20 [ 154.477161][ C0] ? __kthread_parkme+0xac/0x200 [ 154.482221][ C0] ? preempt_count_add+0x90/0x1b0 [ 154.487244][ C0] kthread+0x411/0x500 [ 154.491312][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 154.496122][ C0] ? kthread_blkcg+0xd0/0xd0 [ 154.500723][ C0] ret_from_fork+0x1f/0x30 [ 154.505143][ C0] [ 154.508155][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 154.514463][ C0] NMI backtrace for cpu 0 [ 154.518809][ C0] CPU: 0 PID: 1408 Comm: syz.2.327 Not tainted syzkaller #0 [ 154.526090][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 154.536140][ C0] Call Trace: [ 154.539425][ C0] [ 154.542268][ C0] __dump_stack+0x21/0x30 [ 154.546781][ C0] dump_stack_lvl+0xee/0x150 [ 154.551368][ C0] ? show_regs_print_info+0x20/0x20 [ 154.556565][ C0] dump_stack+0x15/0x20 [ 154.560723][ C0] nmi_cpu_backtrace+0x2b4/0x2c0 [ 154.565689][ C0] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 154.571863][ C0] ? load_image+0x3a0/0x3a0 [ 154.576392][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 154.582544][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 154.588876][ C0] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 154.594862][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 154.600757][ C0] rcu_check_gp_kthread_starvation+0x1e0/0x260 [ 154.607015][ C0] ? rcu_check_gp_kthread_expired_fqs_timer+0x186/0x230 [ 154.613966][ C0] print_cpu_stall+0x31b/0x600 [ 154.618746][ C0] rcu_sched_clock_irq+0x74a/0x12b0 [ 154.623952][ C0] ? rcu_boost_kthread_setaffinity+0x310/0x310 [ 154.630138][ C0] ? raise_softirq+0x71/0xe0 [ 154.634825][ C0] ? __raise_softirq_irqoff+0xd0/0xd0 [ 154.640198][ C0] ? hrtimer_run_queues+0x166/0x430 [ 154.645398][ C0] update_process_times+0x198/0x200 [ 154.650593][ C0] tick_sched_timer+0x17c/0x240 [ 154.655445][ C0] ? tick_setup_sched_timer+0x450/0x450 [ 154.660989][ C0] __hrtimer_run_queues+0x3b5/0x9e0 [ 154.666265][ C0] ? hrtimer_interrupt+0x8c0/0x8c0 [ 154.671394][ C0] ? ktime_get_update_offsets_now+0x2fa/0x310 [ 154.677474][ C0] hrtimer_interrupt+0x3c7/0x8c0 [ 154.682417][ C0] __sysvec_apic_timer_interrupt+0xfa/0x3e0 [ 154.688316][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 154.694081][ C0] [ 154.697184][ C0] [ 154.700241][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 154.706243][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 154.712322][ C0] Code: 00 00 00 0f 0b 0f 1f 44 00 00 55 48 89 e5 53 48 89 fb e8 13 00 00 00 48 8b 3d dc 6e 80 05 48 89 de e8 74 c7 3d 00 5b 5d c3 00 <55> 48 89 e5 48 8b 45 08 65 48 8b 0d 80 ae 99 7e 65 8b 15 81 ae 99 [ 154.732529][ C0] RSP: 0018:ffffc90001be67b8 EFLAGS: 00000246 [ 154.738630][ C0] RAX: ffffffff848d8cd6 RBX: 0000000000000000 RCX: ffff88811cdb3b40 [ 154.746620][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.754683][ C0] RBP: ffffc90001be6a50 R08: dffffc0000000000 R09: ffffed10238158b2 [ 154.762844][ C0] R10: ffffed10238158b2 R11: 1ffff110238158b1 R12: ffff888114637000 [ 154.770947][ C0] R13: dffffc0000000000 R14: ffffc90001be6c40 R15: ffff88811c0ac500 [ 154.778919][ C0] ? tipc_sk_rcv+0x436/0x2c60 [ 154.783600][ C0] ? tipc_sk_rcv+0x1ca8/0x2c60 [ 154.788463][ C0] ? stack_trace_save+0x98/0xe0 [ 154.793319][ C0] ? __stack_depot_save+0x442/0x480 [ 154.798542][ C0] ? kasan_set_free_info+0x23/0x40 [ 154.803650][ C0] ? __kasan_slab_free+0x11/0x20 [ 154.808597][ C0] ? tipc_node_xmit+0x256/0xce0 [ 154.813446][ C0] ? tipc_sk_backlog_rcv+0x16f/0x1f0 [ 154.818729][ C0] ? __release_sock+0x143/0x350 [ 154.823705][ C0] ? sock_setsockopt+0x1b65/0x2270 [ 154.828830][ C0] ? __skb_queue_purge+0x170/0x170 [ 154.833976][ C0] tipc_node_xmit+0x256/0xce0 [ 154.838658][ C0] ? kasan_quarantine_put+0x34/0x190 [ 154.843941][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 154.849489][ C0] ? ____kasan_slab_free+0x130/0x160 [ 154.854769][ C0] ? __kasan_slab_free+0x11/0x20 [ 154.859802][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 154.865347][ C0] ? kfree_skbmem+0x10c/0x180 [ 154.870027][ C0] tipc_node_distr_xmit+0x292/0x390 [ 154.875233][ C0] ? tipc_node_xmit_skb+0x130/0x130 [ 154.880527][ C0] tipc_sk_rcv+0x19de/0x2c60 [ 154.885122][ C0] ? __skb_queue_purge+0x170/0x170 [ 154.890232][ C0] tipc_node_xmit+0x256/0xce0 [ 154.894928][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 154.900478][ C0] tipc_sk_push_backlog+0x4dd/0x790 [ 154.905673][ C0] tipc_sk_proto_rcv+0x98d/0x1540 [ 154.910897][ C0] ? tipc_sk_filter_rcv+0x2c40/0x2c40 [ 154.916262][ C0] ? unwind_get_return_address+0x4d/0x90 [ 154.921898][ C0] ? stack_trace_save+0xe0/0xe0 [ 154.926883][ C0] ? arch_stack_walk+0xd0/0x140 [ 154.931875][ C0] tipc_sk_filter_rcv+0x2a55/0x2c40 [ 154.937184][ C0] ? stack_trace_save+0x98/0xe0 [ 154.942298][ C0] ? __stack_depot_save+0x34/0x480 [ 154.947416][ C0] ? kasan_set_track+0x5b/0x70 [ 154.952177][ C0] ? kasan_set_track+0x4a/0x70 [ 154.956942][ C0] ? kasan_set_free_info+0x23/0x40 [ 154.962244][ C0] ? kasan_set_track+0x5b/0x70 [ 154.967049][ C0] ? kasan_set_track+0x4a/0x70 [ 154.971820][ C0] ? kasan_set_free_info+0x23/0x40 [ 154.977033][ C0] ? ____kasan_slab_free+0x125/0x160 [ 154.982520][ C0] ? __kasan_slab_free+0x11/0x20 [ 154.987939][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 154.993513][ C0] ? kmem_cache_free+0x100/0x320 [ 154.998547][ C0] ? kfree_skbmem+0x10c/0x180 [ 155.003249][ C0] ? kfree_skb+0xc1/0x2f0 [ 155.007588][ C0] ? tipc_msg_reverse+0x698/0x900 [ 155.012723][ C0] ? tipc_sk_filter_rcv+0xbe5/0x2c40 [ 155.018018][ C0] ? tipc_sk_backlog_rcv+0x109/0x1f0 [ 155.023306][ C0] ? __release_sock+0x143/0x350 [ 155.028168][ C0] ? __sys_setsockopt+0x268/0x460 [ 155.033196][ C0] ? __x64_sys_setsockopt+0xbf/0xd0 [ 155.038409][ C0] ? do_syscall_64+0x4c/0xa0 [ 155.043114][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.049308][ C0] ? tipc_sk_publish+0x440/0x440 [ 155.054367][ C0] ? __kasan_check_write+0x14/0x20 [ 155.059490][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 155.064435][ C0] tipc_sk_rcv+0x7b7/0x2c60 [ 155.068939][ C0] ? kfree_skbmem+0x10c/0x180 [ 155.073620][ C0] ? skb_release_data+0x814/0xa10 [ 155.078818][ C0] ? __skb_queue_purge+0x170/0x170 [ 155.083926][ C0] ? tipc_sk_filter_rcv+0x29de/0x2c40 [ 155.089407][ C0] tipc_node_xmit+0x256/0xce0 [ 155.094088][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 155.099636][ C0] tipc_node_distr_xmit+0x292/0x390 [ 155.104867][ C0] ? tipc_node_xmit_skb+0x130/0x130 [ 155.110069][ C0] ? selinux_capable+0x29c/0x380 [ 155.115006][ C0] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 155.120116][ C0] ? tipc_sk_timeout+0x970/0x970 [ 155.125060][ C0] ? lock_sock_nested+0x1f1/0x290 [ 155.130088][ C0] __release_sock+0x143/0x350 [ 155.134762][ C0] sock_setsockopt+0x1b65/0x2270 [ 155.139735][ C0] ? __sock_set_mark+0x160/0x160 [ 155.144667][ C0] ? selinux_socket_setsockopt+0x21c/0x300 [ 155.150480][ C0] ? selinux_socket_getsockopt+0x2e0/0x2e0 [ 155.156286][ C0] ? __kasan_check_write+0x14/0x20 [ 155.161491][ C0] ? put_vma+0x44/0x60 [ 155.165557][ C0] ? __fget_files+0x2c4/0x320 [ 155.170252][ C0] ? security_socket_setsockopt+0x82/0xa0 [ 155.176075][ C0] __sys_setsockopt+0x268/0x460 [ 155.181013][ C0] ? __ia32_sys_recv+0xb0/0xb0 [ 155.185841][ C0] __x64_sys_setsockopt+0xbf/0xd0 [ 155.190872][ C0] x64_sys_call+0x982/0x9a0 [ 155.195380][ C0] do_syscall_64+0x4c/0xa0 [ 155.199812][ C0] ? clear_bhb_loop+0x50/0xa0 [ 155.204481][ C0] ? clear_bhb_loop+0x50/0xa0 [ 155.209255][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.215149][ C0] RIP: 0033:0x7fbec32f1de9 [ 155.219574][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.239257][ C0] RSP: 002b:00007fbec2d43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 155.247750][ C0] RAX: ffffffffffffffda RBX: 00007fbec350b080 RCX: 00007fbec32f1de9 [ 155.255900][ C0] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 155.263954][ C0] RBP: 00007fbec33732a0 R08: 0000000000000004 R09: 0000000000000000 [ 155.271945][ C0] R10: 0000400000000540 R11: 0000000000000246 R12: 0000000000000000 [ 155.279919][ C0] R13: 0000000000000001 R14: 00007fbec350b080 R15: 00007ffe085e8468 [ 155.287904][ C0] [ 155.291084][ C0] NMI backtrace for cpu 0 [ 155.295444][ C0] CPU: 0 PID: 1408 Comm: syz.2.327 Not tainted syzkaller #0 [ 155.302749][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 155.312828][ C0] Call Trace: [ 155.316113][ C0] [ 155.319125][ C0] __dump_stack+0x21/0x30 [ 155.323468][ C0] dump_stack_lvl+0xee/0x150 [ 155.328177][ C0] ? show_regs_print_info+0x20/0x20 [ 155.333374][ C0] ? resched_curr+0x9a/0x310 [ 155.338075][ C0] ? wake_up_process+0x20/0x20 [ 155.343047][ C0] dump_stack+0x15/0x20 [ 155.347197][ C0] nmi_cpu_backtrace+0x2b4/0x2c0 [ 155.352141][ C0] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 155.358306][ C0] ? __kasan_check_write+0x14/0x20 [ 155.363528][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 155.369232][ C0] ? _raw_spin_lock+0xe0/0xe0 [ 155.373915][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 155.379977][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 155.386044][ C0] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 155.392175][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 155.398297][ C0] rcu_dump_cpu_stacks+0x1c7/0x300 [ 155.403428][ C0] print_cpu_stall+0x320/0x600 [ 155.408242][ C0] rcu_sched_clock_irq+0x74a/0x12b0 [ 155.413551][ C0] ? rcu_boost_kthread_setaffinity+0x310/0x310 [ 155.419710][ C0] ? raise_softirq+0x71/0xe0 [ 155.424318][ C0] ? __raise_softirq_irqoff+0xd0/0xd0 [ 155.429684][ C0] ? hrtimer_run_queues+0x166/0x430 [ 155.434995][ C0] update_process_times+0x198/0x200 [ 155.440191][ C0] tick_sched_timer+0x17c/0x240 [ 155.445034][ C0] ? tick_setup_sched_timer+0x450/0x450 [ 155.450575][ C0] __hrtimer_run_queues+0x3b5/0x9e0 [ 155.455817][ C0] ? hrtimer_interrupt+0x8c0/0x8c0 [ 155.460930][ C0] ? ktime_get_update_offsets_now+0x2fa/0x310 [ 155.466992][ C0] hrtimer_interrupt+0x3c7/0x8c0 [ 155.471930][ C0] __sysvec_apic_timer_interrupt+0xfa/0x3e0 [ 155.477849][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 155.483478][ C0] [ 155.486406][ C0] [ 155.489331][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 155.495308][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 155.501544][ C0] Code: 00 00 00 0f 0b 0f 1f 44 00 00 55 48 89 e5 53 48 89 fb e8 13 00 00 00 48 8b 3d dc 6e 80 05 48 89 de e8 74 c7 3d 00 5b 5d c3 00 <55> 48 89 e5 48 8b 45 08 65 48 8b 0d 80 ae 99 7e 65 8b 15 81 ae 99 [ 155.521167][ C0] RSP: 0018:ffffc90001be67b8 EFLAGS: 00000246 [ 155.527232][ C0] RAX: ffffffff848d8cd6 RBX: 0000000000000000 RCX: ffff88811cdb3b40 [ 155.535294][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.543261][ C0] RBP: ffffc90001be6a50 R08: dffffc0000000000 R09: ffffed10238158b2 [ 155.551234][ C0] R10: ffffed10238158b2 R11: 1ffff110238158b1 R12: ffff888114637000 [ 155.559693][ C0] R13: dffffc0000000000 R14: ffffc90001be6c40 R15: ffff88811c0ac500 [ 155.567826][ C0] ? tipc_sk_rcv+0x436/0x2c60 [ 155.572517][ C0] ? tipc_sk_rcv+0x1ca8/0x2c60 [ 155.577292][ C0] ? stack_trace_save+0x98/0xe0 [ 155.582157][ C0] ? __stack_depot_save+0x442/0x480 [ 155.587446][ C0] ? kasan_set_free_info+0x23/0x40 [ 155.592552][ C0] ? __kasan_slab_free+0x11/0x20 [ 155.597489][ C0] ? tipc_node_xmit+0x256/0xce0 [ 155.602338][ C0] ? tipc_sk_backlog_rcv+0x16f/0x1f0 [ 155.607617][ C0] ? __release_sock+0x143/0x350 [ 155.612490][ C0] ? sock_setsockopt+0x1b65/0x2270 [ 155.618034][ C0] ? __skb_queue_purge+0x170/0x170 [ 155.623178][ C0] tipc_node_xmit+0x256/0xce0 [ 155.627853][ C0] ? kasan_quarantine_put+0x34/0x190 [ 155.633141][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 155.638684][ C0] ? ____kasan_slab_free+0x130/0x160 [ 155.644051][ C0] ? __kasan_slab_free+0x11/0x20 [ 155.648991][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 155.654534][ C0] ? kfree_skbmem+0x10c/0x180 [ 155.659216][ C0] tipc_node_distr_xmit+0x292/0x390 [ 155.664411][ C0] ? tipc_node_xmit_skb+0x130/0x130 [ 155.669607][ C0] tipc_sk_rcv+0x19de/0x2c60 [ 155.674190][ C0] ? __skb_queue_purge+0x170/0x170 [ 155.679306][ C0] tipc_node_xmit+0x256/0xce0 [ 155.684067][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 155.689625][ C0] tipc_sk_push_backlog+0x4dd/0x790 [ 155.694834][ C0] tipc_sk_proto_rcv+0x98d/0x1540 [ 155.699850][ C0] ? tipc_sk_filter_rcv+0x2c40/0x2c40 [ 155.705275][ C0] ? unwind_get_return_address+0x4d/0x90 [ 155.710902][ C0] ? stack_trace_save+0xe0/0xe0 [ 155.715747][ C0] ? arch_stack_walk+0xd0/0x140 [ 155.720681][ C0] tipc_sk_filter_rcv+0x2a55/0x2c40 [ 155.725877][ C0] ? stack_trace_save+0x98/0xe0 [ 155.730806][ C0] ? __stack_depot_save+0x34/0x480 [ 155.735914][ C0] ? kasan_set_track+0x5b/0x70 [ 155.740670][ C0] ? kasan_set_track+0x4a/0x70 [ 155.745426][ C0] ? kasan_set_free_info+0x23/0x40 [ 155.750703][ C0] ? kasan_set_track+0x5b/0x70 [ 155.755461][ C0] ? kasan_set_track+0x4a/0x70 [ 155.760650][ C0] ? kasan_set_free_info+0x23/0x40 [ 155.765757][ C0] ? ____kasan_slab_free+0x125/0x160 [ 155.771048][ C0] ? __kasan_slab_free+0x11/0x20 [ 155.775985][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 155.781652][ C0] ? kmem_cache_free+0x100/0x320 [ 155.786587][ C0] ? kfree_skbmem+0x10c/0x180 [ 155.791262][ C0] ? kfree_skb+0xc1/0x2f0 [ 155.795677][ C0] ? tipc_msg_reverse+0x698/0x900 [ 155.800699][ C0] ? tipc_sk_filter_rcv+0xbe5/0x2c40 [ 155.806081][ C0] ? tipc_sk_backlog_rcv+0x109/0x1f0 [ 155.811363][ C0] ? __release_sock+0x143/0x350 [ 155.816212][ C0] ? __sys_setsockopt+0x268/0x460 [ 155.821236][ C0] ? __x64_sys_setsockopt+0xbf/0xd0 [ 155.826439][ C0] ? do_syscall_64+0x4c/0xa0 [ 155.831035][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.837200][ C0] ? tipc_sk_publish+0x440/0x440 [ 155.842151][ C0] ? __kasan_check_write+0x14/0x20 [ 155.847262][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 155.852283][ C0] tipc_sk_rcv+0x7b7/0x2c60 [ 155.856786][ C0] ? kfree_skbmem+0x10c/0x180 [ 155.861572][ C0] ? skb_release_data+0x814/0xa10 [ 155.866612][ C0] ? __skb_queue_purge+0x170/0x170 [ 155.871720][ C0] ? tipc_sk_filter_rcv+0x29de/0x2c40 [ 155.877089][ C0] tipc_node_xmit+0x256/0xce0 [ 155.881808][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 155.887362][ C0] tipc_node_distr_xmit+0x292/0x390 [ 155.892555][ C0] ? tipc_node_xmit_skb+0x130/0x130 [ 155.897822][ C0] ? selinux_capable+0x29c/0x380 [ 155.902755][ C0] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 155.907879][ C0] ? tipc_sk_timeout+0x970/0x970 [ 155.912810][ C0] ? lock_sock_nested+0x1f1/0x290 [ 155.917838][ C0] __release_sock+0x143/0x350 [ 155.922510][ C0] sock_setsockopt+0x1b65/0x2270 [ 155.927443][ C0] ? __sock_set_mark+0x160/0x160 [ 155.932372][ C0] ? selinux_socket_setsockopt+0x21c/0x300 [ 155.938175][ C0] ? selinux_socket_getsockopt+0x2e0/0x2e0 [ 155.943977][ C0] ? __kasan_check_write+0x14/0x20 [ 155.949086][ C0] ? put_vma+0x44/0x60 [ 155.953154][ C0] ? __fget_files+0x2c4/0x320 [ 155.957867][ C0] ? security_socket_setsockopt+0x82/0xa0 [ 155.963603][ C0] __sys_setsockopt+0x268/0x460 [ 155.968469][ C0] ? __ia32_sys_recv+0xb0/0xb0 [ 155.973331][ C0] __x64_sys_setsockopt+0xbf/0xd0 [ 155.978558][ C0] x64_sys_call+0x982/0x9a0 [ 155.983241][ C0] do_syscall_64+0x4c/0xa0 [ 155.987657][ C0] ? clear_bhb_loop+0x50/0xa0 [ 155.992346][ C0] ? clear_bhb_loop+0x50/0xa0 [ 155.997021][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.002913][ C0] RIP: 0033:0x7fbec32f1de9 [ 156.007329][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.026927][ C0] RSP: 002b:00007fbec2d43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 156.035344][ C0] RAX: ffffffffffffffda RBX: 00007fbec350b080 RCX: 00007fbec32f1de9 [ 156.043314][ C0] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 156.051284][ C0] RBP: 00007fbec33732a0 R08: 0000000000000004 R09: 0000000000000000 [ 156.059339][ C0] R10: 0000400000000540 R11: 0000000000000246 R12: 0000000000000000 [ 156.067303][ C0] R13: 0000000000000001 R14: 00007fbec350b080 R15: 00007ffe085e8468 [ 156.075275][ C0] [ 156.078301][ C0] Sending NMI from CPU 0 to CPUs 1: [ 156.083516][ C1] NMI backtrace for cpu 1 [ 156.083527][ C1] CPU: 1 PID: 1407 Comm: syz.2.327 Not tainted syzkaller #0 [ 156.083558][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 156.083569][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x527/0x9c0 [ 156.083594][ C1] Code: 00 41 c6 45 00 00 48 8b 44 24 10 42 0f b6 04 38 84 c0 0f 85 1c 01 00 00 48 8b 44 24 08 c6 00 01 41 bd 00 80 ff ff eb 07 f3 90 <41> ff c5 74 47 43 0f b6 04 3e 84 c0 75 2b 80 3b 00 75 eb 48 89 df [ 156.083607][ C1] RSP: 0018:ffffc90001b17760 EFLAGS: 00000206 [ 156.083622][ C1] RAX: 0000000000000000 RBX: ffff88811c0ac588 RCX: ffffffff814f4299 [ 156.083635][ C1] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff88811c0ac588 [ 156.083646][ C1] RBP: ffffc90001b17850 R08: dffffc0000000000 R09: ffffed10238158b2 [ 156.083659][ C1] R10: ffffed10238158b2 R11: 1ffff110238158b1 R12: 1ffff1103ee20001 [ 156.083671][ C1] R13: 00000000fffff895 R14: 1ffff110238158b1 R15: dffffc0000000000 [ 156.083684][ C1] FS: 00007fbec2d646c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 156.083699][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.083711][ C1] CR2: 0000400000000000 CR3: 000000011b412000 CR4: 00000000003506a0 [ 156.083726][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 156.083736][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 156.083746][ C1] Call Trace: [ 156.083751][ C1] [ 156.083759][ C1] ? __pv_queued_spin_unlock_slowpath+0x300/0x300 [ 156.083778][ C1] ? avc_has_perm+0x158/0x240 [ 156.083802][ C1] queued_spin_lock_slowpath+0x47/0x50 [ 156.083819][ C1] _raw_spin_lock_bh+0xd8/0xe0 [ 156.083838][ C1] ? _raw_spin_lock_irq+0xe0/0xe0 [ 156.083856][ C1] lock_sock_nested+0x97/0x290 [ 156.083875][ C1] ? sock_init_data+0xc0/0xc0 [ 156.083891][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 156.083909][ C1] ? _raw_spin_unlock_bh+0x51/0x60 [ 156.083927][ C1] tipc_sendstream+0x47/0x70 [ 156.083943][ C1] ? tipc_getsockopt+0x4c0/0x4c0 [ 156.083958][ C1] ____sys_sendmsg+0x5a2/0x8c0 [ 156.083978][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 156.083998][ C1] ? import_iovec+0x7c/0xb0 [ 156.084016][ C1] ___sys_sendmsg+0x1f0/0x260 [ 156.084035][ C1] ? __sys_sendmsg+0x250/0x250 [ 156.084055][ C1] ? memcpy+0x56/0x70 [ 156.084076][ C1] ? __fdget+0x1a1/0x230 [ 156.084094][ C1] __x64_sys_sendmsg+0x1e2/0x2a0 [ 156.084113][ C1] ? ___sys_sendmsg+0x260/0x260 [ 156.084132][ C1] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 156.084153][ C1] x64_sys_call+0x4b/0x9a0 [ 156.084169][ C1] do_syscall_64+0x4c/0xa0 [ 156.084188][ C1] ? clear_bhb_loop+0x50/0xa0 [ 156.084202][ C1] ? clear_bhb_loop+0x50/0xa0 [ 156.084216][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.084234][ C1] RIP: 0033:0x7fbec32f1de9 [ 156.084249][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.084262][ C1] RSP: 002b:00007fbec2d64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.084278][ C1] RAX: ffffffffffffffda RBX: 00007fbec350afa0 RCX: 00007fbec32f1de9 [ 156.084290][ C1] RDX: 0000000000000000 RSI: 0000400000000500 RDI: 0000000000000004 [ 156.084300][ C1] RBP: 00007fbec33732a0 R08: 0000000000000000 R09: 0000000000000000 [ 156.084311][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.084321][ C1] R13: 0000000000000000 R14: 00007fbec350afa0 R15: 00007ffe085e8468 [ 156.084334][ C1] [ 287.251665][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 225s! [syz.2.327:1408] [ 287.259983][ C0] Modules linked in: [ 287.263896][ C0] CPU: 0 PID: 1408 Comm: syz.2.327 Not tainted syzkaller #0 [ 287.271184][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 287.281439][ C0] RIP: 0010:__rcu_read_lock+0x14/0x50 [ 287.286936][ C0] Code: ff df 0f 85 c1 fb ff ff e8 e5 a8 a9 ff e9 b7 fb ff ff 0f 1f 40 00 55 48 89 e5 53 65 48 8b 1d 83 9f ab 7e 48 81 c3 4c 04 00 00 <48> 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 [ 287.306552][ C0] RSP: 0018:ffffc90001be66a8 EFLAGS: 00000282 [ 287.312741][ C0] RAX: 0000000000000000 RBX: ffff88811cdb3f8c RCX: dffffc0000000000 [ 287.320727][ C0] RDX: 0000000000000000 RSI: 00000000358e37a7 RDI: ffff88811cdb3b40 [ 287.328817][ C0] RBP: ffffc90001be66b0 R08: 0000000000000004 R09: 0000000000000003 [ 287.336794][ C0] R10: fffff5200037cce8 R11: 1ffff9200037cce8 R12: dffffc0000000000 [ 287.344773][ C0] R13: dffffc0000000000 R14: ffff88811170b530 R15: 00000000358e37a7 [ 287.352843][ C0] FS: 00007fbec2d436c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 287.361969][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.368555][ C0] CR2: 00007fbec2d42f98 CR3: 000000011b412000 CR4: 00000000003506b0 [ 287.376539][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.384652][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.392815][ C0] Call Trace: [ 287.396197][ C0] [ 287.399142][ C0] tipc_sk_lookup+0xe8/0x5f0 [ 287.403730][ C0] ? __kasan_check_write+0x14/0x20 [ 287.408852][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 287.413806][ C0] ? tipc_sk_rcv+0x2c60/0x2c60 [ 287.418748][ C0] tipc_sk_rcv+0x3fe/0x2c60 [ 287.423256][ C0] ? stack_trace_save+0x98/0xe0 [ 287.428113][ C0] ? __stack_depot_save+0x442/0x480 [ 287.433339][ C0] ? kasan_set_free_info+0x23/0x40 [ 287.438456][ C0] ? __kasan_slab_free+0x11/0x20 [ 287.443399][ C0] ? tipc_node_xmit+0x256/0xce0 [ 287.448268][ C0] ? tipc_sk_backlog_rcv+0x16f/0x1f0 [ 287.453574][ C0] ? __release_sock+0x143/0x350 [ 287.458441][ C0] ? sock_setsockopt+0x1b65/0x2270 [ 287.463824][ C0] ? __skb_queue_purge+0x170/0x170 [ 287.469072][ C0] tipc_node_xmit+0x256/0xce0 [ 287.473759][ C0] ? kasan_quarantine_put+0x34/0x190 [ 287.479042][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 287.484584][ C0] ? ____kasan_slab_free+0x130/0x160 [ 287.489920][ C0] ? __kasan_slab_free+0x11/0x20 [ 287.494855][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 287.500592][ C0] ? kfree_skbmem+0x10c/0x180 [ 287.505289][ C0] tipc_node_distr_xmit+0x292/0x390 [ 287.510532][ C0] ? tipc_node_xmit_skb+0x130/0x130 [ 287.515861][ C0] tipc_sk_rcv+0x19de/0x2c60 [ 287.520457][ C0] ? __skb_queue_purge+0x170/0x170 [ 287.525593][ C0] tipc_node_xmit+0x256/0xce0 [ 287.530599][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 287.536201][ C0] tipc_sk_push_backlog+0x4dd/0x790 [ 287.541430][ C0] tipc_sk_proto_rcv+0x98d/0x1540 [ 287.546468][ C0] ? tipc_sk_filter_rcv+0x2c40/0x2c40 [ 287.551935][ C0] ? unwind_get_return_address+0x4d/0x90 [ 287.557692][ C0] ? stack_trace_save+0xe0/0xe0 [ 287.562676][ C0] ? arch_stack_walk+0xd0/0x140 [ 287.567564][ C0] tipc_sk_filter_rcv+0x2a55/0x2c40 [ 287.572975][ C0] ? stack_trace_save+0x98/0xe0 [ 287.577862][ C0] ? __stack_depot_save+0x34/0x480 [ 287.582973][ C0] ? kasan_set_track+0x5b/0x70 [ 287.587852][ C0] ? kasan_set_track+0x4a/0x70 [ 287.592628][ C0] ? kasan_set_free_info+0x23/0x40 [ 287.598055][ C0] ? kasan_set_track+0x5b/0x70 [ 287.603012][ C0] ? kasan_set_track+0x4a/0x70 [ 287.607789][ C0] ? kasan_set_free_info+0x23/0x40 [ 287.612910][ C0] ? ____kasan_slab_free+0x125/0x160 [ 287.618201][ C0] ? __kasan_slab_free+0x11/0x20 [ 287.623146][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 287.628783][ C0] ? kmem_cache_free+0x100/0x320 [ 287.633803][ C0] ? kfree_skbmem+0x10c/0x180 [ 287.638480][ C0] ? kfree_skb+0xc1/0x2f0 [ 287.642804][ C0] ? tipc_msg_reverse+0x698/0x900 [ 287.647926][ C0] ? tipc_sk_filter_rcv+0xbe5/0x2c40 [ 287.653302][ C0] ? tipc_sk_backlog_rcv+0x109/0x1f0 [ 287.658587][ C0] ? __release_sock+0x143/0x350 [ 287.663467][ C0] ? __sys_setsockopt+0x268/0x460 [ 287.668583][ C0] ? __x64_sys_setsockopt+0xbf/0xd0 [ 287.673866][ C0] ? do_syscall_64+0x4c/0xa0 [ 287.678459][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.684540][ C0] ? tipc_sk_publish+0x440/0x440 [ 287.689475][ C0] ? __kasan_check_write+0x14/0x20 [ 287.694603][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 287.699570][ C0] tipc_sk_rcv+0x7b7/0x2c60 [ 287.704076][ C0] ? kfree_skbmem+0x10c/0x180 [ 287.708753][ C0] ? skb_release_data+0x814/0xa10 [ 287.713804][ C0] ? __skb_queue_purge+0x170/0x170 [ 287.719033][ C0] ? tipc_sk_filter_rcv+0x29de/0x2c40 [ 287.724405][ C0] tipc_node_xmit+0x256/0xce0 [ 287.729097][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 287.734688][ C0] tipc_node_distr_xmit+0x292/0x390 [ 287.739887][ C0] ? tipc_node_xmit_skb+0x130/0x130 [ 287.745087][ C0] ? selinux_capable+0x29c/0x380 [ 287.750034][ C0] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 287.755147][ C0] ? tipc_sk_timeout+0x970/0x970 [ 287.760095][ C0] ? lock_sock_nested+0x1f1/0x290 [ 287.765121][ C0] __release_sock+0x143/0x350 [ 287.769795][ C0] sock_setsockopt+0x1b65/0x2270 [ 287.774732][ C0] ? __sock_set_mark+0x160/0x160 [ 287.779668][ C0] ? selinux_socket_setsockopt+0x21c/0x300 [ 287.785469][ C0] ? selinux_socket_getsockopt+0x2e0/0x2e0 [ 287.791281][ C0] ? __kasan_check_write+0x14/0x20 [ 287.796665][ C0] ? put_vma+0x44/0x60 [ 287.800738][ C0] ? __fget_files+0x2c4/0x320 [ 287.805416][ C0] ? security_socket_setsockopt+0x82/0xa0 [ 287.811159][ C0] __sys_setsockopt+0x268/0x460 [ 287.816025][ C0] ? __ia32_sys_recv+0xb0/0xb0 [ 287.820800][ C0] __x64_sys_setsockopt+0xbf/0xd0 [ 287.825842][ C0] x64_sys_call+0x982/0x9a0 [ 287.830368][ C0] do_syscall_64+0x4c/0xa0 [ 287.834948][ C0] ? clear_bhb_loop+0x50/0xa0 [ 287.839743][ C0] ? clear_bhb_loop+0x50/0xa0 [ 287.844598][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.850934][ C0] RIP: 0033:0x7fbec32f1de9 [ 287.855634][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.875476][ C0] RSP: 002b:00007fbec2d43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 287.884003][ C0] RAX: ffffffffffffffda RBX: 00007fbec350b080 RCX: 00007fbec32f1de9 [ 287.892080][ C0] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 287.900299][ C0] RBP: 00007fbec33732a0 R08: 0000000000000004 R09: 0000000000000000 [ 287.908268][ C0] R10: 0000400000000540 R11: 0000000000000246 R12: 0000000000000000 [ 287.916239][ C0] R13: 0000000000000001 R14: 00007fbec350b080 R15: 00007ffe085e8468 [ 287.924381][ C0] [ 287.927416][ C0] Sending NMI from CPU 0 to CPUs 1: [ 287.933043][ C1] NMI backtrace for cpu 1 [ 287.933053][ C1] CPU: 1 PID: 1407 Comm: syz.2.327 Not tainted syzkaller #0 [ 287.933070][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 287.933080][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x527/0x9c0 [ 287.933106][ C1] Code: 00 41 c6 45 00 00 48 8b 44 24 10 42 0f b6 04 38 84 c0 0f 85 1c 01 00 00 48 8b 44 24 08 c6 00 01 41 bd 00 80 ff ff eb 07 f3 90 <41> ff c5 74 47 43 0f b6 04 3e 84 c0 75 2b 80 3b 00 75 eb 48 89 df [ 287.933120][ C1] RSP: 0018:ffffc90001b17760 EFLAGS: 00000206 [ 287.933135][ C1] RAX: 0000000000000000 RBX: ffff88811c0ac588 RCX: ffffffff814f4299 [ 287.933148][ C1] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff88811c0ac588 [ 287.933159][ C1] RBP: ffffc90001b17850 R08: dffffc0000000000 R09: ffffed10238158b2 [ 287.933171][ C1] R10: ffffed10238158b2 R11: 1ffff110238158b1 R12: 1ffff1103ee20001 [ 287.933184][ C1] R13: 00000000ffffe4bd R14: 1ffff110238158b1 R15: dffffc0000000000 [ 287.933197][ C1] FS: 00007fbec2d646c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 287.933212][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.933224][ C1] CR2: 0000400000000000 CR3: 000000011b412000 CR4: 00000000003506a0 [ 287.933240][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.933250][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.933261][ C1] Call Trace: [ 287.933267][ C1] [ 287.933274][ C1] ? __pv_queued_spin_unlock_slowpath+0x300/0x300 [ 287.933294][ C1] ? avc_has_perm+0x158/0x240 [ 287.933312][ C1] queued_spin_lock_slowpath+0x47/0x50 [ 287.933329][ C1] _raw_spin_lock_bh+0xd8/0xe0 [ 287.933349][ C1] ? _raw_spin_lock_irq+0xe0/0xe0 [ 287.933367][ C1] lock_sock_nested+0x97/0x290 [ 287.933385][ C1] ? sock_init_data+0xc0/0xc0 [ 287.933401][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 287.933420][ C1] ? _raw_spin_unlock_bh+0x51/0x60 [ 287.933438][ C1] tipc_sendstream+0x47/0x70 [ 287.933454][ C1] ? tipc_getsockopt+0x4c0/0x4c0 [ 287.933475][ C1] ____sys_sendmsg+0x5a2/0x8c0 [ 287.933495][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 287.933515][ C1] ? import_iovec+0x7c/0xb0 [ 287.933533][ C1] ___sys_sendmsg+0x1f0/0x260 [ 287.933552][ C1] ? __sys_sendmsg+0x250/0x250 [ 287.933572][ C1] ? memcpy+0x56/0x70 [ 287.933592][ C1] ? __fdget+0x1a1/0x230 [ 287.933610][ C1] __x64_sys_sendmsg+0x1e2/0x2a0 [ 287.933629][ C1] ? ___sys_sendmsg+0x260/0x260 [ 287.933648][ C1] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 287.933669][ C1] x64_sys_call+0x4b/0x9a0 [ 287.933685][ C1] do_syscall_64+0x4c/0xa0 [ 287.933703][ C1] ? clear_bhb_loop+0x50/0xa0 [ 287.933717][ C1] ? clear_bhb_loop+0x50/0xa0 [ 287.933731][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.933750][ C1] RIP: 0033:0x7fbec32f1de9 [ 287.933765][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.933778][ C1] RSP: 002b:00007fbec2d64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.933794][ C1] RAX: ffffffffffffffda RBX: 00007fbec350afa0 RCX: 00007fbec32f1de9 [ 287.933807][ C1] RDX: 0000000000000000 RSI: 0000400000000500 RDI: 0000000000000004 [ 287.933817][ C1] RBP: 00007fbec33732a0 R08: 0000000000000000 R09: 0000000000000000 [ 287.933827][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.933837][ C1] R13: 0000000000000000 R14: 00007fbec350afa0 R15: 00007ffe085e8468 [ 287.933851][ C1]