Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts.
2026/03/31 14:14:00 ignoring optional flag "type"="gce"
2026/03/31 14:14:00 parsed 1 programs
[ 43.229926][ T28] kauditd_printk_skb: 18 callbacks suppressed
[ 43.229941][ T28] audit: type=1400 audit(1774966440.839:92): avc: denied { unlink } for pid=324 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
2026/03/31 14:14:00 executed programs: 0
[ 43.278785][ T324] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 43.334320][ T331] bridge0: port 1(bridge_slave_0) entered blocking state
[ 43.341592][ T331] bridge0: port 1(bridge_slave_0) entered disabled state
[ 43.349432][ T331] device bridge_slave_0 entered promiscuous mode
[ 43.356808][ T331] bridge0: port 2(bridge_slave_1) entered blocking state
[ 43.364527][ T331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 43.372160][ T331] device bridge_slave_1 entered promiscuous mode
[ 43.418696][ T331] bridge0: port 2(bridge_slave_1) entered blocking state
[ 43.426637][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 43.434316][ T331] bridge0: port 1(bridge_slave_0) entered blocking state
[ 43.441617][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 43.459720][ T41] bridge0: port 1(bridge_slave_0) entered disabled state
[ 43.467414][ T41] bridge0: port 2(bridge_slave_1) entered disabled state
[ 43.475343][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 43.483494][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 43.492891][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 43.502257][ T41] bridge0: port 1(bridge_slave_0) entered blocking state
[ 43.509587][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 43.519047][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 43.528188][ T41] bridge0: port 2(bridge_slave_1) entered blocking state
[ 43.535955][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 43.548660][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 43.559411][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 43.574193][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 43.586610][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 43.595336][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 43.603428][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 43.612233][ T331] device veth0_vlan entered promiscuous mode
[ 43.622776][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 43.632108][ T331] device veth1_macvtap entered promiscuous mode
[ 43.641937][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 43.652966][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 43.675808][ T28] audit: type=1400 audit(1774966441.279:93): avc: denied { create } for pid=335 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 43.698262][ T28] audit: type=1400 audit(1774966441.279:94): avc: denied { setopt } for pid=335 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 43.720683][ T28] audit: type=1400 audit(1774966441.279:95): avc: denied { write } for pid=335 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
2026/03/31 14:14:05 executed programs: 566
[ 152.169274][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[ 152.176940][ C0] rcu: 0-...!: (1 GPs behind) idle=66b4/1/0x4000000000000000 softirq=8407/8409 fqs=0
[ 152.187481][ C0] (t=10001 jiffies g=4777 q=201 ncpus=2)
[ 152.193764][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10001 jiffies! g4777 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[ 152.208120][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=1157
[ 152.218490][ C0] rcu: rcu_preempt kthread starved for 10004 jiffies! g4777 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
[ 152.230337][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 152.241493][ C0] rcu: RCU grace-period kthread stack dump:
[ 152.248119][ C0] task:rcu_preempt state:I stack:28288 pid:14 ppid:2 flags:0x00004000
[ 152.258977][ C0] Call Trace:
[ 152.262911][ C0]
[ 152.266308][ C0] __schedule+0xba6/0x1500
[ 152.271337][ C0] ? release_firmware_map_entry+0x190/0x190
[ 152.278157][ C0] schedule+0xbd/0x170
[ 152.282766][ C0] schedule_timeout+0x159/0x340
[ 152.288334][ C0] ? __cfi_schedule_timeout+0x10/0x10
[ 152.294559][ C0] ? __cfi_process_timeout+0x10/0x10
[ 152.300400][ C0] ? prepare_to_swait_event+0x308/0x320
[ 152.306593][ C0] rcu_gp_fqs_loop+0x2e9/0x10c0
[ 152.311828][ C0] ? _raw_spin_unlock_irq+0x4d/0x70
[ 152.318048][ C0] ? rcu_gp_init+0xf30/0xf30
[ 152.324001][ C0] rcu_gp_kthread+0x99/0x390
[ 152.328984][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10
[ 152.334720][ C0] ? __kasan_check_read+0x11/0x20
[ 152.340093][ C0] ? __kthread_parkme+0x142/0x180
[ 152.345671][ C0] kthread+0x281/0x320
[ 152.350681][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10
[ 152.356618][ C0] ? __cfi_kthread+0x10/0x10
[ 152.361589][ C0] ret_from_fork+0x1f/0x30
[ 152.366548][ C0]
[ 152.369672][ C0] rcu: Stack dump where RCU GP kthread last ran:
[ 152.376416][ C0] Sending NMI from CPU 0 to CPUs 1:
[ 152.381817][ C1] NMI backtrace for cpu 1
[ 152.381827][ C1] CPU: 1 PID: 3458 Comm: syz-executor.0 Not tainted syzkaller #0
[ 152.381843][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 152.381851][ C1] RIP: 0010:tipc_sk_lookup+0xb4/0x620
[ 152.381878][ C1] Code: b6 04 38 84 c0 0f 85 3d 05 00 00 44 8b 35 4c 1b ba 02 e8 af 23 84 fc 48 81 c3 20 0b 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 <74> 08 48 89 df e8 22 f8 dc fc 49 c1 e6 03 4c 03 33 4c 89 f0 48 c1
[ 152.381890][ C1] RSP: 0018:ffffc90003a7e880 EFLAGS: 00000246
[ 152.381906][ C1] RAX: 1ffff11021c4da24 RBX: ffff88810e26d120 RCX: dffffc0000000000
[ 152.381917][ C1] RDX: 0000000000000000 RSI: 000000003fde13b0 RDI: ffff88810e26c600
[ 152.381928][ C1] RBP: ffffc90003a7e970 R08: 0000000000000003 R09: 0000000000000004
[ 152.381937][ C1] R10: dffffc0000000000 R11: fffff5200074fd20 R12: ffffc90003a7edc0
[ 152.381948][ C1] R13: dffffc0000000000 R14: 0000000000000026 R15: dffffc0000000000
[ 152.381958][ C1] FS: 00007fa2b993e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 152.381972][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 152.381982][ C1] CR2: 00007fa2b991dd58 CR3: 000000011e516000 CR4: 00000000003506a0
[ 152.381998][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 152.382006][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 152.382016][ C1] Call Trace:
[ 152.382022][ C1]
[ 152.382027][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 152.382047][ C1] ? __kasan_check_write+0x14/0x20
[ 152.382063][ C1] ? _raw_spin_lock_bh+0x94/0xf0
[ 152.382084][ C1] ? tipc_sk_rcv+0x2c10/0x2c10
[ 152.382100][ C1] ? preempt_count_sub+0x4a/0x170
[ 152.382127][ C1] tipc_sk_rcv+0x416/0x2c10
[ 152.382143][ C1] ? __stack_depot_save+0x457/0x480
[ 152.382161][ C1] ? kasan_set_track+0x60/0x70
[ 152.382177][ C1] ? kasan_set_track+0x4b/0x70
[ 152.382191][ C1] ? kasan_save_free_info+0x31/0x50
[ 152.382211][ C1] ? ____kasan_slab_free+0x132/0x180
[ 152.382227][ C1] ? __kasan_slab_free+0x11/0x20
[ 152.382243][ C1] ? kmem_cache_free+0x12d/0x300
[ 152.382261][ C1] ? kfree_skbmem+0x10c/0x180
[ 152.382279][ C1] ? tipc_msg_reverse+0x6db/0x940
[ 152.382296][ C1] ? tipc_sk_rcv+0x1ce3/0x2c10
[ 152.382312][ C1] ? __release_sock+0x154/0x380
[ 152.382326][ C1] ? __fput+0x1fc/0x8f0
[ 152.382343][ C1] ? syscall_exit_to_user_mode+0x1a/0x30
[ 152.382361][ C1] ? do_syscall_64+0x58/0xa0
[ 152.382388][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 152.382403][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 152.382423][ C1] tipc_node_xmit+0x26c/0xd90
[ 152.382439][ C1] ? kmem_cache_free+0x12d/0x300
[ 152.382456][ C1] ? ____kasan_slab_free+0x13d/0x180
[ 152.382473][ C1] ? __cfi_tipc_node_xmit+0x10/0x10
[ 152.382488][ C1] ? slab_free_freelist_hook+0xc2/0x190
[ 152.382509][ C1] ? kmem_cache_free+0x12d/0x300
[ 152.382527][ C1] tipc_node_xmit_skb+0xf7/0x150
[ 152.382542][ C1] ? kfree_skb_reason+0xdc/0x230
[ 152.382559][ C1] ? __cfi_tipc_node_xmit_skb+0x10/0x10
[ 152.382576][ C1] ? trace_tipc_sk_rej_msg+0x25/0x150
[ 152.382593][ C1] tipc_sk_rcv+0x1d63/0x2c10
[ 152.382620][ C1] ? kmem_cache_free+0x12d/0x300
[ 152.382640][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 152.382660][ C1] tipc_node_xmit+0x26c/0xd90
[ 152.382675][ C1] ? is_bpf_text_address+0x177/0x190
[ 152.382695][ C1] ? __cfi_tipc_node_xmit+0x10/0x10
[ 152.382709][ C1] ? kernel_text_address+0xa0/0xd0
[ 152.382728][ C1] ? __kernel_text_address+0xd/0x30
[ 152.382744][ C1] ? unwind_get_return_address+0x4d/0x90
[ 152.382761][ C1] ? arch_stack_walk+0xfc/0x150
[ 152.382784][ C1] tipc_sk_filter_rcv+0x158e/0x2cf0
[ 152.382809][ C1] ? tipc_sk_publish+0x470/0x470
[ 152.382827][ C1] ? __kasan_check_write+0x14/0x20
[ 152.382841][ C1] ? _raw_spin_lock_bh+0x94/0xf0
[ 152.382861][ C1] tipc_sk_rcv+0x7ed/0x2c10
[ 152.382880][ C1] ? kmem_cache_free+0x12d/0x300
[ 152.382898][ C1] ? tipc_msg_reverse+0x6db/0x940
[ 152.382914][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 152.382932][ C1] ? tipc_sk_filter_rcv+0x2a82/0x2cf0
[ 152.382952][ C1] tipc_node_xmit+0x26c/0xd90
[ 152.382967][ C1] ? __cfi_tipc_node_xmit+0x10/0x10
[ 152.382984][ C1] ? preempt_schedule_irq+0xca/0x120
[ 152.382998][ C1] tipc_node_distr_xmit+0x2a3/0x3b0
[ 152.383015][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10
[ 152.383032][ C1] tipc_sk_backlog_rcv+0x17d/0x210
[ 152.383051][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10
[ 152.383069][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130
[ 152.383090][ C1] __release_sock+0x154/0x380
[ 152.383104][ C1] release_sock+0x60/0x1c0
[ 152.383121][ C1] tipc_release+0xd4a/0x1670
[ 152.383140][ C1] ? __cfi_tipc_release+0x10/0x10
[ 152.383160][ C1] sock_close+0xf1/0x290
[ 152.383174][ C1] ? __cfi_sock_close+0x10/0x10
[ 152.383189][ C1] __fput+0x1fc/0x8f0
[ 152.383206][ C1] ____fput+0x15/0x20
[ 152.383221][ C1] task_work_run+0x1e1/0x250
[ 152.383238][ C1] ? __cfi_task_work_run+0x10/0x10
[ 152.383254][ C1] ? fput+0x15b/0x1a0
[ 152.383270][ C1] exit_to_user_mode_loop+0x9b/0xb0
[ 152.383286][ C1] exit_to_user_mode_prepare+0x87/0xd0
[ 152.383300][ C1] syscall_exit_to_user_mode+0x1a/0x30
[ 152.383317][ C1] do_syscall_64+0x58/0xa0
[ 152.383335][ C1] ? clear_bhb_loop+0x30/0x80
[ 152.383350][ C1] ? clear_bhb_loop+0x30/0x80
[ 152.383365][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 152.383380][ C1] RIP: 0033:0x7fa2b8c6e3b9
[ 152.383394][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 152.383405][ C1] RSP: 002b:00007fa2b993e0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 152.383420][ C1] RAX: 0000000000000000 RBX: 00007fa2b8dabf80 RCX: 00007fa2b8c6e3b9
[ 152.383429][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 152.383438][ C1] RBP: 00007fa2b8ccf498 R08: 0000000000000000 R09: 0000000000000000
[ 152.383447][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 152.383455][ C1] R13: 000000000000000b R14: 00007fa2b8dabf80 R15: 00007ffea2392098
[ 152.383467][ C1]
[ 152.383838][ C0] CPU: 0 PID: 3459 Comm: syz-executor.0 Not tainted syzkaller #0
[ 153.031567][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 153.042355][ C0] RIP: 0010:kvm_wait+0x105/0x150
[ 153.047860][ C0] Code: 06 33 04 f4 eb 87 fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d 3d 06 33 04 fb f4 5e ff ff ff fb e9 58 ff ff ff e8 fb 18 c5 03 89 f9 80 e1 07 38
[ 153.068606][ C0] RSP: 0018:ffffc900038af660 EFLAGS: 00000246
[ 153.074785][ C0] RAX: 0000000000000003 RBX: ffff888121cd3798 RCX: ffffffff850128a2
[ 153.083025][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888121cd3798
[ 153.091088][ C0] RBP: ffffc900038af6f0 R08: ffff888121cd3798 R09: 1ffff1102439a6f3
[ 153.099343][ C0] R10: dffffc0000000000 R11: ffffed102439a6f4 R12: 1ffff1103edc0001
[ 153.107628][ C0] R13: ffff8881f6e38cd4 R14: dffffc0000000000 R15: 1ffff92000715ecc
[ 153.115778][ C0] FS: 00007fa2b991d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 153.124892][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 153.131488][ C0] CR2: 00007fa2b991cfd0 CR3: 000000011e516000 CR4: 00000000003506b0
[ 153.139739][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 153.147986][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 153.156378][ C0] Call Trace:
[ 153.159979][ C0]
[ 153.163073][ C0] ? __cfi_kvm_wait+0x10/0x10
[ 153.168039][ C0] ? __pv_queued_spin_lock_slowpath+0x632/0xc40
[ 153.174997][ C0] __pv_queued_spin_lock_slowpath+0x690/0xc40
[ 153.181347][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10
[ 153.188206][ C0] ? avc_has_perm+0x163/0x250
[ 153.193260][ C0] queued_spin_lock_slowpath+0x47/0x50
[ 153.199075][ C0] _raw_spin_lock_bh+0xe4/0xf0
[ 153.204035][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10
[ 153.209688][ C0] ? selinux_socket_sendmsg+0x22f/0x340
[ 153.215483][ C0] lock_sock_nested+0x90/0x2a0
[ 153.220573][ C0] ? __cfi_lock_sock_nested+0x10/0x10
[ 153.226623][ C0] ? _raw_spin_lock_bh+0x94/0xf0
[ 153.231839][ C0] ? _raw_spin_unlock_bh+0x50/0x60
[ 153.237272][ C0] tipc_sendstream+0x47/0x70
[ 153.241989][ C0] ? __cfi_tipc_sendstream+0x10/0x10
[ 153.247553][ C0] ____sys_sendmsg+0x5cc/0x990
[ 153.252682][ C0] ? __sys_sendmsg_sock+0x40/0x40
[ 153.257823][ C0] ? import_iovec+0x7c/0xb0
[ 153.262608][ C0] ___sys_sendmsg+0x2a2/0x360
[ 153.267669][ C0] ? __sys_sendmsg+0x290/0x290
[ 153.272458][ C0] ? __fdget+0x19c/0x220
[ 153.276969][ C0] __x64_sys_sendmsg+0x205/0x2d0
[ 153.282093][ C0] ? __cfi___x64_sys_sendmsg+0x10/0x10
[ 153.288100][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0
[ 153.294546][ C0] x64_sys_call+0x171/0x9a0
[ 153.299164][ C0] do_syscall_64+0x4c/0xa0
[ 153.303957][ C0] ? clear_bhb_loop+0x30/0x80
[ 153.308829][ C0] ? clear_bhb_loop+0x30/0x80
[ 153.313692][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 153.319940][ C0] RIP: 0033:0x7fa2b8c6e3b9
[ 153.324712][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 153.344336][ C0] RSP: 002b:00007fa2b991d0b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 153.352885][ C0] RAX: ffffffffffffffda RBX: 00007fa2b8dac050 RCX: 00007fa2b8c6e3b9
[ 153.361326][ C0] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003
[ 153.369419][ C0] RBP: 00007fa2b8ccf498 R08: 0000000000000000 R09: 0000000000000000
[ 153.377687][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 153.385871][ C0] R13: 000000000000000b R14: 00007fa2b8dac050 R15: 00007ffea2392098
[ 153.394408][ C0]
[ 287.379834][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 225s! [syz-executor.0:3459]
[ 287.389188][ C0] Modules linked in:
[ 287.393288][ C0] CPU: 0 PID: 3459 Comm: syz-executor.0 Not tainted syzkaller #0
[ 287.401361][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 287.411776][ C0] RIP: 0010:__pv_queued_spin_lock_slowpath+0x591/0xc40
[ 287.418844][ C0] Code: 0f 85 33 01 00 00 41 c6 45 00 00 41 0f b6 04 17 84 c0 0f 85 46 01 00 00 48 8b 44 24 10 c6 00 01 41 bd 00 80 ff ff eb 07 f3 90 <41> ff c5 74 5b 41 0f b6 04 16 84 c0 75 35 80 3b 00 75 eb 48 89 df
[ 287.440087][ C0] RSP: 0018:ffffc900038af700 EFLAGS: 00000206
[ 287.446727][ C0] RAX: 0000000000000000 RBX: ffff888121cd3798 RCX: ffffffff850128a2
[ 287.455162][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888121cd3798
[ 287.463782][ C0] RBP: ffffc900038af7f0 R08: ffff888121cd3798 R09: 1ffff1102439a6f3
[ 287.472732][ C0] R10: dffffc0000000000 R11: ffffed102439a6f4 R12: 1ffff1103edc0001
[ 287.480990][ C0] R13: 00000000ffffc7fa R14: 1ffff1102439a6f3 R15: 1ffff1102439a6f3
[ 287.489253][ C0] FS: 00007fa2b991d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 287.498370][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 287.505574][ C0] CR2: 00007fa2b991cfd0 CR3: 000000011e516000 CR4: 00000000003506b0
[ 287.514270][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 287.522689][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 287.531027][ C0] Call Trace:
[ 287.534311][ C0]
[ 287.537344][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10
[ 287.544472][ C0] ? avc_has_perm+0x163/0x250
[ 287.549435][ C0] queued_spin_lock_slowpath+0x47/0x50
[ 287.555266][ C0] _raw_spin_lock_bh+0xe4/0xf0
[ 287.560476][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10
[ 287.566565][ C0] ? selinux_socket_sendmsg+0x22f/0x340
[ 287.572299][ C0] lock_sock_nested+0x90/0x2a0
[ 287.577442][ C0] ? __cfi_lock_sock_nested+0x10/0x10
[ 287.583185][ C0] ? _raw_spin_lock_bh+0x94/0xf0
[ 287.588237][ C0] ? _raw_spin_unlock_bh+0x50/0x60
[ 287.593540][ C0] tipc_sendstream+0x47/0x70
[ 287.598292][ C0] ? __cfi_tipc_sendstream+0x10/0x10
[ 287.604032][ C0] ____sys_sendmsg+0x5cc/0x990
[ 287.608994][ C0] ? __sys_sendmsg_sock+0x40/0x40
[ 287.614137][ C0] ? import_iovec+0x7c/0xb0
[ 287.619326][ C0] ___sys_sendmsg+0x2a2/0x360
[ 287.624512][ C0] ? __sys_sendmsg+0x290/0x290
[ 287.629850][ C0] ? __fdget+0x19c/0x220
[ 287.634777][ C0] __x64_sys_sendmsg+0x205/0x2d0
[ 287.640398][ C0] ? __cfi___x64_sys_sendmsg+0x10/0x10
[ 287.646456][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0
[ 287.653003][ C0] x64_sys_call+0x171/0x9a0
[ 287.658410][ C0] do_syscall_64+0x4c/0xa0
[ 287.662958][ C0] ? clear_bhb_loop+0x30/0x80
[ 287.667999][ C0] ? clear_bhb_loop+0x30/0x80
[ 287.673922][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 287.680369][ C0] RIP: 0033:0x7fa2b8c6e3b9
[ 287.684908][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 287.706721][ C0] RSP: 002b:00007fa2b991d0b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 287.716056][ C0] RAX: ffffffffffffffda RBX: 00007fa2b8dac050 RCX: 00007fa2b8c6e3b9
[ 287.725110][ C0] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003
[ 287.733399][ C0] RBP: 00007fa2b8ccf498 R08: 0000000000000000 R09: 0000000000000000
[ 287.741740][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 287.750419][ C0] R13: 000000000000000b R14: 00007fa2b8dac050 R15: 00007ffea2392098
[ 287.759198][ C0]
[ 287.762425][ C0] Sending NMI from CPU 0 to CPUs 1:
[ 287.768011][ C1] NMI backtrace for cpu 1
[ 287.768022][ C1] CPU: 1 PID: 3458 Comm: syz-executor.0 Not tainted syzkaller #0
[ 287.768038][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 287.768046][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x7e/0x80
[ 287.768079][ C1] Code: c1 e1 05 4c 8d 51 28 4d 39 ca 77 1e 49 ff c0 4c 89 02 48 c7 44 0a 08 07 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 <5d> c3 90 90 90 90 90 90 90 90 90 90 90 b8 00 1e 12 56 48 8b 4e 08
[ 287.768091][ C1] RSP: 0018:ffffc90003a7e870 EFLAGS: 00000293
[ 287.768107][ C1] RAX: ffffffff84d9ca4e RBX: ffff8881230c0478 RCX: ffff8881197ad100
[ 287.768118][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 287.768127][ C1] RBP: ffffc90003a7e870 R08: 0000000000000003 R09: 0000000000000004
[ 287.768136][ C1] R10: dffffc0000000000 R11: fffff5200074fd20 R12: ffff888121cd3af0
[ 287.768146][ C1] R13: ffff88810fdf50de R14: dffffc0000000000 R15: 0000000000000000
[ 287.768157][ C1] FS: 00007fa2b993e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 287.768170][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 287.768180][ C1] CR2: 00007fa2b991dd58 CR3: 000000011e516000 CR4: 00000000003506a0
[ 287.768195][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 287.768204][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 287.768223][ C1] Call Trace:
[ 287.768229][ C1]
[ 287.768235][ C1] tipc_sk_lookup+0x27e/0x620
[ 287.768257][ C1] ? tipc_sk_rcv+0x2c10/0x2c10
[ 287.768275][ C1] tipc_sk_rcv+0x416/0x2c10
[ 287.768291][ C1] ? __stack_depot_save+0x457/0x480
[ 287.768309][ C1] ? kasan_set_track+0x60/0x70
[ 287.768325][ C1] ? kasan_set_track+0x4b/0x70
[ 287.768340][ C1] ? kasan_save_free_info+0x31/0x50
[ 287.768359][ C1] ? ____kasan_slab_free+0x132/0x180
[ 287.768376][ C1] ? __kasan_slab_free+0x11/0x20
[ 287.768392][ C1] ? kmem_cache_free+0x12d/0x300
[ 287.768410][ C1] ? kfree_skbmem+0x10c/0x180
[ 287.768429][ C1] ? tipc_msg_reverse+0x6db/0x940
[ 287.768446][ C1] ? tipc_sk_rcv+0x1ce3/0x2c10
[ 287.768462][ C1] ? __release_sock+0x154/0x380
[ 287.768475][ C1] ? __fput+0x1fc/0x8f0
[ 287.768493][ C1] ? syscall_exit_to_user_mode+0x1a/0x30
[ 287.768511][ C1] ? do_syscall_64+0x58/0xa0
[ 287.768531][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 287.768547][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 287.768567][ C1] tipc_node_xmit+0x26c/0xd90
[ 287.768582][ C1] ? kmem_cache_free+0x12d/0x300
[ 287.768599][ C1] ? ____kasan_slab_free+0x13d/0x180
[ 287.768616][ C1] ? __cfi_tipc_node_xmit+0x10/0x10
[ 287.768630][ C1] ? slab_free_freelist_hook+0xc2/0x190
[ 287.768651][ C1] ? kmem_cache_free+0x12d/0x300
[ 287.768669][ C1] tipc_node_xmit_skb+0xf7/0x150
[ 287.768684][ C1] ? kfree_skb_reason+0xdc/0x230
[ 287.768701][ C1] ? __cfi_tipc_node_xmit_skb+0x10/0x10
[ 287.768717][ C1] ? trace_tipc_sk_rej_msg+0x25/0x150
[ 287.768734][ C1] tipc_sk_rcv+0x1d63/0x2c10
[ 287.768753][ C1] ? kmem_cache_free+0x12d/0x300
[ 287.768773][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 287.768792][ C1] tipc_node_xmit+0x26c/0xd90
[ 287.768807][ C1] ? is_bpf_text_address+0x177/0x190
[ 287.768828][ C1] ? __cfi_tipc_node_xmit+0x10/0x10
[ 287.768842][ C1] ? kernel_text_address+0xa0/0xd0
[ 287.768860][ C1] ? __kernel_text_address+0xd/0x30
[ 287.768877][ C1] ? unwind_get_return_address+0x4d/0x90
[ 287.768894][ C1] ? arch_stack_walk+0xfc/0x150
[ 287.768916][ C1] tipc_sk_filter_rcv+0x158e/0x2cf0
[ 287.768941][ C1] ? tipc_sk_publish+0x470/0x470
[ 287.768959][ C1] ? __kasan_check_write+0x14/0x20
[ 287.768973][ C1] ? _raw_spin_lock_bh+0x94/0xf0
[ 287.768995][ C1] tipc_sk_rcv+0x7ed/0x2c10
[ 287.769014][ C1] ? kmem_cache_free+0x12d/0x300
[ 287.769033][ C1] ? tipc_msg_reverse+0x6db/0x940
[ 287.769049][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 287.769067][ C1] ? tipc_sk_filter_rcv+0x2a82/0x2cf0
[ 287.769086][ C1] tipc_node_xmit+0x26c/0xd90
[ 287.769102][ C1] ? __cfi_tipc_node_xmit+0x10/0x10
[ 287.769118][ C1] ? preempt_schedule_irq+0xca/0x120
[ 287.769133][ C1] tipc_node_distr_xmit+0x2a3/0x3b0
[ 287.769150][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10
[ 287.769167][ C1] tipc_sk_backlog_rcv+0x17d/0x210
[ 287.769186][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10
[ 287.769215][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130
[ 287.769236][ C1] __release_sock+0x154/0x380
[ 287.769251][ C1] release_sock+0x60/0x1c0
[ 287.769268][ C1] tipc_release+0xd4a/0x1670
[ 287.769288][ C1] ? __cfi_tipc_release+0x10/0x10
[ 287.769307][ C1] sock_close+0xf1/0x290
[ 287.769322][ C1] ? __cfi_sock_close+0x10/0x10
[ 287.769337][ C1] __fput+0x1fc/0x8f0
[ 287.769354][ C1] ____fput+0x15/0x20
[ 287.769370][ C1] task_work_run+0x1e1/0x250
[ 287.769387][ C1] ? __cfi_task_work_run+0x10/0x10
[ 287.769403][ C1] ? fput+0x15b/0x1a0
[ 287.769419][ C1] exit_to_user_mode_loop+0x9b/0xb0
[ 287.769436][ C1] exit_to_user_mode_prepare+0x87/0xd0
[ 287.769451][ C1] syscall_exit_to_user_mode+0x1a/0x30
[ 287.769468][ C1] do_syscall_64+0x58/0xa0
[ 287.769486][ C1] ? clear_bhb_loop+0x30/0x80
[ 287.769501][ C1] ? clear_bhb_loop+0x30/0x80
[ 287.769516][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 287.769531][ C1] RIP: 0033:0x7fa2b8c6e3b9
[ 287.769544][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 287.769555][ C1] RSP: 002b:00007fa2b993e0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 287.769569][ C1] RAX: 0000000000000000 RBX: 00007fa2b8dabf80 RCX: 00007fa2b8c6e3b9
[ 287.769579][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 287.769588][ C1] RBP: 00007fa2b8ccf498 R08: 0000000000000000 R09: 0000000000000000
[ 287.769597][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 287.769606][ C1] R13: 000000000000000b R14: 00007fa2b8dabf80 R15: 00007ffea2392098
[ 287.769618][ C1]