Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. 2025/07/06 20:52:17 ignoring optional flag "sandboxArg"="0" 2025/07/06 20:52:18 parsed 1 programs [ 51.142075][ T24] kauditd_printk_skb: 30 callbacks suppressed [ 51.142089][ T24] audit: type=1400 audit(1751835139.610:104): avc: denied { unlink } for pid=412 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 51.184889][ T412] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.606381][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.613787][ T416] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.621889][ T416] device bridge_slave_0 entered promiscuous mode [ 51.629693][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.637508][ T416] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.645176][ T416] device bridge_slave_1 entered promiscuous mode [ 51.693640][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.700760][ T416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.708074][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.715309][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.732384][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.739806][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.747451][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.755774][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.765134][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.773324][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.780380][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.788879][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.797262][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.804599][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.816272][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.825766][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.839253][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.850339][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.858845][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.866779][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.875822][ T416] device veth0_vlan entered promiscuous mode [ 51.885668][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.895091][ T416] device veth1_macvtap entered promiscuous mode [ 51.904579][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.914864][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.186756][ T24] audit: type=1401 audit(1751835140.660:105): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 52.235180][ T24] audit: type=1400 audit(1751835140.710:106): avc: denied { create } for pid=445 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.394641][ T7] device bridge_slave_1 left promiscuous mode [ 52.400928][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.411335][ T7] device bridge_slave_0 left promiscuous mode [ 52.418087][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.426438][ T7] device veth1_macvtap left promiscuous mode [ 52.432485][ T7] device veth0_vlan left promiscuous mode 2025/07/06 20:52:21 executed programs: 0 [ 52.842126][ T24] audit: type=1400 audit(1751835141.310:107): avc: denied { write } for pid=403 comm="syz-execprog" path="pipe:[14938]" dev="pipefs" ino=14938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 52.888527][ T472] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.897326][ T472] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.905185][ T472] device bridge_slave_0 entered promiscuous mode [ 52.912342][ T472] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.919672][ T472] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.927211][ T472] device bridge_slave_1 entered promiscuous mode [ 52.962709][ T472] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.969877][ T472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.977174][ T472] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.984316][ T472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.001305][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.009135][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.016618][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.026024][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.034659][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.041772][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.050547][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.059050][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.066316][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.078146][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.087457][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.100994][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.112383][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.121257][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.129468][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.138286][ T472] device veth0_vlan entered promiscuous mode [ 53.149842][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.159685][ T472] device veth1_macvtap entered promiscuous mode [ 53.169430][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.179645][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.209909][ T24] audit: type=1400 audit(1751835141.680:108): avc: denied { create } for pid=476 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.229631][ T24] audit: type=1400 audit(1751835141.680:109): avc: denied { write } for pid=476 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.261246][ T24] audit: type=1400 audit(1751835141.730:110): avc: denied { setopt } for pid=476 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 153.323706][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 153.330422][ C0] rcu: 0-...!: (9999 ticks this GP) idle=baa/1/0x4000000000000000 softirq=2791/2791 fqs=0 last_accelerate: 9f4c/c65b dyntick_enabled: 1 [ 153.345007][ C0] (t=10000 jiffies g=1689 q=101) [ 153.350058][ C0] rcu: rcu_preempt kthread starved for 10000 jiffies! g1689 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 153.361736][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 153.372021][ C0] rcu: RCU grace-period kthread stack dump: [ 153.378323][ C0] task:rcu_preempt state:I stack: 0 pid: 13 ppid: 2 flags:0x00004000 [ 153.387871][ C0] Call Trace: [ 153.391635][ C0] __schedule+0xb47/0x1310 [ 153.396163][ C0] ? release_firmware_map_entry+0x190/0x190 [ 153.402248][ C0] ? __mod_timer+0x7ae/0xb30 [ 153.406838][ C0] schedule+0x13c/0x1d0 [ 153.410987][ C0] schedule_timeout+0x12c/0x2d0 [ 153.415832][ C0] ? console_conditional_schedule+0x10/0x10 [ 153.421909][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 153.427368][ C0] ? run_local_timers+0x160/0x160 [ 153.432474][ C0] ? prepare_to_swait_event+0x320/0x340 [ 153.438108][ C0] rcu_gp_kthread+0x100a/0x26a0 [ 153.443478][ C0] ? rcu_barrier_callback+0x50/0x50 [ 153.448688][ C0] ? __kasan_check_read+0x11/0x20 [ 153.453796][ C0] ? __kthread_parkme+0xb9/0x1c0 [ 153.458920][ C0] kthread+0x346/0x3d0 [ 153.463186][ C0] ? rcu_barrier_callback+0x50/0x50 [ 153.468589][ C0] ? kthread_blkcg+0xd0/0xd0 [ 153.473247][ C0] ret_from_fork+0x1f/0x30 [ 153.477710][ C0] NMI backtrace for cpu 0 [ 153.482037][ C0] CPU: 0 PID: 480 Comm: syz.2.17 Not tainted 5.10.238-syzkaller-1007487-g59e9a7228857 #0 [ 153.492107][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.502424][ C0] Call Trace: [ 153.505796][ C0] [ 153.508721][ C0] __dump_stack+0x21/0x24 [ 153.513137][ C0] dump_stack_lvl+0x169/0x1d8 [ 153.518066][ C0] ? show_regs_print_info+0x18/0x18 [ 153.523290][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 153.528948][ C0] ? _raw_spin_lock+0xe0/0xe0 [ 153.533626][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 153.539800][ C0] dump_stack+0x15/0x1c [ 153.544044][ C0] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 153.550193][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 153.556341][ C0] rcu_dump_cpu_stacks+0x19c/0x2c0 [ 153.561444][ C0] rcu_sched_clock_irq+0xf79/0x1870 [ 153.566634][ C0] ? rcutree_dead_cpu+0x2f0/0x2f0 [ 153.571652][ C0] ? hrtimer_run_queues+0x166/0x430 [ 153.577119][ C0] update_process_times+0x198/0x200 [ 153.582408][ C0] tick_sched_timer+0x17c/0x240 [ 153.587416][ C0] ? tick_setup_sched_timer+0x450/0x450 [ 153.592965][ C0] __hrtimer_run_queues+0x37a/0x960 [ 153.598157][ C0] ? process_backlog+0x5e0/0x600 [ 153.603204][ C0] ? hrtimer_interrupt+0xdc0/0xdc0 [ 153.608316][ C0] ? ktime_get_update_offsets_now+0x293/0x2b0 [ 153.614465][ C0] hrtimer_interrupt+0x3a6/0xdc0 [ 153.619501][ C0] ? sched_clock_cpu+0x1b/0x3d0 [ 153.624508][ C0] __sysvec_apic_timer_interrupt+0xfa/0x3f0 [ 153.630881][ C0] asm_call_irq_on_stack+0xf/0x20 [ 153.635928][ C0] [ 153.638980][ C0] sysvec_apic_timer_interrupt+0x85/0xe0 [ 153.644932][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 153.651482][ C0] RIP: 0010:_raw_spin_unlock_bh+0x52/0x60 [ 153.657305][ C0] Code: 2c 86 e8 11 cc 28 fd 48 89 df 48 83 3d 86 ac b7 01 00 74 18 e8 83 4d d6 fc 66 90 48 8b 7d 08 be 01 02 00 00 e8 6f c3 c6 fc 5b <5d> c3 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 53 48 89 fb [ 153.678297][ C0] RSP: 0018:ffffc90000fa6ab0 EFLAGS: 00000202 [ 153.684553][ C0] RAX: 0000000000000201 RBX: ffffc90000fa6ee0 RCX: 0000000000000200 [ 153.692606][ C0] RDX: 0000000000000000 RSI: 0000000000000201 RDI: 00000000ffffffff [ 153.700766][ C0] RBP: ffffc90000fa6ab0 R08: 0000000000000004 R09: 0000000000000003 [ 153.708828][ C0] R10: fffff520001f4d48 R11: 1ffff920001f4d48 R12: ffffc90000fa6ee0 [ 153.716800][ C0] R13: ffffc90000fa6ef0 R14: 000000002dbe06af R15: 000000002dbe06af [ 153.724871][ C0] tipc_sk_rcv+0x3db/0x1ef0 [ 153.729399][ C0] ? __stack_depot_save+0x479/0x4c0 [ 153.734607][ C0] ? kasan_set_track+0x5b/0x70 [ 153.739457][ C0] ? kasan_set_track+0x4a/0x70 [ 153.744214][ C0] ? kasan_set_free_info+0x23/0x40 [ 153.749468][ C0] ? ____kasan_slab_free+0x125/0x160 [ 153.754760][ C0] ? slab_free_freelist_hook+0xc5/0x190 [ 153.760309][ C0] ? kmem_cache_free+0x100/0x2d0 [ 153.765326][ C0] ? kfree_skbmem+0x10c/0x180 [ 153.769996][ C0] ? kfree_skb+0xc1/0x2f0 [ 153.774329][ C0] ? tipc_msg_reverse+0x698/0x900 [ 153.779349][ C0] ? tipc_node_xmit+0x256/0xcd0 [ 153.784455][ C0] ? tipc_sk_filter_rcv+0x1581/0x3850 [ 153.790105][ C0] ? tipc_node_xmit+0x256/0xcd0 [ 153.794981][ C0] ? tipc_node_distr_xmit+0x292/0x390 [ 153.800465][ C0] ? tipc_sk_backlog_rcv+0x16f/0x1f0 [ 153.805845][ C0] ? do_syscall_64+0x3d/0x40 [ 153.810909][ C0] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 153.817065][ C0] ? __skb_queue_purge+0x170/0x170 [ 153.822563][ C0] tipc_node_xmit+0x256/0xcd0 [ 153.827356][ C0] ? ____kasan_slab_free+0x130/0x160 [ 153.832787][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 153.838333][ C0] ? slab_free_freelist_hook+0xc5/0x190 [ 153.844056][ C0] ? kfree_skbmem+0x10c/0x180 [ 153.848905][ C0] ? kmem_cache_free+0x100/0x2d0 [ 153.854190][ C0] tipc_node_xmit_skb+0xe9/0x130 [ 153.859125][ C0] ? kfree_skb+0xc1/0x2f0 [ 153.863780][ C0] ? __skb_queue_purge+0x170/0x170 [ 153.869230][ C0] ? trace_tipc_sk_rej_msg+0x2c/0x6d0 [ 153.874858][ C0] tipc_sk_rcv+0x1d77/0x1ef0 [ 153.879445][ C0] ? __skb_queue_purge+0x170/0x170 [ 153.884854][ C0] tipc_node_xmit+0x256/0xcd0 [ 153.889628][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 153.895264][ C0] ? unwind_get_return_address+0x4d/0x90 [ 153.900941][ C0] ? __kasan_check_write+0x14/0x20 [ 153.906064][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 153.911712][ C0] ? _raw_spin_lock+0xe0/0xe0 [ 153.916389][ C0] tipc_sk_filter_rcv+0x1581/0x3850 [ 153.921671][ C0] ? tipc_sk_dump+0xfc0/0xfc0 [ 153.926399][ C0] ? __kasan_check_write+0x14/0x20 [ 153.931508][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 153.936440][ C0] tipc_sk_rcv+0x7cc/0x1ef0 [ 153.940956][ C0] ? slab_free_freelist_hook+0xc5/0x190 [ 153.946511][ C0] ? kmem_cache_free+0x100/0x2d0 [ 153.951469][ C0] ? __skb_queue_purge+0x170/0x170 [ 153.956819][ C0] ? tipc_sk_filter_rcv+0x3034/0x3850 [ 153.962288][ C0] ? ____fput+0x15/0x20 [ 153.966541][ C0] ? task_work_run+0x127/0x190 [ 153.971413][ C0] tipc_node_xmit+0x256/0xcd0 [ 153.976176][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 153.981718][ C0] tipc_node_distr_xmit+0x292/0x390 [ 153.986950][ C0] ? tipc_node_xmit_skb+0x130/0x130 [ 153.992142][ C0] ? kfree_skbmem+0x10c/0x180 [ 153.996819][ C0] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 154.001917][ C0] ? tipc_sk_timeout+0x970/0x970 [ 154.006933][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 154.012567][ C0] __release_sock+0x146/0x360 [ 154.017248][ C0] release_sock+0x60/0x1b0 [ 154.021669][ C0] tipc_release+0xbd4/0x1490 [ 154.026272][ C0] sock_close+0xe0/0x270 [ 154.030512][ C0] ? sock_mmap+0xa0/0xa0 [ 154.034841][ C0] __fput+0x2fb/0x770 [ 154.038820][ C0] ____fput+0x15/0x20 [ 154.042795][ C0] task_work_run+0x127/0x190 [ 154.047568][ C0] exit_to_user_mode_loop+0xcb/0xe0 [ 154.052780][ C0] syscall_exit_to_user_mode+0x68/0x90 [ 154.058560][ C0] do_syscall_64+0x3d/0x40 [ 154.062975][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 154.069058][ C0] RIP: 0033:0x7f5476f0a969 [ 154.073468][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.093277][ C0] RSP: 002b:00007f547697b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.101876][ C0] RAX: 00000000000203a0 RBX: 00007f5477131fa0 RCX: 00007f5476f0a969 [ 154.109845][ C0] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 154.117999][ C0] RBP: 00007f5476f8cab1 R08: 0000000000000000 R09: 0000000000000000 [ 154.126346][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.134322][ C0] R13: 0000000000000000 R14: 00007f5477131fa0 R15: 00007ffd1de5f588 [ 199.108515][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [syz.2.17:479] [ 199.116825][ C1] Modules linked in: [ 199.120976][ C1] CPU: 1 PID: 479 Comm: syz.2.17 Not tainted 5.10.238-syzkaller-1007487-g59e9a7228857 #0 [ 199.130790][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.140873][ C1] RIP: 0010:kvm_wait+0xc2/0x120 [ 199.145746][ C1] Code: 38 f0 75 26 41 f7 c4 00 02 00 00 75 0f 0f 1f 44 00 00 0f 00 2d 3f 9d 98 03 f4 eb 0e 0f 1f 44 00 00 0f 00 2d 30 9d 98 03 fb f4 <4c> 89 64 24 18 ff 74 24 18 9d 48 c7 44 24 20 0e 36 e0 45 4b c7 04 [ 199.165918][ C1] RSP: 0018:ffffc90000f979c0 EFLAGS: 00000246 [ 199.172100][ C1] RAX: 0000000000000003 RBX: ffff88811b2e8088 RCX: ffffffff814b175a [ 199.180081][ C1] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff88811b2e8088 [ 199.188117][ C1] RBP: ffffc90000f97a70 R08: dffffc0000000000 R09: ffffed102365d012 [ 199.196448][ C1] R10: ffffed102365d012 R11: 1ffff1102365d011 R12: 0000000000000246 [ 199.204540][ C1] R13: 1ffff1102365d011 R14: dffffc0000000000 R15: 1ffff920001f2f3c [ 199.212634][ C1] FS: 0000555571ad2500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 199.221887][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.228763][ C1] CR2: 0000000000000000 CR3: 000000011701b000 CR4: 00000000003506a0 [ 199.236952][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.245249][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.253788][ C1] Call Trace: [ 199.257698][ C1] ? asm_common_interrupt+0x1e/0x40 [ 199.263340][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 199.268638][ C1] ? __pv_queued_spin_lock_slowpath+0x6ba/0xb70 [ 199.274890][ C1] __pv_queued_spin_lock_slowpath+0x714/0xb70 [ 199.281311][ C1] ? __pv_queued_spin_unlock_slowpath+0x280/0x280 [ 199.288084][ C1] ? task_work_add+0x27/0x1e0 [ 199.293902][ C1] ? fput+0x1a/0x20 [ 199.297989][ C1] ? filp_close+0x105/0x150 [ 199.302744][ C1] ? __close_range+0x1ca/0x430 [ 199.307691][ C1] ? do_syscall_64+0x31/0x40 [ 199.313186][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 199.319695][ C1] queued_spin_lock_slowpath+0x47/0x50 [ 199.325190][ C1] _raw_spin_lock_bh+0xd8/0xe0 [ 199.330224][ C1] ? _raw_spin_lock_irq+0xe0/0xe0 [ 199.335724][ C1] lock_sock_nested+0x92/0x290 [ 199.340512][ C1] ? locks_remove_posix+0x530/0x530 [ 199.345792][ C1] ? sock_init_data+0xc0/0xc0 [ 199.350564][ C1] ? fsnotify+0x1967/0x1a80 [ 199.355079][ C1] tipc_release+0x56/0x1490 [ 199.359675][ C1] ? down_read_killable+0xe0/0xe0 [ 199.364833][ C1] sock_close+0xe0/0x270 [ 199.369258][ C1] ? sock_mmap+0xa0/0xa0 [ 199.373593][ C1] __fput+0x2fb/0x770 [ 199.377664][ C1] ____fput+0x15/0x20 [ 199.381739][ C1] task_work_run+0x127/0x190 [ 199.386336][ C1] exit_to_user_mode_loop+0xcb/0xe0 [ 199.391750][ C1] syscall_exit_to_user_mode+0x68/0x90 [ 199.397252][ C1] do_syscall_64+0x3d/0x40 [ 199.401674][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 199.407585][ C1] RIP: 0033:0x7f5476f0a969 [ 199.412099][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.431938][ C1] RSP: 002b:00007ffd1de5f6e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 199.440667][ C1] RAX: 0000000000000000 RBX: 00007f5477133ba0 RCX: 00007f5476f0a969 [ 199.448749][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 199.456827][ C1] RBP: 00007f5477133ba0 R08: 0000000000000000 R09: 000000051de5f9df [ 199.465064][ C1] R10: 00007f5477133ac0 R11: 0000000000000246 R12: 000000000000d359 [ 199.473155][ C1] R13: 00007f5477132080 R14: ffffffffffffffff R15: 00007ffd1de5f800 [ 199.481486][ C1] Sending NMI from CPU 1 to CPUs 0: [ 199.487500][ C0] NMI backtrace for cpu 0 [ 199.487511][ C0] CPU: 0 PID: 480 Comm: syz.2.17 Not tainted 5.10.238-syzkaller-1007487-g59e9a7228857 #0 [ 199.487517][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.487521][ C0] RIP: 0010:tipc_sk_lookup+0x21d/0x5f0 [ 199.487532][ C0] Code: cb 21 c3 45 8b 65 00 31 ff 44 89 e6 e8 ac 79 09 fd 45 85 e4 0f 85 07 02 00 00 e8 ee 75 09 fd 89 d8 48 8b 0c 24 48 8d 5c c1 40 <48> 89 d8 48 83 c8 01 48 89 44 24 28 48 89 d8 48 c1 e8 03 48 89 44 [ 199.487536][ C0] RSP: 0018:ffffc90000fa69c0 EFLAGS: 00000293 [ 199.487545][ C0] RAX: 0000000000000036 RBX: ffff8881167461f0 RCX: ffff888116746000 [ 199.487550][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 199.487555][ C0] RBP: ffffc90000fa6ab0 R08: 0000000000000004 R09: 0000000000000003 [ 199.487560][ C0] R10: fffff520001f4d48 R11: 1ffff920001f4d48 R12: 0000000000000000 [ 199.487565][ C0] R13: ffff888116746004 R14: 00000000e98c8b9f R15: ffff8881163510de [ 199.487570][ C0] FS: 00007f547697b6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 199.487574][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.487579][ C0] CR2: 0000200000011000 CR3: 000000011701b000 CR4: 00000000003506b0 [ 199.487584][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.487589][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.487591][ C0] Call Trace: [ 199.487595][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 199.487598][ C0] ? tipc_sk_rcv+0x1ef0/0x1ef0 [ 199.487601][ C0] tipc_sk_rcv+0x3eb/0x1ef0 [ 199.487604][ C0] ? __stack_depot_save+0x479/0x4c0 [ 199.487607][ C0] ? kasan_set_track+0x5b/0x70 [ 199.487611][ C0] ? kasan_set_track+0x4a/0x70 [ 199.487614][ C0] ? kasan_set_free_info+0x23/0x40 [ 199.487618][ C0] ? ____kasan_slab_free+0x125/0x160 [ 199.487621][ C0] ? slab_free_freelist_hook+0xc5/0x190 [ 199.487624][ C0] ? kmem_cache_free+0x100/0x2d0 [ 199.487627][ C0] ? kfree_skbmem+0x10c/0x180 [ 199.487630][ C0] ? kfree_skb+0xc1/0x2f0 [ 199.487634][ C0] ? tipc_msg_reverse+0x698/0x900 [ 199.487637][ C0] ? tipc_node_xmit+0x256/0xcd0 [ 199.487641][ C0] ? tipc_sk_filter_rcv+0x1581/0x3850 [ 199.487644][ C0] ? tipc_node_xmit+0x256/0xcd0 [ 199.487647][ C0] ? tipc_node_distr_xmit+0x292/0x390 [ 199.487651][ C0] ? tipc_sk_backlog_rcv+0x16f/0x1f0 [ 199.487654][ C0] ? do_syscall_64+0x3d/0x40 [ 199.487658][ C0] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 199.487661][ C0] ? __skb_queue_purge+0x170/0x170 [ 199.487664][ C0] tipc_node_xmit+0x256/0xcd0 [ 199.487668][ C0] ? ____kasan_slab_free+0x130/0x160 [ 199.487671][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 199.487675][ C0] ? slab_free_freelist_hook+0xc5/0x190 [ 199.487678][ C0] ? kfree_skbmem+0x10c/0x180 [ 199.487682][ C0] ? kmem_cache_free+0x100/0x2d0 [ 199.487685][ C0] tipc_node_xmit_skb+0xe9/0x130 [ 199.487688][ C0] ? kfree_skb+0xc1/0x2f0 [ 199.487691][ C0] ? __skb_queue_purge+0x170/0x170 [ 199.487695][ C0] ? trace_tipc_sk_rej_msg+0x2c/0x6d0 [ 199.487699][ C0] tipc_sk_rcv+0x1d77/0x1ef0 [ 199.487702][ C0] ? __skb_queue_purge+0x170/0x170 [ 199.487705][ C0] tipc_node_xmit+0x256/0xcd0 [ 199.487708][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 199.487711][ C0] ? unwind_get_return_address+0x4d/0x90 [ 199.487714][ C0] ? __kasan_check_write+0x14/0x20 [ 199.487717][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 199.487720][ C0] ? _raw_spin_lock+0xe0/0xe0 [ 199.487723][ C0] tipc_sk_filter_rcv+0x1581/0x3850 [ 199.487725][ C0] ? tipc_sk_dump+0xfc0/0xfc0 [ 199.487728][ C0] ? __kasan_check_write+0x14/0x20 [ 199.487731][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 199.487734][ C0] tipc_sk_rcv+0x7cc/0x1ef0 [ 199.487737][ C0] ? slab_free_freelist_hook+0xc5/0x190 [ 199.487739][ C0] ? kmem_cache_free+0x100/0x2d0 [ 199.487742][ C0] ? __skb_queue_purge+0x170/0x170 [ 199.487745][ C0] ? tipc_sk_filter_rcv+0x3034/0x3850 [ 199.487748][ C0] ? ____fput+0x15/0x20 [ 199.487751][ C0] ? task_work_run+0x127/0x190 [ 199.487753][ C0] tipc_node_xmit+0x256/0xcd0 [ 199.487756][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 199.487759][ C0] tipc_node_distr_xmit+0x292/0x390 [ 199.487762][ C0] ? tipc_node_xmit_skb+0x130/0x130 [ 199.487765][ C0] ? kfree_skbmem+0x10c/0x180 [ 199.487769][ C0] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 199.487772][ C0] ? tipc_sk_timeout+0x970/0x970 [ 199.487775][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 199.487777][ C0] __release_sock+0x146/0x360 [ 199.487780][ C0] release_sock+0x60/0x1b0 [ 199.487782][ C0] tipc_release+0xbd4/0x1490 [ 199.487785][ C0] sock_close+0xe0/0x270 [ 199.487787][ C0] ? sock_mmap+0xa0/0xa0 [ 199.487790][ C0] __fput+0x2fb/0x770 [ 199.487792][ C0] ____fput+0x15/0x20 [ 199.487795][ C0] task_work_run+0x127/0x190 [ 199.487797][ C0] exit_to_user_mode_loop+0xcb/0xe0 [ 199.487800][ C0] syscall_exit_to_user_mode+0x68/0x90 [ 199.487803][ C0] do_syscall_64+0x3d/0x40 [ 199.487806][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 199.487812][ C0] RIP: 0033:0x7f5476f0a969 [ 199.487822][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.487825][ C0] RSP: 002b:00007f547697b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.487832][ C0] RAX: 00000000000203a0 RBX: 00007f5477131fa0 RCX: 00007f5476f0a969 [ 199.487836][ C0] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 199.487840][ C0] RBP: 00007f5476f8cab1 R08: 0000000000000000 R09: 0000000000000000 [ 199.487844][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.487848][ C0] R13: 0000000000000000 R14: 00007f5477131fa0 R15: 00007ffd1de5f588