Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. 2026/01/16 20:19:51 parsed 1 programs [ 48.593862][ T28] audit: type=1400 audit(1768594792.898:106): avc: denied { unlink } for pid=402 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 48.649327][ T402] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.488002][ T28] audit: type=1401 audit(1768594793.788:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 49.535463][ T28] audit: type=1400 audit(1768594793.828:108): avc: denied { create } for pid=420 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.660179][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.677503][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.685144][ T412] device bridge_slave_0 entered promiscuous mode [ 49.710761][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.730104][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.737980][ T412] device bridge_slave_1 entered promiscuous mode [ 50.134643][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.141829][ T412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.149218][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.156758][ T412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.203054][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.212589][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.221011][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.228864][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.243910][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.252746][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.259973][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.267881][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.277260][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.284516][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.296460][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.313456][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.329403][ T412] device veth0_vlan entered promiscuous mode [ 50.336400][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.346083][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.355912][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.363885][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.379558][ T412] device veth1_macvtap entered promiscuous mode [ 50.387618][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.400386][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.420190][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/01/16 20:19:54 executed programs: 0 [ 50.702451][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.710823][ T474] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.718428][ T474] device bridge_slave_0 entered promiscuous mode [ 50.726661][ T474] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.734508][ T474] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.742086][ T474] device bridge_slave_1 entered promiscuous mode [ 50.859709][ T481] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.866928][ T481] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.875072][ T481] device bridge_slave_0 entered promiscuous mode [ 50.900525][ T481] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.907865][ T481] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.915919][ T481] device bridge_slave_1 entered promiscuous mode [ 50.960829][ T479] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.968206][ T479] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.976262][ T479] device bridge_slave_0 entered promiscuous mode [ 50.992180][ T482] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.999663][ T482] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.007345][ T482] device bridge_slave_0 entered promiscuous mode [ 51.019506][ T479] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.026610][ T479] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.034606][ T479] device bridge_slave_1 entered promiscuous mode [ 51.049985][ T482] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.057633][ T482] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.065327][ T482] device bridge_slave_1 entered promiscuous mode [ 51.094166][ T476] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.101408][ T476] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.109410][ T476] device bridge_slave_0 entered promiscuous mode [ 51.117372][ T476] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.124832][ T476] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.132399][ T476] device bridge_slave_1 entered promiscuous mode [ 51.256533][ T474] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.264747][ T474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.272328][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.279696][ T474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.388793][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.397215][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.404754][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.439127][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.447522][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.455051][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.462906][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.471665][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.479307][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.489707][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.520820][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.529634][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.536966][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.546277][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.554855][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.562293][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.570002][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.601870][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.610632][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.641059][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.650814][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.661202][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.669852][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.698252][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.706512][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.715728][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.723893][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.731724][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.740526][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.749257][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.756549][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.764449][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.772982][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.781429][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.788499][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.796068][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.809038][ T474] device veth0_vlan entered promiscuous mode [ 51.817947][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.826374][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.835060][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.843574][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.875374][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.882971][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.890616][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.899659][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.908305][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.915680][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.923577][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.932226][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.940810][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.948088][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.956005][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.963740][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.971187][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.980076][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.988755][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.996320][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.004143][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.012787][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.021288][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.028483][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.036401][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.044724][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.052752][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.061172][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.069058][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.089555][ T474] device veth1_macvtap entered promiscuous mode [ 52.098905][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.107272][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.116859][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.125775][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.134237][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.142543][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.150974][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.172114][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.180570][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.188784][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.196762][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.205427][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.213965][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.235147][ T476] device veth0_vlan entered promiscuous mode [ 52.251445][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.259965][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.268376][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.276941][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.286376][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.295001][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.303972][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.312393][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.321074][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.329648][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.341553][ T481] device veth0_vlan entered promiscuous mode [ 52.361493][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.369800][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.378241][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.387172][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.395635][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.404397][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.412988][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.420817][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.428610][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.436582][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.450496][ T482] device veth0_vlan entered promiscuous mode [ 52.463520][ T479] device veth0_vlan entered promiscuous mode [ 52.475694][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.484333][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.492146][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.500398][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.510979][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.525656][ T479] device veth1_macvtap entered promiscuous mode [ 52.536432][ T8] device bridge_slave_1 left promiscuous mode [ 52.543526][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.551394][ T8] device bridge_slave_0 left promiscuous mode [ 52.561277][ T28] audit: type=1400 audit(1768594796.858:109): avc: denied { create } for pid=528 comm="syz.5.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.569577][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.587487][ T28] audit: type=1400 audit(1768594796.888:110): avc: denied { write } for pid=528 comm="syz.5.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.607304][ T28] audit: type=1400 audit(1768594796.888:111): avc: denied { setopt } for pid=528 comm="syz.5.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.627079][ T8] device veth1_macvtap left promiscuous mode [ 52.634558][ T8] device veth0_vlan left promiscuous mode [ 52.803719][ T481] device veth1_macvtap entered promiscuous mode [ 52.822289][ T476] device veth1_macvtap entered promiscuous mode [ 52.829928][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.839531][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.863644][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.881013][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.903180][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.914852][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.927509][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.940681][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.960033][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.979452][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.001889][ T482] device veth1_macvtap entered promiscuous mode [ 53.017302][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.025749][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.034651][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.043533][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.051971][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.091855][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.114966][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.134456][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.175197][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.263092][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 153.269895][ C0] rcu: 0-...!: (10000 ticks this GP) idle=125c/1/0x4000000000000000 softirq=4212/4226 fqs=0 [ 153.280063][ C0] (t=10001 jiffies g=3001 q=145 ncpus=2) [ 153.286156][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10001 jiffies! g3001 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 153.299634][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=884 [ 153.307635][ C0] rcu: rcu_preempt kthread starved for 10004 jiffies! g3001 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 153.319028][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 153.329264][ C0] rcu: RCU grace-period kthread stack dump: [ 153.335195][ C0] task:rcu_preempt state:I stack:28528 pid:14 ppid:2 flags:0x00004000 [ 153.344612][ C0] Call Trace: [ 153.348086][ C0] [ 153.351042][ C0] __schedule+0xb87/0x14e0 [ 153.356098][ C0] ? __sched_text_start+0x8/0x8 [ 153.361080][ C0] schedule+0xbd/0x170 [ 153.365341][ C0] schedule_timeout+0x12c/0x2e0 [ 153.370219][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 153.375598][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 153.381469][ C0] ? __cfi_process_timeout+0x10/0x10 [ 153.386852][ C0] ? prepare_to_swait_event+0x308/0x320 [ 153.392417][ C0] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 153.397361][ C0] ? rcu_gp_init+0xf10/0xf10 [ 153.401978][ C0] rcu_gp_kthread+0x95/0x370 [ 153.406668][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 153.411902][ C0] ? set_cpus_allowed_ptr+0x82/0xc0 [ 153.417115][ C0] ? __kasan_check_read+0x11/0x20 [ 153.422162][ C0] ? __kthread_parkme+0x142/0x180 [ 153.427195][ C0] kthread+0x281/0x320 [ 153.431538][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 153.436760][ C0] ? __cfi_kthread+0x10/0x10 [ 153.441634][ C0] ret_from_fork+0x1f/0x30 [ 153.446163][ C0] [ 153.449288][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 153.455632][ C0] Sending NMI from CPU 0 to CPUs 1: [ 153.460885][ C1] NMI backtrace for cpu 1 [ 153.460901][ C1] CPU: 1 PID: 692 Comm: syz.1.72 Not tainted syzkaller #0 [ 153.460919][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.460932][ C1] RIP: 0010:kvm_wait+0xf2/0x140 [ 153.460960][ C1] Code: 96 13 04 f4 eb 9a fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d 70 96 13 04 fb f4 71 ff ff ff fb e9 6b ff ff ff e8 5e 47 b9 03 89 f9 80 e1 07 38 [ 153.460974][ C1] RSP: 0018:ffffc90001077680 EFLAGS: 00000246 [ 153.460990][ C1] RAX: 0000000000000003 RBX: ffff888121628598 RCX: ffffffff84f4be62 [ 153.461002][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888121628598 [ 153.461014][ C1] RBP: ffffc90001077710 R08: dffffc0000000000 R09: ffffed10242c50b4 [ 153.461027][ C1] R10: ffffed10242c50b4 R11: 1ffff110242c50b3 R12: 1ffff1103ee20001 [ 153.461040][ C1] R13: ffff8881f7138cd4 R14: dffffc0000000000 R15: 1ffff9200020eed0 [ 153.461053][ C1] FS: 00007fd025b376c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 153.461069][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.461081][ C1] CR2: 00007f2731787cc0 CR3: 00000001208a7000 CR4: 00000000003506a0 [ 153.461097][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 153.461107][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 153.461117][ C1] Call Trace: [ 153.461123][ C1] [ 153.461130][ C1] ? __cfi_kvm_wait+0x10/0x10 [ 153.461151][ C1] ? __pv_queued_spin_lock_slowpath+0x632/0xc40 [ 153.461178][ C1] __pv_queued_spin_lock_slowpath+0x690/0xc40 [ 153.461204][ C1] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 153.461228][ C1] ? avc_has_perm+0x158/0x240 [ 153.461255][ C1] queued_spin_lock_slowpath+0x47/0x50 [ 153.461282][ C1] _raw_spin_lock_bh+0xd8/0xe0 [ 153.461301][ C1] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 153.461323][ C1] lock_sock_nested+0x92/0x280 [ 153.461349][ C1] ? __cfi_lock_sock_nested+0x10/0x10 [ 153.461375][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 153.461396][ C1] ? _raw_spin_unlock_bh+0x50/0x60 [ 153.461417][ C1] tipc_sendstream+0x47/0x70 [ 153.461437][ C1] ? __cfi_tipc_sendstream+0x10/0x10 [ 153.461457][ C1] ____sys_sendmsg+0x5a9/0x990 [ 153.461480][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 153.461504][ C1] ? import_iovec+0x7c/0xb0 [ 153.461528][ C1] ___sys_sendmsg+0x21c/0x290 [ 153.461549][ C1] ? __sys_sendmsg+0x270/0x270 [ 153.461579][ C1] ? __fdget+0x19c/0x220 [ 153.461596][ C1] __x64_sys_sendmsg+0x1f0/0x2c0 [ 153.461625][ C1] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 153.461649][ C1] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 153.461671][ C1] x64_sys_call+0x171/0x9a0 [ 153.461692][ C1] do_syscall_64+0x4c/0xa0 [ 153.461711][ C1] ? clear_bhb_loop+0x30/0x80 [ 153.461735][ C1] ? clear_bhb_loop+0x30/0x80 [ 153.461759][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.461783][ C1] RIP: 0033:0x7fd024d8ebe9 [ 153.461808][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.461822][ C1] RSP: 002b:00007fd025b37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.461838][ C1] RAX: ffffffffffffffda RBX: 00007fd024fb5fa0 RCX: 00007fd024d8ebe9 [ 153.461850][ C1] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 153.461861][ C1] RBP: 00007fd024e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 153.461871][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.461881][ C1] R13: 00007fd024fb6038 R14: 00007fd024fb5fa0 R15: 00007ffcfae2c358 [ 153.461897][ C1] [ 153.462945][ C0] CPU: 0 PID: 700 Comm: syz.1.72 Not tainted syzkaller #0 [ 153.835580][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.845848][ C0] RIP: 0010:tipc_sk_rcv+0x1aca/0x2cc0 [ 153.851595][ C0] Code: 06 ff ff 48 8b 7c 24 70 48 83 ef 80 48 89 7c 24 70 be 04 00 00 00 e8 25 06 e7 fc bb ff ff ff ff f0 41 0f c1 9c 24 80 00 00 00 01 00 00 00 89 de e8 9a 84 a2 fc 83 fb 01 75 0f e8 70 80 a2 fc [ 153.871640][ C0] RSP: 0018:ffffc90001086740 EFLAGS: 00000213 [ 153.877742][ C0] RAX: 0000000000000001 RBX: 0000000000000005 RCX: ffffffff84cdaacb [ 153.885820][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888121628580 [ 153.894301][ C0] RBP: ffffc900010869d0 R08: dffffc0000000000 R09: ffffed10242c50b1 [ 153.902424][ C0] R10: ffffed10242c50b1 R11: 1ffff110242c50b0 R12: ffff888121628500 [ 153.910659][ C0] R13: dffffc0000000000 R14: ffffc90001086bc0 R15: 00000000f0f6a7cd [ 153.918982][ C0] FS: 00007fd025b166c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 153.927922][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.934791][ C0] CR2: 00007fd025b15f98 CR3: 00000001208a7000 CR4: 00000000003506b0 [ 153.943066][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 153.951433][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 153.959416][ C0] Call Trace: [ 153.962795][ C0] [ 153.965768][ C0] ? stack_trace_save+0x98/0xe0 [ 153.970895][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 153.976818][ C0] ? __stack_depot_save+0x445/0x480 [ 153.982271][ C0] ? kasan_set_track+0x60/0x70 [ 153.987127][ C0] ? kasan_set_track+0x4b/0x70 [ 153.991986][ C0] ? ____kasan_slab_free+0x132/0x180 [ 153.997383][ C0] ? tipc_node_xmit+0x257/0xd00 [ 154.002811][ C0] ? tipc_sk_backlog_rcv+0x16f/0x1f0 [ 154.008383][ C0] ? __release_sock+0x154/0x380 [ 154.013622][ C0] ? sockopt_release_sock+0x95/0x1f0 [ 154.019032][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 154.023995][ C0] ? do_syscall_64+0x4c/0xa0 [ 154.028685][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.034904][ C0] tipc_node_xmit+0x257/0xd00 [ 154.039877][ C0] ? kasan_quarantine_put+0x34/0x190 [ 154.045385][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 154.051034][ C0] ? ____kasan_slab_free+0x13d/0x180 [ 154.057037][ C0] ? __kasan_slab_free+0x11/0x20 [ 154.062010][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 154.067668][ C0] ? kfree_skbmem+0x10c/0x180 [ 154.072735][ C0] tipc_node_distr_xmit+0x292/0x390 [ 154.078391][ C0] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 154.084164][ C0] tipc_sk_rcv+0x1aa3/0x2cc0 [ 154.089049][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 154.094262][ C0] tipc_node_xmit+0x257/0xd00 [ 154.099230][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 154.104536][ C0] tipc_sk_push_backlog+0x4dd/0x790 [ 154.110020][ C0] tipc_sk_proto_rcv+0x98d/0x1580 [ 154.115859][ C0] ? tipc_sk_filter_rcv+0x2c80/0x2c80 [ 154.121354][ C0] ? unwind_get_return_address+0x4d/0x90 [ 154.127005][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 154.133538][ C0] ? arch_stack_walk+0x90/0x150 [ 154.138694][ C0] tipc_sk_filter_rcv+0x2a93/0x2c80 [ 154.144012][ C0] ? stack_trace_save+0x98/0xe0 [ 154.149073][ C0] ? __stack_depot_save+0x36/0x480 [ 154.154476][ C0] ? ____kasan_slab_free+0x132/0x180 [ 154.160314][ C0] ? __kasan_slab_free+0x11/0x20 [ 154.165351][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 154.171015][ C0] ? __kmem_cache_free+0xb7/0x1b0 [ 154.176066][ C0] ? kasan_set_track+0x60/0x70 [ 154.180861][ C0] ? kasan_set_track+0x4b/0x70 [ 154.185737][ C0] ? kasan_save_free_info+0x31/0x50 [ 154.191049][ C0] ? ____kasan_slab_free+0x132/0x180 [ 154.196420][ C0] ? __kasan_slab_free+0x11/0x20 [ 154.201571][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 154.207338][ C0] ? kmem_cache_free+0x12d/0x300 [ 154.212386][ C0] ? kfree_skbmem+0x10c/0x180 [ 154.217243][ C0] ? kfree_skb_reason+0xdc/0x230 [ 154.222340][ C0] ? tipc_msg_reverse+0x6db/0x940 [ 154.227566][ C0] ? tipc_sk_filter_rcv+0xbf3/0x2c80 [ 154.232869][ C0] ? tipc_sk_backlog_rcv+0x109/0x1f0 [ 154.238363][ C0] ? __release_sock+0x154/0x380 [ 154.243332][ C0] ? sk_setsockopt+0x1355/0x2590 [ 154.248477][ C0] ? sock_setsockopt+0x5a/0x70 [ 154.253488][ C0] ? __x64_sys_setsockopt+0xbf/0xd0 [ 154.258738][ C0] ? x64_sys_call+0x124/0x9a0 [ 154.263625][ C0] ? do_syscall_64+0x4c/0xa0 [ 154.268422][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.274648][ C0] ? tipc_sk_publish+0x440/0x440 [ 154.279888][ C0] ? __kasan_check_write+0x14/0x20 [ 154.285015][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 154.290058][ C0] tipc_sk_rcv+0x7d9/0x2cc0 [ 154.294575][ C0] ? tipc_msg_reverse+0x6db/0x940 [ 154.299623][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 154.304666][ C0] ? tipc_sk_filter_rcv+0x2a1c/0x2c80 [ 154.310241][ C0] tipc_node_xmit+0x257/0xd00 [ 154.314932][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 154.320837][ C0] tipc_node_distr_xmit+0x292/0x390 [ 154.326075][ C0] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 154.332028][ C0] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 154.337433][ C0] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 154.343373][ C0] __release_sock+0x154/0x380 [ 154.348630][ C0] sockopt_release_sock+0x95/0x1f0 [ 154.353864][ C0] sk_setsockopt+0x1355/0x2590 [ 154.358921][ C0] ? __cfi_sk_setsockopt+0x10/0x10 [ 154.364062][ C0] ? selinux_socket_setsockopt+0x21c/0x300 [ 154.370084][ C0] ? handle_mm_fault+0x17be/0x2640 [ 154.375585][ C0] ? __fget_files+0x2d5/0x330 [ 154.380389][ C0] sock_setsockopt+0x5a/0x70 [ 154.385008][ C0] __sys_setsockopt+0x270/0x4e0 [ 154.390023][ C0] ? __cfi___sys_setsockopt+0x10/0x10 [ 154.395680][ C0] ? do_user_addr_fault+0x9ac/0x1050 [ 154.401110][ C0] __x64_sys_setsockopt+0xbf/0xd0 [ 154.406599][ C0] x64_sys_call+0x124/0x9a0 [ 154.411144][ C0] do_syscall_64+0x4c/0xa0 [ 154.416278][ C0] ? clear_bhb_loop+0x30/0x80 [ 154.421490][ C0] ? clear_bhb_loop+0x30/0x80 [ 154.426467][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.432392][ C0] RIP: 0033:0x7fd024d8ebe9 [ 154.436914][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.457582][ C0] RSP: 002b:00007fd025b16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 154.466460][ C0] RAX: ffffffffffffffda RBX: 00007fd024fb6090 RCX: 00007fd024d8ebe9 [ 154.474643][ C0] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 154.483355][ C0] RBP: 00007fd024e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 154.491533][ C0] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000000 [ 154.499511][ C0] R13: 00007fd024fb6128 R14: 00007fd024fb6090 R15: 00007ffcfae2c358 [ 154.507599][ C0] [ 287.444688][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 225s! [syz.1.72:700] [ 287.453030][ C0] Modules linked in: [ 287.457035][ C0] CPU: 0 PID: 700 Comm: syz.1.72 Not tainted syzkaller #0 [ 287.464450][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.474805][ C0] RIP: 0010:__rcu_read_lock+0x5/0x50 [ 287.480145][ C0] Code: 00 00 fc ff df 0f 85 da fb ff ff e8 b1 a1 a3 ff e9 d0 fb ff ff 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 53 <65> 48 8b 1d a3 94 a5 7e 48 81 c3 74 04 00 00 48 89 d8 48 c1 e8 03 [ 287.500108][ C0] RSP: 0018:ffffc90001086628 EFLAGS: 00000246 [ 287.506619][ C0] RAX: 0000000000000000 RBX: ffff88811b6e4600 RCX: ffff88810f9b2880 [ 287.514957][ C0] RDX: 0000000000000000 RSI: 00000000f0f6a7cd RDI: ffff88811b6e4600 [ 287.523039][ C0] RBP: ffffc90001086630 R08: 0000000000000004 R09: 0000000000000003 [ 287.531221][ C0] R10: fffff52000210cd8 R11: 1ffff92000210cd8 R12: ffff88811b6e4600 [ 287.539214][ C0] R13: dffffc0000000000 R14: 0000000000000026 R15: dffffc0000000000 [ 287.547279][ C0] FS: 00007fd025b166c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 287.556582][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.563362][ C0] CR2: 00007fd025b15f98 CR3: 00000001208a7000 CR4: 00000000003506b0 [ 287.571533][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.579791][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.587861][ C0] Call Trace: [ 287.591179][ C0] [ 287.594149][ C0] tipc_sk_lookup+0xa1/0x620 [ 287.598850][ C0] ? kasan_check_range+0x13/0x290 [ 287.604244][ C0] ? __kasan_check_write+0x14/0x20 [ 287.609383][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 287.614357][ C0] ? tipc_sk_rcv+0x2cc0/0x2cc0 [ 287.619143][ C0] tipc_sk_rcv+0x419/0x2cc0 [ 287.623656][ C0] ? stack_trace_save+0x98/0xe0 [ 287.628539][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 287.634368][ C0] ? __stack_depot_save+0x445/0x480 [ 287.639698][ C0] ? kasan_set_track+0x60/0x70 [ 287.644590][ C0] ? kasan_set_track+0x4b/0x70 [ 287.649374][ C0] ? ____kasan_slab_free+0x132/0x180 [ 287.654846][ C0] ? tipc_node_xmit+0x257/0xd00 [ 287.659935][ C0] ? tipc_sk_backlog_rcv+0x16f/0x1f0 [ 287.665254][ C0] ? __release_sock+0x154/0x380 [ 287.670135][ C0] ? sockopt_release_sock+0x95/0x1f0 [ 287.675614][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 287.680758][ C0] ? do_syscall_64+0x4c/0xa0 [ 287.685386][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.691576][ C0] tipc_node_xmit+0x257/0xd00 [ 287.696365][ C0] ? kasan_quarantine_put+0x34/0x190 [ 287.701900][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 287.707124][ C0] ? ____kasan_slab_free+0x13d/0x180 [ 287.712433][ C0] ? __kasan_slab_free+0x11/0x20 [ 287.717498][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 287.723249][ C0] ? kfree_skbmem+0x10c/0x180 [ 287.728057][ C0] tipc_node_distr_xmit+0x292/0x390 [ 287.733397][ C0] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 287.739154][ C0] tipc_sk_rcv+0x1aa3/0x2cc0 [ 287.744030][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 287.749079][ C0] tipc_node_xmit+0x257/0xd00 [ 287.753767][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 287.758988][ C0] tipc_sk_push_backlog+0x4dd/0x790 [ 287.764647][ C0] tipc_sk_proto_rcv+0x98d/0x1580 [ 287.769705][ C0] ? tipc_sk_filter_rcv+0x2c80/0x2c80 [ 287.775213][ C0] ? unwind_get_return_address+0x4d/0x90 [ 287.781034][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 287.787284][ C0] ? arch_stack_walk+0x90/0x150 [ 287.792429][ C0] tipc_sk_filter_rcv+0x2a93/0x2c80 [ 287.797640][ C0] ? stack_trace_save+0x98/0xe0 [ 287.802582][ C0] ? __stack_depot_save+0x36/0x480 [ 287.807782][ C0] ? ____kasan_slab_free+0x132/0x180 [ 287.813357][ C0] ? __kasan_slab_free+0x11/0x20 [ 287.818487][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 287.824231][ C0] ? __kmem_cache_free+0xb7/0x1b0 [ 287.829465][ C0] ? kasan_set_track+0x60/0x70 [ 287.834773][ C0] ? kasan_set_track+0x4b/0x70 [ 287.839639][ C0] ? kasan_save_free_info+0x31/0x50 [ 287.844939][ C0] ? ____kasan_slab_free+0x132/0x180 [ 287.850257][ C0] ? __kasan_slab_free+0x11/0x20 [ 287.855323][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 287.861058][ C0] ? kmem_cache_free+0x12d/0x300 [ 287.866007][ C0] ? kfree_skbmem+0x10c/0x180 [ 287.870817][ C0] ? kfree_skb_reason+0xdc/0x230 [ 287.875764][ C0] ? tipc_msg_reverse+0x6db/0x940 [ 287.880909][ C0] ? tipc_sk_filter_rcv+0xbf3/0x2c80 [ 287.886380][ C0] ? tipc_sk_backlog_rcv+0x109/0x1f0 [ 287.891751][ C0] ? __release_sock+0x154/0x380 [ 287.896617][ C0] ? sk_setsockopt+0x1355/0x2590 [ 287.901565][ C0] ? sock_setsockopt+0x5a/0x70 [ 287.906337][ C0] ? __x64_sys_setsockopt+0xbf/0xd0 [ 287.911607][ C0] ? x64_sys_call+0x124/0x9a0 [ 287.916443][ C0] ? do_syscall_64+0x4c/0xa0 [ 287.921220][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.927662][ C0] ? tipc_sk_publish+0x440/0x440 [ 287.933021][ C0] ? __kasan_check_write+0x14/0x20 [ 287.938193][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 287.943157][ C0] tipc_sk_rcv+0x7d9/0x2cc0 [ 287.947680][ C0] ? tipc_msg_reverse+0x6db/0x940 [ 287.952732][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 287.957701][ C0] ? tipc_sk_filter_rcv+0x2a1c/0x2c80 [ 287.963116][ C0] tipc_node_xmit+0x257/0xd00 [ 287.967850][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 287.973074][ C0] tipc_node_distr_xmit+0x292/0x390 [ 287.978479][ C0] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 287.984314][ C0] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 287.989713][ C0] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 287.995443][ C0] __release_sock+0x154/0x380 [ 288.000222][ C0] sockopt_release_sock+0x95/0x1f0 [ 288.005427][ C0] sk_setsockopt+0x1355/0x2590 [ 288.010527][ C0] ? __cfi_sk_setsockopt+0x10/0x10 [ 288.015745][ C0] ? selinux_socket_setsockopt+0x21c/0x300 [ 288.021752][ C0] ? handle_mm_fault+0x17be/0x2640 [ 288.026905][ C0] ? __fget_files+0x2d5/0x330 [ 288.031896][ C0] sock_setsockopt+0x5a/0x70 [ 288.036512][ C0] __sys_setsockopt+0x270/0x4e0 [ 288.041474][ C0] ? __cfi___sys_setsockopt+0x10/0x10 [ 288.046861][ C0] ? do_user_addr_fault+0x9ac/0x1050 [ 288.052179][ C0] __x64_sys_setsockopt+0xbf/0xd0 [ 288.057243][ C0] x64_sys_call+0x124/0x9a0 [ 288.061777][ C0] do_syscall_64+0x4c/0xa0 [ 288.066304][ C0] ? clear_bhb_loop+0x30/0x80 [ 288.071456][ C0] ? clear_bhb_loop+0x30/0x80 [ 288.076242][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.082385][ C0] RIP: 0033:0x7fd024d8ebe9 [ 288.086971][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.107215][ C0] RSP: 002b:00007fd025b16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 288.115756][ C0] RAX: ffffffffffffffda RBX: 00007fd024fb6090 RCX: 00007fd024d8ebe9 [ 288.124034][ C0] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 288.132036][ C0] RBP: 00007fd024e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 288.140103][ C0] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000000 [ 288.148176][ C0] R13: 00007fd024fb6128 R14: 00007fd024fb6090 R15: 00007ffcfae2c358 [ 288.156177][ C0] [ 288.159662][ C0] Sending NMI from CPU 0 to CPUs 1: [ 288.165066][ C1] NMI backtrace for cpu 1 [ 288.165081][ C1] CPU: 1 PID: 692 Comm: syz.1.72 Not tainted syzkaller #0 [ 288.165100][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.165110][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x591/0xc40 [ 288.165142][ C1] Code: 0f 85 33 01 00 00 41 c6 45 00 00 41 0f b6 04 17 84 c0 0f 85 46 01 00 00 48 8b 44 24 10 c6 00 01 41 bd 00 80 ff ff eb 07 f3 90 <41> ff c5 74 5b 41 0f b6 04 16 84 c0 75 35 80 3b 00 75 eb 48 89 df [ 288.165156][ C1] RSP: 0018:ffffc90001077720 EFLAGS: 00000206 [ 288.165172][ C1] RAX: 0000000000000000 RBX: ffff888121628598 RCX: ffffffff84f4be62 [ 288.165184][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888121628598 [ 288.165197][ C1] RBP: ffffc90001077810 R08: dffffc0000000000 R09: ffffed10242c50b4 [ 288.165209][ C1] R10: ffffed10242c50b4 R11: 1ffff110242c50b3 R12: 1ffff1103ee20001 [ 288.165222][ C1] R13: 00000000ffffad9f R14: 1ffff110242c50b3 R15: 1ffff110242c50b3 [ 288.165235][ C1] FS: 00007fd025b376c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 288.165251][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.165263][ C1] CR2: 00007f2731787cc0 CR3: 00000001208a7000 CR4: 00000000003506a0 [ 288.165278][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.165288][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 288.165298][ C1] Call Trace: [ 288.165304][ C1] [ 288.165313][ C1] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 288.165338][ C1] ? avc_has_perm+0x158/0x240 [ 288.165364][ C1] queued_spin_lock_slowpath+0x47/0x50 [ 288.165391][ C1] _raw_spin_lock_bh+0xd8/0xe0 [ 288.165411][ C1] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 288.165433][ C1] lock_sock_nested+0x92/0x280 [ 288.165459][ C1] ? __cfi_lock_sock_nested+0x10/0x10 [ 288.165483][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 288.165504][ C1] ? _raw_spin_unlock_bh+0x50/0x60 [ 288.165525][ C1] tipc_sendstream+0x47/0x70 [ 288.165545][ C1] ? __cfi_tipc_sendstream+0x10/0x10 [ 288.165565][ C1] ____sys_sendmsg+0x5a9/0x990 [ 288.165589][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 288.165612][ C1] ? import_iovec+0x7c/0xb0 [ 288.165637][ C1] ___sys_sendmsg+0x21c/0x290 [ 288.165659][ C1] ? __sys_sendmsg+0x270/0x270 [ 288.165688][ C1] ? __fdget+0x19c/0x220 [ 288.165705][ C1] __x64_sys_sendmsg+0x1f0/0x2c0 [ 288.165727][ C1] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 288.165753][ C1] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 288.165776][ C1] x64_sys_call+0x171/0x9a0 [ 288.165796][ C1] do_syscall_64+0x4c/0xa0 [ 288.165816][ C1] ? clear_bhb_loop+0x30/0x80 [ 288.165840][ C1] ? clear_bhb_loop+0x30/0x80 [ 288.165865][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.165895][ C1] RIP: 0033:0x7fd024d8ebe9 [ 288.165909][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.165922][ C1] RSP: 002b:00007fd025b37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.165938][ C1] RAX: ffffffffffffffda RBX: 00007fd024fb5fa0 RCX: 00007fd024d8ebe9 [ 288.165951][ C1] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 288.165961][ C1] RBP: 00007fd024e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 288.165972][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.165982][ C1] R13: 00007fd024fb6038 R14: 00007fd024fb5fa0 R15: 00007ffcfae2c358 [ 288.165997][ C1]