Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. 2026/04/16 15:02:02 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 51.577545][ T28] audit: type=1400 audit(1776351723.857:106): avc: denied { unlink } for pid=388 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 51.654205][ T388] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.425238][ T28] audit: type=1401 audit(1776351724.697:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 52.756257][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.763397][ T416] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.771557][ T416] device bridge_slave_0 entered promiscuous mode [ 52.779314][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.786443][ T416] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.794054][ T416] device bridge_slave_1 entered promiscuous mode [ 52.841748][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.848863][ T416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.856166][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.863411][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.884795][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.892159][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.900436][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.908023][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.924682][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.932947][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.940390][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.948244][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.956546][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.963663][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.975267][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.983708][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.998500][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.010013][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.019142][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.027716][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.036205][ T416] device veth0_vlan entered promiscuous mode [ 53.047002][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.056404][ T416] device veth1_macvtap entered promiscuous mode [ 53.066122][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.076449][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.454844][ T28] audit: type=1400 audit(1776351725.727:108): avc: denied { create } for pid=444 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 2026/04/16 15:02:05 executed programs: 0 [ 53.754508][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.761876][ T453] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.769518][ T453] device bridge_slave_0 entered promiscuous mode [ 53.776507][ T453] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.783641][ T453] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.791992][ T453] device bridge_slave_1 entered promiscuous mode [ 53.866565][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.874234][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.889206][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.898006][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.906340][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.913469][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.921813][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.930561][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.939137][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.947970][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.955033][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.972498][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.982239][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.996742][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.011117][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.019588][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.027320][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.035725][ T453] device veth0_vlan entered promiscuous mode [ 54.051793][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.062010][ T453] device veth1_macvtap entered promiscuous mode [ 54.071875][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.080328][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.090490][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.120276][ T28] audit: type=1400 audit(1776351726.397:109): avc: denied { create } for pid=458 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.139697][ T28] audit: type=1400 audit(1776351726.397:110): avc: denied { write } for pid=458 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.176472][ T28] audit: type=1400 audit(1776351726.447:111): avc: denied { setopt } for pid=458 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.256844][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 154.263735][ C0] rcu: 0-...!: (10001 ticks this GP) idle=f8e4/1/0x4000000000000000 softirq=3834/3834 fqs=0 [ 154.273920][ C0] (t=10002 jiffies g=2489 q=199 ncpus=2) [ 154.279652][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10002 jiffies! g2489 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 154.292179][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=927 [ 154.300175][ C0] rcu: rcu_preempt kthread starved for 10005 jiffies! g2489 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 154.311567][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 154.321673][ C0] rcu: RCU grace-period kthread stack dump: [ 154.327697][ C0] task:rcu_preempt state:I stack:28496 pid:14 ppid:2 flags:0x00004000 [ 154.337033][ C0] Call Trace: [ 154.340597][ C0] [ 154.343792][ C0] __schedule+0xba6/0x1500 [ 154.348350][ C0] ? release_firmware_map_entry+0x190/0x190 [ 154.354363][ C0] schedule+0xbd/0x170 [ 154.358461][ C0] schedule_timeout+0x159/0x340 [ 154.363572][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 154.369339][ C0] ? __cfi_process_timeout+0x10/0x10 [ 154.374721][ C0] ? prepare_to_swait_event+0x308/0x320 [ 154.380302][ C0] rcu_gp_fqs_loop+0x2e9/0x10c0 [ 154.385185][ C0] ? _raw_spin_unlock_irq+0x4d/0x70 [ 154.390411][ C0] ? rcu_gp_init+0xf30/0xf30 [ 154.395022][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 154.400854][ C0] ? finish_swait+0x17d/0x1b0 [ 154.405663][ C0] rcu_gp_kthread+0x99/0x390 [ 154.410283][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 154.415609][ C0] ? set_cpus_allowed_ptr+0x88/0xd0 [ 154.420881][ C0] ? __kasan_check_read+0x11/0x20 [ 154.425936][ C0] ? __kthread_parkme+0x142/0x180 [ 154.430986][ C0] kthread+0x281/0x320 [ 154.435094][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 154.440571][ C0] ? __cfi_kthread+0x10/0x10 [ 154.445297][ C0] ret_from_fork+0x1f/0x30 [ 154.449737][ C0] [ 154.452777][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 154.459122][ C0] CPU: 0 PID: 462 Comm: syz.2.18 Not tainted syzkaller #0 [ 154.466285][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 154.476340][ C0] RIP: 0010:tipc_sk_rcv+0x2cd/0x2c10 [ 154.481651][ C0] Code: 00 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 e6 11 dd fc 4d 8b 3f 49 83 c7 14 4c 89 f8 48 c1 e8 03 42 0f b6 04 28 <84> c0 0f 85 e2 1a 00 00 45 8b 3f 41 0f cf 45 85 f6 0f 84 e9 00 00 [ 154.501319][ C0] RSP: 0018:ffffc90000b26980 EFLAGS: 00000a07 [ 154.507447][ C0] RAX: 0000000000000000 RBX: ffff88811944d600 RCX: 0000000000000000 [ 154.515530][ C0] RDX: ffff88811b7e1440 RSI: 000000002e496794 RDI: 0000000000000000 [ 154.523516][ C0] RBP: ffffc90000b26c10 R08: 0000000000000003 R09: 0000000000000004 [ 154.531586][ C0] R10: dffffc0000000000 R11: fffff52000164d20 R12: ffff888112972300 [ 154.539676][ C0] R13: dffffc0000000000 R14: 000000002e496794 R15: ffff88811d39e0c4 [ 154.547790][ C0] FS: 00007fcf744346c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 154.556954][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.563607][ C0] CR2: 00007fcf74412ff8 CR3: 000000011476d000 CR4: 00000000003506b0 [ 154.571907][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 154.580696][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 154.588717][ C0] Call Trace: [ 154.592078][ C0] [ 154.595228][ C0] ? __stack_depot_save+0x445/0x480 [ 154.600462][ C0] ? kasan_set_track+0x60/0x70 [ 154.605257][ C0] ? kasan_set_track+0x4b/0x70 [ 154.610124][ C0] ? kasan_save_free_info+0x31/0x50 [ 154.615451][ C0] ? ____kasan_slab_free+0x132/0x180 [ 154.620930][ C0] ? __kasan_slab_free+0x11/0x20 [ 154.625899][ C0] ? kmem_cache_free+0x12d/0x300 [ 154.630854][ C0] ? kfree_skbmem+0x10c/0x180 [ 154.635641][ C0] ? tipc_msg_reverse+0x6db/0x940 [ 154.640950][ C0] ? tipc_sk_rcv+0x1ce3/0x2c10 [ 154.645875][ C0] ? __release_sock+0x154/0x380 [ 154.650747][ C0] ? __fput+0x1fc/0x8f0 [ 154.655015][ C0] ? syscall_exit_to_user_mode+0x1a/0x30 [ 154.660764][ C0] ? do_syscall_64+0x58/0xa0 [ 154.665389][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.671857][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 154.676943][ C0] tipc_node_xmit+0x26c/0xd90 [ 154.681666][ C0] ? kmem_cache_free+0x12d/0x300 [ 154.686722][ C0] ? ____kasan_slab_free+0x13d/0x180 [ 154.692025][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 154.697439][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 154.703172][ C0] ? kmem_cache_free+0x12d/0x300 [ 154.708434][ C0] tipc_node_xmit_skb+0xf7/0x150 [ 154.713422][ C0] ? kfree_skb_reason+0xdc/0x230 [ 154.718387][ C0] ? __cfi_tipc_node_xmit_skb+0x10/0x10 [ 154.723975][ C0] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 154.729458][ C0] tipc_sk_rcv+0x1d63/0x2c10 [ 154.734189][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 154.739624][ C0] ? sched_clock+0x9/0x10 [ 154.744004][ C0] ? sched_clock_cpu+0x6e/0x260 [ 154.748868][ C0] ? __reset_page_owner+0x190/0x190 [ 154.754377][ C0] ? __alloc_pages+0x1fa/0x610 [ 154.759161][ C0] ? alloc_slab_page+0x6e/0xf0 [ 154.763948][ C0] ? ___slab_alloc+0x6bd/0xb20 [ 154.768808][ C0] ? __slab_alloc+0x5e/0xa0 [ 154.773330][ C0] ? __set_page_owner_handle+0x3c7/0x410 [ 154.779244][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 154.784271][ C0] tipc_node_xmit+0x26c/0xd90 [ 154.788985][ C0] ? is_bpf_text_address+0x177/0x190 [ 154.794412][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 154.799666][ C0] ? kernel_text_address+0xa0/0xd0 [ 154.804892][ C0] ? __kernel_text_address+0xd/0x30 [ 154.810246][ C0] ? __kasan_check_write+0x14/0x20 [ 154.815405][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 154.820910][ C0] tipc_sk_filter_rcv+0x158e/0x2cf0 [ 154.826149][ C0] ? tipc_sk_publish+0x470/0x470 [ 154.831201][ C0] ? __kasan_check_write+0x14/0x20 [ 154.836424][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 154.841497][ C0] tipc_sk_rcv+0x7ed/0x2c10 [ 154.846122][ C0] ? kmem_cache_free+0x12d/0x300 [ 154.851104][ C0] ? tipc_msg_reverse+0x6db/0x940 [ 154.856341][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 154.866459][ C0] ? tipc_sk_filter_rcv+0x2a82/0x2cf0 [ 154.872054][ C0] tipc_node_xmit+0x26c/0xd90 [ 154.876768][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 154.882024][ C0] tipc_node_distr_xmit+0x2a3/0x3b0 [ 154.887247][ C0] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 154.892981][ C0] tipc_sk_backlog_rcv+0x17d/0x210 [ 154.898121][ C0] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 154.903827][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 154.909395][ C0] __release_sock+0x154/0x380 [ 154.914093][ C0] release_sock+0x60/0x1c0 [ 154.918520][ C0] tipc_release+0xd4a/0x1670 [ 154.923166][ C0] ? __cfi_tipc_release+0x10/0x10 [ 154.928454][ C0] sock_close+0xf1/0x290 [ 154.932775][ C0] ? __cfi_sock_close+0x10/0x10 [ 154.937781][ C0] __fput+0x1fc/0x8f0 [ 154.941817][ C0] ____fput+0x15/0x20 [ 154.946086][ C0] task_work_run+0x1e1/0x250 [ 154.950797][ C0] ? __cfi_task_work_run+0x10/0x10 [ 154.955960][ C0] ? __kasan_check_write+0x14/0x20 [ 154.961095][ C0] exit_to_user_mode_loop+0x9b/0xb0 [ 154.966584][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 154.972106][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 154.978309][ C0] do_syscall_64+0x58/0xa0 [ 154.982837][ C0] ? clear_bhb_loop+0x30/0x80 [ 154.987523][ C0] ? clear_bhb_loop+0x30/0x80 [ 154.992244][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.998189][ C0] RIP: 0033:0x7fcf7359acb9 [ 155.002644][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.022389][ C0] RSP: 002b:00007fcf74434028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.030926][ C0] RAX: 00000000000203a0 RBX: 00007fcf73815fa0 RCX: 00007fcf7359acb9 [ 155.039011][ C0] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 155.047007][ C0] RBP: 00007fcf73608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 155.054994][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.063095][ C0] R13: 00007fcf73816038 R14: 00007fcf73815fa0 R15: 00007ffe0fa17c08 [ 155.071097][ C0] [ 155.074220][ C0] CPU: 0 PID: 462 Comm: syz.2.18 Not tainted syzkaller #0 [ 155.081605][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 155.091794][ C0] RIP: 0010:tipc_sk_rcv+0x2cd/0x2c10 [ 155.097297][ C0] Code: 00 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 e6 11 dd fc 4d 8b 3f 49 83 c7 14 4c 89 f8 48 c1 e8 03 42 0f b6 04 28 <84> c0 0f 85 e2 1a 00 00 45 8b 3f 41 0f cf 45 85 f6 0f 84 e9 00 00 [ 155.117358][ C0] RSP: 0018:ffffc90000b26980 EFLAGS: 00000a07 [ 155.123457][ C0] RAX: 0000000000000000 RBX: ffff88811944d600 RCX: 0000000000000000 [ 155.131524][ C0] RDX: ffff88811b7e1440 RSI: 000000002e496794 RDI: 0000000000000000 [ 155.139524][ C0] RBP: ffffc90000b26c10 R08: 0000000000000003 R09: 0000000000000004 [ 155.147789][ C0] R10: dffffc0000000000 R11: fffff52000164d20 R12: ffff888112972300 [ 155.155995][ C0] R13: dffffc0000000000 R14: 000000002e496794 R15: ffff88811d39e0c4 [ 155.164063][ C0] FS: 00007fcf744346c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 155.173002][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.179870][ C0] CR2: 00007fcf74412ff8 CR3: 000000011476d000 CR4: 00000000003506b0 [ 155.187873][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 155.196033][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 155.204145][ C0] Call Trace: [ 155.207555][ C0] [ 155.210513][ C0] ? __stack_depot_save+0x445/0x480 [ 155.215749][ C0] ? kasan_set_track+0x60/0x70 [ 155.220875][ C0] ? kasan_set_track+0x4b/0x70 [ 155.225678][ C0] ? kasan_save_free_info+0x31/0x50 [ 155.231001][ C0] ? ____kasan_slab_free+0x132/0x180 [ 155.236512][ C0] ? __kasan_slab_free+0x11/0x20 [ 155.241562][ C0] ? kmem_cache_free+0x12d/0x300 [ 155.246610][ C0] ? kfree_skbmem+0x10c/0x180 [ 155.251326][ C0] ? tipc_msg_reverse+0x6db/0x940 [ 155.256839][ C0] ? tipc_sk_rcv+0x1ce3/0x2c10 [ 155.261814][ C0] ? __release_sock+0x154/0x380 [ 155.266676][ C0] ? __fput+0x1fc/0x8f0 [ 155.270928][ C0] ? syscall_exit_to_user_mode+0x1a/0x30 [ 155.276602][ C0] ? do_syscall_64+0x58/0xa0 [ 155.281288][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.287371][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 155.292427][ C0] tipc_node_xmit+0x26c/0xd90 [ 155.297222][ C0] ? kmem_cache_free+0x12d/0x300 [ 155.302288][ C0] ? ____kasan_slab_free+0x13d/0x180 [ 155.307769][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 155.313065][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 155.318624][ C0] ? kmem_cache_free+0x12d/0x300 [ 155.323689][ C0] tipc_node_xmit_skb+0xf7/0x150 [ 155.328635][ C0] ? kfree_skb_reason+0xdc/0x230 [ 155.333681][ C0] ? __cfi_tipc_node_xmit_skb+0x10/0x10 [ 155.339338][ C0] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 155.345185][ C0] tipc_sk_rcv+0x1d63/0x2c10 [ 155.349792][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 155.355118][ C0] ? sched_clock+0x9/0x10 [ 155.359467][ C0] ? sched_clock_cpu+0x6e/0x260 [ 155.364355][ C0] ? __reset_page_owner+0x190/0x190 [ 155.369736][ C0] ? __alloc_pages+0x1fa/0x610 [ 155.374603][ C0] ? alloc_slab_page+0x6e/0xf0 [ 155.379391][ C0] ? ___slab_alloc+0x6bd/0xb20 [ 155.384172][ C0] ? __slab_alloc+0x5e/0xa0 [ 155.388683][ C0] ? __set_page_owner_handle+0x3c7/0x410 [ 155.394349][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 155.399305][ C0] tipc_node_xmit+0x26c/0xd90 [ 155.404084][ C0] ? is_bpf_text_address+0x177/0x190 [ 155.409384][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 155.414869][ C0] ? kernel_text_address+0xa0/0xd0 [ 155.420295][ C0] ? __kernel_text_address+0xd/0x30 [ 155.425517][ C0] ? __kasan_check_write+0x14/0x20 [ 155.430675][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 155.436182][ C0] tipc_sk_filter_rcv+0x158e/0x2cf0 [ 155.441426][ C0] ? tipc_sk_publish+0x470/0x470 [ 155.446397][ C0] ? __kasan_check_write+0x14/0x20 [ 155.451622][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 155.456705][ C0] tipc_sk_rcv+0x7ed/0x2c10 [ 155.461231][ C0] ? kmem_cache_free+0x12d/0x300 [ 155.466398][ C0] ? tipc_msg_reverse+0x6db/0x940 [ 155.471494][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 155.476625][ C0] ? tipc_sk_filter_rcv+0x2a82/0x2cf0 [ 155.482111][ C0] tipc_node_xmit+0x26c/0xd90 [ 155.486866][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 155.492124][ C0] tipc_node_distr_xmit+0x2a3/0x3b0 [ 155.497375][ C0] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 155.503313][ C0] tipc_sk_backlog_rcv+0x17d/0x210 [ 155.508543][ C0] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 155.514238][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 155.519853][ C0] __release_sock+0x154/0x380 [ 155.524600][ C0] release_sock+0x60/0x1c0 [ 155.529032][ C0] tipc_release+0xd4a/0x1670 [ 155.533653][ C0] ? __cfi_tipc_release+0x10/0x10 [ 155.538818][ C0] sock_close+0xf1/0x290 [ 155.543190][ C0] ? __cfi_sock_close+0x10/0x10 [ 155.548075][ C0] __fput+0x1fc/0x8f0 [ 155.552320][ C0] ____fput+0x15/0x20 [ 155.556326][ C0] task_work_run+0x1e1/0x250 [ 155.560931][ C0] ? __cfi_task_work_run+0x10/0x10 [ 155.566062][ C0] ? __kasan_check_write+0x14/0x20 [ 155.571181][ C0] exit_to_user_mode_loop+0x9b/0xb0 [ 155.576430][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 155.581918][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 155.587507][ C0] do_syscall_64+0x58/0xa0 [ 155.591963][ C0] ? clear_bhb_loop+0x30/0x80 [ 155.596693][ C0] ? clear_bhb_loop+0x30/0x80 [ 155.601419][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.607437][ C0] RIP: 0033:0x7fcf7359acb9 [ 155.611922][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.631819][ C0] RSP: 002b:00007fcf74434028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.640268][ C0] RAX: 00000000000203a0 RBX: 00007fcf73815fa0 RCX: 00007fcf7359acb9 [ 155.648369][ C0] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 155.656504][ C0] RBP: 00007fcf73608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 155.664616][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.673155][ C0] R13: 00007fcf73816038 R14: 00007fcf73815fa0 R15: 00007ffe0fa17c08 [ 155.681796][ C0] [ 199.388159][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 143s! [syz.2.18:461] [ 199.396510][ C1] Modules linked in: [ 199.400558][ C1] CPU: 1 PID: 461 Comm: syz.2.18 Not tainted syzkaller #0 [ 199.407787][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 199.417974][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x591/0xc40 [ 199.424895][ C1] Code: 0f 85 33 01 00 00 41 c6 45 00 00 41 0f b6 04 17 84 c0 0f 85 46 01 00 00 48 8b 44 24 10 c6 00 01 41 bd 00 80 ff ff eb 07 f3 90 <41> ff c5 74 5b 41 0f b6 04 16 84 c0 75 35 80 3b 00 75 eb 48 89 df [ 199.445086][ C1] RSP: 0018:ffffc90000ae7940 EFLAGS: 00000206 [ 199.451570][ C1] RAX: 0000000000000000 RBX: ffff888112972398 RCX: ffffffff850148a2 [ 199.459676][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888112972398 [ 199.467799][ C1] RBP: ffffc90000ae7a30 R08: ffff888112972398 R09: 1ffff1102252e473 [ 199.476241][ C1] R10: dffffc0000000000 R11: ffffed102252e474 R12: 1ffff1103ede0001 [ 199.484351][ C1] R13: 00000000ffffda03 R14: 1ffff1102252e473 R15: 1ffff1102252e473 [ 199.492542][ C1] FS: 000055556ccec500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 199.501782][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.508433][ C1] CR2: 00007fcf735e8400 CR3: 000000011476d000 CR4: 00000000003506a0 [ 199.516436][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.524582][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.532943][ C1] Call Trace: [ 199.536516][ C1] [ 199.539502][ C1] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 199.546150][ C1] ? stack_trace_save+0xa6/0xf0 [ 199.551051][ C1] ? __stack_depot_save+0x36/0x480 [ 199.556245][ C1] queued_spin_lock_slowpath+0x47/0x50 [ 199.562026][ C1] _raw_spin_lock_bh+0xe4/0xf0 [ 199.567052][ C1] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 199.572587][ C1] ? __kasan_record_aux_stack+0xb6/0xc0 [ 199.578544][ C1] ? task_work_add+0x7f/0x330 [ 199.583261][ C1] ? fput+0xe1/0x1a0 [ 199.587190][ C1] ? filp_close+0x111/0x160 [ 199.591888][ C1] ? __close_range+0x300/0x4f0 [ 199.596697][ C1] ? x64_sys_call+0x43b/0x9a0 [ 199.601721][ C1] ? do_syscall_64+0x4c/0xa0 [ 199.606412][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.612542][ C1] lock_sock_nested+0x90/0x2a0 [ 199.617555][ C1] ? __cfi_lock_sock_nested+0x10/0x10 [ 199.623213][ C1] ? __cfi_locks_remove_file+0x10/0x10 [ 199.628846][ C1] tipc_release+0xb2/0x1670 [ 199.633595][ C1] ? rwsem_write_trylock+0x136/0x300 [ 199.639302][ C1] ? __cfi_tipc_release+0x10/0x10 [ 199.644460][ C1] sock_close+0xf1/0x290 [ 199.648790][ C1] ? __cfi_sock_close+0x10/0x10 [ 199.653682][ C1] __fput+0x1fc/0x8f0 [ 199.657737][ C1] ____fput+0x15/0x20 [ 199.661856][ C1] task_work_run+0x1e1/0x250 [ 199.666529][ C1] ? __cfi_task_work_run+0x10/0x10 [ 199.671845][ C1] ? __cfi___close_range+0x10/0x10 [ 199.677170][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 199.682524][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 199.688509][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 199.694273][ C1] do_syscall_64+0x58/0xa0 [ 199.698938][ C1] ? clear_bhb_loop+0x30/0x80 [ 199.703951][ C1] ? clear_bhb_loop+0x30/0x80 [ 199.709261][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.715200][ C1] RIP: 0033:0x7fcf7359acb9 [ 199.719860][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.740199][ C1] RSP: 002b:00007ffe0fa17d68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 199.748775][ C1] RAX: 0000000000000000 RBX: 00007fcf73817da0 RCX: 00007fcf7359acb9 [ 199.756962][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 199.764984][ C1] RBP: 00007fcf73817da0 R08: 0000000000000006 R09: 0000000000000000 [ 199.773172][ C1] R10: 00007fcf73817cb0 R11: 0000000000000246 R12: 000000000000d6de [ 199.781625][ C1] R13: 00007fcf7381609c R14: 000000000000d403 R15: 00007fcf73816090 [ 199.791103][ C1] [ 199.794704][ C1] Sending NMI from CPU 1 to CPUs 0: [ 199.799956][ C0] NMI backtrace for cpu 0 [ 199.799971][ C0] CPU: 0 PID: 462 Comm: syz.2.18 Not tainted syzkaller #0 [ 199.799987][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 199.799997][ C0] RIP: 0010:tipc_node_distr_xmit+0xa2/0x3b0 [ 199.800024][ C0] Code: 99 98 fc 4c 89 f8 48 c1 e8 03 48 89 44 24 38 42 80 3c 30 00 74 08 4c 89 ff e8 fa f5 dd fc 4d 8b 2f 4d 39 fd 0f 95 c0 4d 85 ed <0f> 95 c1 84 c8 75 0a e8 72 99 98 fc e9 b7 02 00 00 49 8d 4f 10 48 [ 199.800039][ C0] RSP: 0018:ffffc90000b26860 EFLAGS: 00000282 [ 199.800055][ C0] RAX: 1ffff92000164d00 RBX: 1ffff92000164d18 RCX: ffff88811b7e1440 [ 199.800068][ C0] RDX: 0000000000000000 RSI: ffffc90000b26b40 RDI: ffff88811b580000 [ 199.800080][ C0] RBP: ffffc90000b26970 R08: ffff88811297239b R09: 1ffff1102252e473 [ 199.800098][ C0] R10: dffffc0000000000 R11: ffffed102252e474 R12: ffff888112972300 [ 199.800111][ C0] R13: ffffc90000b26b40 R14: dffffc0000000000 R15: ffffc90000b26b40 [ 199.800124][ C0] FS: 00007fcf744346c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 199.800140][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.800151][ C0] CR2: 00007fcf74412ff8 CR3: 000000011476d000 CR4: 00000000003506b0 [ 199.800167][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.800177][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.800187][ C0] Call Trace: [ 199.800193][ C0] [ 199.800199][ C0] ? tipc_sk_lookup+0x557/0x620 [ 199.800222][ C0] ? tipc_sk_rcv+0x43e/0x2c10 [ 199.800243][ C0] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 199.800261][ C0] ? _raw_spin_trylock_bh+0xe5/0x150 [ 199.800287][ C0] ? __cfi__raw_spin_trylock_bh+0x10/0x10 [ 199.800312][ C0] ? kasan_check_range+0x1c2/0x2a0 [ 199.800336][ C0] tipc_sk_rcv+0x1a14/0x2c10 [ 199.800357][ C0] ? __stack_depot_save+0x445/0x480 [ 199.800377][ C0] ? kasan_set_track+0x60/0x70 [ 199.800395][ C0] ? kasan_set_track+0x4b/0x70 [ 199.800413][ C0] ? kasan_save_free_info+0x31/0x50 [ 199.800438][ C0] ? ____kasan_slab_free+0x132/0x180 [ 199.800458][ C0] ? __kasan_slab_free+0x11/0x20 [ 199.800477][ C0] ? kmem_cache_free+0x12d/0x300 [ 199.800499][ C0] ? kfree_skbmem+0x10c/0x180 [ 199.800521][ C0] ? tipc_msg_reverse+0x6db/0x940 [ 199.800541][ C0] ? tipc_sk_rcv+0x1ce3/0x2c10 [ 199.800562][ C0] ? __release_sock+0x154/0x380 [ 199.800577][ C0] ? __fput+0x1fc/0x8f0 [ 199.800597][ C0] ? syscall_exit_to_user_mode+0x1a/0x30 [ 199.800619][ C0] ? do_syscall_64+0x58/0xa0 [ 199.800643][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.800662][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 199.800687][ C0] tipc_node_xmit+0x26c/0xd90 [ 199.800705][ C0] ? kmem_cache_free+0x12d/0x300 [ 199.800726][ C0] ? ____kasan_slab_free+0x13d/0x180 [ 199.800747][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 199.800765][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 199.800791][ C0] ? kmem_cache_free+0x12d/0x300 [ 199.800815][ C0] tipc_node_xmit_skb+0xf7/0x150 [ 199.800833][ C0] ? kfree_skb_reason+0xdc/0x230 [ 199.800855][ C0] ? __cfi_tipc_node_xmit_skb+0x10/0x10 [ 199.800876][ C0] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 199.800898][ C0] tipc_sk_rcv+0x1d63/0x2c10 [ 199.800920][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 199.800945][ C0] ? sched_clock+0x9/0x10 [ 199.800965][ C0] ? sched_clock_cpu+0x6e/0x260 [ 199.800985][ C0] ? __reset_page_owner+0x190/0x190 [ 199.801001][ C0] ? __alloc_pages+0x1fa/0x610 [ 199.801024][ C0] ? alloc_slab_page+0x6e/0xf0 [ 199.801048][ C0] ? ___slab_alloc+0x6bd/0xb20 [ 199.801069][ C0] ? __slab_alloc+0x5e/0xa0 [ 199.801100][ C0] ? __set_page_owner_handle+0x3c7/0x410 [ 199.801119][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 199.801144][ C0] tipc_node_xmit+0x26c/0xd90 [ 199.801163][ C0] ? is_bpf_text_address+0x177/0x190 [ 199.801186][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 199.801204][ C0] ? kernel_text_address+0xa0/0xd0 [ 199.801226][ C0] ? __kernel_text_address+0xd/0x30 [ 199.801247][ C0] ? __kasan_check_write+0x14/0x20 [ 199.801263][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 199.801290][ C0] tipc_sk_filter_rcv+0x158e/0x2cf0 [ 199.801322][ C0] ? tipc_sk_publish+0x470/0x470 [ 199.801346][ C0] ? __kasan_check_write+0x14/0x20 [ 199.801361][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 199.801388][ C0] tipc_sk_rcv+0x7ed/0x2c10 [ 199.801412][ C0] ? kmem_cache_free+0x12d/0x300 [ 199.801436][ C0] ? tipc_msg_reverse+0x6db/0x940 [ 199.801456][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 199.801479][ C0] ? tipc_sk_filter_rcv+0x2a82/0x2cf0 [ 199.801504][ C0] tipc_node_xmit+0x26c/0xd90 [ 199.801524][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 199.801546][ C0] tipc_node_distr_xmit+0x2a3/0x3b0 [ 199.801566][ C0] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 199.801588][ C0] tipc_sk_backlog_rcv+0x17d/0x210 [ 199.801613][ C0] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 199.801636][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 199.801664][ C0] __release_sock+0x154/0x380 [ 199.801681][ C0] release_sock+0x60/0x1c0 [ 199.801703][ C0] tipc_release+0xd4a/0x1670 [ 199.801728][ C0] ? __cfi_tipc_release+0x10/0x10 [ 199.801753][ C0] sock_close+0xf1/0x290 [ 199.801771][ C0] ? __cfi_sock_close+0x10/0x10 [ 199.801789][ C0] __fput+0x1fc/0x8f0 [ 199.801811][ C0] ____fput+0x15/0x20 [ 199.801829][ C0] task_work_run+0x1e1/0x250 [ 199.801851][ C0] ? __cfi_task_work_run+0x10/0x10 [ 199.801872][ C0] ? __kasan_check_write+0x14/0x20 [ 199.801888][ C0] exit_to_user_mode_loop+0x9b/0xb0 [ 199.801907][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 199.801925][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 199.801946][ C0] do_syscall_64+0x58/0xa0 [ 199.801969][ C0] ? clear_bhb_loop+0x30/0x80 [ 199.801988][ C0] ? clear_bhb_loop+0x30/0x80 [ 199.802007][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.802025][ C0] RIP: 0033:0x7fcf7359acb9 [ 199.802038][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.802052][ C0] RSP: 002b:00007fcf74434028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.802068][ C0] RAX: 00000000000203a0 RBX: 00007fcf73815fa0 RCX: 00007fcf7359acb9 [ 199.802080][ C0] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 199.802095][ C0] RBP: 00007fcf73608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 199.802106][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.802116][ C0] R13: 00007fcf73816038 R14: 00007fcf73815fa0 R15: 00007ffe0fa17c08 [ 199.802131][ C0]