Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts.
2025/11/27 17:30:55 parsed 1 programs
[ 48.399166][ T28] audit: type=1400 audit(1764264656.884:106): avc: denied { unlink } for pid=396 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 48.464770][ T396] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 49.261886][ T417] bridge0: port 1(bridge_slave_0) entered blocking state
[ 49.268981][ T417] bridge0: port 1(bridge_slave_0) entered disabled state
[ 49.276366][ T417] device bridge_slave_0 entered promiscuous mode
[ 49.283278][ T417] bridge0: port 2(bridge_slave_1) entered blocking state
[ 49.290352][ T417] bridge0: port 2(bridge_slave_1) entered disabled state
[ 49.297836][ T417] device bridge_slave_1 entered promiscuous mode
[ 49.350524][ T417] bridge0: port 2(bridge_slave_1) entered blocking state
[ 49.357672][ T417] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 49.365086][ T417] bridge0: port 1(bridge_slave_0) entered blocking state
[ 49.372320][ T417] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 49.393753][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 49.401512][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 49.409032][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 49.418142][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 49.426535][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 49.433604][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 49.442572][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 49.451014][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 49.458068][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 49.471923][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 49.481647][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 49.496097][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 49.507853][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 49.516252][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 49.523926][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 49.533805][ T417] device veth0_vlan entered promiscuous mode
[ 49.544720][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 49.554256][ T417] device veth1_macvtap entered promiscuous mode
[ 49.564295][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 49.577610][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 49.691079][ T28] audit: type=1401 audit(1764264658.174:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 49.950159][ T28] audit: type=1400 audit(1764264658.434:108): avc: denied { create } for pid=451 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
2025/11/27 17:30:58 executed programs: 0
[ 50.300635][ T464] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.307797][ T464] bridge0: port 1(bridge_slave_0) entered disabled state
[ 50.315837][ T464] device bridge_slave_0 entered promiscuous mode
[ 50.326891][ T464] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.334000][ T464] bridge0: port 2(bridge_slave_1) entered disabled state
[ 50.341608][ T464] device bridge_slave_1 entered promiscuous mode
[ 50.398032][ T464] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.405225][ T464] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 50.412696][ T464] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.419780][ T464] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 50.430108][ T310] device bridge_slave_1 left promiscuous mode
[ 50.436260][ T310] bridge0: port 2(bridge_slave_1) entered disabled state
[ 50.443950][ T310] device bridge_slave_0 left promiscuous mode
[ 50.450483][ T310] bridge0: port 1(bridge_slave_0) entered disabled state
[ 50.458468][ T310] device veth1_macvtap left promiscuous mode
[ 50.464685][ T310] device veth0_vlan left promiscuous mode
[ 50.562591][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 50.570927][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 50.578132][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 50.587542][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 50.596096][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.603174][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 50.612519][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 50.620874][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.627900][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 50.640705][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 50.650181][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 50.665788][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 50.677456][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 50.685783][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 50.693755][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 50.702476][ T464] device veth0_vlan entered promiscuous mode
[ 50.713569][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 50.722907][ T464] device veth1_macvtap entered promiscuous mode
[ 50.732858][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 50.744478][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 50.775862][ T28] audit: type=1400 audit(1764264659.254:109): avc: denied { create } for pid=474 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 50.796160][ T28] audit: type=1400 audit(1764264659.254:110): avc: denied { write } for pid=474 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 50.827342][ T28] audit: type=1400 audit(1764264659.304:111): avc: denied { setopt } for pid=474 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 150.918642][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 150.925695][ C0] (detected by 0, t=10002 jiffies, g=2477, q=77 ncpus=2)
[ 150.932803][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4294952295-4294942293), jiffies_till_next_fqs=1, root ->qsmask 0x0
[ 150.946714][ C0] rcu: rcu_preempt kthread starved for 10002 jiffies! g2477 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 150.957910][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 150.967885][ C0] rcu: RCU grace-period kthread stack dump:
[ 150.973793][ C0] task:rcu_preempt state:R running task stack:28352 pid:14 ppid:2 flags:0x00004000
[ 150.984586][ C0] Call Trace:
[ 150.987866][ C0]
[ 150.990815][ C0] __schedule+0xb87/0x14e0
[ 150.995258][ C0] ? __sched_text_start+0x8/0x8
[ 151.000108][ C0] schedule+0xbd/0x170
[ 151.004188][ C0] schedule_timeout+0x12c/0x2e0
[ 151.009039][ C0] ? __cfi_schedule_timeout+0x10/0x10
[ 151.014410][ C0] ? __cfi_process_timeout+0x10/0x10
[ 151.019700][ C0] ? prepare_to_swait_event+0x308/0x320
[ 151.025257][ C0] rcu_gp_fqs_loop+0x2d8/0x10a0
[ 151.030104][ C0] ? rcu_gp_init+0xf10/0xf10
[ 151.034796][ C0] rcu_gp_kthread+0x95/0x370
[ 151.039424][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10
[ 151.045151][ C0] ? set_cpus_allowed_ptr+0x82/0xc0
[ 151.050352][ C0] ? __kasan_check_read+0x11/0x20
[ 151.055382][ C0] ? __kthread_parkme+0x142/0x180
[ 151.060425][ C0] kthread+0x281/0x320
[ 151.064610][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10
[ 151.069812][ C0] ? __cfi_kthread+0x10/0x10
[ 151.074494][ C0] ret_from_fork+0x1f/0x30
[ 151.078961][ C0]
[ 151.082017][ C0] rcu: Stack dump where RCU GP kthread last ran:
[ 151.088345][ C0] CPU: 0 PID: 478 Comm: syz.2.17 Not tainted syzkaller #0
[ 151.095482][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 151.105539][ C0] RIP: 0010:tipc_sk_lookup+0x6/0x620
[ 151.110829][ C0] Code: 24 60 e8 ad 14 e7 fc 48 8b 54 24 60 e9 89 d4 ff ff e8 1e 31 20 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 48 83 e4 e0 48 81 ec c0 00 00 00 41 89 f6 48
[ 151.130686][ C0] RSP: 0018:ffffc90000b66968 EFLAGS: 00000202
[ 151.136760][ C0] RAX: 0000000000000201 RBX: ffff888121c9e100 RCX: 0000000000000200
[ 151.145162][ C0] RDX: 0000000000000000 RSI: 000000003e1f9aab RDI: ffff888117826900
[ 151.153130][ C0] RBP: ffffc90000b66970 R08: 0000000000000004 R09: 0000000000000003
[ 151.161096][ C0] R10: fffff5200016cd20 R11: 1ffff9200016cd20 R12: ffff888117826900
[ 151.169070][ C0] R13: dffffc0000000000 R14: ffffc90000b66dc0 R15: 000000003e1f9aab
[ 151.177042][ C0] FS: 00007fb5edc776c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 151.185980][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 151.192663][ C0] CR2: 0000000020004000 CR3: 0000000129b9a000 CR4: 00000000003506b0
[ 151.200661][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 151.208646][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 151.216626][ C0] Call Trace:
[ 151.219913][ C0]
[ 151.222850][ C0] tipc_sk_rcv+0x419/0x2cc0
[ 151.227354][ C0] ? __stack_depot_save+0x445/0x480
[ 151.232554][ C0] ? kasan_set_track+0x60/0x70
[ 151.237328][ C0] ? kasan_set_track+0x4b/0x70
[ 151.242089][ C0] ? kasan_save_free_info+0x31/0x50
[ 151.247289][ C0] ? ____kasan_slab_free+0x132/0x180
[ 151.252588][ C0] ? __kasan_slab_free+0x11/0x20
[ 151.257542][ C0] ? slab_free_freelist_hook+0xc2/0x190
[ 151.263099][ C0] ? kmem_cache_free+0x12d/0x300
[ 151.268042][ C0] ? kfree_skbmem+0x10c/0x180
[ 151.272732][ C0] ? kfree_skb_reason+0xdc/0x230
[ 151.277670][ C0] ? tipc_msg_reverse+0x6db/0x940
[ 151.282727][ C0] ? tipc_node_xmit+0x257/0xd00
[ 151.287671][ C0] ? tipc_release+0xd32/0x1650
[ 151.292432][ C0] ? syscall_exit_to_user_mode+0x1a/0x30
[ 151.298066][ C0] ? do_syscall_64+0x58/0xa0
[ 151.302665][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 151.308769][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 151.313721][ C0] tipc_node_xmit+0x257/0xd00
[ 151.318407][ C0] ? ____kasan_slab_free+0x13d/0x180
[ 151.323716][ C0] ? __cfi_tipc_node_xmit+0x10/0x10
[ 151.328921][ C0] ? slab_free_freelist_hook+0xc2/0x190
[ 151.334480][ C0] ? kfree_skbmem+0x10c/0x180
[ 151.339288][ C0] ? kmem_cache_free+0x12d/0x300
[ 151.344248][ C0] tipc_node_xmit_skb+0xe9/0x130
[ 151.349219][ C0] ? kfree_skb_reason+0xdc/0x230
[ 151.354179][ C0] ? __cfi_tipc_node_xmit_skb+0x10/0x10
[ 151.359734][ C0] ? trace_tipc_sk_rej_msg+0x25/0x150
[ 151.365120][ C0] tipc_sk_rcv+0x1def/0x2cc0
[ 151.369739][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 151.375816][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 151.381882][ C0] ? __kernel_text_address+0xd/0x30
[ 151.387089][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 151.393250][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 151.398191][ C0] tipc_node_xmit+0x257/0xd00
[ 151.402867][ C0] ? is_bpf_text_address+0x177/0x190
[ 151.408150][ C0] ? __cfi_tipc_node_xmit+0x10/0x10
[ 151.413351][ C0] ? kernel_text_address+0xa0/0xd0
[ 151.418477][ C0] ? __kernel_text_address+0xd/0x30
[ 151.423697][ C0] ? unwind_get_return_address+0x4d/0x90
[ 151.429333][ C0] ? __kasan_check_write+0x14/0x20
[ 151.434452][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110
[ 151.439911][ C0] tipc_sk_filter_rcv+0x155f/0x2c80
[ 151.445122][ C0] ? tipc_sk_publish+0x440/0x440
[ 151.450090][ C0] ? __kasan_check_write+0x14/0x20
[ 151.455288][ C0] ? _raw_spin_lock_bh+0x8e/0xe0
[ 151.460313][ C0] tipc_sk_rcv+0x7d9/0x2cc0
[ 151.464995][ C0] ? tipc_msg_reverse+0x6db/0x940
[ 151.470157][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 151.475103][ C0] ? tipc_sk_filter_rcv+0x2a1c/0x2c80
[ 151.480581][ C0] tipc_node_xmit+0x257/0xd00
[ 151.485272][ C0] ? __cfi_tipc_node_xmit+0x10/0x10
[ 151.490473][ C0] ? kasan_quarantine_put+0x34/0x190
[ 151.495759][ C0] tipc_node_distr_xmit+0x292/0x390
[ 151.500962][ C0] ? __cfi_tipc_node_distr_xmit+0x10/0x10
[ 151.506702][ C0] ? kfree_skbmem+0x10c/0x180
[ 151.511537][ C0] tipc_sk_backlog_rcv+0x16f/0x1f0
[ 151.516670][ C0] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10
[ 151.522430][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110
[ 151.527911][ C0] __release_sock+0x154/0x380
[ 151.532697][ C0] release_sock+0x60/0x1c0
[ 151.537127][ C0] tipc_release+0xd32/0x1650
[ 151.541717][ C0] ? __cfi_tipc_release+0x10/0x10
[ 151.546769][ C0] sock_close+0xf1/0x290
[ 151.551046][ C0] ? __cfi_sock_close+0x10/0x10
[ 151.555903][ C0] __fput+0x1fc/0x8f0
[ 151.559898][ C0] ____fput+0x15/0x20
[ 151.563885][ C0] task_work_run+0x1db/0x240
[ 151.568652][ C0] ? __cfi_task_work_run+0x10/0x10
[ 151.573769][ C0] ? __kasan_check_write+0x14/0x20
[ 151.578978][ C0] exit_to_user_mode_loop+0x9b/0xb0
[ 151.584188][ C0] exit_to_user_mode_prepare+0x87/0xd0
[ 151.589658][ C0] syscall_exit_to_user_mode+0x1a/0x30
[ 151.595443][ C0] do_syscall_64+0x58/0xa0
[ 151.599875][ C0] ? clear_bhb_loop+0x30/0x80
[ 151.604579][ C0] ? clear_bhb_loop+0x30/0x80
[ 151.609285][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 151.615206][ C0] RIP: 0033:0x7fb5ecd8cd29
[ 151.619635][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 151.639249][ C0] RSP: 002b:00007fb5edc77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 151.647685][ C0] RAX: 00000000000203a0 RBX: 00007fb5ecfa5fa0 RCX: 00007fb5ecd8cd29
[ 151.655665][ C0] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003
[ 151.663640][ C0] RBP: 00007fb5ece0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 151.671800][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 151.679871][ C0] R13: 0000000000000000 R14: 00007fb5ecfa5fa0 R15: 00007ffc08434628
[ 151.688048][ C0]
[ 199.280938][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 143s! [syz.2.17:477]
[ 199.288994][ C1] Modules linked in:
[ 199.292897][ C1] CPU: 1 PID: 477 Comm: syz.2.17 Not tainted syzkaller #0
[ 199.300038][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 199.310115][ C1] RIP: 0010:kvm_wait+0xf2/0x140
[ 199.315104][ C1] Code: 96 13 04 f4 eb 9a fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d 30 96 13 04 fb f4 71 ff ff ff fb e9 6b ff ff ff e8 de 16 b9 03 89 f9 80 e1 07 38
[ 199.334731][ C1] RSP: 0018:ffffc90000af78a0 EFLAGS: 00000246
[ 199.340814][ C1] RAX: 0000000000000003 RBX: ffff8881141c0f98 RCX: ffffffff84f48de2
[ 199.348794][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881141c0f98
[ 199.356776][ C1] RBP: ffffc90000af7930 R08: dffffc0000000000 R09: ffffed10228381f4
[ 199.364757][ C1] R10: ffffed10228381f4 R11: 1ffff110228381f3 R12: 1ffff1103ee20001
[ 199.372738][ C1] R13: ffff8881f7138cd4 R14: dffffc0000000000 R15: 1ffff9200015ef14
[ 199.380813][ C1] FS: 0000555559705500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 199.389770][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 199.396367][ C1] CR2: 00007f95f0c80492 CR3: 0000000129b9a000 CR4: 00000000003506a0
[ 199.404356][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 199.412340][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 199.420321][ C1] Call Trace:
[ 199.424041][ C1]
[ 199.426998][ C1] ? __cfi_kvm_wait+0x10/0x10
[ 199.431699][ C1] ? __pv_queued_spin_lock_slowpath+0x632/0xc40
[ 199.437966][ C1] __pv_queued_spin_lock_slowpath+0x690/0xc40
[ 199.444066][ C1] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10
[ 199.450769][ C1] ? __stack_depot_save+0x36/0x480
[ 199.455921][ C1] queued_spin_lock_slowpath+0x47/0x50
[ 199.461658][ C1] _raw_spin_lock_bh+0xd8/0xe0
[ 199.466441][ C1] ? __cfi__raw_spin_lock_bh+0x10/0x10
[ 199.471913][ C1] ? do_syscall_64+0x4c/0xa0
[ 199.476549][ C1] lock_sock_nested+0x92/0x280
[ 199.481387][ C1] ? __cfi_lock_sock_nested+0x10/0x10
[ 199.486892][ C1] ? __cfi_locks_remove_file+0x10/0x10
[ 199.492386][ C1] tipc_release+0xb2/0x1650
[ 199.496925][ C1] ? rwsem_write_trylock+0x130/0x300
[ 199.502249][ C1] ? __cfi_tipc_release+0x10/0x10
[ 199.507310][ C1] ? task_work_add+0x2b1/0x330
[ 199.512216][ C1] sock_close+0xf1/0x290
[ 199.516504][ C1] ? __cfi_sock_close+0x10/0x10
[ 199.521392][ C1] __fput+0x1fc/0x8f0
[ 199.525408][ C1] ? _raw_spin_unlock+0x4c/0x70
[ 199.530310][ C1] ____fput+0x15/0x20
[ 199.534327][ C1] task_work_run+0x1db/0x240
[ 199.538967][ C1] ? __cfi_task_work_run+0x10/0x10
[ 199.544115][ C1] ? __cfi___close_range+0x10/0x10
[ 199.549257][ C1] exit_to_user_mode_loop+0x9b/0xb0
[ 199.554480][ C1] exit_to_user_mode_prepare+0x87/0xd0
[ 199.560049][ C1] syscall_exit_to_user_mode+0x1a/0x30
[ 199.565555][ C1] do_syscall_64+0x58/0xa0
[ 199.570003][ C1] ? clear_bhb_loop+0x30/0x80
[ 199.574796][ C1] ? clear_bhb_loop+0x30/0x80
[ 199.579505][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 199.585433][ C1] RIP: 0033:0x7fb5ecd8cd29
[ 199.589881][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 199.609880][ C1] RSP: 002b:00007ffc08434788 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 199.618318][ C1] RAX: 0000000000000000 RBX: 00007fb5ecfa7ba0 RCX: 00007fb5ecd8cd29
[ 199.626313][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 199.634506][ C1] RBP: 00007fb5ecfa7ba0 R08: 0000000000000000 R09: 00007ffc08434a7f
[ 199.642506][ C1] R10: 00007fb5ecfa7ac0 R11: 0000000000000246 R12: 000000000000c9c9
[ 199.650498][ C1] R13: 00007fb5ecfa6080 R14: 0000000000000032 R15: ffffffffffffffff
[ 199.658503][ C1]
[ 199.661555][ C1] Sending NMI from CPU 1 to CPUs 0:
[ 199.666799][ C0] NMI backtrace for cpu 0
[ 199.666814][ C0] CPU: 0 PID: 478 Comm: syz.2.17 Not tainted syzkaller #0
[ 199.666832][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 199.666842][ C0] RIP: 0010:_raw_spin_trylock_bh+0x41/0x130
[ 199.666869][ C0] Code: fb 65 48 8b 04 25 28 00 00 00 48 89 44 24 40 49 bc 00 00 00 00 00 fc ff df 48 c7 04 24 b3 8a b5 41 48 c7 44 24 08 5f 50 44 86 <48> c7 44 24 10 e0 67 f4 84 49 89 e5 49 c1 ed 03 48 b8 f1 f1 f1 f1
[ 199.666884][ C0] RSP: 0018:ffffc90000b668e0 EFLAGS: 00000282
[ 199.666900][ C0] RAX: f1395e90d84e5d00 RBX: ffff8881141c0f98 RCX: ffff88811cb38000
[ 199.666914][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881141c0f98
[ 199.666926][ C0] RBP: ffffc90000b66970 R08: dffffc0000000000 R09: ffffed10228381f1
[ 199.666940][ C0] R10: ffffed10228381f1 R11: 1ffff110228381f0 R12: dffffc0000000000
[ 199.666954][ C0] R13: dffffc0000000000 R14: ffffc90000b66dc0 R15: 000000003e1f9aab
[ 199.666968][ C0] FS: 00007fb5edc776c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 199.666984][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 199.666996][ C0] CR2: 0000000020004000 CR3: 0000000129b9a000 CR4: 00000000003506b0
[ 199.667013][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 199.667023][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 199.667035][ C0] Call Trace:
[ 199.667041][ C0]
[ 199.667047][ C0] ? tipc_sk_rcv+0x2cc0/0x2cc0
[ 199.667067][ C0] tipc_sk_rcv+0x43e/0x2cc0
[ 199.667091][ C0] ? __stack_depot_save+0x445/0x480
[ 199.667112][ C0] ? kasan_set_track+0x60/0x70
[ 199.667132][ C0] ? kasan_set_track+0x4b/0x70
[ 199.667150][ C0] ? kasan_save_free_info+0x31/0x50
[ 199.667177][ C0] ? ____kasan_slab_free+0x132/0x180
[ 199.667198][ C0] ? __kasan_slab_free+0x11/0x20
[ 199.667218][ C0] ? slab_free_freelist_hook+0xc2/0x190
[ 199.667245][ C0] ? kmem_cache_free+0x12d/0x300
[ 199.667268][ C0] ? kfree_skbmem+0x10c/0x180
[ 199.667286][ C0] ? kfree_skb_reason+0xdc/0x230
[ 199.667303][ C0] ? tipc_msg_reverse+0x6db/0x940
[ 199.667330][ C0] ? tipc_node_xmit+0x257/0xd00
[ 199.667356][ C0] ? tipc_release+0xd32/0x1650
[ 199.667375][ C0] ? syscall_exit_to_user_mode+0x1a/0x30
[ 199.667403][ C0] ? do_syscall_64+0x58/0xa0
[ 199.667422][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 199.667447][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 199.667468][ C0] tipc_node_xmit+0x257/0xd00
[ 199.667494][ C0] ? ____kasan_slab_free+0x13d/0x180
[ 199.667516][ C0] ? __cfi_tipc_node_xmit+0x10/0x10
[ 199.667541][ C0] ? slab_free_freelist_hook+0xc2/0x190
[ 199.667569][ C0] ? kfree_skbmem+0x10c/0x180
[ 199.667586][ C0] ? kmem_cache_free+0x12d/0x300
[ 199.667612][ C0] tipc_node_xmit_skb+0xe9/0x130
[ 199.667637][ C0] ? kfree_skb_reason+0xdc/0x230
[ 199.667655][ C0] ? __cfi_tipc_node_xmit_skb+0x10/0x10
[ 199.667682][ C0] ? trace_tipc_sk_rej_msg+0x25/0x150
[ 199.667700][ C0] tipc_sk_rcv+0x1def/0x2cc0
[ 199.667716][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 199.667740][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 199.667765][ C0] ? __kernel_text_address+0xd/0x30
[ 199.667791][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 199.667819][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 199.667840][ C0] tipc_node_xmit+0x257/0xd00
[ 199.667865][ C0] ? is_bpf_text_address+0x177/0x190
[ 199.667890][ C0] ? __cfi_tipc_node_xmit+0x10/0x10
[ 199.667914][ C0] ? kernel_text_address+0xa0/0xd0
[ 199.667937][ C0] ? __kernel_text_address+0xd/0x30
[ 199.667959][ C0] ? unwind_get_return_address+0x4d/0x90
[ 199.667980][ C0] ? __kasan_check_write+0x14/0x20
[ 199.667997][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110
[ 199.668018][ C0] tipc_sk_filter_rcv+0x155f/0x2c80
[ 199.668047][ C0] ? tipc_sk_publish+0x440/0x440
[ 199.668066][ C0] ? __kasan_check_write+0x14/0x20
[ 199.668089][ C0] ? _raw_spin_lock_bh+0x8e/0xe0
[ 199.668111][ C0] tipc_sk_rcv+0x7d9/0x2cc0
[ 199.668134][ C0] ? tipc_msg_reverse+0x6db/0x940
[ 199.668161][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 199.668180][ C0] ? tipc_sk_filter_rcv+0x2a1c/0x2c80
[ 199.668200][ C0] tipc_node_xmit+0x257/0xd00
[ 199.668227][ C0] ? __cfi_tipc_node_xmit+0x10/0x10
[ 199.668253][ C0] ? kasan_quarantine_put+0x34/0x190
[ 199.668273][ C0] tipc_node_distr_xmit+0x292/0x390
[ 199.668301][ C0] ? __cfi_tipc_node_distr_xmit+0x10/0x10
[ 199.668329][ C0] ? kfree_skbmem+0x10c/0x180
[ 199.668347][ C0] tipc_sk_backlog_rcv+0x16f/0x1f0
[ 199.668367][ C0] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10
[ 199.668386][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110
[ 199.668410][ C0] __release_sock+0x154/0x380
[ 199.668434][ C0] release_sock+0x60/0x1c0
[ 199.668452][ C0] tipc_release+0xd32/0x1650
[ 199.668472][ C0] ? __cfi_tipc_release+0x10/0x10
[ 199.668493][ C0] sock_close+0xf1/0x290
[ 199.668519][ C0] ? __cfi_sock_close+0x10/0x10
[ 199.668545][ C0] __fput+0x1fc/0x8f0
[ 199.668568][ C0] ____fput+0x15/0x20
[ 199.668592][ C0] task_work_run+0x1db/0x240
[ 199.668614][ C0] ? __cfi_task_work_run+0x10/0x10
[ 199.668637][ C0] ? __kasan_check_write+0x14/0x20
[ 199.668654][ C0] exit_to_user_mode_loop+0x9b/0xb0
[ 199.668674][ C0] exit_to_user_mode_prepare+0x87/0xd0
[ 199.668693][ C0] syscall_exit_to_user_mode+0x1a/0x30
[ 199.668721][ C0] do_syscall_64+0x58/0xa0
[ 199.668740][ C0] ? clear_bhb_loop+0x30/0x80
[ 199.668765][ C0] ? clear_bhb_loop+0x30/0x80
[ 199.668790][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 199.668814][ C0] RIP: 0033:0x7fb5ecd8cd29
[ 199.668828][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 199.668843][ C0] RSP: 002b:00007fb5edc77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 199.668860][ C0] RAX: 00000000000203a0 RBX: 00007fb5ecfa5fa0 RCX: 00007fb5ecd8cd29
[ 199.668873][ C0] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003
[ 199.668884][ C0] RBP: 00007fb5ece0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 199.668895][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 199.668905][ C0] R13: 0000000000000000 R14: 00007fb5ecfa5fa0 R15: 00007ffc08434628
[ 199.668921][ C0]