Warning: Permanently added '10.128.1.166' (ED25519) to the list of known hosts.
2025/05/27 21:47:18 ignoring optional flag "sandboxArg"="0"
2025/05/27 21:47:18 parsed 1 programs
[ 51.859980][ T28] audit: type=1400 audit(1748382439.908:106): avc: denied { unlink } for pid=377 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 51.922752][ T377] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 52.811472][ T401] bridge0: port 1(bridge_slave_0) entered blocking state
[ 52.818549][ T401] bridge0: port 1(bridge_slave_0) entered disabled state
[ 52.826061][ T401] device bridge_slave_0 entered promiscuous mode
[ 52.832922][ T401] bridge0: port 2(bridge_slave_1) entered blocking state
[ 52.840060][ T401] bridge0: port 2(bridge_slave_1) entered disabled state
[ 52.847750][ T401] device bridge_slave_1 entered promiscuous mode
[ 52.897814][ T401] bridge0: port 2(bridge_slave_1) entered blocking state
[ 52.905121][ T401] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 52.912676][ T401] bridge0: port 1(bridge_slave_0) entered blocking state
[ 52.920537][ T401] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 52.943911][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 52.951260][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 52.959142][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 52.967021][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 52.977300][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 52.985723][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 52.992783][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 53.002013][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 53.010301][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 53.017444][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 53.030072][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 53.040570][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 53.055569][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 53.067906][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 53.076385][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 53.084389][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 53.093662][ T401] device veth0_vlan entered promiscuous mode
[ 53.104977][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 53.114588][ T401] device veth1_macvtap entered promiscuous mode
[ 53.124571][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 53.135012][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 53.355569][ T28] audit: type=1401 audit(1748382441.398:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
2025/05/27 21:47:21 executed programs: 0
[ 53.640638][ T435] bridge0: port 1(bridge_slave_0) entered blocking state
[ 53.647855][ T435] bridge0: port 1(bridge_slave_0) entered disabled state
[ 53.655827][ T435] device bridge_slave_0 entered promiscuous mode
[ 53.663493][ T435] bridge0: port 2(bridge_slave_1) entered blocking state
[ 53.670721][ T435] bridge0: port 2(bridge_slave_1) entered disabled state
[ 53.678418][ T435] device bridge_slave_1 entered promiscuous mode
[ 53.736585][ T435] bridge0: port 2(bridge_slave_1) entered blocking state
[ 53.744121][ T435] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 53.751888][ T435] bridge0: port 1(bridge_slave_0) entered blocking state
[ 53.760567][ T435] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 53.787349][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 53.795588][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 53.803085][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 53.814271][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 53.822884][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 53.831189][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 53.838301][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 53.851166][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 53.859965][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 53.868142][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 53.875523][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 53.888462][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 53.897298][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 53.911211][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 53.919489][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 53.934104][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 53.942897][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 53.955093][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 53.963336][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 53.977210][ T435] device veth0_vlan entered promiscuous mode
[ 53.984497][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 53.992056][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 54.004350][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 54.012981][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 54.027676][ T435] device veth1_macvtap entered promiscuous mode
[ 54.037789][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 54.045769][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 54.054126][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 54.063811][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 54.072401][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 54.081328][ T43] device bridge_slave_1 left promiscuous mode
[ 54.087470][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 54.095358][ T43] device bridge_slave_0 left promiscuous mode
[ 54.101636][ T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 54.110216][ T43] device veth1_macvtap left promiscuous mode
[ 54.116321][ T43] device veth0_vlan left promiscuous mode
[ 54.222290][ T28] audit: type=1400 audit(1748382442.268:108): avc: denied { create } for pid=439 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 54.242518][ T28] audit: type=1400 audit(1748382442.268:109): avc: denied { write } for pid=439 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 54.266443][ T28] audit: type=1400 audit(1748382442.268:110): avc: denied { setopt } for pid=439 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 155.069260][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[ 155.076061][ C1] rcu: 1-...!: (9999 ticks this GP) idle=65bc/1/0x4000000000000000 softirq=3845/3845 fqs=1
[ 155.086413][ C1] (t=10000 jiffies g=2669 q=151 ncpus=2)
[ 155.092223][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 9997 jiffies! g2669 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[ 155.104453][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=934
[ 155.112438][ C1] rcu: rcu_preempt kthread starved for 9998 jiffies! g2669 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[ 155.123806][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 155.133769][ C1] rcu: RCU grace-period kthread stack dump:
[ 155.139681][ C1] task:rcu_preempt state:I stack:28064 pid:14 ppid:2 flags:0x00004000
[ 155.148904][ C1] Call Trace:
[ 155.152400][ C1]
[ 155.155455][ C1] __schedule+0xb87/0x14e0
[ 155.160131][ C1] ? release_firmware_map_entry+0x194/0x194
[ 155.166205][ C1] ? __mod_timer+0x7ae/0xb30
[ 155.170809][ C1] schedule+0xbd/0x170
[ 155.174904][ C1] schedule_timeout+0x12c/0x2e0
[ 155.179774][ C1] ? __cfi_schedule_timeout+0x10/0x10
[ 155.185445][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110
[ 155.190952][ C1] ? __cfi_process_timeout+0x10/0x10
[ 155.196472][ C1] ? prepare_to_swait_event+0x308/0x320
[ 155.202060][ C1] rcu_gp_fqs_loop+0x2d8/0x10a0
[ 155.206933][ C1] ? __cfi_dyntick_save_progress_counter+0x10/0x10
[ 155.213701][ C1] ? rcu_gp_init+0xf10/0xf10
[ 155.218512][ C1] rcu_gp_kthread+0x95/0x370
[ 155.223105][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10
[ 155.228303][ C1] ? __kasan_check_read+0x11/0x20
[ 155.233429][ C1] ? __kthread_parkme+0x142/0x180
[ 155.238623][ C1] kthread+0x281/0x320
[ 155.242685][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10
[ 155.247880][ C1] ? __cfi_kthread+0x10/0x10
[ 155.252459][ C1] ret_from_fork+0x1f/0x30
[ 155.256872][ C1]
[ 155.259889][ C1] rcu: Stack dump where RCU GP kthread last ran:
[ 155.266217][ C1] Sending NMI from CPU 1 to CPUs 0:
[ 155.271612][ C0] NMI backtrace for cpu 0
[ 155.271638][ C0] CPU: 0 PID: 593 Comm: syz.0.66 Not tainted 6.1.138-syzkaller-1169863-gdb710ea87c32 #0
[ 155.271656][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 155.271670][ C0] RIP: 0010:kvm_wait+0xf2/0x140
[ 155.271699][ C0] Code: ae 13 04 f4 eb 9a fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d b0 ae 13 04 fb f4 71 ff ff ff fb e9 6b ff ff ff e8 de b0 b4 03 89 f9 80 e1 07 38
[ 155.271714][ C0] RSP: 0018:ffffc90002f5f680 EFLAGS: 00000246
[ 155.271729][ C0] RAX: 0000000000000003 RBX: ffff88812edb5998 RCX: ffffffff84f005b2
[ 155.271741][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88812edb5998
[ 155.271753][ C0] RBP: ffffc90002f5f710 R08: dffffc0000000000 R09: ffffed1025db6b34
[ 155.271766][ C0] R10: ffffed1025db6b34 R11: 1ffff11025db6b33 R12: 1ffff1103ee00001
[ 155.271779][ C0] R13: ffff8881f7038c94 R14: dffffc0000000000 R15: 1ffff920005ebed0
[ 155.271792][ C0] FS: 00007f4c6af046c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 155.271807][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 155.271818][ C0] CR2: 0000000020000000 CR3: 000000011f334000 CR4: 00000000003506b0
[ 155.271833][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 155.271842][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 155.271852][ C0] Call Trace:
[ 155.271858][ C0]
[ 155.271866][ C0] ? __cfi_kvm_wait+0x10/0x10
[ 155.271887][ C0] ? __pv_queued_spin_lock_slowpath+0x632/0xc40
[ 155.271915][ C0] __pv_queued_spin_lock_slowpath+0x690/0xc40
[ 155.271943][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10
[ 155.271968][ C0] ? avc_has_perm+0x158/0x240
[ 155.271991][ C0] queued_spin_lock_slowpath+0x47/0x50
[ 155.272017][ C0] _raw_spin_lock_bh+0xd8/0xe0
[ 155.272039][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10
[ 155.272062][ C0] lock_sock_nested+0x92/0x280
[ 155.272082][ C0] ? __cfi_lock_sock_nested+0x10/0x10
[ 155.272099][ C0] ? _raw_spin_lock_bh+0x8e/0xe0
[ 155.272121][ C0] ? _raw_spin_unlock_bh+0x50/0x60
[ 155.272144][ C0] tipc_sendstream+0x47/0x70
[ 155.272169][ C0] ? __cfi_tipc_sendstream+0x10/0x10
[ 155.272192][ C0] ____sys_sendmsg+0x5a9/0x990
[ 155.272219][ C0] ? __sys_sendmsg_sock+0x40/0x40
[ 155.272245][ C0] ? import_iovec+0x7c/0xb0
[ 155.272266][ C0] ___sys_sendmsg+0x21c/0x290
[ 155.272291][ C0] ? __sys_sendmsg+0x270/0x270
[ 155.272323][ C0] ? __fdget+0x19c/0x220
[ 155.272348][ C0] __x64_sys_sendmsg+0x1f0/0x2c0
[ 155.272374][ C0] ? __cfi___x64_sys_sendmsg+0x10/0x10
[ 155.272402][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0
[ 155.272424][ C0] x64_sys_call+0x171/0x9a0
[ 155.272444][ C0] do_syscall_64+0x4c/0xa0
[ 155.272467][ C0] ? clear_bhb_loop+0x15/0x70
[ 155.272484][ C0] ? clear_bhb_loop+0x15/0x70
[ 155.272499][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 155.272525][ C0] RIP: 0033:0x7f4c6a17dff9
[ 155.272549][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 155.272562][ C0] RSP: 002b:00007f4c6af04038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 155.272578][ C0] RAX: ffffffffffffffda RBX: 00007f4c6a335f80 RCX: 00007f4c6a17dff9
[ 155.272590][ C0] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004
[ 155.272600][ C0] RBP: 00007f4c6a1f0296 R08: 0000000000000000 R09: 0000000000000000
[ 155.272610][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 155.272626][ C0] R13: 0000000000000000 R14: 00007f4c6a335f80 R15: 00007ffdc3a4dea8
[ 155.272640][ C0]
[ 155.273679][ C1] CPU: 1 PID: 594 Comm: syz.0.66 Not tainted 6.1.138-syzkaller-1169863-gdb710ea87c32 #0
[ 155.646228][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 155.656705][ C1] RIP: 0010:__rcu_read_unlock+0x6/0xa0
[ 155.662188][ C1] Code: 7c ef 48 89 df e8 aa a8 57 00 eb e5 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 41 57 <41> 56 53 49 be 00 00 00 00 00 fc ff df 65 48 8b 3d c5 cc a5 7e 48
[ 155.681797][ C1] RSP: 0018:ffffc90002fb6628 EFLAGS: 00000293
[ 155.687867][ C1] RAX: ffffffff84c91910 RBX: ffff88812edb5980 RCX: ffff88811fac8000
[ 155.695840][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000007ffffffe
[ 155.704167][ C1] RBP: ffffc90002fb6630 R08: dffffc0000000000 R09: ffffed1025db6b31
[ 155.712319][ C1] R10: ffffed1025db6b31 R11: 1ffff11025db6b30 R12: ffff88812edb5900
[ 155.720651][ C1] R13: 00000000000003f0 R14: dffffc0000000000 R15: ffff88811adb10de
[ 155.728712][ C1] FS: 00007f4c6aee36c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 155.737998][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 155.744749][ C1] CR2: 00007f4c6aee2f98 CR3: 000000011f334000 CR4: 00000000003506a0
[ 155.752975][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 155.761032][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 155.769207][ C1] Call Trace:
[ 155.772500][ C1]
[ 155.775428][ C1] tipc_sk_lookup+0x557/0x620
[ 155.780120][ C1] ? tipc_sk_rcv+0x2cc0/0x2cc0
[ 155.784995][ C1] tipc_sk_rcv+0x419/0x2cc0
[ 155.789590][ C1] ? stack_trace_save+0x98/0xe0
[ 155.794531][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80
[ 155.800341][ C1] ? __stack_depot_save+0x445/0x480
[ 155.805560][ C1] ? kasan_set_track+0x60/0x70
[ 155.810326][ C1] ? kasan_set_track+0x4b/0x70
[ 155.815089][ C1] ? ____kasan_slab_free+0x132/0x180
[ 155.820436][ C1] ? tipc_node_xmit+0x257/0xd00
[ 155.825322][ C1] ? tipc_sk_backlog_rcv+0x16f/0x1f0
[ 155.830610][ C1] ? __release_sock+0x154/0x380
[ 155.835562][ C1] ? sockopt_release_sock+0x95/0x1f0
[ 155.840870][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 155.845821][ C1] ? do_syscall_64+0x4c/0xa0
[ 155.850410][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 155.856615][ C1] tipc_node_xmit+0x257/0xd00
[ 155.861397][ C1] ? kasan_quarantine_put+0x34/0x190
[ 155.866702][ C1] ? __cfi_tipc_node_xmit+0x10/0x10
[ 155.871983][ C1] ? ____kasan_slab_free+0x13d/0x180
[ 155.877277][ C1] ? __kasan_slab_free+0x11/0x20
[ 155.882296][ C1] ? slab_free_freelist_hook+0xc2/0x190
[ 155.887872][ C1] ? kfree_skbmem+0x10c/0x180
[ 155.892660][ C1] tipc_node_distr_xmit+0x292/0x390
[ 155.897854][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10
[ 155.903570][ C1] tipc_sk_rcv+0x1aa3/0x2cc0
[ 155.908163][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 155.913184][ C1] tipc_node_xmit+0x257/0xd00
[ 155.917887][ C1] ? __cfi_tipc_node_xmit+0x10/0x10
[ 155.923181][ C1] tipc_sk_push_backlog+0x4dd/0x790
[ 155.928653][ C1] tipc_sk_proto_rcv+0x98d/0x1580
[ 155.934107][ C1] ? tipc_sk_filter_rcv+0x2c80/0x2c80
[ 155.939474][ C1] ? unwind_get_return_address+0x4d/0x90
[ 155.945121][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10
[ 155.951358][ C1] ? arch_stack_walk+0xa0/0x150
[ 155.956311][ C1] tipc_sk_filter_rcv+0x2a93/0x2c80
[ 155.961512][ C1] ? stack_trace_save+0x98/0xe0
[ 155.966505][ C1] ? __stack_depot_save+0x36/0x480
[ 155.971787][ C1] ? ____kasan_slab_free+0x132/0x180
[ 155.977063][ C1] ? __kasan_slab_free+0x11/0x20
[ 155.981985][ C1] ? slab_free_freelist_hook+0xc2/0x190
[ 155.987608][ C1] ? __kmem_cache_free+0xb7/0x1b0
[ 155.992725][ C1] ? kasan_set_track+0x60/0x70
[ 155.997564][ C1] ? kasan_set_track+0x4b/0x70
[ 156.002487][ C1] ? kasan_save_free_info+0x31/0x50
[ 156.007940][ C1] ? ____kasan_slab_free+0x132/0x180
[ 156.013232][ C1] ? __kasan_slab_free+0x11/0x20
[ 156.018155][ C1] ? slab_free_freelist_hook+0xc2/0x190
[ 156.023701][ C1] ? kmem_cache_free+0x12d/0x300
[ 156.028626][ C1] ? kfree_skbmem+0x10c/0x180
[ 156.033293][ C1] ? kfree_skb_reason+0xdc/0x230
[ 156.038311][ C1] ? tipc_msg_reverse+0x6db/0x940
[ 156.043411][ C1] ? tipc_sk_filter_rcv+0xbf3/0x2c80
[ 156.048877][ C1] ? tipc_sk_backlog_rcv+0x109/0x1f0
[ 156.054157][ C1] ? __release_sock+0x154/0x380
[ 156.059141][ C1] ? sk_setsockopt+0x1355/0x2590
[ 156.064320][ C1] ? sock_setsockopt+0x5a/0x70
[ 156.069105][ C1] ? __x64_sys_setsockopt+0xbf/0xd0
[ 156.074344][ C1] ? x64_sys_call+0x124/0x9a0
[ 156.079034][ C1] ? do_syscall_64+0x4c/0xa0
[ 156.083648][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 156.089730][ C1] ? tipc_sk_publish+0x440/0x440
[ 156.094701][ C1] ? __kasan_check_write+0x14/0x20
[ 156.099823][ C1] ? _raw_spin_lock_bh+0x8e/0xe0
[ 156.104763][ C1] tipc_sk_rcv+0x7d9/0x2cc0
[ 156.109356][ C1] ? tipc_msg_reverse+0x6db/0x940
[ 156.114379][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 156.119659][ C1] ? tipc_sk_filter_rcv+0x2a1c/0x2c80
[ 156.125213][ C1] tipc_node_xmit+0x257/0xd00
[ 156.129987][ C1] ? __cfi_tipc_node_xmit+0x10/0x10
[ 156.135234][ C1] tipc_node_distr_xmit+0x292/0x390
[ 156.140527][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10
[ 156.146263][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0
[ 156.151379][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10
[ 156.157026][ C1] __release_sock+0x154/0x380
[ 156.161717][ C1] sockopt_release_sock+0x95/0x1f0
[ 156.167001][ C1] sk_setsockopt+0x1355/0x2590
[ 156.171781][ C1] ? __cfi_sk_setsockopt+0x10/0x10
[ 156.176893][ C1] ? selinux_socket_setsockopt+0x21c/0x300
[ 156.182721][ C1] ? handle_mm_fault+0x17be/0x2640
[ 156.187958][ C1] ? __fget_files+0x2d5/0x330
[ 156.192656][ C1] sock_setsockopt+0x5a/0x70
[ 156.197329][ C1] __sys_setsockopt+0x270/0x4e0
[ 156.202184][ C1] ? __cfi___sys_setsockopt+0x10/0x10
[ 156.207671][ C1] ? do_user_addr_fault+0x9ac/0x1050
[ 156.213058][ C1] __x64_sys_setsockopt+0xbf/0xd0
[ 156.218211][ C1] x64_sys_call+0x124/0x9a0
[ 156.222881][ C1] do_syscall_64+0x4c/0xa0
[ 156.227392][ C1] ? clear_bhb_loop+0x15/0x70
[ 156.232361][ C1] ? clear_bhb_loop+0x15/0x70
[ 156.237068][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 156.243105][ C1] RIP: 0033:0x7f4c6a17dff9
[ 156.247625][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 156.267396][ C1] RSP: 002b:00007f4c6aee3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 156.275915][ C1] RAX: ffffffffffffffda RBX: 00007f4c6a336058 RCX: 00007f4c6a17dff9
[ 156.284486][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003
[ 156.292471][ C1] RBP: 00007f4c6a1f0296 R08: 0000000000000004 R09: 0000000000000000
[ 156.300472][ C1] R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000000
[ 156.308608][ C1] R13: 0000000000000001 R14: 00007f4c6a336058 R15: 00007ffdc3a4dea8
[ 156.316582][ C1]
[ 287.443663][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 225s! [syz.0.66:593]
[ 287.451811][ C0] Modules linked in:
[ 287.455771][ C0] CPU: 0 PID: 593 Comm: syz.0.66 Not tainted 6.1.138-syzkaller-1169863-gdb710ea87c32 #0
[ 287.466203][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 287.476471][ C0] RIP: 0010:kvm_wait+0xf2/0x140
[ 287.481390][ C0] Code: ae 13 04 f4 eb 9a fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d b0 ae 13 04 fb f4 71 ff ff ff fb e9 6b ff ff ff e8 de b0 b4 03 89 f9 80 e1 07 38
[ 287.501813][ C0] RSP: 0018:ffffc90002f5f680 EFLAGS: 00000246
[ 287.508079][ C0] RAX: 0000000000000003 RBX: ffff88812edb5998 RCX: ffffffff84f005b2
[ 287.516156][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88812edb5998
[ 287.524571][ C0] RBP: ffffc90002f5f710 R08: dffffc0000000000 R09: ffffed1025db6b34
[ 287.532848][ C0] R10: ffffed1025db6b34 R11: 1ffff11025db6b33 R12: 1ffff1103ee00001
[ 287.540922][ C0] R13: ffff8881f7038c94 R14: dffffc0000000000 R15: 1ffff920005ebed0
[ 287.548902][ C0] FS: 00007f4c6af046c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 287.558015][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 287.564712][ C0] CR2: 0000000020000000 CR3: 000000011f334000 CR4: 00000000003506b0
[ 287.572873][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 287.580964][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 287.589489][ C0] Call Trace:
[ 287.592892][ C0]
[ 287.595856][ C0] ? __cfi_kvm_wait+0x10/0x10
[ 287.600585][ C0] ? __pv_queued_spin_lock_slowpath+0x632/0xc40
[ 287.606946][ C0] __pv_queued_spin_lock_slowpath+0x690/0xc40
[ 287.613139][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10
[ 287.619850][ C0] ? avc_has_perm+0x158/0x240
[ 287.624584][ C0] queued_spin_lock_slowpath+0x47/0x50
[ 287.630092][ C0] _raw_spin_lock_bh+0xd8/0xe0
[ 287.635057][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10
[ 287.640625][ C0] lock_sock_nested+0x92/0x280
[ 287.645405][ C0] ? __cfi_lock_sock_nested+0x10/0x10
[ 287.650899][ C0] ? _raw_spin_lock_bh+0x8e/0xe0
[ 287.655879][ C0] ? _raw_spin_unlock_bh+0x50/0x60
[ 287.661142][ C0] tipc_sendstream+0x47/0x70
[ 287.665867][ C0] ? __cfi_tipc_sendstream+0x10/0x10
[ 287.671551][ C0] ____sys_sendmsg+0x5a9/0x990
[ 287.676355][ C0] ? __sys_sendmsg_sock+0x40/0x40
[ 287.681628][ C0] ? import_iovec+0x7c/0xb0
[ 287.686173][ C0] ___sys_sendmsg+0x21c/0x290
[ 287.690962][ C0] ? __sys_sendmsg+0x270/0x270
[ 287.695848][ C0] ? __fdget+0x19c/0x220
[ 287.700381][ C0] __x64_sys_sendmsg+0x1f0/0x2c0
[ 287.705713][ C0] ? __cfi___x64_sys_sendmsg+0x10/0x10
[ 287.711474][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0
[ 287.717661][ C0] x64_sys_call+0x171/0x9a0
[ 287.722200][ C0] do_syscall_64+0x4c/0xa0
[ 287.726637][ C0] ? clear_bhb_loop+0x15/0x70
[ 287.731332][ C0] ? clear_bhb_loop+0x15/0x70
[ 287.736129][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 287.742569][ C0] RIP: 0033:0x7f4c6a17dff9
[ 287.747208][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 287.769139][ C0] RSP: 002b:00007f4c6af04038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 287.778165][ C0] RAX: ffffffffffffffda RBX: 00007f4c6a335f80 RCX: 00007f4c6a17dff9
[ 287.786877][ C0] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004
[ 287.795152][ C0] RBP: 00007f4c6a1f0296 R08: 0000000000000000 R09: 0000000000000000
[ 287.803245][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 287.811630][ C0] R13: 0000000000000000 R14: 00007f4c6a335f80 R15: 00007ffdc3a4dea8
[ 287.819980][ C0]
[ 287.823022][ C0] Sending NMI from CPU 0 to CPUs 1:
[ 287.828329][ C1] NMI backtrace for cpu 1
[ 287.828343][ C1] CPU: 1 PID: 594 Comm: syz.0.66 Not tainted 6.1.138-syzkaller-1169863-gdb710ea87c32 #0
[ 287.828361][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 287.828371][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x36/0x80
[ 287.828404][ C1] Code: e0 77 92 7e 65 8b 15 e1 77 92 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 6c 0b 00 00 00 74 4e 8b 91 48 0b 00 00 <83> fa 03 75 43 48 8b 91 50 0b 00 00 44 8b 89 4c 0b 00 00 49 c1 e1
[ 287.828418][ C1] RSP: 0018:ffffc90002fb6630 EFLAGS: 00000246
[ 287.828433][ C1] RAX: ffffffff84c9165e RBX: ffff88811adbe750 RCX: ffff88811fac8000
[ 287.828451][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 287.828461][ C1] RBP: ffffc90002fb6630 R08: 0000000000000004 R09: 0000000000000003
[ 287.828471][ C1] R10: fffff520005f6cd8 R11: 1ffff920005f6cd8 R12: ffff88812edb5cf0
[ 287.828484][ C1] R13: ffff88811adb10de R14: dffffc0000000000 R15: 0000000000000000
[ 287.828495][ C1] FS: 00007f4c6aee36c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 287.828510][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 287.828522][ C1] CR2: 00007f4c6aee2f98 CR3: 000000011f334000 CR4: 00000000003506a0
[ 287.828536][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 287.828546][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 287.828556][ C1] Call Trace:
[ 287.828561][ C1]
[ 287.828568][ C1] tipc_sk_lookup+0x27e/0x620
[ 287.828591][ C1] ? tipc_sk_rcv+0x2cc0/0x2cc0
[ 287.828610][ C1] ? tipc_sk_rcv+0x1b33/0x2cc0
[ 287.828630][ C1] tipc_sk_rcv+0x419/0x2cc0
[ 287.828648][ C1] ? stack_trace_save+0x98/0xe0
[ 287.828668][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80
[ 287.828699][ C1] ? __stack_depot_save+0x445/0x480
[ 287.828725][ C1] ? kasan_set_track+0x60/0x70
[ 287.828741][ C1] ? kasan_set_track+0x4b/0x70
[ 287.828755][ C1] ? ____kasan_slab_free+0x132/0x180
[ 287.828773][ C1] ? tipc_node_xmit+0x257/0xd00
[ 287.828791][ C1] ? tipc_sk_backlog_rcv+0x16f/0x1f0
[ 287.828812][ C1] ? __release_sock+0x154/0x380
[ 287.828827][ C1] ? sockopt_release_sock+0x95/0x1f0
[ 287.828850][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 287.828868][ C1] ? do_syscall_64+0x4c/0xa0
[ 287.828891][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 287.828921][ C1] tipc_node_xmit+0x257/0xd00
[ 287.828938][ C1] ? kasan_quarantine_put+0x34/0x190
[ 287.828964][ C1] ? __cfi_tipc_node_xmit+0x10/0x10
[ 287.828979][ C1] ? ____kasan_slab_free+0x13d/0x180
[ 287.828997][ C1] ? __kasan_slab_free+0x11/0x20
[ 287.829013][ C1] ? slab_free_freelist_hook+0xc2/0x190
[ 287.829036][ C1] ? kfree_skbmem+0x10c/0x180
[ 287.829058][ C1] tipc_node_distr_xmit+0x292/0x390
[ 287.829076][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10
[ 287.829096][ C1] tipc_sk_rcv+0x1aa3/0x2cc0
[ 287.829123][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 287.829146][ C1] tipc_node_xmit+0x257/0xd00
[ 287.829168][ C1] ? __cfi_tipc_node_xmit+0x10/0x10
[ 287.829199][ C1] tipc_sk_push_backlog+0x4dd/0x790
[ 287.829222][ C1] tipc_sk_proto_rcv+0x98d/0x1580
[ 287.829245][ C1] ? tipc_sk_filter_rcv+0x2c80/0x2c80
[ 287.829266][ C1] ? unwind_get_return_address+0x4d/0x90
[ 287.829285][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10
[ 287.829306][ C1] ? arch_stack_walk+0xa0/0x150
[ 287.829333][ C1] tipc_sk_filter_rcv+0x2a93/0x2c80
[ 287.829355][ C1] ? stack_trace_save+0x98/0xe0
[ 287.829374][ C1] ? __stack_depot_save+0x36/0x480
[ 287.829397][ C1] ? ____kasan_slab_free+0x132/0x180
[ 287.829414][ C1] ? __kasan_slab_free+0x11/0x20
[ 287.829430][ C1] ? slab_free_freelist_hook+0xc2/0x190
[ 287.829458][ C1] ? __kmem_cache_free+0xb7/0x1b0
[ 287.829478][ C1] ? kasan_set_track+0x60/0x70
[ 287.829492][ C1] ? kasan_set_track+0x4b/0x70
[ 287.829507][ C1] ? kasan_save_free_info+0x31/0x50
[ 287.829528][ C1] ? ____kasan_slab_free+0x132/0x180
[ 287.829544][ C1] ? __kasan_slab_free+0x11/0x20
[ 287.829560][ C1] ? slab_free_freelist_hook+0xc2/0x190
[ 287.829594][ C1] ? kmem_cache_free+0x12d/0x300
[ 287.829612][ C1] ? kfree_skbmem+0x10c/0x180
[ 287.829632][ C1] ? kfree_skb_reason+0xdc/0x230
[ 287.829653][ C1] ? tipc_msg_reverse+0x6db/0x940
[ 287.829670][ C1] ? tipc_sk_filter_rcv+0xbf3/0x2c80
[ 287.829692][ C1] ? tipc_sk_backlog_rcv+0x109/0x1f0
[ 287.829714][ C1] ? __release_sock+0x154/0x380
[ 287.829728][ C1] ? sk_setsockopt+0x1355/0x2590
[ 287.829749][ C1] ? sock_setsockopt+0x5a/0x70
[ 287.829771][ C1] ? __x64_sys_setsockopt+0xbf/0xd0
[ 287.829795][ C1] ? x64_sys_call+0x124/0x9a0
[ 287.829815][ C1] ? do_syscall_64+0x4c/0xa0
[ 287.829837][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 287.829865][ C1] ? tipc_sk_publish+0x440/0x440
[ 287.829886][ C1] ? __kasan_check_write+0x14/0x20
[ 287.829909][ C1] ? _raw_spin_lock_bh+0x8e/0xe0
[ 287.829932][ C1] tipc_sk_rcv+0x7d9/0x2cc0
[ 287.829957][ C1] ? tipc_msg_reverse+0x6db/0x940
[ 287.829975][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 287.829997][ C1] ? tipc_sk_filter_rcv+0x2a1c/0x2c80
[ 287.830020][ C1] tipc_node_xmit+0x257/0xd00
[ 287.830038][ C1] ? __cfi_tipc_node_xmit+0x10/0x10
[ 287.830058][ C1] tipc_node_distr_xmit+0x292/0x390
[ 287.830077][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10
[ 287.830103][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0
[ 287.830126][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10
[ 287.830150][ C1] __release_sock+0x154/0x380
[ 287.830166][ C1] sockopt_release_sock+0x95/0x1f0
[ 287.830189][ C1] sk_setsockopt+0x1355/0x2590
[ 287.830212][ C1] ? __cfi_sk_setsockopt+0x10/0x10
[ 287.830235][ C1] ? selinux_socket_setsockopt+0x21c/0x300
[ 287.830259][ C1] ? handle_mm_fault+0x17be/0x2640
[ 287.830284][ C1] ? __fget_files+0x2d5/0x330
[ 287.830310][ C1] sock_setsockopt+0x5a/0x70
[ 287.830332][ C1] __sys_setsockopt+0x270/0x4e0
[ 287.830357][ C1] ? __cfi___sys_setsockopt+0x10/0x10
[ 287.830383][ C1] ? do_user_addr_fault+0x9ac/0x1050
[ 287.830405][ C1] __x64_sys_setsockopt+0xbf/0xd0
[ 287.830430][ C1] x64_sys_call+0x124/0x9a0
[ 287.830455][ C1] do_syscall_64+0x4c/0xa0
[ 287.830477][ C1] ? clear_bhb_loop+0x15/0x70
[ 287.830492][ C1] ? clear_bhb_loop+0x15/0x70
[ 287.830508][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 287.830533][ C1] RIP: 0033:0x7f4c6a17dff9
[ 287.830547][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 287.830560][ C1] RSP: 002b:00007f4c6aee3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 287.830576][ C1] RAX: ffffffffffffffda RBX: 00007f4c6a336058 RCX: 00007f4c6a17dff9
[ 287.830588][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003
[ 287.830598][ C1] RBP: 00007f4c6a1f0296 R08: 0000000000000004 R09: 0000000000000000
[ 287.830608][ C1] R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000000
[ 287.830618][ C1] R13: 0000000000000001 R14: 00007f4c6a336058 R15: 00007ffdc3a4dea8
[ 287.830632][ C1]