Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. 2026/02/26 14:54:43 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 48.648472][ T30] audit: type=1400 audit(1772117684.745:105): avc: denied { unlink } for pid=390 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 48.699631][ T390] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.397874][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.415671][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.426248][ T400] device bridge_slave_0 entered promiscuous mode [ 49.446684][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.453963][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.461663][ T400] device bridge_slave_1 entered promiscuous mode [ 49.513651][ T30] audit: type=1400 audit(1772117685.605:106): avc: denied { create } for pid=425 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.724834][ T30] audit: type=1401 audit(1772117685.815:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 49.858732][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.865916][ T400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.873614][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.880835][ T400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.913172][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.921319][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.933644][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.942239][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.969537][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.978198][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.985855][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.993639][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.002982][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.010165][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.035983][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.063271][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.073129][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.090064][ T400] device veth0_vlan entered promiscuous mode [ 50.106064][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.115146][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.124188][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.139101][ T400] device veth1_macvtap entered promiscuous mode [ 50.146159][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.162551][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.188975][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/02/26 14:54:46 executed programs: 0 [ 50.343366][ T456] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.351656][ T456] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.359465][ T456] device bridge_slave_0 entered promiscuous mode [ 50.381501][ T456] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.389173][ T456] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.396951][ T456] device bridge_slave_1 entered promiscuous mode [ 50.553371][ T466] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.560502][ T466] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.568109][ T466] device bridge_slave_0 entered promiscuous mode [ 50.580579][ T467] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.588297][ T467] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.595878][ T467] device bridge_slave_0 entered promiscuous mode [ 50.603269][ T466] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.610745][ T466] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.618546][ T466] device bridge_slave_1 entered promiscuous mode [ 50.633838][ T467] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.641426][ T467] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.650024][ T467] device bridge_slave_1 entered promiscuous mode [ 50.667828][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.675041][ T463] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.682554][ T463] device bridge_slave_0 entered promiscuous mode [ 50.707067][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.714370][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.722290][ T463] device bridge_slave_1 entered promiscuous mode [ 50.776788][ T459] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.784737][ T459] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.792957][ T459] device bridge_slave_0 entered promiscuous mode [ 50.818066][ T459] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.825624][ T459] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.833142][ T459] device bridge_slave_1 entered promiscuous mode [ 50.927764][ T456] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.935595][ T456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.975609][ T466] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.982693][ T466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.990287][ T466] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.997686][ T466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.047842][ T467] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.055110][ T467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.062567][ T467] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.069850][ T467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.083693][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.090911][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.098521][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.105870][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.141142][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.149495][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.157310][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.164995][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.172881][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.180654][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.188080][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.195665][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.220348][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.228433][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.258291][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.266431][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.274629][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.282944][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.291697][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.298952][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.307175][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.316247][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.323654][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.331705][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.340640][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.347884][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.356719][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.388081][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.396509][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.405215][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.412619][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.421341][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.430108][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.439497][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.447258][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.455204][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.464124][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.473059][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.481096][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.488796][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.498018][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.506945][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.514521][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.522304][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.530919][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.539774][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.547014][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.554930][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.563527][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.571995][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.579487][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.587318][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.595653][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.604643][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.613698][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.622805][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.630884][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.659493][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.668248][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.676816][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.685444][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.694524][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.703114][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.712668][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.722430][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.743796][ T459] device veth0_vlan entered promiscuous mode [ 51.754249][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.763694][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.772419][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.780281][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.788620][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.796986][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.805154][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.813549][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.822161][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.831050][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.848698][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.857492][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.867144][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.875880][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.887118][ T467] device veth0_vlan entered promiscuous mode [ 51.897261][ T456] device veth0_vlan entered promiscuous mode [ 51.904991][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.914074][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.923186][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.931937][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.940394][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.949280][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.956803][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.964359][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.971846][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.998277][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.011137][ T467] device veth1_macvtap entered promiscuous mode [ 52.019411][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.028185][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.045582][ T463] device veth0_vlan entered promiscuous mode [ 52.052476][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.060825][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.068855][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.076790][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.085382][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.093941][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.102406][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.116812][ T459] device veth1_macvtap entered promiscuous mode [ 52.125891][ T456] device veth1_macvtap entered promiscuous mode [ 52.134005][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.156877][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.166089][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.174940][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.183727][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.192217][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.201570][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.210796][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.219651][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.228192][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.236765][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.245318][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.254133][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.262140][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.271139][ T466] device veth0_vlan entered promiscuous mode [ 52.277741][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.306431][ T30] audit: type=1400 audit(1772117688.395:108): avc: denied { create } for pid=480 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.325159][ T463] device veth1_macvtap entered promiscuous mode [ 52.343074][ T30] audit: type=1400 audit(1772117688.425:109): avc: denied { setopt } for pid=480 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.365058][ T30] audit: type=1400 audit(1772117688.425:110): avc: denied { write } for pid=480 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.369273][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.394295][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.409886][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.419364][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.475314][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.484489][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.513482][ T466] device veth1_macvtap entered promiscuous mode [ 52.538722][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.549049][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.578170][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.630677][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.652503][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.681574][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.708748][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.738557][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.750238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.739573][ T363] device bridge_slave_1 left promiscuous mode [ 53.745944][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.791622][ T363] device bridge_slave_0 left promiscuous mode [ 53.812599][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.838487][ T363] device veth1_macvtap left promiscuous mode [ 53.861364][ T363] device veth0_vlan left promiscuous mode 2026/02/26 14:54:51 executed programs: 598 [ 158.057653][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 158.064848][ C0] rcu: 0-...!: (1 GPs behind) idle=ac5/1/0x4000000000000000 softirq=10610/10640 fqs=34 last_accelerate: 9fcf/c82c dyntick_enabled: 1 [ 158.079017][ C0] (t=10000 jiffies g=5757 q=9166) [ 158.084257][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 9918 jiffies! g5757 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 158.096874][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=1586 [ 158.105285][ C0] rcu: rcu_preempt kthread starved for 9919 jiffies! g5757 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 158.116853][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 158.127000][ C0] rcu: RCU grace-period kthread stack dump: [ 158.132985][ C0] task:rcu_preempt state:I stack:28688 pid: 14 ppid: 2 flags:0x00004000 [ 158.142492][ C0] Call Trace: [ 158.146060][ C0] [ 158.149014][ C0] __schedule+0xb6e/0x14c0 [ 158.153460][ C0] ? release_firmware_map_entry+0x190/0x190 [ 158.159623][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 158.165524][ C0] ? __mod_timer+0x7da/0xb50 [ 158.170219][ C0] schedule+0x11e/0x1e0 [ 158.174472][ C0] schedule_timeout+0x159/0x340 [ 158.179429][ C0] ? console_conditional_schedule+0x30/0x30 [ 158.185523][ C0] ? update_process_times+0x200/0x200 [ 158.191090][ C0] ? prepare_to_swait_event+0x308/0x320 [ 158.196822][ C0] rcu_gp_fqs_loop+0x2ae/0xf80 [ 158.201683][ C0] ? dyntick_save_progress_counter+0x1e0/0x1e0 [ 158.208208][ C0] ? rcu_gp_init+0xc00/0xc00 [ 158.212907][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 158.218207][ C0] ? rcu_gp_init+0x9a7/0xc00 [ 158.223272][ C0] rcu_gp_kthread+0x9b/0x360 [ 158.227866][ C0] ? _raw_spin_lock+0xf0/0xf0 [ 158.232839][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 158.237897][ C0] ? __kasan_check_read+0x11/0x20 [ 158.242941][ C0] ? __kthread_parkme+0xac/0x200 [ 158.248017][ C0] kthread+0x411/0x500 [ 158.252225][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 158.257002][ C0] ? kthread_blkcg+0xd0/0xd0 [ 158.261624][ C0] ret_from_fork+0x1f/0x30 [ 158.266213][ C0] [ 158.269250][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 158.275587][ C0] Sending NMI from CPU 0 to CPUs 1: [ 158.281040][ C1] NMI backtrace for cpu 1 [ 158.281061][ C1] CPU: 1 PID: 4223 Comm: syz.2.1265 Not tainted syzkaller #0 [ 158.281079][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.281092][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x527/0x9c0 [ 158.281119][ C1] Code: 00 41 c6 45 00 00 48 8b 44 24 10 42 0f b6 04 38 84 c0 0f 85 1c 01 00 00 48 8b 44 24 08 c6 00 01 41 bd 00 80 ff ff eb 07 f3 90 <41> ff c5 74 47 43 0f b6 04 3e 84 c0 75 2b 80 3b 00 75 eb 48 89 df [ 158.281137][ C1] RSP: 0018:ffffc9000454f9a0 EFLAGS: 00000206 [ 158.281152][ C1] RAX: 0000000000000000 RBX: ffff88811dbec088 RCX: ffffffff81500909 [ 158.281165][ C1] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff88811dbec088 [ 158.281175][ C1] RBP: ffffc9000454fa90 R08: ffff88811dbec088 R09: 1ffff11023b7d811 [ 158.281187][ C1] R10: dffffc0000000000 R11: ffffed1023b7d812 R12: 1ffff1103ee20001 [ 158.281200][ C1] R13: 00000000ffffcb2a R14: 1ffff11023b7d811 R15: dffffc0000000000 [ 158.281212][ C1] FS: 00005555826bf500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 158.281227][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.281238][ C1] CR2: 00007ff9171d96b8 CR3: 000000012f752000 CR4: 00000000003506a0 [ 158.281253][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 158.281262][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 158.281272][ C1] Call Trace: [ 158.281278][ C1] [ 158.281286][ C1] ? __pv_queued_spin_unlock_slowpath+0x300/0x300 [ 158.281304][ C1] ? stack_trace_save+0xa6/0xf0 [ 158.281328][ C1] ? __stack_depot_save+0x34/0x480 [ 158.281348][ C1] ? __schedule+0xb76/0x14c0 [ 158.281363][ C1] queued_spin_lock_slowpath+0x47/0x50 [ 158.281381][ C1] _raw_spin_lock_bh+0xe4/0xf0 [ 158.281397][ C1] ? _raw_spin_lock_irq+0xf0/0xf0 [ 158.281414][ C1] ? task_work_add+0x27/0x1e0 [ 158.281428][ C1] ? fput+0x1a/0x20 [ 158.281443][ C1] ? filp_close+0x105/0x150 [ 158.281460][ C1] ? __close_range+0x24a/0x420 [ 158.281478][ C1] ? __x64_sys_close_range+0x7a/0x90 [ 158.281493][ C1] ? do_syscall_64+0x4c/0xa0 [ 158.281510][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.281530][ C1] lock_sock_nested+0x95/0x2a0 [ 158.281548][ C1] ? sock_init_data+0xc0/0xc0 [ 158.281565][ C1] ? locks_remove_posix+0x550/0x550 [ 158.281585][ C1] tipc_release+0xb2/0x1640 [ 158.281601][ C1] ? rwsem_write_trylock+0x136/0x300 [ 158.281618][ C1] ? tipc_sock_destruct+0x180/0x180 [ 158.281632][ C1] ? __kasan_check_write+0x14/0x20 [ 158.281649][ C1] ? _raw_spin_lock+0x94/0xf0 [ 158.281666][ C1] ? _raw_spin_trylock_bh+0x150/0x150 [ 158.281684][ C1] sock_close+0xe0/0x270 [ 158.281698][ C1] ? sock_mmap+0xa0/0xa0 [ 158.281712][ C1] __fput+0x20b/0x8b0 [ 158.281728][ C1] ____fput+0x15/0x20 [ 158.281743][ C1] task_work_run+0x127/0x190 [ 158.281758][ C1] exit_to_user_mode_loop+0xd0/0xe0 [ 158.281773][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 158.281788][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 158.281803][ C1] do_syscall_64+0x58/0xa0 [ 158.281820][ C1] ? clear_bhb_loop+0x50/0xa0 [ 158.281834][ C1] ? clear_bhb_loop+0x50/0xa0 [ 158.281848][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.281867][ C1] RIP: 0033:0x7f8868333ef9 [ 158.281886][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.281898][ C1] RSP: 002b:00007ffe849d26a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 158.281914][ C1] RAX: 0000000000000000 RBX: 00007f88685a0da0 RCX: 00007f8868333ef9 [ 158.281925][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 158.281949][ C1] RBP: 00007f88685a0da0 R08: 0000000000000006 R09: 0000000000000000 [ 158.281959][ C1] R10: 00007f88685a0cb0 R11: 0000000000000246 R12: 000000000000e5eb [ 158.281969][ C1] R13: 00007f886859f09c R14: 000000000000e2de R15: 00007f886859f090 [ 158.281983][ C1] [ 158.282067][ C0] NMI backtrace for cpu 0 [ 158.691604][ C0] CPU: 0 PID: 4224 Comm: syz.2.1265 Not tainted syzkaller #0 [ 158.699399][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.709475][ C0] Call Trace: [ 158.712864][ C0] [ 158.715803][ C0] __dump_stack+0x21/0x30 [ 158.720287][ C0] dump_stack_lvl+0x110/0x170 [ 158.725005][ C0] ? show_regs_print_info+0x20/0x20 [ 158.730280][ C0] ? resched_curr+0xa0/0x320 [ 158.735405][ C0] ? wake_up_process+0x20/0x20 [ 158.740179][ C0] dump_stack+0x15/0x20 [ 158.744395][ C0] nmi_cpu_backtrace+0x2af/0x2c0 [ 158.749487][ C0] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 158.755849][ C0] ? __kasan_check_write+0x14/0x20 [ 158.761210][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 158.766931][ C0] ? _raw_spin_lock+0xf0/0xf0 [ 158.771891][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 158.778240][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 158.784554][ C0] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 158.790902][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 158.797099][ C0] rcu_dump_cpu_stacks+0x1c7/0x300 [ 158.802275][ C0] print_cpu_stall+0x320/0x600 [ 158.807338][ C0] rcu_sched_clock_irq+0x759/0x12c0 [ 158.812806][ C0] ? rcu_boost_kthread_setaffinity+0x320/0x320 [ 158.819202][ C0] ? raise_softirq+0x7d/0xf0 [ 158.824424][ C0] ? __raise_softirq_irqoff+0xd0/0xd0 [ 158.829818][ C0] ? hrtimer_run_queues+0x166/0x430 [ 158.835767][ C0] update_process_times+0x198/0x200 [ 158.841152][ C0] tick_sched_timer+0x17c/0x240 [ 158.846113][ C0] ? tick_setup_sched_timer+0x450/0x450 [ 158.851865][ C0] __hrtimer_run_queues+0x3b9/0x9f0 [ 158.857253][ C0] ? hrtimer_interrupt+0x8c0/0x8c0 [ 158.862547][ C0] ? ktime_get_update_offsets_now+0x2fa/0x310 [ 158.868728][ C0] hrtimer_interrupt+0x3c7/0x8c0 [ 158.873687][ C0] __sysvec_apic_timer_interrupt+0xfa/0x3e0 [ 158.879744][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 158.885739][ C0] [ 158.888765][ C0] [ 158.891750][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 158.897840][ C0] RIP: 0010:__kasan_check_write+0xa/0x20 [ 158.903628][ C0] Code: 55 48 89 e5 89 f6 48 8b 4d 08 31 d2 e8 af ed ff ff 5d c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 89 f6 48 8b 4d 08 01 00 00 00 e8 8c ed ff ff 5d c3 66 2e 0f 1f 84 00 00 00 00 00 [ 158.923889][ C0] RSP: 0018:ffffc9000455e710 EFLAGS: 00000256 [ 158.929972][ C0] RAX: 0000000000000401 RBX: ffffc9000455ec54 RCX: ffffffff84b41584 [ 158.938156][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc9000455e740 [ 158.946630][ C0] RBP: ffffc9000455e710 R08: ffffc9000455ec57 R09: 1ffff920008abd8a [ 158.954817][ C0] R10: dffffc0000000000 R11: fffff520008abd8b R12: dffffc0000000000 [ 158.963036][ C0] R13: dffffc0000000000 R14: ffffc9000455e740 R15: 1ffff920008abce4 [ 158.971095][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 158.976689][ C0] _raw_spin_lock_bh+0x94/0xf0 [ 158.981574][ C0] ? _raw_spin_lock_irq+0xf0/0xf0 [ 158.987117][ C0] ? tipc_sk_rcv+0x1a08/0x2c20 [ 158.991907][ C0] tipc_sk_rcv+0x272/0x2c20 [ 158.996861][ C0] ? stack_trace_save+0xa6/0xf0 [ 159.001742][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 159.007882][ C0] ? kasan_set_track+0x5b/0x70 [ 159.012787][ C0] ? kasan_set_free_info+0x23/0x40 [ 159.018530][ C0] ? tipc_sk_rcv+0x1b82/0x2c20 [ 159.023600][ C0] ? tipc_sk_proto_rcv+0xa65/0x1560 [ 159.029075][ C0] ? tipc_sk_backlog_rcv+0x17d/0x210 [ 159.034518][ C0] ? __release_sock+0x17c/0x3f0 [ 159.039478][ C0] ? sock_setsockopt+0x1d7a/0x2490 [ 159.044603][ C0] ? __skb_queue_purge+0x170/0x170 [ 159.049729][ C0] tipc_node_xmit+0x26c/0xd80 [ 159.054941][ C0] ? debug_smp_processor_id+0x17/0x20 [ 159.060405][ C0] ? kasan_quarantine_put+0x34/0x190 [ 159.065812][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 159.071584][ C0] ? ____kasan_slab_free+0x130/0x160 [ 159.076978][ C0] ? __kasan_slab_free+0x11/0x20 [ 159.082215][ C0] ? kfree_skbmem+0x10c/0x180 [ 159.086907][ C0] tipc_node_distr_xmit+0x2a3/0x3b0 [ 159.092488][ C0] ? tipc_node_xmit_skb+0x150/0x150 [ 159.097820][ C0] tipc_sk_rcv+0x19f7/0x2c20 [ 159.102528][ C0] ? __skb_queue_purge+0x170/0x170 [ 159.108115][ C0] tipc_node_xmit+0x26c/0xd80 [ 159.112951][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 159.118935][ C0] tipc_sk_push_backlog+0x4dd/0x790 [ 159.124142][ C0] tipc_sk_proto_rcv+0xa65/0x1560 [ 159.129452][ C0] ? tipc_sk_filter_rcv+0x2cb0/0x2cb0 [ 159.135011][ C0] ? unwind_get_return_address+0x4d/0x90 [ 159.141017][ C0] ? stack_trace_save+0xf0/0xf0 [ 159.145959][ C0] ? arch_stack_walk+0x30/0x140 [ 159.151057][ C0] tipc_sk_filter_rcv+0x2ac0/0x2cb0 [ 159.156457][ C0] ? stack_trace_save+0xa6/0xf0 [ 159.161849][ C0] ? __stack_depot_save+0x34/0x480 [ 159.167327][ C0] ? kasan_set_track+0x5b/0x70 [ 159.172229][ C0] ? kasan_set_track+0x5b/0x70 [ 159.177062][ C0] ? kasan_set_track+0x4a/0x70 [ 159.181942][ C0] ? kasan_set_free_info+0x23/0x40 [ 159.187161][ C0] ? ____kasan_slab_free+0x125/0x160 [ 159.192809][ C0] ? __kasan_slab_free+0x11/0x20 [ 159.197843][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 159.203599][ C0] ? kmem_cache_free+0x100/0x320 [ 159.208894][ C0] ? kfree_skbmem+0x10c/0x180 [ 159.213666][ C0] ? kfree_skb+0xc1/0x2f0 [ 159.218217][ C0] ? tipc_msg_reverse+0x698/0x900 [ 159.223530][ C0] ? tipc_sk_filter_rcv+0xc05/0x2cb0 [ 159.229008][ C0] ? tipc_sk_backlog_rcv+0x117/0x210 [ 159.234596][ C0] ? __release_sock+0x17c/0x3f0 [ 159.240085][ C0] ? sock_setsockopt+0x1d7a/0x2490 [ 159.245543][ C0] ? __x64_sys_setsockopt+0xbf/0xd0 [ 159.251020][ C0] ? x64_sys_call+0x982/0x9a0 [ 159.255928][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.262442][ C0] ? tipc_sk_publish+0x470/0x470 [ 159.267764][ C0] ? __kasan_check_write+0x14/0x20 [ 159.273088][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 159.278238][ C0] tipc_sk_rcv+0x794/0x2c20 [ 159.282789][ C0] ? kmem_cache_free+0x100/0x320 [ 159.288046][ C0] ? __skb_queue_purge+0x170/0x170 [ 159.293837][ C0] ? tipc_sk_filter_rcv+0x2a3e/0x2cb0 [ 159.299307][ C0] tipc_node_xmit+0x26c/0xd80 [ 159.304318][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 159.309872][ C0] tipc_node_distr_xmit+0x2a3/0x3b0 [ 159.315345][ C0] ? tipc_node_xmit_skb+0x150/0x150 [ 159.320913][ C0] tipc_sk_backlog_rcv+0x17d/0x210 [ 159.326670][ C0] ? tipc_sk_timeout+0x990/0x990 [ 159.332064][ C0] ? lock_sock_nested+0x21c/0x2a0 [ 159.337301][ C0] __release_sock+0x17c/0x3f0 [ 159.342277][ C0] sock_setsockopt+0x1d7a/0x2490 [ 159.347353][ C0] ? security_file_alloc+0x33/0x120 [ 159.352836][ C0] ? __sock_set_mark+0x160/0x160 [ 159.357922][ C0] ? selinux_socket_setsockopt+0x282/0x360 [ 159.364048][ C0] ? selinux_socket_getsockopt+0x340/0x340 [ 159.369949][ C0] ? memcpy+0x56/0x70 [ 159.373951][ C0] ? __fget_files+0x2c4/0x320 [ 159.378631][ C0] ? security_socket_setsockopt+0x82/0xa0 [ 159.384361][ C0] __sys_setsockopt+0x261/0x470 [ 159.389415][ C0] ? __ia32_sys_recv+0xb0/0xb0 [ 159.394554][ C0] ? fd_install+0x169/0x2a0 [ 159.399397][ C0] ? __kasan_check_write+0x14/0x20 [ 159.404702][ C0] __x64_sys_setsockopt+0xbf/0xd0 [ 159.410474][ C0] x64_sys_call+0x982/0x9a0 [ 159.415207][ C0] do_syscall_64+0x4c/0xa0 [ 159.419647][ C0] ? clear_bhb_loop+0x50/0xa0 [ 159.424660][ C0] ? clear_bhb_loop+0x50/0xa0 [ 159.429647][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.435652][ C0] RIP: 0033:0x7f8868333ef9 [ 159.440075][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.460045][ C0] RSP: 002b:00007f8868198028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 159.468785][ C0] RAX: ffffffffffffffda RBX: 00007f886859efa0 RCX: 00007f8868333ef9 [ 159.477080][ C0] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 159.485535][ C0] RBP: 00007f88683c8ee0 R08: 0000000000000004 R09: 0000000000000000 [ 159.493772][ C0] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 159.501974][ C0] R13: 00007f886859f038 R14: 00007f886859efa0 R15: 00007ffe849d2548 [ 159.510058][ C0] [ 309.341844][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [syz.2.1265:4224] [ 309.350535][ C0] Modules linked in: [ 309.354537][ C0] CPU: 0 PID: 4224 Comm: syz.2.1265 Not tainted syzkaller #0 [ 309.362123][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 309.372281][ C0] RIP: 0010:__local_bh_enable_ip+0x5f/0x80 [ 309.378129][ C0] Code: 48 c7 c7 60 27 08 85 e8 5f 43 6f 03 65 66 8b 05 17 3f c4 7e 66 85 c0 75 22 bf 01 00 00 00 e8 a8 98 08 00 65 8b 05 89 3c c3 7e <85> c0 74 02 5d c3 e8 ea 47 c1 ff 5d c3 0f 0b eb a2 e8 0b 00 00 00 [ 309.398689][ C0] RSP: 0018:ffffc9000455e798 EFLAGS: 00000213 [ 309.405151][ C0] RAX: 0000000000000201 RBX: ffff8881075ee8c4 RCX: 0000000000000200 [ 309.413131][ C0] RDX: 0000000000000000 RSI: 0000000000000201 RDI: 00000000ffffffff [ 309.421664][ C0] RBP: ffffc9000455e798 R08: 0000000000000003 R09: 0000000000000004 [ 309.429837][ C0] R10: dffffc0000000000 R11: fffff520008abce8 R12: ffffc9000455ec40 [ 309.438005][ C0] R13: dffffc0000000000 R14: 00000000ede7851f R15: 00000000ede7851f [ 309.446596][ C0] FS: 00007f88681986c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 309.455528][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.462696][ C0] CR2: 000055556cc50908 CR3: 000000012f752000 CR4: 00000000003506b0 [ 309.470976][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 309.479156][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.487511][ C0] Call Trace: [ 309.491148][ C0] [ 309.494277][ C0] _raw_spin_unlock_bh+0x51/0x60 [ 309.499235][ C0] tipc_sk_rcv+0x397/0x2c20 [ 309.503967][ C0] ? stack_trace_save+0xa6/0xf0 [ 309.508996][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 309.514821][ C0] ? kasan_set_track+0x5b/0x70 [ 309.519593][ C0] ? kasan_set_free_info+0x23/0x40 [ 309.524820][ C0] ? tipc_sk_rcv+0x1b82/0x2c20 [ 309.529740][ C0] ? tipc_sk_proto_rcv+0xa65/0x1560 [ 309.535134][ C0] ? tipc_sk_backlog_rcv+0x17d/0x210 [ 309.540754][ C0] ? __release_sock+0x17c/0x3f0 [ 309.545628][ C0] ? sock_setsockopt+0x1d7a/0x2490 [ 309.550835][ C0] ? __skb_queue_purge+0x170/0x170 [ 309.555978][ C0] tipc_node_xmit+0x26c/0xd80 [ 309.560754][ C0] ? debug_smp_processor_id+0x17/0x20 [ 309.566281][ C0] ? kasan_quarantine_put+0x34/0x190 [ 309.571750][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 309.577497][ C0] ? ____kasan_slab_free+0x130/0x160 [ 309.582792][ C0] ? __kasan_slab_free+0x11/0x20 [ 309.587976][ C0] ? kfree_skbmem+0x10c/0x180 [ 309.592956][ C0] tipc_node_distr_xmit+0x2a3/0x3b0 [ 309.598447][ C0] ? tipc_node_xmit_skb+0x150/0x150 [ 309.603837][ C0] tipc_sk_rcv+0x19f7/0x2c20 [ 309.608644][ C0] ? __skb_queue_purge+0x170/0x170 [ 309.613871][ C0] tipc_node_xmit+0x26c/0xd80 [ 309.618878][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 309.624930][ C0] tipc_sk_push_backlog+0x4dd/0x790 [ 309.630269][ C0] tipc_sk_proto_rcv+0xa65/0x1560 [ 309.635417][ C0] ? tipc_sk_filter_rcv+0x2cb0/0x2cb0 [ 309.640795][ C0] ? unwind_get_return_address+0x4d/0x90 [ 309.646459][ C0] ? stack_trace_save+0xf0/0xf0 [ 309.651318][ C0] ? arch_stack_walk+0x30/0x140 [ 309.656382][ C0] tipc_sk_filter_rcv+0x2ac0/0x2cb0 [ 309.661690][ C0] ? stack_trace_save+0xa6/0xf0 [ 309.666649][ C0] ? __stack_depot_save+0x34/0x480 [ 309.671865][ C0] ? kasan_set_track+0x5b/0x70 [ 309.676771][ C0] ? kasan_set_track+0x5b/0x70 [ 309.681670][ C0] ? kasan_set_track+0x4a/0x70 [ 309.686445][ C0] ? kasan_set_free_info+0x23/0x40 [ 309.691650][ C0] ? ____kasan_slab_free+0x125/0x160 [ 309.697035][ C0] ? __kasan_slab_free+0x11/0x20 [ 309.702063][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 309.707927][ C0] ? kmem_cache_free+0x100/0x320 [ 309.713472][ C0] ? kfree_skbmem+0x10c/0x180 [ 309.718459][ C0] ? kfree_skb+0xc1/0x2f0 [ 309.722889][ C0] ? tipc_msg_reverse+0x698/0x900 [ 309.728022][ C0] ? tipc_sk_filter_rcv+0xc05/0x2cb0 [ 309.733324][ C0] ? tipc_sk_backlog_rcv+0x117/0x210 [ 309.738826][ C0] ? __release_sock+0x17c/0x3f0 [ 309.743795][ C0] ? sock_setsockopt+0x1d7a/0x2490 [ 309.749097][ C0] ? __x64_sys_setsockopt+0xbf/0xd0 [ 309.754515][ C0] ? x64_sys_call+0x982/0x9a0 [ 309.759723][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 309.766015][ C0] ? tipc_sk_publish+0x470/0x470 [ 309.770976][ C0] ? __kasan_check_write+0x14/0x20 [ 309.776234][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 309.781301][ C0] tipc_sk_rcv+0x794/0x2c20 [ 309.785825][ C0] ? kmem_cache_free+0x100/0x320 [ 309.790968][ C0] ? __skb_queue_purge+0x170/0x170 [ 309.796095][ C0] ? tipc_sk_filter_rcv+0x2a3e/0x2cb0 [ 309.801485][ C0] tipc_node_xmit+0x26c/0xd80 [ 309.806314][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 309.811974][ C0] tipc_node_distr_xmit+0x2a3/0x3b0 [ 309.817293][ C0] ? tipc_node_xmit_skb+0x150/0x150 [ 309.822753][ C0] tipc_sk_backlog_rcv+0x17d/0x210 [ 309.827970][ C0] ? tipc_sk_timeout+0x990/0x990 [ 309.833051][ C0] ? lock_sock_nested+0x21c/0x2a0 [ 309.838214][ C0] __release_sock+0x17c/0x3f0 [ 309.842996][ C0] sock_setsockopt+0x1d7a/0x2490 [ 309.848053][ C0] ? security_file_alloc+0x33/0x120 [ 309.853357][ C0] ? __sock_set_mark+0x160/0x160 [ 309.858565][ C0] ? selinux_socket_setsockopt+0x282/0x360 [ 309.864577][ C0] ? selinux_socket_getsockopt+0x340/0x340 [ 309.870490][ C0] ? memcpy+0x56/0x70 [ 309.874630][ C0] ? __fget_files+0x2c4/0x320 [ 309.879324][ C0] ? security_socket_setsockopt+0x82/0xa0 [ 309.885228][ C0] __sys_setsockopt+0x261/0x470 [ 309.890257][ C0] ? __ia32_sys_recv+0xb0/0xb0 [ 309.895146][ C0] ? fd_install+0x169/0x2a0 [ 309.899867][ C0] ? __kasan_check_write+0x14/0x20 [ 309.905271][ C0] __x64_sys_setsockopt+0xbf/0xd0 [ 309.910517][ C0] x64_sys_call+0x982/0x9a0 [ 309.915122][ C0] do_syscall_64+0x4c/0xa0 [ 309.919634][ C0] ? clear_bhb_loop+0x50/0xa0 [ 309.924711][ C0] ? clear_bhb_loop+0x50/0xa0 [ 309.929397][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 309.935397][ C0] RIP: 0033:0x7f8868333ef9 [ 309.940007][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.960047][ C0] RSP: 002b:00007f8868198028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 309.968926][ C0] RAX: ffffffffffffffda RBX: 00007f886859efa0 RCX: 00007f8868333ef9 [ 309.977450][ C0] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 309.985607][ C0] RBP: 00007f88683c8ee0 R08: 0000000000000004 R09: 0000000000000000 [ 309.993959][ C0] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 310.002052][ C0] R13: 00007f886859f038 R14: 00007f886859efa0 R15: 00007ffe849d2548 [ 310.010041][ C0] [ 310.013186][ C0] Sending NMI from CPU 0 to CPUs 1: [ 310.018547][ C1] NMI backtrace for cpu 1 [ 310.018559][ C1] CPU: 1 PID: 4223 Comm: syz.2.1265 Not tainted syzkaller #0 [ 310.018575][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 310.018585][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x527/0x9c0 [ 310.018611][ C1] Code: 00 41 c6 45 00 00 48 8b 44 24 10 42 0f b6 04 38 84 c0 0f 85 1c 01 00 00 48 8b 44 24 08 c6 00 01 41 bd 00 80 ff ff eb 07 f3 90 <41> ff c5 74 47 43 0f b6 04 3e 84 c0 75 2b 80 3b 00 75 eb 48 89 df [ 310.018624][ C1] RSP: 0018:ffffc9000454f9a0 EFLAGS: 00000206 [ 310.018640][ C1] RAX: 0000000000000000 RBX: ffff88811dbec088 RCX: ffffffff81500909 [ 310.018652][ C1] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff88811dbec088 [ 310.018662][ C1] RBP: ffffc9000454fa90 R08: ffff88811dbec088 R09: 1ffff11023b7d811 [ 310.018675][ C1] R10: dffffc0000000000 R11: ffffed1023b7d812 R12: 1ffff1103ee20001 [ 310.018687][ C1] R13: 00000000ffff9532 R14: 1ffff11023b7d811 R15: dffffc0000000000 [ 310.018699][ C1] FS: 00005555826bf500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 310.018714][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.018725][ C1] CR2: 00007ff9171d96b8 CR3: 000000012f752000 CR4: 00000000003506a0 [ 310.018740][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 310.018749][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 310.018759][ C1] Call Trace: [ 310.018764][ C1] [ 310.018772][ C1] ? __pv_queued_spin_unlock_slowpath+0x300/0x300 [ 310.018790][ C1] ? stack_trace_save+0xa6/0xf0 [ 310.018807][ C1] ? __stack_depot_save+0x34/0x480 [ 310.018825][ C1] ? __schedule+0xb76/0x14c0 [ 310.018847][ C1] queued_spin_lock_slowpath+0x47/0x50 [ 310.018864][ C1] _raw_spin_lock_bh+0xe4/0xf0 [ 310.018881][ C1] ? _raw_spin_lock_irq+0xf0/0xf0 [ 310.018897][ C1] ? task_work_add+0x27/0x1e0 [ 310.018912][ C1] ? fput+0x1a/0x20 [ 310.018926][ C1] ? filp_close+0x105/0x150 [ 310.018943][ C1] ? __close_range+0x24a/0x420 [ 310.018961][ C1] ? __x64_sys_close_range+0x7a/0x90 [ 310.018975][ C1] ? do_syscall_64+0x4c/0xa0 [ 310.018993][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 310.019012][ C1] lock_sock_nested+0x95/0x2a0 [ 310.019030][ C1] ? sock_init_data+0xc0/0xc0 [ 310.019047][ C1] ? locks_remove_posix+0x550/0x550 [ 310.019067][ C1] tipc_release+0xb2/0x1640 [ 310.019082][ C1] ? rwsem_write_trylock+0x136/0x300 [ 310.019098][ C1] ? tipc_sock_destruct+0x180/0x180 [ 310.019113][ C1] ? __kasan_check_write+0x14/0x20 [ 310.019129][ C1] ? _raw_spin_lock+0x94/0xf0 [ 310.019145][ C1] ? _raw_spin_trylock_bh+0x150/0x150 [ 310.019163][ C1] sock_close+0xe0/0x270 [ 310.019177][ C1] ? sock_mmap+0xa0/0xa0 [ 310.019191][ C1] __fput+0x20b/0x8b0 [ 310.019207][ C1] ____fput+0x15/0x20 [ 310.019221][ C1] task_work_run+0x127/0x190 [ 310.019236][ C1] exit_to_user_mode_loop+0xd0/0xe0 [ 310.019251][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 310.019266][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 310.019281][ C1] do_syscall_64+0x58/0xa0 [ 310.019297][ C1] ? clear_bhb_loop+0x50/0xa0 [ 310.019311][ C1] ? clear_bhb_loop+0x50/0xa0 [ 310.019325][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 310.019343][ C1] RIP: 0033:0x7f8868333ef9 [ 310.019357][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.019369][ C1] RSP: 002b:00007ffe849d26a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 310.019389][ C1] RAX: 0000000000000000 RBX: 00007f88685a0da0 RCX: 00007f8868333ef9 [ 310.019399][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 310.019409][ C1] RBP: 00007f88685a0da0 R08: 0000000000000006 R09: 0000000000000000 [ 310.019419][ C1] R10: 00007f88685a0cb0 R11: 0000000000000246 R12: 000000000000e5eb [ 310.019429][ C1] R13: 00007f886859f09c R14: 000000000000e2de R15: 00007f886859f090 [ 310.019443][ C1]