Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. 2026/01/02 13:30:32 ignoring optional flag "type"="gce" 2026/01/02 13:30:32 parsed 1 programs [ 39.683289][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 39.683300][ T24] audit: type=1400 audit(1767360632.339:92): avc: denied { unlink } for pid=318 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2026/01/02 13:30:32 executed programs: 0 [ 39.774703][ T318] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.816690][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.824208][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.831674][ T324] device bridge_slave_0 entered promiscuous mode [ 39.838677][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.846089][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.853556][ T324] device bridge_slave_1 entered promiscuous mode [ 39.882010][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.889639][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.896941][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.903971][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.919525][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.926856][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.934406][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.942279][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.951474][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.959618][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.966621][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.975352][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.983821][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.991185][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.002586][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.011880][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.024780][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.035662][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.044018][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.051793][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.059905][ T324] device veth0_vlan entered promiscuous mode [ 40.069476][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.078327][ T324] device veth1_macvtap entered promiscuous mode [ 40.087712][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.098092][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.116869][ T24] audit: type=1400 audit(1767360632.769:93): avc: denied { create } for pid=328 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.138640][ T24] audit: type=1400 audit(1767360632.769:94): avc: denied { write } for pid=328 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.159705][ T24] audit: type=1400 audit(1767360632.799:95): avc: denied { setopt } for pid=328 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.687443][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 141.694257][ C1] rcu: 1-...!: (10000 ticks this GP) idle=dba/1/0x4000000000000000 softirq=3018/3018 fqs=0 last_accelerate: 9ac7/c1d7 dyntick_enabled: 1 [ 141.708597][ C1] (t=10000 jiffies g=1309 q=184) [ 141.713809][ C1] rcu: rcu_preempt kthread starved for 10000 jiffies! g1309 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 141.725245][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 141.735700][ C1] rcu: RCU grace-period kthread stack dump: [ 141.741782][ C1] task:rcu_preempt state:I stack: 0 pid: 13 ppid: 2 flags:0x00004000 [ 141.751160][ C1] Call Trace: [ 141.754675][ C1] __schedule+0xb47/0x1310 [ 141.759157][ C1] ? release_firmware_map_entry+0x18d/0x18d [ 141.765122][ C1] ? __mod_timer+0x7ae/0xb30 [ 141.770131][ C1] schedule+0x13c/0x1d0 [ 141.774526][ C1] schedule_timeout+0x12c/0x2d0 [ 141.779622][ C1] ? console_conditional_schedule+0x10/0x10 [ 141.785671][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 141.791194][ C1] ? run_local_timers+0x160/0x160 [ 141.796373][ C1] ? prepare_to_swait_event+0x320/0x340 [ 141.802071][ C1] rcu_gp_kthread+0x100a/0x26a0 [ 141.807237][ C1] ? rcu_barrier_callback+0x50/0x50 [ 141.812517][ C1] ? __kasan_check_read+0x11/0x20 [ 141.817752][ C1] ? __kthread_parkme+0xb9/0x1c0 [ 141.822844][ C1] kthread+0x346/0x3d0 [ 141.826886][ C1] ? rcu_barrier_callback+0x50/0x50 [ 141.832235][ C1] ? kthread_blkcg+0xd0/0xd0 [ 141.836802][ C1] ret_from_fork+0x1f/0x30 [ 141.841316][ C1] NMI backtrace for cpu 1 [ 141.845818][ C1] CPU: 1 PID: 1114 Comm: syz-executor.0 Not tainted syzkaller #0 [ 141.853499][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.863621][ C1] Call Trace: [ 141.866895][ C1] [ 141.869736][ C1] __dump_stack+0x21/0x24 [ 141.874057][ C1] dump_stack_lvl+0x169/0x1d8 [ 141.878998][ C1] ? show_regs_print_info+0x18/0x18 [ 141.884599][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 141.890545][ C1] ? _raw_spin_lock+0xe0/0xe0 [ 141.895367][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 141.901407][ C1] dump_stack+0x15/0x1c [ 141.905621][ C1] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 141.911580][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 141.917635][ C1] rcu_dump_cpu_stacks+0x19c/0x2c0 [ 141.922820][ C1] rcu_sched_clock_irq+0xf79/0x1870 [ 141.928174][ C1] ? rcutree_dead_cpu+0x2f0/0x2f0 [ 141.933446][ C1] ? hrtimer_run_queues+0x166/0x430 [ 141.938929][ C1] update_process_times+0x198/0x200 [ 141.944286][ C1] tick_sched_timer+0x17c/0x240 [ 141.949201][ C1] ? tick_setup_sched_timer+0x450/0x450 [ 141.954807][ C1] __hrtimer_run_queues+0x37a/0x960 [ 141.960092][ C1] ? hrtimer_interrupt+0xdc0/0xdc0 [ 141.965179][ C1] ? ktime_get_update_offsets_now+0x293/0x2b0 [ 141.971308][ C1] hrtimer_interrupt+0x3a6/0xdc0 [ 141.976398][ C1] ? sched_clock_cpu+0x1b/0x3d0 [ 141.981221][ C1] __sysvec_apic_timer_interrupt+0xfa/0x3f0 [ 141.987112][ C1] asm_call_irq_on_stack+0xf/0x20 [ 141.992191][ C1] [ 141.995120][ C1] sysvec_apic_timer_interrupt+0x85/0xe0 [ 142.000737][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 142.006697][ C1] RIP: 0010:tipc_node_distr_xmit+0x72/0x390 [ 142.012905][ C1] Code: 68 3d 54 8f 85 48 c7 44 24 70 60 aa 5c 84 48 8d 4c 24 60 48 c1 e9 03 48 b8 f1 f1 f1 f1 00 00 00 f3 48 89 04 19 48 89 4c 24 20 44 19 08 f3 f3 f3 f3 e8 a1 f9 06 fd 4c 89 f0 48 c1 e8 03 48 89 [ 142.033014][ C1] RSP: 0018:ffffc900029ee720 EFLAGS: 00000a06 [ 142.039253][ C1] RAX: f3000000f1f1f1f1 RBX: dffffc0000000000 RCX: 1ffff9200053dcf0 [ 142.047198][ C1] RDX: 0000000000000000 RSI: ffffc900029ee9e0 RDI: ffff88811fa68000 [ 142.055140][ C1] RBP: ffffc900029ee830 R08: dffffc0000000000 R09: ffffed10215ba332 [ 142.063204][ C1] R10: ffffed10215ba332 R11: 1ffff110215ba331 R12: dffffc0000000000 [ 142.071169][ C1] R13: ffff88810add1900 R14: ffffc900029ee9e0 R15: 000000008d64b0b0 [ 142.079306][ C1] ? tipc_sk_lookup+0x544/0x5f0 [ 142.084235][ C1] ? tipc_sk_rcv+0x41a/0x1ef0 [ 142.089080][ C1] ? tipc_node_xmit_skb+0x130/0x130 [ 142.094359][ C1] ? _raw_spin_trylock_bh+0xd5/0x130 [ 142.099730][ C1] ? _raw_spin_trylock+0x140/0x140 [ 142.104991][ C1] ? kasan_check_range+0x34/0x290 [ 142.110092][ C1] tipc_sk_rcv+0x19b9/0x1ef0 [ 142.114661][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 142.120632][ C1] ? __stack_depot_save+0x479/0x4c0 [ 142.125898][ C1] ? kasan_set_track+0x5b/0x70 [ 142.130808][ C1] ? kasan_set_track+0x4a/0x70 [ 142.135646][ C1] ? ____kasan_slab_free+0x125/0x160 [ 142.141106][ C1] ? __kasan_slab_free+0x11/0x20 [ 142.146106][ C1] ? kmem_cache_free+0x100/0x2d0 [ 142.151015][ C1] ? kfree_skbmem+0x10c/0x180 [ 142.156207][ C1] ? kfree_skb+0xc1/0x2f0 [ 142.160683][ C1] ? tipc_sk_backlog_rcv+0x16f/0x1f0 [ 142.165958][ C1] ? __release_sock+0x146/0x360 [ 142.170912][ C1] ? __sys_setsockopt+0x265/0x460 [ 142.176020][ C1] ? __skb_queue_purge+0x170/0x170 [ 142.181311][ C1] tipc_node_xmit+0x256/0xcd0 [ 142.186303][ C1] ? debug_smp_processor_id+0x17/0x20 [ 142.192007][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 142.198020][ C1] ? ____kasan_slab_free+0x130/0x160 [ 142.203524][ C1] ? __kasan_slab_free+0x11/0x20 [ 142.208677][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 142.214300][ C1] ? kfree_skbmem+0x10c/0x180 [ 142.219170][ C1] tipc_node_distr_xmit+0x292/0x390 [ 142.224361][ C1] ? tipc_node_xmit_skb+0x130/0x130 [ 142.229650][ C1] ? trace_tipc_sk_rej_msg+0x2c/0x6d0 [ 142.235376][ C1] tipc_sk_rcv+0x19b9/0x1ef0 [ 142.240514][ C1] ? __skb_queue_purge+0x170/0x170 [ 142.245614][ C1] tipc_node_xmit+0x256/0xcd0 [ 142.250627][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 142.256426][ C1] tipc_sk_push_backlog+0x4dd/0x790 [ 142.261615][ C1] tipc_sk_proto_rcv+0x98d/0x1ac0 [ 142.266897][ C1] ? trace_tipc_sk_dump+0x6c0/0x6c0 [ 142.272171][ C1] tipc_sk_filter_rcv+0x30ac/0x3850 [ 142.277536][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 142.282962][ C1] ? kasan_set_track+0x5b/0x70 [ 142.287858][ C1] ? kasan_set_track+0x4a/0x70 [ 142.292686][ C1] ? kasan_set_free_info+0x23/0x40 [ 142.297876][ C1] ? kasan_set_track+0x5b/0x70 [ 142.302729][ C1] ? kasan_set_track+0x4a/0x70 [ 142.307878][ C1] ? kasan_set_free_info+0x23/0x40 [ 142.313834][ C1] ? ____kasan_slab_free+0x125/0x160 [ 142.319626][ C1] ? __kasan_slab_free+0x11/0x20 [ 142.324763][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 142.330610][ C1] ? kmem_cache_free+0x100/0x2d0 [ 142.335998][ C1] ? kfree_skb+0xc1/0x2f0 [ 142.340304][ C1] ? tipc_msg_reverse+0x698/0x900 [ 142.345395][ C1] ? tipc_sk_filter_rcv+0xca0/0x3850 [ 142.350655][ C1] ? tipc_sk_backlog_rcv+0x109/0x1f0 [ 142.356184][ C1] ? __release_sock+0x146/0x360 [ 142.361157][ C1] ? __sys_setsockopt+0x265/0x460 [ 142.366411][ C1] ? __x64_sys_setsockopt+0xbf/0xd0 [ 142.371761][ C1] ? do_syscall_64+0x31/0x40 [ 142.376426][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 142.382557][ C1] ? tipc_sk_dump+0xfc0/0xfc0 [ 142.387211][ C1] ? __kasan_check_write+0x14/0x20 [ 142.392385][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 142.397777][ C1] tipc_sk_rcv+0x7cc/0x1ef0 [ 142.402438][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 142.408223][ C1] ? kmem_cache_free+0x100/0x2d0 [ 142.413217][ C1] ? __skb_queue_purge+0x170/0x170 [ 142.418512][ C1] ? tipc_sk_filter_rcv+0x3034/0x3850 [ 142.423877][ C1] tipc_node_xmit+0x256/0xcd0 [ 142.428711][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 142.434410][ C1] tipc_node_distr_xmit+0x292/0x390 [ 142.440123][ C1] ? tipc_node_xmit_skb+0x130/0x130 [ 142.445585][ C1] ? selinux_capable+0x29c/0x380 [ 142.450593][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 142.455915][ C1] ? tipc_sk_timeout+0x970/0x970 [ 142.461008][ C1] ? __local_bh_enable_ip+0x53/0x80 [ 142.466179][ C1] ? lock_sock_nested+0x1f5/0x290 [ 142.471306][ C1] __release_sock+0x146/0x360 [ 142.476039][ C1] sock_setsockopt+0x125e/0x2350 [ 142.481069][ C1] ? __sock_set_mark+0x160/0x160 [ 142.486097][ C1] ? selinux_socket_setsockopt+0x21c/0x300 [ 142.492151][ C1] ? selinux_socket_getsockopt+0x2e0/0x2e0 [ 142.498027][ C1] ? __kasan_check_write+0x14/0x20 [ 142.503295][ C1] ? _raw_spin_lock_irq+0x8f/0xe0 [ 142.508465][ C1] ? __fget_files+0x2c4/0x320 [ 142.513486][ C1] ? security_socket_setsockopt+0x82/0xa0 [ 142.519460][ C1] __sys_setsockopt+0x265/0x460 [ 142.524461][ C1] ? __ia32_sys_recv+0xb0/0xb0 [ 142.529381][ C1] ? __kasan_check_write+0x14/0x20 [ 142.534556][ C1] ? switch_fpu_return+0x197/0x340 [ 142.539998][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 142.545264][ C1] do_syscall_64+0x31/0x40 [ 142.549883][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 142.555976][ C1] RIP: 0033:0x7ff239aa4e69 [ 142.560557][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 142.580950][ C1] RSP: 002b:00007ff2396050c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 142.589540][ C1] RAX: ffffffffffffffda RBX: 00007ff239bd3050 RCX: 00007ff239aa4e69 [ 142.598019][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 142.606218][ C1] RBP: 00007ff239af147a R08: 0000000000000004 R09: 0000000000000000 [ 142.614398][ C1] R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000000 [ 142.622681][ C1] R13: 000000000000000b R14: 00007ff239bd3050 R15: 00007ffd84db5418 [ 176.972323][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 123s! [syz-executor.0:1113] [ 176.981367][ C0] Modules linked in: [ 176.985546][ C0] CPU: 0 PID: 1113 Comm: syz-executor.0 Not tainted syzkaller #0 [ 176.993426][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.003672][ C0] RIP: 0010:kvm_wait+0xc2/0x120 [ 177.008522][ C0] Code: 38 f0 75 26 41 f7 c4 00 02 00 00 75 0f 0f 1f 44 00 00 0f 00 2d cf 99 98 03 f4 eb 0e 0f 1f 44 00 00 0f 00 2d c0 99 98 03 fb f4 <4c> 89 64 24 18 ff 74 24 18 9d 48 c7 44 24 20 0e 36 e0 45 4b c7 04 [ 177.028393][ C0] RSP: 0018:ffffc900029cf6e0 EFLAGS: 00000246 [ 177.034456][ C0] RAX: 0000000000000003 RBX: ffff88810add1988 RCX: ffffffff814b241a [ 177.042684][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff88810add1988 [ 177.050644][ C0] RBP: ffffc900029cf790 R08: dffffc0000000000 R09: ffffed10215ba332 [ 177.058792][ C0] R10: ffffed10215ba332 R11: 1ffff110215ba331 R12: 0000000000000246 [ 177.067019][ C0] R13: 1ffff110215ba331 R14: dffffc0000000000 R15: 1ffff92000539ee0 [ 177.075154][ C0] FS: 00007ff2396266c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 177.084157][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.090813][ C0] CR2: 00007ff239605d58 CR3: 00000001075a0000 CR4: 00000000003506b0 [ 177.098772][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.106727][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.114682][ C0] Call Trace: [ 177.118057][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 177.124202][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 177.129387][ C0] ? __pv_queued_spin_lock_slowpath+0x6ba/0xb70 [ 177.135959][ C0] __pv_queued_spin_lock_slowpath+0x714/0xb70 [ 177.142107][ C0] ? memcpy+0x56/0x70 [ 177.146078][ C0] ? __pv_queued_spin_unlock_slowpath+0x280/0x280 [ 177.152659][ C0] ? avc_has_perm_noaudit+0x240/0x240 [ 177.158191][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 177.163639][ C0] _raw_spin_lock_bh+0xd8/0xe0 [ 177.168562][ C0] ? _raw_spin_lock_irq+0xe0/0xe0 [ 177.173660][ C0] lock_sock_nested+0x92/0x290 [ 177.178672][ C0] ? sock_init_data+0xc0/0xc0 [ 177.183517][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 177.188626][ C0] ? _raw_spin_unlock_bh+0x51/0x60 [ 177.193729][ C0] tipc_sendstream+0x47/0x70 [ 177.198304][ C0] ? tipc_getsockopt+0x4c0/0x4c0 [ 177.203229][ C0] ____sys_sendmsg+0x5a2/0x8c0 [ 177.208026][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 177.213047][ C0] ? futex_wake+0x4b4/0x550 [ 177.217716][ C0] ? import_iovec+0x7c/0xb0 [ 177.222293][ C0] ___sys_sendmsg+0x1f0/0x260 [ 177.227129][ C0] ? __sys_sendmsg+0x250/0x250 [ 177.231985][ C0] ? __fdget+0x1a1/0x230 [ 177.236890][ C0] __x64_sys_sendmsg+0x1e2/0x2a0 [ 177.241916][ C0] ? __kasan_check_write+0x14/0x20 [ 177.247275][ C0] ? ___sys_sendmsg+0x260/0x260 [ 177.252706][ C0] ? debug_smp_processor_id+0x17/0x20 [ 177.258580][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 177.264827][ C0] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 177.270453][ C0] do_syscall_64+0x31/0x40 [ 177.275030][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 177.281178][ C0] RIP: 0033:0x7ff239aa4e69 [ 177.285587][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 177.305847][ C0] RSP: 002b:00007ff2396260c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.314394][ C0] RAX: ffffffffffffffda RBX: 00007ff239bd2f80 RCX: 00007ff239aa4e69 [ 177.322702][ C0] RDX: 0000000000000000 RSI: 0000000020000780 RDI: 0000000000000004 [ 177.330899][ C0] RBP: 00007ff239af147a R08: 0000000000000000 R09: 0000000000000000 [ 177.339752][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.347971][ C0] R13: 000000000000000b R14: 00007ff239bd2f80 R15: 00007ffd84db5418 [ 177.356283][ C0] Sending NMI from CPU 0 to CPUs 1: [ 177.362348][ C1] NMI backtrace for cpu 1 [ 177.362357][ C1] CPU: 1 PID: 1114 Comm: syz-executor.0 Not tainted syzkaller #0 [ 177.362362][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.362366][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60 [ 177.362375][ C1] Code: f0 c8 9e 7e 65 8b 15 f5 c8 9e 7e f7 c2 00 01 ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 dc 0a 00 00 00 74 2c 8b 91 b8 0a 00 00 <83> fa 02 75 21 48 8b 91 c0 0a 00 00 48 8b 32 48 8d 7e 01 8b 89 bc [ 177.362379][ C1] RSP: 0018:ffffc900029ee730 EFLAGS: 00000246 [ 177.362387][ C1] RAX: ffffffff845da175 RBX: ffff88811fa68000 RCX: ffff88811b694f00 [ 177.362391][ C1] RDX: 0000000000000000 RSI: 000000008d64b0b0 RDI: ffff88811fa68000 [ 177.362396][ C1] RBP: ffffc900029ee730 R08: 0000000000000004 R09: 0000000000000003 [ 177.362488][ C1] R10: fffff5200053dcf8 R11: 1ffff9200053dcf8 R12: dffffc0000000000 [ 177.362493][ C1] R13: ffffc900029eecb0 R14: 000000008d64b0b0 R15: 000000008d64b0b0 [ 177.362497][ C1] FS: 00007ff2396056c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 177.362500][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.362504][ C1] CR2: 00007ff239605d58 CR3: 00000001075a0000 CR4: 00000000003506a0 [ 177.362507][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.362511][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.362513][ C1] Call Trace: [ 177.362515][ C1] tipc_sk_lookup+0x75/0x5f0 [ 177.362518][ C1] ? __kasan_check_write+0x14/0x20 [ 177.362520][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 177.362522][ C1] ? tipc_sk_rcv+0x1ef0/0x1ef0 [ 177.362524][ C1] ? preempt_count_sub+0x66/0x170 [ 177.362526][ C1] tipc_sk_rcv+0x3eb/0x1ef0 [ 177.362529][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 177.362531][ C1] ? __stack_depot_save+0x479/0x4c0 [ 177.362533][ C1] ? kasan_set_track+0x5b/0x70 [ 177.362535][ C1] ? kasan_set_track+0x4a/0x70 [ 177.362538][ C1] ? ____kasan_slab_free+0x125/0x160 [ 177.362540][ C1] ? __kasan_slab_free+0x11/0x20 [ 177.362542][ C1] ? kmem_cache_free+0x100/0x2d0 [ 177.362544][ C1] ? kfree_skbmem+0x10c/0x180 [ 177.362546][ C1] ? kfree_skb+0xc1/0x2f0 [ 177.362549][ C1] ? tipc_sk_backlog_rcv+0x16f/0x1f0 [ 177.362551][ C1] ? __release_sock+0x146/0x360 [ 177.362553][ C1] ? __sys_setsockopt+0x265/0x460 [ 177.362556][ C1] ? __skb_queue_purge+0x170/0x170 [ 177.362558][ C1] tipc_node_xmit+0x256/0xcd0 [ 177.362561][ C1] ? debug_smp_processor_id+0x17/0x20 [ 177.362563][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 177.362566][ C1] ? ____kasan_slab_free+0x130/0x160 [ 177.362568][ C1] ? __kasan_slab_free+0x11/0x20 [ 177.362571][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 177.362573][ C1] ? kfree_skbmem+0x10c/0x180 [ 177.362576][ C1] tipc_node_distr_xmit+0x292/0x390 [ 177.362578][ C1] ? tipc_node_xmit_skb+0x130/0x130 [ 177.362580][ C1] ? trace_tipc_sk_rej_msg+0x2c/0x6d0 [ 177.362582][ C1] tipc_sk_rcv+0x19b9/0x1ef0 [ 177.362585][ C1] ? __skb_queue_purge+0x170/0x170 [ 177.362587][ C1] tipc_node_xmit+0x256/0xcd0 [ 177.362589][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 177.362592][ C1] tipc_sk_push_backlog+0x4dd/0x790 [ 177.362594][ C1] tipc_sk_proto_rcv+0x98d/0x1ac0 [ 177.362596][ C1] ? trace_tipc_sk_dump+0x6c0/0x6c0 [ 177.362599][ C1] tipc_sk_filter_rcv+0x30ac/0x3850 [ 177.362601][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 177.362603][ C1] ? kasan_set_track+0x5b/0x70 [ 177.362605][ C1] ? kasan_set_track+0x4a/0x70 [ 177.362607][ C1] ? kasan_set_free_info+0x23/0x40 [ 177.362609][ C1] ? kasan_set_track+0x5b/0x70 [ 177.362612][ C1] ? kasan_set_track+0x4a/0x70 [ 177.362614][ C1] ? kasan_set_free_info+0x23/0x40 [ 177.362616][ C1] ? ____kasan_slab_free+0x125/0x160 [ 177.362618][ C1] ? __kasan_slab_free+0x11/0x20 [ 177.362621][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 177.362623][ C1] ? kmem_cache_free+0x100/0x2d0 [ 177.362625][ C1] ? kfree_skb+0xc1/0x2f0 [ 177.362627][ C1] ? tipc_msg_reverse+0x698/0x900 [ 177.362630][ C1] ? tipc_sk_filter_rcv+0xca0/0x3850 [ 177.362632][ C1] ? tipc_sk_backlog_rcv+0x109/0x1f0 [ 177.362634][ C1] ? __release_sock+0x146/0x360 [ 177.362636][ C1] ? __sys_setsockopt+0x265/0x460 [ 177.362639][ C1] ? __x64_sys_setsockopt+0xbf/0xd0 [ 177.362641][ C1] ? do_syscall_64+0x31/0x40 [ 177.362643][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 177.362646][ C1] ? tipc_sk_dump+0xfc0/0xfc0 [ 177.362648][ C1] ? __kasan_check_write+0x14/0x20 [ 177.362650][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 177.362652][ C1] tipc_sk_rcv+0x7cc/0x1ef0 [ 177.362655][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 177.362657][ C1] ? kmem_cache_free+0x100/0x2d0 [ 177.362660][ C1] ? __skb_queue_purge+0x170/0x170 [ 177.362662][ C1] ? tipc_sk_filter_rcv+0x3034/0x3850 [ 177.362664][ C1] tipc_node_xmit+0x256/0xcd0 [ 177.362667][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 177.362669][ C1] tipc_node_distr_xmit+0x292/0x390 [ 177.362671][ C1] ? tipc_node_xmit_skb+0x130/0x130 [ 177.362674][ C1] ? selinux_capable+0x29c/0x380 [ 177.362676][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 177.362678][ C1] ? tipc_sk_timeout+0x970/0x970 [ 177.362680][ C1] ? __local_bh_enable_ip+0x53/0x80 [ 177.362682][ C1] ? lock_sock_nested+0x1f5/0x290 [ 177.362685][ C1] __release_sock+0x146/0x360 [ 177.362687][ C1] sock_setsockopt+0x125e/0x2350 [ 177.362689][ C1] ? __sock_set_mark+0x160/0x160 [ 177.362692][ C1] ? selinux_socket_setsockopt+0x21c/0x300 [ 177.362694][ C1] ? selinux_socket_getsockopt+0x2e0/0x2e0 [ 177.362701][ C1] ? __kasan_check_write+0x14/0x20 [ 177.362703][ C1] ? _raw_spin_lock_irq+0x8f/0xe0 [ 177.362706][ C1] ? __fget_files+0x2c4/0x320 [ 177.362708][ C1] ? security_socket_setsockopt+0x82/0xa0 [ 177.362710][ C1] __sys_setsockopt+0x265/0x460 [ 177.362712][ C1] ? __ia32_sys_recv+0xb0/0xb0 [ 177.362715][ C1] ? __kasan_check_write+0x14/0x20 [ 177.362717][ C1] ? switch_fpu_return+0x197/0x340 [ 177.362720][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 177.362722][ C1] do_syscall_64+0x31/0x40 [ 177.362724][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 177.362726][ C1] RIP: 0033:0x7ff239aa4e69 [ 177.362734][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 177.362737][ C1] RSP: 002b:00007ff2396050c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 177.362744][ C1] RAX: ffffffffffffffda RBX: 00007ff239bd3050 RCX: 00007ff239aa4e69 [ 177.362748][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 177.362751][ C1] RBP: 00007ff239af147a R08: 0000000000000004 R09: 0000000000000000 [ 177.362754][ C1] R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000000 [ 177.362757][ C1] R13: 000000000000000b R14: 00007ff239bd3050 R15: 00007ffd84db5418