syzkaller
syzkaller login: [ 20.758149][ T28] kauditd_printk_skb: 47 callbacks suppressed
[ 20.758164][ T28] audit: type=1400 audit(1784506130.185:59): avc: denied { transition } for pid=238 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 20.798945][ T28] audit: type=1400 audit(1784506130.185:60): avc: denied { noatsecure } for pid=238 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 20.819335][ T28] audit: type=1400 audit(1784506130.185:61): avc: denied { write } for pid=238 comm="sh" path="pipe:[13867]" dev="pipefs" ino=13867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 20.842101][ T28] audit: type=1400 audit(1784506130.185:62): avc: denied { rlimitinh } for pid=238 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 20.861997][ T28] audit: type=1400 audit(1784506130.185:63): avc: denied { siginh } for pid=238 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.1.179' (ED25519) to the list of known hosts.
2026/07/20 00:09:00 parsed 1 programs
2026/07/20 00:09:00 serving rpc on tcp://36267
[ 30.737046][ T28] audit: type=1400 audit(1784506140.165:64): avc: denied { node_bind } for pid=294 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 30.758053][ T28] audit: type=1400 audit(1784506140.165:65): avc: denied { module_request } for pid=294 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 31.607774][ T28] audit: type=1400 audit(1784506141.035:66): avc: denied { mounton } for pid=301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 31.608770][ T301] cgroup: Unknown subsys name 'net'
[ 31.630669][ T28] audit: type=1400 audit(1784506141.035:67): avc: denied { mount } for pid=301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 31.658407][ T28] audit: type=1400 audit(1784506141.065:68): avc: denied { unmount } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 31.658691][ T301] cgroup: Unknown subsys name 'devices'
[ 31.798445][ T301] cgroup: Unknown subsys name 'hugetlb'
[ 31.804186][ T301] cgroup: Unknown subsys name 'rlimit'
[ 31.911503][ T28] audit: type=1400 audit(1784506141.335:69): avc: denied { setattr } for pid=301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 31.934996][ T28] audit: type=1400 audit(1784506141.335:70): avc: denied { create } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 31.958932][ T28] audit: type=1400 audit(1784506141.335:71): avc: denied { write } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 31.970064][ T304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 31.986311][ T28] audit: type=1400 audit(1784506141.335:72): avc: denied { read } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 32.015559][ T28] audit: type=1400 audit(1784506141.335:73): avc: denied { mounton } for pid=301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 32.065890][ T301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 32.918396][ T308] request_module fs-gadgetfs succeeded, but still no fs?
[ 33.481782][ T349] bridge0: port 1(bridge_slave_0) entered blocking state
[ 33.489008][ T349] bridge0: port 1(bridge_slave_0) entered disabled state
[ 33.496464][ T349] device bridge_slave_0 entered promiscuous mode
[ 33.503704][ T349] bridge0: port 2(bridge_slave_1) entered blocking state
[ 33.510860][ T349] bridge0: port 2(bridge_slave_1) entered disabled state
[ 33.518566][ T349] device bridge_slave_1 entered promiscuous mode
[ 33.560516][ T349] bridge0: port 2(bridge_slave_1) entered blocking state
[ 33.568068][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 33.575607][ T349] bridge0: port 1(bridge_slave_0) entered blocking state
[ 33.582782][ T349] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 33.602271][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 33.610628][ T313] bridge0: port 1(bridge_slave_0) entered disabled state
[ 33.618661][ T313] bridge0: port 2(bridge_slave_1) entered disabled state
[ 33.627828][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 33.636161][ T313] bridge0: port 1(bridge_slave_0) entered blocking state
[ 33.643221][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 33.653038][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 33.661610][ T313] bridge0: port 2(bridge_slave_1) entered blocking state
[ 33.669239][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 33.684269][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 33.698831][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 33.715659][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 33.729721][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 33.738468][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 33.746162][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 33.754736][ T349] device veth0_vlan entered promiscuous mode
[ 33.765872][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 33.775331][ T349] device veth1_macvtap entered promiscuous mode
[ 33.785317][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 33.795815][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 33.828794][ T349] syz-executor (349) used greatest stack depth: 22016 bytes left
2026/07/20 00:09:03 executed programs: 0
[ 34.248244][ T370] bridge0: port 1(bridge_slave_0) entered blocking state
[ 34.257515][ T370] bridge0: port 1(bridge_slave_0) entered disabled state
[ 34.269805][ T370] device bridge_slave_0 entered promiscuous mode
[ 34.279431][ T370] bridge0: port 2(bridge_slave_1) entered blocking state
[ 34.290119][ T370] bridge0: port 2(bridge_slave_1) entered disabled state
[ 34.301850][ T370] device bridge_slave_1 entered promiscuous mode
[ 34.354250][ T370] bridge0: port 2(bridge_slave_1) entered blocking state
[ 34.364089][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 34.373138][ T370] bridge0: port 1(bridge_slave_0) entered blocking state
[ 34.381537][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 34.391106][ T340] bridge0: port 1(bridge_slave_0) entered disabled state
[ 34.398755][ T340] bridge0: port 2(bridge_slave_1) entered disabled state
[ 34.425768][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 34.434479][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 34.445838][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 34.455061][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 34.464565][ T340] bridge0: port 1(bridge_slave_0) entered blocking state
[ 34.471710][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 34.482466][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 34.491761][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 34.503525][ T340] bridge0: port 2(bridge_slave_1) entered blocking state
[ 34.513215][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 34.524729][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 34.535467][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 34.546223][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 34.555406][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 34.570076][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 34.578714][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 34.591582][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 34.602475][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 34.616526][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 34.626232][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 34.634946][ T370] device veth0_vlan entered promiscuous mode
[ 34.647791][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 34.658662][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 34.675037][ T370] device veth1_macvtap entered promiscuous mode
[ 34.684578][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 34.695013][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 34.706798][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 34.720347][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 34.729467][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 35.136731][ T43] device bridge_slave_1 left promiscuous mode
[ 35.143510][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 35.152044][ T43] device bridge_slave_0 left promiscuous mode
[ 35.159608][ T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 35.174245][ T43] device veth1_macvtap left promiscuous mode
[ 35.181425][ T43] device veth0_vlan left promiscuous mode
[ 137.565985][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[ 137.572624][ C1] rcu: 1-...!: (9999 ticks this GP) idle=3e7c/1/0x4000000000000000 softirq=4004/4004 fqs=0
[ 137.582702][ C1] (t=10001 jiffies g=2561 q=7 ncpus=2)
[ 137.588259][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10001 jiffies! g2561 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[ 137.600679][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=992
[ 137.608491][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g2561 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[ 137.619953][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 137.629923][ C1] rcu: RCU grace-period kthread stack dump:
[ 137.635812][ C1] task:rcu_preempt state:I stack:28352 pid:14 ppid:2 flags:0x00004000
[ 137.645033][ C1] Call Trace:
[ 137.648317][ C1]
[ 137.651257][ C1] __schedule+0xbe2/0x14b0
[ 137.655692][ C1] ? release_firmware_map_entry+0x190/0x190
[ 137.661603][ C1] ? __cfi_update_misfit_status+0x10/0x10
[ 137.667339][ C1] schedule+0xbd/0x170
[ 137.671417][ C1] schedule_timeout+0x159/0x340
[ 137.676276][ C1] ? __cfi_schedule_timeout+0x10/0x10
[ 137.681655][ C1] ? __cfi_process_timeout+0x10/0x10
[ 137.686959][ C1] ? prepare_to_swait_event+0x30f/0x330
[ 137.692519][ C1] rcu_gp_fqs_loop+0x2ed/0x1100
[ 137.697378][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[ 137.703282][ C1] ? rcu_gp_init+0xf30/0xf30
[ 137.707879][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80
[ 137.713702][ C1] ? finish_swait+0x185/0x1c0
[ 137.718395][ C1] rcu_gp_kthread+0x99/0x390
[ 137.722993][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10
[ 137.728209][ C1] ? set_cpus_allowed_ptr+0x88/0xd0
[ 137.733417][ C1] ? __kasan_check_read+0x11/0x20
[ 137.738479][ C1] ? __kthread_parkme+0x13a/0x180
[ 137.743522][ C1] kthread+0x281/0x320
[ 137.747603][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10
[ 137.752896][ C1] ? __cfi_kthread+0x10/0x10
[ 137.757504][ C1] ret_from_fork+0x1f/0x30
[ 137.761938][ C1]
[ 137.764963][ C1] rcu: Stack dump where RCU GP kthread last ran:
[ 137.771372][ C1] Sending NMI from CPU 1 to CPUs 0:
[ 137.776592][ C0] NMI backtrace for cpu 0
[ 137.776601][ C0] CPU: 0 PID: 881 Comm: syz.2.185 Not tainted syzkaller #0
[ 137.776616][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 137.776623][ C0] RIP: 0010:tipc_sk_rcv+0x2e7/0x2c20
[ 137.776643][ C0] Code: 0f 85 ee 1a 00 00 45 8b 3f 41 0f cf 45 85 f6 0f 84 d7 00 00 00 4c 89 e0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 e7 e8 39 40 dd fc <4d> 8b 24 24 4c 3b 64 24 30 0f 84 ba 00 00 00 41 b5 01 44 89 eb 44
[ 137.776654][ C0] RSP: 0018:ffffc90000aa67c0 EFLAGS: 00000246
[ 137.776669][ C0] RAX: 1ffff1102441ee88 RBX: dffffc0000000000 RCX: 0000000000000000
[ 137.776679][ C0] RDX: ffff88810d69d100 RSI: 00000000dee4c342 RDI: 0000000000000000
[ 137.776689][ C0] RBP: ffffc90000aa6a30 R08: 0000000000000003 R09: 0000000000000004
[ 137.776698][ C0] R10: dffffc0000000000 R11: fffff52000154ce8 R12: ffff8881220f7440
[ 137.776708][ C0] R13: ffff8881220c9e80 R14: 00000000dee4c342 R15: 00000000dee4c342
[ 137.776719][ C0] FS: 00007f60625a46c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 137.776731][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 137.776742][ C0] CR2: 00007f60625a3ff8 CR3: 0000000122232000 CR4: 00000000003506b0
[ 137.776756][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 137.776765][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 137.776774][ C0] Call Trace:
[ 137.776778][ C0]
[ 137.776783][ C0] ? __stack_depot_save+0x44d/0x490
[ 137.776802][ C0] ? kasan_set_track+0x60/0x70
[ 137.776818][ C0] ? kasan_set_track+0x4b/0x70
[ 137.776832][ C0] ? kasan_save_free_info+0x2b/0x40
[ 137.776846][ C0] ? __kasan_slab_free+0x11/0x20
[ 137.776862][ C0] ? slab_free_freelist_hook+0xc2/0x190
[ 137.776875][ C0] ? kmem_cache_free+0x12d/0x300
[ 137.776893][ C0] ? kfree_skb_reason+0xdc/0x230
[ 137.776907][ C0] ? tipc_msg_reverse+0x6ef/0x940
[ 137.776922][ C0] ? __sys_setsockopt+0x269/0x4e0
[ 137.776938][ C0] ? __x64_sys_setsockopt+0xbf/0xd0
[ 137.776953][ C0] ? x64_sys_call+0x124/0x9a0
[ 137.776969][ C0] ? do_syscall_64+0x4c/0xa0
[ 137.776986][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 137.777003][ C0] tipc_node_xmit+0x36f/0xd80
[ 137.777022][ C0] ? debug_smp_processor_id+0x17/0x20
[ 137.777037][ C0] ? kmem_cache_free+0x12d/0x300
[ 137.777055][ C0] ? ____kasan_slab_free+0x13d/0x180
[ 137.777071][ C0] ? __cfi_tipc_node_xmit+0x10/0x10
[ 137.777097][ C0] ? __kasan_slab_free+0x11/0x20
[ 137.777113][ C0] ? slab_free_freelist_hook+0xc2/0x190
[ 137.777127][ C0] ? kfree_skbmem+0x10c/0x180
[ 137.777141][ C0] ? kmem_cache_free+0x12d/0x300
[ 137.777159][ C0] tipc_node_distr_xmit+0x277/0x390
[ 137.777180][ C0] ? __cfi_tipc_node_distr_xmit+0x10/0x10
[ 137.777198][ C0] ? tipc_msg_reverse+0x6ef/0x940
[ 137.777213][ C0] tipc_sk_rcv+0x1a04/0x2c20
[ 137.777231][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 137.777248][ C0] tipc_node_xmit+0x36f/0xd80
[ 137.777268][ C0] ? __cfi_tipc_node_xmit+0x10/0x10
[ 137.777290][ C0] tipc_sk_push_backlog+0x4d3/0x7b0
[ 137.777306][ C0] tipc_sk_proto_rcv+0x9c3/0x15b0
[ 137.777323][ C0] ? tipc_sk_filter_rcv+0x3010/0x3010
[ 137.777340][ C0] tipc_sk_filter_rcv+0x2e22/0x3010
[ 137.777355][ C0] ? __stack_depot_save+0x36/0x490
[ 137.777371][ C0] ? kasan_set_track+0x60/0x70
[ 137.777387][ C0] ? kasan_set_track+0x60/0x70
[ 137.777402][ C0] ? kasan_set_track+0x4b/0x70
[ 137.777417][ C0] ? kasan_save_free_info+0x2b/0x40
[ 137.777430][ C0] ? ____kasan_slab_free+0x132/0x180
[ 137.777446][ C0] ? __kasan_slab_free+0x11/0x20
[ 137.777462][ C0] ? slab_free_freelist_hook+0xc2/0x190
[ 137.777475][ C0] ? kmem_cache_free+0x12d/0x300
[ 137.777492][ C0] ? kfree_skbmem+0x10c/0x180
[ 137.777506][ C0] ? kfree_skb_reason+0xdc/0x230
[ 137.777519][ C0] ? tipc_msg_reverse+0x6ef/0x940
[ 137.777532][ C0] ? __release_sock+0x154/0x380
[ 137.777549][ C0] ? sockopt_release_sock+0x95/0x1f0
[ 137.777563][ C0] ? sk_setsockopt+0x1929/0x26b0
[ 137.777577][ C0] ? sock_setsockopt+0x5a/0x70
[ 137.777592][ C0] ? __sys_setsockopt+0x269/0x4e0
[ 137.777607][ C0] ? __x64_sys_setsockopt+0xbf/0xd0
[ 137.777623][ C0] ? x64_sys_call+0x124/0x9a0
[ 137.777638][ C0] ? do_syscall_64+0x4c/0xa0
[ 137.777653][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 137.777676][ C0] ? tipc_sk_publish+0x440/0x440
[ 137.777691][ C0] ? __kasan_check_write+0x14/0x20
[ 137.777705][ C0] ? _raw_spin_lock_bh+0x94/0xf0
[ 137.777723][ C0] tipc_sk_rcv+0x7e7/0x2c20
[ 137.777740][ C0] ? tipc_msg_reverse+0x6ef/0x940
[ 137.777754][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 137.777768][ C0] ? tipc_sk_filter_rcv+0x2d9f/0x3010
[ 137.777785][ C0] tipc_node_xmit+0x36f/0xd80
[ 137.777805][ C0] ? __cfi_tipc_node_xmit+0x10/0x10
[ 137.777826][ C0] tipc_node_distr_xmit+0x277/0x390
[ 137.777846][ C0] ? __cfi_tipc_node_distr_xmit+0x10/0x10
[ 137.777867][ C0] tipc_sk_backlog_rcv+0x174/0x220
[ 137.777883][ C0] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10
[ 137.777901][ C0] __release_sock+0x154/0x380
[ 137.777919][ C0] sockopt_release_sock+0x95/0x1f0
[ 137.777934][ C0] sk_setsockopt+0x1929/0x26b0
[ 137.777949][ C0] ? __cfi_sk_setsockopt+0x10/0x10
[ 137.777965][ C0] ? selinux_socket_setsockopt+0x282/0x360
[ 137.777981][ C0] ? handle_mm_fault+0x18d8/0x26b0
[ 137.777996][ C0] ? __fget_files+0x2d1/0x330
[ 137.778012][ C0] sock_setsockopt+0x5a/0x70
[ 137.778027][ C0] __sys_setsockopt+0x269/0x4e0
[ 137.778043][ C0] ? __cfi___sys_setsockopt+0x10/0x10
[ 137.778059][ C0] ? do_user_addr_fault+0x9a5/0x1030
[ 137.778078][ C0] __x64_sys_setsockopt+0xbf/0xd0
[ 137.778100][ C0] x64_sys_call+0x124/0x9a0
[ 137.778116][ C0] do_syscall_64+0x4c/0xa0
[ 137.778131][ C0] ? clear_bhb_loop+0x30/0x80
[ 137.778144][ C0] ? clear_bhb_loop+0x30/0x80
[ 137.778156][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 137.778175][ C0] RIP: 0033:0x7f606179de99
[ 137.778187][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 137.778197][ C0] RSP: 002b:00007f60625a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 137.778211][ C0] RAX: ffffffffffffffda RBX: 00007f6061a26090 RCX: 00007f606179de99
[ 137.778221][ C0] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003
[ 137.778230][ C0] RBP: 00007f6061833eaf R08: 0000000000000004 R09: 0000000000000000
[ 137.778239][ C0] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[ 137.778248][ C0] R13: 00007f6061a26128 R14: 00007f6061a26090 R15: 00007fff57a9da38
[ 137.778260][ C0]
[ 137.778609][ C1] CPU: 1 PID: 880 Comm: syz.2.185 Not tainted syzkaller #0
[ 138.427450][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 138.437522][ C1] RIP: 0010:kvm_wait+0x105/0x150
[ 138.442492][ C1] Code: 1b 33 04 f4 eb 87 fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d cd 1b 33 04 fb f4 5e ff ff ff fb e9 58 ff ff ff e8 eb 20 c5 03 89 f9 80 e1 07 38
[ 138.462112][ C1] RSP: 0018:ffffc90000a77660 EFLAGS: 00000246
[ 138.468198][ C1] RAX: 0000000000000003 RBX: ffff8881220c9e98 RCX: ffffffff85012019
[ 138.476177][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881220c9e98
[ 138.484160][ C1] RBP: ffffc90000a776f0 R08: ffff8881220c9e98 R09: 1ffff110244193d3
[ 138.492139][ C1] R10: dffffc0000000000 R11: ffffed10244193d4 R12: 1ffff110244193d3
[ 138.500121][ C1] R13: ffff8881f6f38cd4 R14: dffffc0000000000 R15: 1ffff9200014eecc
[ 138.508102][ C1] FS: 00007f60625c56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 138.517038][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 138.523632][ C1] CR2: 0000200000000000 CR3: 0000000122232000 CR4: 00000000003506a0
[ 138.531613][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 138.539604][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 138.547678][ C1] Call Trace:
[ 138.550965][ C1]
[ 138.553904][ C1] ? __cfi_kvm_wait+0x10/0x10
[ 138.558594][ C1] ? __pv_queued_spin_lock_slowpath+0x629/0xc40
[ 138.564859][ C1] __pv_queued_spin_lock_slowpath+0x687/0xc40
[ 138.570943][ C1] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10
[ 138.577547][ C1] ? avc_has_perm+0x163/0x250
[ 138.582236][ C1] queued_spin_lock_slowpath+0x47/0x50
[ 138.587709][ C1] _raw_spin_lock_bh+0xe4/0xf0
[ 138.592482][ C1] ? __cfi__raw_spin_lock_bh+0x10/0x10
[ 138.597956][ C1] ? selinux_socket_sendmsg+0x22f/0x340
[ 138.603520][ C1] lock_sock_nested+0x90/0x290
[ 138.608388][ C1] ? __cfi_lock_sock_nested+0x10/0x10
[ 138.613859][ C1] ? _raw_spin_lock_bh+0x94/0xf0
[ 138.618812][ C1] ? _raw_spin_unlock_bh+0x50/0x60
[ 138.624026][ C1] tipc_sendstream+0x47/0x70
[ 138.628628][ C1] ? __cfi_tipc_sendstream+0x10/0x10
[ 138.633940][ C1] ____sys_sendmsg+0x5fb/0x9c0
[ 138.638718][ C1] ? __sys_sendmsg_sock+0x40/0x40
[ 138.643752][ C1] ? import_iovec+0x7c/0xb0
[ 138.648267][ C1] ___sys_sendmsg+0x2a2/0x360
[ 138.652954][ C1] ? __sys_sendmsg+0x290/0x290
[ 138.657900][ C1] ? security_file_alloc+0x33/0x130
[ 138.663113][ C1] ? alloc_file+0x82/0x600
[ 138.667545][ C1] ? __fdget+0x19c/0x220
[ 138.671792][ C1] __x64_sys_sendmsg+0x20d/0x2e0
[ 138.676740][ C1] ? __cfi___x64_sys_sendmsg+0x10/0x10
[ 138.682242][ C1] ? fpregs_assert_state_consistent+0xb1/0xe0
[ 138.688322][ C1] x64_sys_call+0x171/0x9a0
[ 138.692927][ C1] do_syscall_64+0x4c/0xa0
[ 138.697359][ C1] ? clear_bhb_loop+0x30/0x80
[ 138.702039][ C1] ? clear_bhb_loop+0x30/0x80
[ 138.706720][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 138.712638][ C1] RIP: 0033:0x7f606179de99
[ 138.717063][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 138.736675][ C1] RSP: 002b:00007f60625c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 138.745102][ C1] RAX: ffffffffffffffda RBX: 00007f6061a25fa0 RCX: 00007f606179de99
[ 138.753078][ C1] RDX: 0000000000048090 RSI: 0000200000000080 RDI: 0000000000000004
[ 138.761069][ C1] RBP: 00007f6061833eaf R08: 0000000000000000 R09: 0000000000000000
[ 138.769068][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 138.777045][ C1] R13: 00007f6061a26038 R14: 00007f6061a25fa0 R15: 00007fff57a9da38
[ 138.785027][ C1]
[ 287.429452][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [syz.2.185:881]
[ 287.437546][ C0] Modules linked in:
[ 287.441429][ C0] CPU: 0 PID: 881 Comm: syz.2.185 Not tainted syzkaller #0
[ 287.448608][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 287.458646][ C0] RIP: 0010:__local_bh_enable_ip+0x4e/0x80
[ 287.464445][ C0] Code: 0b bf 7e 65 8b 05 4a 0b bf 7e a9 00 ff ff 00 75 19 48 c7 c7 60 0c 69 85 e8 2f ef b6 03 65 66 8b 05 a7 12 c0 7e 66 85 c0 75 22 01 00 00 00 e8 c8 33 09 00 65 8b 05 19 0b bf 7e 85 c0 74 02 5d
[ 287.484140][ C0] RSP: 0018:ffffc90000aa6798 EFLAGS: 00000206
[ 287.490208][ C0] RAX: 0000000000000202 RBX: dffffc0000000000 RCX: dffffc0000000000
[ 287.498181][ C0] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff84d9b1aa
[ 287.506160][ C0] RBP: ffffc90000aa6798 R08: 0000000000000003 R09: 0000000000000004
[ 287.514133][ C0] R10: dffffc0000000000 R11: fffff52000154ce8 R12: ffffc90000aa6c00
[ 287.522103][ C0] R13: ffff8881220c9e80 R14: 00000000dee4c342 R15: 00000000dee4c342
[ 287.530162][ C0] FS: 00007f60625a46c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 287.539098][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 287.545681][ C0] CR2: 00007f60625a3ff8 CR3: 0000000122232000 CR4: 00000000003506b0
[ 287.553639][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 287.561595][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 287.569571][ C0] Call Trace:
[ 287.572840][ C0]
[ 287.575775][ C0] _raw_spin_unlock_bh+0x50/0x60
[ 287.580706][ C0] tipc_sk_rcv+0x3da/0x2c20
[ 287.585196][ C0] ? __stack_depot_save+0x44d/0x490
[ 287.590398][ C0] ? kasan_set_track+0x60/0x70
[ 287.595150][ C0] ? kasan_set_track+0x4b/0x70
[ 287.599984][ C0] ? kasan_save_free_info+0x2b/0x40
[ 287.605177][ C0] ? __kasan_slab_free+0x11/0x20
[ 287.610103][ C0] ? slab_free_freelist_hook+0xc2/0x190
[ 287.615639][ C0] ? kmem_cache_free+0x12d/0x300
[ 287.620564][ C0] ? kfree_skb_reason+0xdc/0x230
[ 287.625494][ C0] ? tipc_msg_reverse+0x6ef/0x940
[ 287.630506][ C0] ? __sys_setsockopt+0x269/0x4e0
[ 287.635515][ C0] ? __x64_sys_setsockopt+0xbf/0xd0
[ 287.640716][ C0] ? x64_sys_call+0x124/0x9a0
[ 287.645467][ C0] ? do_syscall_64+0x4c/0xa0
[ 287.650042][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 287.654966][ C0] tipc_node_xmit+0x36f/0xd80
[ 287.659629][ C0] ? debug_smp_processor_id+0x17/0x20
[ 287.664986][ C0] ? kmem_cache_free+0x12d/0x300
[ 287.669918][ C0] ? ____kasan_slab_free+0x13d/0x180
[ 287.675197][ C0] ? __cfi_tipc_node_xmit+0x10/0x10
[ 287.680481][ C0] ? __kasan_slab_free+0x11/0x20
[ 287.685408][ C0] ? slab_free_freelist_hook+0xc2/0x190
[ 287.690935][ C0] ? kfree_skbmem+0x10c/0x180
[ 287.695597][ C0] ? kmem_cache_free+0x12d/0x300
[ 287.700539][ C0] tipc_node_distr_xmit+0x277/0x390
[ 287.705741][ C0] ? __cfi_tipc_node_distr_xmit+0x10/0x10
[ 287.711447][ C0] ? tipc_msg_reverse+0x6ef/0x940
[ 287.716464][ C0] tipc_sk_rcv+0x1a04/0x2c20
[ 287.721050][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 287.725979][ C0] tipc_node_xmit+0x36f/0xd80
[ 287.730660][ C0] ? __cfi_tipc_node_xmit+0x10/0x10
[ 287.735856][ C0] tipc_sk_push_backlog+0x4d3/0x7b0
[ 287.741039][ C0] tipc_sk_proto_rcv+0x9c3/0x15b0
[ 287.746054][ C0] ? tipc_sk_filter_rcv+0x3010/0x3010
[ 287.751421][ C0] tipc_sk_filter_rcv+0x2e22/0x3010
[ 287.756709][ C0] ? __stack_depot_save+0x36/0x490
[ 287.761991][ C0] ? kasan_set_track+0x60/0x70
[ 287.766746][ C0] ? kasan_set_track+0x60/0x70
[ 287.771508][ C0] ? kasan_set_track+0x4b/0x70
[ 287.776259][ C0] ? kasan_save_free_info+0x2b/0x40
[ 287.781537][ C0] ? ____kasan_slab_free+0x132/0x180
[ 287.786808][ C0] ? __kasan_slab_free+0x11/0x20
[ 287.791747][ C0] ? slab_free_freelist_hook+0xc2/0x190
[ 287.797294][ C0] ? kmem_cache_free+0x12d/0x300
[ 287.802218][ C0] ? kfree_skbmem+0x10c/0x180
[ 287.806906][ C0] ? kfree_skb_reason+0xdc/0x230
[ 287.811832][ C0] ? tipc_msg_reverse+0x6ef/0x940
[ 287.816843][ C0] ? __release_sock+0x154/0x380
[ 287.821709][ C0] ? sockopt_release_sock+0x95/0x1f0
[ 287.826978][ C0] ? sk_setsockopt+0x1929/0x26b0
[ 287.832076][ C0] ? sock_setsockopt+0x5a/0x70
[ 287.836827][ C0] ? __sys_setsockopt+0x269/0x4e0
[ 287.841850][ C0] ? __x64_sys_setsockopt+0xbf/0xd0
[ 287.847031][ C0] ? x64_sys_call+0x124/0x9a0
[ 287.851694][ C0] ? do_syscall_64+0x4c/0xa0
[ 287.856270][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 287.862334][ C0] ? tipc_sk_publish+0x440/0x440
[ 287.867259][ C0] ? __kasan_check_write+0x14/0x20
[ 287.872358][ C0] ? _raw_spin_lock_bh+0x94/0xf0
[ 287.877294][ C0] tipc_sk_rcv+0x7e7/0x2c20
[ 287.881785][ C0] ? tipc_msg_reverse+0x6ef/0x940
[ 287.886880][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 287.891810][ C0] ? tipc_sk_filter_rcv+0x2d9f/0x3010
[ 287.897164][ C0] tipc_node_xmit+0x36f/0xd80
[ 287.901831][ C0] ? __cfi_tipc_node_xmit+0x10/0x10
[ 287.907017][ C0] tipc_node_distr_xmit+0x277/0x390
[ 287.912204][ C0] ? __cfi_tipc_node_distr_xmit+0x10/0x10
[ 287.917910][ C0] tipc_sk_backlog_rcv+0x174/0x220
[ 287.923004][ C0] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10
[ 287.928619][ C0] __release_sock+0x154/0x380
[ 287.933456][ C0] sockopt_release_sock+0x95/0x1f0
[ 287.938552][ C0] sk_setsockopt+0x1929/0x26b0
[ 287.943319][ C0] ? __cfi_sk_setsockopt+0x10/0x10
[ 287.948502][ C0] ? selinux_socket_setsockopt+0x282/0x360
[ 287.954295][ C0] ? handle_mm_fault+0x18d8/0x26b0
[ 287.959391][ C0] ? __fget_files+0x2d1/0x330
[ 287.964051][ C0] sock_setsockopt+0x5a/0x70
[ 287.968627][ C0] __sys_setsockopt+0x269/0x4e0
[ 287.973465][ C0] ? __cfi___sys_setsockopt+0x10/0x10
[ 287.978825][ C0] ? do_user_addr_fault+0x9a5/0x1030
[ 287.984188][ C0] __x64_sys_setsockopt+0xbf/0xd0
[ 287.989197][ C0] x64_sys_call+0x124/0x9a0
[ 287.993707][ C0] do_syscall_64+0x4c/0xa0
[ 287.998108][ C0] ? clear_bhb_loop+0x30/0x80
[ 288.002791][ C0] ? clear_bhb_loop+0x30/0x80
[ 288.007714][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 288.013596][ C0] RIP: 0033:0x7f606179de99
[ 288.018013][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 288.037604][ C0] RSP: 002b:00007f60625a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 288.046006][ C0] RAX: ffffffffffffffda RBX: 00007f6061a26090 RCX: 00007f606179de99
[ 288.053971][ C0] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003
[ 288.061940][ C0] RBP: 00007f6061833eaf R08: 0000000000000004 R09: 0000000000000000
[ 288.069910][ C0] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[ 288.077878][ C0] R13: 00007f6061a26128 R14: 00007f6061a26090 R15: 00007fff57a9da38
[ 288.085836][ C0]
[ 288.088843][ C0] Sending NMI from CPU 0 to CPUs 1:
[ 288.094073][ C1] NMI backtrace for cpu 1
[ 288.094082][ C1] CPU: 1 PID: 880 Comm: syz.2.185 Not tainted syzkaller #0
[ 288.094097][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 288.094104][ C1] RIP: 0010:kvm_wait+0x105/0x150
[ 288.094125][ C1] Code: 1b 33 04 f4 eb 87 fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d cd 1b 33 04 fb f4 5e ff ff ff fb e9 58 ff ff ff e8 eb 20 c5 03 89 f9 80 e1 07 38
[ 288.094136][ C1] RSP: 0018:ffffc90000a77660 EFLAGS: 00000246
[ 288.094148][ C1] RAX: 0000000000000003 RBX: ffff8881220c9e98 RCX: ffffffff85012019
[ 288.094158][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881220c9e98
[ 288.094168][ C1] RBP: ffffc90000a776f0 R08: ffff8881220c9e98 R09: 1ffff110244193d3
[ 288.094178][ C1] R10: dffffc0000000000 R11: ffffed10244193d4 R12: 1ffff110244193d3
[ 288.094188][ C1] R13: ffff8881f6f38cd4 R14: dffffc0000000000 R15: 1ffff9200014eecc
[ 288.094198][ C1] FS: 00007f60625c56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 288.094211][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 288.094221][ C1] CR2: 0000200000000000 CR3: 0000000122232000 CR4: 00000000003506a0
[ 288.094236][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 288.094244][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 288.094254][ C1] Call Trace:
[ 288.094258][ C1]
[ 288.094263][ C1] ? __cfi_kvm_wait+0x10/0x10
[ 288.094281][ C1] ? __pv_queued_spin_lock_slowpath+0x629/0xc40
[ 288.094301][ C1] __pv_queued_spin_lock_slowpath+0x687/0xc40
[ 288.094321][ C1] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10
[ 288.094340][ C1] ? avc_has_perm+0x163/0x250
[ 288.094355][ C1] queued_spin_lock_slowpath+0x47/0x50
[ 288.094370][ C1] _raw_spin_lock_bh+0xe4/0xf0
[ 288.094386][ C1] ? __cfi__raw_spin_lock_bh+0x10/0x10
[ 288.094403][ C1] ? selinux_socket_sendmsg+0x22f/0x340
[ 288.094419][ C1] lock_sock_nested+0x90/0x290
[ 288.094439][ C1] ? __cfi_lock_sock_nested+0x10/0x10
[ 288.094457][ C1] ? _raw_spin_lock_bh+0x94/0xf0
[ 288.094474][ C1] ? _raw_spin_unlock_bh+0x50/0x60
[ 288.094491][ C1] tipc_sendstream+0x47/0x70
[ 288.094508][ C1] ? __cfi_tipc_sendstream+0x10/0x10
[ 288.094524][ C1] ____sys_sendmsg+0x5fb/0x9c0
[ 288.094542][ C1] ? __sys_sendmsg_sock+0x40/0x40
[ 288.094559][ C1] ? import_iovec+0x7c/0xb0
[ 288.094573][ C1] ___sys_sendmsg+0x2a2/0x360
[ 288.094590][ C1] ? __sys_sendmsg+0x290/0x290
[ 288.094607][ C1] ? security_file_alloc+0x33/0x130
[ 288.094628][ C1] ? alloc_file+0x82/0x600
[ 288.094647][ C1] ? __fdget+0x19c/0x220
[ 288.094662][ C1] __x64_sys_sendmsg+0x20d/0x2e0
[ 288.094679][ C1] ? __cfi___x64_sys_sendmsg+0x10/0x10
[ 288.094698][ C1] ? fpregs_assert_state_consistent+0xb1/0xe0
[ 288.094716][ C1] x64_sys_call+0x171/0x9a0
[ 288.094732][ C1] do_syscall_64+0x4c/0xa0
[ 288.094749][ C1] ? clear_bhb_loop+0x30/0x80
[ 288.094761][ C1] ? clear_bhb_loop+0x30/0x80
[ 288.094774][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 288.094792][ C1] RIP: 0033:0x7f606179de99
[ 288.094803][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 288.094814][ C1] RSP: 002b:00007f60625c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 288.094828][ C1] RAX: ffffffffffffffda RBX: 00007f6061a25fa0 RCX: 00007f606179de99
[ 288.094838][ C1] RDX: 0000000000048090 RSI: 0000200000000080 RDI: 0000000000000004
[ 288.094847][ C1] RBP: 00007f6061833eaf R08: 0000000000000000 R09: 0000000000000000
[ 288.094856][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 288.094865][ C1] R13: 00007f6061a26038 R14: 00007f6061a25fa0 R15: 00007fff57a9da38
[ 288.094887][ C1]
[ 288.095059][ C0] Kernel panic - not syncing: softlockup: hung tasks
[ 288.471639][ C0] CPU: 0 PID: 881 Comm: syz.2.185 Tainted: G L syzkaller #0
[ 288.480299][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 288.490427][ C0] Call Trace:
[ 288.493692][ C0]
[ 288.496525][ C0] __dump_stack+0x21/0x24
[ 288.500942][ C0] dump_stack_lvl+0x110/0x170
[ 288.505603][ C0] ? __cfi_dump_stack_lvl+0x8/0x8
[ 288.510611][ C0] dump_stack+0x15/0x24
[ 288.514772][ C0] panic+0x280/0x698
[ 288.518661][ C0] ? __irq_work_queue_local+0x12a/0x190
[ 288.524200][ C0] ? __cfi_panic+0x8/0x8
[ 288.528440][ C0] watchdog_timer_fn+0x5c5/0x5d0
[ 288.533414][ C0] ? __cfi_watchdog_timer_fn+0x10/0x10
[ 288.538963][ C0] __hrtimer_run_queues+0x398/0x890
[ 288.544165][ C0] ? hrtimer_interrupt+0x8c0/0x8c0
[ 288.549270][ C0] ? ktime_get_update_offsets_now+0x30c/0x320
[ 288.555335][ C0] hrtimer_interrupt+0x3ad/0x8c0
[ 288.560340][ C0] __sysvec_apic_timer_interrupt+0x11e/0x440
[ 288.566328][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0
[ 288.571990][ C0]
[ 288.574922][ C0]
[ 288.577842][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 288.583810][ C0] RIP: 0010:__local_bh_enable_ip+0x4e/0x80
[ 288.589606][ C0] Code: 0b bf 7e 65 8b 05 4a 0b bf 7e a9 00 ff ff 00 75 19 48 c7 c7 60 0c 69 85 e8 2f ef b6 03 65 66 8b 05 a7 12 c0 7e 66 85 c0 75 22 01 00 00 00 e8 c8 33 09 00 65 8b 05 19 0b bf 7e 85 c0 74 02 5d
[ 288.609202][ C0] RSP: 0018:ffffc90000aa6798 EFLAGS: 00000206
[ 288.615308][ C0] RAX: 0000000000000202 RBX: dffffc0000000000 RCX: dffffc0000000000
[ 288.623272][ C0] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff84d9b1aa
[ 288.631502][ C0] RBP: ffffc90000aa6798 R08: 0000000000000003 R09: 0000000000000004
[ 288.639468][ C0] R10: dffffc0000000000 R11: fffff52000154ce8 R12: ffffc90000aa6c00
[ 288.647426][ C0] R13: ffff8881220c9e80 R14: 00000000dee4c342 R15: 00000000dee4c342
[ 288.655386][ C0] ? tipc_sk_rcv+0x3da/0x2c20
[ 288.660056][ C0] _raw_spin_unlock_bh+0x50/0x60
[ 288.664982][ C0] tipc_sk_rcv+0x3da/0x2c20
[ 288.669469][ C0] ? __stack_depot_save+0x44d/0x490
[ 288.674658][ C0] ? kasan_set_track+0x60/0x70
[ 288.679549][ C0] ? kasan_set_track+0x4b/0x70
[ 288.684319][ C0] ? kasan_save_free_info+0x2b/0x40
[ 288.689512][ C0] ? __kasan_slab_free+0x11/0x20
[ 288.694454][ C0] ? slab_free_freelist_hook+0xc2/0x190
[ 288.699992][ C0] ? kmem_cache_free+0x12d/0x300
[ 288.704925][ C0] ? kfree_skb_reason+0xdc/0x230
[ 288.709852][ C0] ? tipc_msg_reverse+0x6ef/0x940
[ 288.714861][ C0] ? __sys_setsockopt+0x269/0x4e0
[ 288.719872][ C0] ? __x64_sys_setsockopt+0xbf/0xd0
[ 288.725071][ C0] ? x64_sys_call+0x124/0x9a0
[ 288.729736][ C0] ? do_syscall_64+0x4c/0xa0
[ 288.734341][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 288.739265][ C0] tipc_node_xmit+0x36f/0xd80
[ 288.744022][ C0] ? debug_smp_processor_id+0x17/0x20
[ 288.749380][ C0] ? kmem_cache_free+0x12d/0x300
[ 288.754312][ C0] ? ____kasan_slab_free+0x13d/0x180
[ 288.759584][ C0] ? __cfi_tipc_node_xmit+0x10/0x10
[ 288.764770][ C0] ? __kasan_slab_free+0x11/0x20
[ 288.769693][ C0] ? slab_free_freelist_hook+0xc2/0x190
[ 288.775239][ C0] ? kfree_skbmem+0x10c/0x180
[ 288.779901][ C0] ? kmem_cache_free+0x12d/0x300
[ 288.784828][ C0] tipc_node_distr_xmit+0x277/0x390
[ 288.790014][ C0] ? __cfi_tipc_node_distr_xmit+0x10/0x10
[ 288.795737][ C0] ? tipc_msg_reverse+0x6ef/0x940
[ 288.800745][ C0] tipc_sk_rcv+0x1a04/0x2c20
[ 288.805321][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 288.810347][ C0] tipc_node_xmit+0x36f/0xd80
[ 288.815015][ C0] ? __cfi_tipc_node_xmit+0x10/0x10
[ 288.820204][ C0] tipc_sk_push_backlog+0x4d3/0x7b0
[ 288.825391][ C0] tipc_sk_proto_rcv+0x9c3/0x15b0
[ 288.830401][ C0] ? tipc_sk_filter_rcv+0x3010/0x3010
[ 288.835779][ C0] tipc_sk_filter_rcv+0x2e22/0x3010
[ 288.840963][ C0] ? __stack_depot_save+0x36/0x490
[ 288.846066][ C0] ? kasan_set_track+0x60/0x70
[ 288.850841][ C0] ? kasan_set_track+0x60/0x70
[ 288.855604][ C0] ? kasan_set_track+0x4b/0x70
[ 288.860350][ C0] ? kasan_save_free_info+0x2b/0x40
[ 288.865531][ C0] ? ____kasan_slab_free+0x132/0x180
[ 288.870798][ C0] ? __kasan_slab_free+0x11/0x20
[ 288.875721][ C0] ? slab_free_freelist_hook+0xc2/0x190
[ 288.881272][ C0] ? kmem_cache_free+0x12d/0x300
[ 288.886243][ C0] ? kfree_skbmem+0x10c/0x180
[ 288.890928][ C0] ? kfree_skb_reason+0xdc/0x230
[ 288.895849][ C0] ? tipc_msg_reverse+0x6ef/0x940
[ 288.900865][ C0] ? __release_sock+0x154/0x380
[ 288.905716][ C0] ? sockopt_release_sock+0x95/0x1f0
[ 288.910982][ C0] ? sk_setsockopt+0x1929/0x26b0
[ 288.915914][ C0] ? sock_setsockopt+0x5a/0x70
[ 288.920671][ C0] ? __sys_setsockopt+0x269/0x4e0
[ 288.925674][ C0] ? __x64_sys_setsockopt+0xbf/0xd0
[ 288.930852][ C0] ? x64_sys_call+0x124/0x9a0
[ 288.935510][ C0] ? do_syscall_64+0x4c/0xa0
[ 288.940668][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 288.946747][ C0] ? tipc_sk_publish+0x440/0x440
[ 288.951766][ C0] ? __kasan_check_write+0x14/0x20
[ 288.956871][ C0] ? _raw_spin_lock_bh+0x94/0xf0
[ 288.961825][ C0] tipc_sk_rcv+0x7e7/0x2c20
[ 288.966416][ C0] ? tipc_msg_reverse+0x6ef/0x940
[ 288.971457][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 288.976402][ C0] ? tipc_sk_filter_rcv+0x2d9f/0x3010
[ 288.981868][ C0] tipc_node_xmit+0x36f/0xd80
[ 288.986544][ C0] ? __cfi_tipc_node_xmit+0x10/0x10
[ 288.991746][ C0] tipc_node_distr_xmit+0x277/0x390
[ 288.996939][ C0] ? __cfi_tipc_node_distr_xmit+0x10/0x10
[ 289.002679][ C0] tipc_sk_backlog_rcv+0x174/0x220
[ 289.007785][ C0] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10
[ 289.013423][ C0] __release_sock+0x154/0x380
[ 289.018116][ C0] sockopt_release_sock+0x95/0x1f0
[ 289.023238][ C0] sk_setsockopt+0x1929/0x26b0
[ 289.027989][ C0] ? __cfi_sk_setsockopt+0x10/0x10
[ 289.033105][ C0] ? selinux_socket_setsockopt+0x282/0x360
[ 289.038899][ C0] ? handle_mm_fault+0x18d8/0x26b0
[ 289.044014][ C0] ? __fget_files+0x2d1/0x330
[ 289.048677][ C0] sock_setsockopt+0x5a/0x70
[ 289.053253][ C0] __sys_setsockopt+0x269/0x4e0
[ 289.058104][ C0] ? __cfi___sys_setsockopt+0x10/0x10
[ 289.063464][ C0] ? do_user_addr_fault+0x9a5/0x1030
[ 289.068738][ C0] __x64_sys_setsockopt+0xbf/0xd0
[ 289.073767][ C0] x64_sys_call+0x124/0x9a0
[ 289.078257][ C0] do_syscall_64+0x4c/0xa0
[ 289.082664][ C0] ? clear_bhb_loop+0x30/0x80
[ 289.087326][ C0] ? clear_bhb_loop+0x30/0x80
[ 289.091995][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 289.097896][ C0] RIP: 0033:0x7f606179de99
[ 289.102314][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 289.121990][ C0] RSP: 002b:00007f60625a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 289.130392][ C0] RAX: ffffffffffffffda RBX: 00007f6061a26090 RCX: 00007f606179de99
[ 289.138355][ C0] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003
[ 289.146421][ C0] RBP: 00007f6061833eaf R08: 0000000000000004 R09: 0000000000000000
[ 289.154384][ C0] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[ 289.162348][ C0] R13: 00007f6061a26128 R14: 00007f6061a26090 R15: 00007fff57a9da38
[ 289.170346][ C0]
[ 289.173622][ C0] Kernel Offset: disabled
[ 289.177966][ C0] Rebooting in 86400 seconds..