Warning: Permanently added '10.128.0.232' (ED25519) to the list of known hosts. 2026/05/18 20:14:59 parsed 1 programs [ 124.503156][ T24] audit: type=1400 audit(1779135299.180:64): avc: denied { node_bind } for pid=287 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 124.523979][ T24] audit: type=1400 audit(1779135299.180:65): avc: denied { create } for pid=287 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.543858][ T24] audit: type=1400 audit(1779135299.180:66): avc: denied { module_request } for pid=287 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 125.450471][ T24] audit: type=1400 audit(1779135300.130:67): avc: denied { mounton } for pid=293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 125.453971][ T293] cgroup: Unknown subsys name 'net' [ 125.473451][ T24] audit: type=1400 audit(1779135300.130:68): avc: denied { mount } for pid=293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 125.500665][ T24] audit: type=1400 audit(1779135300.160:69): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 125.501160][ T293] cgroup: Unknown subsys name 'devices' [ 125.609184][ T293] cgroup: Unknown subsys name 'hugetlb' [ 125.614789][ T293] cgroup: Unknown subsys name 'rlimit' [ 125.735051][ T24] audit: type=1400 audit(1779135300.410:70): avc: denied { setattr } for pid=293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.758413][ T24] audit: type=1400 audit(1779135300.410:71): avc: denied { create } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.779050][ T24] audit: type=1400 audit(1779135300.410:72): avc: denied { write } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.799441][ T24] audit: type=1400 audit(1779135300.420:73): avc: denied { read } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.805269][ T297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 125.906325][ T293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 126.419844][ T307] request_module fs-gadgetfs succeeded, but still no fs? [ 126.430887][ T307] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 127.002143][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.009495][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.017551][ T351] device bridge_slave_0 entered promiscuous mode [ 127.024591][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.031769][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.039158][ T351] device bridge_slave_1 entered promiscuous mode [ 127.078513][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.085790][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.093113][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.100160][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.119185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.126845][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.134168][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.143025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.151302][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.158345][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.172024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.180253][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.187405][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.199596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.208991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.228679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.239902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.248181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.255563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.264502][ T351] device veth0_vlan entered promiscuous mode [ 127.280676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.289881][ T351] device veth1_macvtap entered promiscuous mode [ 127.299437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.315264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/05/18 20:15:02 executed programs: 0 [ 127.639333][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.646404][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.654004][ T373] device bridge_slave_0 entered promiscuous mode [ 127.661149][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.668411][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.675815][ T373] device bridge_slave_1 entered promiscuous mode [ 127.717397][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.724547][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.731887][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.738941][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.757400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.765002][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.772443][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.782087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.790525][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.797651][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.806413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.815068][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.822236][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.834718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.844184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.858607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.869899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.878134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.885583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.899262][ T373] device veth0_vlan entered promiscuous mode [ 127.909610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.918197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.927615][ T373] device veth1_macvtap entered promiscuous mode [ 127.941056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.948871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.957117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.967014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.975336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.268961][ T7] device bridge_slave_1 left promiscuous mode [ 128.275163][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.284394][ T7] device bridge_slave_0 left promiscuous mode [ 128.290663][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.299550][ T7] device veth1_macvtap left promiscuous mode [ 128.305569][ T7] device veth0_vlan left promiscuous mode 2026/05/18 20:15:07 executed programs: 276 [ 233.257204][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 233.263865][ C1] rcu: 1-...!: (1 GPs behind) idle=ed2/1/0x4000000000000000 softirq=3681/3685 fqs=0 last_accelerate: be83/e593 dyntick_enabled: 1 [ 233.277312][ C1] (t=10002 jiffies g=2449 q=186) [ 233.282341][ C1] rcu: rcu_preempt kthread starved for 10002 jiffies! g2449 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 233.293620][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 233.303670][ C1] rcu: RCU grace-period kthread stack dump: [ 233.309573][ C1] task:rcu_preempt state:I stack: 0 pid: 13 ppid: 2 flags:0x00004000 [ 233.318800][ C1] Call Trace: [ 233.322126][ C1] __schedule+0xb53/0x1320 [ 233.326547][ C1] ? __sched_text_start+0x8/0x8 [ 233.331406][ C1] ? __mod_timer+0x7da/0xb50 [ 233.336008][ C1] schedule+0x13c/0x1d0 [ 233.340165][ C1] schedule_timeout+0x159/0x330 [ 233.345048][ C1] ? console_conditional_schedule+0x10/0x10 [ 233.350941][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 233.356433][ C1] ? run_local_timers+0x160/0x160 [ 233.361477][ C1] ? prepare_to_swait_event+0x320/0x340 [ 233.367173][ C1] rcu_gp_kthread+0x1045/0x2730 [ 233.372049][ C1] ? rcu_barrier_callback+0x50/0x50 [ 233.377267][ C1] ? __kasan_check_read+0x11/0x20 [ 233.382323][ C1] ? __kthread_parkme+0xb9/0x1c0 [ 233.387282][ C1] kthread+0x346/0x3d0 [ 233.391369][ C1] ? rcu_barrier_callback+0x50/0x50 [ 233.396580][ C1] ? kthread_blkcg+0xd0/0xd0 [ 233.401173][ C1] ret_from_fork+0x1f/0x30 [ 233.405818][ C1] Sending NMI from CPU 1 to CPUs 0: [ 233.411592][ C0] NMI backtrace for cpu 0 [ 233.411603][ C0] CPU: 0 PID: 1344 Comm: syz.2.332 Not tainted syzkaller #0 [ 233.411610][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.411615][ C0] RIP: 0010:__pv_queued_spin_lock_slowpath+0x584/0xb70 [ 233.411628][ C0] Code: 00 00 41 c6 06 00 48 8b 44 24 10 42 0f b6 04 38 84 c0 0f 85 c4 01 00 00 48 8b 44 24 08 c6 00 01 41 be 00 80 ff ff eb 07 f3 90 <41> ff c6 74 4b 43 0f b6 44 3d 00 84 c0 75 2e 80 3b 00 75 ea 48 89 [ 233.411632][ C0] RSP: 0018:ffffc900020377a0 EFLAGS: 00000206 [ 233.411642][ C0] RAX: 0000000000000000 RBX: ffff8881130cc088 RCX: ffffffff814bfcfa [ 233.411647][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff8881130cc088 [ 233.411653][ C0] RBP: ffffc90002037890 R08: ffff8881130cc088 R09: 1ffff11022619811 [ 233.411658][ C0] R10: dffffc0000000000 R11: ffffed1022619812 R12: ffff88823ff92b00 [ 233.411664][ C0] R13: 1ffff11022619811 R14: 00000000ffffd357 R15: dffffc0000000000 [ 233.411670][ C0] FS: 00007f724e1b26c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 233.411675][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.411681][ C0] CR2: 0000200000000000 CR3: 0000000112afd000 CR4: 00000000003506b0 [ 233.411686][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 233.411691][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 233.411694][ C0] Call Trace: [ 233.411699][ C0] ? __pv_queued_spin_unlock_slowpath+0x280/0x280 [ 233.411703][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 233.411706][ C0] _raw_spin_lock_bh+0xe4/0xf0 [ 233.411710][ C0] ? _raw_spin_lock_irq+0xf0/0xf0 [ 233.411714][ C0] ? selinux_socket_sendmsg+0x22f/0x340 [ 233.411718][ C0] lock_sock_nested+0x90/0x2a0 [ 233.411721][ C0] ? sock_init_data+0xc0/0xc0 [ 233.411725][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 233.411729][ C0] ? _raw_spin_unlock_bh+0x51/0x60 [ 233.411732][ C0] tipc_sendstream+0x47/0x70 [ 233.411735][ C0] ? tipc_getsockopt+0x4d0/0x4d0 [ 233.411739][ C0] ____sys_sendmsg+0x5b7/0x8f0 [ 233.411743][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 233.411746][ C0] ? import_iovec+0x7c/0xb0 [ 233.411749][ C0] ___sys_sendmsg+0x236/0x2e0 [ 233.411753][ C0] ? __sys_sendmsg+0x280/0x280 [ 233.411756][ C0] ? memcpy+0x56/0x70 [ 233.411759][ C0] ? __fdget+0x1a1/0x230 [ 233.411763][ C0] __x64_sys_sendmsg+0x1f9/0x2c0 [ 233.411766][ C0] ? __kasan_check_write+0x14/0x20 [ 233.411770][ C0] ? ___sys_sendmsg+0x2e0/0x2e0 [ 233.411774][ C0] ? debug_smp_processor_id+0x17/0x20 [ 233.411778][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 233.411782][ C0] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 233.411786][ C0] do_syscall_64+0x31/0x40 [ 233.411790][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 233.411793][ C0] RIP: 0033:0x7f724e34fe59 [ 233.411806][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.411810][ C0] RSP: 002b:00007f724e1b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.411820][ C0] RAX: ffffffffffffffda RBX: 00007f724e5c8fa0 RCX: 00007f724e34fe59 [ 233.411825][ C0] RDX: 0000000000048090 RSI: 0000200000000080 RDI: 0000000000000004 [ 233.411830][ C0] RBP: 00007f724e3e5d6f R08: 0000000000000000 R09: 0000000000000000 [ 233.411848][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.411854][ C0] R13: 00007f724e5c9038 R14: 00007f724e5c8fa0 R15: 00007ffd89069ed8 [ 233.412128][ C1] NMI backtrace for cpu 1 [ 233.756436][ C1] CPU: 1 PID: 1345 Comm: syz.2.332 Not tainted syzkaller #0 [ 233.763700][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.773745][ C1] Call Trace: [ 233.777018][ C1] [ 233.779889][ C1] __dump_stack+0x21/0x24 [ 233.784217][ C1] dump_stack_lvl+0x1a7/0x208 [ 233.788890][ C1] ? show_regs_print_info+0x18/0x18 [ 233.794169][ C1] ? cpumask_next+0x12/0x30 [ 233.798667][ C1] ? cpumask_next+0x25/0x30 [ 233.803171][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 233.809431][ C1] dump_stack+0x15/0x1c [ 233.813694][ C1] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 233.819682][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 233.825763][ C1] rcu_dump_cpu_stacks+0x19c/0x2c0 [ 233.831034][ C1] rcu_sched_clock_irq+0xf88/0x1880 [ 233.836239][ C1] ? rcutree_dead_cpu+0x310/0x310 [ 233.841373][ C1] ? hrtimer_run_queues+0x166/0x430 [ 233.846574][ C1] update_process_times+0x198/0x200 [ 233.851858][ C1] tick_sched_timer+0x17c/0x240 [ 233.856792][ C1] ? tick_setup_sched_timer+0x450/0x450 [ 233.862351][ C1] __hrtimer_run_queues+0x34f/0x820 [ 233.867565][ C1] ? hrtimer_interrupt+0xdc0/0xdc0 [ 233.872685][ C1] ? ktime_get_update_offsets_now+0x293/0x2b0 [ 233.878762][ C1] hrtimer_interrupt+0x3a6/0xdc0 [ 233.883703][ C1] __sysvec_apic_timer_interrupt+0xfa/0x3f0 [ 233.889587][ C1] asm_call_irq_on_stack+0xf/0x20 [ 233.894602][ C1] [ 233.897543][ C1] sysvec_apic_timer_interrupt+0x85/0xe0 [ 233.903177][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 233.909150][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60 [ 233.915302][ C1] Code: a0 a7 9d 7e 65 8b 15 a5 a7 9d 7e f7 c2 00 01 ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 dc 0a 00 00 00 74 2c 8b 91 b8 0a 00 00 <83> fa 02 75 21 48 8b 91 c0 0a 00 00 48 8b 32 48 8d 7e 01 8b 89 bc [ 233.934903][ C1] RSP: 0018:ffffc90001f5e810 EFLAGS: 00000246 [ 233.940968][ C1] RAX: ffffffff8467d242 RBX: dffffc0000000000 RCX: ffff88810d67e2c0 [ 233.948940][ C1] RDX: 0000000000000000 RSI: 00000000d4a5d846 RDI: 0000000000000000 [ 233.956915][ C1] RBP: ffffc90001f5e810 R08: 0000000000000003 R09: 0000000000000004 [ 233.964965][ C1] R10: dffffc0000000000 R11: fffff520003ebcf4 R12: ffffc90001f5ec80 [ 233.972935][ C1] R13: ffff8881130cc001 R14: 00000000d4a5d846 R15: 00000000d4a5d846 [ 233.980970][ C1] ? tipc_sk_rcv+0x322/0x1dc0 [ 233.985651][ C1] tipc_sk_rcv+0x322/0x1dc0 [ 233.990190][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 233.996174][ C1] ? __stack_depot_save+0x47d/0x4c0 [ 234.001377][ C1] ? kasan_set_track+0x5b/0x70 [ 234.006355][ C1] ? kasan_set_track+0x4a/0x70 [ 234.011116][ C1] ? ____kasan_slab_free+0x125/0x160 [ 234.016405][ C1] ? __kasan_slab_free+0x11/0x20 [ 234.021340][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 234.026887][ C1] ? kmem_cache_free+0x100/0x2d0 [ 234.031837][ C1] ? tipc_node_distr_xmit+0x2a3/0x3b0 [ 234.037218][ C1] ? tipc_sk_backlog_rcv+0x17d/0x210 [ 234.042506][ C1] ? __release_sock+0x146/0x360 [ 234.047362][ C1] ? __sys_setsockopt+0x272/0x480 [ 234.052394][ C1] ? __skb_queue_purge+0x170/0x170 [ 234.057517][ C1] tipc_node_xmit+0x26c/0xd80 [ 234.062197][ C1] ? debug_smp_processor_id+0x17/0x20 [ 234.067572][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 234.073121][ C1] ? ____kasan_slab_free+0x130/0x160 [ 234.078395][ C1] ? __kasan_slab_free+0x11/0x20 [ 234.083329][ C1] ? kfree_skbmem+0x10c/0x180 [ 234.088002][ C1] tipc_node_distr_xmit+0x2a3/0x3b0 [ 234.093216][ C1] ? tipc_node_xmit_skb+0x150/0x150 [ 234.098410][ C1] ? trace_tipc_sk_rej_msg+0x2c/0x6d0 [ 234.104039][ C1] tipc_sk_rcv+0x18ed/0x1dc0 [ 234.108649][ C1] ? __skb_queue_purge+0x170/0x170 [ 234.113775][ C1] tipc_node_xmit+0x26c/0xd80 [ 234.118464][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 234.124011][ C1] tipc_sk_push_backlog+0x4dd/0x790 [ 234.129209][ C1] tipc_sk_proto_rcv+0xa65/0x1af0 [ 234.134236][ C1] ? trace_tipc_sk_dump+0x6c0/0x6c0 [ 234.139438][ C1] tipc_sk_filter_rcv+0x320e/0x39d0 [ 234.144632][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 234.149746][ C1] ? kasan_set_track+0x5b/0x70 [ 234.154555][ C1] ? kasan_set_track+0x5b/0x70 [ 234.159334][ C1] ? kasan_set_track+0x4a/0x70 [ 234.164107][ C1] ? kasan_set_free_info+0x23/0x40 [ 234.169215][ C1] ? ____kasan_slab_free+0x125/0x160 [ 234.174500][ C1] ? __kasan_slab_free+0x11/0x20 [ 234.179431][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 234.184977][ C1] ? kmem_cache_free+0x100/0x2d0 [ 234.189917][ C1] ? kfree_skbmem+0x10c/0x180 [ 234.194594][ C1] ? kfree_skb+0xc1/0x2f0 [ 234.198923][ C1] ? tipc_sk_filter_rcv+0xcd2/0x39d0 [ 234.204233][ C1] ? tipc_sk_backlog_rcv+0x117/0x210 [ 234.209514][ C1] ? __release_sock+0x146/0x360 [ 234.214367][ C1] ? sock_setsockopt+0x1840/0x2680 [ 234.219471][ C1] ? __x64_sys_setsockopt+0xbf/0xd0 [ 234.224667][ C1] ? do_syscall_64+0x31/0x40 [ 234.229268][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 234.235335][ C1] ? tipc_sk_dump+0xfc0/0xfc0 [ 234.240014][ C1] ? __kasan_check_write+0x14/0x20 [ 234.245124][ C1] ? _raw_spin_lock_bh+0x94/0xf0 [ 234.250062][ C1] tipc_sk_rcv+0x742/0x1dc0 [ 234.254567][ C1] ? kfree_skbmem+0x10c/0x180 [ 234.259244][ C1] ? __skb_queue_purge+0x170/0x170 [ 234.264356][ C1] ? tipc_sk_filter_rcv+0x318b/0x39d0 [ 234.269723][ C1] tipc_node_xmit+0x26c/0xd80 [ 234.274397][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 234.279946][ C1] tipc_node_distr_xmit+0x2a3/0x3b0 [ 234.285151][ C1] ? tipc_node_xmit_skb+0x150/0x150 [ 234.290443][ C1] tipc_sk_backlog_rcv+0x17d/0x210 [ 234.295552][ C1] ? tipc_sk_timeout+0x990/0x990 [ 234.300573][ C1] ? __local_bh_enable_ip+0x53/0x80 [ 234.305800][ C1] ? lock_sock_nested+0x21c/0x2a0 [ 234.310824][ C1] __release_sock+0x146/0x360 [ 234.315676][ C1] sock_setsockopt+0x1840/0x2680 [ 234.320610][ C1] ? __sock_set_mark+0x160/0x160 [ 234.325631][ C1] ? selinux_socket_setsockopt+0x282/0x360 [ 234.331430][ C1] ? selinux_socket_getsockopt+0x340/0x340 [ 234.337240][ C1] ? __kasan_check_write+0x14/0x20 [ 234.342450][ C1] ? __fget_files+0x2c4/0x320 [ 234.347129][ C1] ? security_socket_setsockopt+0x82/0xa0 [ 234.352858][ C1] __sys_setsockopt+0x272/0x480 [ 234.357895][ C1] ? __ia32_sys_recv+0xb0/0xb0 [ 234.362664][ C1] ? __kasan_check_write+0x14/0x20 [ 234.367796][ C1] ? switch_fpu_return+0x19c/0x330 [ 234.372911][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 234.377946][ C1] do_syscall_64+0x31/0x40 [ 234.382411][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 234.388305][ C1] RIP: 0033:0x7f724e34fe59 [ 234.392723][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.412339][ C1] RSP: 002b:00007f724e191028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 234.420763][ C1] RAX: ffffffffffffffda RBX: 00007f724e5c9090 RCX: 00007f724e34fe59 [ 234.428737][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 234.436735][ C1] RBP: 00007f724e3e5d6f R08: 0000000000000004 R09: 0000000000000000 [ 234.444704][ C1] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 234.452696][ C1] R13: 00007f724e5c9128 R14: 00007f724e5c9090 R15: 00007ffd89069ed8 [ 375.112365][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [syz.2.332:1345] [ 375.120606][ C1] Modules linked in: [ 375.124682][ C1] CPU: 1 PID: 1345 Comm: syz.2.332 Not tainted syzkaller #0 [ 375.131954][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 375.142066][ C1] RIP: 0010:_raw_spin_lock_bh+0x31/0xf0 [ 375.147624][ C1] Code: 56 41 54 53 48 83 e4 e0 48 83 ec 60 48 89 fb 65 48 8b 04 25 28 00 00 00 48 89 44 24 48 4c 8d 74 24 20 48 c7 04 24 b3 8a b5 41 <48> c7 44 24 08 78 40 ba 85 48 c7 44 24 10 80 f0 82 84 49 89 e7 49 [ 375.167237][ C1] RSP: 0018:ffffc90001f5e780 EFLAGS: 00000282 [ 375.173305][ C1] RAX: 62a4aea86e31d100 RBX: ffffc90001f5ec94 RCX: ffff88810d67e2c0 [ 375.181278][ C1] RDX: 0000000000000000 RSI: 0000000000000005 RDI: ffffc90001f5ec94 [ 375.189481][ C1] RBP: ffffc90001f5e810 R08: ffff8881130cc083 R09: 1ffff11022619810 [ 375.197465][ C1] R10: dffffc0000000000 R11: ffffed1022619811 R12: ffffc90001f5ec80 [ 375.205438][ C1] R13: ffff8881130cc080 R14: ffffc90001f5e7a0 R15: 00000000d4a5d846 [ 375.213405][ C1] FS: 00007f724e1916c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 375.222340][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.229018][ C1] CR2: 00007f724e190ff8 CR3: 0000000112afd000 CR4: 00000000003506a0 [ 375.236993][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 375.245408][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 375.253370][ C1] Call Trace: [ 375.256670][ C1] ? _raw_spin_trylock+0x150/0x150 [ 375.261782][ C1] tipc_sk_rcv+0x230/0x1dc0 [ 375.266291][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 375.272186][ C1] ? __stack_depot_save+0x47d/0x4c0 [ 375.277397][ C1] ? kasan_set_track+0x5b/0x70 [ 375.282172][ C1] ? kasan_set_track+0x4a/0x70 [ 375.286936][ C1] ? ____kasan_slab_free+0x125/0x160 [ 375.292233][ C1] ? __kasan_slab_free+0x11/0x20 [ 375.297175][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 375.302724][ C1] ? kmem_cache_free+0x100/0x2d0 [ 375.307756][ C1] ? tipc_node_distr_xmit+0x2a3/0x3b0 [ 375.313129][ C1] ? tipc_sk_backlog_rcv+0x17d/0x210 [ 375.318413][ C1] ? __release_sock+0x146/0x360 [ 375.323263][ C1] ? __sys_setsockopt+0x272/0x480 [ 375.328281][ C1] ? __skb_queue_purge+0x170/0x170 [ 375.333426][ C1] tipc_node_xmit+0x26c/0xd80 [ 375.338107][ C1] ? debug_smp_processor_id+0x17/0x20 [ 375.343483][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 375.349027][ C1] ? ____kasan_slab_free+0x130/0x160 [ 375.354314][ C1] ? __kasan_slab_free+0x11/0x20 [ 375.359251][ C1] ? kfree_skbmem+0x10c/0x180 [ 375.363932][ C1] tipc_node_distr_xmit+0x2a3/0x3b0 [ 375.369135][ C1] ? tipc_node_xmit_skb+0x150/0x150 [ 375.374433][ C1] ? trace_tipc_sk_rej_msg+0x2c/0x6d0 [ 375.379801][ C1] tipc_sk_rcv+0x18ed/0x1dc0 [ 375.384395][ C1] ? __skb_queue_purge+0x170/0x170 [ 375.389504][ C1] tipc_node_xmit+0x26c/0xd80 [ 375.394183][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 375.399726][ C1] tipc_sk_push_backlog+0x4dd/0x790 [ 375.404930][ C1] tipc_sk_proto_rcv+0xa65/0x1af0 [ 375.409992][ C1] ? trace_tipc_sk_dump+0x6c0/0x6c0 [ 375.415192][ C1] tipc_sk_filter_rcv+0x320e/0x39d0 [ 375.420389][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 375.425500][ C1] ? kasan_set_track+0x5b/0x70 [ 375.430265][ C1] ? kasan_set_track+0x5b/0x70 [ 375.435043][ C1] ? kasan_set_track+0x4a/0x70 [ 375.439800][ C1] ? kasan_set_free_info+0x23/0x40 [ 375.444910][ C1] ? ____kasan_slab_free+0x125/0x160 [ 375.450187][ C1] ? __kasan_slab_free+0x11/0x20 [ 375.455126][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 375.460671][ C1] ? kmem_cache_free+0x100/0x2d0 [ 375.465608][ C1] ? kfree_skbmem+0x10c/0x180 [ 375.470274][ C1] ? kfree_skb+0xc1/0x2f0 [ 375.474599][ C1] ? tipc_sk_filter_rcv+0xcd2/0x39d0 [ 375.479891][ C1] ? tipc_sk_backlog_rcv+0x117/0x210 [ 375.485197][ C1] ? __release_sock+0x146/0x360 [ 375.490041][ C1] ? sock_setsockopt+0x1840/0x2680 [ 375.495241][ C1] ? __x64_sys_setsockopt+0xbf/0xd0 [ 375.500436][ C1] ? do_syscall_64+0x31/0x40 [ 375.505028][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 375.511104][ C1] ? tipc_sk_dump+0xfc0/0xfc0 [ 375.515781][ C1] ? __kasan_check_write+0x14/0x20 [ 375.520974][ C1] ? _raw_spin_lock_bh+0x94/0xf0 [ 375.525996][ C1] tipc_sk_rcv+0x742/0x1dc0 [ 375.530499][ C1] ? kfree_skbmem+0x10c/0x180 [ 375.535188][ C1] ? __skb_queue_purge+0x170/0x170 [ 375.540294][ C1] ? tipc_sk_filter_rcv+0x318b/0x39d0 [ 375.545668][ C1] tipc_node_xmit+0x26c/0xd80 [ 375.550342][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 375.555898][ C1] tipc_node_distr_xmit+0x2a3/0x3b0 [ 375.561095][ C1] ? tipc_node_xmit_skb+0x150/0x150 [ 375.566294][ C1] tipc_sk_backlog_rcv+0x17d/0x210 [ 375.571422][ C1] ? tipc_sk_timeout+0x990/0x990 [ 375.576355][ C1] ? __local_bh_enable_ip+0x53/0x80 [ 375.581645][ C1] ? lock_sock_nested+0x21c/0x2a0 [ 375.586695][ C1] __release_sock+0x146/0x360 [ 375.591365][ C1] sock_setsockopt+0x1840/0x2680 [ 375.596311][ C1] ? __sock_set_mark+0x160/0x160 [ 375.601241][ C1] ? selinux_socket_setsockopt+0x282/0x360 [ 375.607042][ C1] ? selinux_socket_getsockopt+0x340/0x340 [ 375.612845][ C1] ? __kasan_check_write+0x14/0x20 [ 375.617967][ C1] ? __fget_files+0x2c4/0x320 [ 375.622658][ C1] ? security_socket_setsockopt+0x82/0xa0 [ 375.628391][ C1] __sys_setsockopt+0x272/0x480 [ 375.633335][ C1] ? __ia32_sys_recv+0xb0/0xb0 [ 375.638098][ C1] ? __kasan_check_write+0x14/0x20 [ 375.643210][ C1] ? switch_fpu_return+0x19c/0x330 [ 375.648315][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 375.653349][ C1] do_syscall_64+0x31/0x40 [ 375.657760][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 375.663737][ C1] RIP: 0033:0x7f724e34fe59 [ 375.668163][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.687785][ C1] RSP: 002b:00007f724e191028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 375.696313][ C1] RAX: ffffffffffffffda RBX: 00007f724e5c9090 RCX: 00007f724e34fe59 [ 375.704274][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 375.712329][ C1] RBP: 00007f724e3e5d6f R08: 0000000000000004 R09: 0000000000000000 [ 375.720309][ C1] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 375.728304][ C1] R13: 00007f724e5c9128 R14: 00007f724e5c9090 R15: 00007ffd89069ed8 [ 375.736297][ C1] Sending NMI from CPU 1 to CPUs 0: [ 375.741913][ C0] NMI backtrace for cpu 0 [ 375.741919][ C0] CPU: 0 PID: 1344 Comm: syz.2.332 Not tainted syzkaller #0 [ 375.741926][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 375.741931][ C0] RIP: 0010:__pv_queued_spin_lock_slowpath+0x584/0xb70 [ 375.741943][ C0] Code: 00 00 41 c6 06 00 48 8b 44 24 10 42 0f b6 04 38 84 c0 0f 85 c4 01 00 00 48 8b 44 24 08 c6 00 01 41 be 00 80 ff ff eb 07 f3 90 <41> ff c6 74 4b 43 0f b6 44 3d 00 84 c0 75 2e 80 3b 00 75 ea 48 89 [ 375.741948][ C0] RSP: 0018:ffffc900020377a0 EFLAGS: 00000206 [ 375.741956][ C0] RAX: 0000000000000000 RBX: ffff8881130cc088 RCX: ffffffff814bfcfa [ 375.741962][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff8881130cc088 [ 375.741967][ C0] RBP: ffffc90002037890 R08: ffff8881130cc088 R09: 1ffff11022619811 [ 375.741973][ C0] R10: dffffc0000000000 R11: ffffed1022619812 R12: ffff88823ff92b00 [ 375.741978][ C0] R13: 1ffff11022619811 R14: 00000000ffffe05f R15: dffffc0000000000 [ 375.741984][ C0] FS: 00007f724e1b26c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 375.741989][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.741994][ C0] CR2: 0000200000000000 CR3: 0000000112afd000 CR4: 00000000003506b0 [ 375.741999][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 375.742005][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 375.742007][ C0] Call Trace: [ 375.742012][ C0] ? __pv_queued_spin_unlock_slowpath+0x280/0x280 [ 375.742016][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 375.742019][ C0] _raw_spin_lock_bh+0xe4/0xf0 [ 375.742023][ C0] ? _raw_spin_lock_irq+0xf0/0xf0 [ 375.742027][ C0] ? selinux_socket_sendmsg+0x22f/0x340 [ 375.742030][ C0] lock_sock_nested+0x90/0x2a0 [ 375.742034][ C0] ? sock_init_data+0xc0/0xc0 [ 375.742037][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 375.742041][ C0] ? _raw_spin_unlock_bh+0x51/0x60 [ 375.742044][ C0] tipc_sendstream+0x47/0x70 [ 375.742048][ C0] ? tipc_getsockopt+0x4d0/0x4d0 [ 375.742051][ C0] ____sys_sendmsg+0x5b7/0x8f0 [ 375.742055][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 375.742058][ C0] ? import_iovec+0x7c/0xb0 [ 375.742062][ C0] ___sys_sendmsg+0x236/0x2e0 [ 375.742066][ C0] ? __sys_sendmsg+0x280/0x280 [ 375.742069][ C0] ? memcpy+0x56/0x70 [ 375.742072][ C0] ? __fdget+0x1a1/0x230 [ 375.742075][ C0] __x64_sys_sendmsg+0x1f9/0x2c0 [ 375.742079][ C0] ? __kasan_check_write+0x14/0x20 [ 375.742083][ C0] ? ___sys_sendmsg+0x2e0/0x2e0 [ 375.742087][ C0] ? debug_smp_processor_id+0x17/0x20 [ 375.742091][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 375.742095][ C0] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 375.742098][ C0] do_syscall_64+0x31/0x40 [ 375.742102][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 375.742106][ C0] RIP: 0033:0x7f724e34fe59 [ 375.742118][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.742122][ C0] RSP: 002b:00007f724e1b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.742132][ C0] RAX: ffffffffffffffda RBX: 00007f724e5c8fa0 RCX: 00007f724e34fe59 [ 375.742137][ C0] RDX: 0000000000048090 RSI: 0000200000000080 RDI: 0000000000000004 [ 375.742143][ C0] RBP: 00007f724e3e5d6f R08: 0000000000000000 R09: 0000000000000000 [ 375.742148][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.742153][ C0] R13: 00007f724e5c9038 R14: 00007f724e5c8fa0 R15: 00007ffd89069ed8