Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts.
2025/12/31 07:20:33 parsed 1 programs
[ 47.408113][ T28] audit: type=1400 audit(1767165634.112:106): avc: denied { unlink } for pid=398 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 47.460683][ T398] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 48.175555][ T412] bridge0: port 1(bridge_slave_0) entered blocking state
[ 48.183021][ T412] bridge0: port 1(bridge_slave_0) entered disabled state
[ 48.190669][ T412] device bridge_slave_0 entered promiscuous mode
[ 48.197440][ T412] bridge0: port 2(bridge_slave_1) entered blocking state
[ 48.204517][ T412] bridge0: port 2(bridge_slave_1) entered disabled state
[ 48.211852][ T412] device bridge_slave_1 entered promiscuous mode
[ 48.251020][ T412] bridge0: port 2(bridge_slave_1) entered blocking state
[ 48.258147][ T412] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 48.265394][ T412] bridge0: port 1(bridge_slave_0) entered blocking state
[ 48.272518][ T412] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 48.290137][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 48.298018][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 48.305331][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 48.314055][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 48.322277][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 48.329339][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 48.338217][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 48.346437][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 48.353475][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 48.365478][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 48.374810][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 48.387720][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 48.399810][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 48.408015][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 48.415402][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 48.423729][ T412] device veth0_vlan entered promiscuous mode
[ 48.433381][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 48.443271][ T412] device veth1_macvtap entered promiscuous mode
[ 48.452056][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 48.461956][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 48.758683][ T28] audit: type=1401 audit(1767165635.462:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
2025/12/31 07:20:35 executed programs: 0
[ 49.156287][ T465] bridge0: port 1(bridge_slave_0) entered blocking state
[ 49.163476][ T465] bridge0: port 1(bridge_slave_0) entered disabled state
[ 49.171205][ T465] device bridge_slave_0 entered promiscuous mode
[ 49.179996][ T465] bridge0: port 2(bridge_slave_1) entered blocking state
[ 49.187019][ T465] bridge0: port 2(bridge_slave_1) entered disabled state
[ 49.194427][ T465] device bridge_slave_1 entered promiscuous mode
[ 49.220417][ T10] device bridge_slave_1 left promiscuous mode
[ 49.226626][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 49.234600][ T10] device bridge_slave_0 left promiscuous mode
[ 49.240821][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 49.248697][ T10] device veth1_macvtap left promiscuous mode
[ 49.254791][ T10] device veth0_vlan left promiscuous mode
[ 49.357606][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 49.365133][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 49.373961][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 49.382960][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 49.391306][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 49.398366][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 49.405951][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 49.414891][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 49.423284][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 49.431459][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 49.438492][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 49.449548][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 49.459146][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 49.472202][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 49.483181][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 49.491345][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 49.499254][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 49.507510][ T465] device veth0_vlan entered promiscuous mode
[ 49.517091][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 49.526593][ T465] device veth1_macvtap entered promiscuous mode
[ 49.537140][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 49.552423][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 49.589444][ T28] audit: type=1400 audit(1767165636.292:108): avc: denied { create } for pid=476 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 49.609335][ T28] audit: type=1400 audit(1767165636.292:109): avc: denied { write } for pid=476 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 49.629086][ T28] audit: type=1400 audit(1767165636.312:110): avc: denied { setopt } for pid=476 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 152.007521][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[ 152.014190][ C0] rcu: 0-...!: (1 GPs behind) idle=37e4/1/0x4000000000000000 softirq=4218/4233 fqs=0
[ 152.023731][ C0] (t=10000 jiffies g=2961 q=113 ncpus=2)
[ 152.029450][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 9999 jiffies! g2961 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[ 152.041584][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=820
[ 152.049369][ C0] rcu: rcu_preempt kthread starved for 10000 jiffies! g2961 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
[ 152.060724][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 152.070865][ C0] rcu: RCU grace-period kthread stack dump:
[ 152.076748][ C0] task:rcu_preempt state:I stack:28064 pid:14 ppid:2 flags:0x00004000
[ 152.085966][ C0] Call Trace:
[ 152.089251][ C0]
[ 152.092198][ C0] __schedule+0xb87/0x14e0
[ 152.096828][ C0] ? __sched_text_start+0x8/0x8
[ 152.101692][ C0] schedule+0xbd/0x170
[ 152.105775][ C0] schedule_timeout+0x12c/0x2e0
[ 152.110711][ C0] ? __cfi_schedule_timeout+0x10/0x10
[ 152.116078][ C0] ? __cfi_process_timeout+0x10/0x10
[ 152.121463][ C0] ? prepare_to_swait_event+0x308/0x320
[ 152.127099][ C0] rcu_gp_fqs_loop+0x2d8/0x10a0
[ 152.132043][ C0] ? rcu_gp_init+0xf10/0xf10
[ 152.136622][ C0] rcu_gp_kthread+0x95/0x370
[ 152.141204][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10
[ 152.146491][ C0] ? __kasan_check_read+0x11/0x20
[ 152.151505][ C0] ? __kthread_parkme+0x142/0x180
[ 152.156526][ C0] kthread+0x281/0x320
[ 152.160590][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10
[ 152.165873][ C0] ? __cfi_kthread+0x10/0x10
[ 152.170553][ C0] ret_from_fork+0x1f/0x30
[ 152.174999][ C0]
[ 152.178187][ C0] rcu: Stack dump where RCU GP kthread last ran:
[ 152.184595][ C0] Sending NMI from CPU 0 to CPUs 1:
[ 152.189890][ C1] NMI backtrace for cpu 1
[ 152.189903][ C1] CPU: 1 PID: 904 Comm: syz.2.158 Not tainted syzkaller #0
[ 152.189917][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 152.189928][ C1] RIP: 0010:tipc_sk_rcv+0x1b2e/0x2cc0
[ 152.189949][ C1] Code: 8b a4 24 d8 00 00 00 48 8b 84 24 f0 00 00 00 42 0f b6 04 28 84 c0 48 8b 54 24 60 0f 85 de 02 00 00 83 3a 00 0f 84 f2 10 00 00 ed 92 a2 fc 44 89 f8 48 89 44 24 70 e9 0f e7 ff ff e8 db 92 a2
[ 152.189961][ C1] RSP: 0018:ffffc9000183e740 EFLAGS: 00000202
[ 152.189974][ C1] RAX: 0000000000000000 RBX: 0000000000000005 RCX: ffff88810e0c3cc0
[ 152.189984][ C1] RDX: ffffc9000183ebd0 RSI: 0000000000000005 RDI: 0000000000000001
[ 152.189993][ C1] RBP: ffffc9000183e9d0 R08: dffffc0000000000 R09: ffffed10258183d1
[ 152.190004][ C1] R10: ffffed10258183d1 R11: 1ffff110258183d0 R12: ffff88811833c600
[ 152.190015][ C1] R13: dffffc0000000000 R14: ffffc9000183ebc0 R15: 0000000032cf21d3
[ 152.190025][ C1] FS: 00007f5812dde6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 152.190044][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 152.190054][ C1] CR2: 00007f5812dddf98 CR3: 000000011479a000 CR4: 00000000003506a0
[ 152.190067][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 152.190075][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 152.190084][ C1] Call Trace:
[ 152.190089][ C1]
[ 152.190095][ C1] ? stack_trace_save+0x98/0xe0
[ 152.190114][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80
[ 152.190132][ C1] ? __stack_depot_save+0x445/0x480
[ 152.190149][ C1] ? kasan_set_track+0x60/0x70
[ 152.190165][ C1] ? kasan_set_track+0x4b/0x70
[ 152.190180][ C1] ? ____kasan_slab_free+0x132/0x180
[ 152.190197][ C1] ? tipc_node_xmit+0x257/0xd00
[ 152.190218][ C1] ? tipc_sk_backlog_rcv+0x16f/0x1f0
[ 152.190233][ C1] ? __release_sock+0x154/0x380
[ 152.190251][ C1] ? sockopt_release_sock+0x95/0x1f0
[ 152.190268][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 152.190280][ C1] ? do_syscall_64+0x4c/0xa0
[ 152.190297][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 152.190320][ C1] tipc_node_xmit+0x257/0xd00
[ 152.190340][ C1] ? kasan_quarantine_put+0x34/0x190
[ 152.190355][ C1] ? __cfi_tipc_node_xmit+0x10/0x10
[ 152.190374][ C1] ? ____kasan_slab_free+0x13d/0x180
[ 152.190392][ C1] ? __kasan_slab_free+0x11/0x20
[ 152.190408][ C1] ? slab_free_freelist_hook+0xc2/0x190
[ 152.190430][ C1] ? kfree_skbmem+0x10c/0x180
[ 152.190446][ C1] tipc_node_distr_xmit+0x292/0x390
[ 152.190467][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10
[ 152.190490][ C1] tipc_sk_rcv+0x1aa3/0x2cc0
[ 152.190509][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 152.190525][ C1] tipc_node_xmit+0x257/0xd00
[ 152.190546][ C1] ? __cfi_tipc_node_xmit+0x10/0x10
[ 152.190569][ C1] tipc_sk_push_backlog+0x4dd/0x790
[ 152.190585][ C1] tipc_sk_proto_rcv+0x98d/0x1580
[ 152.190603][ C1] ? tipc_sk_filter_rcv+0x2c80/0x2c80
[ 152.190618][ C1] ? unwind_get_return_address+0x4d/0x90
[ 152.190634][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10
[ 152.190653][ C1] ? arch_stack_walk+0x90/0x150
[ 152.190676][ C1] tipc_sk_filter_rcv+0x2a93/0x2c80
[ 152.190691][ C1] ? stack_trace_save+0x98/0xe0
[ 152.190709][ C1] ? __stack_depot_save+0x36/0x480
[ 152.190722][ C1] ? ____kasan_slab_free+0x132/0x180
[ 152.190739][ C1] ? __kasan_slab_free+0x11/0x20
[ 152.190755][ C1] ? slab_free_freelist_hook+0xc2/0x190
[ 152.190775][ C1] ? __kmem_cache_free+0xb7/0x1b0
[ 152.190794][ C1] ? kasan_set_track+0x60/0x70
[ 152.190808][ C1] ? kasan_set_track+0x4b/0x70
[ 152.190823][ C1] ? kasan_save_free_info+0x31/0x50
[ 152.190843][ C1] ? ____kasan_slab_free+0x132/0x180
[ 152.190860][ C1] ? __kasan_slab_free+0x11/0x20
[ 152.190875][ C1] ? slab_free_freelist_hook+0xc2/0x190
[ 152.190896][ C1] ? kmem_cache_free+0x12d/0x300
[ 152.190914][ C1] ? kfree_skbmem+0x10c/0x180
[ 152.190928][ C1] ? kfree_skb_reason+0xdc/0x230
[ 152.190942][ C1] ? tipc_msg_reverse+0x6db/0x940
[ 152.190964][ C1] ? tipc_sk_filter_rcv+0xbf3/0x2c80
[ 152.190979][ C1] ? tipc_sk_backlog_rcv+0x109/0x1f0
[ 152.190994][ C1] ? __release_sock+0x154/0x380
[ 152.191012][ C1] ? sk_setsockopt+0x1355/0x2590
[ 152.191027][ C1] ? sock_setsockopt+0x5a/0x70
[ 152.191048][ C1] ? __x64_sys_setsockopt+0xbf/0xd0
[ 152.191066][ C1] ? x64_sys_call+0x124/0x9a0
[ 152.191082][ C1] ? do_syscall_64+0x4c/0xa0
[ 152.191097][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 152.191119][ C1] ? tipc_sk_publish+0x440/0x440
[ 152.191134][ C1] ? __kasan_check_write+0x14/0x20
[ 152.191147][ C1] ? _raw_spin_lock_bh+0x8e/0xe0
[ 152.191165][ C1] tipc_sk_rcv+0x7d9/0x2cc0
[ 152.191183][ C1] ? tipc_msg_reverse+0x6db/0x940
[ 152.191204][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 152.191219][ C1] ? tipc_sk_filter_rcv+0x2a1c/0x2c80
[ 152.191235][ C1] tipc_node_xmit+0x257/0xd00
[ 152.191256][ C1] ? __cfi_tipc_node_xmit+0x10/0x10
[ 152.191278][ C1] tipc_node_distr_xmit+0x292/0x390
[ 152.191300][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10
[ 152.191323][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0
[ 152.191339][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10
[ 152.191357][ C1] __release_sock+0x154/0x380
[ 152.191376][ C1] sockopt_release_sock+0x95/0x1f0
[ 152.191392][ C1] sk_setsockopt+0x1355/0x2590
[ 152.191409][ C1] ? __cfi_sk_setsockopt+0x10/0x10
[ 152.191425][ C1] ? selinux_socket_setsockopt+0x21c/0x300
[ 152.191448][ C1] ? handle_mm_fault+0x17be/0x2640
[ 152.191472][ C1] ? __fget_files+0x2d5/0x330
[ 152.191487][ C1] sock_setsockopt+0x5a/0x70
[ 152.191503][ C1] __sys_setsockopt+0x270/0x4e0
[ 152.191520][ C1] ? __cfi___sys_setsockopt+0x10/0x10
[ 152.191538][ C1] ? do_user_addr_fault+0x9ac/0x1050
[ 152.191558][ C1] __x64_sys_setsockopt+0xbf/0xd0
[ 152.191576][ C1] x64_sys_call+0x124/0x9a0
[ 152.191592][ C1] do_syscall_64+0x4c/0xa0
[ 152.191607][ C1] ? clear_bhb_loop+0x30/0x80
[ 152.191627][ C1] ? clear_bhb_loop+0x30/0x80
[ 152.191647][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 152.191667][ C1] RIP: 0033:0x7f5812f8cda9
[ 152.191692][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 152.191703][ C1] RSP: 002b:00007f5812dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 152.191716][ C1] RAX: ffffffffffffffda RBX: 00007f58131a6080 RCX: 00007f5812f8cda9
[ 152.191727][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003
[ 152.191735][ C1] RBP: 00007f581300e2a0 R08: 0000000000000004 R09: 0000000000000000
[ 152.191744][ C1] R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000000
[ 152.191753][ C1] R13: 0000000000000001 R14: 00007f58131a6080 R15: 00007fffb422a448
[ 152.191764][ C1]
[ 152.191909][ C0] CPU: 0 PID: 903 Comm: syz.2.158 Not tainted syzkaller #0
[ 152.859598][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 152.869999][ C0] RIP: 0010:kvm_wait+0xf2/0x140
[ 152.874852][ C0] Code: 96 13 04 f4 eb 9a fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d 70 96 13 04 fb f4 71 ff ff ff fb e9 6b ff ff ff e8 de 26 b9 03 89 f9 80 e1 07 38
[ 152.894800][ C0] RSP: 0018:ffffc9000167f680 EFLAGS: 00000246
[ 152.900866][ C0] RAX: 0000000000000003 RBX: ffff88812c0c1e98 RCX: ffffffff84f49de2
[ 152.909023][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88812c0c1e98
[ 152.916989][ C0] RBP: ffffc9000167f710 R08: dffffc0000000000 R09: ffffed10258183d4
[ 152.925140][ C0] R10: ffffed10258183d4 R11: 1ffff110258183d3 R12: 1ffff1103ee00001
[ 152.933129][ C0] R13: ffff8881f7038cd4 R14: dffffc0000000000 R15: 1ffff920002cfed0
[ 152.941105][ C0] FS: 00007f5812dff6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 152.950122][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 152.956695][ C0] CR2: 00007f5812dded58 CR3: 000000011479a000 CR4: 00000000003506b0
[ 152.964845][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 152.972826][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 152.980801][ C0] Call Trace:
[ 152.984078][ C0]
[ 152.987010][ C0] ? __cfi_kvm_wait+0x10/0x10
[ 152.991687][ C0] ? __pv_queued_spin_lock_slowpath+0x632/0xc40
[ 152.998110][ C0] __pv_queued_spin_lock_slowpath+0x690/0xc40
[ 153.004271][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10
[ 153.010857][ C0] ? avc_has_perm+0x158/0x240
[ 153.015540][ C0] queued_spin_lock_slowpath+0x47/0x50
[ 153.021002][ C0] _raw_spin_lock_bh+0xd8/0xe0
[ 153.025758][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10
[ 153.031216][ C0] lock_sock_nested+0x92/0x280
[ 153.036023][ C0] ? __cfi_lock_sock_nested+0x10/0x10
[ 153.041414][ C0] ? _raw_spin_lock_bh+0x8e/0xe0
[ 153.046442][ C0] ? _raw_spin_unlock_bh+0x50/0x60
[ 153.051562][ C0] tipc_sendstream+0x47/0x70
[ 153.056149][ C0] ? __cfi_tipc_sendstream+0x10/0x10
[ 153.061429][ C0] ____sys_sendmsg+0x5a9/0x990
[ 153.066196][ C0] ? __sys_sendmsg_sock+0x40/0x40
[ 153.071216][ C0] ? import_iovec+0x7c/0xb0
[ 153.075720][ C0] ___sys_sendmsg+0x21c/0x290
[ 153.080479][ C0] ? __sys_sendmsg+0x270/0x270
[ 153.085238][ C0] ? security_file_alloc+0x33/0x130
[ 153.090433][ C0] ? __fdget+0x19c/0x220
[ 153.094669][ C0] __x64_sys_sendmsg+0x1f0/0x2c0
[ 153.099693][ C0] ? __cfi___x64_sys_sendmsg+0x10/0x10
[ 153.105149][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0
[ 153.111208][ C0] x64_sys_call+0x171/0x9a0
[ 153.115708][ C0] do_syscall_64+0x4c/0xa0
[ 153.120115][ C0] ? clear_bhb_loop+0x30/0x80
[ 153.124794][ C0] ? clear_bhb_loop+0x30/0x80
[ 153.129477][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 153.135460][ C0] RIP: 0033:0x7f5812f8cda9
[ 153.139866][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 153.159548][ C0] RSP: 002b:00007f5812dff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 153.167951][ C0] RAX: ffffffffffffffda RBX: 00007f58131a5fa0 RCX: 00007f5812f8cda9
[ 153.175910][ C0] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004
[ 153.183870][ C0] RBP: 00007f581300e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 153.191878][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 153.199934][ C0] R13: 0000000000000000 R14: 00007f58131a5fa0 R15: 00007fffb422a448
[ 153.207914][ C0]
[ 153.210927][ C0] Sending NMI from CPU 0 to CPUs 1:
[ 153.216125][ C1] NMI backtrace for cpu 1
[ 153.216132][ C1] CPU: 1 PID: 904 Comm: syz.2.158 Not tainted syzkaller #0
[ 153.216146][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 153.216154][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x36/0x90
[ 153.216184][ C1] Code: 90 3f 92 7e 65 8b 0d 91 3f 92 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 6c 0b 00 00 00 74 52 8b 8a 48 0b 00 00 <83> f9 03 75 47 48 8b 8a 50 0b 00 00 44 8b 8a 4c 0b 00 00 49 c1 e1
[ 153.216196][ C1] RSP: 0018:ffffc9000183e630 EFLAGS: 00000246
[ 153.216208][ C1] RAX: ffffffff84cdadb0 RBX: ffff88812c0c1e80 RCX: 0000000000000000
[ 153.216219][ C1] RDX: ffff88810e0c3cc0 RSI: 0000000000000004 RDI: 0000000000000000
[ 153.216228][ C1] RBP: ffffc9000183e630 R08: dffffc0000000000 R09: ffffed10258183d1
[ 153.216239][ C1] R10: ffffed10258183d1 R11: 1ffff110258183d0 R12: ffff88812c0c1e00
[ 153.216249][ C1] R13: 00000000000003f0 R14: 0000000000000004 R15: ffff88811af410de
[ 153.216259][ C1] FS: 00007f5812dde6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 153.216272][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 153.216282][ C1] CR2: 00007f5812dddf98 CR3: 000000011479a000 CR4: 00000000003506a0
[ 153.216295][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 153.216303][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 153.216312][ C1] Call Trace:
[ 153.216316][ C1]
[ 153.216322][ C1] tipc_sk_lookup+0x510/0x620
[ 153.216338][ C1] ? tipc_sk_rcv+0x2cc0/0x2cc0
[ 153.216353][ C1] tipc_sk_rcv+0x419/0x2cc0
[ 153.216367][ C1] ? stack_trace_save+0x98/0xe0
[ 153.216384][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80
[ 153.216402][ C1] ? __stack_depot_save+0x445/0x480
[ 153.216419][ C1] ? kasan_set_track+0x60/0x70
[ 153.216434][ C1] ? kasan_set_track+0x4b/0x70
[ 153.216449][ C1] ? ____kasan_slab_free+0x132/0x180
[ 153.216467][ C1] ? tipc_node_xmit+0x257/0xd00
[ 153.216487][ C1] ? tipc_sk_backlog_rcv+0x16f/0x1f0
[ 153.216502][ C1] ? __release_sock+0x154/0x380
[ 153.216522][ C1] ? sockopt_release_sock+0x95/0x1f0
[ 153.216538][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 153.216550][ C1] ? do_syscall_64+0x4c/0xa0
[ 153.216567][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 153.216590][ C1] tipc_node_xmit+0x257/0xd00
[ 153.216610][ C1] ? kasan_quarantine_put+0x34/0x190
[ 153.216626][ C1] ? __cfi_tipc_node_xmit+0x10/0x10
[ 153.216645][ C1] ? ____kasan_slab_free+0x13d/0x180
[ 153.216663][ C1] ? __kasan_slab_free+0x11/0x20
[ 153.216679][ C1] ? slab_free_freelist_hook+0xc2/0x190
[ 153.216700][ C1] ? kfree_skbmem+0x10c/0x180
[ 153.216716][ C1] tipc_node_distr_xmit+0x292/0x390
[ 153.216738][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10
[ 153.216760][ C1] tipc_sk_rcv+0x1aa3/0x2cc0
[ 153.216779][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 153.216795][ C1] tipc_node_xmit+0x257/0xd00
[ 153.216816][ C1] ? __cfi_tipc_node_xmit+0x10/0x10
[ 153.216839][ C1] tipc_sk_push_backlog+0x4dd/0x790
[ 153.216855][ C1] tipc_sk_proto_rcv+0x98d/0x1580
[ 153.216872][ C1] ? tipc_sk_filter_rcv+0x2c80/0x2c80
[ 153.216887][ C1] ? unwind_get_return_address+0x4d/0x90
[ 153.216903][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10
[ 153.216921][ C1] ? arch_stack_walk+0x90/0x150
[ 153.216944][ C1] tipc_sk_filter_rcv+0x2a93/0x2c80
[ 153.216959][ C1] ? stack_trace_save+0x98/0xe0
[ 153.216977][ C1] ? __stack_depot_save+0x36/0x480
[ 153.216990][ C1] ? ____kasan_slab_free+0x132/0x180
[ 153.217007][ C1] ? __kasan_slab_free+0x11/0x20
[ 153.217028][ C1] ? slab_free_freelist_hook+0xc2/0x190
[ 153.217048][ C1] ? __kmem_cache_free+0xb7/0x1b0
[ 153.217067][ C1] ? kasan_set_track+0x60/0x70
[ 153.217082][ C1] ? kasan_set_track+0x4b/0x70
[ 153.217097][ C1] ? kasan_save_free_info+0x31/0x50
[ 153.217117][ C1] ? ____kasan_slab_free+0x132/0x180
[ 153.217133][ C1] ? __kasan_slab_free+0x11/0x20
[ 153.217149][ C1] ? slab_free_freelist_hook+0xc2/0x190
[ 153.217170][ C1] ? kmem_cache_free+0x12d/0x300
[ 153.217187][ C1] ? kfree_skbmem+0x10c/0x180
[ 153.217201][ C1] ? kfree_skb_reason+0xdc/0x230
[ 153.217216][ C1] ? tipc_msg_reverse+0x6db/0x940
[ 153.217237][ C1] ? tipc_sk_filter_rcv+0xbf3/0x2c80
[ 153.217252][ C1] ? tipc_sk_backlog_rcv+0x109/0x1f0
[ 153.217272][ C1] ? __release_sock+0x154/0x380
[ 153.217290][ C1] ? sk_setsockopt+0x1355/0x2590
[ 153.217305][ C1] ? sock_setsockopt+0x5a/0x70
[ 153.217321][ C1] ? __x64_sys_setsockopt+0xbf/0xd0
[ 153.217338][ C1] ? x64_sys_call+0x124/0x9a0
[ 153.217355][ C1] ? do_syscall_64+0x4c/0xa0
[ 153.217371][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 153.217392][ C1] ? tipc_sk_publish+0x440/0x440
[ 153.217407][ C1] ? __kasan_check_write+0x14/0x20
[ 153.217420][ C1] ? _raw_spin_lock_bh+0x8e/0xe0
[ 153.217438][ C1] tipc_sk_rcv+0x7d9/0x2cc0
[ 153.217456][ C1] ? tipc_msg_reverse+0x6db/0x940
[ 153.217477][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 153.217495][ C1] ? tipc_sk_filter_rcv+0x2a1c/0x2c80
[ 153.217511][ C1] tipc_node_xmit+0x257/0xd00
[ 153.217532][ C1] ? __cfi_tipc_node_xmit+0x10/0x10
[ 153.217554][ C1] tipc_node_distr_xmit+0x292/0x390
[ 153.217575][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10
[ 153.217598][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0
[ 153.217614][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10
[ 153.217632][ C1] __release_sock+0x154/0x380
[ 153.217652][ C1] sockopt_release_sock+0x95/0x1f0
[ 153.217668][ C1] sk_setsockopt+0x1355/0x2590
[ 153.217685][ C1] ? __cfi_sk_setsockopt+0x10/0x10
[ 153.217702][ C1] ? selinux_socket_setsockopt+0x21c/0x300
[ 153.217725][ C1] ? handle_mm_fault+0x17be/0x2640
[ 153.217748][ C1] ? __fget_files+0x2d5/0x330
[ 153.217764][ C1] sock_setsockopt+0x5a/0x70
[ 153.217780][ C1] __sys_setsockopt+0x270/0x4e0
[ 153.217797][ C1] ? __cfi___sys_setsockopt+0x10/0x10
[ 153.217816][ C1] ? do_user_addr_fault+0x9ac/0x1050
[ 153.217836][ C1] __x64_sys_setsockopt+0xbf/0xd0
[ 153.217853][ C1] x64_sys_call+0x124/0x9a0
[ 153.217870][ C1] do_syscall_64+0x4c/0xa0
[ 153.217885][ C1] ? clear_bhb_loop+0x30/0x80
[ 153.217905][ C1] ? clear_bhb_loop+0x30/0x80
[ 153.217926][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 153.217945][ C1] RIP: 0033:0x7f5812f8cda9
[ 153.217957][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 153.217968][ C1] RSP: 002b:00007f5812dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 153.217986][ C1] RAX: ffffffffffffffda RBX: 00007f58131a6080 RCX: 00007f5812f8cda9
[ 153.217997][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003
[ 153.218005][ C1] RBP: 00007f581300e2a0 R08: 0000000000000004 R09: 0000000000000000
[ 153.218014][ C1] R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000000
[ 153.218028][ C1] R13: 0000000000000001 R14: 00007f58131a6080 R15: 00007fffb422a448
[ 153.218040][ C1]
[ 287.424280][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 225s! [syz.2.158:904]
[ 287.432681][ C1] Modules linked in:
[ 287.436637][ C1] CPU: 1 PID: 904 Comm: syz.2.158 Not tainted syzkaller #0
[ 287.443929][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 287.453974][ C1] RIP: 0010:__kasan_check_write+0xa/0x20
[ 287.459691][ C1] Code: ff 5d c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 b8 f1 16 b4 ef 55 48 89 e5 89 f6 48 8b 4d 08 01 00 00 00 e8 ac e7 ff ff 5d c3 66 2e 0f 1f 84 00 00 00 00 00
[ 287.479574][ C1] RSP: 0018:ffffc9000183e730 EFLAGS: 00000283
[ 287.485721][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff84cd969b
[ 287.493701][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88812c0c1e80
[ 287.501701][ C1] RBP: ffffc9000183e730 R08: dffffc0000000000 R09: ffffed10258183d4
[ 287.509662][ C1] R10: ffffed10258183d4 R11: 1ffff110258183d3 R12: ffff88812c0c1e00
[ 287.517619][ C1] R13: dffffc0000000000 R14: ffffc9000183ebc0 R15: 0000000032cf21d3
[ 287.525586][ C1] FS: 00007f5812dde6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 287.534499][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 287.541072][ C1] CR2: 00007f5812dddf98 CR3: 000000011479a000 CR4: 00000000003506a0
[ 287.549125][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 287.557177][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 287.565228][ C1] Call Trace:
[ 287.568541][ C1]
[ 287.571465][ C1] tipc_sk_rcv+0x1abb/0x2cc0
[ 287.576040][ C1] ? stack_trace_save+0x98/0xe0
[ 287.580879][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80
[ 287.586950][ C1] ? __stack_depot_save+0x445/0x480
[ 287.592145][ C1] ? kasan_set_track+0x60/0x70
[ 287.596897][ C1] ? kasan_set_track+0x4b/0x70
[ 287.601824][ C1] ? ____kasan_slab_free+0x132/0x180
[ 287.607108][ C1] ? tipc_node_xmit+0x257/0xd00
[ 287.612037][ C1] ? tipc_sk_backlog_rcv+0x16f/0x1f0
[ 287.617396][ C1] ? __release_sock+0x154/0x380
[ 287.622406][ C1] ? sockopt_release_sock+0x95/0x1f0
[ 287.627757][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 287.632750][ C1] ? do_syscall_64+0x4c/0xa0
[ 287.637433][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 287.643626][ C1] tipc_node_xmit+0x257/0xd00
[ 287.648300][ C1] ? kasan_quarantine_put+0x34/0x190
[ 287.653594][ C1] ? __cfi_tipc_node_xmit+0x10/0x10
[ 287.658820][ C1] ? ____kasan_slab_free+0x13d/0x180
[ 287.664210][ C1] ? __kasan_slab_free+0x11/0x20
[ 287.669335][ C1] ? slab_free_freelist_hook+0xc2/0x190
[ 287.674886][ C1] ? kfree_skbmem+0x10c/0x180
[ 287.679574][ C1] tipc_node_distr_xmit+0x292/0x390
[ 287.685042][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10
[ 287.690758][ C1] tipc_sk_rcv+0x1aa3/0x2cc0
[ 287.695350][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 287.700270][ C1] tipc_node_xmit+0x257/0xd00
[ 287.705104][ C1] ? __cfi_tipc_node_xmit+0x10/0x10
[ 287.710729][ C1] tipc_sk_push_backlog+0x4dd/0x790
[ 287.716356][ C1] tipc_sk_proto_rcv+0x98d/0x1580
[ 287.721384][ C1] ? tipc_sk_filter_rcv+0x2c80/0x2c80
[ 287.726776][ C1] ? unwind_get_return_address+0x4d/0x90
[ 287.732401][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10
[ 287.738540][ C1] ? arch_stack_walk+0x90/0x150
[ 287.743477][ C1] tipc_sk_filter_rcv+0x2a93/0x2c80
[ 287.748651][ C1] ? stack_trace_save+0x98/0xe0
[ 287.753481][ C1] ? __stack_depot_save+0x36/0x480
[ 287.758569][ C1] ? ____kasan_slab_free+0x132/0x180
[ 287.763826][ C1] ? __kasan_slab_free+0x11/0x20
[ 287.768744][ C1] ? slab_free_freelist_hook+0xc2/0x190
[ 287.774376][ C1] ? __kmem_cache_free+0xb7/0x1b0
[ 287.779445][ C1] ? kasan_set_track+0x60/0x70
[ 287.784208][ C1] ? kasan_set_track+0x4b/0x70
[ 287.788948][ C1] ? kasan_save_free_info+0x31/0x50
[ 287.794148][ C1] ? ____kasan_slab_free+0x132/0x180
[ 287.799579][ C1] ? __kasan_slab_free+0x11/0x20
[ 287.804540][ C1] ? slab_free_freelist_hook+0xc2/0x190
[ 287.810103][ C1] ? kmem_cache_free+0x12d/0x300
[ 287.815048][ C1] ? kfree_skbmem+0x10c/0x180
[ 287.819745][ C1] ? kfree_skb_reason+0xdc/0x230
[ 287.824668][ C1] ? tipc_msg_reverse+0x6db/0x940
[ 287.829676][ C1] ? tipc_sk_filter_rcv+0xbf3/0x2c80
[ 287.834944][ C1] ? tipc_sk_backlog_rcv+0x109/0x1f0
[ 287.840233][ C1] ? __release_sock+0x154/0x380
[ 287.845093][ C1] ? sk_setsockopt+0x1355/0x2590
[ 287.850024][ C1] ? sock_setsockopt+0x5a/0x70
[ 287.854796][ C1] ? __x64_sys_setsockopt+0xbf/0xd0
[ 287.859979][ C1] ? x64_sys_call+0x124/0x9a0
[ 287.864659][ C1] ? do_syscall_64+0x4c/0xa0
[ 287.869247][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 287.875319][ C1] ? tipc_sk_publish+0x440/0x440
[ 287.880243][ C1] ? __kasan_check_write+0x14/0x20
[ 287.885340][ C1] ? _raw_spin_lock_bh+0x8e/0xe0
[ 287.890342][ C1] tipc_sk_rcv+0x7d9/0x2cc0
[ 287.894828][ C1] ? tipc_msg_reverse+0x6db/0x940
[ 287.899974][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10
[ 287.904889][ C1] ? tipc_sk_filter_rcv+0x2a1c/0x2c80
[ 287.910322][ C1] tipc_node_xmit+0x257/0xd00
[ 287.915000][ C1] ? __cfi_tipc_node_xmit+0x10/0x10
[ 287.920200][ C1] tipc_node_distr_xmit+0x292/0x390
[ 287.925400][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10
[ 287.931199][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0
[ 287.936406][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10
[ 287.942228][ C1] __release_sock+0x154/0x380
[ 287.946948][ C1] sockopt_release_sock+0x95/0x1f0
[ 287.952259][ C1] sk_setsockopt+0x1355/0x2590
[ 287.957138][ C1] ? __cfi_sk_setsockopt+0x10/0x10
[ 287.962413][ C1] ? selinux_socket_setsockopt+0x21c/0x300
[ 287.968213][ C1] ? handle_mm_fault+0x17be/0x2640
[ 287.973339][ C1] ? __fget_files+0x2d5/0x330
[ 287.978016][ C1] sock_setsockopt+0x5a/0x70
[ 287.982611][ C1] __sys_setsockopt+0x270/0x4e0
[ 287.987505][ C1] ? __cfi___sys_setsockopt+0x10/0x10
[ 287.992877][ C1] ? do_user_addr_fault+0x9ac/0x1050
[ 287.998164][ C1] __x64_sys_setsockopt+0xbf/0xd0
[ 288.003180][ C1] x64_sys_call+0x124/0x9a0
[ 288.007700][ C1] do_syscall_64+0x4c/0xa0
[ 288.012112][ C1] ? clear_bhb_loop+0x30/0x80
[ 288.016869][ C1] ? clear_bhb_loop+0x30/0x80
[ 288.021570][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 288.027459][ C1] RIP: 0033:0x7f5812f8cda9
[ 288.032065][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 288.051867][ C1] RSP: 002b:00007f5812dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 288.060369][ C1] RAX: ffffffffffffffda RBX: 00007f58131a6080 RCX: 00007f5812f8cda9
[ 288.068350][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003
[ 288.076401][ C1] RBP: 00007f581300e2a0 R08: 0000000000000004 R09: 0000000000000000
[ 288.084383][ C1] R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000000
[ 288.092345][ C1] R13: 0000000000000001 R14: 00007f58131a6080 R15: 00007fffb422a448
[ 288.100411][ C1]
[ 288.103421][ C1] Sending NMI from CPU 1 to CPUs 0:
[ 288.108655][ C0] NMI backtrace for cpu 0
[ 288.108666][ C0] CPU: 0 PID: 903 Comm: syz.2.158 Not tainted syzkaller #0
[ 288.108680][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 288.108689][ C0] RIP: 0010:kvm_wait+0xf2/0x140
[ 288.108722][ C0] Code: 96 13 04 f4 eb 9a fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d 70 96 13 04 fb f4 71 ff ff ff fb e9 6b ff ff ff e8 de 26 b9 03 89 f9 80 e1 07 38
[ 288.108735][ C0] RSP: 0018:ffffc9000167f680 EFLAGS: 00000246
[ 288.108749][ C0] RAX: 0000000000000003 RBX: ffff88812c0c1e98 RCX: ffffffff84f49de2
[ 288.108760][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88812c0c1e98
[ 288.108770][ C0] RBP: ffffc9000167f710 R08: dffffc0000000000 R09: ffffed10258183d4
[ 288.108781][ C0] R10: ffffed10258183d4 R11: 1ffff110258183d3 R12: 1ffff1103ee00001
[ 288.108792][ C0] R13: ffff8881f7038cd4 R14: dffffc0000000000 R15: 1ffff920002cfed0
[ 288.108803][ C0] FS: 00007f5812dff6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 288.108816][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 288.108826][ C0] CR2: 00007f5812dded58 CR3: 000000011479a000 CR4: 00000000003506b0
[ 288.108840][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 288.108848][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 288.108857][ C0] Call Trace:
[ 288.108862][ C0]
[ 288.108868][ C0] ? __cfi_kvm_wait+0x10/0x10
[ 288.108887][ C0] ? __pv_queued_spin_lock_slowpath+0x632/0xc40
[ 288.108909][ C0] __pv_queued_spin_lock_slowpath+0x690/0xc40
[ 288.108931][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10
[ 288.108951][ C0] ? avc_has_perm+0x158/0x240
[ 288.108974][ C0] queued_spin_lock_slowpath+0x47/0x50
[ 288.109008][ C0] _raw_spin_lock_bh+0xd8/0xe0
[ 288.109025][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10
[ 288.109043][ C0] lock_sock_nested+0x92/0x280
[ 288.109066][ C0] ? __cfi_lock_sock_nested+0x10/0x10
[ 288.109086][ C0] ? _raw_spin_lock_bh+0x8e/0xe0
[ 288.109103][ C0] ? _raw_spin_unlock_bh+0x50/0x60
[ 288.109121][ C0] tipc_sendstream+0x47/0x70
[ 288.109139][ C0] ? __cfi_tipc_sendstream+0x10/0x10
[ 288.109156][ C0] ____sys_sendmsg+0x5a9/0x990
[ 288.109176][ C0] ? __sys_sendmsg_sock+0x40/0x40
[ 288.109195][ C0] ? import_iovec+0x7c/0xb0
[ 288.109216][ C0] ___sys_sendmsg+0x21c/0x290
[ 288.109234][ C0] ? __sys_sendmsg+0x270/0x270
[ 288.109253][ C0] ? security_file_alloc+0x33/0x130
[ 288.109277][ C0] ? __fdget+0x19c/0x220
[ 288.109292][ C0] __x64_sys_sendmsg+0x1f0/0x2c0
[ 288.109310][ C0] ? __cfi___x64_sys_sendmsg+0x10/0x10
[ 288.109331][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0
[ 288.109350][ C0] x64_sys_call+0x171/0x9a0
[ 288.109369][ C0] do_syscall_64+0x4c/0xa0
[ 288.109386][ C0] ? clear_bhb_loop+0x30/0x80
[ 288.109406][ C0] ? clear_bhb_loop+0x30/0x80
[ 288.109426][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 288.109446][ C0] RIP: 0033:0x7f5812f8cda9
[ 288.109458][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 288.109467][ C0] RSP: 002b:00007f5812dff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 288.109479][ C0] RAX: ffffffffffffffda RBX: 00007f58131a5fa0 RCX: 00007f5812f8cda9
[ 288.109488][ C0] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004
[ 288.109495][ C0] RBP: 00007f581300e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 288.109502][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 288.109509][ C0] R13: 0000000000000000 R14: 00007f58131a5fa0 R15: 00007fffb422a448
[ 288.109520][ C0]