Warning: Permanently added '10.128.1.73' (ED25519) to the list of known hosts. 2026/02/05 13:03:16 parsed 1 programs [ 44.669713][ T28] audit: type=1400 audit(1770296597.719:106): avc: denied { unlink } for pid=390 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 44.764257][ T390] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.671266][ T28] audit: type=1400 audit(1770296598.719:107): avc: denied { create } for pid=417 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.739066][ T404] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.746416][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.769958][ T404] device bridge_slave_0 entered promiscuous mode [ 45.780291][ T404] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.788509][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.796424][ T404] device bridge_slave_1 entered promiscuous mode [ 46.008891][ T28] audit: type=1401 audit(1770296599.049:108): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 46.124125][ T404] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.131417][ T404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.138738][ T404] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.145899][ T404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.188039][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.197707][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.206962][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.218408][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.240001][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.249668][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.263941][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.275287][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.283562][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.291874][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.300983][ T404] device veth0_vlan entered promiscuous mode [ 46.311324][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.320455][ T404] device veth1_macvtap entered promiscuous mode [ 46.329707][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 2026/02/05 13:03:19 executed programs: 0 [ 46.340072][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.505640][ T459] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.512773][ T459] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.520687][ T459] device bridge_slave_0 entered promiscuous mode [ 46.528824][ T459] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.536075][ T459] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.543638][ T459] device bridge_slave_1 entered promiscuous mode [ 46.702351][ T467] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.709646][ T467] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.717183][ T467] device bridge_slave_0 entered promiscuous mode [ 46.736012][ T467] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.743714][ T467] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.751462][ T467] device bridge_slave_1 entered promiscuous mode [ 46.800581][ T462] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.807729][ T462] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.815482][ T462] device bridge_slave_0 entered promiscuous mode [ 46.826370][ T466] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.833875][ T466] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.841518][ T466] device bridge_slave_0 entered promiscuous mode [ 46.848365][ T464] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.855567][ T464] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.863219][ T464] device bridge_slave_0 entered promiscuous mode [ 46.873908][ T462] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.881442][ T462] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.889187][ T462] device bridge_slave_1 entered promiscuous mode [ 46.906789][ T466] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.914146][ T466] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.921753][ T466] device bridge_slave_1 entered promiscuous mode [ 46.929168][ T464] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.936397][ T464] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.943990][ T464] device bridge_slave_1 entered promiscuous mode [ 47.080729][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.088355][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.096234][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.105081][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.113539][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.120889][ T453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.128296][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.136871][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.145223][ T453] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.152693][ T453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.160086][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.168470][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.176674][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.185042][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.219495][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.302144][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.310525][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.366466][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.374928][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.383192][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.391752][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.398779][ T453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.406451][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.415301][ T453] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.422666][ T453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.430539][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.438602][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.447115][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.459641][ T459] device veth0_vlan entered promiscuous mode [ 47.494319][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.503043][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.529932][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.537958][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.546530][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.554281][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.562563][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.570297][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.577680][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.586040][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.594456][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.603070][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.611595][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.618795][ T453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.626803][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.649295][ T467] device veth0_vlan entered promiscuous mode [ 47.665352][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.673986][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.682981][ T453] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.690134][ T453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.697726][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.706887][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.714054][ T453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.722339][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.733088][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.741635][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.750341][ T459] device veth1_macvtap entered promiscuous mode [ 47.762267][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.770810][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.779745][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.788344][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.796866][ T453] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.804034][ T453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.819213][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.827743][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.860092][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.869647][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.877731][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.886486][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.895613][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.904555][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.913095][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.920865][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.928380][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.936905][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.945316][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.952553][ T453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.960377][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.968285][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.976750][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.984805][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.992362][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.003843][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.012522][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.022732][ T462] device veth0_vlan entered promiscuous mode [ 48.034729][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.044126][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.053291][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.060491][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.076068][ T467] device veth1_macvtap entered promiscuous mode [ 48.087993][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.088984][ T28] audit: type=1400 audit(1770296601.129:109): avc: denied { create } for pid=514 comm="syz.5.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.096567][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.124547][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.129290][ T28] audit: type=1400 audit(1770296601.179:110): avc: denied { setopt } for pid=514 comm="syz.5.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.152194][ T28] audit: type=1400 audit(1770296601.179:111): avc: denied { write } for pid=514 comm="syz.5.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.182524][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.192265][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.213175][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.223256][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.240395][ T462] device veth1_macvtap entered promiscuous mode [ 48.252352][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.260790][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.276103][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.297180][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.312576][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.321462][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.335641][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.354572][ T464] device veth0_vlan entered promiscuous mode [ 48.377534][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.386854][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.396564][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.405335][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.414605][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.423928][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.460169][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.468052][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.477332][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.493209][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.520418][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.529379][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.550012][ T466] device veth0_vlan entered promiscuous mode [ 48.565853][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.575528][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.584813][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.607898][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.632448][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.642834][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.686928][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.711388][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.744783][ T464] device veth1_macvtap entered promiscuous mode [ 48.755603][ T466] device veth1_macvtap entered promiscuous mode [ 48.767505][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.783592][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.813583][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.837399][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.886617][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.900011][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.918186][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.940566][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.959618][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.987391][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.180031][ T8] device bridge_slave_1 left promiscuous mode [ 49.186241][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.214029][ T8] device bridge_slave_0 left promiscuous mode [ 49.233497][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.315539][ T8] device veth1_macvtap left promiscuous mode [ 49.326858][ T8] device veth0_vlan left promiscuous mode [ 150.878871][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 150.885521][ C1] rcu: 1-...!: (10001 ticks this GP) idle=269c/1/0x4000000000000000 softirq=5574/5581 fqs=41 [ 150.895785][ C1] (t=10002 jiffies g=3473 q=7137 ncpus=2) [ 150.902101][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 9920 jiffies! g3473 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 150.914441][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=1309 [ 150.922380][ C1] rcu: rcu_preempt kthread starved for 9923 jiffies! g3473 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 150.933744][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 150.943811][ C1] rcu: RCU grace-period kthread stack dump: [ 150.949792][ C1] task:rcu_preempt state:I stack:28496 pid:14 ppid:2 flags:0x00004000 [ 150.959264][ C1] Call Trace: [ 150.962540][ C1] [ 150.965654][ C1] __schedule+0xba6/0x1500 [ 150.970091][ C1] ? release_firmware_map_entry+0x190/0x190 [ 150.976003][ C1] schedule+0xbd/0x170 [ 150.980086][ C1] schedule_timeout+0x159/0x340 [ 150.984938][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 150.990314][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 150.995772][ C1] ? __cfi_process_timeout+0x10/0x10 [ 151.001145][ C1] ? prepare_to_swait_event+0x308/0x320 [ 151.006775][ C1] rcu_gp_fqs_loop+0x2e9/0x10c0 [ 151.011622][ C1] ? __cfi_rcu_implicit_dynticks_qs+0x10/0x10 [ 151.017764][ C1] ? rcu_gp_init+0xf30/0xf30 [ 151.022346][ C1] rcu_gp_kthread+0x99/0x390 [ 151.027196][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 151.032640][ C1] ? __kasan_check_read+0x11/0x20 [ 151.037655][ C1] ? __kthread_parkme+0x142/0x180 [ 151.042754][ C1] kthread+0x281/0x320 [ 151.046835][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 151.052053][ C1] ? __cfi_kthread+0x10/0x10 [ 151.056667][ C1] ret_from_fork+0x1f/0x30 [ 151.061190][ C1] [ 151.064204][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 151.070520][ C1] Sending NMI from CPU 1 to CPUs 0: [ 151.075908][ C0] NMI backtrace for cpu 0 [ 151.075919][ C0] CPU: 0 PID: 1939 Comm: syz.1.496 Not tainted syzkaller #0 [ 151.075935][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.075943][ C0] RIP: 0010:kvm_wait+0x105/0x150 [ 151.075968][ C0] Code: 09 33 04 f4 eb 87 fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d 2d 09 33 04 fb f4 5e ff ff ff fb e9 58 ff ff ff e8 db 6a c4 03 89 f9 80 e1 07 38 [ 151.075980][ C0] RSP: 0018:ffffc900038c78a0 EFLAGS: 00000246 [ 151.075995][ C0] RAX: 0000000000000003 RBX: ffff88812fa70098 RCX: ffffffff85007792 [ 151.076007][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88812fa70098 [ 151.076017][ C0] RBP: ffffc900038c7930 R08: ffff88812fa70098 R09: 1ffff11025f4e013 [ 151.076027][ C0] R10: dffffc0000000000 R11: ffffed1025f4e014 R12: 1ffff1103edc0001 [ 151.076038][ C0] R13: ffff8881f6e38cd4 R14: dffffc0000000000 R15: 1ffff92000718f14 [ 151.076048][ C0] FS: 00005555701f6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 151.076061][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.076072][ C0] CR2: 00007ffe88d39f80 CR3: 000000012ebfb000 CR4: 00000000003506b0 [ 151.076087][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 151.076096][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 151.076106][ C0] Call Trace: [ 151.076111][ C0] [ 151.076117][ C0] ? __cfi_kvm_wait+0x10/0x10 [ 151.076136][ C0] ? __pv_queued_spin_lock_slowpath+0x632/0xc40 [ 151.076158][ C0] __pv_queued_spin_lock_slowpath+0x690/0xc40 [ 151.076180][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 151.076199][ C0] ? stack_trace_save+0xa6/0xf0 [ 151.076218][ C0] ? __stack_depot_save+0x36/0x480 [ 151.076233][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 151.076251][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 151.076265][ C0] _raw_spin_lock_bh+0xe4/0xf0 [ 151.076282][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 151.076300][ C0] ? __kasan_record_aux_stack+0xb6/0xc0 [ 151.076322][ C0] ? task_work_add+0x7f/0x330 [ 151.076340][ C0] ? fput+0xe1/0x1a0 [ 151.076355][ C0] ? filp_close+0x111/0x160 [ 151.076373][ C0] ? __close_range+0x300/0x4f0 [ 151.076387][ C0] ? x64_sys_call+0x43b/0x9a0 [ 151.076403][ C0] ? do_syscall_64+0x4c/0xa0 [ 151.076421][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.076442][ C0] lock_sock_nested+0x90/0x2a0 [ 151.076458][ C0] ? __cfi_lock_sock_nested+0x10/0x10 [ 151.076472][ C0] ? __cfi_locks_remove_file+0x10/0x10 [ 151.076488][ C0] tipc_release+0xb2/0x1670 [ 151.076506][ C0] ? rwsem_write_trylock+0x136/0x300 [ 151.076528][ C0] ? __cfi_tipc_release+0x10/0x10 [ 151.076546][ C0] sock_close+0xf1/0x290 [ 151.076560][ C0] ? __cfi_sock_close+0x10/0x10 [ 151.076573][ C0] __fput+0x1fc/0x8f0 [ 151.076598][ C0] ____fput+0x15/0x20 [ 151.076614][ C0] task_work_run+0x1e1/0x250 [ 151.076631][ C0] ? __cfi_task_work_run+0x10/0x10 [ 151.076647][ C0] ? __cfi___close_range+0x10/0x10 [ 151.076662][ C0] exit_to_user_mode_loop+0x9b/0xb0 [ 151.076678][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 151.076693][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 151.076708][ C0] do_syscall_64+0x58/0xa0 [ 151.076725][ C0] ? clear_bhb_loop+0x30/0x80 [ 151.076739][ C0] ? clear_bhb_loop+0x30/0x80 [ 151.076752][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.076771][ C0] RIP: 0033:0x7f807b18a029 [ 151.076786][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.076797][ C0] RSP: 002b:00007ffd0f215de8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 151.076812][ C0] RAX: 0000000000000000 RBX: 00007f807b357ba0 RCX: 00007f807b18a029 [ 151.076821][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 151.076830][ C0] RBP: 00007f807b357ba0 R08: 0000000000000001 R09: ffffffffffffffff [ 151.076840][ C0] R10: 00007f807b357ac0 R11: 0000000000000246 R12: 000000000000c9c8 [ 151.076850][ C0] R13: 00007f807b356080 R14: 0000000000000032 R15: ffffffffffffffff [ 151.076862][ C0] [ 151.076917][ C1] CPU: 1 PID: 1940 Comm: syz.1.496 Not tainted syzkaller #0 [ 151.493910][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.503960][ C1] RIP: 0010:tipc_sk_lookup+0xbe/0x620 [ 151.509417][ C1] Code: 00 44 8b 35 7c b0 ba 02 e8 7f c7 84 fc 48 81 c3 20 0b 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 92 79 dd fc <49> c1 e6 03 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc [ 151.529365][ C1] RSP: 0018:ffffc900039d67e0 EFLAGS: 00000246 [ 151.535463][ C1] RAX: 1ffff110234e1164 RBX: ffff88811a708b20 RCX: dffffc0000000000 [ 151.543428][ C1] RDX: 0000000000000000 RSI: 0000000044b1120d RDI: ffff88811a708000 [ 151.551738][ C1] RBP: ffffc900039d68d0 R08: 0000000000000003 R09: 0000000000000004 [ 151.559786][ C1] R10: dffffc0000000000 R11: fffff5200073ad0c R12: ffffc900039d6d60 [ 151.567770][ C1] R13: dffffc0000000000 R14: 0000000000000026 R15: dffffc0000000000 [ 151.576004][ C1] FS: 00007f807bfc76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 151.584968][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.591542][ C1] CR2: 00007ffe88d39f80 CR3: 000000012ebfb000 CR4: 00000000003506a0 [ 151.599773][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 151.607928][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 151.616083][ C1] Call Trace: [ 151.619466][ C1] [ 151.622497][ C1] ? __kasan_check_write+0x14/0x20 [ 151.627802][ C1] ? _raw_spin_lock_bh+0x94/0xf0 [ 151.632761][ C1] ? tipc_sk_rcv+0x2c10/0x2c10 [ 151.637540][ C1] ? kasan_check_range+0x24/0x2a0 [ 151.642655][ C1] tipc_sk_rcv+0x416/0x2c10 [ 151.647155][ C1] ? stack_trace_save+0xa6/0xf0 [ 151.652084][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 151.657971][ C1] ? __stack_depot_save+0x445/0x480 [ 151.663156][ C1] ? kasan_set_track+0x4b/0x70 [ 151.667908][ C1] ? kasan_save_free_info+0x31/0x50 [ 151.673379][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 151.678409][ C1] ? tipc_sk_rcv+0x7ed/0x2c10 [ 151.683169][ C1] ? sockopt_release_sock+0x95/0x1f0 [ 151.688528][ C1] ? sk_setsockopt+0x1442/0x2730 [ 151.693740][ C1] ? sock_setsockopt+0x5a/0x70 [ 151.698706][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 151.703812][ C1] tipc_node_xmit+0x26c/0xd90 [ 151.708488][ C1] ? debug_smp_processor_id+0x17/0x20 [ 151.713966][ C1] ? kasan_quarantine_put+0x34/0x190 [ 151.719335][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 151.724709][ C1] ? ____kasan_slab_free+0x13d/0x180 [ 151.730174][ C1] ? __kasan_slab_free+0x11/0x20 [ 151.735109][ C1] tipc_node_distr_xmit+0x2a3/0x3b0 [ 151.740514][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 151.746256][ C1] tipc_sk_rcv+0x1a14/0x2c10 [ 151.750842][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 151.755768][ C1] tipc_node_xmit+0x26c/0xd90 [ 151.760786][ C1] ? is_bpf_text_address+0x177/0x190 [ 151.766322][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 151.771523][ C1] ? kernel_text_address+0xa0/0xd0 [ 151.776990][ C1] ? __kernel_text_address+0xd/0x30 [ 151.782356][ C1] ? __kasan_check_write+0x14/0x20 [ 151.787645][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 151.793104][ C1] tipc_sk_filter_rcv+0x158e/0x2cf0 [ 151.798468][ C1] ? tipc_sk_publish+0x470/0x470 [ 151.803565][ C1] ? __kasan_check_write+0x14/0x20 [ 151.808833][ C1] ? _raw_spin_lock_bh+0x94/0xf0 [ 151.813767][ C1] tipc_sk_rcv+0x7ed/0x2c10 [ 151.818257][ C1] ? kmem_cache_free+0x12d/0x300 [ 151.823283][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 151.828381][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 151.833576][ C1] ? tipc_sk_filter_rcv+0x2a82/0x2cf0 [ 151.838940][ C1] tipc_node_xmit+0x26c/0xd90 [ 151.843661][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 151.848966][ C1] tipc_node_distr_xmit+0x2a3/0x3b0 [ 151.854576][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 151.860503][ C1] tipc_sk_backlog_rcv+0x17d/0x210 [ 151.865699][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 151.871319][ C1] __release_sock+0x154/0x380 [ 151.876080][ C1] sockopt_release_sock+0x95/0x1f0 [ 151.881448][ C1] sk_setsockopt+0x1442/0x2730 [ 151.886496][ C1] ? __cfi_sk_setsockopt+0x10/0x10 [ 151.891703][ C1] ? selinux_socket_setsockopt+0x282/0x360 [ 151.897591][ C1] ? memcpy+0x56/0x70 [ 151.901738][ C1] ? __fget_files+0x2d5/0x330 [ 151.906522][ C1] sock_setsockopt+0x5a/0x70 [ 151.911375][ C1] __sys_setsockopt+0x269/0x4e0 [ 151.916410][ C1] ? __cfi___sys_setsockopt+0x10/0x10 [ 151.922035][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 151.927772][ C1] ? xfd_validate_state+0x70/0x150 [ 151.933158][ C1] ? __kasan_check_write+0x14/0x20 [ 151.938382][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 151.944505][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 151.949701][ C1] x64_sys_call+0x124/0x9a0 [ 151.954290][ C1] do_syscall_64+0x4c/0xa0 [ 151.958704][ C1] ? clear_bhb_loop+0x30/0x80 [ 151.963714][ C1] ? clear_bhb_loop+0x30/0x80 [ 151.968552][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.974707][ C1] RIP: 0033:0x7f807b18a029 [ 151.979409][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.999460][ C1] RSP: 002b:00007f807bfc7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 152.007894][ C1] RAX: ffffffffffffffda RBX: 00007f807b355fa0 RCX: 00007f807b18a029 [ 152.015891][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 152.024202][ C1] RBP: 00007f807b20da05 R08: 0000000000000004 R09: 0000000000000000 [ 152.032428][ C1] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 152.040576][ C1] R13: 0000000000000000 R14: 00007f807b355fa0 R15: 00007ffd0f215c88 [ 152.048804][ C1] [ 287.292145][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 225s! [syz.1.496:1940] [ 287.300603][ C1] Modules linked in: [ 287.304583][ C1] CPU: 1 PID: 1940 Comm: syz.1.496 Not tainted syzkaller #0 [ 287.311959][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.322143][ C1] RIP: 0010:tipc_sk_lookup+0x506/0x620 [ 287.327712][ C1] Code: 49 29 c4 74 62 49 8d 9c 24 80 00 00 00 48 89 df be 04 00 00 00 e8 fa 77 dd fc 41 be 01 00 00 00 f0 45 0f c1 b4 24 80 00 00 00 <31> ff 44 89 f6 e8 80 4b 98 fc 45 85 f6 74 7d bf fe ff ff 7f 44 89 [ 287.347660][ C1] RSP: 0018:ffffc900039d67e0 EFLAGS: 00000206 [ 287.353724][ C1] RAX: 0000000000000301 RBX: ffff88812fa70080 RCX: ffffffff84d92496 [ 287.361698][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88812fa70080 [ 287.369676][ C1] RBP: ffffc900039d68d0 R08: ffff88812fa70083 R09: 1ffff11025f4e010 [ 287.377648][ C1] R10: dffffc0000000000 R11: ffffed1025f4e011 R12: ffff88812fa70000 [ 287.385625][ C1] R13: 00000000000003f0 R14: 0000000000000004 R15: ffff8881213210de [ 287.393674][ C1] FS: 00007f807bfc76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 287.402760][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.409433][ C1] CR2: 00007ffe88d39f80 CR3: 000000012ebfb000 CR4: 00000000003506a0 [ 287.417416][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.425574][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.433545][ C1] Call Trace: [ 287.436818][ C1] [ 287.439831][ C1] ? tipc_sk_rcv+0x2c10/0x2c10 [ 287.444701][ C1] tipc_sk_rcv+0x416/0x2c10 [ 287.449208][ C1] ? stack_trace_save+0xa6/0xf0 [ 287.454152][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 287.460126][ C1] ? __stack_depot_save+0x445/0x480 [ 287.465313][ C1] ? kasan_set_track+0x4b/0x70 [ 287.470151][ C1] ? kasan_save_free_info+0x31/0x50 [ 287.475351][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 287.480630][ C1] ? tipc_sk_rcv+0x7ed/0x2c10 [ 287.485499][ C1] ? sockopt_release_sock+0x95/0x1f0 [ 287.490795][ C1] ? sk_setsockopt+0x1442/0x2730 [ 287.495827][ C1] ? sock_setsockopt+0x5a/0x70 [ 287.500775][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 287.505821][ C1] tipc_node_xmit+0x26c/0xd90 [ 287.510604][ C1] ? debug_smp_processor_id+0x17/0x20 [ 287.516322][ C1] ? kasan_quarantine_put+0x34/0x190 [ 287.521718][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 287.526967][ C1] ? ____kasan_slab_free+0x13d/0x180 [ 287.532330][ C1] ? __kasan_slab_free+0x11/0x20 [ 287.537287][ C1] tipc_node_distr_xmit+0x2a3/0x3b0 [ 287.542671][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 287.548649][ C1] tipc_sk_rcv+0x1a14/0x2c10 [ 287.553246][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 287.558175][ C1] tipc_node_xmit+0x26c/0xd90 [ 287.562840][ C1] ? is_bpf_text_address+0x177/0x190 [ 287.568315][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 287.573611][ C1] ? kernel_text_address+0xa0/0xd0 [ 287.578720][ C1] ? __kernel_text_address+0xd/0x30 [ 287.584145][ C1] ? __kasan_check_write+0x14/0x20 [ 287.589363][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 287.594855][ C1] tipc_sk_filter_rcv+0x158e/0x2cf0 [ 287.600062][ C1] ? tipc_sk_publish+0x470/0x470 [ 287.605034][ C1] ? __kasan_check_write+0x14/0x20 [ 287.610180][ C1] ? _raw_spin_lock_bh+0x94/0xf0 [ 287.615171][ C1] tipc_sk_rcv+0x7ed/0x2c10 [ 287.619674][ C1] ? kmem_cache_free+0x12d/0x300 [ 287.624696][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 287.629977][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 287.634901][ C1] ? tipc_sk_filter_rcv+0x2a82/0x2cf0 [ 287.640262][ C1] tipc_node_xmit+0x26c/0xd90 [ 287.645062][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 287.650248][ C1] tipc_node_distr_xmit+0x2a3/0x3b0 [ 287.655461][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 287.661281][ C1] tipc_sk_backlog_rcv+0x17d/0x210 [ 287.666478][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 287.672102][ C1] __release_sock+0x154/0x380 [ 287.676884][ C1] sockopt_release_sock+0x95/0x1f0 [ 287.682074][ C1] sk_setsockopt+0x1442/0x2730 [ 287.686827][ C1] ? __cfi_sk_setsockopt+0x10/0x10 [ 287.692105][ C1] ? selinux_socket_setsockopt+0x282/0x360 [ 287.697995][ C1] ? memcpy+0x56/0x70 [ 287.702049][ C1] ? __fget_files+0x2d5/0x330 [ 287.706901][ C1] sock_setsockopt+0x5a/0x70 [ 287.711568][ C1] __sys_setsockopt+0x269/0x4e0 [ 287.716405][ C1] ? __cfi___sys_setsockopt+0x10/0x10 [ 287.721761][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 287.727382][ C1] ? xfd_validate_state+0x70/0x150 [ 287.732571][ C1] ? __kasan_check_write+0x14/0x20 [ 287.737752][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 287.743631][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 287.748729][ C1] x64_sys_call+0x124/0x9a0 [ 287.753217][ C1] do_syscall_64+0x4c/0xa0 [ 287.757620][ C1] ? clear_bhb_loop+0x30/0x80 [ 287.762383][ C1] ? clear_bhb_loop+0x30/0x80 [ 287.767416][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.773625][ C1] RIP: 0033:0x7f807b18a029 [ 287.778287][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.798511][ C1] RSP: 002b:00007f807bfc7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 287.807448][ C1] RAX: ffffffffffffffda RBX: 00007f807b355fa0 RCX: 00007f807b18a029 [ 287.815495][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 287.823548][ C1] RBP: 00007f807b20da05 R08: 0000000000000004 R09: 0000000000000000 [ 287.831785][ C1] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 287.839864][ C1] R13: 0000000000000000 R14: 00007f807b355fa0 R15: 00007ffd0f215c88 [ 287.848049][ C1] [ 287.851106][ C1] Sending NMI from CPU 1 to CPUs 0: [ 287.856425][ C0] NMI backtrace for cpu 0 [ 287.856437][ C0] CPU: 0 PID: 1939 Comm: syz.1.496 Not tainted syzkaller #0 [ 287.856453][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.856461][ C0] RIP: 0010:kvm_wait+0x105/0x150 [ 287.856488][ C0] Code: 09 33 04 f4 eb 87 fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d 2d 09 33 04 fb f4 5e ff ff ff fb e9 58 ff ff ff e8 db 6a c4 03 89 f9 80 e1 07 38 [ 287.856500][ C0] RSP: 0018:ffffc900038c78a0 EFLAGS: 00000246 [ 287.856516][ C0] RAX: 0000000000000003 RBX: ffff88812fa70098 RCX: ffffffff85007792 [ 287.856526][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88812fa70098 [ 287.856537][ C0] RBP: ffffc900038c7930 R08: ffff88812fa70098 R09: 1ffff11025f4e013 [ 287.856547][ C0] R10: dffffc0000000000 R11: ffffed1025f4e014 R12: 1ffff1103edc0001 [ 287.856558][ C0] R13: ffff8881f6e38cd4 R14: dffffc0000000000 R15: 1ffff92000718f14 [ 287.856569][ C0] FS: 00005555701f6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 287.856582][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.856593][ C0] CR2: 00007ffe88d39f80 CR3: 000000012ebfb000 CR4: 00000000003506b0 [ 287.856608][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.856617][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.856627][ C0] Call Trace: [ 287.856632][ C0] [ 287.856638][ C0] ? __cfi_kvm_wait+0x10/0x10 [ 287.856657][ C0] ? __pv_queued_spin_lock_slowpath+0x632/0xc40 [ 287.856680][ C0] __pv_queued_spin_lock_slowpath+0x690/0xc40 [ 287.856702][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 287.856721][ C0] ? stack_trace_save+0xa6/0xf0 [ 287.856741][ C0] ? __stack_depot_save+0x36/0x480 [ 287.856756][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 287.856774][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 287.856788][ C0] _raw_spin_lock_bh+0xe4/0xf0 [ 287.856805][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 287.856822][ C0] ? __kasan_record_aux_stack+0xb6/0xc0 [ 287.856843][ C0] ? task_work_add+0x7f/0x330 [ 287.856860][ C0] ? fput+0xe1/0x1a0 [ 287.856877][ C0] ? filp_close+0x111/0x160 [ 287.856895][ C0] ? __close_range+0x300/0x4f0 [ 287.856908][ C0] ? x64_sys_call+0x43b/0x9a0 [ 287.856926][ C0] ? do_syscall_64+0x4c/0xa0 [ 287.856944][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.856965][ C0] lock_sock_nested+0x90/0x2a0 [ 287.856980][ C0] ? __cfi_lock_sock_nested+0x10/0x10 [ 287.856994][ C0] ? __cfi_locks_remove_file+0x10/0x10 [ 287.857010][ C0] tipc_release+0xb2/0x1670 [ 287.857029][ C0] ? rwsem_write_trylock+0x136/0x300 [ 287.857051][ C0] ? __cfi_tipc_release+0x10/0x10 [ 287.857068][ C0] sock_close+0xf1/0x290 [ 287.857082][ C0] ? __cfi_sock_close+0x10/0x10 [ 287.857096][ C0] __fput+0x1fc/0x8f0 [ 287.857114][ C0] ____fput+0x15/0x20 [ 287.857129][ C0] task_work_run+0x1e1/0x250 [ 287.857146][ C0] ? __cfi_task_work_run+0x10/0x10 [ 287.857163][ C0] ? __cfi___close_range+0x10/0x10 [ 287.857177][ C0] exit_to_user_mode_loop+0x9b/0xb0 [ 287.857193][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 287.857209][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 287.857225][ C0] do_syscall_64+0x58/0xa0 [ 287.857241][ C0] ? clear_bhb_loop+0x30/0x80 [ 287.857255][ C0] ? clear_bhb_loop+0x30/0x80 [ 287.857269][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.857289][ C0] RIP: 0033:0x7f807b18a029 [ 287.857302][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.857313][ C0] RSP: 002b:00007ffd0f215de8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 287.857328][ C0] RAX: 0000000000000000 RBX: 00007f807b357ba0 RCX: 00007f807b18a029 [ 287.857338][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 287.857346][ C0] RBP: 00007f807b357ba0 R08: 0000000000000001 R09: ffffffffffffffff [ 287.857356][ C0] R10: 00007f807b357ac0 R11: 0000000000000246 R12: 000000000000c9c8 [ 287.857374][ C0] R13: 00007f807b356080 R14: 0000000000000032 R15: ffffffffffffffff [ 287.857386][ C0]