[ 21.758519][ T287] device veth1_macvtap entered promiscuous mode [ 21.768634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.778687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.796611][ T287] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 22.669201][ T9] device bridge_slave_1 left promiscuous mode [ 22.675458][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.683019][ T9] device bridge_slave_0 left promiscuous mode [ 22.689211][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.696818][ T9] device veth1_macvtap left promiscuous mode [ 22.703420][ T9] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.1.176' (ED25519) to the list of known hosts. 2026/01/28 22:45:29 ignoring optional flag "type"="gce" 2026/01/28 22:45:29 parsed 1 programs [ 38.954095][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 38.954107][ T24] audit: type=1400 audit(1769640329.980:92): avc: denied { unlink } for pid=318 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2026/01/28 22:45:30 executed programs: 0 [ 39.016052][ T318] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.062644][ T325] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.069767][ T325] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.077022][ T325] device bridge_slave_0 entered promiscuous mode [ 39.083871][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.091196][ T325] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.099038][ T325] device bridge_slave_1 entered promiscuous mode [ 39.130138][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.137630][ T325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.145668][ T325] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.153070][ T325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.170040][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.177453][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.185620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.193694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.202665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.211061][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.218604][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.226944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.235555][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.242614][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.254093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.263359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.276352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.287733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.295897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.303712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.311829][ T325] device veth0_vlan entered promiscuous mode [ 39.321196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.330120][ T325] device veth1_macvtap entered promiscuous mode [ 39.339084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.349683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.369097][ T24] audit: type=1400 audit(1769640330.400:93): avc: denied { create } for pid=329 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.389515][ T24] audit: type=1400 audit(1769640330.400:94): avc: denied { setopt } for pid=329 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.410081][ T24] audit: type=1400 audit(1769640330.420:95): avc: denied { write } for pid=329 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 2026/01/28 22:45:35 executed programs: 742 2026/01/28 22:45:40 executed programs: 1546 2026/01/28 22:45:45 executed programs: 2373 2026/01/28 22:45:50 executed programs: 3197 2026/01/28 22:45:55 executed programs: 4029 2026/01/28 22:46:00 executed programs: 4859 2026/01/28 22:46:05 executed programs: 5697 2026/01/28 22:46:10 executed programs: 6538 2026/01/28 22:46:15 executed programs: 7372 2026/01/28 22:46:20 executed programs: 8187 2026/01/28 22:46:25 executed programs: 8989 2026/01/28 22:46:30 executed programs: 9782 2026/01/28 22:46:35 executed programs: 10589 2026/01/28 22:46:40 executed programs: 11390 2026/01/28 22:46:45 executed programs: 12195 2026/01/28 22:46:50 executed programs: 13012 2026/01/28 22:46:55 executed programs: 13828 [ 225.657064][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 225.663736][ C0] rcu: 0-...!: (10000 ticks this GP) idle=3c6/1/0x4000000000000000 softirq=77446/77446 fqs=0 last_accelerate: bb8c/e29c dyntick_enabled: 1 [ 225.678431][ C0] (t=10002 jiffies g=45957 q=306) [ 225.683565][ C0] rcu: rcu_preempt kthread starved for 10002 jiffies! g45957 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 225.695180][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 225.705164][ C0] rcu: RCU grace-period kthread stack dump: [ 225.711085][ C0] task:rcu_preempt state:I stack: 0 pid: 13 ppid: 2 flags:0x00004000 [ 225.720379][ C0] Call Trace: [ 225.723673][ C0] __schedule+0xb53/0x1320 [ 225.728112][ C0] ? __sched_text_start+0x8/0x8 [ 225.732977][ C0] ? __mod_timer+0x7da/0xb50 [ 225.737583][ C0] schedule+0x13c/0x1d0 [ 225.741848][ C0] schedule_timeout+0x159/0x330 [ 225.746992][ C0] ? console_conditional_schedule+0x10/0x10 [ 225.753189][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 225.758919][ C0] ? run_local_timers+0x160/0x160 [ 225.764094][ C0] ? prepare_to_swait_event+0x320/0x340 [ 225.769720][ C0] rcu_gp_kthread+0x1045/0x2730 [ 225.774658][ C0] ? rcu_barrier_callback+0x50/0x50 [ 225.779866][ C0] ? __kasan_check_read+0x11/0x20 [ 225.785069][ C0] ? __kthread_parkme+0xb9/0x1c0 [ 225.790007][ C0] kthread+0x346/0x3d0 [ 225.794264][ C0] ? rcu_barrier_callback+0x50/0x50 [ 225.799464][ C0] ? kthread_blkcg+0xd0/0xd0 [ 225.804062][ C0] ret_from_fork+0x1f/0x30 [ 225.808588][ C0] NMI backtrace for cpu 0 [ 225.813092][ C0] CPU: 0 PID: 10093 Comm: syz-executor.0 Not tainted syzkaller #0 [ 225.821041][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.831117][ C0] Call Trace: [ 225.834410][ C0] [ 225.837269][ C0] __dump_stack+0x21/0x24 [ 225.841775][ C0] dump_stack_lvl+0x1a7/0x208 [ 225.846798][ C0] ? show_regs_print_info+0x18/0x18 [ 225.852086][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 225.857760][ C0] ? _raw_spin_lock+0xf0/0xf0 [ 225.862720][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 225.868893][ C0] dump_stack+0x15/0x1c [ 225.873056][ C0] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 225.879041][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 225.884933][ C0] rcu_dump_cpu_stacks+0x19c/0x2c0 [ 225.890139][ C0] rcu_sched_clock_irq+0xf88/0x1880 [ 225.895349][ C0] ? rcutree_dead_cpu+0x310/0x310 [ 225.900375][ C0] ? hrtimer_run_queues+0x166/0x430 [ 225.905579][ C0] update_process_times+0x198/0x200 [ 225.910787][ C0] tick_sched_timer+0x17c/0x240 [ 225.915651][ C0] ? tick_setup_sched_timer+0x450/0x450 [ 225.921438][ C0] __hrtimer_run_queues+0x380/0x970 [ 225.926737][ C0] ? hrtimer_interrupt+0xdc0/0xdc0 [ 225.931861][ C0] ? ktime_get_update_offsets_now+0x293/0x2b0 [ 225.938040][ C0] hrtimer_interrupt+0x3a6/0xdc0 [ 225.943165][ C0] ? sched_clock_cpu+0x1b/0x3d0 [ 225.948113][ C0] __sysvec_apic_timer_interrupt+0xfa/0x3f0 [ 225.954098][ C0] asm_call_irq_on_stack+0xf/0x20 [ 225.959120][ C0] [ 225.962062][ C0] sysvec_apic_timer_interrupt+0x85/0xe0 [ 225.967852][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 225.973861][ C0] RIP: 0010:kvm_wait+0xce/0x130 [ 225.978712][ C0] Code: 38 f0 75 26 41 f7 c4 00 02 00 00 75 0f 0f 1f 44 00 00 0f 00 2d c3 1e b8 03 f4 eb 0e 0f 1f 44 00 00 0f 00 2d b4 1e b8 03 fb f4 <4c> 89 64 24 18 ff 74 24 18 9d 48 c7 44 24 20 0e 36 e0 45 4b c7 04 [ 225.998943][ C0] RSP: 0018:ffffc90000ea76e0 EFLAGS: 00000246 [ 226.005045][ C0] RAX: 0000000000000003 RBX: ffff88811f625e88 RCX: ffffffff814bed1a [ 226.013028][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff88811f625e88 [ 226.021100][ C0] RBP: ffffc90000ea7790 R08: ffff88811f625e88 R09: 1ffff11023ec4bd1 [ 226.029261][ C0] R10: dffffc0000000000 R11: ffffed1023ec4bd2 R12: 0000000000000246 [ 226.037542][ C0] R13: 1ffff11023ec4bd1 R14: dffffc0000000000 R15: 1ffff920001d4ee0 [ 226.045905][ C0] ? __pv_queued_spin_lock_slowpath+0x6ba/0xb70 [ 226.052278][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 226.058527][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 226.063875][ C0] ? __pv_queued_spin_lock_slowpath+0x6ba/0xb70 [ 226.070147][ C0] __pv_queued_spin_lock_slowpath+0x714/0xb70 [ 226.076222][ C0] ? __pv_queued_spin_unlock_slowpath+0x280/0x280 [ 226.082638][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 226.088125][ C0] _raw_spin_lock_bh+0xe4/0xf0 [ 226.092918][ C0] ? _raw_spin_lock_irq+0xf0/0xf0 [ 226.098135][ C0] ? selinux_socket_sendmsg+0x22f/0x340 [ 226.103726][ C0] lock_sock_nested+0x90/0x2a0 [ 226.108613][ C0] ? sock_init_data+0xc0/0xc0 [ 226.113303][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 226.118332][ C0] ? _raw_spin_unlock_bh+0x51/0x60 [ 226.123450][ C0] tipc_sendstream+0x47/0x70 [ 226.128188][ C0] ? tipc_getsockopt+0x4d0/0x4d0 [ 226.133138][ C0] ____sys_sendmsg+0x5b7/0x8f0 [ 226.137902][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 226.143063][ C0] ? import_iovec+0x7c/0xb0 [ 226.147585][ C0] ___sys_sendmsg+0x236/0x2e0 [ 226.152335][ C0] ? __sys_sendmsg+0x280/0x280 [ 226.157252][ C0] ? __kasan_check_write+0x14/0x20 [ 226.162596][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 226.167639][ C0] ? __fdget+0x1a1/0x230 [ 226.171884][ C0] __x64_sys_sendmsg+0x1f9/0x2c0 [ 226.176830][ C0] ? ___sys_sendmsg+0x2e0/0x2e0 [ 226.181684][ C0] ? debug_smp_processor_id+0x17/0x20 [ 226.187269][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 226.193657][ C0] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 226.199738][ C0] do_syscall_64+0x31/0x40 [ 226.204279][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 226.210207][ C0] RIP: 0033:0x7fcd9fea9279 [ 226.214998][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 226.235060][ C0] RSP: 002b:00007fcd9fa190b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.243769][ C0] RAX: ffffffffffffffda RBX: 00007fcd9ffe7050 RCX: 00007fcd9fea9279 [ 226.251782][ C0] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 226.260514][ C0] RBP: 00007fcd9ff0a49c R08: 0000000000000000 R09: 0000000000000000 [ 226.268496][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.276602][ C0] R13: 000000000000000b R14: 00007fcd9ffe7050 R15: 00007ffe5f2f4008 [ 265.091225][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [syz-executor.0:10092] [ 265.100127][ C1] Modules linked in: [ 265.104093][ C1] CPU: 1 PID: 10092 Comm: syz-executor.0 Not tainted syzkaller #0 [ 265.111871][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 265.121912][ C1] RIP: 0010:__local_bh_enable_ip+0x49/0x80 [ 265.127898][ C1] Code: b3 08 00 65 8b 05 33 4f c6 7e a9 00 ff ff 00 75 19 48 c7 c7 e0 a8 e7 84 e8 54 47 41 03 65 66 8b 05 cc 38 c9 7e 66 85 c0 75 22 01 00 00 00 e8 fd b2 08 00 65 8b 05 02 4f c6 7e 85 c0 74 02 5d [ 265.147691][ C1] RSP: 0018:ffffc90001756770 EFLAGS: 00000206 [ 265.153750][ C1] RAX: 0000000000000202 RBX: ffff88811f625e88 RCX: 0000000000000401 [ 265.161701][ C1] RDX: 0000000000000000 RSI: 0000000000000201 RDI: 00000000fffffe00 [ 265.169650][ C1] RBP: ffffc90001756770 R08: ffff88811f625e8b R09: 1ffff11023ec4bd1 [ 265.177603][ C1] R10: dffffc0000000000 R11: ffffed1023ec4bd2 R12: dffffc0000000000 [ 265.185580][ C1] R13: 1ffff920002eacf0 R14: ffffffff84677aca R15: 00000000c3b54954 [ 265.193548][ C1] FS: 00007fcd9fa3a6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 265.202456][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.209022][ C1] CR2: 0000000020000000 CR3: 000000011cce0000 CR4: 00000000003506a0 [ 265.217081][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.225133][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.233186][ C1] Call Trace: [ 265.236474][ C1] _raw_spin_trylock_bh+0xe5/0x150 [ 265.241596][ C1] ? _raw_spin_trylock+0x150/0x150 [ 265.246710][ C1] tipc_sk_rcv+0x37a/0x1dc0 [ 265.251209][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 265.257030][ C1] ? __stack_depot_save+0x47d/0x4c0 [ 265.262319][ C1] ? kasan_set_track+0x5b/0x70 [ 265.267087][ C1] ? kasan_set_track+0x4a/0x70 [ 265.272073][ C1] ? ____kasan_slab_free+0x125/0x160 [ 265.277439][ C1] ? __kasan_slab_free+0x11/0x20 [ 265.282556][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 265.288385][ C1] ? kmem_cache_free+0x100/0x2d0 [ 265.293441][ C1] ? tipc_node_distr_xmit+0x2a3/0x3b0 [ 265.298891][ C1] ? tipc_sk_backlog_rcv+0x17d/0x210 [ 265.304187][ C1] ? __release_sock+0x146/0x360 [ 265.309188][ C1] ? __sys_setsockopt+0x272/0x480 [ 265.314219][ C1] ? __skb_queue_purge+0x170/0x170 [ 265.319344][ C1] tipc_node_xmit+0x26c/0xd80 [ 265.324118][ C1] ? debug_smp_processor_id+0x17/0x20 [ 265.329671][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 265.335290][ C1] ? ____kasan_slab_free+0x130/0x160 [ 265.340574][ C1] ? __kasan_slab_free+0x11/0x20 [ 265.345766][ C1] ? kfree_skbmem+0x10c/0x180 [ 265.350436][ C1] tipc_node_distr_xmit+0x2a3/0x3b0 [ 265.355715][ C1] ? tipc_node_xmit_skb+0x150/0x150 [ 265.361009][ C1] ? trace_tipc_sk_rej_msg+0x2c/0x6d0 [ 265.366390][ C1] tipc_sk_rcv+0x18ed/0x1dc0 [ 265.371102][ C1] ? __skb_queue_purge+0x170/0x170 [ 265.376420][ C1] tipc_node_xmit+0x26c/0xd80 [ 265.381131][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 265.386729][ C1] tipc_sk_push_backlog+0x4dd/0x790 [ 265.391913][ C1] tipc_sk_proto_rcv+0xa65/0x1af0 [ 265.396928][ C1] ? trace_tipc_sk_dump+0x6c0/0x6c0 [ 265.402128][ C1] tipc_sk_filter_rcv+0x315a/0x3910 [ 265.407324][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 265.412423][ C1] ? kasan_set_track+0x5b/0x70 [ 265.417518][ C1] ? kasan_set_track+0x5b/0x70 [ 265.422367][ C1] ? kasan_set_track+0x4a/0x70 [ 265.427139][ C1] ? kasan_set_free_info+0x23/0x40 [ 265.432455][ C1] ? ____kasan_slab_free+0x125/0x160 [ 265.437734][ C1] ? __kasan_slab_free+0x11/0x20 [ 265.442679][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 265.448317][ C1] ? kmem_cache_free+0x100/0x2d0 [ 265.453355][ C1] ? kfree_skbmem+0x10c/0x180 [ 265.458044][ C1] ? tipc_msg_reverse+0x698/0x900 [ 265.463107][ C1] ? tipc_sk_filter_rcv+0xcd2/0x3910 [ 265.469129][ C1] ? tipc_sk_backlog_rcv+0x117/0x210 [ 265.474536][ C1] ? __release_sock+0x146/0x360 [ 265.479619][ C1] ? sock_setsockopt+0x1840/0x2680 [ 265.484819][ C1] ? __x64_sys_setsockopt+0xbf/0xd0 [ 265.490170][ C1] ? do_syscall_64+0x31/0x40 [ 265.495004][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 265.501189][ C1] ? tipc_sk_dump+0xfc0/0xfc0 [ 265.506167][ C1] ? __kasan_check_write+0x14/0x20 [ 265.511308][ C1] ? _raw_spin_lock_bh+0x94/0xf0 [ 265.516749][ C1] tipc_sk_rcv+0x742/0x1dc0 [ 265.521258][ C1] ? kfree_skbmem+0x10c/0x180 [ 265.526028][ C1] ? __skb_queue_purge+0x170/0x170 [ 265.531143][ C1] ? tipc_sk_filter_rcv+0x30d7/0x3910 [ 265.536524][ C1] ? __kasan_check_write+0x14/0x20 [ 265.541908][ C1] tipc_node_xmit+0x26c/0xd80 [ 265.546684][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 265.552238][ C1] tipc_node_distr_xmit+0x2a3/0x3b0 [ 265.557691][ C1] ? tipc_node_xmit_skb+0x150/0x150 [ 265.562894][ C1] ? futex_wait+0x5bc/0x6f0 [ 265.567438][ C1] tipc_sk_backlog_rcv+0x17d/0x210 [ 265.572803][ C1] ? tipc_sk_timeout+0x990/0x990 [ 265.577910][ C1] ? __local_bh_enable_ip+0x53/0x80 [ 265.583119][ C1] ? lock_sock_nested+0x21c/0x2a0 [ 265.588135][ C1] __release_sock+0x146/0x360 [ 265.592997][ C1] sock_setsockopt+0x1840/0x2680 [ 265.597948][ C1] ? __sock_set_mark+0x160/0x160 [ 265.602958][ C1] ? selinux_socket_setsockopt+0x282/0x360 [ 265.608861][ C1] ? selinux_socket_getsockopt+0x340/0x340 [ 265.614900][ C1] ? memcpy+0x56/0x70 [ 265.618885][ C1] ? __fget_files+0x2c4/0x320 [ 265.623760][ C1] ? security_socket_setsockopt+0x82/0xa0 [ 265.629580][ C1] __sys_setsockopt+0x272/0x480 [ 265.634594][ C1] ? __ia32_sys_recv+0xb0/0xb0 [ 265.639371][ C1] ? switch_fpu_return+0x19c/0x330 [ 265.644573][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 265.649609][ C1] do_syscall_64+0x31/0x40 [ 265.654019][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 265.660055][ C1] RIP: 0033:0x7fcd9fea9279 [ 265.664488][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 265.684246][ C1] RSP: 002b:00007fcd9fa3a0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 265.692660][ C1] RAX: ffffffffffffffda RBX: 00007fcd9ffe6f80 RCX: 00007fcd9fea9279 [ 265.700674][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 265.708691][ C1] RBP: 00007fcd9ff0a49c R08: 0000000000000004 R09: 0000000000000000 [ 265.716797][ C1] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 265.724963][ C1] R13: 000000000000000b R14: 00007fcd9ffe6f80 R15: 00007ffe5f2f4008 [ 265.733307][ C1] Sending NMI from CPU 1 to CPUs 0: [ 265.738919][ C0] NMI backtrace for cpu 0 [ 265.738924][ C0] CPU: 0 PID: 10093 Comm: syz-executor.0 Not tainted syzkaller #0 [ 265.738929][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 265.738932][ C0] RIP: 0010:kvm_wait+0xce/0x130 [ 265.738941][ C0] Code: 38 f0 75 26 41 f7 c4 00 02 00 00 75 0f 0f 1f 44 00 00 0f 00 2d c3 1e b8 03 f4 eb 0e 0f 1f 44 00 00 0f 00 2d b4 1e b8 03 fb f4 <4c> 89 64 24 18 ff 74 24 18 9d 48 c7 44 24 20 0e 36 e0 45 4b c7 04 [ 265.738945][ C0] RSP: 0018:ffffc90000ea76e0 EFLAGS: 00000246 [ 265.738953][ C0] RAX: 0000000000000003 RBX: ffff88811f625e88 RCX: ffffffff814bed1a [ 265.738958][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff88811f625e88 [ 265.738962][ C0] RBP: ffffc90000ea7790 R08: ffff88811f625e88 R09: 1ffff11023ec4bd1 [ 265.738966][ C0] R10: dffffc0000000000 R11: ffffed1023ec4bd2 R12: 0000000000000246 [ 265.738970][ C0] R13: 1ffff11023ec4bd1 R14: dffffc0000000000 R15: 1ffff920001d4ee0 [ 265.738974][ C0] FS: 00007fcd9fa196c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 265.738977][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.738981][ C0] CR2: 00007fcd9fa18fd0 CR3: 000000011cce0000 CR4: 00000000003506b0 [ 265.738985][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.738990][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.738992][ C0] Call Trace: [ 265.738995][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 265.738998][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 265.739002][ C0] ? __pv_queued_spin_lock_slowpath+0x6ba/0xb70 [ 265.739005][ C0] __pv_queued_spin_lock_slowpath+0x714/0xb70 [ 265.739008][ C0] ? __pv_queued_spin_unlock_slowpath+0x280/0x280 [ 265.739012][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 265.739014][ C0] _raw_spin_lock_bh+0xe4/0xf0 [ 265.739017][ C0] ? _raw_spin_lock_irq+0xf0/0xf0 [ 265.739021][ C0] ? selinux_socket_sendmsg+0x22f/0x340 [ 265.739023][ C0] lock_sock_nested+0x90/0x2a0 [ 265.739026][ C0] ? sock_init_data+0xc0/0xc0 [ 265.739029][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 265.739032][ C0] ? _raw_spin_unlock_bh+0x51/0x60 [ 265.739035][ C0] tipc_sendstream+0x47/0x70 [ 265.739038][ C0] ? tipc_getsockopt+0x4d0/0x4d0 [ 265.739041][ C0] ____sys_sendmsg+0x5b7/0x8f0 [ 265.739044][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 265.739047][ C0] ? import_iovec+0x7c/0xb0 [ 265.739049][ C0] ___sys_sendmsg+0x236/0x2e0 [ 265.739052][ C0] ? __sys_sendmsg+0x280/0x280 [ 265.739055][ C0] ? __kasan_check_write+0x14/0x20 [ 265.739058][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 265.739061][ C0] ? __fdget+0x1a1/0x230 [ 265.739064][ C0] __x64_sys_sendmsg+0x1f9/0x2c0 [ 265.739067][ C0] ? ___sys_sendmsg+0x2e0/0x2e0 [ 265.739070][ C0] ? debug_smp_processor_id+0x17/0x20 [ 265.739073][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 265.739077][ C0] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 265.739079][ C0] do_syscall_64+0x31/0x40 [ 265.739083][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 265.739086][ C0] RIP: 0033:0x7fcd9fea9279 [ 265.739094][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 265.739098][ C0] RSP: 002b:00007fcd9fa190b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.739105][ C0] RAX: ffffffffffffffda RBX: 00007fcd9ffe7050 RCX: 00007fcd9fea9279 [ 265.739109][ C0] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 265.739114][ C0] RBP: 00007fcd9ff0a49c R08: 0000000000000000 R09: 0000000000000000 [ 265.739118][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.739122][ C0] R13: 000000000000000b R14: 00007fcd9ffe7050 R15: 00007ffe5f2f4008