Warning: Permanently added '10.128.1.229' (ED25519) to the list of known hosts. 2025/12/14 23:22:08 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 44.968970][ T30] audit: type=1400 audit(1765754528.984:105): avc: denied { unlink } for pid=401 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 45.009315][ T401] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.658459][ T30] audit: type=1401 audit(1765754529.664:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 45.793278][ T30] audit: type=1400 audit(1765754529.804:107): avc: denied { create } for pid=447 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.814087][ T428] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.831783][ T428] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.848544][ T428] device bridge_slave_0 entered promiscuous mode [ 45.870807][ T428] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.877866][ T428] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.888700][ T428] device bridge_slave_1 entered promiscuous mode [ 46.063467][ T428] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.070775][ T428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.078063][ T428] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.085671][ T428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.109485][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.117072][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.125029][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.132909][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.142094][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.150280][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.157390][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.168424][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.176955][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.184438][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.199344][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.207270][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.222038][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.233203][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.241659][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.249274][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.257214][ T428] device veth0_vlan entered promiscuous mode 2025/12/14 23:22:10 executed programs: 0 [ 46.266892][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.278222][ T428] device veth1_macvtap entered promiscuous mode [ 46.287261][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.297821][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.500131][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.507400][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.515070][ T473] device bridge_slave_0 entered promiscuous mode [ 46.526124][ T477] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.533535][ T477] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.541407][ T477] device bridge_slave_0 entered promiscuous mode [ 46.552018][ T477] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.559116][ T477] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.566433][ T477] device bridge_slave_1 entered promiscuous mode [ 46.573283][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.580610][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.587994][ T473] device bridge_slave_1 entered promiscuous mode [ 46.645060][ T480] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.652407][ T480] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.660417][ T480] device bridge_slave_0 entered promiscuous mode [ 46.676457][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.683614][ T478] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.691186][ T478] device bridge_slave_0 entered promiscuous mode [ 46.697879][ T480] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.705216][ T480] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.712744][ T480] device bridge_slave_1 entered promiscuous mode [ 46.733058][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.740202][ T478] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.747605][ T478] device bridge_slave_1 entered promiscuous mode [ 46.762670][ T481] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.769819][ T481] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.777247][ T481] device bridge_slave_0 entered promiscuous mode [ 46.796144][ T481] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.803354][ T481] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.810719][ T481] device bridge_slave_1 entered promiscuous mode [ 47.023171][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.031465][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.050100][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.058526][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.066795][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.073859][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.093570][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.101279][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.109117][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.116721][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.125166][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.133729][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.140782][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.148409][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.157072][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.165268][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.172586][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.180282][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.188812][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.197031][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.204417][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.211923][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.232786][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.240900][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.248573][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.290859][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.300405][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.309588][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.317686][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.324875][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.332315][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.340733][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.348944][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.356062][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.363866][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.372082][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.380419][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.388537][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.396660][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.404254][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.411702][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.419740][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.427182][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.434658][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.443103][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.451578][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.458819][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.466366][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.474843][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.483155][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.490197][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.497741][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.505534][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.516877][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.525495][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.533926][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.541274][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.549178][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.557591][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.565983][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.573032][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.582640][ T478] device veth0_vlan entered promiscuous mode [ 47.593800][ T480] device veth0_vlan entered promiscuous mode [ 47.603950][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.612235][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.619983][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.627596][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.635692][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.645733][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.654460][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.662402][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.675733][ T480] device veth1_macvtap entered promiscuous mode [ 47.689222][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.698039][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.706180][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.714946][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.723316][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.744822][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.753984][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.763043][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.773784][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.781816][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.795490][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.803798][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.814980][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.823746][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.834472][ T478] device veth1_macvtap entered promiscuous mode [ 47.846525][ T473] device veth0_vlan entered promiscuous mode [ 47.853171][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.862501][ T30] audit: type=1400 audit(1765754531.874:108): avc: denied { create } for pid=527 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.863111][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.883665][ T30] audit: type=1400 audit(1765754531.894:109): avc: denied { write } for pid=527 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.890490][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.910778][ T30] audit: type=1400 audit(1765754531.904:110): avc: denied { setopt } for pid=527 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.920953][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.944872][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.953636][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.963878][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.976166][ T477] device veth0_vlan entered promiscuous mode [ 47.985278][ T481] device veth0_vlan entered promiscuous mode [ 48.003155][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.011947][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.021053][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.029849][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.038869][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.049584][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.059182][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.068529][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.106145][ T477] device veth1_macvtap entered promiscuous mode [ 48.114735][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.123357][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.132245][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.141577][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.150257][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.164548][ T473] device veth1_macvtap entered promiscuous mode [ 48.178057][ T481] device veth1_macvtap entered promiscuous mode [ 48.202659][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.224531][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.238916][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.246665][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.272208][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.301601][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.326061][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.337241][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.347169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.356866][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.399561][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.421544][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.448826][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.458622][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.468512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.488638][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.549486][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.579056][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.748106][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 148.754900][ C1] rcu: 1-...!: (10000 ticks this GP) idle=f75/1/0x4000000000000000 softirq=4443/4443 fqs=0 last_accelerate: 9d6c/c498 dyntick_enabled: 1 [ 148.769053][ C1] (t=10003 jiffies g=2969 q=798) [ 148.774055][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10002 jiffies! g2969 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 148.786503][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=774 [ 148.794316][ C1] rcu: rcu_preempt kthread starved for 10005 jiffies! g2969 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 148.805966][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 148.816239][ C1] rcu: RCU grace-period kthread stack dump: [ 148.822349][ C1] task:rcu_preempt state:I stack:28752 pid: 14 ppid: 2 flags:0x00004000 [ 148.831554][ C1] Call Trace: [ 148.834831][ C1] [ 148.837816][ C1] __schedule+0xb6e/0x14c0 [ 148.842220][ C1] ? release_firmware_map_entry+0x190/0x190 [ 148.848273][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 148.854576][ C1] ? __mod_timer+0x7ae/0xb30 [ 148.859163][ C1] schedule+0x11e/0x1e0 [ 148.863477][ C1] schedule_timeout+0x12c/0x2e0 [ 148.868307][ C1] ? console_conditional_schedule+0x30/0x30 [ 148.874233][ C1] ? update_process_times+0x200/0x200 [ 148.879615][ C1] ? prepare_to_swait_event+0x308/0x320 [ 148.885441][ C1] rcu_gp_fqs_loop+0x293/0xf60 [ 148.890197][ C1] ? debug_smp_processor_id+0x17/0x20 [ 148.895836][ C1] ? __note_gp_changes+0x4e2/0x9e0 [ 148.900949][ C1] ? rcu_gp_init+0xc00/0xc00 [ 148.905520][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 148.910784][ C1] ? rcu_gp_init+0x9a7/0xc00 [ 148.915399][ C1] rcu_gp_kthread+0x98/0x330 [ 148.919974][ C1] ? wake_nocb_gp+0x1d0/0x1d0 [ 148.924642][ C1] ? __kasan_check_read+0x11/0x20 [ 148.929815][ C1] ? __kthread_parkme+0xac/0x200 [ 148.934740][ C1] ? preempt_count_add+0x90/0x1b0 [ 148.939825][ C1] kthread+0x411/0x500 [ 148.943987][ C1] ? wake_nocb_gp+0x1d0/0x1d0 [ 148.948842][ C1] ? kthread_blkcg+0xd0/0xd0 [ 148.953494][ C1] ret_from_fork+0x1f/0x30 [ 148.958100][ C1] [ 148.961193][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 148.967613][ C1] Sending NMI from CPU 1 to CPUs 0: [ 148.972836][ C0] NMI backtrace for cpu 0 [ 148.972853][ C0] CPU: 0 PID: 820 Comm: syz.2.114 Not tainted syzkaller #0 [ 148.972867][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.972879][ C0] RIP: 0010:kvm_wait+0xf2/0x140 [ 148.972899][ C0] Code: 92 d6 03 f4 eb 9a fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d 20 92 d6 03 fb f4 71 ff ff ff fb e9 6b ff ff ff e8 9e b9 72 03 89 f9 80 e1 07 38 [ 148.972911][ C0] RSP: 0018:ffffc9000232f6c0 EFLAGS: 00000246 [ 148.972924][ C0] RAX: 0000000000000003 RBX: ffff8881194e1988 RCX: ffffffff814f4289 [ 148.972935][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff8881194e1988 [ 148.972943][ C0] RBP: ffffc9000232f750 R08: dffffc0000000000 R09: ffffed102329c332 [ 148.972953][ C0] R10: ffffed102329c332 R11: 1ffff1102329c331 R12: 1ffff1103ee00001 [ 148.972962][ C0] R13: ffff8881f7038ad4 R14: dffffc0000000000 R15: 1ffff92000465ed8 [ 148.972973][ C0] FS: 00007f5c1361f6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 148.972987][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.972997][ C0] CR2: 00007f5c1361ef98 CR3: 00000001220e2000 CR4: 00000000003506b0 [ 148.973010][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 148.973019][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 148.973028][ C0] Call Trace: [ 148.973033][ C0] [ 148.973038][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 148.973053][ C0] ? __pv_queued_spin_lock_slowpath+0x5b9/0x9c0 [ 148.973071][ C0] __pv_queued_spin_lock_slowpath+0x60f/0x9c0 [ 148.973088][ C0] ? __pv_queued_spin_unlock_slowpath+0x300/0x300 [ 148.973103][ C0] ? avc_has_perm+0x158/0x240 [ 148.973118][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 148.973132][ C0] _raw_spin_lock_bh+0xd8/0xe0 [ 148.973148][ C0] ? _raw_spin_lock_irq+0xe0/0xe0 [ 148.973164][ C0] lock_sock_nested+0x97/0x290 [ 148.973180][ C0] ? sock_init_data+0xc0/0xc0 [ 148.973200][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 148.973215][ C0] ? _raw_spin_unlock_bh+0x51/0x60 [ 148.973230][ C0] tipc_sendstream+0x47/0x70 [ 148.973244][ C0] ? tipc_getsockopt+0x4c0/0x4c0 [ 148.973257][ C0] ____sys_sendmsg+0x5a2/0x8c0 [ 148.973275][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 148.973291][ C0] ? import_iovec+0x7c/0xb0 [ 148.973306][ C0] ___sys_sendmsg+0x1f0/0x260 [ 148.973323][ C0] ? __sys_sendmsg+0x250/0x250 [ 148.973339][ C0] ? __kasan_check_write+0x14/0x20 [ 148.973354][ C0] ? put_vma+0x44/0x60 [ 148.973368][ C0] ? __fdget+0x1a1/0x230 [ 148.973384][ C0] __x64_sys_sendmsg+0x1e2/0x2a0 [ 148.973399][ C0] ? ___sys_sendmsg+0x260/0x260 [ 148.973416][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 148.973433][ C0] x64_sys_call+0x4b/0x9a0 [ 148.973447][ C0] do_syscall_64+0x4c/0xa0 [ 148.973463][ C0] ? clear_bhb_loop+0x50/0xa0 [ 148.973474][ C0] ? clear_bhb_loop+0x50/0xa0 [ 148.973486][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.973502][ C0] RIP: 0033:0x7f5c137d0749 [ 148.973516][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.973527][ C0] RSP: 002b:00007f5c1361f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.973541][ C0] RAX: ffffffffffffffda RBX: 00007f5c13a27090 RCX: 00007f5c137d0749 [ 148.973551][ C0] RDX: 0000000000008010 RSI: 0000200000000240 RDI: 0000000000000004 [ 148.973560][ C0] RBP: 00007f5c13854f91 R08: 0000000000000000 R09: 0000000000000000 [ 148.973569][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.973577][ C0] R13: 00007f5c13a27128 R14: 00007f5c13a27090 R15: 00007ffde5355d48 [ 148.973589][ C0] [ 148.973873][ C1] NMI backtrace for cpu 1 [ 149.349883][ C1] CPU: 1 PID: 819 Comm: syz.2.114 Not tainted syzkaller #0 [ 149.357107][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.367238][ C1] Call Trace: [ 149.370523][ C1] [ 149.373596][ C1] __dump_stack+0x21/0x30 [ 149.378004][ C1] dump_stack_lvl+0xee/0x150 [ 149.382598][ C1] ? show_regs_print_info+0x20/0x20 [ 149.387781][ C1] ? resched_curr+0x9a/0x310 [ 149.392377][ C1] ? wake_up_process+0x20/0x20 [ 149.397466][ C1] dump_stack+0x15/0x20 [ 149.401611][ C1] nmi_cpu_backtrace+0x2b4/0x2c0 [ 149.406653][ C1] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 149.413157][ C1] ? __kasan_check_write+0x14/0x20 [ 149.418519][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 149.424002][ C1] ? _raw_spin_lock+0xe0/0xe0 [ 149.428755][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 149.434981][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 149.441167][ C1] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 149.447335][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 149.453233][ C1] rcu_dump_cpu_stacks+0x1c7/0x300 [ 149.458339][ C1] print_cpu_stall+0x320/0x600 [ 149.463190][ C1] rcu_sched_clock_irq+0x74a/0x12b0 [ 149.468377][ C1] ? rcu_boost_kthread_setaffinity+0x310/0x310 [ 149.474539][ C1] ? raise_softirq+0x71/0xe0 [ 149.479222][ C1] ? __raise_softirq_irqoff+0xd0/0xd0 [ 149.484939][ C1] ? hrtimer_run_queues+0x166/0x430 [ 149.490241][ C1] update_process_times+0x198/0x200 [ 149.495515][ C1] tick_sched_timer+0x17c/0x240 [ 149.500471][ C1] ? tick_setup_sched_timer+0x450/0x450 [ 149.505998][ C1] __hrtimer_run_queues+0x3b5/0x9e0 [ 149.511262][ C1] ? hrtimer_interrupt+0x8c0/0x8c0 [ 149.516410][ C1] ? ktime_get_update_offsets_now+0x2fa/0x310 [ 149.522799][ C1] hrtimer_interrupt+0x3c7/0x8c0 [ 149.527798][ C1] __sysvec_apic_timer_interrupt+0xfa/0x3e0 [ 149.533802][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 149.539433][ C1] [ 149.542443][ C1] [ 149.545355][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 149.551327][ C1] RIP: 0010:__kasan_check_write+0x15/0x20 [ 149.557114][ C1] Code: d2 e8 bf ed ff ff 5d c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 89 f6 48 8b 4d 08 ba 01 00 00 00 e8 9c ed ff ff 5d 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 53 48 89 [ 149.577038][ C1] RSP: 0018:ffffc900021268b8 EFLAGS: 00000256 [ 149.583090][ C1] RAX: 0000000000000401 RBX: ffffc90002126df4 RCX: ffffffff84a91e21 [ 149.591041][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90002126df4 [ 149.599288][ C1] RBP: ffffc90002126950 R08: dffffc0000000000 R09: fffff52000424dbf [ 149.607241][ C1] R10: fffff52000424dbf R11: 1ffff92000424dbe R12: dffffc0000000000 [ 149.615195][ C1] R13: dffffc0000000000 R14: ffffc900021268e0 R15: 1ffff92000424d18 [ 149.623152][ C1] ? _raw_spin_lock_bh+0x81/0xe0 [ 149.628077][ C1] ? _raw_spin_lock_bh+0x81/0xe0 [ 149.633155][ C1] ? _raw_spin_lock_irq+0xe0/0xe0 [ 149.638420][ C1] ? tipc_sk_rcv+0x19f6/0x2c60 [ 149.643178][ C1] tipc_sk_rcv+0x259/0x2c60 [ 149.647831][ C1] ? stack_trace_save+0x98/0xe0 [ 149.652657][ C1] ? __stack_depot_save+0x442/0x480 [ 149.657938][ C1] ? kasan_set_free_info+0x23/0x40 [ 149.663035][ C1] ? __kasan_slab_free+0x11/0x20 [ 149.667951][ C1] ? tipc_node_xmit+0x256/0xce0 [ 149.672822][ C1] ? sock_setsockopt+0x1b65/0x2270 [ 149.678013][ C1] ? __sys_setsockopt+0x268/0x460 [ 149.683031][ C1] ? __x64_sys_setsockopt+0xbf/0xd0 [ 149.688309][ C1] ? __skb_queue_purge+0x170/0x170 [ 149.693407][ C1] tipc_node_xmit+0x256/0xce0 [ 149.698090][ C1] ? kasan_quarantine_put+0x34/0x190 [ 149.703364][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 149.708891][ C1] ? ____kasan_slab_free+0x130/0x160 [ 149.714154][ C1] ? __kasan_slab_free+0x11/0x20 [ 149.719190][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 149.724819][ C1] ? kfree_skbmem+0x10c/0x180 [ 149.729485][ C1] tipc_node_distr_xmit+0x292/0x390 [ 149.734774][ C1] ? tipc_node_xmit_skb+0x130/0x130 [ 149.739956][ C1] tipc_sk_rcv+0x19de/0x2c60 [ 149.744663][ C1] ? __skb_queue_purge+0x170/0x170 [ 149.749784][ C1] tipc_node_xmit+0x256/0xce0 [ 149.754460][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 149.760162][ C1] ? __kernel_text_address+0xa0/0x100 [ 149.765515][ C1] ? unwind_get_return_address+0x4d/0x90 [ 149.771216][ C1] ? __kasan_check_write+0x14/0x20 [ 149.776335][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 149.781905][ C1] tipc_sk_filter_rcv+0x151b/0x2c40 [ 149.787097][ C1] ? tipc_sk_publish+0x440/0x440 [ 149.792022][ C1] ? __kasan_check_write+0x14/0x20 [ 149.797115][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 149.802054][ C1] tipc_sk_rcv+0x7b7/0x2c60 [ 149.806804][ C1] ? kfree_skbmem+0x10c/0x180 [ 149.811532][ C1] ? skb_release_data+0x814/0xa10 [ 149.816808][ C1] ? __skb_queue_purge+0x170/0x170 [ 149.822199][ C1] ? tipc_sk_filter_rcv+0x29de/0x2c40 [ 149.828067][ C1] tipc_node_xmit+0x256/0xce0 [ 149.832761][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 149.838292][ C1] tipc_node_distr_xmit+0x292/0x390 [ 149.844417][ C1] ? tipc_node_xmit_skb+0x130/0x130 [ 149.850020][ C1] ? do_futex+0xcb2/0x2620 [ 149.854549][ C1] ? selinux_capable+0x29c/0x380 [ 149.859560][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 149.864765][ C1] ? tipc_sk_timeout+0x970/0x970 [ 149.869683][ C1] ? irqentry_exit_cond_resched+0x29/0x30 [ 149.875499][ C1] __release_sock+0x143/0x350 [ 149.880181][ C1] sock_setsockopt+0x1b65/0x2270 [ 149.885197][ C1] ? security_file_alloc+0x33/0x120 [ 149.890485][ C1] ? __sock_set_mark+0x160/0x160 [ 149.895409][ C1] ? selinux_socket_setsockopt+0x21c/0x300 [ 149.901302][ C1] ? selinux_socket_getsockopt+0x2e0/0x2e0 [ 149.907086][ C1] ? memcpy+0x56/0x70 [ 149.911230][ C1] ? __fget_files+0x2c4/0x320 [ 149.915884][ C1] ? security_socket_setsockopt+0x82/0xa0 [ 149.921578][ C1] __sys_setsockopt+0x268/0x460 [ 149.926408][ C1] ? __ia32_sys_recv+0xb0/0xb0 [ 149.931242][ C1] ? fd_install+0x169/0x2a0 [ 149.935721][ C1] ? __kasan_check_write+0x14/0x20 [ 149.941005][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 149.946006][ C1] x64_sys_call+0x982/0x9a0 [ 149.950586][ C1] do_syscall_64+0x4c/0xa0 [ 149.955152][ C1] ? clear_bhb_loop+0x50/0xa0 [ 149.959800][ C1] ? clear_bhb_loop+0x50/0xa0 [ 149.964454][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.970414][ C1] RIP: 0033:0x7f5c137d0749 [ 149.974950][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.995017][ C1] RSP: 002b:00007f5c13640038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 150.003459][ C1] RAX: ffffffffffffffda RBX: 00007f5c13a26fa0 RCX: 00007f5c137d0749 [ 150.011507][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 150.019752][ C1] RBP: 00007f5c13854f91 R08: 0000000000000004 R09: 0000000000000000 [ 150.027990][ C1] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 150.036550][ C1] R13: 00007f5c13a27038 R14: 00007f5c13a26fa0 R15: 00007ffde5355d48 [ 150.044743][ C1] [ 287.129266][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 225s! [syz.2.114:819] [ 287.137658][ C1] Modules linked in: [ 287.141560][ C1] CPU: 1 PID: 819 Comm: syz.2.114 Not tainted syzkaller #0 [ 287.149018][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.159257][ C1] RIP: 0010:tipc_node_distr_xmit+0x6/0x390 [ 287.165230][ C1] Code: 48 3b 84 24 80 00 00 00 75 11 31 c0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f4 cd 16 00 0f 1f 40 00 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 48 83 e4 e0 48 81 ec e0 00 00 00 49 89 f6 48 [ 287.185275][ C1] RSP: 0018:ffffc90002126948 EFLAGS: 00000246 [ 287.191334][ C1] RAX: 1ffff1102329c326 RBX: 0000000000000000 RCX: ffff88810dc8e2c0 [ 287.199297][ C1] RDX: 0000000000000000 RSI: ffffc90002126b20 RDI: ffff888114e97000 [ 287.207355][ C1] RBP: ffffc90002126950 R08: dffffc0000000000 R09: ffffed102329c332 [ 287.215580][ C1] R10: ffffed102329c332 R11: 1ffff1102329c331 R12: ffff888114e97000 [ 287.223544][ C1] R13: dffffc0000000000 R14: ffffc90002126de0 R15: ffff8881194e1900 [ 287.231606][ C1] FS: 00007f5c136406c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 287.240789][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.247528][ C1] CR2: 00007f5c1361fd58 CR3: 00000001220e2000 CR4: 00000000003506a0 [ 287.255970][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.263939][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.271985][ C1] Call Trace: [ 287.275260][ C1] [ 287.278217][ C1] tipc_sk_rcv+0x19de/0x2c60 [ 287.282800][ C1] ? stack_trace_save+0x98/0xe0 [ 287.287748][ C1] ? __stack_depot_save+0x442/0x480 [ 287.293033][ C1] ? kasan_set_free_info+0x23/0x40 [ 287.298129][ C1] ? __kasan_slab_free+0x11/0x20 [ 287.303078][ C1] ? tipc_node_xmit+0x256/0xce0 [ 287.307915][ C1] ? sock_setsockopt+0x1b65/0x2270 [ 287.313047][ C1] ? __sys_setsockopt+0x268/0x460 [ 287.318102][ C1] ? __x64_sys_setsockopt+0xbf/0xd0 [ 287.323429][ C1] ? __skb_queue_purge+0x170/0x170 [ 287.328546][ C1] tipc_node_xmit+0x256/0xce0 [ 287.333230][ C1] ? kasan_quarantine_put+0x34/0x190 [ 287.338609][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 287.344144][ C1] ? ____kasan_slab_free+0x130/0x160 [ 287.349526][ C1] ? __kasan_slab_free+0x11/0x20 [ 287.354820][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 287.360529][ C1] ? kfree_skbmem+0x10c/0x180 [ 287.365206][ C1] tipc_node_distr_xmit+0x292/0x390 [ 287.370389][ C1] ? tipc_node_xmit_skb+0x130/0x130 [ 287.375832][ C1] tipc_sk_rcv+0x19de/0x2c60 [ 287.380704][ C1] ? __skb_queue_purge+0x170/0x170 [ 287.385814][ C1] tipc_node_xmit+0x256/0xce0 [ 287.390506][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 287.396027][ C1] ? __kernel_text_address+0xa0/0x100 [ 287.401391][ C1] ? unwind_get_return_address+0x4d/0x90 [ 287.407108][ C1] ? __kasan_check_write+0x14/0x20 [ 287.412341][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 287.418068][ C1] tipc_sk_filter_rcv+0x151b/0x2c40 [ 287.423479][ C1] ? tipc_sk_publish+0x440/0x440 [ 287.428437][ C1] ? __kasan_check_write+0x14/0x20 [ 287.433819][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 287.438918][ C1] tipc_sk_rcv+0x7b7/0x2c60 [ 287.443514][ C1] ? kfree_skbmem+0x10c/0x180 [ 287.448504][ C1] ? skb_release_data+0x814/0xa10 [ 287.453633][ C1] ? __skb_queue_purge+0x170/0x170 [ 287.458752][ C1] ? tipc_sk_filter_rcv+0x29de/0x2c40 [ 287.464297][ C1] tipc_node_xmit+0x256/0xce0 [ 287.468963][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 287.474527][ C1] tipc_node_distr_xmit+0x292/0x390 [ 287.479796][ C1] ? tipc_node_xmit_skb+0x130/0x130 [ 287.484990][ C1] ? do_futex+0xcb2/0x2620 [ 287.489476][ C1] ? selinux_capable+0x29c/0x380 [ 287.495115][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 287.500241][ C1] ? tipc_sk_timeout+0x970/0x970 [ 287.505457][ C1] ? irqentry_exit_cond_resched+0x29/0x30 [ 287.511173][ C1] __release_sock+0x143/0x350 [ 287.515840][ C1] sock_setsockopt+0x1b65/0x2270 [ 287.520764][ C1] ? security_file_alloc+0x33/0x120 [ 287.525954][ C1] ? __sock_set_mark+0x160/0x160 [ 287.531219][ C1] ? selinux_socket_setsockopt+0x21c/0x300 [ 287.537076][ C1] ? selinux_socket_getsockopt+0x2e0/0x2e0 [ 287.542950][ C1] ? memcpy+0x56/0x70 [ 287.547058][ C1] ? __fget_files+0x2c4/0x320 [ 287.551715][ C1] ? security_socket_setsockopt+0x82/0xa0 [ 287.557527][ C1] __sys_setsockopt+0x268/0x460 [ 287.562480][ C1] ? __ia32_sys_recv+0xb0/0xb0 [ 287.567343][ C1] ? fd_install+0x169/0x2a0 [ 287.571916][ C1] ? __kasan_check_write+0x14/0x20 [ 287.577009][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 287.582026][ C1] x64_sys_call+0x982/0x9a0 [ 287.586511][ C1] do_syscall_64+0x4c/0xa0 [ 287.591190][ C1] ? clear_bhb_loop+0x50/0xa0 [ 287.595958][ C1] ? clear_bhb_loop+0x50/0xa0 [ 287.600968][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.607165][ C1] RIP: 0033:0x7f5c137d0749 [ 287.611746][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.631944][ C1] RSP: 002b:00007f5c13640038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 287.640427][ C1] RAX: ffffffffffffffda RBX: 00007f5c13a26fa0 RCX: 00007f5c137d0749 [ 287.648659][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 287.656897][ C1] RBP: 00007f5c13854f91 R08: 0000000000000004 R09: 0000000000000000 [ 287.665336][ C1] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 287.673420][ C1] R13: 00007f5c13a27038 R14: 00007f5c13a26fa0 R15: 00007ffde5355d48 [ 287.681376][ C1] [ 287.684503][ C1] Sending NMI from CPU 1 to CPUs 0: [ 287.689796][ C0] NMI backtrace for cpu 0 [ 287.689806][ C0] CPU: 0 PID: 820 Comm: syz.2.114 Not tainted syzkaller #0 [ 287.689820][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.689828][ C0] RIP: 0010:kvm_wait+0xf2/0x140 [ 287.689849][ C0] Code: 92 d6 03 f4 eb 9a fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d 20 92 d6 03 fb f4 71 ff ff ff fb e9 6b ff ff ff e8 9e b9 72 03 89 f9 80 e1 07 38 [ 287.689861][ C0] RSP: 0018:ffffc9000232f6c0 EFLAGS: 00000246 [ 287.689875][ C0] RAX: 0000000000000003 RBX: ffff8881194e1988 RCX: ffffffff814f4289 [ 287.689885][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff8881194e1988 [ 287.689894][ C0] RBP: ffffc9000232f750 R08: dffffc0000000000 R09: ffffed102329c332 [ 287.689905][ C0] R10: ffffed102329c332 R11: 1ffff1102329c331 R12: 1ffff1103ee00001 [ 287.689916][ C0] R13: ffff8881f7038ad4 R14: dffffc0000000000 R15: 1ffff92000465ed8 [ 287.689926][ C0] FS: 00007f5c1361f6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 287.689939][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.689949][ C0] CR2: 00007f5c1361ef98 CR3: 00000001220e2000 CR4: 00000000003506b0 [ 287.689962][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.689970][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.689979][ C0] Call Trace: [ 287.689984][ C0] [ 287.689990][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 287.690005][ C0] ? __pv_queued_spin_lock_slowpath+0x5b9/0x9c0 [ 287.690022][ C0] __pv_queued_spin_lock_slowpath+0x60f/0x9c0 [ 287.690039][ C0] ? __pv_queued_spin_unlock_slowpath+0x300/0x300 [ 287.690054][ C0] ? avc_has_perm+0x158/0x240 [ 287.690070][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 287.690084][ C0] _raw_spin_lock_bh+0xd8/0xe0 [ 287.690100][ C0] ? _raw_spin_lock_irq+0xe0/0xe0 [ 287.690115][ C0] lock_sock_nested+0x97/0x290 [ 287.690131][ C0] ? sock_init_data+0xc0/0xc0 [ 287.690144][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 287.690160][ C0] ? _raw_spin_unlock_bh+0x51/0x60 [ 287.690175][ C0] tipc_sendstream+0x47/0x70 [ 287.690188][ C0] ? tipc_getsockopt+0x4c0/0x4c0 [ 287.690201][ C0] ____sys_sendmsg+0x5a2/0x8c0 [ 287.690219][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 287.690235][ C0] ? import_iovec+0x7c/0xb0 [ 287.690251][ C0] ___sys_sendmsg+0x1f0/0x260 [ 287.690267][ C0] ? __sys_sendmsg+0x250/0x250 [ 287.690283][ C0] ? __kasan_check_write+0x14/0x20 [ 287.690305][ C0] ? put_vma+0x44/0x60 [ 287.690319][ C0] ? __fdget+0x1a1/0x230 [ 287.690335][ C0] __x64_sys_sendmsg+0x1e2/0x2a0 [ 287.690351][ C0] ? ___sys_sendmsg+0x260/0x260 [ 287.690367][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 287.690385][ C0] x64_sys_call+0x4b/0x9a0 [ 287.690398][ C0] do_syscall_64+0x4c/0xa0 [ 287.690414][ C0] ? clear_bhb_loop+0x50/0xa0 [ 287.690426][ C0] ? clear_bhb_loop+0x50/0xa0 [ 287.690437][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.690453][ C0] RIP: 0033:0x7f5c137d0749 [ 287.690466][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.690477][ C0] RSP: 002b:00007f5c1361f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.690491][ C0] RAX: ffffffffffffffda RBX: 00007f5c13a27090 RCX: 00007f5c137d0749 [ 287.690501][ C0] RDX: 0000000000008010 RSI: 0000200000000240 RDI: 0000000000000004 [ 287.690510][ C0] RBP: 00007f5c13854f91 R08: 0000000000000000 R09: 0000000000000000 [ 287.690519][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.690527][ C0] R13: 00007f5c13a27128 R14: 00007f5c13a27090 R15: 00007ffde5355d48 [ 287.690539][ C0]