Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts. 2025/05/21 20:05:04 ignoring optional flag "sandboxArg"="0" 2025/05/21 20:05:04 ignoring optional flag "type"="gce" 2025/05/21 20:05:04 parsed 1 programs [ 46.327290][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 46.327305][ T28] audit: type=1400 audit(1747857904.717:92): avc: denied { unlink } for pid=322 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2025/05/21 20:05:04 executed programs: 0 [ 46.419460][ T322] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.481395][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.488865][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.496388][ T328] device bridge_slave_0 entered promiscuous mode [ 46.503594][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.510804][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.518448][ T328] device bridge_slave_1 entered promiscuous mode [ 46.570745][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.579419][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.586953][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.595361][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.618340][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.626207][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.634405][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.643270][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.652704][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.661612][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.668912][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.679138][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.687902][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.695520][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.709314][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.720116][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.735719][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.748059][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.756474][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.764190][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.773024][ T328] device veth0_vlan entered promiscuous mode [ 46.783985][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.793332][ T328] device veth1_macvtap entered promiscuous mode [ 46.803436][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.814105][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.836252][ T28] audit: type=1400 audit(1747857905.217:93): avc: denied { create } for pid=332 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.872108][ T28] audit: type=1400 audit(1747857905.217:94): avc: denied { setopt } for pid=332 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.892995][ T28] audit: type=1400 audit(1747857905.217:95): avc: denied { write } for pid=332 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 2025/05/21 20:05:09 executed programs: 586 2025/05/21 20:05:14 executed programs: 1233 2025/05/21 20:05:19 executed programs: 1884 2025/05/21 20:05:24 executed programs: 2531 2025/05/21 20:05:29 executed programs: 3191 2025/05/21 20:05:34 executed programs: 3835 2025/05/21 20:05:39 executed programs: 4524 [ 184.146667][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 184.153497][ C1] rcu: 1-...!: (10001 ticks this GP) idle=d8d4/1/0x4000000000000000 softirq=28430/28430 fqs=0 [ 184.163822][ C1] (t=10002 jiffies g=18341 q=171 ncpus=2) [ 184.169725][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10002 jiffies! g18341 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 184.182332][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=2588 [ 184.190566][ C1] rcu: rcu_preempt kthread starved for 10005 jiffies! g18341 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 184.202276][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 184.212501][ C1] rcu: RCU grace-period kthread stack dump: [ 184.218410][ C1] task:rcu_preempt state:I stack:28528 pid:14 ppid:2 flags:0x00004000 [ 184.228003][ C1] Call Trace: [ 184.231457][ C1] [ 184.234670][ C1] __schedule+0xb87/0x14e0 [ 184.239458][ C1] ? release_firmware_map_entry+0x194/0x194 [ 184.245445][ C1] ? __mod_timer+0x7ae/0xb30 [ 184.250058][ C1] schedule+0xbd/0x170 [ 184.254135][ C1] schedule_timeout+0x12c/0x2e0 [ 184.258996][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 184.264463][ C1] ? __cfi_process_timeout+0x10/0x10 [ 184.269935][ C1] ? prepare_to_swait_event+0x308/0x320 [ 184.275687][ C1] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 184.280629][ C1] ? rcu_gp_init+0xf10/0xf10 [ 184.285219][ C1] rcu_gp_kthread+0x95/0x370 [ 184.289820][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 184.295030][ C1] ? __kasan_check_read+0x11/0x20 [ 184.300139][ C1] ? __kthread_parkme+0x142/0x180 [ 184.305168][ C1] kthread+0x281/0x320 [ 184.309330][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 184.314548][ C1] ? __cfi_kthread+0x10/0x10 [ 184.319155][ C1] ret_from_fork+0x1f/0x30 [ 184.323655][ C1] [ 184.326676][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 184.333004][ C1] CPU: 1 PID: 15178 Comm: syz-executor.0 Not tainted 6.1.134-syzkaller-1169287-g3c6d0251e1fb #0 [ 184.343851][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.354396][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60 [ 184.360638][ C1] Code: 10 85 92 7e 65 8b 15 11 85 92 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 6c 0b 00 00 00 74 2c 8b 91 48 0b 00 00 <83> fa 02 75 21 48 8b 91 50 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 4c [ 184.380802][ C1] RSP: 0018:ffffc9000216e970 EFLAGS: 00000246 [ 184.386866][ C1] RAX: ffffffff84c8c83f RBX: 0000000000000000 RCX: ffff88811e355100 [ 184.395181][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.403316][ C1] RBP: ffffc9000216e970 R08: dffffc0000000000 R09: ffffed1024947ef4 [ 184.411546][ C1] R10: ffffed1024947ef4 R11: 1ffff11024947ef3 R12: ffff888124a3f700 [ 184.419536][ C1] R13: dffffc0000000000 R14: ffffc9000216edc0 R15: 00000000b04adf88 [ 184.427630][ C1] FS: 00007f99b0a266c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 184.436569][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.443235][ C1] CR2: 00007f99b0a05d58 CR3: 0000000120a9e000 CR4: 00000000003506a0 [ 184.451467][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 184.459436][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 184.467496][ C1] Call Trace: [ 184.470943][ C1] [ 184.473875][ C1] tipc_sk_rcv+0x1d3f/0x2cc0 [ 184.478464][ C1] ? __stack_depot_save+0x445/0x480 [ 184.483844][ C1] ? kasan_set_track+0x60/0x70 [ 184.488777][ C1] ? kasan_set_track+0x4b/0x70 [ 184.493547][ C1] ? kasan_save_free_info+0x31/0x50 [ 184.498741][ C1] ? ____kasan_slab_free+0x132/0x180 [ 184.504143][ C1] ? __kasan_slab_free+0x11/0x20 [ 184.509073][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 184.515154][ C1] ? kmem_cache_free+0x12d/0x300 [ 184.520098][ C1] ? kfree_skbmem+0x10c/0x180 [ 184.524777][ C1] ? kfree_skb_reason+0xdc/0x230 [ 184.529741][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 184.534761][ C1] ? tipc_node_xmit+0x257/0xd00 [ 184.539705][ C1] ? tipc_release+0xd32/0x1650 [ 184.544547][ C1] ? syscall_exit_to_user_mode+0x1a/0x30 [ 184.550167][ C1] ? do_syscall_64+0x58/0xa0 [ 184.554757][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.560855][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 184.565808][ C1] tipc_node_xmit+0x257/0xd00 [ 184.570568][ C1] ? ____kasan_slab_free+0x13d/0x180 [ 184.575982][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 184.581384][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 184.586938][ C1] ? kfree_skbmem+0x10c/0x180 [ 184.591611][ C1] ? kmem_cache_free+0x12d/0x300 [ 184.596541][ C1] tipc_node_xmit_skb+0xe9/0x130 [ 184.601465][ C1] ? kfree_skb_reason+0xdc/0x230 [ 184.606394][ C1] ? __cfi_tipc_node_xmit_skb+0x10/0x10 [ 184.611964][ C1] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 184.617338][ C1] tipc_sk_rcv+0x1def/0x2cc0 [ 184.621953][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 184.626975][ C1] tipc_node_xmit+0x257/0xd00 [ 184.631820][ C1] ? is_bpf_text_address+0x177/0x190 [ 184.637189][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 184.642385][ C1] ? kernel_text_address+0xa0/0xd0 [ 184.647501][ C1] ? __kernel_text_address+0xd/0x30 [ 184.652711][ C1] ? unwind_get_return_address+0x4d/0x90 [ 184.658519][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 184.664785][ C1] ? arch_stack_walk+0xfc/0x150 [ 184.669655][ C1] tipc_sk_filter_rcv+0x155f/0x2c80 [ 184.674870][ C1] ? tipc_sk_publish+0x440/0x440 [ 184.679917][ C1] ? __kasan_check_write+0x14/0x20 [ 184.685031][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 184.690229][ C1] tipc_sk_rcv+0x7d9/0x2cc0 [ 184.694924][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 184.700300][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 184.705333][ C1] ? tipc_sk_filter_rcv+0x2a1c/0x2c80 [ 184.711171][ C1] tipc_node_xmit+0x257/0xd00 [ 184.715953][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 184.721343][ C1] ? kasan_quarantine_put+0x34/0x190 [ 184.726738][ C1] tipc_node_distr_xmit+0x292/0x390 [ 184.731933][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 184.737730][ C1] ? kfree_skbmem+0x10c/0x180 [ 184.742431][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 184.747914][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 184.753632][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 184.759264][ C1] __release_sock+0x154/0x380 [ 184.764044][ C1] release_sock+0x60/0x1c0 [ 184.768664][ C1] tipc_release+0xd32/0x1650 [ 184.773268][ C1] ? __cfi_tipc_release+0x10/0x10 [ 184.778465][ C1] sock_close+0xf1/0x290 [ 184.782733][ C1] ? __cfi_sock_close+0x10/0x10 [ 184.787863][ C1] __fput+0x1fc/0x8f0 [ 184.791850][ C1] ____fput+0x15/0x20 [ 184.795907][ C1] task_work_run+0x1db/0x240 [ 184.800521][ C1] ? __cfi_task_work_run+0x10/0x10 [ 184.805902][ C1] ? filp_close+0x111/0x160 [ 184.810675][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 184.816049][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 184.821700][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 184.827354][ C1] do_syscall_64+0x58/0xa0 [ 184.831795][ C1] ? clear_bhb_loop+0x15/0x70 [ 184.836485][ C1] ? clear_bhb_loop+0x15/0x70 [ 184.841439][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.847606][ C1] RIP: 0033:0x7f99afc7dda9 [ 184.852040][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 184.872690][ C1] RSP: 002b:00007f99b0a260c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 184.881276][ C1] RAX: 0000000000000000 RBX: 00007f99afdabf80 RCX: 00007f99afc7dda9 [ 184.889442][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 184.897687][ C1] RBP: 00007f99afcca47a R08: 0000000000000000 R09: 0000000000000000 [ 184.906013][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.913993][ C1] R13: 000000000000000b R14: 00007f99afdabf80 R15: 00007ffd68256278 [ 184.922144][ C1] [ 184.925468][ C1] CPU: 1 PID: 15178 Comm: syz-executor.0 Not tainted 6.1.134-syzkaller-1169287-g3c6d0251e1fb #0 [ 184.936105][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.946162][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60 [ 184.952504][ C1] Code: 10 85 92 7e 65 8b 15 11 85 92 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 6c 0b 00 00 00 74 2c 8b 91 48 0b 00 00 <83> fa 02 75 21 48 8b 91 50 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 4c [ 184.972720][ C1] RSP: 0018:ffffc9000216e970 EFLAGS: 00000246 [ 184.978883][ C1] RAX: ffffffff84c8c83f RBX: 0000000000000000 RCX: ffff88811e355100 [ 184.986859][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.995083][ C1] RBP: ffffc9000216e970 R08: dffffc0000000000 R09: ffffed1024947ef4 [ 185.003386][ C1] R10: ffffed1024947ef4 R11: 1ffff11024947ef3 R12: ffff888124a3f700 [ 185.011875][ C1] R13: dffffc0000000000 R14: ffffc9000216edc0 R15: 00000000b04adf88 [ 185.020288][ C1] FS: 00007f99b0a266c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 185.030086][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.036771][ C1] CR2: 00007f99b0a05d58 CR3: 0000000120a9e000 CR4: 00000000003506a0 [ 185.045105][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 185.053169][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 185.061230][ C1] Call Trace: [ 185.064514][ C1] [ 185.067590][ C1] tipc_sk_rcv+0x1d3f/0x2cc0 [ 185.072360][ C1] ? __stack_depot_save+0x445/0x480 [ 185.077733][ C1] ? kasan_set_track+0x60/0x70 [ 185.082836][ C1] ? kasan_set_track+0x4b/0x70 [ 185.087618][ C1] ? kasan_save_free_info+0x31/0x50 [ 185.092812][ C1] ? ____kasan_slab_free+0x132/0x180 [ 185.098349][ C1] ? __kasan_slab_free+0x11/0x20 [ 185.103628][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 185.109171][ C1] ? kmem_cache_free+0x12d/0x300 [ 185.114186][ C1] ? kfree_skbmem+0x10c/0x180 [ 185.118978][ C1] ? kfree_skb_reason+0xdc/0x230 [ 185.124004][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 185.129019][ C1] ? tipc_node_xmit+0x257/0xd00 [ 185.133895][ C1] ? tipc_release+0xd32/0x1650 [ 185.138658][ C1] ? syscall_exit_to_user_mode+0x1a/0x30 [ 185.144301][ C1] ? do_syscall_64+0x58/0xa0 [ 185.148986][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.155060][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 185.160093][ C1] tipc_node_xmit+0x257/0xd00 [ 185.164856][ C1] ? ____kasan_slab_free+0x13d/0x180 [ 185.170332][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 185.175542][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 185.181436][ C1] ? kfree_skbmem+0x10c/0x180 [ 185.186130][ C1] ? kmem_cache_free+0x12d/0x300 [ 185.191253][ C1] tipc_node_xmit_skb+0xe9/0x130 [ 185.196278][ C1] ? kfree_skb_reason+0xdc/0x230 [ 185.201403][ C1] ? __cfi_tipc_node_xmit_skb+0x10/0x10 [ 185.207130][ C1] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 185.212868][ C1] tipc_sk_rcv+0x1def/0x2cc0 [ 185.217552][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 185.222585][ C1] tipc_node_xmit+0x257/0xd00 [ 185.227368][ C1] ? is_bpf_text_address+0x177/0x190 [ 185.232653][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 185.237865][ C1] ? kernel_text_address+0xa0/0xd0 [ 185.243151][ C1] ? __kernel_text_address+0xd/0x30 [ 185.248572][ C1] ? unwind_get_return_address+0x4d/0x90 [ 185.254208][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 185.260355][ C1] ? arch_stack_walk+0xfc/0x150 [ 185.265208][ C1] tipc_sk_filter_rcv+0x155f/0x2c80 [ 185.270419][ C1] ? tipc_sk_publish+0x440/0x440 [ 185.275354][ C1] ? __kasan_check_write+0x14/0x20 [ 185.280641][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 185.285577][ C1] tipc_sk_rcv+0x7d9/0x2cc0 [ 185.290104][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 185.295217][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 185.300236][ C1] ? tipc_sk_filter_rcv+0x2a1c/0x2c80 [ 185.305787][ C1] tipc_node_xmit+0x257/0xd00 [ 185.310889][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 185.316446][ C1] ? kasan_quarantine_put+0x34/0x190 [ 185.321847][ C1] tipc_node_distr_xmit+0x292/0x390 [ 185.327241][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 185.333162][ C1] ? kfree_skbmem+0x10c/0x180 [ 185.337852][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 185.342972][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 185.348686][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 185.354236][ C1] __release_sock+0x154/0x380 [ 185.359051][ C1] release_sock+0x60/0x1c0 [ 185.363649][ C1] tipc_release+0xd32/0x1650 [ 185.368412][ C1] ? __cfi_tipc_release+0x10/0x10 [ 185.373437][ C1] sock_close+0xf1/0x290 [ 185.377690][ C1] ? __cfi_sock_close+0x10/0x10 [ 185.382588][ C1] __fput+0x1fc/0x8f0 [ 185.386590][ C1] ____fput+0x15/0x20 [ 185.390582][ C1] task_work_run+0x1db/0x240 [ 185.395270][ C1] ? __cfi_task_work_run+0x10/0x10 [ 185.400572][ C1] ? filp_close+0x111/0x160 [ 185.405073][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 185.410443][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 185.416082][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 185.421724][ C1] do_syscall_64+0x58/0xa0 [ 185.426143][ C1] ? clear_bhb_loop+0x15/0x70 [ 185.430819][ C1] ? clear_bhb_loop+0x15/0x70 [ 185.435546][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.441624][ C1] RIP: 0033:0x7f99afc7dda9 [ 185.446064][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 185.466476][ C1] RSP: 002b:00007f99b0a260c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 185.475013][ C1] RAX: 0000000000000000 RBX: 00007f99afdabf80 RCX: 00007f99afc7dda9 [ 185.483159][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 185.491497][ C1] RBP: 00007f99afcca47a R08: 0000000000000000 R09: 0000000000000000 [ 185.499567][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.507810][ C1] R13: 000000000000000b R14: 00007f99afdabf80 R15: 00007ffd68256278 [ 185.515803][ C1] [ 221.169224][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 143s! [syz-executor.0:15177] [ 221.178043][ C0] Modules linked in: [ 221.181944][ C0] CPU: 0 PID: 15177 Comm: syz-executor.0 Not tainted 6.1.134-syzkaller-1169287-g3c6d0251e1fb #0 [ 221.192447][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.202690][ C0] RIP: 0010:kvm_wait+0xf2/0x140 [ 221.207822][ C0] Code: b7 13 04 f4 eb 9a fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d f0 b6 13 04 fb f4 71 ff ff ff fb e9 6b ff ff ff e8 4e 77 b4 03 89 f9 80 e1 07 38 [ 221.227524][ C0] RSP: 0018:ffffc900020678a0 EFLAGS: 00000246 [ 221.233612][ C0] RAX: 0000000000000003 RBX: ffff888124a3f798 RCX: ffffffff84efc682 [ 221.241676][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888124a3f798 [ 221.249831][ C0] RBP: ffffc90002067930 R08: dffffc0000000000 R09: ffffed1024947ef4 [ 221.257820][ C0] R10: ffffed1024947ef4 R11: 1ffff11024947ef3 R12: 1ffff1103ee00001 [ 221.266058][ C0] R13: ffff8881f7038bd4 R14: dffffc0000000000 R15: 1ffff9200040cf14 [ 221.274208][ C0] FS: 000055559507b480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 221.283146][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 221.289736][ C0] CR2: 0000000020000000 CR3: 0000000120a9e000 CR4: 00000000003506b0 [ 221.297717][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 221.305963][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 221.313974][ C0] Call Trace: [ 221.317350][ C0] [ 221.320293][ C0] ? __cfi_kvm_wait+0x10/0x10 [ 221.325089][ C0] ? __pv_queued_spin_lock_slowpath+0x632/0xc40 [ 221.331448][ C0] __pv_queued_spin_lock_slowpath+0x690/0xc40 [ 221.337898][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 221.344812][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 221.350327][ C0] _raw_spin_lock_bh+0xd8/0xe0 [ 221.355244][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 221.360895][ C0] ? __stack_depot_save+0x36/0x480 [ 221.366110][ C0] ? tick_program_event+0xa3/0x120 [ 221.371236][ C0] lock_sock_nested+0x92/0x280 [ 221.376094][ C0] ? kasan_record_aux_stack+0xe/0x10 [ 221.381403][ C0] ? fput+0xe1/0x1a0 [ 221.385321][ C0] ? __cfi_lock_sock_nested+0x10/0x10 [ 221.390804][ C0] ? do_syscall_64+0x4c/0xa0 [ 221.395621][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.402406][ C0] ? __cfi_locks_remove_file+0x10/0x10 [ 221.408241][ C0] tipc_release+0xb2/0x1650 [ 221.412886][ C0] ? rwsem_write_trylock+0x130/0x300 [ 221.418396][ C0] ? __cfi_tipc_release+0x10/0x10 [ 221.423450][ C0] sock_close+0xf1/0x290 [ 221.427833][ C0] ? __cfi_sock_close+0x10/0x10 [ 221.432704][ C0] __fput+0x1fc/0x8f0 [ 221.436702][ C0] ____fput+0x15/0x20 [ 221.440892][ C0] task_work_run+0x1db/0x240 [ 221.445689][ C0] ? __cfi_task_work_run+0x10/0x10 [ 221.451261][ C0] ? filp_close+0x111/0x160 [ 221.455963][ C0] exit_to_user_mode_loop+0x9b/0xb0 [ 221.461638][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 221.467284][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 221.472762][ C0] do_syscall_64+0x58/0xa0 [ 221.477201][ C0] ? clear_bhb_loop+0x15/0x70 [ 221.481985][ C0] ? clear_bhb_loop+0x15/0x70 [ 221.486755][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.492851][ C0] RIP: 0033:0x7f99afc7cc9a [ 221.497494][ C0] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 221.517291][ C0] RSP: 002b:00007ffd68256340 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 221.526503][ C0] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f99afc7cc9a [ 221.534575][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 221.542635][ C0] RBP: 00007f99afdad980 R08: 0000001b30360000 R09: 0037c5f12b47ede0 [ 221.550699][ C0] R10: 0000002ca80726f7 R11: 0000000000000293 R12: 0000000000014bce [ 221.558770][ C0] R13: ffffffffffffffff R14: 00007f99af800000 R15: 000000000001488d [ 221.567026][ C0] [ 221.570084][ C0] Sending NMI from CPU 0 to CPUs 1: [ 221.575408][ C1] NMI backtrace for cpu 1 [ 221.575419][ C1] CPU: 1 PID: 15178 Comm: syz-executor.0 Not tainted 6.1.134-syzkaller-1169287-g3c6d0251e1fb #0 [ 221.575438][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.575448][ C1] RIP: 0010:tipc_sk_lookup+0x560/0x620 [ 221.575475][ C1] Code: 00 fc ff df eb 16 e8 9f 0b a7 fc eb 0c e8 98 0b a7 fc eb 05 e8 91 0b a7 fc 45 31 e4 e8 59 bb 93 fc 48 c7 44 24 60 0e 36 e0 45 <48> 8b 44 24 40 4a c7 04 30 00 00 00 00 65 48 8b 04 25 28 00 00 00 [ 221.575489][ C1] RSP: 0018:ffffc9000216e880 EFLAGS: 00000246 [ 221.575505][ C1] RAX: 0000000000000000 RBX: ffff888124a3f780 RCX: ffff88811e355100 [ 221.575517][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88811e355100 [ 221.575528][ C1] RBP: ffffc9000216e970 R08: dffffc0000000000 R09: ffffed1024947ef1 [ 221.575542][ C1] R10: ffffed1024947ef1 R11: 1ffff11024947ef0 R12: ffff888124a3f700 [ 221.575554][ C1] R13: 00000000000003f0 R14: dffffc0000000000 R15: ffff8881125390de [ 221.575567][ C1] FS: 00007f99b0a266c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 221.575582][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 221.575595][ C1] CR2: 00007f99b0a05d58 CR3: 0000000120a9e000 CR4: 00000000003506a0 [ 221.575610][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 221.575620][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 221.575630][ C1] Call Trace: [ 221.575636][ C1] [ 221.575644][ C1] ? tipc_sk_rcv+0x2cc0/0x2cc0 [ 221.575664][ C1] ? tipc_sk_rcv+0x1abb/0x2cc0 [ 221.575683][ C1] tipc_sk_rcv+0x419/0x2cc0 [ 221.575702][ C1] ? __stack_depot_save+0x445/0x480 [ 221.575728][ C1] ? kasan_set_track+0x60/0x70 [ 221.575744][ C1] ? kasan_set_track+0x4b/0x70 [ 221.575759][ C1] ? kasan_save_free_info+0x31/0x50 [ 221.575780][ C1] ? ____kasan_slab_free+0x132/0x180 [ 221.575797][ C1] ? __kasan_slab_free+0x11/0x20 [ 221.575813][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 221.575835][ C1] ? kmem_cache_free+0x12d/0x300 [ 221.575854][ C1] ? kfree_skbmem+0x10c/0x180 [ 221.575875][ C1] ? kfree_skb_reason+0xdc/0x230 [ 221.575895][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 221.575913][ C1] ? tipc_node_xmit+0x257/0xd00 [ 221.575929][ C1] ? tipc_release+0xd32/0x1650 [ 221.575951][ C1] ? syscall_exit_to_user_mode+0x1a/0x30 [ 221.575971][ C1] ? do_syscall_64+0x58/0xa0 [ 221.575992][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.576019][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 221.576042][ C1] tipc_node_xmit+0x257/0xd00 [ 221.576059][ C1] ? ____kasan_slab_free+0x13d/0x180 [ 221.576077][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 221.576093][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 221.576116][ C1] ? kfree_skbmem+0x10c/0x180 [ 221.576136][ C1] ? kmem_cache_free+0x12d/0x300 [ 221.576157][ C1] tipc_node_xmit_skb+0xe9/0x130 [ 221.576173][ C1] ? kfree_skb_reason+0xdc/0x230 [ 221.576194][ C1] ? __cfi_tipc_node_xmit_skb+0x10/0x10 [ 221.576212][ C1] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 221.576232][ C1] tipc_sk_rcv+0x1def/0x2cc0 [ 221.576258][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 221.576286][ C1] tipc_node_xmit+0x257/0xd00 [ 221.576303][ C1] ? is_bpf_text_address+0x177/0x190 [ 221.576324][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 221.576340][ C1] ? kernel_text_address+0xa0/0xd0 [ 221.576360][ C1] ? __kernel_text_address+0xd/0x30 [ 221.576380][ C1] ? unwind_get_return_address+0x4d/0x90 [ 221.576399][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 221.576420][ C1] ? arch_stack_walk+0xfc/0x150 [ 221.576447][ C1] tipc_sk_filter_rcv+0x155f/0x2c80 [ 221.576478][ C1] ? tipc_sk_publish+0x440/0x440 [ 221.576499][ C1] ? __kasan_check_write+0x14/0x20 [ 221.576522][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 221.576547][ C1] tipc_sk_rcv+0x7d9/0x2cc0 [ 221.576573][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 221.576591][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 221.576616][ C1] ? tipc_sk_filter_rcv+0x2a1c/0x2c80 [ 221.576639][ C1] tipc_node_xmit+0x257/0xd00 [ 221.576657][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 221.576675][ C1] ? kasan_quarantine_put+0x34/0x190 [ 221.576700][ C1] tipc_node_distr_xmit+0x292/0x390 [ 221.576719][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 221.576738][ C1] ? kfree_skbmem+0x10c/0x180 [ 221.576759][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 221.576781][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 221.576803][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 221.576827][ C1] __release_sock+0x154/0x380 [ 221.576843][ C1] release_sock+0x60/0x1c0 [ 221.576864][ C1] tipc_release+0xd32/0x1650 [ 221.576887][ C1] ? __cfi_tipc_release+0x10/0x10 [ 221.576910][ C1] sock_close+0xf1/0x290 [ 221.576927][ C1] ? __cfi_sock_close+0x10/0x10 [ 221.576945][ C1] __fput+0x1fc/0x8f0 [ 221.576963][ C1] ____fput+0x15/0x20 [ 221.576979][ C1] task_work_run+0x1db/0x240 [ 221.576999][ C1] ? __cfi_task_work_run+0x10/0x10 [ 221.577018][ C1] ? filp_close+0x111/0x160 [ 221.577038][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 221.577055][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 221.577071][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 221.577090][ C1] do_syscall_64+0x58/0xa0 [ 221.577111][ C1] ? clear_bhb_loop+0x15/0x70 [ 221.577127][ C1] ? clear_bhb_loop+0x15/0x70 [ 221.577143][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.577168][ C1] RIP: 0033:0x7f99afc7dda9 [ 221.577181][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 221.577195][ C1] RSP: 002b:00007f99b0a260c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 221.577211][ C1] RAX: 0000000000000000 RBX: 00007f99afdabf80 RCX: 00007f99afc7dda9 [ 221.577222][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 221.577232][ C1] RBP: 00007f99afcca47a R08: 0000000000000000 R09: 0000000000000000 [ 221.577242][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.577252][ C1] R13: 000000000000000b R14: 00007f99afdabf80 R15: 00007ffd68256278 [ 221.577267][ C1]