Warning: Permanently added '10.128.15.198' (ED25519) to the list of known hosts. 2025/06/01 15:48:07 ignoring optional flag "sandboxArg"="0" 2025/06/01 15:48:07 ignoring optional flag "type"="gce" 2025/06/01 15:48:07 parsed 1 programs [ 50.225070][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 50.225084][ T24] audit: type=1400 audit(1748792887.580:92): avc: denied { unlink } for pid=317 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2025/06/01 15:48:07 executed programs: 0 [ 50.289347][ T317] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.342055][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.349184][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.356614][ T321] device bridge_slave_0 entered promiscuous mode [ 50.363458][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.370714][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.378370][ T321] device bridge_slave_1 entered promiscuous mode [ 50.413196][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.420615][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.427899][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.435848][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.453678][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.460932][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.468378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.476574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.485666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.493832][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.500894][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.509644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.518196][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.525264][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.536947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.546311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.559674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.571142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.579424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.587339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.595566][ T321] device veth0_vlan entered promiscuous mode [ 50.605294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.614410][ T321] device veth1_macvtap entered promiscuous mode [ 50.623275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.633075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.653870][ T24] audit: type=1400 audit(1748792888.000:93): avc: denied { create } for pid=326 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.673877][ T24] audit: type=1400 audit(1748792888.010:94): avc: denied { setopt } for pid=326 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.693593][ T24] audit: type=1400 audit(1748792888.010:95): avc: denied { write } for pid=326 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 2025/06/01 15:48:12 executed programs: 718 2025/06/01 15:48:17 executed programs: 1519 2025/06/01 15:48:22 executed programs: 2322 2025/06/01 15:48:27 executed programs: 3116 2025/06/01 15:48:32 executed programs: 3923 2025/06/01 15:48:37 executed programs: 4725 2025/06/01 15:48:42 executed programs: 5517 2025/06/01 15:48:47 executed programs: 6327 2025/06/01 15:48:52 executed programs: 7135 2025/06/01 15:48:57 executed programs: 7937 [ 202.384004][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 202.390824][ C0] rcu: 0-...!: (1 GPs behind) idle=276/1/0x4000000000000000 softirq=45884/45892 fqs=0 last_accelerate: b27f/d990 dyntick_enabled: 1 [ 202.404440][ C0] (t=10000 jiffies g=26981 q=178) [ 202.409548][ C0] rcu: rcu_preempt kthread starved for 10000 jiffies! g26981 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 202.421019][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 202.431074][ C0] rcu: RCU grace-period kthread stack dump: [ 202.436983][ C0] task:rcu_preempt state:I stack: 0 pid: 13 ppid: 2 flags:0x00004000 [ 202.446238][ C0] Call Trace: [ 202.449563][ C0] __schedule+0xb47/0x1310 [ 202.453979][ C0] ? release_firmware_map_entry+0x190/0x190 [ 202.459871][ C0] ? __mod_timer+0x7ae/0xb30 [ 202.464548][ C0] schedule+0x13c/0x1d0 [ 202.468708][ C0] schedule_timeout+0x12c/0x2d0 [ 202.473584][ C0] ? console_conditional_schedule+0x10/0x10 [ 202.479687][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 202.485150][ C0] ? run_local_timers+0x160/0x160 [ 202.490173][ C0] ? prepare_to_swait_event+0x320/0x340 [ 202.495724][ C0] rcu_gp_kthread+0x100a/0x26a0 [ 202.500574][ C0] ? rcu_barrier_callback+0x50/0x50 [ 202.505773][ C0] ? __kasan_check_read+0x11/0x20 [ 202.510801][ C0] ? __kthread_parkme+0xb9/0x1c0 [ 202.515739][ C0] kthread+0x346/0x3d0 [ 202.519805][ C0] ? rcu_barrier_callback+0x50/0x50 [ 202.525001][ C0] ? kthread_blkcg+0xd0/0xd0 [ 202.529587][ C0] ret_from_fork+0x1f/0x30 [ 202.534049][ C0] NMI backtrace for cpu 0 [ 202.538397][ C0] CPU: 0 PID: 25121 Comm: syz-executor.0 Not tainted 5.10.237-syzkaller-1007474-gcf6ed0f1511d #0 [ 202.549032][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.559076][ C0] Call Trace: [ 202.562363][ C0] [ 202.565236][ C0] __dump_stack+0x21/0x24 [ 202.569574][ C0] dump_stack_lvl+0x169/0x1d8 [ 202.574264][ C0] ? show_regs_print_info+0x18/0x18 [ 202.579460][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 202.584915][ C0] ? _raw_spin_lock+0xe0/0xe0 [ 202.589598][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 202.595661][ C0] dump_stack+0x15/0x1c [ 202.599814][ C0] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 202.605802][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 202.611772][ C0] rcu_dump_cpu_stacks+0x19c/0x2c0 [ 202.616988][ C0] rcu_sched_clock_irq+0xf79/0x1870 [ 202.622282][ C0] ? rcutree_dead_cpu+0x2f0/0x2f0 [ 202.627306][ C0] ? hrtimer_run_queues+0x166/0x430 [ 202.632590][ C0] update_process_times+0x198/0x200 [ 202.637787][ C0] tick_sched_timer+0x17c/0x240 [ 202.642632][ C0] ? tick_setup_sched_timer+0x450/0x450 [ 202.648171][ C0] __hrtimer_run_queues+0x37a/0x960 [ 202.653367][ C0] ? hrtimer_interrupt+0xdc0/0xdc0 [ 202.658563][ C0] ? ktime_get_update_offsets_now+0x293/0x2b0 [ 202.664631][ C0] hrtimer_interrupt+0x3a6/0xdc0 [ 202.669570][ C0] __sysvec_apic_timer_interrupt+0xfa/0x3f0 [ 202.675459][ C0] asm_call_irq_on_stack+0xf/0x20 [ 202.680474][ C0] [ 202.683414][ C0] sysvec_apic_timer_interrupt+0x85/0xe0 [ 202.689041][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 202.695040][ C0] RIP: 0010:kvm_wait+0xc2/0x120 [ 202.699911][ C0] Code: 38 f0 75 26 41 f7 c4 00 02 00 00 75 0f 0f 1f 44 00 00 0f 00 2d ff 9d 98 03 f4 eb 0e 0f 1f 44 00 00 0f 00 2d f0 9d 98 03 fb f4 <4c> 89 64 24 18 ff 74 24 18 9d 48 c7 44 24 20 0e 36 e0 45 4b c7 04 [ 202.719943][ C0] RSP: 0018:ffffc90002d0f6e0 EFLAGS: 00000246 [ 202.726014][ C0] RAX: 0000000000000003 RBX: ffff88811a52b288 RCX: ffffffff814b15ba [ 202.734084][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff88811a52b288 [ 202.742061][ C0] RBP: ffffc90002d0f790 R08: dffffc0000000000 R09: ffffed10234a5652 [ 202.750027][ C0] R10: ffffed10234a5652 R11: 1ffff110234a5651 R12: 0000000000000246 [ 202.757994][ C0] R13: 1ffff110234a5651 R14: dffffc0000000000 R15: 1ffff920005a1ee0 [ 202.766243][ C0] ? __pv_queued_spin_lock_slowpath+0x6ba/0xb70 [ 202.772482][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 202.778668][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 202.783777][ C0] ? __pv_queued_spin_lock_slowpath+0x6ba/0xb70 [ 202.790020][ C0] __pv_queued_spin_lock_slowpath+0x714/0xb70 [ 202.796217][ C0] ? memcpy+0x56/0x70 [ 202.800211][ C0] ? __pv_queued_spin_unlock_slowpath+0x280/0x280 [ 202.806648][ C0] ? avc_has_perm_noaudit+0x240/0x240 [ 202.812025][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 202.817482][ C0] _raw_spin_lock_bh+0xd8/0xe0 [ 202.822242][ C0] ? _raw_spin_lock_irq+0xe0/0xe0 [ 202.827265][ C0] lock_sock_nested+0x92/0x290 [ 202.832024][ C0] ? sock_init_data+0xc0/0xc0 [ 202.836699][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 202.841632][ C0] ? _raw_spin_unlock_bh+0x51/0x60 [ 202.846825][ C0] tipc_sendstream+0x47/0x70 [ 202.851414][ C0] ? tipc_getsockopt+0x4c0/0x4c0 [ 202.856348][ C0] ____sys_sendmsg+0x5a2/0x8c0 [ 202.861107][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 202.866133][ C0] ? import_iovec+0x7c/0xb0 [ 202.870631][ C0] ___sys_sendmsg+0x1f0/0x260 [ 202.875307][ C0] ? __sys_sendmsg+0x250/0x250 [ 202.880153][ C0] ? __kasan_check_write+0x14/0x20 [ 202.885262][ C0] ? _raw_spin_lock_irq+0x8f/0xe0 [ 202.890316][ C0] ? __fdget+0x1a1/0x230 [ 202.894579][ C0] __x64_sys_sendmsg+0x1e2/0x2a0 [ 202.899516][ C0] ? __x64_sys_rt_sigprocmask+0xb0/0xb0 [ 202.905073][ C0] ? ___sys_sendmsg+0x260/0x260 [ 202.909954][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 202.916228][ C0] do_syscall_64+0x31/0x40 [ 202.920739][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 202.926648][ C0] RIP: 0033:0x7f9a2e02dca9 [ 202.931267][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 202.951060][ C0] RSP: 002b:00007f9a2db8e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.959491][ C0] RAX: ffffffffffffffda RBX: 00007f9a2e15c050 RCX: 00007f9a2e02dca9 [ 202.967477][ C0] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 202.975448][ C0] RBP: 00007f9a2e07947e R08: 0000000000000000 R09: 0000000000000000 [ 202.983503][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.991478][ C0] R13: 000000000000000b R14: 00007f9a2e15c050 R15: 00007ffe5207b9e8 [ 202.999459][ C0] Sending NMI from CPU 0 to CPUs 1: [ 203.005693][ C1] NMI backtrace for cpu 1 [ 203.005704][ C1] CPU: 1 PID: 25120 Comm: syz-executor.0 Not tainted 5.10.237-syzkaller-1007474-gcf6ed0f1511d #0 [ 203.005711][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.005714][ C1] RIP: 0010:tipc_sk_rcv+0x1a0f/0x1ef0 [ 203.005725][ C1] Code: 44 89 f6 e8 c3 a3 09 fd 41 83 fe 01 75 0f e8 08 a0 09 fd 4c 89 ef e8 00 6b 34 ff eb 1b bf 01 00 00 00 44 89 f6 e8 a1 a3 09 fd <45> 85 f6 0f 8e 97 02 00 00 e8 e3 9f 09 fd 4c 8b 6c 24 10 48 8b 84 [ 203.005729][ C1] RSP: 0018:ffffc900019ee840 EFLAGS: 00000293 [ 203.005738][ C1] RAX: ffffffff8459f27f RBX: ffffc900019eeca0 RCX: 0000000000000000 [ 203.005743][ C1] RDX: ffff8881146a4f00 RSI: 0000000000000005 RDI: 0000000000000001 [ 203.005748][ C1] RBP: ffffc900019eeab0 R08: dffffc0000000000 R09: ffffed10234a5651 [ 203.005752][ C1] R10: ffffed10234a5651 R11: 1ffff110234a5650 R12: dffffc0000000000 [ 203.005756][ C1] R13: ffff88811a52b200 R14: 0000000000000005 R15: 000000002f50f3fb [ 203.005760][ C1] FS: 00007f9a2dbaf6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 203.005778][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.005783][ C1] CR2: 0000000020000000 CR3: 000000011ceac000 CR4: 00000000003506a0 [ 203.005787][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 203.005791][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 203.005793][ C1] Call Trace: [ 203.005797][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 203.005800][ C1] ? __stack_depot_save+0x479/0x4c0 [ 203.005802][ C1] ? kasan_set_track+0x5b/0x70 [ 203.005805][ C1] ? kasan_set_track+0x4a/0x70 [ 203.005808][ C1] ? ____kasan_slab_free+0x125/0x160 [ 203.005811][ C1] ? __kasan_slab_free+0x11/0x20 [ 203.005814][ C1] ? kmem_cache_free+0x100/0x2d0 [ 203.005817][ C1] ? kfree_skbmem+0x10c/0x180 [ 203.005820][ C1] ? kfree_skb+0xc1/0x2f0 [ 203.005823][ C1] ? tipc_sk_backlog_rcv+0x16f/0x1f0 [ 203.005826][ C1] ? __release_sock+0x146/0x360 [ 203.005829][ C1] ? __sys_setsockopt+0x265/0x460 [ 203.005832][ C1] ? __skb_queue_purge+0x170/0x170 [ 203.005834][ C1] tipc_node_xmit+0x256/0xcd0 [ 203.005837][ C1] ? debug_smp_processor_id+0x17/0x20 [ 203.005841][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 203.005844][ C1] ? ____kasan_slab_free+0x130/0x160 [ 203.005846][ C1] ? __kasan_slab_free+0x11/0x20 [ 203.005849][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 203.005852][ C1] ? kfree_skbmem+0x10c/0x180 [ 203.005856][ C1] tipc_node_distr_xmit+0x292/0x390 [ 203.005858][ C1] ? tipc_node_xmit_skb+0x130/0x130 [ 203.005861][ C1] ? trace_tipc_sk_rej_msg+0x2c/0x6d0 [ 203.005864][ C1] tipc_sk_rcv+0x19b9/0x1ef0 [ 203.005867][ C1] ? __skb_queue_purge+0x170/0x170 [ 203.005870][ C1] tipc_node_xmit+0x256/0xcd0 [ 203.005873][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 203.005876][ C1] tipc_sk_push_backlog+0x4dd/0x790 [ 203.005879][ C1] tipc_sk_proto_rcv+0x98d/0x1ac0 [ 203.005882][ C1] ? trace_tipc_sk_dump+0x6c0/0x6c0 [ 203.005885][ C1] tipc_sk_filter_rcv+0x30ac/0x3850 [ 203.005887][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 203.005890][ C1] ? kasan_set_track+0x5b/0x70 [ 203.005893][ C1] ? kasan_set_track+0x4a/0x70 [ 203.005896][ C1] ? kasan_set_free_info+0x23/0x40 [ 203.005899][ C1] ? kasan_set_track+0x5b/0x70 [ 203.005901][ C1] ? kasan_set_track+0x4a/0x70 [ 203.005904][ C1] ? kasan_set_free_info+0x23/0x40 [ 203.005907][ C1] ? ____kasan_slab_free+0x125/0x160 [ 203.005910][ C1] ? __kasan_slab_free+0x11/0x20 [ 203.005913][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 203.005916][ C1] ? kmem_cache_free+0x100/0x2d0 [ 203.005918][ C1] ? kfree_skb+0xc1/0x2f0 [ 203.005921][ C1] ? tipc_msg_reverse+0x698/0x900 [ 203.005924][ C1] ? tipc_sk_filter_rcv+0xca0/0x3850 [ 203.005927][ C1] ? tipc_sk_backlog_rcv+0x109/0x1f0 [ 203.005930][ C1] ? __release_sock+0x146/0x360 [ 203.005933][ C1] ? __sys_setsockopt+0x265/0x460 [ 203.005938][ C1] ? __x64_sys_setsockopt+0xbf/0xd0 [ 203.005940][ C1] ? do_syscall_64+0x31/0x40 [ 203.005944][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 203.005947][ C1] ? tipc_sk_dump+0xfc0/0xfc0 [ 203.005950][ C1] ? __kasan_check_write+0x14/0x20 [ 203.005953][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 203.005956][ C1] tipc_sk_rcv+0x7cc/0x1ef0 [ 203.005959][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 203.005962][ C1] ? kmem_cache_free+0x100/0x2d0 [ 203.005964][ C1] ? __skb_queue_purge+0x170/0x170 [ 203.005967][ C1] ? tipc_sk_filter_rcv+0x3034/0x3850 [ 203.005970][ C1] ? __kasan_check_write+0x14/0x20 [ 203.005973][ C1] tipc_node_xmit+0x256/0xcd0 [ 203.005976][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 203.005979][ C1] tipc_node_distr_xmit+0x292/0x390 [ 203.005982][ C1] ? tipc_node_xmit_skb+0x130/0x130 [ 203.005985][ C1] ? futex_wait+0x526/0x680 [ 203.005988][ C1] ? selinux_capable+0x29c/0x380 [ 203.005991][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 203.005993][ C1] ? tipc_sk_timeout+0x970/0x970 [ 203.005997][ C1] ? __local_bh_enable_ip+0x53/0x80 [ 203.005999][ C1] ? lock_sock_nested+0x1f5/0x290 [ 203.006002][ C1] __release_sock+0x146/0x360 [ 203.006005][ C1] sock_setsockopt+0x125e/0x2350 [ 203.006008][ C1] ? __sock_set_mark+0x160/0x160 [ 203.006011][ C1] ? selinux_socket_setsockopt+0x21c/0x300 [ 203.006014][ C1] ? selinux_socket_getsockopt+0x2e0/0x2e0 [ 203.006017][ C1] ? __fget_files+0x2c4/0x320 [ 203.006020][ C1] ? security_socket_setsockopt+0x82/0xa0 [ 203.006023][ C1] __sys_setsockopt+0x265/0x460 [ 203.006026][ C1] ? preempt_count_add+0x90/0x1b0 [ 203.006029][ C1] ? __ia32_sys_recv+0xb0/0xb0 [ 203.006032][ C1] ? __kasan_check_write+0x14/0x20 [ 203.006035][ C1] ? switch_fpu_return+0x197/0x340 [ 203.006037][ C1] ? fpu__clear_all+0x20/0x20 [ 203.006040][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 203.006043][ C1] do_syscall_64+0x31/0x40 [ 203.006046][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 203.006049][ C1] RIP: 0033:0x7f9a2e02dca9 [ 203.006058][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 203.006061][ C1] RSP: 002b:00007f9a2dbaf0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 203.006069][ C1] RAX: ffffffffffffffda RBX: 00007f9a2e15bf80 RCX: 00007f9a2e02dca9 [ 203.006073][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 203.006077][ C1] RBP: 00007f9a2e07947e R08: 0000000000000004 R09: 0000000000000000 [ 203.006082][ C1] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 203.006086][ C1] R13: 000000000000000b R14: 00007f9a2e15bf80 R15: 00007ffe5207b9e8 [ 352.941156][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 123s! [syz-executor.0:25121] [ 352.949883][ C0] Modules linked in: [ 352.953986][ C0] CPU: 0 PID: 25121 Comm: syz-executor.0 Not tainted 5.10.237-syzkaller-1007474-gcf6ed0f1511d #0 [ 352.964506][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 352.974660][ C0] RIP: 0010:kvm_wait+0xc2/0x120 [ 352.979520][ C0] Code: 38 f0 75 26 41 f7 c4 00 02 00 00 75 0f 0f 1f 44 00 00 0f 00 2d ff 9d 98 03 f4 eb 0e 0f 1f 44 00 00 0f 00 2d f0 9d 98 03 fb f4 <4c> 89 64 24 18 ff 74 24 18 9d 48 c7 44 24 20 0e 36 e0 45 4b c7 04 [ 352.999772][ C0] RSP: 0018:ffffc90002d0f6e0 EFLAGS: 00000246 [ 353.005856][ C0] RAX: 0000000000000003 RBX: ffff88811a52b288 RCX: ffffffff814b15ba [ 353.013830][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff88811a52b288 [ 353.021805][ C0] RBP: ffffc90002d0f790 R08: dffffc0000000000 R09: ffffed10234a5652 [ 353.029775][ C0] R10: ffffed10234a5652 R11: 1ffff110234a5651 R12: 0000000000000246 [ 353.037922][ C0] R13: 1ffff110234a5651 R14: dffffc0000000000 R15: 1ffff920005a1ee0 [ 353.045895][ C0] FS: 00007f9a2db8e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 353.054920][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.061499][ C0] CR2: 00007f9a2db8ed58 CR3: 000000011ceac000 CR4: 00000000003506b0 [ 353.069561][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 353.077552][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 353.085602][ C0] Call Trace: [ 353.088905][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 353.095057][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 353.100171][ C0] ? __pv_queued_spin_lock_slowpath+0x6ba/0xb70 [ 353.106409][ C0] __pv_queued_spin_lock_slowpath+0x714/0xb70 [ 353.112475][ C0] ? memcpy+0x56/0x70 [ 353.116457][ C0] ? __pv_queued_spin_unlock_slowpath+0x280/0x280 [ 353.122869][ C0] ? avc_has_perm_noaudit+0x240/0x240 [ 353.128240][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 353.133696][ C0] _raw_spin_lock_bh+0xd8/0xe0 [ 353.138459][ C0] ? _raw_spin_lock_irq+0xe0/0xe0 [ 353.143482][ C0] lock_sock_nested+0x92/0x290 [ 353.148243][ C0] ? sock_init_data+0xc0/0xc0 [ 353.152913][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 353.157849][ C0] ? _raw_spin_unlock_bh+0x51/0x60 [ 353.162985][ C0] tipc_sendstream+0x47/0x70 [ 353.167576][ C0] ? tipc_getsockopt+0x4c0/0x4c0 [ 353.172601][ C0] ____sys_sendmsg+0x5a2/0x8c0 [ 353.177380][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 353.182491][ C0] ? import_iovec+0x7c/0xb0 [ 353.186992][ C0] ___sys_sendmsg+0x1f0/0x260 [ 353.191851][ C0] ? __sys_sendmsg+0x250/0x250 [ 353.196635][ C0] ? __kasan_check_write+0x14/0x20 [ 353.201745][ C0] ? _raw_spin_lock_irq+0x8f/0xe0 [ 353.206860][ C0] ? __fdget+0x1a1/0x230 [ 353.211303][ C0] __x64_sys_sendmsg+0x1e2/0x2a0 [ 353.216249][ C0] ? __x64_sys_rt_sigprocmask+0xb0/0xb0 [ 353.221795][ C0] ? ___sys_sendmsg+0x260/0x260 [ 353.226670][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 353.232744][ C0] do_syscall_64+0x31/0x40 [ 353.237164][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 353.243052][ C0] RIP: 0033:0x7f9a2e02dca9 [ 353.247539][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 353.267179][ C0] RSP: 002b:00007f9a2db8e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.275614][ C0] RAX: ffffffffffffffda RBX: 00007f9a2e15c050 RCX: 00007f9a2e02dca9 [ 353.283602][ C0] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 353.291673][ C0] RBP: 00007f9a2e07947e R08: 0000000000000000 R09: 0000000000000000 [ 353.299662][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.307634][ C0] R13: 000000000000000b R14: 00007f9a2e15c050 R15: 00007ffe5207b9e8 [ 353.315641][ C0] Sending NMI from CPU 0 to CPUs 1: [ 353.321823][ C1] NMI backtrace for cpu 1 [ 353.321830][ C1] CPU: 1 PID: 25120 Comm: syz-executor.0 Not tainted 5.10.237-syzkaller-1007474-gcf6ed0f1511d #0 [ 353.321837][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 353.321840][ C1] RIP: 0010:bcmp+0x24/0xd0 [ 353.321850][ C1] Code: 5f 5d c3 0f 1f 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 50 48 85 d2 0f 84 a5 00 00 00 48 bb 00 00 00 00 00 fc ff df 45 31 f6 <4a> 8d 04 37 48 89 c1 48 c1 e9 03 0f b6 0c 19 84 c9 75 2d 42 0f b6 [ 353.321855][ C1] RSP: 0018:ffffc900019ee700 EFLAGS: 00000202 [ 353.321863][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000050 [ 353.321868][ C1] RDX: 0000000000000004 RSI: ffffc900019ee7c0 RDI: ffff88811a52b55c [ 353.321872][ C1] RBP: ffffc900019ee730 R08: 0000000000000004 R09: 00000000019ee702 [ 353.321877][ C1] R10: fffff5200033dcf8 R11: 1ffff9200033dcf8 R12: 0000000000000004 [ 353.321881][ C1] R13: ffff88811a52b5e8 R14: 0000000000000003 R15: fffffffffffffc18 [ 353.321886][ C1] FS: 00007f9a2dbaf6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 353.321889][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.321893][ C1] CR2: 0000000020000000 CR3: 000000011ceac000 CR4: 00000000003506a0 [ 353.321897][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 353.321901][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 353.321903][ C1] Call Trace: [ 353.321906][ C1] tipc_sk_lookup+0x2f3/0x5f0 [ 353.321909][ C1] ? tipc_sk_rcv+0x1ef0/0x1ef0 [ 353.321911][ C1] tipc_sk_rcv+0x3eb/0x1ef0 [ 353.321915][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 353.321917][ C1] ? __stack_depot_save+0x479/0x4c0 [ 353.321920][ C1] ? kasan_set_track+0x5b/0x70 [ 353.321923][ C1] ? kasan_set_track+0x4a/0x70 [ 353.321926][ C1] ? ____kasan_slab_free+0x125/0x160 [ 353.321929][ C1] ? __kasan_slab_free+0x11/0x20 [ 353.321931][ C1] ? kmem_cache_free+0x100/0x2d0 [ 353.321934][ C1] ? kfree_skbmem+0x10c/0x180 [ 353.321937][ C1] ? kfree_skb+0xc1/0x2f0 [ 353.321940][ C1] ? tipc_sk_backlog_rcv+0x16f/0x1f0 [ 353.321942][ C1] ? __release_sock+0x146/0x360 [ 353.321945][ C1] ? __sys_setsockopt+0x265/0x460 [ 353.321948][ C1] ? __skb_queue_purge+0x170/0x170 [ 353.321951][ C1] tipc_node_xmit+0x256/0xcd0 [ 353.321954][ C1] ? debug_smp_processor_id+0x17/0x20 [ 353.321957][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 353.321960][ C1] ? ____kasan_slab_free+0x130/0x160 [ 353.321962][ C1] ? __kasan_slab_free+0x11/0x20 [ 353.321966][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 353.321968][ C1] ? kfree_skbmem+0x10c/0x180 [ 353.321971][ C1] tipc_node_distr_xmit+0x292/0x390 [ 353.321974][ C1] ? tipc_node_xmit_skb+0x130/0x130 [ 353.321977][ C1] ? trace_tipc_sk_rej_msg+0x2c/0x6d0 [ 353.321980][ C1] tipc_sk_rcv+0x19b9/0x1ef0 [ 353.321983][ C1] ? __skb_queue_purge+0x170/0x170 [ 353.321985][ C1] tipc_node_xmit+0x256/0xcd0 [ 353.321988][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 353.321991][ C1] tipc_sk_push_backlog+0x4dd/0x790 [ 353.321994][ C1] tipc_sk_proto_rcv+0x98d/0x1ac0 [ 353.321997][ C1] ? trace_tipc_sk_dump+0x6c0/0x6c0 [ 353.322000][ C1] tipc_sk_filter_rcv+0x30ac/0x3850 [ 353.322003][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 353.322005][ C1] ? kasan_set_track+0x5b/0x70 [ 353.322008][ C1] ? kasan_set_track+0x4a/0x70 [ 353.322011][ C1] ? kasan_set_free_info+0x23/0x40 [ 353.322013][ C1] ? kasan_set_track+0x5b/0x70 [ 353.322016][ C1] ? kasan_set_track+0x4a/0x70 [ 353.322019][ C1] ? kasan_set_free_info+0x23/0x40 [ 353.322022][ C1] ? ____kasan_slab_free+0x125/0x160 [ 353.322025][ C1] ? __kasan_slab_free+0x11/0x20 [ 353.322028][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 353.322030][ C1] ? kmem_cache_free+0x100/0x2d0 [ 353.322033][ C1] ? kfree_skb+0xc1/0x2f0 [ 353.322036][ C1] ? tipc_msg_reverse+0x698/0x900 [ 353.322039][ C1] ? tipc_sk_filter_rcv+0xca0/0x3850 [ 353.322042][ C1] ? tipc_sk_backlog_rcv+0x109/0x1f0 [ 353.322044][ C1] ? __release_sock+0x146/0x360 [ 353.322047][ C1] ? __sys_setsockopt+0x265/0x460 [ 353.322050][ C1] ? __x64_sys_setsockopt+0xbf/0xd0 [ 353.322053][ C1] ? do_syscall_64+0x31/0x40 [ 353.322056][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 353.322059][ C1] ? tipc_sk_dump+0xfc0/0xfc0 [ 353.322062][ C1] ? __kasan_check_write+0x14/0x20 [ 353.322064][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 353.322067][ C1] tipc_sk_rcv+0x7cc/0x1ef0 [ 353.322070][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 353.322073][ C1] ? kmem_cache_free+0x100/0x2d0 [ 353.322076][ C1] ? __skb_queue_purge+0x170/0x170 [ 353.322079][ C1] ? tipc_sk_filter_rcv+0x3034/0x3850 [ 353.322082][ C1] ? __kasan_check_write+0x14/0x20 [ 353.322084][ C1] tipc_node_xmit+0x256/0xcd0 [ 353.322088][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 353.322091][ C1] tipc_node_distr_xmit+0x292/0x390 [ 353.322094][ C1] ? tipc_node_xmit_skb+0x130/0x130 [ 353.322096][ C1] ? futex_wait+0x526/0x680 [ 353.322099][ C1] ? selinux_capable+0x29c/0x380 [ 353.322102][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 353.322105][ C1] ? tipc_sk_timeout+0x970/0x970 [ 353.322108][ C1] ? __local_bh_enable_ip+0x53/0x80 [ 353.322110][ C1] ? lock_sock_nested+0x1f5/0x290 [ 353.322113][ C1] __release_sock+0x146/0x360 [ 353.322116][ C1] sock_setsockopt+0x125e/0x2350 [ 353.322119][ C1] ? __sock_set_mark+0x160/0x160 [ 353.322122][ C1] ? selinux_socket_setsockopt+0x21c/0x300 [ 353.322125][ C1] ? selinux_socket_getsockopt+0x2e0/0x2e0 [ 353.322128][ C1] ? __fget_files+0x2c4/0x320 [ 353.322131][ C1] ? security_socket_setsockopt+0x82/0xa0 [ 353.322134][ C1] __sys_setsockopt+0x265/0x460 [ 353.322136][ C1] ? preempt_count_add+0x90/0x1b0 [ 353.322139][ C1] ? __ia32_sys_recv+0xb0/0xb0 [ 353.322142][ C1] ? __kasan_check_write+0x14/0x20 [ 353.322145][ C1] ? switch_fpu_return+0x197/0x340 [ 353.322147][ C1] ? fpu__clear_all+0x20/0x20 [ 353.322150][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 353.322153][ C1] do_syscall_64+0x31/0x40 [ 353.322156][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 353.322158][ C1] RIP: 0033:0x7f9a2e02dca9 [ 353.322168][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 353.322171][ C1] RSP: 002b:00007f9a2dbaf0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 353.322178][ C1] RAX: ffffffffffffffda RBX: 00007f9a2e15bf80 RCX: 00007f9a2e02dca9 [ 353.322182][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 353.322186][ C1] RBP: 00007f9a2e07947e R08: 0000000000000004 R09: 0000000000000000 [ 353.322190][ C1] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 353.322194][ C1] R13: 000000000000000b R14: 00007f9a2e15bf80 R15: 00007ffe5207b9e8