Warning: Permanently added '10.128.1.60' (ED25519) to the list of known hosts. 2025/06/04 21:42:53 ignoring optional flag "sandboxArg"="0" 2025/06/04 21:42:53 ignoring optional flag "type"="gce" 2025/06/04 21:42:53 parsed 1 programs [ 50.914621][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 50.914637][ T28] audit: type=1400 audit(1749073373.470:90): avc: denied { unlink } for pid=398 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 50.961430][ T398] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.249288][ T431] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.256369][ T431] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.264003][ T431] device bridge_slave_0 entered promiscuous mode [ 51.271906][ T431] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.278953][ T431] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.286364][ T431] device bridge_slave_1 entered promiscuous mode [ 51.335207][ T431] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.342246][ T431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.349543][ T431] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.356597][ T431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.378455][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.386167][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.394532][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.404538][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.412886][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.419919][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.428557][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.436920][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.443992][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.457482][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.466846][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.481231][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.493319][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.501366][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.508935][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.517973][ T431] device veth0_vlan entered promiscuous mode [ 51.528515][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.537642][ T431] device veth1_macvtap entered promiscuous mode [ 51.547424][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.558338][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/06/04 21:42:54 executed programs: 0 [ 51.947292][ T457] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.954619][ T457] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.962033][ T457] device bridge_slave_0 entered promiscuous mode [ 51.969151][ T457] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.976457][ T457] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.983896][ T457] device bridge_slave_1 entered promiscuous mode [ 52.056827][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.064382][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.076962][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.085373][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.093777][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.100799][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.108243][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.116727][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.125316][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.132339][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.139844][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.155695][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.164117][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.173785][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.181863][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.200450][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.208947][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.220270][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.228431][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.236176][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.244614][ T457] device veth0_vlan entered promiscuous mode [ 52.259776][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.269034][ T457] device veth1_macvtap entered promiscuous mode [ 52.278493][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.287039][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.301657][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.310181][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.332802][ T28] audit: type=1400 audit(1749073374.880:91): avc: denied { create } for pid=461 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.352947][ T28] audit: type=1400 audit(1749073374.880:92): avc: denied { write } for pid=461 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.383614][ T28] audit: type=1400 audit(1749073374.940:93): avc: denied { setopt } for pid=461 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.423731][ T8] device bridge_slave_1 left promiscuous mode [ 52.429981][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.437597][ T8] device bridge_slave_0 left promiscuous mode [ 52.443924][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.451845][ T8] device veth1_macvtap left promiscuous mode [ 52.457994][ T8] device veth0_vlan left promiscuous mode [ 152.532737][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 152.539433][ C1] rcu: 1-...!: (10001 ticks this GP) idle=1b4c/1/0x4000000000000000 softirq=3546/3546 fqs=0 [ 152.549583][ C1] (t=10002 jiffies g=1953 q=144 ncpus=2) [ 152.555288][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10002 jiffies! g1953 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 152.567504][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=636 [ 152.575238][ C1] rcu: rcu_preempt kthread starved for 10005 jiffies! g1953 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 152.586500][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 152.596459][ C1] rcu: RCU grace-period kthread stack dump: [ 152.602336][ C1] task:rcu_preempt state:I stack:28064 pid:14 ppid:2 flags:0x00004000 [ 152.611538][ C1] Call Trace: [ 152.614807][ C1] [ 152.617743][ C1] __schedule+0xb87/0x14e0 [ 152.622180][ C1] ? release_firmware_map_entry+0x194/0x194 [ 152.628061][ C1] ? __mod_timer+0x7ae/0xb30 [ 152.632654][ C1] schedule+0xbd/0x170 [ 152.636795][ C1] schedule_timeout+0x12c/0x2e0 [ 152.641639][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 152.647005][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 152.652456][ C1] ? __cfi_process_timeout+0x10/0x10 [ 152.657801][ C1] ? prepare_to_swait_event+0x308/0x320 [ 152.663380][ C1] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 152.668241][ C1] ? rcu_gp_init+0xf10/0xf10 [ 152.672831][ C1] rcu_gp_kthread+0x95/0x370 [ 152.677493][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 152.682699][ C1] ? __kasan_check_read+0x11/0x20 [ 152.687755][ C1] ? __kthread_parkme+0x142/0x180 [ 152.692772][ C1] kthread+0x281/0x320 [ 152.696834][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 152.702034][ C1] ? __cfi_kthread+0x10/0x10 [ 152.706649][ C1] ret_from_fork+0x1f/0x30 [ 152.711157][ C1] [ 152.714173][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 152.720498][ C1] CPU: 1 PID: 468 Comm: syz-executor Not tainted 6.1.138-syzkaller-1169871-g3048ff69258f #0 [ 152.730553][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.740614][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 152.746739][ C1] Code: 8b 3d ec 26 02 06 48 89 de e8 14 9d 43 00 5b 5d c3 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 48 8b 45 08 <65> 48 8b 0d a0 7c 92 7e 65 8b 15 a1 7c 92 7e 81 e2 00 01 ff 00 74 [ 152.766490][ C1] RSP: 0018:ffffc900007be870 EFLAGS: 00000246 [ 152.772574][ C1] RAX: ffffffff84c915ce RBX: 00000000d5325b4d RCX: 0000000000000000 [ 152.780542][ C1] RDX: ffff88811a185100 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.788507][ C1] RBP: ffffc900007be870 R08: 0000000000000004 R09: 0000000000000003 [ 152.796471][ C1] R10: fffff520000f7d20 R11: 1ffff920000f7d20 R12: dffffc0000000000 [ 152.804437][ C1] R13: ffff888118cb90de R14: 000000000000000e R15: 0000000000000000 [ 152.812400][ C1] FS: 00007fee65dff6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 152.821331][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.827922][ C1] CR2: 0000000020005000 CR3: 000000011970f000 CR4: 00000000003506a0 [ 152.835886][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.843854][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 152.851858][ C1] Call Trace: [ 152.855130][ C1] [ 152.858050][ C1] tipc_sk_lookup+0x20e/0x620 [ 152.862729][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 152.867715][ C1] ? tipc_sk_rcv+0x2cc0/0x2cc0 [ 152.872514][ C1] ? kasan_check_range+0x23/0x290 [ 152.877550][ C1] tipc_sk_rcv+0x419/0x2cc0 [ 152.882068][ C1] ? __stack_depot_save+0x445/0x480 [ 152.887352][ C1] ? kasan_set_track+0x60/0x70 [ 152.892102][ C1] ? kasan_set_track+0x4b/0x70 [ 152.896866][ C1] ? kasan_save_free_info+0x31/0x50 [ 152.902053][ C1] ? ____kasan_slab_free+0x132/0x180 [ 152.907320][ C1] ? __kasan_slab_free+0x11/0x20 [ 152.912239][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 152.917778][ C1] ? kmem_cache_free+0x12d/0x300 [ 152.922707][ C1] ? kfree_skbmem+0x10c/0x180 [ 152.927391][ C1] ? kfree_skb_reason+0xdc/0x230 [ 152.932316][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 152.937327][ C1] ? tipc_node_xmit+0x257/0xd00 [ 152.942165][ C1] ? tipc_release+0xd32/0x1650 [ 152.946923][ C1] ? syscall_exit_to_user_mode+0x1a/0x30 [ 152.952538][ C1] ? do_syscall_64+0x58/0xa0 [ 152.957114][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.963180][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 152.968121][ C1] tipc_node_xmit+0x257/0xd00 [ 152.972790][ C1] ? ____kasan_slab_free+0x13d/0x180 [ 152.978066][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 152.983252][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 152.988798][ C1] ? kfree_skbmem+0x10c/0x180 [ 152.993645][ C1] ? kmem_cache_free+0x12d/0x300 [ 152.998583][ C1] tipc_node_xmit_skb+0xe9/0x130 [ 153.003507][ C1] ? kfree_skb_reason+0xdc/0x230 [ 153.008437][ C1] ? __cfi_tipc_node_xmit_skb+0x10/0x10 [ 153.013967][ C1] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 153.019330][ C1] tipc_sk_rcv+0x1def/0x2cc0 [ 153.023908][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 153.029100][ C1] ? sched_clock+0x9/0x10 [ 153.033453][ C1] ? sched_clock_cpu+0x6e/0x250 [ 153.038314][ C1] ? __reset_page_owner+0x190/0x190 [ 153.043508][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 153.048439][ C1] tipc_node_xmit+0x257/0xd00 [ 153.053103][ C1] ? is_bpf_text_address+0x177/0x190 [ 153.058380][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 153.063562][ C1] ? kernel_text_address+0xa0/0xd0 [ 153.068662][ C1] ? __kernel_text_address+0xd/0x30 [ 153.073863][ C1] ? unwind_get_return_address+0x4d/0x90 [ 153.079481][ C1] ? __kasan_check_write+0x14/0x20 [ 153.084587][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 153.090042][ C1] tipc_sk_filter_rcv+0x155f/0x2c80 [ 153.095236][ C1] ? tipc_sk_publish+0x440/0x440 [ 153.100161][ C1] ? __kasan_check_write+0x14/0x20 [ 153.105265][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 153.110195][ C1] tipc_sk_rcv+0x7d9/0x2cc0 [ 153.114714][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 153.119740][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 153.124669][ C1] ? tipc_sk_filter_rcv+0x2a1c/0x2c80 [ 153.130035][ C1] tipc_node_xmit+0x257/0xd00 [ 153.134699][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 153.139890][ C1] ? kasan_quarantine_put+0x34/0x190 [ 153.145195][ C1] tipc_node_distr_xmit+0x292/0x390 [ 153.150382][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 153.156084][ C1] ? kfree_skbmem+0x10c/0x180 [ 153.160750][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 153.165853][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 153.171472][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 153.176932][ C1] __release_sock+0x154/0x380 [ 153.181595][ C1] release_sock+0x60/0x1c0 [ 153.185998][ C1] tipc_release+0xd32/0x1650 [ 153.190668][ C1] ? __cfi_tipc_release+0x10/0x10 [ 153.195683][ C1] sock_close+0xf1/0x290 [ 153.199914][ C1] ? __cfi_sock_close+0x10/0x10 [ 153.204753][ C1] __fput+0x1fc/0x8f0 [ 153.208744][ C1] ____fput+0x15/0x20 [ 153.212710][ C1] task_work_run+0x1db/0x240 [ 153.217298][ C1] ? __cfi_task_work_run+0x10/0x10 [ 153.222398][ C1] ? __kasan_check_write+0x14/0x20 [ 153.227495][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 153.232721][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 153.238257][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 153.243709][ C1] do_syscall_64+0x58/0xa0 [ 153.248212][ C1] ? clear_bhb_loop+0x15/0x70 [ 153.252874][ C1] ? clear_bhb_loop+0x15/0x70 [ 153.257552][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.263436][ C1] RIP: 0033:0x7fee6627cee9 [ 153.267844][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 153.287521][ C1] RSP: 002b:00007fee65dff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.295918][ C1] RAX: 00000000000203a0 RBX: 00007fee663abf80 RCX: 00007fee6627cee9 [ 153.303877][ C1] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 153.311959][ C1] RBP: 00007fee662c949e R08: 0000000000000000 R09: 0000000000000000 [ 153.319944][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.327904][ C1] R13: 000000000000000b R14: 00007fee663abf80 R15: 00007fffa9add118 [ 153.335886][ C1] [ 153.338982][ C1] CPU: 1 PID: 468 Comm: syz-executor Not tainted 6.1.138-syzkaller-1169871-g3048ff69258f #0 [ 153.349034][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.359078][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 153.365145][ C1] Code: 8b 3d ec 26 02 06 48 89 de e8 14 9d 43 00 5b 5d c3 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 48 8b 45 08 <65> 48 8b 0d a0 7c 92 7e 65 8b 15 a1 7c 92 7e 81 e2 00 01 ff 00 74 [ 153.384736][ C1] RSP: 0018:ffffc900007be870 EFLAGS: 00000246 [ 153.390801][ C1] RAX: ffffffff84c915ce RBX: 00000000d5325b4d RCX: 0000000000000000 [ 153.398761][ C1] RDX: ffff88811a185100 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.406711][ C1] RBP: ffffc900007be870 R08: 0000000000000004 R09: 0000000000000003 [ 153.414667][ C1] R10: fffff520000f7d20 R11: 1ffff920000f7d20 R12: dffffc0000000000 [ 153.422624][ C1] R13: ffff888118cb90de R14: 000000000000000e R15: 0000000000000000 [ 153.430579][ C1] FS: 00007fee65dff6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 153.439493][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.446087][ C1] CR2: 0000000020005000 CR3: 000000011970f000 CR4: 00000000003506a0 [ 153.454059][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 153.462015][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 153.469971][ C1] Call Trace: [ 153.473239][ C1] [ 153.476171][ C1] tipc_sk_lookup+0x20e/0x620 [ 153.480949][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 153.485897][ C1] ? tipc_sk_rcv+0x2cc0/0x2cc0 [ 153.490676][ C1] ? kasan_check_range+0x23/0x290 [ 153.495704][ C1] tipc_sk_rcv+0x419/0x2cc0 [ 153.500202][ C1] ? __stack_depot_save+0x445/0x480 [ 153.505404][ C1] ? kasan_set_track+0x60/0x70 [ 153.510163][ C1] ? kasan_set_track+0x4b/0x70 [ 153.515019][ C1] ? kasan_save_free_info+0x31/0x50 [ 153.520215][ C1] ? ____kasan_slab_free+0x132/0x180 [ 153.525492][ C1] ? __kasan_slab_free+0x11/0x20 [ 153.530457][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 153.535996][ C1] ? kmem_cache_free+0x12d/0x300 [ 153.540948][ C1] ? kfree_skbmem+0x10c/0x180 [ 153.545618][ C1] ? kfree_skb_reason+0xdc/0x230 [ 153.550653][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 153.555667][ C1] ? tipc_node_xmit+0x257/0xd00 [ 153.560681][ C1] ? tipc_release+0xd32/0x1650 [ 153.565445][ C1] ? syscall_exit_to_user_mode+0x1a/0x30 [ 153.571134][ C1] ? do_syscall_64+0x58/0xa0 [ 153.575733][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.581822][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 153.586770][ C1] tipc_node_xmit+0x257/0xd00 [ 153.591437][ C1] ? ____kasan_slab_free+0x13d/0x180 [ 153.596716][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 153.601906][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 153.607449][ C1] ? kfree_skbmem+0x10c/0x180 [ 153.612116][ C1] ? kmem_cache_free+0x12d/0x300 [ 153.617040][ C1] tipc_node_xmit_skb+0xe9/0x130 [ 153.621959][ C1] ? kfree_skb_reason+0xdc/0x230 [ 153.626894][ C1] ? __cfi_tipc_node_xmit_skb+0x10/0x10 [ 153.632424][ C1] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 153.637786][ C1] tipc_sk_rcv+0x1def/0x2cc0 [ 153.642363][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 153.647550][ C1] ? sched_clock+0x9/0x10 [ 153.651904][ C1] ? sched_clock_cpu+0x6e/0x250 [ 153.656736][ C1] ? __reset_page_owner+0x190/0x190 [ 153.661940][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 153.666867][ C1] tipc_node_xmit+0x257/0xd00 [ 153.671534][ C1] ? is_bpf_text_address+0x177/0x190 [ 153.676817][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 153.681996][ C1] ? kernel_text_address+0xa0/0xd0 [ 153.687094][ C1] ? __kernel_text_address+0xd/0x30 [ 153.692551][ C1] ? unwind_get_return_address+0x4d/0x90 [ 153.698275][ C1] ? __kasan_check_write+0x14/0x20 [ 153.703389][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 153.708850][ C1] tipc_sk_filter_rcv+0x155f/0x2c80 [ 153.714076][ C1] ? tipc_sk_publish+0x440/0x440 [ 153.719014][ C1] ? __kasan_check_write+0x14/0x20 [ 153.724119][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 153.729053][ C1] tipc_sk_rcv+0x7d9/0x2cc0 [ 153.733551][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 153.738567][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 153.743497][ C1] ? tipc_sk_filter_rcv+0x2a1c/0x2c80 [ 153.748885][ C1] tipc_node_xmit+0x257/0xd00 [ 153.753552][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 153.758830][ C1] ? kasan_quarantine_put+0x34/0x190 [ 153.764111][ C1] tipc_node_distr_xmit+0x292/0x390 [ 153.769304][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 153.775010][ C1] ? kfree_skbmem+0x10c/0x180 [ 153.779678][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 153.784784][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 153.790420][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 153.795873][ C1] __release_sock+0x154/0x380 [ 153.800535][ C1] release_sock+0x60/0x1c0 [ 153.804940][ C1] tipc_release+0xd32/0x1650 [ 153.809518][ C1] ? __cfi_tipc_release+0x10/0x10 [ 153.814535][ C1] sock_close+0xf1/0x290 [ 153.818768][ C1] ? __cfi_sock_close+0x10/0x10 [ 153.823608][ C1] __fput+0x1fc/0x8f0 [ 153.827629][ C1] ____fput+0x15/0x20 [ 153.831608][ C1] task_work_run+0x1db/0x240 [ 153.836199][ C1] ? __cfi_task_work_run+0x10/0x10 [ 153.841305][ C1] ? __kasan_check_write+0x14/0x20 [ 153.846421][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 153.851616][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 153.857079][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 153.862527][ C1] do_syscall_64+0x58/0xa0 [ 153.866935][ C1] ? clear_bhb_loop+0x15/0x70 [ 153.871611][ C1] ? clear_bhb_loop+0x15/0x70 [ 153.876272][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.882158][ C1] RIP: 0033:0x7fee6627cee9 [ 153.886558][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 153.906148][ C1] RSP: 002b:00007fee65dff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.914577][ C1] RAX: 00000000000203a0 RBX: 00007fee663abf80 RCX: 00007fee6627cee9 [ 153.922573][ C1] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 153.930567][ C1] RBP: 00007fee662c949e R08: 0000000000000000 R09: 0000000000000000 [ 153.938539][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.946502][ C1] R13: 000000000000000b R14: 00007fee663abf80 R15: 00007fffa9add118 [ 153.954474][ C1] [ 199.053189][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 144s! [syz-executor:467] [ 199.061571][ C0] Modules linked in: [ 199.065480][ C0] CPU: 0 PID: 467 Comm: syz-executor Not tainted 6.1.138-syzkaller-1169871-g3048ff69258f #0 [ 199.075547][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.085615][ C0] RIP: 0010:__pv_queued_spin_lock_slowpath+0x591/0xc40 [ 199.092494][ C0] Code: 0f 85 33 01 00 00 41 c6 45 00 00 41 0f b6 04 17 84 c0 0f 85 46 01 00 00 48 8b 44 24 10 c6 00 01 41 bd 00 80 ff ff eb 07 f3 90 <41> ff c5 74 5b 41 0f b6 04 16 84 c0 75 35 80 3b 00 75 eb 48 89 df [ 199.112211][ C0] RSP: 0018:ffffc900009a7940 EFLAGS: 00000206 [ 199.118287][ C0] RAX: 0000000000000000 RBX: ffff888121d91498 RCX: ffffffff84f00562 [ 199.126288][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888121d91498 [ 199.134280][ C0] RBP: ffffc900009a7a30 R08: dffffc0000000000 R09: ffffed10243b2294 [ 199.142280][ C0] R10: ffffed10243b2294 R11: 1ffff110243b2293 R12: 1ffff1103ee00001 [ 199.150255][ C0] R13: 00000000ffff9fec R14: 1ffff110243b2293 R15: 1ffff110243b2293 [ 199.158405][ C0] FS: 0000555561b65480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 199.167450][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.174040][ C0] CR2: 00007fee663ad988 CR3: 000000011970f000 CR4: 00000000003506b0 [ 199.182018][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.189992][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.197966][ C0] Call Trace: [ 199.201254][ C0] [ 199.204197][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 199.210810][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 199.216285][ C0] _raw_spin_lock_bh+0xd8/0xe0 [ 199.221071][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 199.226539][ C0] ? __stack_depot_save+0x36/0x480 [ 199.231674][ C0] lock_sock_nested+0x92/0x280 [ 199.236441][ C0] ? kasan_record_aux_stack+0xe/0x10 [ 199.241749][ C0] ? fput+0xe1/0x1a0 [ 199.245774][ C0] ? __cfi_lock_sock_nested+0x10/0x10 [ 199.251151][ C0] ? do_syscall_64+0x4c/0xa0 [ 199.255761][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.261846][ C0] ? __cfi_locks_remove_file+0x10/0x10 [ 199.267318][ C0] tipc_release+0xb2/0x1650 [ 199.271836][ C0] ? rwsem_write_trylock+0x130/0x300 [ 199.277138][ C0] ? __cfi_tipc_release+0x10/0x10 [ 199.282177][ C0] sock_close+0xf1/0x290 [ 199.286437][ C0] ? __cfi_sock_close+0x10/0x10 [ 199.291294][ C0] __fput+0x1fc/0x8f0 [ 199.295292][ C0] ____fput+0x15/0x20 [ 199.299282][ C0] task_work_run+0x1db/0x240 [ 199.303876][ C0] ? __cfi_task_work_run+0x10/0x10 [ 199.308993][ C0] ? filp_close+0x111/0x160 [ 199.313513][ C0] exit_to_user_mode_loop+0x9b/0xb0 [ 199.318898][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 199.324357][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 199.329829][ C0] do_syscall_64+0x58/0xa0 [ 199.334258][ C0] ? clear_bhb_loop+0x15/0x70 [ 199.338951][ C0] ? clear_bhb_loop+0x15/0x70 [ 199.344096][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.350015][ C0] RIP: 0033:0x7fee6627bdda [ 199.354525][ C0] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 199.374138][ C0] RSP: 002b:00007fffa9add1e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 199.382560][ C0] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00007fee6627bdda [ 199.390543][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 199.398532][ C0] RBP: 00007fee663ad980 R08: 0000001b30460000 R09: 00102fbd037f4378 [ 199.406517][ C0] R10: 0000001c4e3f4787 R11: 0000000000000293 R12: 000000000000d027 [ 199.414493][ C0] R13: 00007fee663ac05c R14: 00007fee663ac050 R15: 0000000000000032 [ 199.422480][ C0] [ 199.425515][ C0] Sending NMI from CPU 0 to CPUs 1: [ 199.430733][ C1] NMI backtrace for cpu 1 [ 199.430743][ C1] CPU: 1 PID: 468 Comm: syz-executor Not tainted 6.1.138-syzkaller-1169871-g3048ff69258f #0 [ 199.430761][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.430771][ C1] RIP: 0010:tipc_sk_rcv+0x1a7a/0x2cc0 [ 199.430796][ C1] Code: 26 00 4c 8b 64 24 30 eb 0f e8 b2 ef a6 fc 4c 8b 74 24 48 44 8b 7c 24 1c 48 8b bc 24 78 01 00 00 e8 ab e4 26 00 48 8b 44 24 70 <48> 8d 78 30 48 89 f8 48 c1 e8 03 42 80 3c 28 00 74 05 e8 8f 46 eb [ 199.430810][ C1] RSP: 0018:ffffc900007be980 EFLAGS: 00000293 [ 199.430825][ C1] RAX: ffff888121d91400 RBX: 0000000000000000 RCX: ffff88811a185100 [ 199.430837][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 199.430847][ C1] RBP: ffffc900007bec10 R08: dffffc0000000000 R09: ffffed10243b2294 [ 199.430859][ C1] R10: ffffed10243b2294 R11: 1ffff110243b2293 R12: ffff888121d91400 [ 199.430872][ C1] R13: dffffc0000000000 R14: ffffc900007bedc0 R15: 0000000042359337 [ 199.430884][ C1] FS: 00007fee65dff6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 199.430899][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.430911][ C1] CR2: 0000000020005000 CR3: 000000011970f000 CR4: 00000000003506a0 [ 199.430925][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.430934][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.430944][ C1] Call Trace: [ 199.430949][ C1] [ 199.430955][ C1] ? __stack_depot_save+0x445/0x480 [ 199.430983][ C1] ? kasan_set_track+0x60/0x70 [ 199.430999][ C1] ? kasan_set_track+0x4b/0x70 [ 199.431013][ C1] ? kasan_save_free_info+0x31/0x50 [ 199.431035][ C1] ? ____kasan_slab_free+0x132/0x180 [ 199.431052][ C1] ? __kasan_slab_free+0x11/0x20 [ 199.431068][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 199.431091][ C1] ? kmem_cache_free+0x12d/0x300 [ 199.431109][ C1] ? kfree_skbmem+0x10c/0x180 [ 199.431130][ C1] ? kfree_skb_reason+0xdc/0x230 [ 199.431151][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 199.431169][ C1] ? tipc_node_xmit+0x257/0xd00 [ 199.431186][ C1] ? tipc_release+0xd32/0x1650 [ 199.431209][ C1] ? syscall_exit_to_user_mode+0x1a/0x30 [ 199.431228][ C1] ? do_syscall_64+0x58/0xa0 [ 199.431250][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.431277][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 199.431301][ C1] tipc_node_xmit+0x257/0xd00 [ 199.431319][ C1] ? ____kasan_slab_free+0x13d/0x180 [ 199.431336][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 199.431352][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 199.431376][ C1] ? kfree_skbmem+0x10c/0x180 [ 199.431396][ C1] ? kmem_cache_free+0x12d/0x300 [ 199.431417][ C1] tipc_node_xmit_skb+0xe9/0x130 [ 199.431434][ C1] ? kfree_skb_reason+0xdc/0x230 [ 199.431455][ C1] ? __cfi_tipc_node_xmit_skb+0x10/0x10 [ 199.431475][ C1] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 199.431495][ C1] tipc_sk_rcv+0x1def/0x2cc0 [ 199.431517][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 199.431541][ C1] ? sched_clock+0x9/0x10 [ 199.431562][ C1] ? sched_clock_cpu+0x6e/0x250 [ 199.431580][ C1] ? __reset_page_owner+0x190/0x190 [ 199.431607][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 199.431630][ C1] tipc_node_xmit+0x257/0xd00 [ 199.431647][ C1] ? is_bpf_text_address+0x177/0x190 [ 199.431669][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 199.431685][ C1] ? kernel_text_address+0xa0/0xd0 [ 199.431706][ C1] ? __kernel_text_address+0xd/0x30 [ 199.431732][ C1] ? unwind_get_return_address+0x4d/0x90 [ 199.431751][ C1] ? __kasan_check_write+0x14/0x20 [ 199.431774][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 199.431798][ C1] tipc_sk_filter_rcv+0x155f/0x2c80 [ 199.431829][ C1] ? tipc_sk_publish+0x440/0x440 [ 199.431851][ C1] ? __kasan_check_write+0x14/0x20 [ 199.431874][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 199.431898][ C1] tipc_sk_rcv+0x7d9/0x2cc0 [ 199.431923][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 199.431942][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 199.431963][ C1] ? tipc_sk_filter_rcv+0x2a1c/0x2c80 [ 199.431987][ C1] tipc_node_xmit+0x257/0xd00 [ 199.432005][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 199.432023][ C1] ? kasan_quarantine_put+0x34/0x190 [ 199.432049][ C1] tipc_node_distr_xmit+0x292/0x390 [ 199.432068][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 199.432087][ C1] ? kfree_skbmem+0x10c/0x180 [ 199.432108][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 199.432131][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 199.432153][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 199.432177][ C1] __release_sock+0x154/0x380 [ 199.432194][ C1] release_sock+0x60/0x1c0 [ 199.432215][ C1] tipc_release+0xd32/0x1650 [ 199.432238][ C1] ? __cfi_tipc_release+0x10/0x10 [ 199.432262][ C1] sock_close+0xf1/0x290 [ 199.432278][ C1] ? __cfi_sock_close+0x10/0x10 [ 199.432296][ C1] __fput+0x1fc/0x8f0 [ 199.432315][ C1] ____fput+0x15/0x20 [ 199.432330][ C1] task_work_run+0x1db/0x240 [ 199.432350][ C1] ? __cfi_task_work_run+0x10/0x10 [ 199.432370][ C1] ? __kasan_check_write+0x14/0x20 [ 199.432394][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 199.432411][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 199.432427][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 199.432446][ C1] do_syscall_64+0x58/0xa0 [ 199.432469][ C1] ? clear_bhb_loop+0x15/0x70 [ 199.432484][ C1] ? clear_bhb_loop+0x15/0x70 [ 199.432500][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.432526][ C1] RIP: 0033:0x7fee6627cee9 [ 199.432539][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 199.432552][ C1] RSP: 002b:00007fee65dff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.432568][ C1] RAX: 00000000000203a0 RBX: 00007fee663abf80 RCX: 00007fee6627cee9 [ 199.432579][ C1] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 199.432589][ C1] RBP: 00007fee662c949e R08: 0000000000000000 R09: 0000000000000000 [ 199.432599][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.432609][ C1] R13: 000000000000000b R14: 00007fee663abf80 R15: 00007fffa9add118 [ 199.432623][ C1]