Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. 2025/05/11 14:12:45 ignoring optional flag "sandboxArg"="0" 2025/05/11 14:12:45 ignoring optional flag "type"="gce" 2025/05/11 14:12:45 parsed 1 programs [ 40.829705][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 40.829722][ T30] audit: type=1400 audit(1746972765.436:92): avc: denied { unlink } for pid=321 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2025/05/11 14:12:45 executed programs: 0 [ 40.910989][ T321] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 40.972226][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.979328][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.986943][ T327] device bridge_slave_0 entered promiscuous mode [ 40.994459][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.001991][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.010302][ T327] device bridge_slave_1 entered promiscuous mode [ 41.061006][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.068963][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.076874][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.084229][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.105256][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.112850][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.120437][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.127956][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.137326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.145958][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.153599][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.162773][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.171237][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.178626][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.193503][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.203077][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.217797][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.229907][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.239669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.247973][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.257022][ T327] device veth0_vlan entered promiscuous mode [ 41.268446][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.278534][ T327] device veth1_macvtap entered promiscuous mode [ 41.288954][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.301871][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.327828][ T30] audit: type=1400 audit(1746972765.926:93): avc: denied { create } for pid=331 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.350236][ T30] audit: type=1400 audit(1746972765.946:94): avc: denied { setopt } for pid=331 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.377957][ T30] audit: type=1400 audit(1746972765.946:95): avc: denied { write } for pid=331 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 2025/05/11 14:12:50 executed programs: 592 2025/05/11 14:12:55 executed programs: 1294 2025/05/11 14:13:00 executed programs: 1977 2025/05/11 14:13:05 executed programs: 2654 2025/05/11 14:13:10 executed programs: 3344 2025/05/11 14:13:15 executed programs: 4038 2025/05/11 14:13:20 executed programs: 4730 2025/05/11 14:13:25 executed programs: 5447 2025/05/11 14:13:30 executed programs: 6153 2025/05/11 14:13:35 executed programs: 6851 2025/05/11 14:13:40 executed programs: 7552 2025/05/11 14:13:45 executed programs: 8269 2025/05/11 14:13:50 executed programs: 8975 2025/05/11 14:13:55 executed programs: 9692 2025/05/11 14:14:00 executed programs: 10399 2025/05/11 14:14:05 executed programs: 11094 2025/05/11 14:14:10 executed programs: 11786 2025/05/11 14:14:15 executed programs: 12477 2025/05/11 14:14:20 executed programs: 13180 2025/05/11 14:14:25 executed programs: 13886 2025/05/11 14:14:30 executed programs: 14593 2025/05/11 14:14:35 executed programs: 15280 2025/05/11 14:14:40 executed programs: 15988 2025/05/11 14:14:45 executed programs: 16704 2025/05/11 14:14:50 executed programs: 17394 2025/05/11 14:14:55 executed programs: 18087 2025/05/11 14:15:00 executed programs: 18762 2025/05/11 14:15:05 executed programs: 19437 2025/05/11 14:15:10 executed programs: 20075 2025/05/11 14:15:15 executed programs: 20750 2025/05/11 14:15:20 executed programs: 21462 2025/05/11 14:15:25 executed programs: 22186 2025/05/11 14:15:30 executed programs: 22895 [ 308.839113][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 308.846121][ C1] rcu: 1-...!: (10000 ticks this GP) idle=115/1/0x4000000000000000 softirq=151284/151284 fqs=0 last_accelerate: dc08/0319 dyntick_enabled: 1 [ 308.861078][ C1] (t=10000 jiffies g=109489 q=140) [ 308.866659][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 9999 jiffies! g109489 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 308.879159][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=8768 [ 308.888892][ C1] rcu: rcu_preempt kthread starved for 10000 jiffies! g109489 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 308.900888][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 308.910981][ C1] rcu: RCU grace-period kthread stack dump: [ 308.917401][ C1] task:rcu_preempt state:I stack:28488 pid: 14 ppid: 2 flags:0x00004000 [ 308.926714][ C1] Call Trace: [ 308.930197][ C1] [ 308.933144][ C1] __schedule+0xb6e/0x14c0 [ 308.937659][ C1] ? release_firmware_map_entry+0x190/0x190 [ 308.943640][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 308.949556][ C1] ? __mod_timer+0x7ae/0xb30 [ 308.954228][ C1] schedule+0x11e/0x1e0 [ 308.958370][ C1] schedule_timeout+0x12c/0x2e0 [ 308.963241][ C1] ? console_conditional_schedule+0x30/0x30 [ 308.969299][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 308.974761][ C1] ? update_process_times+0x200/0x200 [ 308.980124][ C1] ? prepare_to_swait_event+0x308/0x320 [ 308.985671][ C1] rcu_gp_fqs_loop+0x293/0xf60 [ 308.990691][ C1] ? debug_smp_processor_id+0x17/0x20 [ 308.996230][ C1] ? __note_gp_changes+0x4e2/0x9e0 [ 309.001429][ C1] ? rcu_gp_init+0xc00/0xc00 [ 309.006013][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 309.011214][ C1] ? rcu_gp_init+0x9a7/0xc00 [ 309.016568][ C1] rcu_gp_kthread+0x98/0x330 [ 309.021173][ C1] ? wake_nocb_gp+0x1d0/0x1d0 [ 309.026033][ C1] ? __kasan_check_read+0x11/0x20 [ 309.031061][ C1] ? __kthread_parkme+0xac/0x200 [ 309.036032][ C1] ? preempt_count_add+0x90/0x1b0 [ 309.041054][ C1] kthread+0x411/0x500 [ 309.045293][ C1] ? wake_nocb_gp+0x1d0/0x1d0 [ 309.050144][ C1] ? kthread_blkcg+0xd0/0xd0 [ 309.054816][ C1] ret_from_fork+0x1f/0x30 [ 309.059315][ C1] [ 309.062512][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 309.068998][ C1] NMI backtrace for cpu 1 [ 309.073421][ C1] CPU: 1 PID: 5286 Comm: syz-executor.0 Not tainted 5.15.181-syzkaller-1080424-gf93c8b5a9e60 #0 [ 309.083920][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 309.094416][ C1] Call Trace: [ 309.097786][ C1] [ 309.100709][ C1] __dump_stack+0x21/0x30 [ 309.105150][ C1] dump_stack_lvl+0xee/0x150 [ 309.110032][ C1] ? show_regs_print_info+0x20/0x20 [ 309.115677][ C1] dump_stack+0x15/0x20 [ 309.119828][ C1] nmi_cpu_backtrace+0x2b4/0x2c0 [ 309.124847][ C1] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 309.130990][ C1] ? load_image+0x3a0/0x3a0 [ 309.135507][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 309.141654][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 309.147802][ C1] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 309.153861][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 309.159856][ C1] rcu_check_gp_kthread_starvation+0x1e0/0x260 [ 309.166359][ C1] ? rcu_check_gp_kthread_expired_fqs_timer+0x186/0x230 [ 309.173563][ C1] print_cpu_stall+0x31b/0x600 [ 309.178350][ C1] rcu_sched_clock_irq+0x74a/0x12b0 [ 309.183769][ C1] ? rcu_boost_kthread_setaffinity+0x310/0x310 [ 309.190024][ C1] ? raise_softirq+0x71/0xe0 [ 309.194788][ C1] ? __raise_softirq_irqoff+0xd0/0xd0 [ 309.200147][ C1] ? hrtimer_run_queues+0x166/0x430 [ 309.205431][ C1] update_process_times+0x198/0x200 [ 309.210644][ C1] tick_sched_timer+0x17c/0x240 [ 309.215521][ C1] ? tick_setup_sched_timer+0x450/0x450 [ 309.221312][ C1] __hrtimer_run_queues+0x3b5/0x9e0 [ 309.226612][ C1] ? hrtimer_interrupt+0x8c0/0x8c0 [ 309.231719][ C1] ? ktime_get_update_offsets_now+0x2fa/0x310 [ 309.237872][ C1] hrtimer_interrupt+0x3c7/0x8c0 [ 309.242940][ C1] __sysvec_apic_timer_interrupt+0xfa/0x3e0 [ 309.249106][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 309.254736][ C1] [ 309.257870][ C1] [ 309.260803][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 309.266888][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60 [ 309.273183][ C1] Code: d0 cd 99 7e 65 8b 15 d1 cd 99 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 5c 0b 00 00 00 74 2c 8b 91 38 0b 00 00 <83> fa 02 75 21 48 8b 91 40 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 3c [ 309.293139][ C1] RSP: 0018:ffffc90001c968d0 EFLAGS: 00000246 [ 309.299324][ C1] RAX: ffffffff8489ed8a RBX: ffff888122ab6380 RCX: ffff88811d554f00 [ 309.307751][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000007ffffffe [ 309.315838][ C1] RBP: ffffc90001c968d0 R08: dffffc0000000000 R09: ffffed1024556c71 [ 309.324191][ C1] R10: ffffed1024556c71 R11: 1ffff11024556c70 R12: dffffc0000000000 [ 309.332269][ C1] R13: ffff888122ab6300 R14: 0000000000000004 R15: fffffffffffffc08 [ 309.340424][ C1] ? tipc_sk_lookup+0x51a/0x5f0 [ 309.345381][ C1] tipc_sk_lookup+0x51a/0x5f0 [ 309.350073][ C1] ? tipc_sk_rcv+0x2c60/0x2c60 [ 309.355109][ C1] ? tipc_sk_rcv+0x19f6/0x2c60 [ 309.360378][ C1] tipc_sk_rcv+0x3fe/0x2c60 [ 309.364890][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 309.371197][ C1] ? __stack_depot_save+0x442/0x480 [ 309.376624][ C1] ? kasan_set_track+0x5b/0x70 [ 309.381464][ C1] ? kasan_set_track+0x4a/0x70 [ 309.386465][ C1] ? kasan_set_free_info+0x23/0x40 [ 309.391667][ C1] ? ____kasan_slab_free+0x125/0x160 [ 309.397044][ C1] ? __kasan_slab_free+0x11/0x20 [ 309.402235][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 309.408045][ C1] ? kmem_cache_free+0x100/0x320 [ 309.413069][ C1] ? kfree_skbmem+0x10c/0x180 [ 309.417736][ C1] ? tipc_sk_rcv+0x1ce4/0x2c60 [ 309.422870][ C1] ? tipc_sk_filter_rcv+0x151b/0x2c40 [ 309.428419][ C1] ? tipc_release+0xd0b/0x1630 [ 309.433189][ C1] ? syscall_exit_to_user_mode+0x1a/0x30 [ 309.439036][ C1] ? do_syscall_64+0x58/0xa0 [ 309.443727][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 309.449881][ C1] ? __skb_queue_purge+0x170/0x170 [ 309.455179][ C1] tipc_node_xmit+0x256/0xce0 [ 309.459863][ C1] ? ____kasan_slab_free+0x130/0x160 [ 309.465153][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 309.470702][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 309.476342][ C1] ? kfree_skbmem+0x10c/0x180 [ 309.481021][ C1] ? kmem_cache_free+0x100/0x320 [ 309.486129][ C1] ? skb_release_data+0x814/0xa10 [ 309.491310][ C1] tipc_node_xmit_skb+0xe9/0x130 [ 309.496392][ C1] ? kfree_skb+0xc1/0x2f0 [ 309.501025][ C1] ? __skb_queue_purge+0x170/0x170 [ 309.506276][ C1] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 309.511907][ C1] tipc_sk_rcv+0x1d5d/0x2c60 [ 309.516599][ C1] ? kfree_skbmem+0x10c/0x180 [ 309.521382][ C1] ? __skb_queue_purge+0x170/0x170 [ 309.526780][ C1] tipc_node_xmit+0x256/0xce0 [ 309.531625][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 309.537172][ C1] ? __kernel_text_address+0xa0/0x100 [ 309.542539][ C1] ? unwind_get_return_address+0x4d/0x90 [ 309.548165][ C1] ? stack_trace_save+0xe0/0xe0 [ 309.553121][ C1] ? arch_stack_walk+0xee/0x140 [ 309.557980][ C1] tipc_sk_filter_rcv+0x151b/0x2c40 [ 309.563366][ C1] ? tipc_sk_publish+0x440/0x440 [ 309.568396][ C1] ? __kasan_check_write+0x14/0x20 [ 309.573504][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 309.578435][ C1] tipc_sk_rcv+0x7b7/0x2c60 [ 309.582931][ C1] ? kfree_skbmem+0x10c/0x180 [ 309.587871][ C1] ? skb_release_data+0x814/0xa10 [ 309.593157][ C1] ? __skb_queue_purge+0x170/0x170 [ 309.598262][ C1] ? tipc_sk_filter_rcv+0x29de/0x2c40 [ 309.603709][ C1] tipc_node_xmit+0x256/0xce0 [ 309.608372][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 309.614002][ C1] ? kasan_quarantine_put+0x34/0x190 [ 309.619484][ C1] tipc_node_distr_xmit+0x292/0x390 [ 309.624876][ C1] ? tipc_node_xmit_skb+0x130/0x130 [ 309.630066][ C1] ? kfree_skbmem+0x10c/0x180 [ 309.634875][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 309.640177][ C1] ? tipc_sk_timeout+0x970/0x970 [ 309.645393][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 309.651123][ C1] __release_sock+0x143/0x350 [ 309.655997][ C1] release_sock+0x60/0x1b0 [ 309.660691][ C1] tipc_release+0xd0b/0x1630 [ 309.665280][ C1] ? tipc_sock_destruct+0x180/0x180 [ 309.670471][ C1] sock_close+0xe0/0x270 [ 309.674852][ C1] ? sock_mmap+0xa0/0xa0 [ 309.679081][ C1] __fput+0x20b/0x8b0 [ 309.683076][ C1] ____fput+0x15/0x20 [ 309.687042][ C1] task_work_run+0x127/0x190 [ 309.691830][ C1] exit_to_user_mode_loop+0xd0/0xe0 [ 309.697138][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 309.702688][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 309.708344][ C1] do_syscall_64+0x58/0xa0 [ 309.713048][ C1] ? clear_bhb_loop+0x35/0x90 [ 309.718022][ C1] ? clear_bhb_loop+0x35/0x90 [ 309.722704][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 309.728590][ C1] RIP: 0033:0x7ff4b4e53da9 [ 309.733096][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 309.752880][ C1] RSP: 002b:00007ff4b49d50c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 309.761535][ C1] RAX: 0000000000000000 RBX: 00007ff4b4f81f80 RCX: 00007ff4b4e53da9 [ 309.769624][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 309.777598][ C1] RBP: 00007ff4b4ea047a R08: 0000000000000000 R09: 0000000000000000 [ 309.785905][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.794056][ C1] R13: 000000000000000b R14: 00007ff4b4f81f80 R15: 00007ffe599129c8 [ 309.802386][ C1] [ 309.805436][ C1] NMI backtrace for cpu 1 [ 309.809921][ C1] CPU: 1 PID: 5286 Comm: syz-executor.0 Not tainted 5.15.181-syzkaller-1080424-gf93c8b5a9e60 #0 [ 309.820688][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 309.830968][ C1] Call Trace: [ 309.834352][ C1] [ 309.837197][ C1] __dump_stack+0x21/0x30 [ 309.841528][ C1] dump_stack_lvl+0xee/0x150 [ 309.846125][ C1] ? show_regs_print_info+0x20/0x20 [ 309.851512][ C1] ? activate_task+0xa0/0xa0 [ 309.856329][ C1] dump_stack+0x15/0x20 [ 309.860714][ C1] nmi_cpu_backtrace+0x2b4/0x2c0 [ 309.865834][ C1] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 309.871987][ C1] ? __kasan_check_write+0x14/0x20 [ 309.877365][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 309.883024][ C1] ? _raw_spin_lock+0xe0/0xe0 [ 309.887696][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 309.894114][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 309.900372][ C1] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 309.906835][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 309.912907][ C1] rcu_dump_cpu_stacks+0x1c7/0x300 [ 309.918103][ C1] print_cpu_stall+0x320/0x600 [ 309.923029][ C1] rcu_sched_clock_irq+0x74a/0x12b0 [ 309.928217][ C1] ? rcu_boost_kthread_setaffinity+0x310/0x310 [ 309.934458][ C1] ? raise_softirq+0x71/0xe0 [ 309.939142][ C1] ? __raise_softirq_irqoff+0xd0/0xd0 [ 309.944623][ C1] ? hrtimer_run_queues+0x166/0x430 [ 309.950006][ C1] update_process_times+0x198/0x200 [ 309.955874][ C1] tick_sched_timer+0x17c/0x240 [ 309.960842][ C1] ? tick_setup_sched_timer+0x450/0x450 [ 309.966585][ C1] __hrtimer_run_queues+0x3b5/0x9e0 [ 309.971908][ C1] ? hrtimer_interrupt+0x8c0/0x8c0 [ 309.977120][ C1] ? ktime_get_update_offsets_now+0x2fa/0x310 [ 309.983291][ C1] hrtimer_interrupt+0x3c7/0x8c0 [ 309.988420][ C1] __sysvec_apic_timer_interrupt+0xfa/0x3e0 [ 309.994509][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 310.000150][ C1] [ 310.003293][ C1] [ 310.006246][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 310.012479][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60 [ 310.018897][ C1] Code: d0 cd 99 7e 65 8b 15 d1 cd 99 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 5c 0b 00 00 00 74 2c 8b 91 38 0b 00 00 <83> fa 02 75 21 48 8b 91 40 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 3c [ 310.040480][ C1] RSP: 0018:ffffc90001c968d0 EFLAGS: 00000246 [ 310.046728][ C1] RAX: ffffffff8489ed8a RBX: ffff888122ab6380 RCX: ffff88811d554f00 [ 310.055049][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000007ffffffe [ 310.063107][ C1] RBP: ffffc90001c968d0 R08: dffffc0000000000 R09: ffffed1024556c71 [ 310.071167][ C1] R10: ffffed1024556c71 R11: 1ffff11024556c70 R12: dffffc0000000000 [ 310.079149][ C1] R13: ffff888122ab6300 R14: 0000000000000004 R15: fffffffffffffc08 [ 310.087795][ C1] ? tipc_sk_lookup+0x51a/0x5f0 [ 310.092839][ C1] tipc_sk_lookup+0x51a/0x5f0 [ 310.098099][ C1] ? tipc_sk_rcv+0x2c60/0x2c60 [ 310.102890][ C1] ? tipc_sk_rcv+0x19f6/0x2c60 [ 310.107650][ C1] tipc_sk_rcv+0x3fe/0x2c60 [ 310.112437][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 310.118424][ C1] ? __stack_depot_save+0x442/0x480 [ 310.123700][ C1] ? kasan_set_track+0x5b/0x70 [ 310.128699][ C1] ? kasan_set_track+0x4a/0x70 [ 310.133654][ C1] ? kasan_set_free_info+0x23/0x40 [ 310.139385][ C1] ? ____kasan_slab_free+0x125/0x160 [ 310.144967][ C1] ? __kasan_slab_free+0x11/0x20 [ 310.150004][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 310.155675][ C1] ? kmem_cache_free+0x100/0x320 [ 310.160812][ C1] ? kfree_skbmem+0x10c/0x180 [ 310.165708][ C1] ? tipc_sk_rcv+0x1ce4/0x2c60 [ 310.170626][ C1] ? tipc_sk_filter_rcv+0x151b/0x2c40 [ 310.176369][ C1] ? tipc_release+0xd0b/0x1630 [ 310.181142][ C1] ? syscall_exit_to_user_mode+0x1a/0x30 [ 310.186771][ C1] ? do_syscall_64+0x58/0xa0 [ 310.191562][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 310.197687][ C1] ? __skb_queue_purge+0x170/0x170 [ 310.203067][ C1] tipc_node_xmit+0x256/0xce0 [ 310.207825][ C1] ? ____kasan_slab_free+0x130/0x160 [ 310.213108][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 310.218990][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 310.224661][ C1] ? kfree_skbmem+0x10c/0x180 [ 310.229419][ C1] ? kmem_cache_free+0x100/0x320 [ 310.234459][ C1] ? skb_release_data+0x814/0xa10 [ 310.239474][ C1] tipc_node_xmit_skb+0xe9/0x130 [ 310.244709][ C1] ? kfree_skb+0xc1/0x2f0 [ 310.249214][ C1] ? __skb_queue_purge+0x170/0x170 [ 310.254425][ C1] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 310.260011][ C1] tipc_sk_rcv+0x1d5d/0x2c60 [ 310.264714][ C1] ? kfree_skbmem+0x10c/0x180 [ 310.269642][ C1] ? __skb_queue_purge+0x170/0x170 [ 310.274944][ C1] tipc_node_xmit+0x256/0xce0 [ 310.279633][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 310.285449][ C1] ? __kernel_text_address+0xa0/0x100 [ 310.291021][ C1] ? unwind_get_return_address+0x4d/0x90 [ 310.297130][ C1] ? stack_trace_save+0xe0/0xe0 [ 310.302100][ C1] ? arch_stack_walk+0xee/0x140 [ 310.306967][ C1] tipc_sk_filter_rcv+0x151b/0x2c40 [ 310.312260][ C1] ? tipc_sk_publish+0x440/0x440 [ 310.317303][ C1] ? __kasan_check_write+0x14/0x20 [ 310.322724][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 310.328047][ C1] tipc_sk_rcv+0x7b7/0x2c60 [ 310.332732][ C1] ? kfree_skbmem+0x10c/0x180 [ 310.337440][ C1] ? skb_release_data+0x814/0xa10 [ 310.342652][ C1] ? __skb_queue_purge+0x170/0x170 [ 310.348067][ C1] ? tipc_sk_filter_rcv+0x29de/0x2c40 [ 310.353680][ C1] tipc_node_xmit+0x256/0xce0 [ 310.358716][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 310.364388][ C1] ? kasan_quarantine_put+0x34/0x190 [ 310.369778][ C1] tipc_node_distr_xmit+0x292/0x390 [ 310.375357][ C1] ? tipc_node_xmit_skb+0x130/0x130 [ 310.380731][ C1] ? kfree_skbmem+0x10c/0x180 [ 310.385825][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 310.390967][ C1] ? tipc_sk_timeout+0x970/0x970 [ 310.396534][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 310.402591][ C1] __release_sock+0x143/0x350 [ 310.407598][ C1] release_sock+0x60/0x1b0 [ 310.412375][ C1] tipc_release+0xd0b/0x1630 [ 310.417342][ C1] ? tipc_sock_destruct+0x180/0x180 [ 310.422646][ C1] sock_close+0xe0/0x270 [ 310.427216][ C1] ? sock_mmap+0xa0/0xa0 [ 310.431453][ C1] __fput+0x20b/0x8b0 [ 310.435517][ C1] ____fput+0x15/0x20 [ 310.439870][ C1] task_work_run+0x127/0x190 [ 310.445059][ C1] exit_to_user_mode_loop+0xd0/0xe0 [ 310.450418][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 310.456089][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 310.461946][ C1] do_syscall_64+0x58/0xa0 [ 310.466639][ C1] ? clear_bhb_loop+0x35/0x90 [ 310.471534][ C1] ? clear_bhb_loop+0x35/0x90 [ 310.476693][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 310.482739][ C1] RIP: 0033:0x7ff4b4e53da9 [ 310.487592][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 310.509249][ C1] RSP: 002b:00007ff4b49d50c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 310.519131][ C1] RAX: 0000000000000000 RBX: 00007ff4b4f81f80 RCX: 00007ff4b4e53da9 [ 310.528056][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 310.536391][ C1] RBP: 00007ff4b4ea047a R08: 0000000000000000 R09: 0000000000000000 [ 310.544635][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.553007][ C1] R13: 000000000000000b R14: 00007ff4b4f81f80 R15: 00007ffe599129c8 [ 310.561333][ C1] [ 353.220441][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 143s! [syz-executor.0:5285] [ 353.229191][ C0] Modules linked in: [ 353.233232][ C0] CPU: 0 PID: 5285 Comm: syz-executor.0 Not tainted 5.15.181-syzkaller-1080424-gf93c8b5a9e60 #0 [ 353.243751][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 353.254142][ C0] RIP: 0010:__pv_queued_spin_lock_slowpath+0x527/0x9c0 [ 353.261720][ C0] Code: 00 41 c6 45 00 00 48 8b 44 24 10 42 0f b6 04 38 84 c0 0f 85 1c 01 00 00 48 8b 44 24 08 c6 00 01 41 bd 00 80 ff ff eb 07 f3 90 <41> ff c5 74 47 43 0f b6 04 3e 84 c0 75 2b 80 3b 00 75 eb 48 89 df [ 353.281748][ C0] RSP: 0018:ffffc90001c879a0 EFLAGS: 00000206 [ 353.287915][ C0] RAX: 0000000000000000 RBX: ffff888122ab6388 RCX: ffffffff814f2599 [ 353.296073][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff888122ab6388 [ 353.304273][ C0] RBP: ffffc90001c87a90 R08: dffffc0000000000 R09: ffffed1024556c72 [ 353.312358][ C0] R10: ffffed1024556c72 R11: 1ffff11024556c71 R12: 1ffff1103ee00001 [ 353.320435][ C0] R13: 00000000ffffe074 R14: 1ffff11024556c71 R15: dffffc0000000000 [ 353.328688][ C0] FS: 0000555569cd1480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 353.338308][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.344994][ C0] CR2: 00007ff4b49b4d58 CR3: 0000000123faa000 CR4: 00000000003506b0 [ 353.353252][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 353.361412][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 353.369572][ C0] Call Trace: [ 353.373137][ C0] [ 353.376072][ C0] ? __pv_queued_spin_unlock_slowpath+0x300/0x300 [ 353.382526][ C0] ? unwind_get_return_address+0x4d/0x90 [ 353.388296][ C0] ? stack_trace_save+0xe0/0xe0 [ 353.393457][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 353.399373][ C0] _raw_spin_lock_bh+0xd8/0xe0 [ 353.404272][ C0] ? _raw_spin_lock_irq+0xe0/0xe0 [ 353.409403][ C0] ? stack_trace_save+0x98/0xe0 [ 353.414630][ C0] ? __stack_depot_save+0x34/0x480 [ 353.420082][ C0] lock_sock_nested+0x97/0x290 [ 353.424879][ C0] ? sock_init_data+0xc0/0xc0 [ 353.429768][ C0] ? __kasan_record_aux_stack+0xd2/0x100 [ 353.436243][ C0] ? kasan_record_aux_stack+0xe/0x10 [ 353.441889][ C0] ? task_work_add+0x27/0x1e0 [ 353.446672][ C0] ? fput_many+0xe7/0x1a0 [ 353.451202][ C0] ? fput+0x1a/0x20 [ 353.455148][ C0] ? filp_close+0x105/0x150 [ 353.459745][ C0] ? close_fd+0x70/0x80 [ 353.463915][ C0] ? __x64_sys_close+0x39/0x80 [ 353.468718][ C0] ? locks_remove_posix+0x520/0x520 [ 353.474031][ C0] tipc_release+0xb2/0x1630 [ 353.478628][ C0] ? rwsem_write_trylock+0x130/0x300 [ 353.483944][ C0] ? tipc_sock_destruct+0x180/0x180 [ 353.489256][ C0] sock_close+0xe0/0x270 [ 353.493590][ C0] ? sock_mmap+0xa0/0xa0 [ 353.498012][ C0] __fput+0x20b/0x8b0 [ 353.502004][ C0] ____fput+0x15/0x20 [ 353.506252][ C0] task_work_run+0x127/0x190 [ 353.510862][ C0] exit_to_user_mode_loop+0xd0/0xe0 [ 353.516237][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 353.521871][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 353.527436][ C0] do_syscall_64+0x58/0xa0 [ 353.532036][ C0] ? clear_bhb_loop+0x35/0x90 [ 353.536808][ C0] ? clear_bhb_loop+0x35/0x90 [ 353.541582][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 353.547572][ C0] RIP: 0033:0x7ff4b4e52c9a [ 353.552056][ C0] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 353.572112][ C0] RSP: 002b:00007ffe59912a90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 353.580708][ C0] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007ff4b4e52c9a [ 353.589155][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 353.597140][ C0] RBP: 00007ff4b4f83980 R08: 0000001b30260000 R09: 002621dc751687d0 [ 353.605475][ C0] R10: 0000006c804437a8 R11: 0000000000000293 R12: 00000000000332ea [ 353.613537][ C0] R13: ffffffffffffffff R14: 00007ff4b49d6000 R15: 0000000000032fa9 [ 353.621705][ C0] [ 353.624838][ C0] Sending NMI from CPU 0 to CPUs 1: [ 353.630277][ C1] NMI backtrace for cpu 1 [ 353.630292][ C1] CPU: 1 PID: 5286 Comm: syz-executor.0 Not tainted 5.15.181-syzkaller-1080424-gf93c8b5a9e60 #0 [ 353.630311][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 353.630327][ C1] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x10/0x17 [ 353.630355][ C1] Code: 41 51 41 52 41 53 e8 3b 08 00 00 41 5b 41 5a 41 59 41 58 5f 5e 5a 59 5d c3 90 55 48 89 e5 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <3c> 01 75 03 5a 5d c3 56 0f b6 f0 e8 bc ff ff ff 5e 5a 5d c3 0f 1f [ 353.630369][ C1] RSP: 0018:ffffc90001c969b0 EFLAGS: 00000246 [ 353.630385][ C1] RAX: 0000000000000001 RBX: ffff888118f16000 RCX: dffffc0000000000 [ 353.630397][ C1] RDX: 0000000000000000 RSI: 000000006239fe02 RDI: ffffc90001c96e34 [ 353.630416][ C1] RBP: ffffc90001c969b8 R08: 0000000000000004 R09: 0000000000000003 [ 353.630427][ C1] R10: fffff52000392d2c R11: 1ffff92000392d2c R12: ffff8881071c3000 [ 353.630439][ C1] R13: dffffc0000000000 R14: ffffc90001c96e20 R15: 000000006239fe02 [ 353.630452][ C1] FS: 00007ff4b49d56c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 353.630467][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.630479][ C1] CR2: 00007ff4b49b4d58 CR3: 0000000123faa000 CR4: 00000000003506a0 [ 353.630494][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 353.630503][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 353.630514][ C1] Call Trace: [ 353.630519][ C1] [ 353.630526][ C1] _raw_spin_unlock_bh+0x41/0x60 [ 353.630546][ C1] tipc_sk_rcv+0x3f3/0x2c60 [ 353.630562][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 353.630580][ C1] ? __stack_depot_save+0x442/0x480 [ 353.630600][ C1] ? kasan_set_track+0x5b/0x70 [ 353.630614][ C1] ? kasan_set_track+0x4a/0x70 [ 353.630628][ C1] ? kasan_set_free_info+0x23/0x40 [ 353.630643][ C1] ? ____kasan_slab_free+0x125/0x160 [ 353.630659][ C1] ? __kasan_slab_free+0x11/0x20 [ 353.630681][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 353.630703][ C1] ? kmem_cache_free+0x100/0x320 [ 353.630720][ C1] ? kfree_skbmem+0x10c/0x180 [ 353.630735][ C1] ? tipc_sk_rcv+0x1ce4/0x2c60 [ 353.630749][ C1] ? tipc_sk_filter_rcv+0x151b/0x2c40 [ 353.630766][ C1] ? tipc_release+0xd0b/0x1630 [ 353.630782][ C1] ? syscall_exit_to_user_mode+0x1a/0x30 [ 353.630799][ C1] ? do_syscall_64+0x58/0xa0 [ 353.630816][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 353.630836][ C1] ? __skb_queue_purge+0x170/0x170 [ 353.630855][ C1] tipc_node_xmit+0x256/0xce0 [ 353.630870][ C1] ? ____kasan_slab_free+0x130/0x160 [ 353.630886][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 353.630900][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 353.630919][ C1] ? kfree_skbmem+0x10c/0x180 [ 353.630932][ C1] ? kmem_cache_free+0x100/0x320 [ 353.630949][ C1] ? skb_release_data+0x814/0xa10 [ 353.630964][ C1] tipc_node_xmit_skb+0xe9/0x130 [ 353.630978][ C1] ? kfree_skb+0xc1/0x2f0 [ 353.630992][ C1] ? __skb_queue_purge+0x170/0x170 [ 353.631007][ C1] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 353.631023][ C1] tipc_sk_rcv+0x1d5d/0x2c60 [ 353.631040][ C1] ? kfree_skbmem+0x10c/0x180 [ 353.631057][ C1] ? __skb_queue_purge+0x170/0x170 [ 353.631077][ C1] tipc_node_xmit+0x256/0xce0 [ 353.631092][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 353.631107][ C1] ? __kernel_text_address+0xa0/0x100 [ 353.631123][ C1] ? unwind_get_return_address+0x4d/0x90 [ 353.631142][ C1] ? stack_trace_save+0xe0/0xe0 [ 353.631158][ C1] ? arch_stack_walk+0xee/0x140 [ 353.631178][ C1] tipc_sk_filter_rcv+0x151b/0x2c40 [ 353.631201][ C1] ? tipc_sk_publish+0x440/0x440 [ 353.631217][ C1] ? __kasan_check_write+0x14/0x20 [ 353.631233][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 353.631252][ C1] tipc_sk_rcv+0x7b7/0x2c60 [ 353.631269][ C1] ? kfree_skbmem+0x10c/0x180 [ 353.631283][ C1] ? skb_release_data+0x814/0xa10 [ 353.631299][ C1] ? __skb_queue_purge+0x170/0x170 [ 353.631316][ C1] ? tipc_sk_filter_rcv+0x29de/0x2c40 [ 353.631333][ C1] tipc_node_xmit+0x256/0xce0 [ 353.631348][ C1] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 353.631365][ C1] ? kasan_quarantine_put+0x34/0x190 [ 353.631382][ C1] tipc_node_distr_xmit+0x292/0x390 [ 353.631399][ C1] ? tipc_node_xmit_skb+0x130/0x130 [ 353.631492][ C1] ? kfree_skbmem+0x10c/0x180 [ 353.631506][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 353.631522][ C1] ? tipc_sk_timeout+0x970/0x970 [ 353.631537][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 353.631557][ C1] __release_sock+0x143/0x350 [ 353.631576][ C1] release_sock+0x60/0x1b0 [ 353.631591][ C1] tipc_release+0xd0b/0x1630 [ 353.631608][ C1] ? tipc_sock_destruct+0x180/0x180 [ 353.631626][ C1] sock_close+0xe0/0x270 [ 353.631641][ C1] ? sock_mmap+0xa0/0xa0 [ 353.631656][ C1] __fput+0x20b/0x8b0 [ 353.631673][ C1] ____fput+0x15/0x20 [ 353.631687][ C1] task_work_run+0x127/0x190 [ 353.631702][ C1] exit_to_user_mode_loop+0xd0/0xe0 [ 353.631717][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 353.631733][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 353.631748][ C1] do_syscall_64+0x58/0xa0 [ 353.631765][ C1] ? clear_bhb_loop+0x35/0x90 [ 353.631779][ C1] ? clear_bhb_loop+0x35/0x90 [ 353.631794][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 353.631813][ C1] RIP: 0033:0x7ff4b4e53da9 [ 353.631828][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 353.631841][ C1] RSP: 002b:00007ff4b49d50c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 353.631858][ C1] RAX: 0000000000000000 RBX: 00007ff4b4f81f80 RCX: 00007ff4b4e53da9 [ 353.631869][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 353.631878][ C1] RBP: 00007ff4b4ea047a R08: 0000000000000000 R09: 0000000000000000 [ 353.631888][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.631898][ C1] R13: 000000000000000b R14: 00007ff4b4f81f80 R15: 00007ffe599129c8 [ 353.631911][ C1]