Warning: Permanently added '10.128.0.173' (ED25519) to the list of known hosts. 2025/05/16 10:59:22 ignoring optional flag "sandboxArg"="0" 2025/05/16 10:59:22 ignoring optional flag "type"="gce" 2025/05/16 10:59:23 parsed 1 programs [ 46.069502][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 46.069516][ T28] audit: type=1400 audit(1747393163.106:92): avc: denied { unlink } for pid=323 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2025/05/16 10:59:23 executed programs: 0 [ 46.115662][ T323] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.175985][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.183084][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.190750][ T329] device bridge_slave_0 entered promiscuous mode [ 46.197583][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.204659][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.212217][ T329] device bridge_slave_1 entered promiscuous mode [ 46.263661][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.270749][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.277993][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.285040][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.306292][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.313898][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.321340][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.328821][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.337989][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.346362][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.353484][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.362695][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.371054][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.378116][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.390938][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.400585][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.415106][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.427173][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.435699][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.443497][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.452114][ T329] device veth0_vlan entered promiscuous mode [ 46.463218][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.472935][ T329] device veth1_macvtap entered promiscuous mode [ 46.482684][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.493429][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.515551][ T28] audit: type=1400 audit(1747393163.546:93): avc: denied { create } for pid=333 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.537755][ T28] audit: type=1400 audit(1747393163.546:94): avc: denied { setopt } for pid=333 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.557619][ T28] audit: type=1400 audit(1747393163.576:95): avc: denied { write } for pid=333 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 2025/05/16 10:59:28 executed programs: 563 2025/05/16 10:59:33 executed programs: 1207 2025/05/16 10:59:38 executed programs: 1834 [ 165.198863][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 165.205562][ C0] rcu: 0-...!: (9999 ticks this GP) idle=3674/1/0x4000000000000000 softirq=13942/13942 fqs=0 [ 165.216003][ C0] (t=10001 jiffies g=9717 q=362 ncpus=2) [ 165.221734][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10001 jiffies! g9717 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 165.234183][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=1578 [ 165.241986][ C0] rcu: rcu_preempt kthread starved for 10004 jiffies! g9717 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 165.253451][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 165.263428][ C0] rcu: RCU grace-period kthread stack dump: [ 165.269330][ C0] task:rcu_preempt state:I stack:28528 pid:14 ppid:2 flags:0x00004000 [ 165.278742][ C0] Call Trace: [ 165.282288][ C0] [ 165.285236][ C0] __schedule+0xb87/0x14e0 [ 165.289689][ C0] ? release_firmware_map_entry+0x194/0x194 [ 165.295613][ C0] ? __mod_timer+0x7ae/0xb30 [ 165.300219][ C0] schedule+0xbd/0x170 [ 165.304485][ C0] schedule_timeout+0x12c/0x2e0 [ 165.309341][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 165.314808][ C0] ? __cfi_process_timeout+0x10/0x10 [ 165.320202][ C0] ? prepare_to_swait_event+0x308/0x320 [ 165.325876][ C0] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 165.330835][ C0] ? rcu_gp_init+0xf10/0xf10 [ 165.335444][ C0] rcu_gp_kthread+0x95/0x370 [ 165.340133][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 165.345344][ C0] ? __kasan_check_read+0x11/0x20 [ 165.350383][ C0] ? __kthread_parkme+0x142/0x180 [ 165.355424][ C0] kthread+0x281/0x320 [ 165.359514][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 165.364740][ C0] ? __cfi_kthread+0x10/0x10 [ 165.369340][ C0] ret_from_fork+0x1f/0x30 [ 165.373771][ C0] [ 165.376796][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 165.383352][ C0] Sending NMI from CPU 0 to CPUs 1: [ 165.388672][ C1] NMI backtrace for cpu 1 [ 165.388698][ C1] CPU: 1 PID: 7371 Comm: syz-executor.0 Not tainted 6.1.134-syzkaller-1169264-ga0fa2316cce1 #0 [ 165.388718][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 165.388731][ C1] RIP: 0010:kasan_check_range+0x6c/0x290 [ 165.388758][ C1] Code: c1 eb 03 49 b8 00 00 00 00 00 fc ff df 4f 8d 0c 03 48 8d 5c 37 ff 48 c1 eb 03 4e 8d 14 3b 4d 89 d6 4d 29 ce 49 83 fe 10 7f 26 <4d> 85 f6 0f 84 39 01 00 00 48 f7 d3 4c 01 db 41 80 39 00 0f 85 c2 [ 165.388773][ C1] RSP: 0018:ffffc9000458e708 EFLAGS: 00000283 [ 165.388789][ C1] RAX: 0000000000000001 RBX: 1ffff11022164950 RCX: ffffffff84c8c0db [ 165.388801][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888110b24a80 [ 165.388812][ C1] RBP: ffffc9000458e720 R08: dffffc0000000000 R09: ffffed1022164950 [ 165.388824][ C1] R10: ffffed1022164951 R11: 1ffff11022164950 R12: ffff888110b24a00 [ 165.388841][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: dffffc0000000001 [ 165.388853][ C1] FS: 00007f57371826c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 165.388868][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.388879][ C1] CR2: 00007f5737161d58 CR3: 0000000129559000 CR4: 00000000003506a0 [ 165.388894][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 165.388903][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 165.388914][ C1] Call Trace: [ 165.388920][ C1] [ 165.388927][ C1] __kasan_check_write+0x14/0x20 [ 165.388951][ C1] tipc_sk_rcv+0x1abb/0x2cc0 [ 165.388970][ C1] ? __free_pages+0x67/0x100 [ 165.388987][ C1] ? free_pages+0x82/0x90 [ 165.389006][ C1] ? __stack_depot_save+0x457/0x480 [ 165.389031][ C1] ? kasan_set_track+0x60/0x70 [ 165.389045][ C1] ? kasan_set_track+0x4b/0x70 [ 165.389059][ C1] ? ____kasan_slab_free+0x132/0x180 [ 165.389076][ C1] ? tipc_node_xmit+0x257/0xd00 [ 165.389092][ C1] ? tipc_sk_backlog_rcv+0x16f/0x1f0 [ 165.389113][ C1] ? __release_sock+0x154/0x380 [ 165.389137][ C1] ? sockopt_release_sock+0x95/0x1f0 [ 165.389158][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 165.389176][ C1] ? do_syscall_64+0x4c/0xa0 [ 165.389197][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.389227][ C1] tipc_node_xmit+0x257/0xd00 [ 165.389243][ C1] ? kasan_quarantine_put+0x34/0x190 [ 165.389267][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 165.389282][ C1] ? ____kasan_slab_free+0x13d/0x180 [ 165.389299][ C1] ? __kasan_slab_free+0x11/0x20 [ 165.389315][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 165.389337][ C1] ? kfree_skbmem+0x10c/0x180 [ 165.389357][ C1] tipc_node_distr_xmit+0x292/0x390 [ 165.389375][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 165.389394][ C1] tipc_sk_rcv+0x1aa3/0x2cc0 [ 165.389419][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 165.389441][ C1] tipc_node_xmit+0x257/0xd00 [ 165.389458][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 165.389477][ C1] tipc_sk_push_backlog+0x4dd/0x790 [ 165.389499][ C1] tipc_sk_proto_rcv+0x98d/0x1580 [ 165.389527][ C1] ? tipc_sk_filter_rcv+0x2c80/0x2c80 [ 165.389547][ C1] ? unwind_get_return_address+0x4d/0x90 [ 165.389566][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 165.389586][ C1] ? arch_stack_walk+0xa0/0x150 [ 165.389612][ C1] tipc_sk_filter_rcv+0x2a93/0x2c80 [ 165.389632][ C1] ? stack_trace_save+0x98/0xe0 [ 165.389651][ C1] ? __stack_depot_save+0x36/0x480 [ 165.389673][ C1] ? ____kasan_slab_free+0x132/0x180 [ 165.389689][ C1] ? __kasan_slab_free+0x11/0x20 [ 165.389704][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 165.389725][ C1] ? __kmem_cache_free+0xb7/0x1b0 [ 165.389744][ C1] ? kasan_set_track+0x60/0x70 [ 165.389758][ C1] ? kasan_set_track+0x4b/0x70 [ 165.389773][ C1] ? kasan_save_free_info+0x31/0x50 [ 165.389794][ C1] ? ____kasan_slab_free+0x132/0x180 [ 165.389811][ C1] ? __kasan_slab_free+0x11/0x20 [ 165.389826][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 165.389847][ C1] ? kmem_cache_free+0x12d/0x300 [ 165.389865][ C1] ? kfree_skbmem+0x10c/0x180 [ 165.389884][ C1] ? kfree_skb_reason+0xdc/0x230 [ 165.389903][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 165.389920][ C1] ? tipc_sk_filter_rcv+0xbf3/0x2c80 [ 165.389940][ C1] ? tipc_sk_backlog_rcv+0x109/0x1f0 [ 165.389961][ C1] ? __release_sock+0x154/0x380 [ 165.389984][ C1] ? sk_setsockopt+0x1355/0x2590 [ 165.390005][ C1] ? sock_setsockopt+0x5a/0x70 [ 165.390026][ C1] ? __x64_sys_setsockopt+0xbf/0xd0 [ 165.390049][ C1] ? x64_sys_call+0x124/0x9a0 [ 165.390068][ C1] ? do_syscall_64+0x4c/0xa0 [ 165.390089][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.390115][ C1] ? tipc_sk_publish+0x440/0x440 [ 165.390136][ C1] ? __kasan_check_write+0x14/0x20 [ 165.390158][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 165.390181][ C1] tipc_sk_rcv+0x7d9/0x2cc0 [ 165.390205][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 165.390223][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 165.390243][ C1] ? tipc_sk_filter_rcv+0x2a1c/0x2c80 [ 165.390265][ C1] tipc_node_xmit+0x257/0xd00 [ 165.390282][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 165.390301][ C1] tipc_node_distr_xmit+0x292/0x390 [ 165.390319][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 165.390336][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 165.390355][ C1] ? __pv_queued_spin_lock_slowpath+0x889/0xc40 [ 165.390380][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 165.390402][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 165.390425][ C1] __release_sock+0x154/0x380 [ 165.390451][ C1] sockopt_release_sock+0x95/0x1f0 [ 165.390473][ C1] sk_setsockopt+0x1355/0x2590 [ 165.390495][ C1] ? __cfi_sk_setsockopt+0x10/0x10 [ 165.390521][ C1] ? security_file_alloc+0x33/0x130 [ 165.390539][ C1] ? selinux_socket_setsockopt+0x21c/0x300 [ 165.390562][ C1] ? memcpy+0x56/0x70 [ 165.390584][ C1] ? __fget_files+0x2d5/0x330 [ 165.390609][ C1] sock_setsockopt+0x5a/0x70 [ 165.390630][ C1] __sys_setsockopt+0x270/0x4e0 [ 165.390653][ C1] ? __cfi___sys_setsockopt+0x10/0x10 [ 165.390676][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 165.390694][ C1] ? xfd_validate_state+0x70/0x150 [ 165.390716][ C1] ? __kasan_check_write+0x14/0x20 [ 165.390738][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 165.390757][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 165.390782][ C1] x64_sys_call+0x124/0x9a0 [ 165.390800][ C1] do_syscall_64+0x4c/0xa0 [ 165.390821][ C1] ? clear_bhb_loop+0x15/0x70 [ 165.390836][ C1] ? clear_bhb_loop+0x15/0x70 [ 165.390851][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.390875][ C1] RIP: 0033:0x7f573647dca9 [ 165.390900][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 165.390912][ C1] RSP: 002b:00007f57371820c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 165.390928][ C1] RAX: ffffffffffffffda RBX: 00007f57365abf80 RCX: 00007f573647dca9 [ 165.390941][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 165.390950][ C1] RBP: 00007f57364c947e R08: 0000000000000004 R09: 0000000000000000 [ 165.390960][ C1] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 165.390970][ C1] R13: 000000000000000b R14: 00007f57365abf80 R15: 00007ffcc33a1148 [ 165.390984][ C1] [ 165.391704][ C0] CPU: 0 PID: 7372 Comm: syz-executor.0 Not tainted 6.1.134-syzkaller-1169264-ga0fa2316cce1 #0 [ 166.111317][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 166.121484][ C0] RIP: 0010:kvm_wait+0xf2/0x140 [ 166.126534][ C0] Code: b7 13 04 f4 eb 9a fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d f0 b6 13 04 fb f4 71 ff ff ff fb e9 6b ff ff ff e8 4e 77 b4 03 89 f9 80 e1 07 38 [ 166.146149][ C0] RSP: 0018:ffffc900045a7680 EFLAGS: 00000246 [ 166.152233][ C0] RAX: 0000000000000003 RBX: ffff888110b24a98 RCX: ffffffff84efc682 [ 166.160231][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888110b24a98 [ 166.168474][ C0] RBP: ffffc900045a7710 R08: dffffc0000000000 R09: ffffed1022164954 [ 166.176642][ C0] R10: ffffed1022164954 R11: 1ffff11022164953 R12: 1ffff1103ee00001 [ 166.184634][ C0] R13: ffff8881f7038bd4 R14: dffffc0000000000 R15: 1ffff920008b4ed0 [ 166.192618][ C0] FS: 00007f57371616c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 166.201638][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.208317][ C0] CR2: 00007ffcc33a1308 CR3: 0000000129559000 CR4: 00000000003506b0 [ 166.216295][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 166.224802][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 166.232803][ C0] Call Trace: [ 166.236096][ C0] [ 166.239031][ C0] ? __cfi_kvm_wait+0x10/0x10 [ 166.243759][ C0] ? pv_hash+0x86/0x150 [ 166.247929][ C0] __pv_queued_spin_lock_slowpath+0x690/0xc40 [ 166.254137][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 166.260838][ C0] ? avc_has_perm+0x158/0x240 [ 166.265888][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 166.271364][ C0] _raw_spin_lock_bh+0xd8/0xe0 [ 166.276248][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 166.281760][ C0] lock_sock_nested+0x92/0x280 [ 166.286551][ C0] ? __cfi_lock_sock_nested+0x10/0x10 [ 166.291969][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 166.296928][ C0] ? _raw_spin_unlock_bh+0x50/0x60 [ 166.302111][ C0] tipc_sendstream+0x47/0x70 [ 166.306719][ C0] ? __cfi_tipc_sendstream+0x10/0x10 [ 166.312027][ C0] ____sys_sendmsg+0x5a9/0x990 [ 166.316897][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 166.321950][ C0] ? import_iovec+0x7c/0xb0 [ 166.326549][ C0] ___sys_sendmsg+0x21c/0x290 [ 166.331327][ C0] ? __sys_sendmsg+0x270/0x270 [ 166.336123][ C0] ? __fdget+0x19c/0x220 [ 166.340601][ C0] __x64_sys_sendmsg+0x1f0/0x2c0 [ 166.345584][ C0] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 166.351074][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 166.357328][ C0] x64_sys_call+0x171/0x9a0 [ 166.362048][ C0] do_syscall_64+0x4c/0xa0 [ 166.366493][ C0] ? clear_bhb_loop+0x15/0x70 [ 166.371198][ C0] ? clear_bhb_loop+0x15/0x70 [ 166.375889][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.381972][ C0] RIP: 0033:0x7f573647dca9 [ 166.386482][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 166.406095][ C0] RSP: 002b:00007f57371610c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.414623][ C0] RAX: ffffffffffffffda RBX: 00007f57365ac050 RCX: 00007f573647dca9 [ 166.422690][ C0] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 166.430952][ C0] RBP: 00007f57364c947e R08: 0000000000000000 R09: 0000000000000000 [ 166.438942][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.446925][ C0] R13: 000000000000000b R14: 00007f57365ac050 R15: 00007ffcc33a1148 [ 166.455024][ C0] [ 309.126823][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 245s! [syz-executor.0:7372] [ 309.135506][ C0] Modules linked in: [ 309.139459][ C0] CPU: 0 PID: 7372 Comm: syz-executor.0 Not tainted 6.1.134-syzkaller-1169264-ga0fa2316cce1 #0 [ 309.150054][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 309.160137][ C0] RIP: 0010:kvm_wait+0xf2/0x140 [ 309.165031][ C0] Code: b7 13 04 f4 eb 9a fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 40 38 f0 75 10 66 90 0f 00 2d f0 b6 13 04 fb f4 71 ff ff ff fb e9 6b ff ff ff e8 4e 77 b4 03 89 f9 80 e1 07 38 [ 309.184818][ C0] RSP: 0018:ffffc900045a7680 EFLAGS: 00000246 [ 309.190905][ C0] RAX: 0000000000000003 RBX: ffff888110b24a98 RCX: ffffffff84efc682 [ 309.198974][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888110b24a98 [ 309.207125][ C0] RBP: ffffc900045a7710 R08: dffffc0000000000 R09: ffffed1022164954 [ 309.215106][ C0] R10: ffffed1022164954 R11: 1ffff11022164953 R12: 1ffff1103ee00001 [ 309.223095][ C0] R13: ffff8881f7038bd4 R14: dffffc0000000000 R15: 1ffff920008b4ed0 [ 309.231073][ C0] FS: 00007f57371616c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 309.240012][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.246623][ C0] CR2: 00007ffcc33a1308 CR3: 0000000129559000 CR4: 00000000003506b0 [ 309.254619][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 309.262598][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.270580][ C0] Call Trace: [ 309.273884][ C0] [ 309.276832][ C0] ? __cfi_kvm_wait+0x10/0x10 [ 309.281525][ C0] ? __pv_queued_spin_lock_slowpath+0x632/0xc40 [ 309.287787][ C0] __pv_queued_spin_lock_slowpath+0x690/0xc40 [ 309.293875][ C0] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 309.300478][ C0] ? avc_has_perm+0x158/0x240 [ 309.305359][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 309.310861][ C0] _raw_spin_lock_bh+0xd8/0xe0 [ 309.315644][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 309.321130][ C0] lock_sock_nested+0x92/0x280 [ 309.325916][ C0] ? __cfi_lock_sock_nested+0x10/0x10 [ 309.331289][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 309.336244][ C0] ? _raw_spin_unlock_bh+0x50/0x60 [ 309.341381][ C0] tipc_sendstream+0x47/0x70 [ 309.345981][ C0] ? __cfi_tipc_sendstream+0x10/0x10 [ 309.351369][ C0] ____sys_sendmsg+0x5a9/0x990 [ 309.356242][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 309.361284][ C0] ? import_iovec+0x7c/0xb0 [ 309.365826][ C0] ___sys_sendmsg+0x21c/0x290 [ 309.370528][ C0] ? __sys_sendmsg+0x270/0x270 [ 309.375490][ C0] ? __fdget+0x19c/0x220 [ 309.379779][ C0] __x64_sys_sendmsg+0x1f0/0x2c0 [ 309.384818][ C0] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 309.390305][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 309.396476][ C0] x64_sys_call+0x171/0x9a0 [ 309.401001][ C0] do_syscall_64+0x4c/0xa0 [ 309.405521][ C0] ? clear_bhb_loop+0x15/0x70 [ 309.410324][ C0] ? clear_bhb_loop+0x15/0x70 [ 309.415029][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.420937][ C0] RIP: 0033:0x7f573647dca9 [ 309.425441][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 309.445143][ C0] RSP: 002b:00007f57371610c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.453681][ C0] RAX: ffffffffffffffda RBX: 00007f57365ac050 RCX: 00007f573647dca9 [ 309.461659][ C0] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 309.469633][ C0] RBP: 00007f57364c947e R08: 0000000000000000 R09: 0000000000000000 [ 309.477608][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.485589][ C0] R13: 000000000000000b R14: 00007f57365ac050 R15: 00007ffcc33a1148 [ 309.493576][ C0] [ 309.496613][ C0] Sending NMI from CPU 0 to CPUs 1: [ 309.501829][ C1] NMI backtrace for cpu 1 [ 309.501839][ C1] CPU: 1 PID: 7371 Comm: syz-executor.0 Not tainted 6.1.134-syzkaller-1169264-ga0fa2316cce1 #0 [ 309.501857][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 309.501866][ C1] RIP: 0010:tipc_sk_rcv+0x1aca/0x2cc0 [ 309.501892][ C1] Code: 06 ff ff 48 8b 7c 24 70 48 83 ef 80 48 89 7c 24 70 be 04 00 00 00 e8 e5 7a eb fc bb ff ff ff ff f0 41 0f c1 9c 24 80 00 00 00 01 00 00 00 89 de e8 fa 29 a7 fc 83 fb 01 75 0f e8 d0 25 a7 fc [ 309.501905][ C1] RSP: 0018:ffffc9000458e740 EFLAGS: 00000213 [ 309.501920][ C1] RAX: 0000000000000001 RBX: 0000000000000005 RCX: ffffffff84c8c0db [ 309.501931][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888110b24a80 [ 309.501941][ C1] RBP: ffffc9000458e9d0 R08: dffffc0000000000 R09: ffffed1022164951 [ 309.501954][ C1] R10: ffffed1022164951 R11: 1ffff11022164950 R12: ffff888110b24a00 [ 309.501966][ C1] R13: dffffc0000000000 R14: ffffc9000458ebc0 R15: 000000001b1f3b13 [ 309.501978][ C1] FS: 00007f57371826c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 309.501993][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.502004][ C1] CR2: 00007f5737161d58 CR3: 0000000129559000 CR4: 00000000003506a0 [ 309.502019][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 309.502028][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.502038][ C1] Call Trace: [ 309.502043][ C1] [ 309.502049][ C1] ? __free_pages+0x67/0x100 [ 309.502068][ C1] ? free_pages+0x82/0x90 [ 309.502087][ C1] ? __stack_depot_save+0x457/0x480 [ 309.502112][ C1] ? kasan_set_track+0x60/0x70 [ 309.502127][ C1] ? kasan_set_track+0x4b/0x70 [ 309.502141][ C1] ? ____kasan_slab_free+0x132/0x180 [ 309.502158][ C1] ? tipc_node_xmit+0x257/0xd00 [ 309.502174][ C1] ? tipc_sk_backlog_rcv+0x16f/0x1f0 [ 309.502195][ C1] ? __release_sock+0x154/0x380 [ 309.502219][ C1] ? sockopt_release_sock+0x95/0x1f0 [ 309.502240][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 309.502258][ C1] ? do_syscall_64+0x4c/0xa0 [ 309.502279][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.502310][ C1] tipc_node_xmit+0x257/0xd00 [ 309.502326][ C1] ? kasan_quarantine_put+0x34/0x190 [ 309.502351][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 309.502366][ C1] ? ____kasan_slab_free+0x13d/0x180 [ 309.502383][ C1] ? __kasan_slab_free+0x11/0x20 [ 309.502399][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 309.502422][ C1] ? kfree_skbmem+0x10c/0x180 [ 309.502442][ C1] tipc_node_distr_xmit+0x292/0x390 [ 309.502460][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 309.502479][ C1] tipc_sk_rcv+0x1aa3/0x2cc0 [ 309.502504][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 309.502526][ C1] tipc_node_xmit+0x257/0xd00 [ 309.502543][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 309.502569][ C1] tipc_sk_push_backlog+0x4dd/0x790 [ 309.502591][ C1] tipc_sk_proto_rcv+0x98d/0x1580 [ 309.502613][ C1] ? tipc_sk_filter_rcv+0x2c80/0x2c80 [ 309.502638][ C1] ? unwind_get_return_address+0x4d/0x90 [ 309.502657][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 309.502678][ C1] ? arch_stack_walk+0xa0/0x150 [ 309.502704][ C1] tipc_sk_filter_rcv+0x2a93/0x2c80 [ 309.502724][ C1] ? stack_trace_save+0x98/0xe0 [ 309.502743][ C1] ? __stack_depot_save+0x36/0x480 [ 309.502765][ C1] ? ____kasan_slab_free+0x132/0x180 [ 309.502781][ C1] ? __kasan_slab_free+0x11/0x20 [ 309.502796][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 309.502835][ C1] ? __kmem_cache_free+0xb7/0x1b0 [ 309.502858][ C1] ? kasan_set_track+0x60/0x70 [ 309.502877][ C1] ? kasan_set_track+0x4b/0x70 [ 309.502891][ C1] ? kasan_save_free_info+0x31/0x50 [ 309.502912][ C1] ? ____kasan_slab_free+0x132/0x180 [ 309.502928][ C1] ? __kasan_slab_free+0x11/0x20 [ 309.502943][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 309.502964][ C1] ? kmem_cache_free+0x12d/0x300 [ 309.502982][ C1] ? kfree_skbmem+0x10c/0x180 [ 309.503001][ C1] ? kfree_skb_reason+0xdc/0x230 [ 309.503020][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 309.503037][ C1] ? tipc_sk_filter_rcv+0xbf3/0x2c80 [ 309.503057][ C1] ? tipc_sk_backlog_rcv+0x109/0x1f0 [ 309.503078][ C1] ? __release_sock+0x154/0x380 [ 309.503101][ C1] ? sk_setsockopt+0x1355/0x2590 [ 309.503122][ C1] ? sock_setsockopt+0x5a/0x70 [ 309.503142][ C1] ? __x64_sys_setsockopt+0xbf/0xd0 [ 309.503165][ C1] ? x64_sys_call+0x124/0x9a0 [ 309.503185][ C1] ? do_syscall_64+0x4c/0xa0 [ 309.503205][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.503232][ C1] ? tipc_sk_publish+0x440/0x440 [ 309.503253][ C1] ? __kasan_check_write+0x14/0x20 [ 309.503275][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 309.503297][ C1] tipc_sk_rcv+0x7d9/0x2cc0 [ 309.503322][ C1] ? tipc_msg_reverse+0x6db/0x940 [ 309.503340][ C1] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 309.503361][ C1] ? tipc_sk_filter_rcv+0x2a1c/0x2c80 [ 309.503383][ C1] tipc_node_xmit+0x257/0xd00 [ 309.503400][ C1] ? __cfi_tipc_node_xmit+0x10/0x10 [ 309.503419][ C1] tipc_node_distr_xmit+0x292/0x390 [ 309.503437][ C1] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 309.503454][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 309.503473][ C1] ? __pv_queued_spin_lock_slowpath+0x889/0xc40 [ 309.503499][ C1] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 309.503520][ C1] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 309.503544][ C1] __release_sock+0x154/0x380 [ 309.503575][ C1] sockopt_release_sock+0x95/0x1f0 [ 309.503596][ C1] sk_setsockopt+0x1355/0x2590 [ 309.503618][ C1] ? __cfi_sk_setsockopt+0x10/0x10 [ 309.503638][ C1] ? security_file_alloc+0x33/0x130 [ 309.503657][ C1] ? selinux_socket_setsockopt+0x21c/0x300 [ 309.503680][ C1] ? memcpy+0x56/0x70 [ 309.503703][ C1] ? __fget_files+0x2d5/0x330 [ 309.503727][ C1] sock_setsockopt+0x5a/0x70 [ 309.503749][ C1] __sys_setsockopt+0x270/0x4e0 [ 309.503771][ C1] ? __cfi___sys_setsockopt+0x10/0x10 [ 309.503794][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 309.503813][ C1] ? xfd_validate_state+0x70/0x150 [ 309.503834][ C1] ? __kasan_check_write+0x14/0x20 [ 309.503856][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 309.503874][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 309.503897][ C1] x64_sys_call+0x124/0x9a0 [ 309.503915][ C1] do_syscall_64+0x4c/0xa0 [ 309.503935][ C1] ? clear_bhb_loop+0x15/0x70 [ 309.503950][ C1] ? clear_bhb_loop+0x15/0x70 [ 309.503964][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.503988][ C1] RIP: 0033:0x7f573647dca9 [ 309.504001][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 309.504014][ C1] RSP: 002b:00007f57371820c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 309.504030][ C1] RAX: ffffffffffffffda RBX: 00007f57365abf80 RCX: 00007f573647dca9 [ 309.504042][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 309.504051][ C1] RBP: 00007f57364c947e R08: 0000000000000004 R09: 0000000000000000 [ 309.504061][ C1] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 309.504071][ C1] R13: 000000000000000b R14: 00007f57365abf80 R15: 00007ffcc33a1148 [ 309.504085][ C1]