Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. 2025/03/23 07:27:07 ignoring optional flag "sandboxArg"="0" 2025/03/23 07:27:07 parsed 1 programs [ 52.014158][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 52.014173][ T24] audit: type=1400 audit(1742714828.410:107): avc: denied { unlink } for pid=419 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 52.063961][ T419] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.766056][ T24] audit: type=1400 audit(1742714829.160:108): avc: denied { create } for pid=457 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.810853][ T24] audit: type=1401 audit(1742714829.210:109): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 52.887674][ T464] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.894749][ T464] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.902219][ T464] device bridge_slave_0 entered promiscuous mode [ 52.909250][ T464] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.916118][ T464] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.923652][ T464] device bridge_slave_1 entered promiscuous mode [ 52.958731][ T464] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.965593][ T464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.972714][ T464] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.979578][ T464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.996675][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.004068][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.011383][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.020410][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.028477][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.035311][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.049456][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.057403][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.064392][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.071778][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.080577][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.092363][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.103096][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.110921][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.118292][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.131231][ T464] device veth0_vlan entered promiscuous mode [ 53.141205][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.155057][ T464] device veth1_macvtap entered promiscuous mode [ 53.164654][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.174245][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/03/23 07:27:09 executed programs: 0 [ 53.314214][ T479] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.321384][ T479] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.328944][ T479] device bridge_slave_0 entered promiscuous mode [ 53.335839][ T479] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.342769][ T479] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.349904][ T479] device bridge_slave_1 entered promiscuous mode [ 53.391208][ T479] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.398058][ T479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.405195][ T479] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.411985][ T479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.431998][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.439417][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.446369][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.455756][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.463794][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.470734][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.484603][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.492608][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.499463][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.511442][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.521513][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.539313][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.549493][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.558064][ T479] device veth0_vlan entered promiscuous mode [ 53.564428][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.572864][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.583776][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.593504][ T479] device veth1_macvtap entered promiscuous mode [ 53.602511][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.612046][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.635052][ T24] audit: type=1400 audit(1742714830.030:110): avc: denied { create } for pid=492 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.654384][ T24] audit: type=1400 audit(1742714830.030:111): avc: denied { write } for pid=492 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.674321][ T24] audit: type=1400 audit(1742714830.030:112): avc: denied { setopt } for pid=492 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.099514][ T9] device bridge_slave_1 left promiscuous mode [ 54.105444][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.112930][ T9] device bridge_slave_0 left promiscuous mode [ 54.119132][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.127553][ T9] device veth1_macvtap left promiscuous mode [ 54.133481][ T9] device veth0_vlan left promiscuous mode [ 154.878385][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 154.884866][ C0] rcu: 0-...!: (9999 ticks this GP) idle=fda/1/0x4000000000000000 softirq=3231/3231 fqs=0 last_accelerate: 9ff2/c701 dyntick_enabled: 1 [ 154.898816][ C0] (t=10002 jiffies g=2429 q=200) [ 154.903675][ C0] rcu: rcu_preempt kthread starved for 10002 jiffies! g2429 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 154.914783][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 154.924675][ C0] rcu: RCU grace-period kthread stack dump: [ 154.930402][ C0] task:rcu_preempt state:I stack: 0 pid: 13 ppid: 2 flags:0x00004000 [ 154.939439][ C0] Call Trace: [ 154.942604][ C0] __schedule+0xbe6/0x1330 [ 154.946813][ C0] ? release_firmware_map_entry+0x18d/0x18d [ 154.952805][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 154.958096][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 154.962781][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 154.967844][ C0] schedule+0x13d/0x1d0 [ 154.971828][ C0] schedule_timeout+0x18c/0x360 [ 154.976525][ C0] ? prepare_to_swait_event+0x39f/0x3e0 [ 154.981904][ C0] ? console_conditional_schedule+0x10/0x10 [ 154.987622][ C0] ? run_local_timers+0x160/0x160 [ 154.992485][ C0] ? __note_gp_changes+0x2d8/0x6f0 [ 154.997435][ C0] rcu_gp_kthread+0xefc/0x23a0 [ 155.002039][ C0] ? dump_blkd_tasks+0x7e0/0x7e0 [ 155.006805][ C0] ? rcu_barrier_callback+0x50/0x50 [ 155.011835][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 155.016618][ C0] ? __kasan_check_read+0x11/0x20 [ 155.021473][ C0] ? __kthread_parkme+0xb9/0x1c0 [ 155.026245][ C0] kthread+0x34b/0x3d0 [ 155.030153][ C0] ? rcu_barrier_callback+0x50/0x50 [ 155.035187][ C0] ? kthread_blkcg+0xd0/0xd0 [ 155.039696][ C0] ret_from_fork+0x1f/0x30 [ 155.043989][ C0] NMI backtrace for cpu 0 [ 155.048133][ C0] CPU: 0 PID: 716 Comm: syz.0.89 Not tainted 5.10.234-syzkaller-1006684-g094fc3778d6b #0 [ 155.057745][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.067722][ C0] Call Trace: [ 155.070848][ C0] [ 155.073550][ C0] dump_stack_lvl+0x1e2/0x24b [ 155.078071][ C0] ? panic+0x812/0x812 [ 155.081964][ C0] ? bfq_pos_tree_add_move+0x43b/0x43b [ 155.087257][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 155.092551][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 155.097243][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 155.103138][ C0] dump_stack+0x15/0x17 [ 155.107133][ C0] nmi_trigger_cpumask_backtrace+0x2b5/0x300 [ 155.112950][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 155.118856][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 155.124581][ C0] rcu_dump_cpu_stacks+0x199/0x2b0 [ 155.129564][ C0] rcu_sched_clock_irq+0xf8a/0x1890 [ 155.134646][ C0] ? rcutree_dead_cpu+0x340/0x340 [ 155.139523][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 155.144565][ C0] update_process_times+0x198/0x200 [ 155.149587][ C0] tick_sched_timer+0x188/0x240 [ 155.154269][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 155.159663][ C0] __hrtimer_run_queues+0x3d7/0xa50 [ 155.164682][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 155.169715][ C0] ? clockevents_program_event+0x214/0x2c0 [ 155.175356][ C0] ? ktime_get_update_offsets_now+0x266/0x280 [ 155.181281][ C0] hrtimer_interrupt+0x39a/0x8b0 [ 155.186121][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3f0 [ 155.191846][ C0] asm_call_irq_on_stack+0xf/0x20 [ 155.196692][ C0] [ 155.199478][ C0] sysvec_apic_timer_interrupt+0x85/0xe0 [ 155.205082][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 155.210973][ C0] RIP: 0010:kvm_wait+0xfc/0x150 [ 155.215665][ C0] Code: 38 f0 75 26 41 f7 c7 00 02 00 00 75 0f 0f 1f 44 00 00 0f 00 2d a5 53 d5 03 f4 eb 0e 0f 1f 44 00 00 0f 00 2d 96 53 d5 03 fb f4 <4c> 89 7c 24 18 ff 74 24 18 9d 48 c7 44 24 20 0e 36 e0 45 49 c7 04 [ 155.235088][ C0] RSP: 0018:ffffc90001487680 EFLAGS: 00000246 [ 155.240986][ C0] RAX: 0000000000000003 RBX: 1ffff92000290ed4 RCX: ffffffff8150ca54 [ 155.248796][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffffc900014876c0 [ 155.256605][ C0] RBP: ffffc90001487730 R08: dffffc0000000000 R09: ffffed1023305ef2 [ 155.264427][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 155.272609][ C0] R13: ffff88811982f788 R14: 0000000000000003 R15: 0000000000000246 [ 155.280413][ C0] ? __pv_queued_spin_lock_slowpath+0x6d4/0xc70 [ 155.286487][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 155.292470][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 155.297436][ C0] ? __pv_queued_spin_lock_slowpath+0x6d4/0xc70 [ 155.303595][ C0] __pv_queued_spin_lock_slowpath+0x72f/0xc70 [ 155.309485][ C0] ? __pv_queued_spin_unlock_slowpath+0x280/0x280 [ 155.315910][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 155.320675][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 155.325720][ C0] ? selinux_socket_sendmsg+0x243/0x340 [ 155.331096][ C0] lock_sock_nested+0x92/0x300 [ 155.335687][ C0] ? sock_init_data+0xc0/0xc0 [ 155.340204][ C0] ? _raw_spin_unlock_bh+0x51/0x60 [ 155.345162][ C0] tipc_sendstream+0x47/0x70 [ 155.349587][ C0] ? tipc_getsockopt+0x790/0x790 [ 155.354359][ C0] ____sys_sendmsg+0x59e/0x8f0 [ 155.358954][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 155.363809][ C0] ? import_iovec+0xe5/0x120 [ 155.368246][ C0] ___sys_sendmsg+0x252/0x2e0 [ 155.372751][ C0] ? __sys_sendmsg+0x280/0x280 [ 155.377357][ C0] ? alloc_file_pseudo+0x280/0x2f0 [ 155.382299][ C0] ? __fdget+0x1bc/0x240 [ 155.386380][ C0] __se_sys_sendmsg+0x1b1/0x280 [ 155.391072][ C0] ? __x64_sys_sendmsg+0x90/0x90 [ 155.395841][ C0] ? debug_smp_processor_id+0x17/0x20 [ 155.401043][ C0] __x64_sys_sendmsg+0x7b/0x90 [ 155.405645][ C0] do_syscall_64+0x34/0x70 [ 155.409894][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 155.415622][ C0] RIP: 0033:0x7fcf4dcf1ff9 [ 155.419890][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.439326][ C0] RSP: 002b:00007fcf4d773038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.447568][ C0] RAX: ffffffffffffffda RBX: 00007fcf4dea9f80 RCX: 00007fcf4dcf1ff9 [ 155.455458][ C0] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 155.463269][ C0] RBP: 00007fcf4dd64296 R08: 0000000000000000 R09: 0000000000000000 [ 155.471123][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.478894][ C0] R13: 0000000000000000 R14: 00007fcf4dea9f80 R15: 00007ffe494162c8 [ 198.943254][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [syz.0.89:717] [ 198.951072][ C1] Modules linked in: [ 198.954794][ C1] CPU: 1 PID: 717 Comm: syz.0.89 Not tainted 5.10.234-syzkaller-1006684-g094fc3778d6b #0 [ 198.964428][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 198.974325][ C1] RIP: 0010:__rcu_read_unlock+0x34/0x90 [ 198.979700][ C1] Code: bf 00 00 00 00 00 fc ff df 65 4c 8b 35 15 a2 aa 7e 49 8d 9e 08 04 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 31 ff 0b <75> 1c 49 8d 9e 0c 04 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 [ 198.999496][ C1] RSP: 0018:ffffc90001496638 EFLAGS: 00000246 [ 199.005388][ C1] RAX: 0000000000000000 RBX: ffff88810ca466c8 RCX: dffffc0000000000 [ 199.013198][ C1] RDX: 0000000000000000 RSI: 000000002b855d37 RDI: ffff888116fb9340 [ 199.021007][ C1] RBP: ffffc90001496650 R08: ffffffff849a1fb5 R09: 0000000000000003 [ 199.028819][ C1] R10: fffff52000292cdc R11: dffffc0000000001 R12: ffff88811710c000 [ 199.036826][ C1] R13: 1ffff92000292cdc R14: ffff88810ca462c0 R15: dffffc0000000000 [ 199.044639][ C1] FS: 00007fcf4d7526c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 199.053412][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.059854][ C1] CR2: 00007fcf4d751f98 CR3: 000000011c55a000 CR4: 00000000003506a0 [ 199.067642][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.075457][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.083259][ C1] Call Trace: [ 199.086400][ C1] [ 199.089081][ C1] ? show_regs+0x58/0x60 [ 199.093349][ C1] ? watchdog_timer_fn+0x471/0x590 [ 199.098300][ C1] ? proc_watchdog_cpumask+0xd0/0xd0 [ 199.103426][ C1] ? __hrtimer_run_queues+0x3d7/0xa50 [ 199.108644][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 199.113693][ C1] ? clockevents_program_event+0x214/0x2c0 [ 199.119326][ C1] ? ktime_get_update_offsets_now+0x266/0x280 [ 199.125223][ C1] ? hrtimer_interrupt+0x39a/0x8b0 [ 199.130183][ C1] ? __sysvec_apic_timer_interrupt+0xfb/0x3f0 [ 199.136092][ C1] ? asm_call_irq_on_stack+0xf/0x20 [ 199.141100][ C1] [ 199.143887][ C1] ? sysvec_apic_timer_interrupt+0x85/0xe0 [ 199.149539][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 199.155544][ C1] ? tipc_sk_rcv+0x305/0x1e30 [ 199.160031][ C1] ? __rcu_read_unlock+0x34/0x90 [ 199.164799][ C1] tipc_sk_lookup+0xfe/0x650 [ 199.169230][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 199.175253][ C1] ? __kasan_check_write+0x14/0x20 [ 199.180162][ C1] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 199.185029][ C1] ? tipc_sk_rcv+0x1e30/0x1e30 [ 199.189718][ C1] ? preempt_count_sub+0x3b/0x160 [ 199.194569][ C1] tipc_sk_rcv+0x499/0x1e30 [ 199.198912][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 199.204568][ C1] ? __stack_depot_save+0x468/0x4d0 [ 199.209586][ C1] ? kmem_cache_free+0xa9/0x1e0 [ 199.214270][ C1] ? kasan_set_free_info+0x23/0x40 [ 199.219214][ C1] ? ____kasan_slab_free+0x121/0x160 [ 199.224465][ C1] ? __kasan_slab_free+0x11/0x20 [ 199.229219][ C1] ? slab_free_freelist_hook+0xc0/0x190 [ 199.234600][ C1] ? kfree_skbmem+0x104/0x170 [ 199.239204][ C1] ? kfree_skb+0xc1/0x320 [ 199.243384][ C1] ? tipc_sk_proto_rcv+0xaa9/0x1db0 [ 199.248434][ C1] ? tipc_sk_filter_rcv+0x3603/0x3e00 [ 199.253624][ C1] ? __skb_queue_purge+0x180/0x180 [ 199.258581][ C1] tipc_node_xmit+0x34b/0xe30 [ 199.263090][ C1] ? ____kasan_slab_free+0x12c/0x160 [ 199.268205][ C1] ? tipc_node_get_linkname+0x190/0x190 [ 199.273586][ C1] ? __kasan_slab_free+0x11/0x20 [ 199.278357][ C1] ? slab_free_freelist_hook+0xc0/0x190 [ 199.283744][ C1] tipc_node_distr_xmit+0x36a/0x4d0 [ 199.288787][ C1] ? tipc_node_xmit_skb+0x1b0/0x1b0 [ 199.293852][ C1] ? trace_tipc_sk_rej_msg+0x2b/0x6f0 [ 199.299029][ C1] tipc_sk_rcv+0x177d/0x1e30 [ 199.303450][ C1] ? __skb_queue_purge+0x180/0x180 [ 199.308412][ C1] tipc_node_xmit+0x34b/0xe30 [ 199.312911][ C1] ? tipc_node_get_linkname+0x190/0x190 [ 199.318294][ C1] tipc_sk_push_backlog+0x4da/0x7b0 [ 199.323318][ C1] tipc_sk_proto_rcv+0xaa9/0x1db0 [ 199.328179][ C1] ? trace_tipc_sk_dump+0x6e0/0x6e0 [ 199.333209][ C1] ? stack_trace_save+0x113/0x1c0 [ 199.338068][ C1] tipc_sk_filter_rcv+0x3603/0x3e00 [ 199.343107][ C1] ? kfree+0xc3/0x270 [ 199.346924][ C1] ? kmem_cache_free+0xa9/0x1e0 [ 199.351608][ C1] ? kmem_cache_free+0xa9/0x1e0 [ 199.356296][ C1] ? kasan_set_track+0x5d/0x70 [ 199.361159][ C1] ? kasan_set_free_info+0x23/0x40 [ 199.366103][ C1] ? ____kasan_slab_free+0x121/0x160 [ 199.371220][ C1] ? __kasan_slab_free+0x11/0x20 [ 199.375996][ C1] ? kmem_cache_free+0xa9/0x1e0 [ 199.380683][ C1] ? kfree_skbmem+0x104/0x170 [ 199.385196][ C1] ? kfree_skb+0xc1/0x320 [ 199.389369][ C1] ? tipc_sk_filter_rcv+0xfbf/0x3e00 [ 199.394482][ C1] ? tipc_sk_backlog_rcv+0x122/0x210 [ 199.399607][ C1] ? __release_sock+0x148/0x410 [ 199.404289][ C1] ? sock_setsockopt+0x1e3b/0x2e00 [ 199.409239][ C1] ? __sys_setsockopt+0x441/0x870 [ 199.414425][ C1] ? __x64_sys_setsockopt+0xbf/0xd0 [ 199.419507][ C1] ? do_syscall_64+0x34/0x70 [ 199.423934][ C1] ? tipc_sk_dump+0xf50/0xf50 [ 199.428553][ C1] ? __kasan_check_write+0x14/0x20 [ 199.433493][ C1] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 199.438373][ C1] ? kmem_cache_free+0xa9/0x1e0 [ 199.443042][ C1] tipc_sk_rcv+0x8a1/0x1e30 [ 199.447384][ C1] ? __skb_queue_purge+0x180/0x180 [ 199.452359][ C1] ? tipc_sk_filter_rcv+0x3583/0x3e00 [ 199.457543][ C1] tipc_node_xmit+0x34b/0xe30 [ 199.462055][ C1] ? tipc_node_get_linkname+0x190/0x190 [ 199.467474][ C1] tipc_node_distr_xmit+0x36a/0x4d0 [ 199.472473][ C1] ? tipc_node_xmit_skb+0x1b0/0x1b0 [ 199.477512][ C1] tipc_sk_backlog_rcv+0x18b/0x210 [ 199.482541][ C1] ? tipc_sk_timeout+0xab0/0xab0 [ 199.487564][ C1] ? __local_bh_enable_ip+0x53/0x80 [ 199.492686][ C1] ? lock_sock_nested+0x26a/0x300 [ 199.497541][ C1] __release_sock+0x148/0x410 [ 199.502051][ C1] sock_setsockopt+0x1e3b/0x2e00 [ 199.506841][ C1] ? __sock_set_mark+0x160/0x160 [ 199.511595][ C1] ? selinux_socket_getsockopt+0x340/0x340 [ 199.517251][ C1] ? security_socket_setsockopt+0x82/0xb0 [ 199.522796][ C1] __sys_setsockopt+0x441/0x870 [ 199.527598][ C1] ? __ia32_sys_recv+0xb0/0xb0 [ 199.532258][ C1] ? debug_smp_processor_id+0x17/0x20 [ 199.537490][ C1] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 199.543488][ C1] ? irqentry_exit_to_user_mode+0x41/0x80 [ 199.549040][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 199.553891][ C1] do_syscall_64+0x34/0x70 [ 199.558142][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 199.563865][ C1] RIP: 0033:0x7fcf4dcf1ff9 [ 199.568131][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.587564][ C1] RSP: 002b:00007fcf4d752038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 199.595811][ C1] RAX: ffffffffffffffda RBX: 00007fcf4deaa058 RCX: 00007fcf4dcf1ff9 [ 199.603719][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 199.611533][ C1] RBP: 00007fcf4dd64296 R08: 0000000000000004 R09: 0000000000000000 [ 199.619536][ C1] R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000000 [ 199.627360][ C1] R13: 0000000000000001 R14: 00007fcf4deaa058 R15: 00007ffe494162c8 [ 199.635388][ C1] Sending NMI from CPU 1 to CPUs 0: [ 199.640918][ C0] NMI backtrace for cpu 0 [ 199.640930][ C0] CPU: 0 PID: 716 Comm: syz.0.89 Not tainted 5.10.234-syzkaller-1006684-g094fc3778d6b #0 [ 199.640937][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.640941][ C0] RIP: 0010:__pv_queued_spin_lock_slowpath+0x5a1/0xc70 [ 199.640953][ C0] Code: 85 ba 01 00 00 c6 03 00 48 8b 44 24 28 42 0f b6 04 30 84 c0 0f 85 bf 01 00 00 48 8b 04 24 c6 00 01 bb 00 80 ff ff eb 06 f3 90 c3 74 50 43 0f b6 44 35 00 84 c0 75 32 41 80 3c 24 00 75 e9 4c [ 199.640958][ C0] RSP: 0018:ffffc90001487740 EFLAGS: 00000206 [ 199.640967][ C0] RAX: 0000000000000000 RBX: 00000000ffffef51 RCX: ffffffff8150ca54 [ 199.640972][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffffc900014876c0 [ 199.640977][ C0] RBP: ffffc90001487830 R08: dffffc0000000000 R09: ffffed1023305ef2 [ 199.640982][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88811982f788 [ 199.640988][ C0] R13: 1ffff11023305ef1 R14: dffffc0000000000 R15: ffff88823ff52540 [ 199.640993][ C0] FS: 00007fcf4d7736c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 199.640998][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.641003][ C0] CR2: 0000000020000000 CR3: 000000011c55a000 CR4: 00000000003506b0 [ 199.641008][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.641013][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.641016][ C0] Call Trace: [ 199.641018][ C0] [ 199.641021][ C0] ? show_regs+0x58/0x60 [ 199.641025][ C0] ? nmi_cpu_backtrace+0x133/0x160 [ 199.641029][ C0] ? __pv_queued_spin_lock_slowpath+0x5a1/0xc70 [ 199.641033][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 199.641036][ C0] ? nmi_handle+0xa8/0x280 [ 199.641040][ C0] ? __pv_queued_spin_lock_slowpath+0x5a1/0xc70 [ 199.641044][ C0] ? default_do_nmi+0x69/0x160 [ 199.641047][ C0] ? exc_nmi+0xad/0x100 [ 199.641050][ C0] ? end_repeat_nmi+0x16/0x31 [ 199.641055][ C0] ? __pv_queued_spin_lock_slowpath+0x6d4/0xc70 [ 199.641059][ C0] ? __pv_queued_spin_lock_slowpath+0x5a1/0xc70 [ 199.641063][ C0] ? __pv_queued_spin_lock_slowpath+0x5a1/0xc70 [ 199.641067][ C0] ? __pv_queued_spin_lock_slowpath+0x5a1/0xc70 [ 199.641070][ C0] [ 199.641074][ C0] ? __pv_queued_spin_unlock_slowpath+0x280/0x280 [ 199.641078][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 199.641081][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 199.641085][ C0] ? selinux_socket_sendmsg+0x243/0x340 [ 199.641088][ C0] lock_sock_nested+0x92/0x300 [ 199.641092][ C0] ? sock_init_data+0xc0/0xc0 [ 199.641095][ C0] ? _raw_spin_unlock_bh+0x51/0x60 [ 199.641099][ C0] tipc_sendstream+0x47/0x70 [ 199.641102][ C0] ? tipc_getsockopt+0x790/0x790 [ 199.641106][ C0] ____sys_sendmsg+0x59e/0x8f0 [ 199.641109][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 199.641112][ C0] ? import_iovec+0xe5/0x120 [ 199.641116][ C0] ___sys_sendmsg+0x252/0x2e0 [ 199.641119][ C0] ? __sys_sendmsg+0x280/0x280 [ 199.641123][ C0] ? alloc_file_pseudo+0x280/0x2f0 [ 199.641126][ C0] ? __fdget+0x1bc/0x240 [ 199.641130][ C0] __se_sys_sendmsg+0x1b1/0x280 [ 199.641133][ C0] ? __x64_sys_sendmsg+0x90/0x90 [ 199.641137][ C0] ? debug_smp_processor_id+0x17/0x20 [ 199.641140][ C0] __x64_sys_sendmsg+0x7b/0x90 [ 199.641144][ C0] do_syscall_64+0x34/0x70 [ 199.641148][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 199.641151][ C0] RIP: 0033:0x7fcf4dcf1ff9 [ 199.641162][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.641167][ C0] RSP: 002b:00007fcf4d773038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.641176][ C0] RAX: ffffffffffffffda RBX: 00007fcf4dea9f80 RCX: 00007fcf4dcf1ff9 [ 199.641181][ C0] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 199.641186][ C0] RBP: 00007fcf4dd64296 R08: 0000000000000000 R09: 0000000000000000 [ 199.641191][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.641196][ C0] R13: 0000000000000000 R14: 00007fcf4dea9f80 R15: 00007ffe494162c8