Warning: Permanently added '10.128.10.26' (ED25519) to the list of known hosts. 2025/05/02 05:47:25 ignoring optional flag "sandboxArg"="0" 2025/05/02 05:47:25 ignoring optional flag "type"="gce" 2025/05/02 05:47:25 parsed 1 programs [ 52.582661][ T30] audit: type=1400 audit(1746164846.874:126): avc: denied { unlink } for pid=362 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 52.618522][ T362] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.122097][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.129299][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.136931][ T378] device bridge_slave_0 entered promiscuous mode [ 53.143763][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.150820][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.158427][ T378] device bridge_slave_1 entered promiscuous mode [ 53.204815][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.211970][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.219212][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.226401][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.246555][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.254268][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.261523][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.271325][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.279521][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.286677][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.295570][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.303792][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.310804][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.324036][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.333709][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.347798][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.359706][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.367867][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.375506][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.383601][ T378] device veth0_vlan entered promiscuous mode [ 53.393457][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.403982][ T378] device veth1_macvtap entered promiscuous mode [ 53.413127][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.423062][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.669395][ T30] audit: type=1401 audit(1746164847.954:127): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/05/02 05:47:28 executed programs: 0 [ 53.956909][ T423] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.964222][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.972121][ T423] device bridge_slave_0 entered promiscuous mode [ 53.983274][ T423] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.990488][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.997938][ T423] device bridge_slave_1 entered promiscuous mode [ 54.046031][ T423] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.053097][ T423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.060346][ T423] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.067411][ T423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.092448][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.100285][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.107771][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.117210][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.125905][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.134148][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.141436][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.154269][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.162747][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.170889][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.177937][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.189398][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.197834][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.207324][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.215514][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.232959][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.241291][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.253102][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.261058][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.269357][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.276923][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.285207][ T423] device veth0_vlan entered promiscuous mode [ 54.302828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.311259][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.320982][ T423] device veth1_macvtap entered promiscuous mode [ 54.331308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.339211][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.348772][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.375299][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.393485][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.393821][ T30] audit: type=1400 audit(1746164848.684:128): avc: denied { create } for pid=428 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.422498][ T343] device bridge_slave_1 left promiscuous mode [ 54.428880][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.437079][ T30] audit: type=1400 audit(1746164848.694:129): avc: denied { setopt } for pid=428 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.437304][ T343] device bridge_slave_0 left promiscuous mode [ 54.468425][ T30] audit: type=1400 audit(1746164848.714:130): avc: denied { write } for pid=428 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.487925][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.496562][ T343] device veth1_macvtap left promiscuous mode [ 54.503410][ T343] device veth0_vlan left promiscuous mode [ 155.501629][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 155.508461][ C0] rcu: 0-...!: (10000 ticks this GP) idle=855/1/0x4000000000000000 softirq=4349/4370 fqs=0 last_accelerate: a032/c742 dyntick_enabled: 1 [ 155.522686][ C0] (t=10000 jiffies g=2701 q=5) [ 155.527532][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 9999 jiffies! g2701 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 155.539663][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=504 [ 155.547378][ C0] rcu: rcu_preempt kthread starved for 10000 jiffies! g2701 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 155.558636][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 155.568584][ C0] rcu: RCU grace-period kthread stack dump: [ 155.574463][ C0] task:rcu_preempt state:I stack:28720 pid: 14 ppid: 2 flags:0x00004000 [ 155.583661][ C0] Call Trace: [ 155.586931][ C0] [ 155.589865][ C0] __schedule+0xb6e/0x14c0 [ 155.594288][ C0] ? release_firmware_map_entry+0x190/0x190 [ 155.600182][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 155.605984][ C0] ? __mod_timer+0x7ae/0xb30 [ 155.610650][ C0] schedule+0x11e/0x1e0 [ 155.614794][ C0] schedule_timeout+0x12c/0x2e0 [ 155.619652][ C0] ? console_conditional_schedule+0x30/0x30 [ 155.625543][ C0] ? update_process_times+0x200/0x200 [ 155.630900][ C0] ? prepare_to_swait_event+0x308/0x320 [ 155.636429][ C0] rcu_gp_fqs_loop+0x293/0xf60 [ 155.641180][ C0] ? debug_smp_processor_id+0x17/0x20 [ 155.646535][ C0] ? __note_gp_changes+0x4e2/0x9e0 [ 155.651636][ C0] ? rcu_gp_init+0xc00/0xc00 [ 155.656235][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 155.661422][ C0] ? rcu_gp_init+0x9a7/0xc00 [ 155.666000][ C0] rcu_gp_kthread+0x98/0x330 [ 155.670620][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 155.675301][ C0] ? __kasan_check_read+0x11/0x20 [ 155.680354][ C0] ? __kthread_parkme+0xac/0x200 [ 155.685281][ C0] ? preempt_count_add+0x90/0x1b0 [ 155.690289][ C0] kthread+0x411/0x500 [ 155.694356][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 155.699022][ C0] ? kthread_blkcg+0xd0/0xd0 [ 155.703684][ C0] ret_from_fork+0x1f/0x30 [ 155.708103][ C0] [ 155.711110][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 155.717551][ C0] Sending NMI from CPU 0 to CPUs 1: [ 155.722774][ C1] NMI backtrace for cpu 1 [ 155.722791][ C1] CPU: 1 PID: 618 Comm: syz.0.78 Not tainted 5.15.180-syzkaller-1080043-g88c4075c39ed #0 [ 155.722808][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 155.722821][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x527/0x9c0 [ 155.722847][ C1] Code: 00 41 c6 45 00 00 48 8b 44 24 10 42 0f b6 04 38 84 c0 0f 85 1c 01 00 00 48 8b 44 24 08 c6 00 01 41 bd 00 80 ff ff eb 07 f3 90 <41> ff c5 74 47 43 0f b6 04 3e 84 c0 75 2b 80 3b 00 75 eb 48 89 df [ 155.722860][ C1] RSP: 0018:ffffc900030ef760 EFLAGS: 00000206 [ 155.722875][ C1] RAX: 0000000000000000 RBX: ffff88811b132888 RCX: ffffffff814f2479 [ 155.722887][ C1] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff88811b132888 [ 155.722897][ C1] RBP: ffffc900030ef850 R08: dffffc0000000000 R09: ffffed1023626512 [ 155.722910][ C1] R10: ffffed1023626512 R11: 1ffff11023626511 R12: 1ffff1103ee20001 [ 155.722922][ C1] R13: 00000000ffffbef1 R14: 1ffff11023626511 R15: dffffc0000000000 [ 155.722934][ C1] FS: 00007f467842f6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 155.722948][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.722960][ C1] CR2: 0000000020000000 CR3: 000000011c1b2000 CR4: 00000000003506a0 [ 155.722974][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 155.722983][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 155.722993][ C1] Call Trace: [ 155.722998][ C1] [ 155.723006][ C1] ? __pv_queued_spin_unlock_slowpath+0x300/0x300 [ 155.723024][ C1] ? avc_has_perm+0x158/0x240 [ 155.723040][ C1] queued_spin_lock_slowpath+0x47/0x50 [ 155.723057][ C1] _raw_spin_lock_bh+0xd8/0xe0 [ 155.723077][ C1] ? _raw_spin_lock_irq+0xe0/0xe0 [ 155.723096][ C1] lock_sock_nested+0x97/0x290 [ 155.723115][ C1] ? sock_init_data+0xc0/0xc0 [ 155.723131][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 155.723149][ C1] ? _raw_spin_unlock_bh+0x51/0x60 [ 155.723167][ C1] tipc_sendstream+0x47/0x70 [ 155.723183][ C1] ? tipc_getsockopt+0x4c0/0x4c0 [ 155.723198][ C1] ____sys_sendmsg+0x5a2/0x8c0 [ 155.723214][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 155.723230][ C1] ? import_iovec+0x7c/0xb0 [ 155.723247][ C1] ___sys_sendmsg+0x1f0/0x260 [ 155.723263][ C1] ? __sys_sendmsg+0x250/0x250 [ 155.723279][ C1] ? memcpy+0x56/0x70 [ 155.723298][ C1] ? __fdget+0x1a1/0x230 [ 155.723315][ C1] __x64_sys_sendmsg+0x1e2/0x2a0 [ 155.723336][ C1] ? ___sys_sendmsg+0x260/0x260 [ 155.723352][ C1] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 155.723372][ C1] x64_sys_call+0x4b/0x9a0 [ 155.723387][ C1] do_syscall_64+0x4c/0xa0 [ 155.723404][ C1] ? clear_bhb_loop+0x35/0x90 [ 155.723418][ C1] ? clear_bhb_loop+0x35/0x90 [ 155.723433][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.723451][ C1] RIP: 0033:0x7f46789acef9 [ 155.723470][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.723482][ C1] RSP: 002b:00007f467842f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.723498][ C1] RAX: ffffffffffffffda RBX: 00007f4678b65f80 RCX: 00007f46789acef9 [ 155.723509][ C1] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 155.723519][ C1] RBP: 00007f4678a1f046 R08: 0000000000000000 R09: 0000000000000000 [ 155.723529][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.723538][ C1] R13: 0000000000000000 R14: 00007f4678b65f80 R15: 00007ffdcf902498 [ 155.723552][ C1] [ 155.723829][ C0] NMI backtrace for cpu 0 [ 156.072831][ C0] CPU: 0 PID: 619 Comm: syz.0.78 Not tainted 5.15.180-syzkaller-1080043-g88c4075c39ed #0 [ 156.082626][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 156.092704][ C0] Call Trace: [ 156.095977][ C0] [ 156.098847][ C0] __dump_stack+0x21/0x30 [ 156.103192][ C0] dump_stack_lvl+0xee/0x150 [ 156.107782][ C0] ? show_regs_print_info+0x20/0x20 [ 156.112997][ C0] ? activate_task+0xa0/0xa0 [ 156.117588][ C0] dump_stack+0x15/0x20 [ 156.121742][ C0] nmi_cpu_backtrace+0x2b4/0x2c0 [ 156.126670][ C0] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 156.132812][ C0] ? __kasan_check_write+0x14/0x20 [ 156.137917][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 156.143365][ C0] ? _raw_spin_lock+0xe0/0xe0 [ 156.148030][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 156.154085][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 156.160135][ C0] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 156.166103][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 156.171980][ C0] rcu_dump_cpu_stacks+0x1c7/0x300 [ 156.177084][ C0] print_cpu_stall+0x320/0x600 [ 156.181834][ C0] rcu_sched_clock_irq+0x74a/0x12b0 [ 156.187022][ C0] ? rcu_boost_kthread_setaffinity+0x310/0x310 [ 156.193163][ C0] ? raise_softirq+0x71/0xe0 [ 156.197740][ C0] ? __raise_softirq_irqoff+0xd0/0xd0 [ 156.203099][ C0] ? hrtimer_run_queues+0x166/0x430 [ 156.208402][ C0] update_process_times+0x198/0x200 [ 156.213588][ C0] tick_sched_timer+0x17c/0x240 [ 156.218649][ C0] ? tick_setup_sched_timer+0x450/0x450 [ 156.224182][ C0] __hrtimer_run_queues+0x3b5/0x9e0 [ 156.229532][ C0] ? __kasan_check_write+0x14/0x20 [ 156.234642][ C0] ? hrtimer_interrupt+0x8c0/0x8c0 [ 156.239940][ C0] ? ktime_get_update_offsets_now+0x2fa/0x310 [ 156.246097][ C0] hrtimer_interrupt+0x3c7/0x8c0 [ 156.251030][ C0] __sysvec_apic_timer_interrupt+0xfa/0x3e0 [ 156.256940][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 156.262651][ C0] [ 156.265569][ C0] [ 156.268482][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 156.274462][ C0] RIP: 0010:tipc_sk_rcv+0x19c6/0x2c60 [ 156.279819][ C0] Code: 09 df fc 4c 8b 74 24 40 48 8b bc 24 78 01 00 00 e8 0f 70 1b 00 48 8b 44 24 70 48 8d 78 30 48 89 f8 48 c1 e8 03 42 80 3c 28 00 <74> 05 e8 73 77 1d fd 49 8b 7f 30 48 8d b4 24 c0 01 00 00 e8 a2 09 [ 156.299519][ C0] RSP: 0018:ffffc900030fe7c0 EFLAGS: 00000246 [ 156.305595][ C0] RAX: 1ffff11023626506 RBX: 0000000000000000 RCX: ffff88810cf062c0 [ 156.313639][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811b132830 [ 156.321701][ C0] RBP: ffffc900030fea50 R08: dffffc0000000000 R09: ffffed1023626512 [ 156.329759][ C0] R10: ffffed1023626512 R11: 1ffff11023626511 R12: ffff888115753000 [ 156.337752][ C0] R13: dffffc0000000000 R14: ffffc900030fec40 R15: ffff88811b132800 [ 156.345717][ C0] ? stack_trace_save+0x98/0xe0 [ 156.350644][ C0] ? __stack_depot_save+0x442/0x480 [ 156.355831][ C0] ? kasan_set_free_info+0x23/0x40 [ 156.361054][ C0] ? __kasan_slab_free+0x11/0x20 [ 156.365973][ C0] ? tipc_node_xmit+0x256/0xce0 [ 156.370818][ C0] ? tipc_sk_backlog_rcv+0x16f/0x1f0 [ 156.376108][ C0] ? __release_sock+0x143/0x350 [ 156.381037][ C0] ? sock_setsockopt+0x1b65/0x2270 [ 156.386134][ C0] ? __skb_queue_purge+0x170/0x170 [ 156.391231][ C0] tipc_node_xmit+0x256/0xce0 [ 156.395894][ C0] ? kasan_quarantine_put+0x34/0x190 [ 156.401163][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 156.406749][ C0] ? ____kasan_slab_free+0x130/0x160 [ 156.412021][ C0] ? __kasan_slab_free+0x11/0x20 [ 156.416952][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 156.422483][ C0] ? kfree_skbmem+0x10c/0x180 [ 156.427147][ C0] tipc_node_distr_xmit+0x292/0x390 [ 156.432338][ C0] ? tipc_node_xmit_skb+0x130/0x130 [ 156.437536][ C0] tipc_sk_rcv+0x19de/0x2c60 [ 156.442130][ C0] ? __skb_queue_purge+0x170/0x170 [ 156.447238][ C0] tipc_node_xmit+0x256/0xce0 [ 156.451901][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 156.457436][ C0] tipc_sk_push_backlog+0x4dd/0x790 [ 156.462621][ C0] tipc_sk_proto_rcv+0x98d/0x1540 [ 156.467636][ C0] ? tipc_sk_filter_rcv+0x2c40/0x2c40 [ 156.472996][ C0] ? unwind_get_return_address+0x4d/0x90 [ 156.478726][ C0] ? stack_trace_save+0xe0/0xe0 [ 156.483561][ C0] ? arch_stack_walk+0x60/0x140 [ 156.488426][ C0] tipc_sk_filter_rcv+0x2a55/0x2c40 [ 156.493617][ C0] ? stack_trace_save+0x98/0xe0 [ 156.498546][ C0] ? __stack_depot_save+0x34/0x480 [ 156.503645][ C0] ? kasan_set_track+0x5b/0x70 [ 156.508394][ C0] ? kasan_set_track+0x4a/0x70 [ 156.513140][ C0] ? kasan_set_free_info+0x23/0x40 [ 156.518238][ C0] ? kasan_set_track+0x5b/0x70 [ 156.523097][ C0] ? kasan_set_track+0x4a/0x70 [ 156.527866][ C0] ? kasan_set_free_info+0x23/0x40 [ 156.532970][ C0] ? ____kasan_slab_free+0x125/0x160 [ 156.538433][ C0] ? __kasan_slab_free+0x11/0x20 [ 156.543456][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 156.549050][ C0] ? kmem_cache_free+0x100/0x320 [ 156.554077][ C0] ? kfree_skbmem+0x10c/0x180 [ 156.558751][ C0] ? kfree_skb+0xc1/0x2f0 [ 156.563076][ C0] ? tipc_msg_reverse+0x698/0x900 [ 156.568106][ C0] ? tipc_sk_filter_rcv+0xbe5/0x2c40 [ 156.573384][ C0] ? tipc_sk_backlog_rcv+0x109/0x1f0 [ 156.578655][ C0] ? __release_sock+0x143/0x350 [ 156.583492][ C0] ? __sys_setsockopt+0x268/0x460 [ 156.588534][ C0] ? __x64_sys_setsockopt+0xbf/0xd0 [ 156.593719][ C0] ? do_syscall_64+0x4c/0xa0 [ 156.598390][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.604445][ C0] ? tipc_sk_publish+0x440/0x440 [ 156.609365][ C0] ? __kasan_check_write+0x14/0x20 [ 156.614464][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 156.619568][ C0] tipc_sk_rcv+0x7b7/0x2c60 [ 156.624055][ C0] ? kfree_skbmem+0x10c/0x180 [ 156.628715][ C0] ? skb_release_data+0x814/0xa10 [ 156.633733][ C0] ? __skb_queue_purge+0x170/0x170 [ 156.638842][ C0] ? tipc_sk_filter_rcv+0x29de/0x2c40 [ 156.644457][ C0] tipc_node_xmit+0x256/0xce0 [ 156.649205][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 156.654733][ C0] tipc_node_distr_xmit+0x292/0x390 [ 156.659964][ C0] ? tipc_node_xmit_skb+0x130/0x130 [ 156.665148][ C0] ? selinux_capable+0x29c/0x380 [ 156.670067][ C0] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 156.675164][ C0] ? tipc_sk_timeout+0x970/0x970 [ 156.680084][ C0] ? lock_sock_nested+0x1f1/0x290 [ 156.685118][ C0] __release_sock+0x143/0x350 [ 156.689782][ C0] sock_setsockopt+0x1b65/0x2270 [ 156.694708][ C0] ? __sock_set_mark+0x160/0x160 [ 156.699631][ C0] ? selinux_socket_setsockopt+0x21c/0x300 [ 156.705423][ C0] ? selinux_socket_getsockopt+0x2e0/0x2e0 [ 156.711229][ C0] ? __kasan_check_write+0x14/0x20 [ 156.716415][ C0] ? put_vma+0x44/0x60 [ 156.720485][ C0] ? __fget_files+0x2c4/0x320 [ 156.725151][ C0] ? security_socket_setsockopt+0x82/0xa0 [ 156.730949][ C0] __sys_setsockopt+0x268/0x460 [ 156.735898][ C0] ? __ia32_sys_recv+0xb0/0xb0 [ 156.740742][ C0] __x64_sys_setsockopt+0xbf/0xd0 [ 156.745772][ C0] x64_sys_call+0x982/0x9a0 [ 156.750262][ C0] do_syscall_64+0x4c/0xa0 [ 156.754665][ C0] ? clear_bhb_loop+0x35/0x90 [ 156.759334][ C0] ? clear_bhb_loop+0x35/0x90 [ 156.764005][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.769886][ C0] RIP: 0033:0x7f46789acef9 [ 156.774289][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.793891][ C0] RSP: 002b:00007f467840e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 156.802293][ C0] RAX: ffffffffffffffda RBX: 00007f4678b66058 RCX: 00007f46789acef9 [ 156.810252][ C0] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 156.818296][ C0] RBP: 00007f4678a1f046 R08: 0000000000000004 R09: 0000000000000000 [ 156.826270][ C0] R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000000 [ 156.834232][ C0] R13: 0000000000000001 R14: 00007f4678b66058 R15: 00007ffdcf902498 [ 156.842192][ C0] [ 309.055834][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [syz.0.78:619] [ 309.063863][ C0] Modules linked in: [ 309.067752][ C0] CPU: 0 PID: 619 Comm: syz.0.78 Not tainted 5.15.180-syzkaller-1080043-g88c4075c39ed #0 [ 309.077622][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 309.087670][ C0] RIP: 0010:tipc_sk_lookup+0x4ec/0x5f0 [ 309.093132][ C0] Code: b7 00 49 29 c5 74 67 49 8d 9d 80 00 00 00 48 89 df be 04 00 00 00 e8 03 62 1d fd 41 be 01 00 00 00 f0 45 0f c1 b5 80 00 00 00 <31> ff 44 89 f6 e8 aa f5 de fc 45 85 f6 0f 84 80 00 00 00 bf fe ff [ 309.112810][ C0] RSP: 0018:ffffc900030fe6c0 EFLAGS: 00000206 [ 309.118877][ C0] RAX: 0000000000000301 RBX: ffff88811b132880 RCX: ffffffff8489ac6d [ 309.126865][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88811b132880 [ 309.134823][ C0] RBP: ffffc900030fe7b0 R08: dffffc0000000000 R09: ffffed1023626511 [ 309.142879][ C0] R10: ffffed1023626511 R11: 1ffff11023626510 R12: dffffc0000000000 [ 309.150930][ C0] R13: ffff88811b132800 R14: 0000000000000004 R15: fffffffffffffc08 [ 309.158886][ C0] FS: 00007f467840e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 309.167798][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.174372][ C0] CR2: 00007f467840df98 CR3: 000000011c1b2000 CR4: 00000000003506b0 [ 309.182341][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 309.190299][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.198265][ C0] Call Trace: [ 309.201563][ C0] [ 309.204582][ C0] ? tipc_sk_rcv+0x2c60/0x2c60 [ 309.209334][ C0] ? tipc_sk_rcv+0x3cd/0x2c60 [ 309.214045][ C0] tipc_sk_rcv+0x3fe/0x2c60 [ 309.218558][ C0] ? stack_trace_save+0x98/0xe0 [ 309.223406][ C0] ? __stack_depot_save+0x442/0x480 [ 309.228602][ C0] ? kasan_set_free_info+0x23/0x40 [ 309.233702][ C0] ? __kasan_slab_free+0x11/0x20 [ 309.238635][ C0] ? tipc_node_xmit+0x256/0xce0 [ 309.243512][ C0] ? tipc_sk_backlog_rcv+0x16f/0x1f0 [ 309.248806][ C0] ? __release_sock+0x143/0x350 [ 309.253730][ C0] ? sock_setsockopt+0x1b65/0x2270 [ 309.258941][ C0] ? __skb_queue_purge+0x170/0x170 [ 309.264142][ C0] tipc_node_xmit+0x256/0xce0 [ 309.268897][ C0] ? kasan_quarantine_put+0x34/0x190 [ 309.274171][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 309.279698][ C0] ? ____kasan_slab_free+0x130/0x160 [ 309.284964][ C0] ? __kasan_slab_free+0x11/0x20 [ 309.289883][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 309.295428][ C0] ? kfree_skbmem+0x10c/0x180 [ 309.300087][ C0] tipc_node_distr_xmit+0x292/0x390 [ 309.305277][ C0] ? tipc_node_xmit_skb+0x130/0x130 [ 309.310463][ C0] tipc_sk_rcv+0x19de/0x2c60 [ 309.315057][ C0] ? __skb_queue_purge+0x170/0x170 [ 309.320170][ C0] tipc_node_xmit+0x256/0xce0 [ 309.324834][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 309.330373][ C0] tipc_sk_push_backlog+0x4dd/0x790 [ 309.335555][ C0] tipc_sk_proto_rcv+0x98d/0x1540 [ 309.340564][ C0] ? tipc_sk_filter_rcv+0x2c40/0x2c40 [ 309.345944][ C0] ? unwind_get_return_address+0x4d/0x90 [ 309.351578][ C0] ? stack_trace_save+0xe0/0xe0 [ 309.356416][ C0] ? arch_stack_walk+0x60/0x140 [ 309.361252][ C0] tipc_sk_filter_rcv+0x2a55/0x2c40 [ 309.366432][ C0] ? stack_trace_save+0x98/0xe0 [ 309.371268][ C0] ? __stack_depot_save+0x34/0x480 [ 309.376379][ C0] ? kasan_set_track+0x5b/0x70 [ 309.381134][ C0] ? kasan_set_track+0x4a/0x70 [ 309.385878][ C0] ? kasan_set_free_info+0x23/0x40 [ 309.390997][ C0] ? kasan_set_track+0x5b/0x70 [ 309.395920][ C0] ? kasan_set_track+0x4a/0x70 [ 309.400667][ C0] ? kasan_set_free_info+0x23/0x40 [ 309.405776][ C0] ? ____kasan_slab_free+0x125/0x160 [ 309.411046][ C0] ? __kasan_slab_free+0x11/0x20 [ 309.415966][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 309.421504][ C0] ? kmem_cache_free+0x100/0x320 [ 309.426431][ C0] ? kfree_skbmem+0x10c/0x180 [ 309.431088][ C0] ? kfree_skb+0xc1/0x2f0 [ 309.435399][ C0] ? tipc_msg_reverse+0x698/0x900 [ 309.440407][ C0] ? tipc_sk_filter_rcv+0xbe5/0x2c40 [ 309.445673][ C0] ? tipc_sk_backlog_rcv+0x109/0x1f0 [ 309.450963][ C0] ? __release_sock+0x143/0x350 [ 309.455814][ C0] ? __sys_setsockopt+0x268/0x460 [ 309.460916][ C0] ? __x64_sys_setsockopt+0xbf/0xd0 [ 309.466139][ C0] ? do_syscall_64+0x4c/0xa0 [ 309.470717][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 309.476787][ C0] ? tipc_sk_publish+0x440/0x440 [ 309.481901][ C0] ? __kasan_check_write+0x14/0x20 [ 309.487047][ C0] ? _raw_spin_lock_bh+0x8e/0xe0 [ 309.492170][ C0] tipc_sk_rcv+0x7b7/0x2c60 [ 309.496662][ C0] ? kfree_skbmem+0x10c/0x180 [ 309.501318][ C0] ? skb_release_data+0x814/0xa10 [ 309.506331][ C0] ? __skb_queue_purge+0x170/0x170 [ 309.511435][ C0] ? tipc_sk_filter_rcv+0x29de/0x2c40 [ 309.516794][ C0] tipc_node_xmit+0x256/0xce0 [ 309.521550][ C0] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 309.527113][ C0] tipc_node_distr_xmit+0x292/0x390 [ 309.532303][ C0] ? tipc_node_xmit_skb+0x130/0x130 [ 309.537492][ C0] ? selinux_capable+0x29c/0x380 [ 309.542418][ C0] tipc_sk_backlog_rcv+0x16f/0x1f0 [ 309.547555][ C0] ? tipc_sk_timeout+0x970/0x970 [ 309.552665][ C0] ? lock_sock_nested+0x1f1/0x290 [ 309.557680][ C0] __release_sock+0x143/0x350 [ 309.562344][ C0] sock_setsockopt+0x1b65/0x2270 [ 309.567277][ C0] ? __sock_set_mark+0x160/0x160 [ 309.572295][ C0] ? selinux_socket_setsockopt+0x21c/0x300 [ 309.578102][ C0] ? selinux_socket_getsockopt+0x2e0/0x2e0 [ 309.583909][ C0] ? __kasan_check_write+0x14/0x20 [ 309.589071][ C0] ? put_vma+0x44/0x60 [ 309.593125][ C0] ? __fget_files+0x2c4/0x320 [ 309.597916][ C0] ? security_socket_setsockopt+0x82/0xa0 [ 309.603640][ C0] __sys_setsockopt+0x268/0x460 [ 309.608492][ C0] ? __ia32_sys_recv+0xb0/0xb0 [ 309.613258][ C0] __x64_sys_setsockopt+0xbf/0xd0 [ 309.618449][ C0] x64_sys_call+0x982/0x9a0 [ 309.622940][ C0] do_syscall_64+0x4c/0xa0 [ 309.627440][ C0] ? clear_bhb_loop+0x35/0x90 [ 309.632107][ C0] ? clear_bhb_loop+0x35/0x90 [ 309.636772][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 309.642654][ C0] RIP: 0033:0x7f46789acef9 [ 309.647157][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.666834][ C0] RSP: 002b:00007f467840e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 309.675234][ C0] RAX: ffffffffffffffda RBX: 00007f4678b66058 RCX: 00007f46789acef9 [ 309.683197][ C0] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 309.691156][ C0] RBP: 00007f4678a1f046 R08: 0000000000000004 R09: 0000000000000000 [ 309.699410][ C0] R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000000 [ 309.707382][ C0] R13: 0000000000000001 R14: 00007f4678b66058 R15: 00007ffdcf902498 [ 309.715353][ C0] [ 309.718383][ C0] Sending NMI from CPU 0 to CPUs 1: [ 309.723591][ C1] NMI backtrace for cpu 1 [ 309.723601][ C1] CPU: 1 PID: 618 Comm: syz.0.78 Not tainted 5.15.180-syzkaller-1080043-g88c4075c39ed #0 [ 309.723619][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 309.723628][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x527/0x9c0 [ 309.723653][ C1] Code: 00 41 c6 45 00 00 48 8b 44 24 10 42 0f b6 04 38 84 c0 0f 85 1c 01 00 00 48 8b 44 24 08 c6 00 01 41 bd 00 80 ff ff eb 07 f3 90 <41> ff c5 74 47 43 0f b6 04 3e 84 c0 75 2b 80 3b 00 75 eb 48 89 df [ 309.723667][ C1] RSP: 0018:ffffc900030ef760 EFLAGS: 00000206 [ 309.723681][ C1] RAX: 0000000000000000 RBX: ffff88811b132888 RCX: ffffffff814f2479 [ 309.723693][ C1] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff88811b132888 [ 309.723704][ C1] RBP: ffffc900030ef850 R08: dffffc0000000000 R09: ffffed1023626512 [ 309.723716][ C1] R10: ffffed1023626512 R11: 1ffff11023626511 R12: 1ffff1103ee20001 [ 309.723728][ C1] R13: 00000000fffff45a R14: 1ffff11023626511 R15: dffffc0000000000 [ 309.723740][ C1] FS: 00007f467842f6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 309.723755][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.723766][ C1] CR2: 0000000020000000 CR3: 000000011c1b2000 CR4: 00000000003506a0 [ 309.723781][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 309.723790][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.723800][ C1] Call Trace: [ 309.723805][ C1] [ 309.723812][ C1] ? __pv_queued_spin_unlock_slowpath+0x300/0x300 [ 309.723830][ C1] ? avc_has_perm+0x158/0x240 [ 309.723847][ C1] queued_spin_lock_slowpath+0x47/0x50 [ 309.723864][ C1] _raw_spin_lock_bh+0xd8/0xe0 [ 309.723882][ C1] ? _raw_spin_lock_irq+0xe0/0xe0 [ 309.723900][ C1] lock_sock_nested+0x97/0x290 [ 309.723920][ C1] ? sock_init_data+0xc0/0xc0 [ 309.723936][ C1] ? _raw_spin_lock_bh+0x8e/0xe0 [ 309.723955][ C1] ? _raw_spin_unlock_bh+0x51/0x60 [ 309.723972][ C1] tipc_sendstream+0x47/0x70 [ 309.723988][ C1] ? tipc_getsockopt+0x4c0/0x4c0 [ 309.724004][ C1] ____sys_sendmsg+0x5a2/0x8c0 [ 309.724020][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 309.724036][ C1] ? import_iovec+0x7c/0xb0 [ 309.724053][ C1] ___sys_sendmsg+0x1f0/0x260 [ 309.724069][ C1] ? __sys_sendmsg+0x250/0x250 [ 309.724085][ C1] ? memcpy+0x56/0x70 [ 309.724103][ C1] ? __fdget+0x1a1/0x230 [ 309.724121][ C1] __x64_sys_sendmsg+0x1e2/0x2a0 [ 309.724136][ C1] ? ___sys_sendmsg+0x260/0x260 [ 309.724152][ C1] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 309.724202][ C1] x64_sys_call+0x4b/0x9a0 [ 309.724217][ C1] do_syscall_64+0x4c/0xa0 [ 309.724235][ C1] ? clear_bhb_loop+0x35/0x90 [ 309.724248][ C1] ? clear_bhb_loop+0x35/0x90 [ 309.724262][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 309.724281][ C1] RIP: 0033:0x7f46789acef9 [ 309.724295][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.724308][ C1] RSP: 002b:00007f467842f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.724323][ C1] RAX: ffffffffffffffda RBX: 00007f4678b65f80 RCX: 00007f46789acef9 [ 309.724335][ C1] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 309.724345][ C1] RBP: 00007f4678a1f046 R08: 0000000000000000 R09: 0000000000000000 [ 309.724355][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.724364][ C1] R13: 0000000000000000 R14: 00007f4678b65f80 R15: 00007ffdcf902498 [ 309.724378][ C1]