RBP: 00007f6d1e8327e0 R08: 0000000000000004 R09: 0000000000000000
R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f6d1ea16128 R14: 00007f6d1ea16090 R15: 00007ffcb1ca1208
watchdog: BUG: soft lockup - CPU#0 stuck for 225s! [syz.3.69:677]
CPU#0 Utilization every 22000ms during lockup:
#1: 100% system, 0% softirq, 1% hardirq, 0% idle
#2: 100% system, 0% softirq, 1% hardirq, 0% idle
#3: 100% system, 0% softirq, 1% hardirq, 0% idle
#4: 100% system, 0% softirq, 1% hardirq, 0% idle
#5: 100% system, 0% softirq, 1% hardirq, 0% idle
Modules linked in:
CPU: 0 UID: 0 PID: 677 Comm: syz.3.69 Not tainted syzkaller #0 PREEMPT
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:jhash2+0x2a2/0x340 include/linux/jhash.h:139
Code: 44 89 f0 c1 c0 0b 41 29 c7 44 89 f8 c1 c0 19 45 31 fd 41 29 c5 45 31 ee 44 89 e8 c1 c0 10 41 29 c6 45 31 f7 44 89 f0 c1 c0 04 <41> 29 c7 45 31 fd 41 c1 c7 0e 45 29 fd 45 31 ee 41 c1 c5 18 45 29
RSP: 0018:ffffc90001136738 EFLAGS: 00000283
RAX: 00000000e475ff1d RBX: ffffc90001136800 RCX: 0000000001136803
RDX: dffffc0000000000 RSI: ffffffff87f64170 RDI: ffffc90001136800
RBP: ffffc90001136770 R08: ffff8881169db3c0 R09: 0000000000000004
R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000001
R13: 000000001b4ec066 R14: 00000000de475ff1 R15: 00000000e117d6f8
FS: 00007f6d1f6b96c0(0000) GS:ffff88826e279000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f07bc314ff8 CR3: 0000000109f5c000 CR4: 00000000003526b0
Call Trace:
rht_key_get_hash include/linux/rhashtable.h:142 [inline]
rht_key_hashfn include/linux/rhashtable.h:159 [inline]
__rhashtable_lookup include/linux/rhashtable.h:634 [inline]
rhashtable_lookup include/linux/rhashtable.h:677 [inline]
tipc_sk_lookup+0x17f/0x610 net/tipc/socket.c:2998
tipc_sk_rcv+0x440/0x2d20 net/tipc/socket.c:2490
tipc_node_xmit+0x27e/0xe20 net/tipc/node.c:1701
tipc_node_xmit_skb net/tipc/node.c:1766 [inline]
tipc_node_distr_xmit+0x2a5/0x3c0 net/tipc/node.c:1781
tipc_sk_rcv+0x1a29/0x2d20 net/tipc/socket.c:2499
tipc_node_xmit+0x27e/0xe20 net/tipc/node.c:1701
tipc_sk_push_backlog net/tipc/socket.c:1312 [inline]
tipc_sk_filter_connect net/tipc/socket.c:2253 [inline]
tipc_sk_filter_rcv+0x194d/0x2d10 net/tipc/socket.c:2362
tipc_sk_enqueue net/tipc/socket.c:2443 [inline]
tipc_sk_rcv+0x84d/0x2d20 net/tipc/socket.c:2495
tipc_node_xmit+0x27e/0xe20 net/tipc/node.c:1701
tipc_node_xmit_skb net/tipc/node.c:1766 [inline]
tipc_node_distr_xmit+0x2a5/0x3c0 net/tipc/node.c:1781
tipc_sk_backlog_rcv+0x17c/0x210 net/tipc/socket.c:2410
sk_backlog_rcv include/net/sock.h:1185 [inline]
__release_sock+0x1a3/0x2a0 net/core/sock.c:3213
release_sock+0x60/0x1f0 net/core/sock.c:3795
sockopt_release_sock net/core/sock.c:1161 [inline]
sk_setsockopt+0x25e2/0x2b60 net/core/sock.c:1674
sock_setsockopt+0x5a/0x70 net/core/sock.c:1681
do_sock_setsockopt+0x20c/0x410 net/socket.c:2318
__sys_setsockopt net/socket.c:2347 [inline]
__do_sys_setsockopt net/socket.c:2353 [inline]
__se_sys_setsockopt net/socket.c:2350 [inline]
__x64_sys_setsockopt+0x188/0x210 net/socket.c:2350
x64_sys_call+0x233b/0x3040 arch/x86/include/generated/asm/syscalls_64.h:55
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xc3/0xc70 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f6d1e79bf79
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f6d1f6b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00007f6d1ea16090 RCX: 00007f6d1e79bf79
RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003
RBP: 00007f6d1e8327e0 R08: 0000000000000004 R09: 0000000000000000
R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f6d1ea16128 R14: 00007f6d1ea16090 R15: 00007ffcb1ca1208
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 667 Comm: syz.3.69 Not tainted syzkaller #0 PREEMPT
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:63
Code: 15 32 01 5d c3 cc cc cc cc cc cc b8 0c 67 40 a5 90 90 90 90 90 90 90 90 90 90 90 66 90 0f 00 2d a7 66 13 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc b8 70 3e 4e 23
RSP: 0018:ffffc90001057928 EFLAGS: 000002d3
RAX: ffffffff81658e07 RBX: 0000000000000003 RCX: ffff8881169d9140
RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003
RBP: ffffc90001057928 R08: ffff88812c499dc0 R09: 1ffff110258933b8
R10: dffffc0000000000 R11: ffffed10258933b9 R12: 1ffff110258933b8
R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000200
FS: 000055555653a500(0000) GS:ffff88826e379000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000000000 CR3: 0000000109f5c000 CR4: 00000000003526b0
Call Trace:
arch_safe_halt arch/x86/include/asm/paravirt.h:73 [inline]
kvm_wait+0xcc/0x110 arch/x86/kernel/kvm.c:1101
pv_wait arch/x86/include/asm/paravirt-spinlock.h:83 [inline]
pv_wait_head_or_lock kernel/locking/qspinlock_paravirt.h:466 [inline]
__pv_queued_spin_lock_slowpath+0x7df/0xcf0 kernel/locking/qspinlock.c:325
pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt-spinlock.h:35 [inline]
queued_spin_lock_slowpath arch/x86/include/asm/paravirt-spinlock.h:66 [inline]
queued_spin_lock include/asm-generic/qspinlock.h:114 [inline]
do_raw_spin_lock include/linux/spinlock.h:187 [inline]
__raw_spin_lock_bh include/linux/spinlock_api_smp.h:151 [inline]
_raw_spin_lock_bh+0xe7/0xf0 kernel/locking/spinlock.c:178
spin_lock_bh include/linux/spinlock.h:347 [inline]
lock_sock_nested+0x8f/0x2a0 net/core/sock.c:3783
lock_sock include/net/sock.h:1709 [inline]
tipc_release+0xac/0x16d0 net/tipc/socket.c:637
__sock_release net/socket.c:662 [inline]
sock_close+0xd9/0x280 net/socket.c:1455
__fput+0x3ee/0xa50 fs/file_table.c:469
____fput+0x1c/0x30 fs/file_table.c:497
task_work_run+0x1e3/0x260 kernel/task_work.c:233
resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
__exit_to_user_mode_loop kernel/entry/common.c:67 [inline]
exit_to_user_mode_loop+0xa8/0xd0 kernel/entry/common.c:98
__exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]
syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline]
syscall_exit_to_user_mode include/linux/entry-common.h:325 [inline]
do_syscall_64+0x1ea/0xc70 arch/x86/entry/syscall_64.c:100
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f6d1e79bf79
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcb1ca1368 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00007f6d1ea17da0 RCX: 00007f6d1e79bf79
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 00007f6d1ea17da0 R08: 0000000000000006 R09: 0000000000000000
R10: 00007f6d1ea17cb0 R11: 0000000000000246 R12: 000000000000c9df
R13: 00007f6d1ea1609c R14: 000000000000c6dd R15: 00007ffcb1ca1470