syzkaller login: [ 65.475883][ T38] audit: type=1400 audit(1575045457.555:41): avc: denied { map } for pid=7904 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '[localhost]:61678' (ECDSA) to the list of known hosts. [ 67.535927][ T38] audit: type=1400 audit(1575045459.615:42): avc: denied { map } for pid=7915 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16525 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2019/11/29 16:37:39 fuzzer started 2019/11/29 16:37:40 dialing manager at 10.0.2.10:40921 2019/11/29 16:37:40 syscalls: 2533 2019/11/29 16:37:40 code coverage: enabled 2019/11/29 16:37:40 comparison tracing: enabled 2019/11/29 16:37:40 extra coverage: extra coverage is not supported by the kernel 2019/11/29 16:37:40 setuid sandbox: enabled 2019/11/29 16:37:40 namespace sandbox: enabled 2019/11/29 16:37:40 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/29 16:37:40 fault injection: enabled 2019/11/29 16:37:40 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/29 16:37:40 net packet injection: enabled 2019/11/29 16:37:40 net device setup: enabled 2019/11/29 16:37:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/29 16:37:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 16:37:47 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 75.483947][ T38] audit: type=1400 audit(1575045467.565:43): avc: denied { map } for pid=7937 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=97 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 75.596676][ T7938] IPVS: ftp: loaded support on port[0] = 21 16:37:47 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r0 = inotify_init() r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0x0) r2 = inotify_init() r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000300)) r4 = inotify_init() r5 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000300)) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0) syz_open_procfs$namespace(r6, &(0x7f00000004c0)='ns/cgroup\x00') r7 = inotify_init() epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f00007a8000)={0x20000000}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r7, 0x0) fstat(0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000000000000304, 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x2}, [], {0x10, 0x2}}, 0x24, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r9, 0x0) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0xb) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$inet6(0xa, 0x0, 0x0) close(r10) socket$netlink(0x10, 0x3, 0xa) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) [ 75.669263][ T7938] chnl_net:caif_netlink_parms(): no params data found [ 75.701675][ T7938] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.709512][ T7938] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.718586][ T7938] device bridge_slave_0 entered promiscuous mode [ 75.727299][ T7938] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.735652][ T7938] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.737078][ T7941] IPVS: ftp: loaded support on port[0] = 21 [ 75.749969][ T7938] device bridge_slave_1 entered promiscuous mode [ 75.772150][ T7938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.787401][ T7938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.809501][ T7938] team0: Port device team_slave_0 added [ 75.817968][ T7938] team0: Port device team_slave_1 added [ 75.943252][ T7938] device hsr_slave_0 entered promiscuous mode [ 76.031369][ T7938] device hsr_slave_1 entered promiscuous mode [ 76.111407][ T7941] chnl_net:caif_netlink_parms(): no params data found [ 76.119415][ T38] audit: type=1400 audit(1575045468.195:44): avc: denied { create } for pid=7938 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 76.144248][ T38] audit: type=1400 audit(1575045468.195:45): avc: denied { write } for pid=7938 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 76.168882][ T38] audit: type=1400 audit(1575045468.195:46): avc: denied { read } for pid=7938 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 76.194895][ T7938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.276093][ T7938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.332924][ T7938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.400682][ T7938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.467880][ T7941] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.475535][ T7941] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.483483][ T7941] device bridge_slave_0 entered promiscuous mode [ 76.491370][ T7941] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.498600][ T7941] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.506374][ T7941] device bridge_slave_1 entered promiscuous mode [ 76.527463][ T7941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.538227][ T7941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.551956][ T7938] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.559376][ T7938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.567175][ T7938] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.574261][ T7938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.588640][ T7941] team0: Port device team_slave_0 added [ 76.596741][ T7941] team0: Port device team_slave_1 added [ 76.692951][ T7941] device hsr_slave_0 entered promiscuous mode [ 76.751894][ T7941] device hsr_slave_1 entered promiscuous mode [ 76.821237][ T7941] debugfs: Directory 'hsr0' with parent '/' already present! [ 76.844024][ T3858] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.862831][ T3858] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.881687][ T7941] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.934143][ T7941] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.993577][ T7941] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.093855][ T7941] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.154131][ T7938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.168508][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.176516][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.187896][ T7938] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.199832][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.208539][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.217788][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.225062][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.239971][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.248841][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.257161][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.264391][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.272415][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.285368][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.295165][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.303962][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.312660][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.324238][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.332844][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.345954][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.354493][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.368043][ T7946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.376667][ T7946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.387055][ T7941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.396788][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.410487][ T7941] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.418178][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.425966][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.435906][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.444437][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.452789][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.459747][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.468774][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.482380][ T7946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.490796][ T7946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.499225][ T7946] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.506045][ T7946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.513738][ T7946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.527429][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.535276][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.542913][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.551429][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.560906][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.569753][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.583252][ T7938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.590486][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.599564][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.610115][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.618870][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.630584][ T38] audit: type=1400 audit(1575045469.705:47): avc: denied { associate } for pid=7938 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 77.631419][ T7941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.665284][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.674316][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.682767][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.697777][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.705712][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.717891][ T7941] 8021q: adding VLAN 0 to HW filter on device batadv0 16:37:49 executing program 0: syz_emit_ethernet(0xf6, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 16:37:49 executing program 0: syz_emit_ethernet(0xf6, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) [ 77.761944][ T38] audit: type=1400 audit(1575045469.835:48): avc: denied { open } for pid=7953 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 16:37:49 executing program 0: socket$packet(0x11, 0x0, 0x300) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x4e20, @remote}, {0x2, 0x4e23, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000080)) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x10000, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) pipe(&(0x7f0000000180)) io_setup(0x2, &(0x7f00000001c0)=0x0) io_submit(r2, 0x0, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00\n\x05\xb0\xc3\xffc\x1f$\xb4m\xe1\x01\xfc\xff\xff\xd82R\xaf0\'\xe6\x96\x9f\xa5\xeb]]\'HP\xf8\x9bG\xb3\xfc^\xb6\xe8\x8f\xbf\x9a\xea\x9e\x8a\xb0)N\xcb\xcc\n\xcc\x03\x9ca\x90', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r3, &(0x7f0000000000), 0x10000000d) [ 77.786836][ T38] audit: type=1400 audit(1575045469.835:49): avc: denied { kernel } for pid=7953 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 77.824638][ T38] audit: type=1400 audit(1575045469.905:50): avc: denied { map } for pid=7962 comm="syz-executor.0" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=file permissive=1 [ 77.841068][ C0] hrtimer: interrupt took 27073 ns [ 77.893063][ T38] audit: type=1400 audit(1575045469.975:51): avc: denied { create } for pid=7953 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 210.059701][ C3] watchdog: BUG: soft lockup - CPU#3 stuck for 123s! [syz-executor.0:7963] [ 210.061010][ C3] Modules linked in: [ 210.072680][ C3] irq event stamp: 4551631 [ 210.076087][ C3] hardirqs last enabled at (4551630): [] trace_hardirqs_on_thunk+0x1a/0x1c [ 210.084372][ C3] hardirqs last disabled at (4551631): [] trace_hardirqs_off_thunk+0x1a/0x1c [ 210.084372][ C3] softirqs last enabled at (267132): [] __do_softirq+0x6cd/0x98c [ 210.084372][ C3] softirqs last disabled at (279491): [] irq_exit+0x19b/0x1e0 [ 210.084372][ C3] CPU: 3 PID: 7963 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 210.084372][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 210.084372][ C3] RIP: 0010:kmem_cache_alloc_trace+0x2ac/0x790 [ 210.084372][ C3] Code: 7e 0f 85 df fe ff ff e8 d3 ba 4e ff e9 d5 fe ff ff e8 38 bb c8 ff 48 83 3d 88 87 a1 07 00 0f 84 d5 03 00 00 48 8b 7d c8 57 9d <0f> 1f 44 00 00 e9 5f fe ff ff 31 d2 be 35 02 00 00 48 c7 c7 9e 9b [ 210.084372][ C3] RSP: 0018:ffff88802d5099b0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 210.084372][ C3] RAX: 0000000000000007 RBX: 0000000000000a20 RCX: 0000000000000002 [ 210.084372][ C3] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000282 [ 210.084372][ C3] RBP: ffff88802d509a20 R08: 1ffffffff15d29b3 R09: fffffbfff15d29b4 [ 210.084372][ C3] R10: fffffbfff15d29b3 R11: ffffffff8ae94d9f R12: ffff88802cc00540 [ 210.084372][ C3] R13: ffff88802cc00540 R14: 0000000000000a20 R15: ffff88801c9de880 [ 210.084372][ C3] FS: 00007efdc5019700(0000) GS:ffff88802d500000(0000) knlGS:0000000000000000 [ 210.084372][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.084372][ C3] CR2: ffffffffff600400 CR3: 0000000073fb2000 CR4: 00000000003406e0 [ 210.084372][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 210.084372][ C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 210.084372][ C3] Call Trace: [ 210.084372][ C3] [ 210.084372][ C3] ? retint_kernel+0x2b/0x2b [ 210.084372][ C3] dst_cow_metrics_generic+0x4d/0x1f0 [ 210.084372][ C3] icmp6_dst_alloc+0x353/0x4a0 [ 210.084372][ C3] ndisc_send_skb+0xfb7/0x1490 [ 210.084372][ C3] ? __phys_addr+0xa4/0x120 [ 210.084372][ C3] ? nf_hook.constprop.0+0x560/0x560 [ 210.084372][ C3] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 210.084372][ C3] ? skb_set_owner_w+0x265/0x410 [ 210.084372][ C3] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 210.084372][ C3] ndisc_send_rs+0x134/0x720 [ 210.084372][ C3] addrconf_rs_timer+0x30f/0x6e0 [ 210.084372][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 210.084372][ C3] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 210.084372][ C3] call_timer_fn+0x1ac/0x780 [ 210.084372][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 210.084372][ C3] ? msleep_interruptible+0x150/0x150 [ 210.084372][ C3] ? run_timer_softirq+0x6b1/0x1790 [ 210.084372][ C3] ? trace_hardirqs_on+0x67/0x240 [ 210.084372][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 210.084372][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 210.084372][ C3] run_timer_softirq+0x6c3/0x1790 [ 210.084372][ C3] ? add_timer+0x930/0x930 [ 210.084372][ C3] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 210.084372][ C3] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 210.084372][ C3] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 210.084372][ C3] __do_softirq+0x262/0x98c [ 210.084372][ C3] ? sched_clock_cpu+0x14e/0x1b0 [ 210.084372][ C3] irq_exit+0x19b/0x1e0 [ 210.084372][ C3] smp_apic_timer_interrupt+0x1a3/0x610 [ 210.084372][ C3] apic_timer_interrupt+0xf/0x20 [ 210.084372][ C3] [ 210.084372][ C3] RIP: 0010:_raw_spin_unlock_irq+0x4f/0x80 [ 210.084372][ C3] Code: c0 68 34 53 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 33 48 83 3d 12 2a 99 01 00 74 20 fb 66 0f 1f 44 00 00 01 00 00 00 e8 e7 6b 96 f9 65 8b 05 18 14 48 78 85 c0 74 06 41 [ 210.084372][ C3] RSP: 0018:ffff8880738af8d8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 210.084372][ C3] RAX: 1ffffffff12a668d RBX: ffff8880738a4080 RCX: 0000000000000006 [ 210.084372][ C3] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff8880738a4914 [ 210.084372][ C3] RBP: ffff8880738af8e0 R08: 1ffffffff15d29b8 R09: fffffbfff15d29b9 [ 210.084372][ C3] R10: fffffbfff15d29b8 R11: ffffffff8ae94dc7 R12: ffff88802d537380 [ 210.084372][ C3] R13: ffff88802c4d0400 R14: ffff88802bd67040 R15: 0000000000000000 [ 210.084372][ C3] ? _raw_spin_unlock_irq+0x23/0x80 [ 210.084372][ C3] finish_task_switch+0x147/0x750 [ 210.084372][ C3] ? finish_task_switch+0x119/0x750 [ 210.084372][ C3] __schedule+0x8e9/0x1f30 [ 210.084372][ C3] ? __sched_text_start+0x8/0x8 [ 210.084372][ C3] ? __this_cpu_preempt_check+0x35/0x190 [ 210.084372][ C3] ? retint_kernel+0x2b/0x2b [ 210.084372][ C3] ? perf_duration_warn+0x40/0x40 [ 210.084372][ C3] ? preempt_schedule+0x4b/0x60 [ 210.084372][ C3] preempt_schedule_common+0x4f/0xe0 [ 210.084372][ C3] ? __perf_event_enable+0x930/0x930 [ 210.084372][ C3] preempt_schedule+0x4b/0x60 [ 210.084372][ C3] ___preempt_schedule+0x16/0x18 [ 210.084372][ C3] ? smp_call_function_single+0x40b/0x480 [ 210.084372][ C3] smp_call_function_single+0x410/0x480 [ 210.564193][ C3] ? perf_duration_warn+0x40/0x40 [ 210.564193][ C3] ? generic_exec_single+0x4c0/0x4c0 [ 210.564193][ C3] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 210.564193][ C3] ? __perf_event_enable+0x930/0x930 [ 210.564193][ C3] task_function_call+0xe9/0x180 [ 210.564193][ C3] ? perf_event_addr_filters_exec+0x310/0x310 [ 210.564193][ C3] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 210.564193][ C3] ? __perf_event_enable+0x930/0x930 [ 210.564193][ C3] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 210.612991][ C3] ? exclusive_event_installable+0x257/0x320 [ 210.612991][ C3] perf_install_in_context+0x308/0x5a0 [ 210.612991][ C3] ? list_add_event+0xed0/0xed0 [ 210.612991][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 210.612991][ C3] ? __perf_event_header_size.isra.0+0x166/0x1c0 [ 210.612991][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 210.612991][ C3] __do_sys_perf_event_open+0x1cbc/0x2c70 [ 210.612991][ C3] ? perf_event_set_output+0x4e0/0x4e0 [ 210.612991][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 210.612991][ C3] ? put_timespec64+0xda/0x140 [ 210.612991][ C3] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 210.612991][ C3] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 210.612991][ C3] ? do_syscall_64+0x26/0x790 [ 210.612991][ C3] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 210.612991][ C3] ? do_syscall_64+0x26/0x790 [ 210.612991][ C3] __x64_sys_perf_event_open+0xbe/0x150 [ 210.612991][ C3] do_syscall_64+0xfa/0x790 [ 210.612991][ C3] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 210.612991][ C3] RIP: 0033:0x45a759 [ 210.612991][ C3] Code: bd b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 210.612991][ C3] RSP: 002b:00007efdc5018c88 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 210.612991][ C3] RAX: ffffffffffffffda RBX: 000000000071bf00 RCX: 000000000045a759 [ 210.612991][ C3] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00000000200002c0 [ 210.612991][ C3] RBP: 0000000000000005 R08: 000000000000000b R09: 0000000000000000 [ 210.612991][ C3] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007efdc50196d4 [ 210.612991][ C3] R13: 00000000004aec2b R14: 00000000006f1ca8 R15: 00000000ffffffff [ 210.612991][ C3] Sending NMI from CPU 3 to CPUs 0-2: [ 210.798050][ C1] NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0xe/0x10 [ 210.798059][ C0] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0xe/0x10 [ 210.798068][ C2] NMI backtrace for cpu 2 skipped: idling at native_safe_halt+0xe/0x10 [ 210.612991][ C3] Kernel panic - not syncing: softlockup: hung tasks [ 210.806708][ C3] CPU: 3 PID: 7963 Comm: syz-executor.0 Tainted: G L 5.4.0-syzkaller #0 [ 210.806708][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 210.806708][ C3] Call Trace: [ 210.806708][ C3] [ 210.806708][ C3] dump_stack+0x197/0x210 [ 210.806708][ C3] panic+0x2e3/0x75c [ 210.806708][ C3] ? add_taint.cold+0x16/0x16 [ 210.806708][ C3] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 210.806708][ C3] ? printk_safe_flush+0xf2/0x140 [ 210.806708][ C3] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 210.806708][ C3] ? watchdog_timer_fn.cold+0x5/0x33 [ 210.806708][ C3] ? watchdog_timer_fn+0x56e/0x5c0 [ 210.806708][ C3] watchdog_timer_fn.cold+0x16/0x33 [ 210.806708][ C3] __hrtimer_run_queues+0x364/0xe40 [ 210.806708][ C3] ? lockup_detector_update_enable+0xa0/0xa0 [ 210.806708][ C3] ? hrtimer_init+0x330/0x330 [ 210.806708][ C3] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 210.806708][ C3] ? ktime_get_update_offsets_now+0x2ce/0x430 [ 210.806708][ C3] hrtimer_interrupt+0x314/0x770 [ 210.806708][ C3] smp_apic_timer_interrupt+0x160/0x610 [ 210.806708][ C3] apic_timer_interrupt+0xf/0x20 [ 210.806708][ C3] RIP: 0010:kmem_cache_alloc_trace+0x2ac/0x790 [ 210.806708][ C3] Code: 7e 0f 85 df fe ff ff e8 d3 ba 4e ff e9 d5 fe ff ff e8 38 bb c8 ff 48 83 3d 88 87 a1 07 00 0f 84 d5 03 00 00 48 8b 7d c8 57 9d <0f> 1f 44 00 00 e9 5f fe ff ff 31 d2 be 35 02 00 00 48 c7 c7 9e 9b [ 210.806708][ C3] RSP: 0018:ffff88802d5099b0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 210.806708][ C3] RAX: 0000000000000007 RBX: 0000000000000a20 RCX: 0000000000000002 [ 210.806708][ C3] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000282 [ 210.806708][ C3] RBP: ffff88802d509a20 R08: 1ffffffff15d29b3 R09: fffffbfff15d29b4 [ 210.806708][ C3] R10: fffffbfff15d29b3 R11: ffffffff8ae94d9f R12: ffff88802cc00540 [ 210.806708][ C3] R13: ffff88802cc00540 R14: 0000000000000a20 R15: ffff88801c9de880 [ 210.806708][ C3] ? apic_timer_interrupt+0xa/0x20 [ 210.806708][ C3] ? retint_kernel+0x2b/0x2b [ 210.806708][ C3] dst_cow_metrics_generic+0x4d/0x1f0 [ 210.806708][ C3] icmp6_dst_alloc+0x353/0x4a0 [ 210.806708][ C3] ndisc_send_skb+0xfb7/0x1490 [ 210.806708][ C3] ? __phys_addr+0xa4/0x120 [ 210.806708][ C3] ? nf_hook.constprop.0+0x560/0x560 [ 210.806708][ C3] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 210.806708][ C3] ? skb_set_owner_w+0x265/0x410 [ 210.806708][ C3] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 210.806708][ C3] ndisc_send_rs+0x134/0x720 [ 210.806708][ C3] addrconf_rs_timer+0x30f/0x6e0 [ 210.806708][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 210.806708][ C3] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 210.806708][ C3] call_timer_fn+0x1ac/0x780 [ 210.806708][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 210.806708][ C3] ? msleep_interruptible+0x150/0x150 [ 210.806708][ C3] ? run_timer_softirq+0x6b1/0x1790 [ 210.806708][ C3] ? trace_hardirqs_on+0x67/0x240 [ 210.806708][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 210.806708][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 210.806708][ C3] run_timer_softirq+0x6c3/0x1790 [ 210.806708][ C3] ? add_timer+0x930/0x930 [ 210.806708][ C3] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 210.806708][ C3] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 210.806708][ C3] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 210.806708][ C3] __do_softirq+0x262/0x98c [ 210.806708][ C3] ? sched_clock_cpu+0x14e/0x1b0 [ 210.806708][ C3] irq_exit+0x19b/0x1e0 [ 210.806708][ C3] smp_apic_timer_interrupt+0x1a3/0x610 [ 210.806708][ C3] apic_timer_interrupt+0xf/0x20 [ 210.806708][ C3] [ 210.806708][ C3] RIP: 0010:_raw_spin_unlock_irq+0x4f/0x80 [ 210.806708][ C3] Code: c0 68 34 53 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 33 48 83 3d 12 2a 99 01 00 74 20 fb 66 0f 1f 44 00 00 01 00 00 00 e8 e7 6b 96 f9 65 8b 05 18 14 48 78 85 c0 74 06 41 [ 210.806708][ C3] RSP: 0018:ffff8880738af8d8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 210.806708][ C3] RAX: 1ffffffff12a668d RBX: ffff8880738a4080 RCX: 0000000000000006 [ 210.806708][ C3] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff8880738a4914 [ 210.806708][ C3] RBP: ffff8880738af8e0 R08: 1ffffffff15d29b8 R09: fffffbfff15d29b9 [ 210.806708][ C3] R10: fffffbfff15d29b8 R11: ffffffff8ae94dc7 R12: ffff88802d537380 [ 210.806708][ C3] R13: ffff88802c4d0400 R14: ffff88802bd67040 R15: 0000000000000000 [ 210.806708][ C3] ? _raw_spin_unlock_irq+0x23/0x80 [ 210.806708][ C3] finish_task_switch+0x147/0x750 [ 210.806708][ C3] ? finish_task_switch+0x119/0x750 [ 210.806708][ C3] __schedule+0x8e9/0x1f30 [ 210.806708][ C3] ? __sched_text_start+0x8/0x8 [ 210.806708][ C3] ? __this_cpu_preempt_check+0x35/0x190 [ 210.806708][ C3] ? retint_kernel+0x2b/0x2b [ 210.806708][ C3] ? perf_duration_warn+0x40/0x40 [ 210.806708][ C3] ? preempt_schedule+0x4b/0x60 [ 210.806708][ C3] preempt_schedule_common+0x4f/0xe0 [ 210.806708][ C3] ? __perf_event_enable+0x930/0x930 [ 210.806708][ C3] preempt_schedule+0x4b/0x60 [ 210.806708][ C3] ___preempt_schedule+0x16/0x18 [ 210.806708][ C3] ? smp_call_function_single+0x40b/0x480 [ 210.806708][ C3] smp_call_function_single+0x410/0x480 [ 210.806708][ C3] ? perf_duration_warn+0x40/0x40 [ 210.806708][ C3] ? generic_exec_single+0x4c0/0x4c0 [ 210.806708][ C3] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 210.806708][ C3] ? __perf_event_enable+0x930/0x930 [ 210.806708][ C3] task_function_call+0xe9/0x180 [ 210.806708][ C3] ? perf_event_addr_filters_exec+0x310/0x310 [ 210.806708][ C3] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 210.806708][ C3] ? __perf_event_enable+0x930/0x930 [ 210.806708][ C3] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 210.806708][ C3] ? exclusive_event_installable+0x257/0x320 [ 210.806708][ C3] perf_install_in_context+0x308/0x5a0 [ 210.806708][ C3] ? list_add_event+0xed0/0xed0 [ 210.806708][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 210.806708][ C3] ? __perf_event_header_size.isra.0+0x166/0x1c0 [ 210.806708][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 210.806708][ C3] __do_sys_perf_event_open+0x1cbc/0x2c70 [ 210.806708][ C3] ? perf_event_set_output+0x4e0/0x4e0 [ 210.806708][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 210.806708][ C3] ? put_timespec64+0xda/0x140 [ 210.806708][ C3] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 210.806708][ C3] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 210.806708][ C3] ? do_syscall_64+0x26/0x790 [ 210.806708][ C3] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 210.806708][ C3] ? do_syscall_64+0x26/0x790 [ 210.806708][ C3] __x64_sys_perf_event_open+0xbe/0x150 [ 210.806708][ C3] do_syscall_64+0xfa/0x790 [ 210.806708][ C3] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 210.806708][ C3] RIP: 0033:0x45a759 [ 210.806708][ C3] Code: bd b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 210.806708][ C3] RSP: 002b:00007efdc5018c88 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 210.806708][ C3] RAX: ffffffffffffffda RBX: 000000000071bf00 RCX: 000000000045a759 [ 210.806708][ C3] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00000000200002c0 [ 210.806708][ C3] RBP: 0000000000000005 R08: 000000000000000b R09: 0000000000000000 [ 210.806708][ C3] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007efdc50196d4 [ 210.806708][ C3] R13: 00000000004aec2b R14: 00000000006f1ca8 R15: 00000000ffffffff [ 210.806708][ C3] ------------[ cut here ]------------ [ 211.564075][ C3] WARNING: CPU: 3 PID: 7963 at kernel/locking/mutex.c:1419 mutex_trylock+0x279/0x2f0 [ 211.564075][ C3] Kernel panic - not syncing: panic_on_warn set ... [ 211.564075][ C3] ------------[ cut here ]------------ [ 211.564075][ C3] WARNING: CPU: 3 PID: 7963 at kernel/locking/mutex.c:1419 mutex_trylock+0x279/0x2f0 [ 211.564075][ C3] Modules linked in: [ 211.564075][ C3] CPU: 3 PID: 7963 Comm: syz-executor.0 Tainted: G L 5.4.0-syzkaller #0 [ 211.564075][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 211.564075][ C3] RIP: 0010:mutex_trylock+0x279/0x2f0 [ 211.564075][ C3] Code: c9 41 b8 01 00 00 00 31 c9 ba 01 00 00 00 31 f6 e8 fc 92 a1 f9 58 48 8d 65 d8 b8 01 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 0c fe ff ff 48 c7 c7 e0 24 20 8b 48 89 4d d0 e8 00 d7 f8 [ 211.564075][ C3] RSP: 0018:ffff88802d509008 EFLAGS: 00010006 [ 211.564075][ C3] RAX: 0000000000010104 RBX: 1ffff11005aa1209 RCX: 0000000000000004 [ 211.564075][ C3] RDX: 0000000000010100 RSI: ffffffff816bc9c5 RDI: ffffffff895c25a0 [ 211.564075][ C3] RBP: ffff88802d509038 R08: 0000000000000002 R09: fffffbfff12b381d [ 211.564075][ C3] R10: fffffbfff12b381c R11: ffffffff8959c0e3 R12: ffffffff8b2024e0 [ 211.564075][ C3] R13: 0000000000000000 R14: ffffffff87b93400 R15: ffffffff895c25a0 [ 211.564075][ C3] FS: 00007efdc5019700(0000) GS:ffff88802d500000(0000) knlGS:0000000000000000 [ 211.564075][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.564075][ C3] CR2: ffffffffff600400 CR3: 0000000073fb2000 CR4: 00000000003406e0 [ 211.564075][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 211.564075][ C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 211.564075][ C3] Call Trace: [ 211.564075][ C3] [ 211.564075][ C3] ? mutex_trylock+0x1f0/0x2f0 [ 211.564075][ C3] __crash_kexec+0x91/0x200 [ 211.564075][ C3] ? kexec_crash_loaded+0x20/0x20 [ 211.564075][ C3] ? trace_hardirqs_off+0x62/0x240 [ 211.564075][ C3] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 211.564075][ C3] ? __printk_safe_flush+0x31e/0x3a0 [ 211.564075][ C3] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 211.564075][ C3] ? find_next_bit+0x107/0x130 [ 211.564075][ C3] ? cpumask_next+0x41/0x50 [ 211.564075][ C3] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 211.564075][ C3] ? printk_safe_flush+0xf2/0x140 [ 211.564075][ C3] ? mutex_trylock+0x1f0/0x2f0 [ 211.564075][ C3] panic+0x308/0x75c [ 211.564075][ C3] ? add_taint.cold+0x16/0x16 [ 211.564075][ C3] ? printk+0xba/0xed [ 211.564075][ C3] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 211.564075][ C3] ? __warn.cold+0x14/0x3e [ 211.564075][ C3] ? __warn+0xd9/0x1cf [ 211.564075][ C3] ? mutex_trylock+0x279/0x2f0 [ 211.564075][ C3] __warn.cold+0x2f/0x3e [ 211.564075][ C3] ? report_bug.cold+0x63/0xb2 [ 211.564075][ C3] ? mutex_trylock+0x279/0x2f0 [ 211.564075][ C3] report_bug+0x289/0x300 [ 211.564075][ C3] do_error_trap+0x11b/0x200 [ 211.564075][ C3] do_invalid_op+0x37/0x50 [ 211.564075][ C3] ? mutex_trylock+0x279/0x2f0 [ 211.564075][ C3] invalid_op+0x23/0x30 [ 211.564075][ C3] RIP: 0010:mutex_trylock+0x279/0x2f0 [ 211.564075][ C3] Code: c9 41 b8 01 00 00 00 31 c9 ba 01 00 00 00 31 f6 e8 fc 92 a1 f9 58 48 8d 65 d8 b8 01 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 0c fe ff ff 48 c7 c7 e0 24 20 8b 48 89 4d d0 e8 00 d7 f8 [ 211.564075][ C3] RSP: 0018:ffff88802d509440 EFLAGS: 00010006 [ 211.564075][ C3] RAX: 0000000000010103 RBX: 1ffff11005aa1290 RCX: 0000000000000004 [ 211.564075][ C3] RDX: 0000000000010100 RSI: ffffffff816bc9c5 RDI: ffffffff895c25a0 [ 211.564075][ C3] RBP: ffff88802d509470 R08: 0000000000000001 R09: fffffbfff12b381d [ 211.564075][ C3] R10: fffffbfff12b381c R11: ffffffff8959c0e3 R12: ffffffff8b2024e0 [ 211.564075][ C3] R13: 0000000000000000 R14: ffff88802d509900 R15: ffffffff895c25a0 [ 211.564075][ C3] ? __crash_kexec+0x85/0x200 [ 211.564075][ C3] __crash_kexec+0x91/0x200 [ 211.564075][ C3] ? kexec_crash_loaded+0x20/0x20 [ 211.564075][ C3] ? trace_hardirqs_off+0x62/0x240 [ 211.564075][ C3] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 211.564075][ C3] ? __printk_safe_flush+0x31e/0x3a0 [ 211.564075][ C3] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 211.564075][ C3] ? find_next_bit+0x107/0x130 [ 211.564075][ C3] ? cpumask_next+0x41/0x50 [ 211.564075][ C3] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 211.564075][ C3] ? printk_safe_flush+0xf2/0x140 [ 211.564075][ C3] panic+0x308/0x75c [ 211.564075][ C3] ? add_taint.cold+0x16/0x16 [ 211.564075][ C3] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 211.564075][ C3] ? printk_safe_flush+0xf2/0x140 [ 211.564075][ C3] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 211.564075][ C3] ? watchdog_timer_fn.cold+0x5/0x33 [ 211.564075][ C3] ? watchdog_timer_fn+0x56e/0x5c0 [ 211.564075][ C3] watchdog_timer_fn.cold+0x16/0x33 [ 211.564075][ C3] __hrtimer_run_queues+0x364/0xe40 [ 211.564075][ C3] ? lockup_detector_update_enable+0xa0/0xa0 [ 211.564075][ C3] ? hrtimer_init+0x330/0x330 [ 211.564075][ C3] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 211.564075][ C3] ? ktime_get_update_offsets_now+0x2ce/0x430 [ 211.564075][ C3] hrtimer_interrupt+0x314/0x770 [ 211.564075][ C3] smp_apic_timer_interrupt+0x160/0x610 [ 211.564075][ C3] apic_timer_interrupt+0xf/0x20 [ 211.564075][ C3] RIP: 0010:kmem_cache_alloc_trace+0x2ac/0x790 [ 211.564075][ C3] Code: 7e 0f 85 df fe ff ff e8 d3 ba 4e ff e9 d5 fe ff ff e8 38 bb c8 ff 48 83 3d 88 87 a1 07 00 0f 84 d5 03 00 00 48 8b 7d c8 57 9d <0f> 1f 44 00 00 e9 5f fe ff ff 31 d2 be 35 02 00 00 48 c7 c7 9e 9b [ 211.564075][ C3] RSP: 0018:ffff88802d5099b0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 211.564075][ C3] RAX: 0000000000000007 RBX: 0000000000000a20 RCX: 0000000000000002 [ 211.564075][ C3] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000282 [ 211.564075][ C3] RBP: ffff88802d509a20 R08: 1ffffffff15d29b3 R09: fffffbfff15d29b4 [ 211.564075][ C3] R10: fffffbfff15d29b3 R11: ffffffff8ae94d9f R12: ffff88802cc00540 [ 211.564075][ C3] R13: ffff88802cc00540 R14: 0000000000000a20 R15: ffff88801c9de880 [ 211.564075][ C3] ? apic_timer_interrupt+0xa/0x20 [ 211.564075][ C3] ? retint_kernel+0x2b/0x2b [ 211.564075][ C3] dst_cow_metrics_generic+0x4d/0x1f0 [ 211.564075][ C3] icmp6_dst_alloc+0x353/0x4a0 [ 211.564075][ C3] ndisc_send_skb+0xfb7/0x1490 [ 211.564075][ C3] ? __phys_addr+0xa4/0x120 [ 211.564075][ C3] ? nf_hook.constprop.0+0x560/0x560 [ 211.564075][ C3] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 211.564075][ C3] ? skb_set_owner_w+0x265/0x410 [ 211.564075][ C3] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 211.564075][ C3] ndisc_send_rs+0x134/0x720 [ 211.564075][ C3] addrconf_rs_timer+0x30f/0x6e0 [ 211.564075][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 211.564075][ C3] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 211.564075][ C3] call_timer_fn+0x1ac/0x780 [ 211.564075][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 211.564075][ C3] ? msleep_interruptible+0x150/0x150 [ 211.564075][ C3] ? run_timer_softirq+0x6b1/0x1790 [ 211.564075][ C3] ? trace_hardirqs_on+0x67/0x240 [ 211.564075][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 211.564075][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 211.564075][ C3] run_timer_softirq+0x6c3/0x1790 [ 211.564075][ C3] ? add_timer+0x930/0x930 [ 211.564075][ C3] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 211.564075][ C3] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 211.564075][ C3] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 211.564075][ C3] __do_softirq+0x262/0x98c [ 211.564075][ C3] ? sched_clock_cpu+0x14e/0x1b0 [ 211.564075][ C3] irq_exit+0x19b/0x1e0 [ 211.564075][ C3] smp_apic_timer_interrupt+0x1a3/0x610 [ 211.564075][ C3] apic_timer_interrupt+0xf/0x20 [ 211.564075][ C3] [ 211.564075][ C3] RIP: 0010:_raw_spin_unlock_irq+0x4f/0x80 [ 211.564075][ C3] Code: c0 68 34 53 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 33 48 83 3d 12 2a 99 01 00 74 20 fb 66 0f 1f 44 00 00 01 00 00 00 e8 e7 6b 96 f9 65 8b 05 18 14 48 78 85 c0 74 06 41 [ 211.564075][ C3] RSP: 0018:ffff8880738af8d8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 211.564075][ C3] RAX: 1ffffffff12a668d RBX: ffff8880738a4080 RCX: 0000000000000006 [ 211.564075][ C3] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff8880738a4914 [ 211.564075][ C3] RBP: ffff8880738af8e0 R08: 1ffffffff15d29b8 R09: fffffbfff15d29b9 [ 211.564075][ C3] R10: fffffbfff15d29b8 R11: ffffffff8ae94dc7 R12: ffff88802d537380 [ 211.564075][ C3] R13: ffff88802c4d0400 R14: ffff88802bd67040 R15: 0000000000000000 [ 211.564075][ C3] ? _raw_spin_unlock_irq+0x23/0x80 [ 211.564075][ C3] finish_task_switch+0x147/0x750 [ 211.564075][ C3] ? finish_task_switch+0x119/0x750 [ 211.564075][ C3] __schedule+0x8e9/0x1f30 [ 211.564075][ C3] ? __sched_text_start+0x8/0x8 [ 211.564075][ C3] ? __this_cpu_preempt_check+0x35/0x190 [ 211.564075][ C3] ? retint_kernel+0x2b/0x2b [ 211.564075][ C3] ? perf_duration_warn+0x40/0x40 [ 211.564075][ C3] ? preempt_schedule+0x4b/0x60 [ 211.564075][ C3] preempt_schedule_common+0x4f/0xe0 [ 211.564075][ C3] ? __perf_event_enable+0x930/0x930 [ 211.564075][ C3] preempt_schedule+0x4b/0x60 [ 211.564075][ C3] ___preempt_schedule+0x16/0x18 [ 211.564075][ C3] ? smp_call_function_single+0x40b/0x480 [ 211.564075][ C3] smp_call_function_single+0x410/0x480 [ 211.564075][ C3] ? perf_duration_warn+0x40/0x40 [ 211.564075][ C3] ? generic_exec_single+0x4c0/0x4c0 [ 211.564075][ C3] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 211.564075][ C3] ? __perf_event_enable+0x930/0x930 [ 211.564075][ C3] task_function_call+0xe9/0x180 [ 211.564075][ C3] ? perf_event_addr_filters_exec+0x310/0x310 [ 211.564075][ C3] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 211.564075][ C3] ? __perf_event_enable+0x930/0x930 [ 211.564075][ C3] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 211.564075][ C3] ? exclusive_event_installable+0x257/0x320 [ 211.564075][ C3] perf_install_in_context+0x308/0x5a0 [ 211.564075][ C3] ? list_add_event+0xed0/0xed0 [ 211.564075][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 211.564075][ C3] ? __perf_event_header_size.isra.0+0x166/0x1c0 [ 211.564075][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 211.564075][ C3] __do_sys_perf_event_open+0x1cbc/0x2c70 [ 211.564075][ C3] ? perf_event_set_output+0x4e0/0x4e0 [ 212.564013][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 212.564013][ C3] ? put_timespec64+0xda/0x140 [ 212.564013][ C3] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 212.564013][ C3] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 212.564013][ C3] ? do_syscall_64+0x26/0x790 [ 212.564013][ C3] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 212.564013][ C3] ? do_syscall_64+0x26/0x790 [ 212.564013][ C3] __x64_sys_perf_event_open+0xbe/0x150 [ 212.564013][ C3] do_syscall_64+0xfa/0x790 [ 212.564013][ C3] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 212.564013][ C3] RIP: 0033:0x45a759 [ 212.564013][ C3] Code: bd b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 212.564013][ C3] RSP: 002b:00007efdc5018c88 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 212.564013][ C3] RAX: ffffffffffffffda RBX: 000000000071bf00 RCX: 000000000045a759 [ 212.564013][ C3] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00000000200002c0 [ 212.564013][ C3] RBP: 0000000000000005 R08: 000000000000000b R09: 0000000000000000 [ 212.564013][ C3] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007efdc50196d4 [ 212.564013][ C3] R13: 00000000004aec2b R14: 00000000006f1ca8 R15: 00000000ffffffff [ 212.564013][ C3] irq event stamp: 4551631 [ 212.564013][ C3] hardirqs last enabled at (4551630): [] trace_hardirqs_on_thunk+0x1a/0x1c [ 212.564013][ C3] hardirqs last disabled at (4551631): [] trace_hardirqs_off_thunk+0x1a/0x1c [ 212.564013][ C3] softirqs last enabled at (267132): [] __do_softirq+0x6cd/0x98c [ 212.564013][ C3] softirqs last disabled at (279491): [] irq_exit+0x19b/0x1e0 [ 212.564013][ C3] ---[ end trace 5a669ea451f4cfb1 ]--- [ 212.564013][ C3] ------------[ cut here ]------------ [ 212.564013][ C3] WARNING: CPU: 3 PID: 7963 at kernel/locking/mutex.c:737 mutex_unlock+0x1d/0x30 [ 212.564013][ C3] Modules linked in: [ 212.564013][ C3] CPU: 3 PID: 7963 Comm: syz-executor.0 Tainted: G W L 5.4.0-syzkaller #0 [ 212.564013][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 212.564013][ C3] RIP: 0010:mutex_unlock+0x1d/0x30 [ 212.564013][ C3] Code: 4c 89 ff e8 55 e2 f8 f9 e9 8c fb ff ff 55 65 8b 05 10 f5 48 78 a9 00 ff 1f 00 48 89 e5 75 0b 48 8b 75 08 e8 45 f9 ff ff 5d c3 <0f> 0b 48 8b 75 08 e8 38 f9 ff ff 5d c3 66 0f 1f 44 00 00 48 b8 00 [ 212.564013][ C3] RSP: 0018:ffff88802d509038 EFLAGS: 00010006 [ 212.564013][ C3] RAX: 0000000000010104 RBX: 1ffff11005aa1209 RCX: ffffffff816bc9dd [ 212.564013][ C3] RDX: 0000000000010100 RSI: ffffffff816bca3f RDI: ffffffff895c25a0 [ 212.564013][ C3] RBP: ffff88802d509038 R08: ffff8880738a4080 R09: fffffbfff15d29b9 [ 212.564013][ C3] R10: ffff8880738a4990 R11: ffff8880738a4080 R12: 0000000000000001 [ 212.564013][ C3] R13: 0000000000000000 R14: ffffffff87b93400 R15: 000000000000058b [ 212.564013][ C3] FS: 00007efdc5019700(0000) GS:ffff88802d500000(0000) knlGS:0000000000000000 [ 212.564013][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.564013][ C3] CR2: ffffffffff600400 CR3: 0000000073fb2000 CR4: 00000000003406e0 [ 212.564013][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 212.564013][ C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 212.564013][ C3] Call Trace: [ 212.564013][ C3] [ 212.564013][ C3] __crash_kexec+0x10b/0x200 [ 212.564013][ C3] ? kexec_crash_loaded+0x20/0x20 [ 212.564013][ C3] ? trace_hardirqs_off+0x62/0x240 [ 212.564013][ C3] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 212.564013][ C3] ? __printk_safe_flush+0x31e/0x3a0 [ 212.564013][ C3] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 212.564013][ C3] ? find_next_bit+0x107/0x130 [ 212.564013][ C3] ? cpumask_next+0x41/0x50 [ 212.564013][ C3] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 212.564013][ C3] ? printk_safe_flush+0xf2/0x140 [ 212.564013][ C3] ? mutex_trylock+0x1f0/0x2f0 [ 212.564013][ C3] panic+0x308/0x75c [ 212.564013][ C3] ? add_taint.cold+0x16/0x16 [ 212.564013][ C3] ? printk+0xba/0xed [ 212.564013][ C3] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 212.564013][ C3] ? __warn.cold+0x14/0x3e [ 212.564013][ C3] ? __warn+0xd9/0x1cf [ 212.564013][ C3] ? mutex_trylock+0x279/0x2f0 [ 212.564013][ C3] __warn.cold+0x2f/0x3e [ 212.564013][ C3] ? report_bug.cold+0x63/0xb2 [ 212.564013][ C3] ? mutex_trylock+0x279/0x2f0 [ 212.564013][ C3] report_bug+0x289/0x300 [ 212.564013][ C3] do_error_trap+0x11b/0x200 [ 212.564013][ C3] do_invalid_op+0x37/0x50 [ 212.564013][ C3] ? mutex_trylock+0x279/0x2f0 [ 212.564013][ C3] invalid_op+0x23/0x30 [ 212.564013][ C3] RIP: 0010:mutex_trylock+0x279/0x2f0 [ 212.564013][ C3] Code: c9 41 b8 01 00 00 00 31 c9 ba 01 00 00 00 31 f6 e8 fc 92 a1 f9 58 48 8d 65 d8 b8 01 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 0c fe ff ff 48 c7 c7 e0 24 20 8b 48 89 4d d0 e8 00 d7 f8 [ 212.564013][ C3] RSP: 0018:ffff88802d509440 EFLAGS: 00010006 [ 212.564013][ C3] RAX: 0000000000010103 RBX: 1ffff11005aa1290 RCX: 0000000000000004 [ 212.564013][ C3] RDX: 0000000000010100 RSI: ffffffff816bc9c5 RDI: ffffffff895c25a0 [ 212.564013][ C3] RBP: ffff88802d509470 R08: 0000000000000001 R09: fffffbfff12b381d [ 212.564013][ C3] R10: fffffbfff12b381c R11: ffffffff8959c0e3 R12: ffffffff8b2024e0 [ 212.564013][ C3] R13: 0000000000000000 R14: ffff88802d509900 R15: ffffffff895c25a0 [ 212.564013][ C3] ? __crash_kexec+0x85/0x200 [ 212.564013][ C3] __crash_kexec+0x91/0x200 [ 212.564013][ C3] ? kexec_crash_loaded+0x20/0x20 [ 212.564013][ C3] ? trace_hardirqs_off+0x62/0x240 [ 212.564013][ C3] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 212.564013][ C3] ? __printk_safe_flush+0x31e/0x3a0 [ 212.564013][ C3] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 212.564013][ C3] ? find_next_bit+0x107/0x130 [ 212.564013][ C3] ? cpumask_next+0x41/0x50 [ 212.564013][ C3] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 212.564013][ C3] ? printk_safe_flush+0xf2/0x140 [ 212.564013][ C3] panic+0x308/0x75c [ 212.564013][ C3] ? add_taint.cold+0x16/0x16 [ 212.564013][ C3] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 212.564013][ C3] ? printk_safe_flush+0xf2/0x140 [ 212.564013][ C3] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 212.564013][ C3] ? watchdog_timer_fn.cold+0x5/0x33 [ 212.564013][ C3] ? watchdog_timer_fn+0x56e/0x5c0 [ 212.564013][ C3] watchdog_timer_fn.cold+0x16/0x33 [ 212.564013][ C3] __hrtimer_run_queues+0x364/0xe40 [ 212.564013][ C3] ? lockup_detector_update_enable+0xa0/0xa0 [ 212.564013][ C3] ? hrtimer_init+0x330/0x330 [ 212.564013][ C3] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 212.564013][ C3] ? ktime_get_update_offsets_now+0x2ce/0x430 [ 212.564013][ C3] hrtimer_interrupt+0x314/0x770 [ 212.564013][ C3] smp_apic_timer_interrupt+0x160/0x610 [ 212.564013][ C3] apic_timer_interrupt+0xf/0x20 [ 212.564013][ C3] RIP: 0010:kmem_cache_alloc_trace+0x2ac/0x790 [ 212.564013][ C3] Code: 7e 0f 85 df fe ff ff e8 d3 ba 4e ff e9 d5 fe ff ff e8 38 bb c8 ff 48 83 3d 88 87 a1 07 00 0f 84 d5 03 00 00 48 8b 7d c8 57 9d <0f> 1f 44 00 00 e9 5f fe ff ff 31 d2 be 35 02 00 00 48 c7 c7 9e 9b [ 212.564013][ C3] RSP: 0018:ffff88802d5099b0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 212.564013][ C3] RAX: 0000000000000007 RBX: 0000000000000a20 RCX: 0000000000000002 [ 212.564013][ C3] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000282 [ 212.564013][ C3] RBP: ffff88802d509a20 R08: 1ffffffff15d29b3 R09: fffffbfff15d29b4 [ 212.564013][ C3] R10: fffffbfff15d29b3 R11: ffffffff8ae94d9f R12: ffff88802cc00540 [ 212.564013][ C3] R13: ffff88802cc00540 R14: 0000000000000a20 R15: ffff88801c9de880 [ 212.564013][ C3] ? apic_timer_interrupt+0xa/0x20 [ 212.564013][ C3] ? retint_kernel+0x2b/0x2b [ 212.564013][ C3] dst_cow_metrics_generic+0x4d/0x1f0 [ 212.564013][ C3] icmp6_dst_alloc+0x353/0x4a0 [ 212.564013][ C3] ndisc_send_skb+0xfb7/0x1490 [ 212.564013][ C3] ? __phys_addr+0xa4/0x120 [ 212.564013][ C3] ? nf_hook.constprop.0+0x560/0x560 [ 212.564013][ C3] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 212.564013][ C3] ? skb_set_owner_w+0x265/0x410 [ 212.564013][ C3] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 212.564013][ C3] ndisc_send_rs+0x134/0x720 [ 212.564013][ C3] addrconf_rs_timer+0x30f/0x6e0 [ 212.564013][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 212.564013][ C3] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 212.564013][ C3] call_timer_fn+0x1ac/0x780 [ 212.564013][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 212.564013][ C3] ? msleep_interruptible+0x150/0x150 [ 212.564013][ C3] ? run_timer_softirq+0x6b1/0x1790 [ 212.564013][ C3] ? trace_hardirqs_on+0x67/0x240 [ 212.564013][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 212.564013][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 212.564013][ C3] run_timer_softirq+0x6c3/0x1790 [ 212.564013][ C3] ? add_timer+0x930/0x930 [ 212.564013][ C3] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 212.564013][ C3] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 212.564013][ C3] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 212.564013][ C3] __do_softirq+0x262/0x98c [ 212.564013][ C3] ? sched_clock_cpu+0x14e/0x1b0 [ 212.564013][ C3] irq_exit+0x19b/0x1e0 [ 212.564013][ C3] smp_apic_timer_interrupt+0x1a3/0x610 [ 212.564013][ C3] apic_timer_interrupt+0xf/0x20 [ 212.564013][ C3] [ 212.564013][ C3] RIP: 0010:_raw_spin_unlock_irq+0x4f/0x80 [ 212.564013][ C3] Code: c0 68 34 53 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 33 48 83 3d 12 2a 99 01 00 74 20 fb 66 0f 1f 44 00 00 01 00 00 00 e8 e7 6b 96 f9 65 8b 05 18 14 48 78 85 c0 74 06 41 [ 212.564013][ C3] RSP: 0018:ffff8880738af8d8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 212.564013][ C3] RAX: 1ffffffff12a668d RBX: ffff8880738a4080 RCX: 0000000000000006 [ 212.564013][ C3] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff8880738a4914 [ 212.564013][ C3] RBP: ffff8880738af8e0 R08: 1ffffffff15d29b8 R09: fffffbfff15d29b9 [ 212.564013][ C3] R10: fffffbfff15d29b8 R11: ffffffff8ae94dc7 R12: ffff88802d537380 [ 212.564013][ C3] R13: ffff88802c4d0400 R14: ffff88802bd67040 R15: 0000000000000000 [ 212.564013][ C3] ? _raw_spin_unlock_irq+0x23/0x80 [ 212.564013][ C3] finish_task_switch+0x147/0x750 [ 212.564013][ C3] ? finish_task_switch+0x119/0x750 [ 213.564151][ C3] __schedule+0x8e9/0x1f30 [ 213.564151][ C3] ? __sched_text_start+0x8/0x8 [ 213.564151][ C3] ? __this_cpu_preempt_check+0x35/0x190 [ 213.564151][ C3] ? retint_kernel+0x2b/0x2b [ 213.564151][ C3] ? perf_duration_warn+0x40/0x40 [ 213.564151][ C3] ? preempt_schedule+0x4b/0x60 [ 213.564151][ C3] preempt_schedule_common+0x4f/0xe0 [ 213.564151][ C3] ? __perf_event_enable+0x930/0x930 [ 213.564151][ C3] preempt_schedule+0x4b/0x60 [ 213.564151][ C3] ___preempt_schedule+0x16/0x18 [ 213.612860][ C3] ? smp_call_function_single+0x40b/0x480 [ 213.612860][ C3] smp_call_function_single+0x410/0x480 [ 213.612860][ C3] ? perf_duration_warn+0x40/0x40 [ 213.612860][ C3] ? generic_exec_single+0x4c0/0x4c0 [ 213.612860][ C3] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 213.612860][ C3] ? __perf_event_enable+0x930/0x930 [ 213.612860][ C3] task_function_call+0xe9/0x180 [ 213.612860][ C3] ? perf_event_addr_filters_exec+0x310/0x310 [ 213.612860][ C3] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 213.667053][ C3] ? __perf_event_enable+0x930/0x930 [ 213.667053][ C3] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 213.667053][ C3] ? exclusive_event_installable+0x257/0x320 [ 213.667053][ C3] perf_install_in_context+0x308/0x5a0 [ 213.667053][ C3] ? list_add_event+0xed0/0xed0 [ 213.667053][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 213.667053][ C3] ? __perf_event_header_size.isra.0+0x166/0x1c0 [ 213.667053][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 213.667053][ C3] __do_sys_perf_event_open+0x1cbc/0x2c70 [ 213.667053][ C3] ? perf_event_set_output+0x4e0/0x4e0 [ 213.667053][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 213.667053][ C3] ? put_timespec64+0xda/0x140 [ 213.667053][ C3] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 213.667053][ C3] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 213.667053][ C3] ? do_syscall_64+0x26/0x790 [ 213.667053][ C3] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.667053][ C3] ? do_syscall_64+0x26/0x790 [ 213.667053][ C3] __x64_sys_perf_event_open+0xbe/0x150 [ 213.667053][ C3] do_syscall_64+0xfa/0x790 [ 213.667053][ C3] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.667053][ C3] RIP: 0033:0x45a759 [ 213.667053][ C3] Code: bd b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 213.667053][ C3] RSP: 002b:00007efdc5018c88 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 213.667053][ C3] RAX: ffffffffffffffda RBX: 000000000071bf00 RCX: 000000000045a759 [ 213.667053][ C3] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00000000200002c0 [ 213.667053][ C3] RBP: 0000000000000005 R08: 000000000000000b R09: 0000000000000000 [ 213.667053][ C3] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007efdc50196d4 [ 213.667053][ C3] R13: 00000000004aec2b R14: 00000000006f1ca8 R15: 00000000ffffffff [ 213.667053][ C3] irq event stamp: 4551631 [ 213.667053][ C3] hardirqs last enabled at (4551630): [] trace_hardirqs_on_thunk+0x1a/0x1c [ 213.667053][ C3] hardirqs last disabled at (4551631): [] trace_hardirqs_off_thunk+0x1a/0x1c [ 213.667053][ C3] softirqs last enabled at (267132): [] __do_softirq+0x6cd/0x98c [ 213.667053][ C3] softirqs last disabled at (279491): [] irq_exit+0x19b/0x1e0 [ 213.667053][ C3] ---[ end trace 5a669ea451f4cfb2 ]--- [ 213.667053][ C3] Kernel Offset: disabled [ 213.667053][ C3] Rebooting in 86400 seconds..