[ 11.422719][ T30] audit: type=1400 audit(1713428872.670:63): avc: denied { write } for pid=224 comm="sh" path="pipe:[13146]" dev="pipefs" ino=13146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 11.426148][ T30] audit: type=1400 audit(1713428872.670:64): avc: denied { rlimitinh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.428868][ T30] audit: type=1400 audit(1713428872.670:65): avc: denied { siginh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.85' (ED25519) to the list of known hosts. 2024/04/18 08:27:59 fuzzer started 2024/04/18 08:27:59 dialing manager at 10.128.0.163:30005 [ 18.518367][ T30] audit: type=1400 audit(1713428879.770:66): avc: denied { node_bind } for pid=282 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 18.521237][ T30] audit: type=1400 audit(1713428879.770:67): avc: denied { name_bind } for pid=282 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 18.552345][ T30] audit: type=1400 audit(1713428879.800:68): avc: denied { integrity } for pid=289 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 18.556386][ T289] cgroup: Unknown subsys name 'net' [ 18.574471][ T30] audit: type=1400 audit(1713428879.800:69): avc: denied { mounton } for pid=289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.601858][ T30] audit: type=1400 audit(1713428879.800:70): avc: denied { mount } for pid=289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.602008][ T289] cgroup: Unknown subsys name 'devices' [ 18.623753][ T30] audit: type=1400 audit(1713428879.840:71): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.767478][ T289] cgroup: Unknown subsys name 'hugetlb' [ 18.772913][ T289] cgroup: Unknown subsys name 'rlimit' [ 18.928073][ T30] audit: type=1400 audit(1713428880.180:72): avc: denied { mounton } for pid=289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 18.952622][ T30] audit: type=1400 audit(1713428880.180:73): avc: denied { mount } for pid=289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 18.957624][ T291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 18.975804][ T30] audit: type=1400 audit(1713428880.180:74): avc: denied { setattr } for pid=289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 2024/04/18 08:28:00 code coverage: enabled 2024/04/18 08:28:00 comparison tracing: enabled 2024/04/18 08:28:00 extra coverage: enabled 2024/04/18 08:28:00 delay kcov mmap: mmap returned an invalid pointer 2024/04/18 08:28:00 setuid sandbox: enabled 2024/04/18 08:28:00 namespace sandbox: enabled 2024/04/18 08:28:00 Android sandbox: enabled 2024/04/18 08:28:00 fault injection: enabled 2024/04/18 08:28:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/04/18 08:28:00 net packet injection: enabled 2024/04/18 08:28:00 net device setup: enabled 2024/04/18 08:28:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/04/18 08:28:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/04/18 08:28:00 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/04/18 08:28:00 USB emulation: enabled 2024/04/18 08:28:00 hci packet injection: /dev/vhci does not exist 2024/04/18 08:28:00 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2024/04/18 08:28:00 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 2024/04/18 08:28:00 swap file: enabled [ 19.006875][ T30] audit: type=1400 audit(1713428880.240:75): avc: denied { relabelto } for pid=291 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.034933][ T289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/04/18 08:28:00 starting 5 executor processes [ 19.335440][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.342311][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.349537][ T300] device bridge_slave_0 entered promiscuous mode [ 19.356266][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.363090][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.370524][ T300] device bridge_slave_1 entered promiscuous mode [ 19.461937][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.468795][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.475894][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.482661][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.496812][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.503648][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.510947][ T301] device bridge_slave_0 entered promiscuous mode [ 19.518169][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.524996][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.532521][ T301] device bridge_slave_1 entered promiscuous mode [ 19.566376][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.573303][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.580553][ T305] device bridge_slave_0 entered promiscuous mode [ 19.587347][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.594177][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.601396][ T305] device bridge_slave_1 entered promiscuous mode [ 19.632845][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.639706][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.646928][ T308] device bridge_slave_0 entered promiscuous mode [ 19.653461][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.660363][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.667376][ T308] device bridge_slave_1 entered promiscuous mode [ 19.709097][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.716089][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.723133][ T302] device bridge_slave_0 entered promiscuous mode [ 19.737255][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.744086][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.751351][ T302] device bridge_slave_1 entered promiscuous mode [ 19.834121][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.842837][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.851498][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.859301][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.866973][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.877142][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.884253][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.910658][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.919012][ T300] device veth0_vlan entered promiscuous mode [ 19.936251][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 19.943472][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 19.953094][ T300] device veth1_macvtap entered promiscuous mode [ 19.969094][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 19.989095][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 19.997219][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.030903][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.038651][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.046823][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.053639][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.060842][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.068761][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.075572][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.082948][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.108974][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.116460][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.124389][ T323] bridge0: port 1(bridge_slave_0) entered blocking state executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x2, 0xf0, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r0, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000004c0)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002e40)={&(0x7f0000000000)='ext4_es_lookup_extent_exit\x00', r2}, 0x10) unlink(&(0x7f0000000040)='./cgroup\x00') [ 20.131245][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.142761][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.170663][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.187180][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.195886][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.204289][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.211151][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.218486][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.226378][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.234174][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.242052][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.249842][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.273294][ T301] device veth0_vlan entered promiscuous mode [ 20.280576][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.288687][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.296858][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.304230][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.312414][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.319277][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.326829][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.335185][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.342046][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.349429][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.357262][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.365046][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.373203][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.380068][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.387534][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.395547][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.402417][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.410058][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.417583][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000200)={r4, 0x0, 0x0}, 0x20) [ 20.434435][ T308] device veth0_vlan entered promiscuous mode [ 20.454232][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.462840][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.465801][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 120.472244][ C0] rcu: 0-...!: (10000 ticks this GP) idle=66f/1/0x4000000000000000 softirq=2243/2243 fqs=0 last_accelerate: 9267/b993 dyntick_enabled: 1 [ 120.486114][ C0] (t=10000 jiffies g=633 q=461) [ 120.490884][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 9999 jiffies! g633 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 120.502775][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=451 [ 120.510326][ C0] rcu: rcu_preempt kthread starved for 10000 jiffies! g633 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 120.521349][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 120.531157][ C0] rcu: RCU grace-period kthread stack dump: [ 120.536894][ C0] task:rcu_preempt state:I stack:28328 pid: 14 ppid: 2 flags:0x00004000 [ 120.545923][ C0] Call Trace: [ 120.549038][ C0] [ 120.551820][ C0] __schedule+0xccc/0x1590 [ 120.556069][ C0] ? __sched_text_start+0x8/0x8 [ 120.560843][ C0] ? __kasan_check_write+0x14/0x20 [ 120.565790][ C0] schedule+0x11f/0x1e0 [ 120.569782][ C0] schedule_timeout+0x18c/0x370 [ 120.574467][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 120.579502][ C0] ? console_conditional_schedule+0x30/0x30 [ 120.585230][ C0] ? update_process_times+0x200/0x200 [ 120.590440][ C0] ? prepare_to_swait_event+0x308/0x320 [ 120.595819][ C0] rcu_gp_fqs_loop+0x2af/0xf80 [ 120.600421][ C0] ? debug_smp_processor_id+0x17/0x20 [ 120.605624][ C0] ? __note_gp_changes+0x4ab/0x920 [ 120.610574][ C0] ? rcu_gp_init+0xc30/0xc30 [ 120.614999][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 120.620034][ C0] ? rcu_gp_init+0x9cf/0xc30 [ 120.624459][ C0] rcu_gp_kthread+0xa4/0x350 [ 120.628888][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 120.633572][ C0] ? rcu_barrier_callback+0x50/0x50 [ 120.638607][ C0] ? __kasan_check_read+0x11/0x20 [ 120.643471][ C0] ? __kthread_parkme+0xb2/0x200 [ 120.648243][ C0] kthread+0x421/0x510 [ 120.652148][ C0] ? rcu_barrier_callback+0x50/0x50 [ 120.657179][ C0] ? kthread_blkcg+0xd0/0xd0 [ 120.661606][ C0] ret_from_fork+0x1f/0x30 [ 120.665862][ C0] [ 120.668733][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 120.674887][ C0] NMI backtrace for cpu 0 [ 120.679066][ C0] CPU: 0 PID: 323 Comm: kworker/0:3 Not tainted 5.15.148-syzkaller-00013-gad06eaf051cd #0 [ 120.688772][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 120.698681][ C0] Workqueue: events linkwatch_event [ 120.703702][ C0] Call Trace: [ 120.706826][ C0] [ 120.709515][ C0] dump_stack_lvl+0x151/0x1b7 [ 120.714029][ C0] ? io_uring_drop_tctx_refs+0x190/0x190 [ 120.719498][ C0] dump_stack+0x15/0x17 [ 120.723489][ C0] nmi_cpu_backtrace+0x2f7/0x300 [ 120.728265][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 120.734252][ C0] ? panic+0x751/0x751 [ 120.738187][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 120.744058][ C0] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 120.749874][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 120.755865][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 120.761592][ C0] rcu_check_gp_kthread_starvation+0x1e3/0x250 [ 120.767669][ C0] ? rcu_check_gp_kthread_expired_fqs_timer+0x18e/0x230 [ 120.774437][ C0] print_cpu_stall+0x310/0x5f0 [ 120.779037][ C0] rcu_sched_clock_irq+0x989/0x12f0 [ 120.784164][ C0] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 120.790153][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 120.795186][ C0] update_process_times+0x198/0x200 [ 120.800220][ C0] tick_sched_timer+0x188/0x240 [ 120.804908][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 120.810289][ C0] __hrtimer_run_queues+0x41a/0xad0 [ 120.815410][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 120.820358][ C0] ? clockevents_program_event+0x22f/0x300 [ 120.826085][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 120.831987][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 120.836762][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 120.842489][ C0] sysvec_apic_timer_interrupt+0x95/0xc0 [ 120.847957][ C0] [ 120.850735][ C0] [ 120.853511][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 120.859334][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 120.864100][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 120.883543][ C0] RSP: 0018:ffffc90005256c80 EFLAGS: 00000246 [ 120.889443][ C0] RAX: 0000000000000001 RBX: 1ffff92000a4ad94 RCX: 1ffffffff0d1aa9c [ 120.897257][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7037ed4 [ 120.905068][ C0] RBP: ffffc90005256d30 R08: dffffc0000000000 R09: ffffed103ee06fdb [ 120.912963][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 120.920777][ C0] R13: ffff8881f7037ed4 R14: 0000000000000001 R15: 1ffff92000a4ad98 [ 120.928592][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 120.933535][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 120.939438][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 120.945688][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 120.950458][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 120.955491][ C0] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 120.960786][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 120.965824][ C0] ? skb_release_data+0x8a9/0xa80 [ 120.970681][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0xb60 [ 120.976065][ C0] bpf_trace_run2+0xec/0x210 [ 120.980489][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 120.985436][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 120.990197][ C0] ? skb_release_data+0x8a9/0xa80 [ 120.994988][ C0] ? memcpy+0x56/0x70 [ 120.998802][ C0] ? nla_put+0x13a/0x1f0 [ 121.002880][ C0] ? skb_release_data+0x8a9/0xa80 [ 121.007828][ C0] __bpf_trace_kfree+0x6f/0x90 [ 121.012429][ C0] ? skb_release_data+0x8a9/0xa80 [ 121.017306][ C0] kfree+0x1f3/0x220 [ 121.021021][ C0] skb_release_data+0x8a9/0xa80 [ 121.025708][ C0] consume_skb+0xac/0x250 [ 121.029873][ C0] netlink_broadcast_filtered+0x10f4/0x1220 [ 121.035602][ C0] ? rt6_dump_route+0xa90/0xa90 [ 121.040290][ C0] nlmsg_notify+0x101/0x1c0 [ 121.044633][ C0] rtnl_notify+0x9c/0xd0 [ 121.048709][ C0] inet6_rt_notify+0x3c8/0x550 [ 121.053307][ C0] ? rt6_nh_dump_exceptions+0x650/0x650 [ 121.058689][ C0] fib6_add+0x23ac/0x3df0 [ 121.062855][ C0] ? skb_gro_incr_csum_unnecessary+0x260/0x260 [ 121.068842][ C0] ? ipv6_addr_prefix+0x42/0x180 [ 121.073616][ C0] ? fib6_update_sernum_stub+0x1a0/0x1a0 [ 121.079085][ C0] ? __kasan_check_write+0x14/0x20 [ 121.084032][ C0] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 121.088895][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 121.093926][ C0] ip6_route_add+0x8a/0x130 [ 121.098301][ C0] addrconf_add_dev+0x415/0x610 [ 121.102958][ C0] ? local_bh_enable+0x30/0x30 [ 121.107555][ C0] ? __kasan_check_read+0x11/0x20 [ 121.112597][ C0] ? preempt_schedule_common+0xbe/0xf0 [ 121.117890][ C0] ? __kasan_check_read+0x11/0x20 [ 121.122748][ C0] addrconf_init_auto_addrs+0xad0/0x1060 [ 121.128216][ C0] ? __irq_work_queue_local+0x126/0x180 [ 121.133599][ C0] ? addrconf_dad_run+0x610/0x610 [ 121.138458][ C0] ? irq_work_queue+0xcd/0x160 [ 121.143058][ C0] ? __wake_up_klogd+0xde/0x110 [ 121.147744][ C0] ? vprintk_emit+0x16b/0x340 [ 121.152259][ C0] ? vprintk_store+0x1620/0x1620 [ 121.157036][ C0] ? call_fib_notifiers+0x9f/0xc0 [ 121.161891][ C0] ? vprintk_default+0x26/0x30 [ 121.166493][ C0] ? vprintk+0x74/0x80 [ 121.170397][ C0] ? _printk+0xd1/0x111 [ 121.174391][ C0] ? addrconf_notify+0x66d/0xdd0 [ 121.179162][ C0] ? addrconf_link_ready+0x4c/0x1e0 [ 121.184196][ C0] ? panic+0x751/0x751 [ 121.188103][ C0] ? macsec_notify+0x101/0x4c0 [ 121.192704][ C0] ? addrconf_link_ready+0xfb/0x1e0 [ 121.197736][ C0] addrconf_notify+0x91d/0xdd0 [ 121.202337][ C0] raw_notifier_call_chain+0x8c/0xf0 [ 121.207461][ C0] netdev_state_change+0x1a3/0x250 [ 121.212406][ C0] ? netdev_features_change+0x1b0/0x1b0 [ 121.217787][ C0] linkwatch_do_dev+0x110/0x160 [ 121.222471][ C0] __linkwatch_run_queue+0x4ca/0x7f0 [ 121.227594][ C0] ? __mutex_lock_slowpath+0xe/0x10 [ 121.232628][ C0] ? linkwatch_run_queue+0x20/0x20 [ 121.237575][ C0] ? __kasan_check_read+0x11/0x20 [ 121.242433][ C0] ? read_word_at_a_time+0x12/0x20 [ 121.247382][ C0] linkwatch_event+0x4c/0x60 [ 121.251808][ C0] process_one_work+0x6bb/0xc10 [ 121.256498][ C0] worker_thread+0xad5/0x12a0 [ 121.261009][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 121.265697][ C0] kthread+0x421/0x510 [ 121.269602][ C0] ? worker_clr_flags+0x180/0x180 [ 121.274461][ C0] ? kthread_blkcg+0xd0/0xd0 [ 121.278887][ C0] ret_from_fork+0x1f/0x30 [ 121.283150][ C0] [ 121.286080][ C0] NMI backtrace for cpu 0 [ 121.290174][ C0] CPU: 0 PID: 323 Comm: kworker/0:3 Not tainted 5.15.148-syzkaller-00013-gad06eaf051cd #0 [ 121.299891][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 121.309788][ C0] Workqueue: events linkwatch_event [ 121.314819][ C0] Call Trace: [ 121.317949][ C0] [ 121.320635][ C0] dump_stack_lvl+0x151/0x1b7 [ 121.325147][ C0] ? io_uring_drop_tctx_refs+0x190/0x190 [ 121.330619][ C0] ? ttwu_do_wakeup+0x187/0x430 [ 121.335304][ C0] dump_stack+0x15/0x17 [ 121.339297][ C0] nmi_cpu_backtrace+0x2f7/0x300 [ 121.344070][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 121.350059][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 121.355352][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 121.360040][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 121.365941][ C0] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 121.371757][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 121.377660][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 121.383384][ C0] rcu_dump_cpu_stacks+0x1d8/0x330 [ 121.388333][ C0] print_cpu_stall+0x315/0x5f0 [ 121.392932][ C0] rcu_sched_clock_irq+0x989/0x12f0 [ 121.397968][ C0] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 121.403956][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 121.408992][ C0] update_process_times+0x198/0x200 [ 121.414024][ C0] tick_sched_timer+0x188/0x240 [ 121.418711][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 121.424091][ C0] __hrtimer_run_queues+0x41a/0xad0 [ 121.429127][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 121.434073][ C0] ? clockevents_program_event+0x22f/0x300 [ 121.439715][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 121.445618][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 121.450392][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 121.456119][ C0] sysvec_apic_timer_interrupt+0x95/0xc0 [ 121.461588][ C0] [ 121.464363][ C0] [ 121.467140][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 121.472955][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 121.477730][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 121.497171][ C0] RSP: 0018:ffffc90005256c80 EFLAGS: 00000246 [ 121.503071][ C0] RAX: 0000000000000001 RBX: 1ffff92000a4ad94 RCX: 1ffffffff0d1aa9c [ 121.510884][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7037ed4 [ 121.518696][ C0] RBP: ffffc90005256d30 R08: dffffc0000000000 R09: ffffed103ee06fdb [ 121.526507][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 121.534321][ C0] R13: ffff8881f7037ed4 R14: 0000000000000001 R15: 1ffff92000a4ad98 [ 121.542136][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 121.547079][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 121.552980][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 121.559228][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 121.564001][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 121.569036][ C0] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 121.574330][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 121.579363][ C0] ? skb_release_data+0x8a9/0xa80 [ 121.584224][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0xb60 [ 121.589605][ C0] bpf_trace_run2+0xec/0x210 [ 121.594032][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 121.598980][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 121.603668][ C0] ? skb_release_data+0x8a9/0xa80 [ 121.608525][ C0] ? memcpy+0x56/0x70 [ 121.612345][ C0] ? nla_put+0x13a/0x1f0 [ 121.616425][ C0] ? skb_release_data+0x8a9/0xa80 [ 121.621291][ C0] __bpf_trace_kfree+0x6f/0x90 [ 121.625886][ C0] ? skb_release_data+0x8a9/0xa80 [ 121.630745][ C0] kfree+0x1f3/0x220 [ 121.634476][ C0] skb_release_data+0x8a9/0xa80 [ 121.639166][ C0] consume_skb+0xac/0x250 [ 121.643331][ C0] netlink_broadcast_filtered+0x10f4/0x1220 [ 121.649060][ C0] ? rt6_dump_route+0xa90/0xa90 [ 121.653745][ C0] nlmsg_notify+0x101/0x1c0 [ 121.658085][ C0] rtnl_notify+0x9c/0xd0 [ 121.662163][ C0] inet6_rt_notify+0x3c8/0x550 [ 121.666765][ C0] ? rt6_nh_dump_exceptions+0x650/0x650 [ 121.672147][ C0] fib6_add+0x23ac/0x3df0 [ 121.676314][ C0] ? skb_gro_incr_csum_unnecessary+0x260/0x260 [ 121.682299][ C0] ? ipv6_addr_prefix+0x42/0x180 [ 121.687073][ C0] ? fib6_update_sernum_stub+0x1a0/0x1a0 [ 121.692540][ C0] ? __kasan_check_write+0x14/0x20 [ 121.697502][ C0] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 121.702349][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 121.707386][ C0] ip6_route_add+0x8a/0x130 [ 121.711725][ C0] addrconf_add_dev+0x415/0x610 [ 121.716409][ C0] ? local_bh_enable+0x30/0x30 [ 121.721009][ C0] ? __kasan_check_read+0x11/0x20 [ 121.725872][ C0] ? preempt_schedule_common+0xbe/0xf0 [ 121.731165][ C0] ? __kasan_check_read+0x11/0x20 [ 121.736026][ C0] addrconf_init_auto_addrs+0xad0/0x1060 [ 121.741491][ C0] ? __irq_work_queue_local+0x126/0x180 [ 121.746872][ C0] ? addrconf_dad_run+0x610/0x610 [ 121.751761][ C0] ? irq_work_queue+0xcd/0x160 [ 121.756335][ C0] ? __wake_up_klogd+0xde/0x110 [ 121.761127][ C0] ? vprintk_emit+0x16b/0x340 [ 121.765647][ C0] ? vprintk_store+0x1620/0x1620 [ 121.770409][ C0] ? call_fib_notifiers+0x9f/0xc0 [ 121.775270][ C0] ? vprintk_default+0x26/0x30 [ 121.779895][ C0] ? vprintk+0x74/0x80 [ 121.783775][ C0] ? _printk+0xd1/0x111 [ 121.787774][ C0] ? addrconf_notify+0x66d/0xdd0 [ 121.792543][ C0] ? addrconf_link_ready+0x4c/0x1e0 [ 121.797592][ C0] ? panic+0x751/0x751 [ 121.801477][ C0] ? macsec_notify+0x101/0x4c0 [ 121.806079][ C0] ? addrconf_link_ready+0xfb/0x1e0 [ 121.811118][ C0] addrconf_notify+0x91d/0xdd0 [ 121.815714][ C0] raw_notifier_call_chain+0x8c/0xf0 [ 121.820834][ C0] netdev_state_change+0x1a3/0x250 [ 121.825782][ C0] ? netdev_features_change+0x1b0/0x1b0 [ 121.831163][ C0] linkwatch_do_dev+0x110/0x160 [ 121.835849][ C0] __linkwatch_run_queue+0x4ca/0x7f0 [ 121.840967][ C0] ? __mutex_lock_slowpath+0xe/0x10 [ 121.846002][ C0] ? linkwatch_run_queue+0x20/0x20 [ 121.850951][ C0] ? __kasan_check_read+0x11/0x20 [ 121.855812][ C0] ? read_word_at_a_time+0x12/0x20 [ 121.860758][ C0] linkwatch_event+0x4c/0x60 [ 121.865183][ C0] process_one_work+0x6bb/0xc10 [ 121.869871][ C0] worker_thread+0xad5/0x12a0 [ 121.874382][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 121.879074][ C0] kthread+0x421/0x510 [ 121.883150][ C0] ? worker_clr_flags+0x180/0x180 [ 121.888009][ C0] ? kthread_blkcg+0xd0/0xd0 [ 121.892437][ C0] ret_from_fork+0x1f/0x30 [ 121.896720][ C0] [ 121.899561][ C0] Sending NMI from CPU 0 to CPUs 1: [ 121.904641][ C1] NMI backtrace for cpu 1 [ 121.904655][ C1] CPU: 1 PID: 82 Comm: syslogd Not tainted 5.15.148-syzkaller-00013-gad06eaf051cd #0 [ 121.904672][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 121.904681][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 121.904703][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 121.904715][ C1] RSP: 0000:ffffc900009b71c0 EFLAGS: 00000246 [ 121.904729][ C1] RAX: 0000000000000003 RBX: 1ffff92000136e3c RCX: ffffffff8154f88f [ 121.904739][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88810139bdd8 [ 121.904750][ C1] RBP: ffffc900009b7270 R08: dffffc0000000000 R09: ffffed10202737bc [ 121.904761][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 121.904771][ C1] R13: ffff88810139bdd8 R14: 0000000000000003 R15: 1ffff92000136e40 [ 121.904781][ C1] FS: 00007fd1aeec0380(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 121.904794][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.904805][ C1] CR2: 0000001b2e122000 CR3: 000000010c155000 CR4: 00000000003506a0 [ 121.904819][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 121.904827][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 121.904844][ C1] Call Trace: [ 121.904849][ C1] [ 121.904856][ C1] ? show_regs+0x58/0x60 [ 121.904872][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 121.904890][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 121.904908][ C1] ? kvm_wait+0x147/0x180 [ 121.904920][ C1] ? kvm_wait+0x147/0x180 [ 121.904933][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 121.904949][ C1] ? nmi_handle+0xa8/0x280 [ 121.904963][ C1] ? kvm_wait+0x147/0x180 [ 121.904976][ C1] ? default_do_nmi+0x69/0x160 [ 121.904992][ C1] ? exc_nmi+0xaf/0x120 [ 121.905005][ C1] ? end_repeat_nmi+0x16/0x31 [ 121.905020][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 121.905038][ C1] ? kvm_wait+0x147/0x180 [ 121.905051][ C1] ? kvm_wait+0x147/0x180 [ 121.905065][ C1] ? kvm_wait+0x147/0x180 [ 121.905078][ C1] [ 121.905082][ C1] [ 121.905087][ C1] ? asm_common_interrupt+0x27/0x40 [ 121.905100][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 121.905114][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 121.905131][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 121.905149][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 121.905165][ C1] ? update_load_avg+0x43a/0x1150 [ 121.905182][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 121.905198][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 121.905213][ C1] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 121.905229][ C1] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 121.905246][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 121.905261][ C1] ? sock_map_unref+0x352/0x4d0 [ 121.905275][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0xb60 [ 121.905287][ C1] bpf_trace_run2+0xec/0x210 [ 121.905303][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 121.905317][ C1] ? sock_map_unref+0x352/0x4d0 [ 121.905331][ C1] ? sched_clock+0x9/0x10 [ 121.905344][ C1] ? native_set_ldt+0x360/0x360 [ 121.905358][ C1] ? sock_map_unref+0x352/0x4d0 [ 121.905372][ C1] __bpf_trace_kfree+0x6f/0x90 [ 121.905386][ C1] ? sock_map_unref+0x352/0x4d0 [ 121.905400][ C1] kfree+0x1f3/0x220 [ 121.905415][ C1] sock_map_unref+0x352/0x4d0 [ 121.905431][ C1] sock_hash_delete_elem+0x274/0x2f0 [ 121.905446][ C1] ? skb_release_data+0x8a9/0xa80 [ 121.905460][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0xb60 [ 121.905471][ C1] bpf_trace_run2+0xec/0x210 [ 121.905486][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 121.905500][ C1] ? skb_release_data+0x8a9/0xa80 [ 121.905514][ C1] ? __kasan_check_write+0x14/0x20 [ 121.905528][ C1] ? sock_wfree+0x19d/0x1f0 [ 121.905542][ C1] ? skb_release_data+0x8a9/0xa80 [ 121.905556][ C1] __bpf_trace_kfree+0x6f/0x90 [ 121.905569][ C1] ? skb_release_data+0x8a9/0xa80 [ 121.905582][ C1] kfree+0x1f3/0x220 [ 121.905596][ C1] ? unix_detach_fds+0x190/0x190 [ 121.905611][ C1] skb_release_data+0x8a9/0xa80 [ 121.905626][ C1] consume_skb+0xac/0x250 [ 121.905639][ C1] skb_free_datagram+0x28/0xe0 [ 121.905654][ C1] __unix_dgram_recvmsg+0xcb1/0x1260 [ 121.905670][ C1] ? selinux_socket_recvmsg+0x243/0x340 [ 121.905684][ C1] ? unix_unhash+0x10/0x10 [ 121.905699][ C1] ? file_has_perm+0x508/0x6c0 [ 121.905713][ C1] unix_dgram_recvmsg+0xc4/0xe0 [ 121.905726][ C1] ? unix_dgram_sendmsg+0x2090/0x2090 [ 121.905741][ C1] sock_read_iter+0x353/0x480 [ 121.905760][ C1] ? kernel_sock_ip_overhead+0x280/0x280 [ 121.905777][ C1] ? iov_iter_init+0x53/0x190 [ 121.905791][ C1] vfs_read+0xa7e/0xd40 [ 121.905805][ C1] ? kernel_read+0x1f0/0x1f0 [ 121.905820][ C1] ? __kasan_check_read+0x11/0x20 [ 121.905838][ C1] ? __fdget_pos+0x209/0x3a0 [ 121.905852][ C1] ksys_read+0x199/0x2c0 [ 121.905865][ C1] ? vfs_write+0x1110/0x1110 [ 121.905877][ C1] ? debug_smp_processor_id+0x17/0x20 [ 121.905892][ C1] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 121.905909][ C1] __x64_sys_read+0x7b/0x90 [ 121.905921][ C1] do_syscall_64+0x3d/0xb0 [ 121.905935][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 121.905951][ C1] RIP: 0033:0x7fd1af014b6a [ 121.905965][ C1] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83 [ 121.905977][ C1] RSP: 002b:00007ffe63f90ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.905991][ C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd1af014b6a [ 121.906001][ C1] RDX: 00000000000000ff RSI: 000055a274438300 RDI: 0000000000000000 [ 121.906010][ C1] RBP: 000055a2744382c0 R08: 0000000000000001 R09: 0000000000000000 [ 121.906019][ C1] R10: 00007fd1af1b33a3 R11: 0000000000000246 R12: 000055a27443835c [ 121.906029][ C1] R13: 000055a274438300 R14: 0000000000000000 R15: 00007fd1af1f1a80 [ 121.906041][ C1] [ 265.022498][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [kworker/0:3:323] [ 265.030584][ C0] Modules linked in: [ 265.034321][ C0] CPU: 0 PID: 323 Comm: kworker/0:3 Not tainted 5.15.148-syzkaller-00013-gad06eaf051cd #0 [ 265.044033][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 265.053988][ C0] Workqueue: events linkwatch_event [ 265.058967][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 265.063733][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 265.083696][ C0] RSP: 0018:ffffc90005256c80 EFLAGS: 00000246 [ 265.089597][ C0] RAX: 0000000000000001 RBX: 1ffff92000a4ad94 RCX: 1ffffffff0d1aa9c [ 265.097409][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7037ed4 [ 265.105220][ C0] RBP: ffffc90005256d30 R08: dffffc0000000000 R09: ffffed103ee06fdb [ 265.113031][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 265.120843][ C0] R13: ffff8881f7037ed4 R14: 0000000000000001 R15: 1ffff92000a4ad98 [ 265.128656][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 265.137421][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.143848][ C0] CR2: 00007ffcb2464e58 CR3: 000000010c67d000 CR4: 00000000003506b0 [ 265.151668][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.159468][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.167279][ C0] Call Trace: [ 265.170417][ C0] [ 265.173104][ C0] ? show_regs+0x58/0x60 [ 265.177174][ C0] ? watchdog_timer_fn+0x4b1/0x5f0 [ 265.182122][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 265.187241][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 265.192449][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 265.197396][ C0] ? clockevents_program_event+0x22f/0x300 [ 265.203036][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 265.208939][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 265.213889][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 265.219788][ C0] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 265.225429][ C0] [ 265.228205][ C0] [ 265.230987][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 265.236973][ C0] ? kvm_wait+0x147/0x180 [ 265.241138][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 265.247127][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 265.252073][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 265.257976][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 265.264241][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 265.269010][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 265.274041][ C0] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 265.279329][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 265.284361][ C0] ? skb_release_data+0x8a9/0xa80 [ 265.289221][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0xb60 [ 265.294604][ C0] bpf_trace_run2+0xec/0x210 [ 265.299029][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 265.303977][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 265.308663][ C0] ? skb_release_data+0x8a9/0xa80 [ 265.313522][ C0] ? memcpy+0x56/0x70 [ 265.317343][ C0] ? nla_put+0x13a/0x1f0 [ 265.321425][ C0] ? skb_release_data+0x8a9/0xa80 [ 265.326282][ C0] __bpf_trace_kfree+0x6f/0x90 [ 265.330881][ C0] ? skb_release_data+0x8a9/0xa80 [ 265.335745][ C0] kfree+0x1f3/0x220 [ 265.339475][ C0] skb_release_data+0x8a9/0xa80 [ 265.344161][ C0] consume_skb+0xac/0x250 [ 265.348328][ C0] netlink_broadcast_filtered+0x10f4/0x1220 [ 265.354055][ C0] ? rt6_dump_route+0xa90/0xa90 [ 265.358742][ C0] nlmsg_notify+0x101/0x1c0 [ 265.363168][ C0] rtnl_notify+0x9c/0xd0 [ 265.367247][ C0] inet6_rt_notify+0x3c8/0x550 [ 265.371846][ C0] ? rt6_nh_dump_exceptions+0x650/0x650 [ 265.377229][ C0] fib6_add+0x23ac/0x3df0 [ 265.381395][ C0] ? skb_gro_incr_csum_unnecessary+0x260/0x260 [ 265.387384][ C0] ? ipv6_addr_prefix+0x42/0x180 [ 265.392157][ C0] ? fib6_update_sernum_stub+0x1a0/0x1a0 [ 265.397624][ C0] ? __kasan_check_write+0x14/0x20 [ 265.402573][ C0] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 265.407432][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 265.412467][ C0] ip6_route_add+0x8a/0x130 [ 265.416806][ C0] addrconf_add_dev+0x415/0x610 [ 265.421496][ C0] ? local_bh_enable+0x30/0x30 [ 265.426098][ C0] ? __kasan_check_read+0x11/0x20 [ 265.430952][ C0] ? preempt_schedule_common+0xbe/0xf0 [ 265.436251][ C0] ? __kasan_check_read+0x11/0x20 [ 265.441107][ C0] addrconf_init_auto_addrs+0xad0/0x1060 [ 265.446575][ C0] ? __irq_work_queue_local+0x126/0x180 [ 265.451956][ C0] ? addrconf_dad_run+0x610/0x610 [ 265.456816][ C0] ? irq_work_queue+0xcd/0x160 [ 265.461416][ C0] ? __wake_up_klogd+0xde/0x110 [ 265.466103][ C0] ? vprintk_emit+0x16b/0x340 [ 265.470617][ C0] ? vprintk_store+0x1620/0x1620 [ 265.475390][ C0] ? call_fib_notifiers+0x9f/0xc0 [ 265.480251][ C0] ? vprintk_default+0x26/0x30 [ 265.484852][ C0] ? vprintk+0x74/0x80 [ 265.488756][ C0] ? _printk+0xd1/0x111 [ 265.492749][ C0] ? addrconf_notify+0x66d/0xdd0 [ 265.497523][ C0] ? addrconf_link_ready+0x4c/0x1e0 [ 265.502556][ C0] ? panic+0x751/0x751 [ 265.506463][ C0] ? macsec_notify+0x101/0x4c0 [ 265.511062][ C0] ? addrconf_link_ready+0xfb/0x1e0 [ 265.516099][ C0] addrconf_notify+0x91d/0xdd0 [ 265.520698][ C0] raw_notifier_call_chain+0x8c/0xf0 [ 265.525820][ C0] netdev_state_change+0x1a3/0x250 [ 265.530763][ C0] ? netdev_features_change+0x1b0/0x1b0 [ 265.536151][ C0] linkwatch_do_dev+0x110/0x160 [ 265.540832][ C0] __linkwatch_run_queue+0x4ca/0x7f0 [ 265.545953][ C0] ? __mutex_lock_slowpath+0xe/0x10 [ 265.550987][ C0] ? linkwatch_run_queue+0x20/0x20 [ 265.555936][ C0] ? __kasan_check_read+0x11/0x20 [ 265.560794][ C0] ? read_word_at_a_time+0x12/0x20 [ 265.565763][ C0] linkwatch_event+0x4c/0x60 [ 265.570170][ C0] process_one_work+0x6bb/0xc10 [ 265.574854][ C0] worker_thread+0xad5/0x12a0 [ 265.579368][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 265.584056][ C0] kthread+0x421/0x510 [ 265.587961][ C0] ? worker_clr_flags+0x180/0x180 [ 265.592820][ C0] ? kthread_blkcg+0xd0/0xd0 [ 265.597253][ C0] ret_from_fork+0x1f/0x30 [ 265.601502][ C0] [ 265.604378][ C0] Sending NMI from CPU 0 to CPUs 1: [ 265.609433][ C1] NMI backtrace for cpu 1 [ 265.609442][ C1] CPU: 1 PID: 82 Comm: syslogd Not tainted 5.15.148-syzkaller-00013-gad06eaf051cd #0 [ 265.609458][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 265.609466][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 265.609484][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 265.609496][ C1] RSP: 0000:ffffc900009b71c0 EFLAGS: 00000246 [ 265.609510][ C1] RAX: 0000000000000003 RBX: 1ffff92000136e3c RCX: ffffffff8154f88f [ 265.609520][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88810139bdd8 [ 265.609531][ C1] RBP: ffffc900009b7270 R08: dffffc0000000000 R09: ffffed10202737bc [ 265.609541][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 265.609552][ C1] R13: ffff88810139bdd8 R14: 0000000000000003 R15: 1ffff92000136e40 [ 265.609562][ C1] FS: 00007fd1aeec0380(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 265.609575][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.609585][ C1] CR2: 0000001b2e122000 CR3: 000000010c155000 CR4: 00000000003506a0 [ 265.609598][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.609607][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.609616][ C1] Call Trace: [ 265.609620][ C1] [ 265.609626][ C1] ? show_regs+0x58/0x60 [ 265.609641][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 265.609658][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 265.609675][ C1] ? kvm_wait+0x147/0x180 [ 265.609687][ C1] ? kvm_wait+0x147/0x180 [ 265.609700][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 265.609716][ C1] ? nmi_handle+0xa8/0x280 [ 265.609730][ C1] ? kvm_wait+0x147/0x180 [ 265.609742][ C1] ? kvm_wait+0x147/0x180 [ 265.609755][ C1] ? default_do_nmi+0x69/0x160 [ 265.609772][ C1] ? exc_nmi+0xaf/0x120 [ 265.609785][ C1] ? end_repeat_nmi+0x16/0x31 [ 265.609800][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 265.609818][ C1] ? kvm_wait+0x147/0x180 [ 265.609831][ C1] ? kvm_wait+0x147/0x180 [ 265.609844][ C1] ? kvm_wait+0x147/0x180 [ 265.609857][ C1] [ 265.609861][ C1] [ 265.609865][ C1] ? asm_common_interrupt+0x27/0x40 [ 265.609878][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 265.609892][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 265.609909][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 265.609926][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 265.609943][ C1] ? update_load_avg+0x43a/0x1150 [ 265.609959][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 265.609975][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 265.609990][ C1] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 265.610006][ C1] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 265.610023][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 265.610038][ C1] ? sock_map_unref+0x352/0x4d0 [ 265.610052][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0xb60 [ 265.610064][ C1] bpf_trace_run2+0xec/0x210 [ 265.610081][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 265.610095][ C1] ? sock_map_unref+0x352/0x4d0 [ 265.610109][ C1] ? sched_clock+0x9/0x10 [ 265.610122][ C1] ? native_set_ldt+0x360/0x360 [ 265.610136][ C1] ? sock_map_unref+0x352/0x4d0 [ 265.610150][ C1] __bpf_trace_kfree+0x6f/0x90 [ 265.610164][ C1] ? sock_map_unref+0x352/0x4d0 [ 265.610178][ C1] kfree+0x1f3/0x220 [ 265.610193][ C1] sock_map_unref+0x352/0x4d0 [ 265.610209][ C1] sock_hash_delete_elem+0x274/0x2f0 [ 265.610224][ C1] ? skb_release_data+0x8a9/0xa80 [ 265.610237][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0xb60 [ 265.610249][ C1] bpf_trace_run2+0xec/0x210 [ 265.610264][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 265.610278][ C1] ? skb_release_data+0x8a9/0xa80 [ 265.610291][ C1] ? __kasan_check_write+0x14/0x20 [ 265.610305][ C1] ? sock_wfree+0x19d/0x1f0 [ 265.610326][ C1] ? skb_release_data+0x8a9/0xa80 [ 265.610339][ C1] __bpf_trace_kfree+0x6f/0x90 [ 265.610352][ C1] ? skb_release_data+0x8a9/0xa80 [ 265.610365][ C1] kfree+0x1f3/0x220 [ 265.610378][ C1] ? unix_detach_fds+0x190/0x190 [ 265.610394][ C1] skb_release_data+0x8a9/0xa80 [ 265.610409][ C1] consume_skb+0xac/0x250 [ 265.610422][ C1] skb_free_datagram+0x28/0xe0 [ 265.610438][ C1] __unix_dgram_recvmsg+0xcb1/0x1260 [ 265.610453][ C1] ? selinux_socket_recvmsg+0x243/0x340 [ 265.610468][ C1] ? unix_unhash+0x10/0x10 [ 265.610483][ C1] ? file_has_perm+0x508/0x6c0 [ 265.610497][ C1] unix_dgram_recvmsg+0xc4/0xe0 [ 265.610511][ C1] ? unix_dgram_sendmsg+0x2090/0x2090 [ 265.610526][ C1] sock_read_iter+0x353/0x480 [ 265.610541][ C1] ? kernel_sock_ip_overhead+0x280/0x280 [ 265.610557][ C1] ? iov_iter_init+0x53/0x190 [ 265.610571][ C1] vfs_read+0xa7e/0xd40 [ 265.610585][ C1] ? kernel_read+0x1f0/0x1f0 [ 265.610600][ C1] ? __kasan_check_read+0x11/0x20 [ 265.610614][ C1] ? __fdget_pos+0x209/0x3a0 [ 265.610627][ C1] ksys_read+0x199/0x2c0 [ 265.610640][ C1] ? vfs_write+0x1110/0x1110 [ 265.610653][ C1] ? debug_smp_processor_id+0x17/0x20 [ 265.610667][ C1] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 265.610684][ C1] __x64_sys_read+0x7b/0x90 [ 265.610697][ C1] do_syscall_64+0x3d/0xb0 [ 265.610710][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 265.610727][ C1] RIP: 0033:0x7fd1af014b6a [ 265.610759][ C1] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83 [ 265.610770][ C1] RSP: 002b:00007ffe63f90ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 265.610784][ C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd1af014b6a [ 265.610794][ C1] RDX: 00000000000000ff RSI: 000055a274438300 RDI: 0000000000000000 [ 265.610803][ C1] RBP: 000055a2744382c0 R08: 0000000000000001 R09: 0000000000000000 [ 265.610812][ C1] R10: 00007fd1af1b33a3 R11: 0000000000000246 R12: 000055a27443835c [ 265.610822][ C1] R13: 000055a274438300 R14: 0000000000000000 R15: 00007fd1af1f1a80 [ 265.610834][ C1]