netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz-executor.0:4828] Modules linked in: irq event stamp: 4964185 hardirqs last enabled at (4964184): [] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline] hardirqs last enabled at (4964184): [] _raw_spin_unlock_irq+0x24/0x80 kernel/locking/spinlock.c:192 hardirqs last disabled at (4964185): [] trace_hardirqs_off_thunk+0x1a/0x1c softirqs last enabled at (2304636): [] __do_softirq+0x678/0x980 kernel/softirq.c:318 softirqs last disabled at (2304639): [] invoke_softirq kernel/softirq.c:372 [inline] softirqs last disabled at (2304639): [] irq_exit+0x215/0x260 kernel/softirq.c:412 CPU: 0 PID: 4828 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 RIP: 0010:skb_dequeue+0x0/0x180 net/core/skbuff.c:2833 Code: fb e9 71 fe ff ff e8 2f a3 28 fb eb ae e8 78 a5 28 fb e9 5c ff ff ff e8 6e a5 28 fb e9 ae fe ff ff 66 0f 1f 84 00 00 00 00 00 <41> 56 41 55 41 54 55 53 48 89 fb e8 60 c8 f2 fa 4c 8d 6b 18 4c 89 RSP: 0018:ffff8880ba007cf0 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff13 RAX: ffff8880478be500 RBX: ffff88804e7b2250 RCX: 0000000000000000 RDX: 0000000000000100 RSI: ffffffff8688f78b RDI: ffff88804e7b2250 RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed1009cf6443 R10: ffff88804e7b221b R11: 0000000000000000 R12: ffff88804e7b21c0 R13: ffff88804e7b2218 R14: 0000000000000000 R15: 0000000000000000 FS: 00007f07b087e700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b30b22000 CR3: 00000000242aa000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 00000000b8fecd19 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: garp_queue_xmit net/802/garp.c:274 [inline] garp_join_timer+0xc3/0xf0 net/802/garp.c:426 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:pv_wait_head_or_lock kernel/locking/qspinlock_paravirt.h:435 [inline] RIP: 0010:__pv_queued_spin_lock_slowpath+0x3a6/0xae0 kernel/locking/qspinlock.c:474 Code: eb c6 45 01 01 41 bc 00 80 00 00 48 c1 e9 03 83 e3 07 41 be 01 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8d 2c 01 eb 0c f3 90 <41> 83 ec 01 0f 84 38 04 00 00 41 0f b6 45 00 38 d8 7f 08 84 c0 0f RSP: 0018:ffff88801840f820 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000001 RBX: 0000000000000000 RCX: 1ffff11009b47555 RDX: 0000000000000001 RSI: ffff88804da3aaa9 RDI: ffff88804da3aaaa RBP: ffff88804da3aaa8 R08: 0000000000000001 R09: ffffed1009b47555 R10: ffff88804da3aaab R11: 0000000000000000 R12: 0000000000007885 R13: ffffed1009b47555 R14: 0000000000000001 R15: ffff8880ba02be00 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:679 [inline] queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:53 [inline] queued_spin_lock include/asm-generic/qspinlock.h:88 [inline] do_raw_spin_lock+0x189/0x220 kernel/locking/spinlock_debug.c:113 spin_lock include/linux/spinlock.h:329 [inline] pmd_lock include/linux/mm.h:2024 [inline] __pmd_trans_huge_lock+0x63/0x250 mm/huge_memory.c:1986 zap_huge_pmd+0x65/0xf30 mm/huge_memory.c:1752 zap_pmd_range mm/memory.c:1439 [inline] zap_pud_range mm/memory.c:1492 [inline] zap_p4d_range mm/memory.c:1513 [inline] unmap_page_range+0xfd4/0x2c50 mm/memory.c:1534 unmap_single_vma+0x198/0x300 mm/memory.c:1579 unmap_vmas+0xa9/0x180 mm/memory.c:1609 unmap_region+0x241/0x3a0 mm/mmap.c:2571 do_munmap+0x603/0xde0 mm/mmap.c:2781 mremap_to mm/mremap.c:457 [inline] __do_sys_mremap mm/mremap.c:552 [inline] __se_sys_mremap+0xa61/0xf90 mm/mremap.c:515 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f07b1f2a409 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f07b087e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 RAX: ffffffffffffffda RBX: 00007f07b203d050 RCX: 00007f07b1f2a409 RDX: 0000000000800000 RSI: 0000000000001000 RDI: 0000000020a96000 RBP: 00007f07b1f85367 R08: 0000000020130000 R09: 0000000000000000 R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fffd9de74ff R14: 00007f07b087e300 R15: 0000000000022000 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 4786 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 RIP: 0010:__lock_is_held+0x128/0x160 kernel/locking/lockdep.c:3737 Code: 03 7e 4c 0f b6 43 22 83 e0 03 3b 44 24 04 0f 94 c0 0f b6 c0 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f c3 48 83 c4 08 31 c0 5b <5d> 41 5c 41 5d 41 5e 41 5f c3 e8 29 ad 4d 00 e9 0a ff ff ff e8 af RSP: 0018:ffff8880ba107c88 EFLAGS: 00000046 RAX: 0000000000000000 RBX: 0000000000000086 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff88803ab04ed2 RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000005 R11: ffffffff8c66505b R12: ffff88803ab04e88 R13: dffffc0000000000 R14: ffffffff89f85f20 R15: ffff88803ab04600 FS: 00007f07b089f700(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f07b087e718 CR3: 00000000242aa000 CR4: 00000000003406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_is_held_type+0x10d/0x210 kernel/locking/lockdep.c:3946 lock_is_held include/linux/lockdep.h:344 [inline] rcu_read_lock_sched_held+0x16c/0x1d0 kernel/rcu/update.c:118 trace_local_timer_exit arch/x86/include/asm/trace/irq_vectors.h:56 [inline] smp_apic_timer_interrupt+0x3ca/0x550 arch/x86/kernel/apic/apic.c:1097 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:169 [inline] RIP: 0010:_raw_spin_unlock_irq+0x50/0x80 kernel/locking/spinlock.c:192 Code: c0 98 82 f1 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 31 48 83 3d 01 31 d8 01 00 74 25 fb 66 0f 1f 44 00 00 01 00 00 00 e8 26 1b 28 f9 65 8b 05 9f 8d e8 77 85 c0 74 02 5d RSP: 0018:ffff8880ba107de0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 1ffffffff13e3053 RBX: dffffc0000000000 RCX: 1ffff110075609da RDX: dffffc0000000000 RSI: ffff88803ab04eb0 RDI: ffff88803ab04e84 RBP: ffff8880ba122b40 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8688f6d0 R13: ffff8880ba122b40 R14: ffff8880ba107e78 R15: 0000000000000000 expire_timers+0x238/0x4e0 kernel/time/timer.c:1374 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:set_pte_at arch/x86/include/asm/paravirt.h:463 [inline] RIP: 0010:__split_huge_pmd_locked mm/huge_memory.c:2245 [inline] RIP: 0010:__split_huge_pmd+0x1ba2/0x45b0 mm/huge_memory.c:2342 Code: 48 c1 e8 03 42 80 3c 30 00 0f 85 c7 26 00 00 48 83 3d 99 5f 34 08 00 0f 84 e0 1a 00 00 e8 66 30 c7 ff 48 89 ea 48 8b 7c 24 58 <48> 89 d9 48 8b 74 24 68 e8 71 ca 8d ff 66 90 8b 9c 24 98 00 00 00 RSP: 0018:ffff88801eab75f0 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: ffff88803ab04600 RBX: efffffffbebe6402 RCX: ffffffff819b54d3 RDX: ffff8880357b8668 RSI: ffffffff819b550a RDI: ffff8880976e1040 RBP: ffff8880357b8668 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000000 R13: ffff888000000000 R14: dffffc0000000000 R15: 0000000000000001 split_huge_pmd_address+0x207/0x280 mm/huge_memory.c:2386 try_to_unmap_one+0x1883/0x2ce0 mm/rmap.c:1366 rmap_walk_anon+0x472/0xa80 mm/rmap.c:1842 rmap_walk_locked+0x12a/0x190 mm/rmap.c:1924 try_to_unmap+0x1ce/0x380 mm/rmap.c:1729 unmap_page mm/huge_memory.c:2440 [inline] split_huge_page_to_list+0x6b3/0x2ce0 mm/huge_memory.c:2762 migrate_pages+0x13ee/0x2fe0 mm/migrate.c:1438 do_move_pages_to_node mm/migrate.c:1501 [inline] do_move_pages_to_node mm/migrate.c:1493 [inline] do_pages_move mm/migrate.c:1686 [inline] kernel_move_pages+0x506/0x1820 mm/migrate.c:1827 __do_sys_move_pages mm/migrate.c:1845 [inline] __se_sys_move_pages mm/migrate.c:1840 [inline] __x64_sys_move_pages+0xdd/0x1b0 mm/migrate.c:1840 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f07b1f2a409 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f07b089f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 RAX: ffffffffffffffda RBX: 00007f07b203cf80 RCX: 00007f07b1f2a409 RDX: 0000000020000200 RSI: 0000000000000001 RDI: 0000000000000000 RBP: 00007f07b1f85367 R08: 0000000020000140 R09: 0000000000000000 R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000 R13: 00007fffd9de74ff R14: 00007f07b089f300 R15: 0000000000022000