Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts. 2025/04/04 21:06:44 ignoring optional flag "sandboxArg"="0" 2025/04/04 21:06:44 ignoring optional flag "type"="gce" 2025/04/04 21:06:44 parsed 1 programs [ 63.312596][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 63.312609][ T24] audit: type=1400 audit(1743800804.590:94): avc: denied { mount } for pid=359 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2025/04/04 21:06:44 executed programs: 0 [ 63.341961][ T24] audit: type=1400 audit(1743800804.630:95): avc: denied { unlink } for pid=359 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 63.380889][ T359] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.432898][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.439873][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.447187][ T365] device bridge_slave_0 entered promiscuous mode [ 63.453892][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.460776][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.467931][ T365] device bridge_slave_1 entered promiscuous mode [ 63.502016][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.508975][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.516105][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.522949][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.539778][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.546954][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.554114][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.562132][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.570746][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.578792][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.585622][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.594484][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.602566][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.609542][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.621037][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.630120][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.643210][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.654374][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.662489][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.670024][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.678169][ T365] device veth0_vlan entered promiscuous mode [ 63.688091][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.697414][ T365] device veth1_macvtap entered promiscuous mode [ 63.706261][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.716124][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.730235][ T24] audit: type=1400 audit(1743800805.010:96): avc: denied { mounton } for pid=365 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 63.757621][ T24] audit: type=1400 audit(1743800805.030:97): avc: denied { map_create } for pid=369 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.777384][ T24] audit: type=1400 audit(1743800805.030:98): avc: denied { bpf } for pid=369 comm="syz-executor.0" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.798327][ T24] audit: type=1400 audit(1743800805.030:99): avc: denied { map_read map_write } for pid=369 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.818805][ T24] audit: type=1400 audit(1743800805.030:100): avc: denied { prog_load } for pid=369 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.838517][ T24] audit: type=1400 audit(1743800805.030:101): avc: denied { perfmon } for pid=369 comm="syz-executor.0" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.950860][ T24] audit: type=1400 audit(1743800805.230:102): avc: denied { prog_run } for pid=369 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 164.866773][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 164.873545][ C1] (detected by 1, t=10006 jiffies, g=1689, q=73) [ 164.879987][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10006 (4294953701-4294943695), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 164.893186][ C1] rcu: rcu_preempt kthread starved for 10006 jiffies! g1689 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 164.904454][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 164.914414][ C1] rcu: RCU grace-period kthread stack dump: [ 164.920133][ C1] task:rcu_preempt state:R running task stack: 0 pid: 13 ppid: 2 flags:0x00004000 [ 164.930844][ C1] Call Trace: [ 164.933965][ C1] __schedule+0xbe6/0x1330 [ 164.938201][ C1] ? release_firmware_map_entry+0x18d/0x18d [ 164.944092][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 164.949377][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 164.954060][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 164.959187][ C1] schedule+0x13d/0x1d0 [ 164.963255][ C1] schedule_timeout+0x18c/0x360 [ 164.967938][ C1] ? prepare_to_swait_event+0x39f/0x3e0 [ 164.973317][ C1] ? console_conditional_schedule+0x10/0x10 [ 164.979045][ C1] ? run_local_timers+0x160/0x160 [ 164.983914][ C1] ? __note_gp_changes+0x2d8/0x6f0 [ 164.988851][ C1] rcu_gp_kthread+0xefc/0x23a0 [ 164.993469][ C1] ? dump_blkd_tasks+0x7e0/0x7e0 [ 164.998247][ C1] ? rcu_barrier_callback+0x50/0x50 [ 165.003301][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 165.008167][ C1] ? __kasan_check_read+0x11/0x20 [ 165.013015][ C1] ? __kthread_parkme+0xb9/0x1c0 [ 165.017784][ C1] kthread+0x34b/0x3d0 [ 165.021716][ C1] ? rcu_barrier_callback+0x50/0x50 [ 165.026719][ C1] ? kthread_blkcg+0xd0/0xd0 [ 165.031145][ C1] ret_from_fork+0x1f/0x30 [ 308.978353][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [syz-executor.0:454] [ 308.986679][ C1] Modules linked in: [ 308.990414][ C1] CPU: 1 PID: 454 Comm: syz-executor.0 Not tainted 5.10.234-syzkaller-1006684-g094fc3778d6b #0 [ 309.000546][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 309.010468][ C1] RIP: 0010:smp_call_function_single+0x278/0x510 [ 309.016619][ C1] Code: 0f 85 18 02 00 00 44 8b 6c 24 48 44 89 ee 83 e6 01 31 ff e8 ea ec 0a 00 41 83 e5 01 75 0a e8 2f e9 0a 00 e9 eb 00 00 00 f3 90 <42> 0f b6 04 23 84 c0 75 15 f7 44 24 48 01 00 00 00 0f 84 cd 00 00 [ 309.036690][ C1] RSP: 0018:ffffc90000c17800 EFLAGS: 00000293 [ 309.042867][ C1] RAX: ffffffff815fd644 RBX: 1ffff92000182f09 RCX: ffff88811251e2c0 [ 309.050677][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 309.058581][ C1] RBP: ffffc90000c178f0 R08: ffffffff815fd616 R09: ffffed103ee0aec9 [ 309.066397][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 309.074189][ C1] R13: 0000000000000001 R14: ffffc90000c17848 R15: 0000000000000000 [ 309.082003][ C1] FS: 000055557c02a480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 309.090968][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.097376][ C1] CR2: 0000000020010000 CR3: 0000000110333000 CR4: 00000000003506a0 [ 309.105189][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 309.113016][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.120816][ C1] Call Trace: [ 309.124007][ C1] [ 309.126714][ C1] ? show_regs+0x58/0x60 [ 309.130788][ C1] ? watchdog_timer_fn+0x471/0x590 [ 309.135727][ C1] ? proc_watchdog_cpumask+0xd0/0xd0 [ 309.140848][ C1] ? __hrtimer_run_queues+0x3d7/0xa50 [ 309.146089][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 309.151191][ C1] ? clockevents_program_event+0x214/0x2c0 [ 309.156818][ C1] ? ktime_get_update_offsets_now+0x266/0x280 [ 309.162874][ C1] ? hrtimer_interrupt+0x39a/0x8b0 [ 309.168008][ C1] ? __sysvec_apic_timer_interrupt+0xfb/0x3f0 [ 309.174138][ C1] ? asm_call_irq_on_stack+0xf/0x20 [ 309.179131][ C1] [ 309.182029][ C1] ? sysvec_apic_timer_interrupt+0x85/0xe0 [ 309.187672][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 309.193660][ C1] ? smp_call_function_single+0x266/0x510 [ 309.199220][ C1] ? smp_call_function_single+0x294/0x510 [ 309.204754][ C1] ? smp_call_function_single+0x278/0x510 [ 309.210563][ C1] ? text_poke_sync+0x20/0x20 [ 309.215330][ C1] ? flush_smp_call_function_from_idle+0x1b0/0x1b0 [ 309.221793][ C1] ? cpumask_any_but+0x18/0xb0 [ 309.226384][ C1] ? text_poke_sync+0x20/0x20 [ 309.230883][ C1] ? cpumask_any_but+0xa3/0xb0 [ 309.235494][ C1] smp_call_function_many_cond+0x94e/0xa30 [ 309.241256][ C1] ? enqueue_timer+0x169/0x4c0 [ 309.245995][ C1] ? text_poke_sync+0x20/0x20 [ 309.250447][ C1] ? smp_call_function_many+0x40/0x40 [ 309.256262][ C1] ? text_poke+0x20/0x20 [ 309.260475][ C1] ? insn_decode+0x308/0x490 [ 309.265007][ C1] ? text_poke_sync+0x20/0x20 [ 309.269515][ C1] on_each_cpu+0xa8/0x1a0 [ 309.274015][ C1] ? text_poke_loc_init+0x2e1/0x580 [ 309.279051][ C1] ? smp_call_function+0x90/0x90 [ 309.283816][ C1] ? text_poke_finish+0x30/0x30 [ 309.288514][ C1] text_poke_bp_batch+0x1d4/0x600 [ 309.293368][ C1] ? __kasan_check_write+0x14/0x20 [ 309.298313][ C1] ? text_poke_loc_init+0x580/0x580 [ 309.303345][ C1] ? mutex_lock+0xa5/0x110 [ 309.307609][ C1] ? mutex_trylock+0xa0/0xa0 [ 309.312174][ C1] ? __kasan_check_write+0x14/0x20 [ 309.317130][ C1] text_poke_finish+0x1a/0x30 [ 309.321711][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 309.327526][ C1] __jump_label_update+0x36a/0x380 [ 309.332645][ C1] jump_label_update+0x379/0x400 [ 309.337594][ C1] static_key_disable_cpuslocked+0xcd/0x1b0 [ 309.343342][ C1] static_key_disable+0x1a/0x30 [ 309.348025][ C1] tracepoint_probe_unregister+0x6e0/0x9e0 [ 309.353673][ C1] ? __bpf_trace_timer_class+0x30/0x30 [ 309.358966][ C1] bpf_probe_unregister+0x61/0x70 [ 309.363824][ C1] bpf_raw_tp_link_release+0x63/0x90 [ 309.368942][ C1] bpf_link_put+0x1fd/0x280 [ 309.373289][ C1] ? __bpf_prog_put_rcu+0x170/0x170 [ 309.378457][ C1] bpf_link_release+0x3b/0x40 [ 309.382947][ C1] __fput+0x33d/0x7b0 [ 309.386788][ C1] ____fput+0x15/0x20 [ 309.390669][ C1] task_work_run+0x129/0x190 [ 309.395196][ C1] exit_to_user_mode_loop+0xbf/0xd0 [ 309.400238][ C1] syscall_exit_to_user_mode+0xa2/0x1a0 [ 309.405682][ C1] do_syscall_64+0x40/0x70 [ 309.409940][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 309.415675][ C1] RIP: 0033:0x7f664af37c9a [ 309.419931][ C1] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 309.439349][ C1] RSP: 002b:00007ffea41fec20 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 309.447787][ C1] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00007f664af37c9a [ 309.455596][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 309.463516][ C1] RBP: 0000000000000032 R08: 0000001b32860000 R09: 00007f664b066f8c [ 309.471395][ C1] R10: 00007ffea41fed70 R11: 0000000000000293 R12: 00007f664aabc450 [ 309.479206][ C1] R13: ffffffffffffffff R14: 00007f664aabb000 R15: 000000000000fd07 [ 309.487132][ C1] Sending NMI from CPU 1 to CPUs 0: [ 309.494262][ C1] NMI backtrace for cpu 0 [ 309.494273][ C1] CPU: 0 PID: 54 Comm: kworker/0:2 Not tainted 5.10.234-syzkaller-1006684-g094fc3778d6b #0 [ 309.494279][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 309.494284][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 309.494290][ C1] RIP: 0010:kvm_wait+0xec/0x150 [ 309.494300][ C1] Code: 03 42 0f b6 04 20 84 c0 75 6a 41 0f b6 45 00 44 38 f0 75 26 41 f7 c7 00 02 00 00 75 0f 0f 1f 44 00 00 0f 00 2d a5 53 d5 03 f4 0e 0f 1f 44 00 00 0f 00 2d 96 53 d5 03 fb f4 4c 89 7c 24 18 ff [ 309.494303][ C1] RSP: 0018:ffffc90000ab7020 EFLAGS: 00000046 [ 309.494310][ C1] RAX: 0000000000000003 RBX: 1ffff92000156e08 RCX: ffffffff8150ca54 [ 309.494314][ C1] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffffc90000ab7060 [ 309.494318][ C1] RBP: ffffc90000ab70d0 R08: dffffc0000000000 R09: ffffed103ee08f09 [ 309.494323][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 309.494327][ C1] R13: ffff8881f7047840 R14: 0000000000000003 R15: 0000000000000046 [ 309.494332][ C1] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 309.494335][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.494339][ C1] CR2: 000000c001380000 CR3: 000000010d282000 CR4: 00000000003506b0 [ 309.494344][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 309.494348][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.494350][ C1] Call Trace: [ 309.494352][ C1] [ 309.494355][ C1] ? show_regs+0x58/0x60 [ 309.494357][ C1] ? nmi_cpu_backtrace+0x133/0x160 [ 309.494360][ C1] ? kvm_wait+0xec/0x150 [ 309.494363][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 309.494366][ C1] ? nmi_handle+0xa8/0x280 [ 309.494368][ C1] ? kvm_wait+0xec/0x150 [ 309.494371][ C1] ? default_do_nmi+0x69/0x160 [ 309.494374][ C1] ? exc_nmi+0xad/0x100 [ 309.494377][ C1] ? end_repeat_nmi+0x16/0x31 [ 309.494380][ C1] ? __pv_queued_spin_lock_slowpath+0x6d4/0xc70 [ 309.494383][ C1] ? kvm_wait+0xec/0x150 [ 309.494385][ C1] ? kvm_wait+0xec/0x150 [ 309.494388][ C1] ? kvm_wait+0xec/0x150 [ 309.494390][ C1] [ 309.494393][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 309.494396][ C1] __pv_queued_spin_lock_slowpath+0x72f/0xc70 [ 309.494400][ C1] ? __pv_queued_spin_unlock_slowpath+0x280/0x280 [ 309.494403][ C1] ? skb_scrub_packet+0x265/0x360 [ 309.494406][ C1] _raw_spin_lock_irqsave+0x1a0/0x210 [ 309.494409][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 309.494412][ C1] ? __kasan_check_read+0x11/0x20 [ 309.494415][ C1] ? dev_hard_start_xmit+0x5b8/0x620 [ 309.494418][ C1] lock_timer_base+0x12f/0x270 [ 309.494420][ C1] __mod_timer+0x1c9/0xcf0 [ 309.494423][ C1] ? mod_timer_pending+0x30/0x30 [ 309.494426][ C1] ? dev_queue_xmit+0x20/0x20 [ 309.494429][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 309.494431][ C1] add_timer+0x68/0x80 [ 309.494434][ C1] __queue_delayed_work+0x16d/0x1f0 [ 309.494437][ C1] queue_delayed_work_on+0x10f/0x160 [ 309.494440][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 309.494443][ C1] ? delayed_work_timer_fn+0x80/0x80 [ 309.494446][ C1] ? __kasan_check_write+0x14/0x20 [ 309.494449][ C1] kvfree_call_rcu+0x495/0x650 [ 309.494452][ C1] ? __pv_queued_spin_unlock_slowpath+0x280/0x280 [ 309.494455][ C1] ? call_rcu+0x11f0/0x11f0 [ 309.494458][ C1] ? _raw_spin_lock_irqsave+0x1a0/0x210 [ 309.494461][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 309.494464][ C1] ? __ip6_finish_output+0x5ec/0x780 [ 309.494467][ C1] ? longest_prefix_match+0x331/0x650 [ 309.494470][ C1] trie_delete_elem+0x58f/0x760 [ 309.494473][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0xbd8 [ 309.494476][ C1] bpf_trace_run3+0x121/0x2c0 [ 309.494479][ C1] ? __kasan_check_write+0x14/0x20 [ 309.494482][ C1] ? bpf_trace_run2+0x280/0x280 [ 309.494485][ C1] __bpf_trace_timer_start+0x2b/0x40 [ 309.494488][ C1] enqueue_timer+0x351/0x4c0 [ 309.494490][ C1] __mod_timer+0x8d3/0xcf0 [ 309.494493][ C1] ? mod_timer_pending+0x30/0x30 [ 309.494496][ C1] ? prandom_u32+0x24c/0x290 [ 309.494498][ C1] mod_timer+0x1f/0x30 [ 309.494501][ C1] ipv6_mc_dad_complete+0x264/0x3a0 [ 309.494504][ C1] addrconf_dad_completed+0x6df/0xd90 [ 309.494508][ C1] ? addrconf_dad_stop+0x420/0x420 [ 309.494510][ C1] addrconf_dad_work+0xe57/0x1700 [ 309.494514][ C1] ? ipv6_get_saddr_eval+0xf20/0xf20 [ 309.494517][ C1] ? pwq_activate_delayed_work+0x366/0x4a0 [ 309.494520][ C1] ? __kasan_check_read+0x11/0x20 [ 309.494523][ C1] ? read_word_at_a_time+0x12/0x20 [ 309.494525][ C1] ? strscpy+0x9c/0x260 [ 309.494528][ C1] process_one_work+0x6dc/0xbd0 [ 309.494531][ C1] worker_thread+0xaea/0x1510 [ 309.494534][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 309.494537][ C1] ? __kasan_check_read+0x11/0x20 [ 309.494540][ C1] kthread+0x34b/0x3d0 [ 309.494543][ C1] ? worker_clr_flags+0x180/0x180 [ 309.494546][ C1] ? kthread_blkcg+0xd0/0xd0 [ 309.494548][ C1] ret_from_fork+0x1f/0x30