Warning: Permanently added '10.128.1.182' (ED25519) to the list of known hosts. 2024/07/16 17:51:27 ignoring optional flag "sandboxArg"="0" 2024/07/16 17:51:27 parsed 1 programs [ 44.202653][ T30] audit: type=1400 audit(1721152287.483:96): avc: denied { mounton } for pid=346 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 44.228022][ T30] audit: type=1400 audit(1721152287.483:97): avc: denied { read write } for pid=346 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 44.254877][ T30] audit: type=1400 audit(1721152287.483:98): avc: denied { open } for pid=346 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 44.349541][ T30] audit: type=1400 audit(1721152287.633:99): avc: denied { unlink } for pid=346 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2024/07/16 17:51:27 executed programs: 0 [ 44.375629][ T30] audit: type=1400 audit(1721152287.633:100): avc: denied { relabelto } for pid=347 comm="mkswap" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 44.408465][ T346] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.426103][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.432958][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.439982][ T352] device bridge_slave_0 entered promiscuous mode [ 44.446712][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.453731][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.461070][ T352] device bridge_slave_1 entered promiscuous mode [ 44.472525][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.479451][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.486476][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.493372][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.502026][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.508939][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.515838][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.522830][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.531337][ T352] device veth0_vlan entered promiscuous mode [ 44.537896][ T352] device veth1_macvtap entered promiscuous mode [ 44.544489][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.552686][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.560102][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.567054][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.574318][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.582421][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.590484][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.597485][ T307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.605086][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.613111][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.619929][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.627160][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.635052][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.643353][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.652041][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.663147][ T30] audit: type=1400 audit(1721152287.943:101): avc: denied { create } for pid=357 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.682840][ T30] audit: type=1400 audit(1721152287.943:102): avc: denied { write } for pid=357 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.702667][ T30] audit: type=1400 audit(1721152287.943:103): avc: denied { setopt } for pid=357 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.559339][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 145.565872][ C0] rcu: 0-...!: (10000 ticks this GP) idle=3db/1/0x4000000000000000 softirq=5112/5112 fqs=0 last_accelerate: 9c79/c389 dyntick_enabled: 1 [ 145.580086][ C0] (t=10000 jiffies g=1389 q=205) [ 145.584944][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 9999 jiffies! g1389 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 145.596915][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=449 [ 145.604485][ C0] rcu: rcu_preempt kthread starved for 10000 jiffies! g1389 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 145.615571][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 145.625382][ C0] rcu: RCU grace-period kthread stack dump: [ 145.631123][ C0] task:rcu_preempt state:I stack:14856 pid: 14 ppid: 2 flags:0x00004000 [ 145.640146][ C0] Call Trace: [ 145.643479][ C0] [ 145.646361][ C0] __schedule+0x264/0x730 [ 145.650516][ C0] schedule+0x60/0xf0 [ 145.654520][ C0] schedule_timeout+0x82/0x150 [ 145.659105][ C0] ? __bpf_trace_tick_stop+0x10/0x10 [ 145.664258][ C0] rcu_gp_fqs_loop+0xf7/0x3d0 [ 145.668822][ C0] rcu_gp_kthread+0x9b/0x130 [ 145.673328][ C0] kthread+0x13a/0x160 [ 145.677156][ C0] ? rcu_gp_cleanup+0x3f0/0x3f0 [ 145.681942][ C0] ? set_kthread_struct+0x50/0x50 [ 145.686787][ C0] ret_from_fork+0x1f/0x30 [ 145.691239][ C0] [ 145.694149][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 145.700282][ C0] NMI backtrace for cpu 0 [ 145.704439][ C0] CPU: 0 PID: 1715 Comm: syz-executor.0 Not tainted 5.15.151-syzkaller #0 [ 145.712763][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 145.722745][ C0] Call Trace: [ 145.725867][ C0] [ 145.728563][ C0] dump_stack_lvl+0x38/0x49 [ 145.733087][ C0] dump_stack+0x10/0x12 [ 145.737236][ C0] nmi_cpu_backtrace.cold+0x32/0x74 [ 145.742271][ C0] ? lapic_can_unplug_cpu+0x80/0x80 [ 145.747319][ C0] nmi_trigger_cpumask_backtrace+0xce/0xe0 [ 145.752951][ C0] arch_trigger_cpumask_backtrace+0x14/0x20 [ 145.758675][ C0] rcu_check_gp_kthread_starvation.cold+0x185/0x18a [ 145.765106][ C0] rcu_sched_clock_irq.cold+0x175/0x327 [ 145.770482][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 145.775860][ C0] update_process_times+0x96/0xd0 [ 145.780720][ C0] tick_sched_handle+0x24/0x60 [ 145.785320][ C0] tick_sched_timer+0x72/0x90 [ 145.789924][ C0] ? tick_sched_do_timer+0xe0/0xe0 [ 145.794869][ C0] __hrtimer_run_queues+0x117/0x290 [ 145.799957][ C0] hrtimer_interrupt+0xfe/0x210 [ 145.804588][ C0] __sysvec_apic_timer_interrupt+0x73/0x160 [ 145.810322][ C0] sysvec_apic_timer_interrupt+0xa7/0xd0 [ 145.815927][ C0] [ 145.818648][ C0] [ 145.821426][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 145.827256][ C0] RIP: 0010:kvm_wait+0x3e/0x40 [ 145.831873][ C0] Code: 0b fa 0f b6 07 40 38 f0 74 15 fb c3 0f b6 07 40 38 c6 75 f7 66 90 0f 00 2d fd 01 35 01 f4 c3 66 90 0f 00 2d f2 01 35 01 fb f4 90 8b 05 ea 3e d7 01 83 f8 ff 74 06 85 c0 0f 95 c0 c3 55 48 89 [ 145.851285][ C0] RSP: 0018:ffffc90003017be8 EFLAGS: 00000246 [ 145.857187][ C0] RAX: 0000000000000003 RBX: ffff888237c2cb00 RCX: 0000000000000008 [ 145.864996][ C0] RDX: 0000000000000000 RSI: 0000000000000003 RDI: ffff88810f917b08 [ 145.872808][ C0] RBP: ffffc90003017c28 R08: ffff88823fff0740 R09: 0000000000000000 [ 145.880625][ C0] R10: 0000000000000001 R11: ffff888237c2cb00 R12: ffff88810f917b08 [ 145.888518][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000100 [ 145.896475][ C0] ? __pv_queued_spin_lock_slowpath+0x29f/0x2e0 [ 145.902621][ C0] _raw_spin_lock_bh+0x39/0x40 [ 145.907219][ C0] lock_sock_nested+0x1e/0x50 [ 145.911734][ C0] tipc_sendstream+0x23/0x50 [ 145.916175][ C0] __sock_sendmsg+0x35/0x40 [ 145.920586][ C0] ____sys_sendmsg+0x23e/0x260 [ 145.925191][ C0] ? import_iovec+0x31/0x40 [ 145.929620][ C0] ? sendmsg_copy_msghdr+0x79/0xa0 [ 145.934658][ C0] ? wake_up_q+0x57/0xa0 [ 145.939148][ C0] ___sys_sendmsg+0x74/0xc0 [ 145.943511][ C0] ? do_futex+0x1a4/0xb60 [ 145.947660][ C0] ? alloc_empty_file+0x63/0xb0 [ 145.952597][ C0] ? alloc_file+0x91/0x110 [ 145.957072][ C0] ? __fget_light.part.0+0x87/0xd0 [ 145.962311][ C0] __sys_sendmsg+0x5d/0xb0 [ 145.966658][ C0] ? fpregs_assert_state_consistent+0x1b/0x30 [ 145.972719][ C0] __x64_sys_sendmsg+0x1a/0x20 [ 145.977515][ C0] do_syscall_64+0x35/0xb0 [ 145.981742][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 145.987477][ C0] RIP: 0033:0x7fba1398eda9 [ 145.991724][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 146.011505][ C0] RSP: 002b:00007fba135100c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.019919][ C0] RAX: ffffffffffffffda RBX: 00007fba13abcf80 RCX: 00007fba1398eda9 [ 146.028078][ C0] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000004 [ 146.036091][ C0] RBP: 00007fba139db47a R08: 0000000000000000 R09: 0000000000000000 [ 146.043886][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.051704][ C0] R13: 000000000000000b R14: 00007fba13abcf80 R15: 00007ffe4a7df338 [ 146.059729][ C0] [ 146.062777][ C0] NMI backtrace for cpu 0 [ 146.067136][ C0] CPU: 0 PID: 1715 Comm: syz-executor.0 Not tainted 5.15.151-syzkaller #0 [ 146.075669][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 146.085569][ C0] Call Trace: [ 146.088774][ C0] [ 146.091749][ C0] dump_stack_lvl+0x38/0x49 [ 146.096255][ C0] dump_stack+0x10/0x12 [ 146.100245][ C0] nmi_cpu_backtrace.cold+0x32/0x74 [ 146.105272][ C0] ? lapic_can_unplug_cpu+0x80/0x80 [ 146.110321][ C0] nmi_trigger_cpumask_backtrace+0xce/0xe0 [ 146.115984][ C0] arch_trigger_cpumask_backtrace+0x14/0x20 [ 146.121676][ C0] rcu_dump_cpu_stacks+0xbf/0xf0 [ 146.126552][ C0] rcu_sched_clock_irq.cold+0x17a/0x327 [ 146.132003][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 146.137385][ C0] update_process_times+0x96/0xd0 [ 146.142329][ C0] tick_sched_handle+0x24/0x60 [ 146.146932][ C0] tick_sched_timer+0x72/0x90 [ 146.151545][ C0] ? tick_sched_do_timer+0xe0/0xe0 [ 146.156477][ C0] __hrtimer_run_queues+0x117/0x290 [ 146.161520][ C0] hrtimer_interrupt+0xfe/0x210 [ 146.166288][ C0] __sysvec_apic_timer_interrupt+0x73/0x160 [ 146.172023][ C0] sysvec_apic_timer_interrupt+0xa7/0xd0 [ 146.177754][ C0] [ 146.180605][ C0] [ 146.183447][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 146.189727][ C0] RIP: 0010:kvm_wait+0x3e/0x40 [ 146.194328][ C0] Code: 0b fa 0f b6 07 40 38 f0 74 15 fb c3 0f b6 07 40 38 c6 75 f7 66 90 0f 00 2d fd 01 35 01 f4 c3 66 90 0f 00 2d f2 01 35 01 fb f4 90 8b 05 ea 3e d7 01 83 f8 ff 74 06 85 c0 0f 95 c0 c3 55 48 89 [ 146.214302][ C0] RSP: 0018:ffffc90003017be8 EFLAGS: 00000246 [ 146.220560][ C0] RAX: 0000000000000003 RBX: ffff888237c2cb00 RCX: 0000000000000008 [ 146.228369][ C0] RDX: 0000000000000000 RSI: 0000000000000003 RDI: ffff88810f917b08 [ 146.236170][ C0] RBP: ffffc90003017c28 R08: ffff88823fff0740 R09: 0000000000000000 [ 146.244253][ C0] R10: 0000000000000001 R11: ffff888237c2cb00 R12: ffff88810f917b08 [ 146.252065][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000100 [ 146.259896][ C0] ? __pv_queued_spin_lock_slowpath+0x29f/0x2e0 [ 146.266068][ C0] _raw_spin_lock_bh+0x39/0x40 [ 146.270636][ C0] lock_sock_nested+0x1e/0x50 [ 146.275148][ C0] tipc_sendstream+0x23/0x50 [ 146.279581][ C0] __sock_sendmsg+0x35/0x40 [ 146.283945][ C0] ____sys_sendmsg+0x23e/0x260 [ 146.288604][ C0] ? import_iovec+0x31/0x40 [ 146.293219][ C0] ? sendmsg_copy_msghdr+0x79/0xa0 [ 146.298156][ C0] ? wake_up_q+0x57/0xa0 [ 146.302335][ C0] ___sys_sendmsg+0x74/0xc0 [ 146.306760][ C0] ? do_futex+0x1a4/0xb60 [ 146.310916][ C0] ? alloc_empty_file+0x63/0xb0 [ 146.315687][ C0] ? alloc_file+0x91/0x110 [ 146.319935][ C0] ? __fget_light.part.0+0x87/0xd0 [ 146.324903][ C0] __sys_sendmsg+0x5d/0xb0 [ 146.329348][ C0] ? fpregs_assert_state_consistent+0x1b/0x30 [ 146.335237][ C0] __x64_sys_sendmsg+0x1a/0x20 [ 146.340099][ C0] do_syscall_64+0x35/0xb0 [ 146.344455][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 146.350177][ C0] RIP: 0033:0x7fba1398eda9 [ 146.354517][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 146.374221][ C0] RSP: 002b:00007fba135100c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.382464][ C0] RAX: ffffffffffffffda RBX: 00007fba13abcf80 RCX: 00007fba1398eda9 [ 146.390974][ C0] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000004 [ 146.398776][ C0] RBP: 00007fba139db47a R08: 0000000000000000 R09: 0000000000000000 [ 146.406600][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.414494][ C0] R13: 000000000000000b R14: 00007fba13abcf80 R15: 00007ffe4a7df338 [ 146.422406][ C0] [ 176.657977][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [syz-executor.0:1716] [ 176.666465][ C1] Modules linked in: [ 176.670188][ C1] CPU: 1 PID: 1716 Comm: syz-executor.0 Not tainted 5.15.151-syzkaller #0 [ 176.678634][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 176.688878][ C1] RIP: 0010:tipc_sk_lookup+0x9a/0x170 [ 176.694062][ C1] Code: 89 c2 49 8d 44 d5 40 48 89 45 c8 41 8b 45 04 85 c0 0f 85 d5 00 00 00 48 8b 45 c8 48 83 c8 01 48 89 45 c0 48 8b 45 c8 4c 8b 00 <49> 83 e0 fe 4d 89 c7 4c 0f 44 7d c0 41 f6 c7 01 75 7d 0f b7 83 de [ 176.715165][ C1] RSP: 0018:ffffc9000302f908 EFLAGS: 00000286 [ 176.721054][ C1] RAX: ffff88810b9e91c8 RBX: ffff88810d2fe000 RCX: 000000008fba6508 [ 176.728870][ C1] RDX: 0000000000000031 RSI: 0000000000000001 RDI: ffffc9000302f92c [ 176.736976][ C1] RBP: ffffc9000302f958 R08: ffff88810f917e78 R09: 0000000000000001 [ 176.744868][ C1] R10: ffff88810f9b5a00 R11: ffff88810f908000 R12: ffff88810ba38f80 [ 176.752749][ C1] R13: ffff88810b9e9000 R14: ffff88810f917a80 R15: ffffc9000302fa68 [ 176.760676][ C1] FS: 00007fba134ef6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 176.769535][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.775950][ C1] CR2: 00007fba134efd58 CR3: 000000010c85f000 CR4: 00000000003506a0 [ 176.784054][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 176.791853][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 176.799758][ C1] Call Trace: [ 176.802882][ C1] [ 176.805566][ C1] ? show_regs.part.0+0x1e/0x20 [ 176.810255][ C1] ? show_regs.cold+0x8/0xd [ 176.814606][ C1] ? watchdog_timer_fn+0x21f/0x2f0 [ 176.819677][ C1] ? softlockup_fn+0x70/0x70 [ 176.824443][ C1] ? __hrtimer_run_queues+0x117/0x290 [ 176.829766][ C1] ? hrtimer_interrupt+0xfe/0x210 [ 176.834693][ C1] ? __sysvec_apic_timer_interrupt+0x73/0x160 [ 176.840592][ C1] ? sysvec_apic_timer_interrupt+0xa7/0xd0 [ 176.846241][ C1] [ 176.849008][ C1] [ 176.852156][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 176.858234][ C1] ? tipc_sk_lookup+0x9a/0x170 [ 176.862834][ C1] ? tipc_sk_lookup+0x62/0x170 [ 176.867431][ C1] tipc_sk_rcv+0xab/0x6e0 [ 176.871600][ C1] ? skb_free_head+0x64/0x80 [ 176.876021][ C1] ? kfree+0x278/0x2a0 [ 176.879927][ C1] tipc_node_xmit+0x7d/0x5c0 [ 176.884356][ C1] ? kfree_skbmem+0x62/0x80 [ 176.888865][ C1] ? kfree_skb_reason.part.0+0x39/0xe0 [ 176.894168][ C1] tipc_node_distr_xmit+0xe9/0x120 [ 176.899201][ C1] tipc_sk_rcv+0x2a2/0x6e0 [ 176.903459][ C1] tipc_node_xmit+0x7d/0x5c0 [ 176.907871][ C1] tipc_sk_push_backlog+0x8f/0x150 [ 176.913006][ C1] tipc_sk_filter_rcv+0xc7e/0xe00 [ 176.918047][ C1] tipc_sk_rcv+0x3c7/0x6e0 [ 176.922285][ C1] ? kfree_skb_reason+0x19/0x50 [ 176.927058][ C1] tipc_node_xmit+0x7d/0x5c0 [ 176.931498][ C1] ? tipc_sk_filter_rcv+0x440/0xe00 [ 176.936624][ C1] tipc_node_distr_xmit+0xe9/0x120 [ 176.941558][ C1] tipc_sk_backlog_rcv+0x5d/0x80 [ 176.946569][ C1] __release_sock+0x5c/0xa0 [ 176.951021][ C1] release_sock+0x2b/0x90 [ 176.955198][ C1] sock_setsockopt+0xeb/0xd90 [ 176.959789][ C1] __sys_setsockopt+0x174/0x1a0 [ 176.964462][ C1] __x64_sys_setsockopt+0x20/0x30 [ 176.969322][ C1] do_syscall_64+0x35/0xb0 [ 176.973573][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 176.979379][ C1] RIP: 0033:0x7fba1398eda9 [ 176.983663][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 177.003371][ C1] RSP: 002b:00007fba134ef0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 177.011868][ C1] RAX: ffffffffffffffda RBX: 00007fba13abd050 RCX: 00007fba1398eda9 [ 177.019868][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 177.027678][ C1] RBP: 00007fba139db47a R08: 0000000000000004 R09: 0000000000000000 [ 177.035481][ C1] R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000000 [ 177.043294][ C1] R13: 000000000000000b R14: 00007fba13abd050 R15: 00007ffe4a7df338 [ 177.051213][ C1] [ 177.054367][ C1] Sending NMI from CPU 1 to CPUs 0: [ 177.059594][ C0] NMI backtrace for cpu 0 [ 177.059599][ C0] CPU: 0 PID: 1715 Comm: syz-executor.0 Not tainted 5.15.151-syzkaller #0 [ 177.059604][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 177.059606][ C0] RIP: 0010:__pv_queued_spin_lock_slowpath+0xfa/0x2e0 [ 177.059615][ C0] Code: be 01 00 00 00 41 bf 00 01 00 00 3c 02 0f 94 c0 0f b6 c0 48 89 45 c8 c6 43 14 00 ba 00 80 00 00 41 c6 44 24 01 01 eb 0b f3 90 <83> ea 01 0f 84 74 01 00 00 41 0f b6 04 24 84 c0 75 ec 44 89 f8 f0 [ 177.059618][ C0] RSP: 0018:ffffc90003017bf0 EFLAGS: 00000206 [ 177.059621][ C0] RAX: 0000000000000003 RBX: ffff888237c2cb00 RCX: 0000000000000008 [ 177.059623][ C0] RDX: 0000000000005749 RSI: 0000000000000003 RDI: ffff88810f917b08 [ 177.059624][ C0] RBP: ffffc90003017c28 R08: ffff88823fff0740 R09: 0000000000000000 [ 177.059626][ C0] R10: 0000000000000001 R11: ffff888237c2cb00 R12: ffff88810f917b08 [ 177.059627][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000100 [ 177.059629][ C0] FS: 00007fba135106c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 177.059632][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.059636][ C0] CR2: 0000000020000000 CR3: 000000010c85f000 CR4: 00000000003506b0 [ 177.059638][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.059639][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.059641][ C0] Call Trace: [ 177.059643][ C0] [ 177.059645][ C0] ? show_regs.part.0+0x1e/0x20 [ 177.059651][ C0] ? show_regs.cold+0x8/0xd [ 177.059653][ C0] ? nmi_cpu_backtrace.cold+0x1c/0x74 [ 177.059658][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 177.059663][ C0] ? nmi_handle+0x53/0x120 [ 177.059666][ C0] ? __pv_queued_spin_lock_slowpath+0xfa/0x2e0 [ 177.059669][ C0] ? default_do_nmi+0x71/0x2d0 [ 177.059673][ C0] ? exc_nmi+0x109/0x130 [ 177.059675][ C0] ? end_repeat_nmi+0x16/0x31 [ 177.059680][ C0] ? __pv_queued_spin_lock_slowpath+0xfa/0x2e0 [ 177.059683][ C0] ? __pv_queued_spin_lock_slowpath+0xfa/0x2e0 [ 177.059686][ C0] ? __pv_queued_spin_lock_slowpath+0xfa/0x2e0 [ 177.059688][ C0] [ 177.059689][ C0] [ 177.059691][ C0] _raw_spin_lock_bh+0x39/0x40 [ 177.059693][ C0] lock_sock_nested+0x1e/0x50 [ 177.059698][ C0] tipc_sendstream+0x23/0x50 [ 177.059701][ C0] __sock_sendmsg+0x35/0x40 [ 177.059705][ C0] ____sys_sendmsg+0x23e/0x260 [ 177.059708][ C0] ? import_iovec+0x31/0x40 [ 177.059712][ C0] ? sendmsg_copy_msghdr+0x79/0xa0 [ 177.059716][ C0] ? wake_up_q+0x57/0xa0 [ 177.059721][ C0] ___sys_sendmsg+0x74/0xc0 [ 177.059726][ C0] ? do_futex+0x1a4/0xb60 [ 177.059731][ C0] ? alloc_empty_file+0x63/0xb0 [ 177.059735][ C0] ? alloc_file+0x91/0x110 [ 177.059738][ C0] ? __fget_light.part.0+0x87/0xd0 [ 177.059743][ C0] __sys_sendmsg+0x5d/0xb0 [ 177.059746][ C0] ? fpregs_assert_state_consistent+0x1b/0x30 [ 177.059751][ C0] __x64_sys_sendmsg+0x1a/0x20 [ 177.059754][ C0] do_syscall_64+0x35/0xb0 [ 177.059759][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 177.059762][ C0] RIP: 0033:0x7fba1398eda9 [ 177.059766][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 177.059768][ C0] RSP: 002b:00007fba135100c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.059771][ C0] RAX: ffffffffffffffda RBX: 00007fba13abcf80 RCX: 00007fba1398eda9 [ 177.059773][ C0] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000004 [ 177.059774][ C0] RBP: 00007fba139db47a R08: 0000000000000000 R09: 0000000000000000 [ 177.059775][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.059776][ C0] R13: 000000000000000b R14: 00007fba13abcf80 R15: 00007ffe4a7df338 [ 177.059779][ C0]