Warning: Permanently added '10.128.0.94' (ECDSA) to the list of known hosts. 2023/07/07 08:22:52 ignoring optional flag "sandboxArg"="0" 2023/07/07 08:22:52 parsed 1 programs [ 40.372264][ T29] audit: type=1400 audit(1688718172.411:156): avc: denied { mounton } for pid=425 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 40.397533][ T29] audit: type=1400 audit(1688718172.411:157): avc: denied { mount } for pid=425 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 40.481350][ T29] audit: type=1400 audit(1688718172.521:158): avc: denied { unlink } for pid=425 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2023/07/07 08:22:52 executed programs: 0 [ 40.533746][ T425] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 40.551172][ T430] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.558043][ T430] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.565115][ T430] device bridge_slave_0 entered promiscuous mode [ 40.571489][ T430] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.578389][ T430] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.585563][ T430] device bridge_slave_1 entered promiscuous mode [ 40.595511][ T29] audit: type=1400 audit(1688718172.631:159): avc: denied { write } for pid=430 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.616563][ T29] audit: type=1400 audit(1688718172.651:160): avc: denied { read } for pid=430 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.617830][ T430] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.644393][ T430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.651441][ T430] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.658288][ T430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.667159][ T122] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.674102][ T122] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.681163][ T122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.688169][ T122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.695769][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.703659][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.710964][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.719304][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.727746][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.734808][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.743546][ T430] device veth0_vlan entered promiscuous mode [ 40.749862][ T430] device veth1_macvtap entered promiscuous mode [ 40.756502][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.764550][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.772091][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.779290][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.786623][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.794706][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.802276][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.811459][ T29] audit: type=1400 audit(1688718172.851:161): avc: denied { mounton } for pid=430 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.813553][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.842505][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2023/07/07 08:23:47 executed programs: 1 [ 140.850861][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 140.857261][ C0] rcu: 0-...!: (10000 ticks this GP) idle=4c9/1/0x4000000000000000 softirq=1450/1450 fqs=0 last_accelerate: 9aa9/c1bd dyntick_enabled: 1 [ 140.871316][ C0] (t=10000 jiffies g=541 q=2429) [ 140.876178][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 9999 jiffies! g541 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 140.888425][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=547 [ 140.895970][ C0] rcu: rcu_preempt kthread starved for 10000 jiffies! g541 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 140.907337][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 140.917410][ C0] rcu: RCU grace-period kthread stack dump: [ 140.923574][ C0] task:rcu_preempt state:I stack:14912 pid: 15 ppid: 2 flags:0x00004000 [ 140.932776][ C0] Call Trace: [ 140.936206][ C0] [ 140.939034][ C0] __schedule+0x24d/0x6e0 [ 140.943552][ C0] schedule+0x60/0xf0 [ 140.947710][ C0] schedule_timeout+0x82/0x150 [ 140.952315][ C0] ? _raw_spin_unlock_irqrestore+0x28/0x40 [ 140.958128][ C0] ? __bpf_trace_tick_stop+0x10/0x10 [ 140.963337][ C0] rcu_gp_fqs_loop+0xf7/0x360 [ 140.968299][ C0] rcu_gp_kthread+0x9b/0x130 [ 140.972820][ C0] kthread+0x13a/0x160 [ 140.976699][ C0] ? rcu_gp_cleanup+0x3f0/0x3f0 [ 140.981589][ C0] ? set_kthread_struct+0x50/0x50 [ 140.986418][ C0] ret_from_fork+0x1f/0x30 [ 140.990671][ C0] [ 140.993538][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 140.999786][ C0] NMI backtrace for cpu 0 [ 141.004040][ C0] CPU: 0 PID: 435 Comm: syz-executor.0 Not tainted 5.15.118-syzkaller #0 [ 141.012487][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 141.022461][ C0] Call Trace: [ 141.025576][ C0] [ 141.028342][ C0] dump_stack_lvl+0x38/0x49 [ 141.032924][ C0] dump_stack+0x10/0x12 [ 141.037013][ C0] nmi_cpu_backtrace.cold+0x32/0x74 [ 141.042145][ C0] ? lapic_can_unplug_cpu+0x80/0x80 [ 141.047306][ C0] nmi_trigger_cpumask_backtrace+0xce/0xe0 [ 141.053207][ C0] arch_trigger_cpumask_backtrace+0x14/0x20 [ 141.059240][ C0] rcu_check_gp_kthread_starvation.cold+0x185/0x18a [ 141.065799][ C0] rcu_sched_clock_irq.cold+0x175/0x327 [ 141.071495][ C0] ? account_system_index_time+0xa2/0xb0 [ 141.077051][ C0] ? irqtime_account_process_tick+0x17c/0x1c0 [ 141.083033][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 141.088498][ C0] update_process_times+0x96/0xd0 [ 141.093835][ C0] tick_sched_handle+0x24/0x60 [ 141.098545][ C0] tick_sched_timer+0x8d/0xb0 [ 141.103188][ C0] ? can_stop_idle_tick+0xd0/0xd0 [ 141.108097][ C0] __hrtimer_run_queues+0x117/0x290 [ 141.113233][ C0] hrtimer_interrupt+0xfe/0x210 [ 141.118109][ C0] __sysvec_apic_timer_interrupt+0x73/0x160 [ 141.124516][ C0] sysvec_apic_timer_interrupt+0xa7/0xd0 [ 141.129983][ C0] [ 141.132830][ C0] [ 141.135701][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 141.141952][ C0] RIP: 0010:kvm_wait+0x3e/0x40 [ 141.146946][ C0] Code: 0b fa 0f b6 07 40 38 f0 74 15 fb c3 0f b6 07 40 38 c6 75 f7 66 90 0f 00 2d 7d 04 35 01 f4 c3 66 90 0f 00 2d 72 04 35 01 fb f4 90 8b 05 aa 39 f7 01 83 f8 ff 74 06 85 c0 0f 95 c0 c3 55 48 89 [ 141.166690][ C0] RSP: 0018:ffffc9000038b7b8 EFLAGS: 00000246 [ 141.172682][ C0] RAX: 0000000000000003 RBX: ffff888237c2b6c0 RCX: 0000000000000008 [ 141.182824][ C0] RDX: 0000000000000000 RSI: 0000000000000003 RDI: ffff8881081d94ac [ 141.190952][ C0] RBP: ffffc9000038b7f8 R08: ffff88823fff1d00 R09: 0000000000000000 [ 141.198751][ C0] R10: 0000000000000001 R11: ffff888237c2b6c0 R12: ffff8881081d94ac [ 141.206648][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000100 [ 141.215329][ C0] ? __pv_queued_spin_lock_slowpath+0x29f/0x2e0 [ 141.221691][ C0] _raw_spin_lock_bh+0x39/0x40 [ 141.226273][ C0] get_dist_table+0x92/0xd0 [ 141.230609][ C0] netem_change+0xf8/0x610 [ 141.234853][ C0] netem_init+0x41/0x60 [ 141.238963][ C0] qdisc_create+0x13f/0x590 [ 141.243357][ C0] ? security_capable+0x33/0x50 [ 141.248303][ C0] tc_modify_qdisc+0x13c/0x9c0 [ 141.255593][ C0] rtnetlink_rcv_msg+0x13e/0x380 [ 141.260619][ C0] ? rtnl_calcit.isra.0+0x130/0x130 [ 141.265743][ C0] netlink_rcv_skb+0x4e/0xf0 [ 141.270195][ C0] rtnetlink_rcv+0x10/0x20 [ 141.274497][ C0] netlink_unicast+0x252/0x350 [ 141.279449][ C0] netlink_sendmsg+0x241/0x490 [ 141.284041][ C0] sock_sendmsg+0x35/0x40 [ 141.288468][ C0] ____sys_sendmsg+0x23e/0x260 [ 141.293254][ C0] ? import_iovec+0x31/0x40 [ 141.298620][ C0] ? sendmsg_copy_msghdr+0x79/0xa0 [ 141.303656][ C0] ___sys_sendmsg+0x74/0xc0 [ 141.308245][ C0] ? do_futex+0x103/0xaf0 [ 141.312491][ C0] ? _copy_to_user+0x4a/0x60 [ 141.317017][ C0] ? put_user_ifreq+0x62/0x80 [ 141.321521][ C0] ? sock_do_ioctl+0xaa/0xd0 [ 141.325949][ C0] ? __fget_light.part.0+0x87/0xd0 [ 141.331005][ C0] __sys_sendmsg+0x5d/0xb0 [ 141.335405][ C0] __x64_sys_sendmsg+0x1a/0x20 [ 141.340352][ C0] do_syscall_64+0x35/0xb0 [ 141.345400][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 141.351116][ C0] RIP: 0033:0x7f9382e18389 [ 141.355381][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 141.381359][ C0] RSP: 002b:00007f938298b168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.389806][ C0] RAX: ffffffffffffffda RBX: 00007f9382f37f80 RCX: 00007f9382e18389 [ 141.397867][ C0] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 141.405919][ C0] RBP: 00007f9382e63493 R08: 0000000000000000 R09: 0000000000000000 [ 141.413871][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.421713][ C0] R13: 00007ffcb738fe3f R14: 00007f938298b300 R15: 0000000000022000 [ 141.429615][ C0] [ 141.432485][ C0] NMI backtrace for cpu 0 [ 141.436904][ C0] CPU: 0 PID: 435 Comm: syz-executor.0 Not tainted 5.15.118-syzkaller #0 [ 141.445151][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 141.455573][ C0] Call Trace: [ 141.458777][ C0] [ 141.461469][ C0] dump_stack_lvl+0x38/0x49 [ 141.465849][ C0] dump_stack+0x10/0x12 [ 141.469814][ C0] nmi_cpu_backtrace.cold+0x32/0x74 [ 141.475013][ C0] ? lapic_can_unplug_cpu+0x80/0x80 [ 141.480126][ C0] nmi_trigger_cpumask_backtrace+0xce/0xe0 [ 141.485902][ C0] arch_trigger_cpumask_backtrace+0x14/0x20 [ 141.492016][ C0] rcu_dump_cpu_stacks+0xbf/0xf0 [ 141.496801][ C0] rcu_sched_clock_irq.cold+0x17a/0x327 [ 141.502633][ C0] ? account_system_index_time+0xa2/0xb0 [ 141.508187][ C0] ? irqtime_account_process_tick+0x17c/0x1c0 [ 141.514093][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 141.519481][ C0] update_process_times+0x96/0xd0 [ 141.524333][ C0] tick_sched_handle+0x24/0x60 [ 141.528933][ C0] tick_sched_timer+0x8d/0xb0 [ 141.533552][ C0] ? can_stop_idle_tick+0xd0/0xd0 [ 141.538396][ C0] __hrtimer_run_queues+0x117/0x290 [ 141.543513][ C0] hrtimer_interrupt+0xfe/0x210 [ 141.548201][ C0] __sysvec_apic_timer_interrupt+0x73/0x160 [ 141.553929][ C0] sysvec_apic_timer_interrupt+0xa7/0xd0 [ 141.559502][ C0] [ 141.562444][ C0] [ 141.565305][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 141.571125][ C0] RIP: 0010:kvm_wait+0x3e/0x40 [ 141.575972][ C0] Code: 0b fa 0f b6 07 40 38 f0 74 15 fb c3 0f b6 07 40 38 c6 75 f7 66 90 0f 00 2d 7d 04 35 01 f4 c3 66 90 0f 00 2d 72 04 35 01 fb f4 90 8b 05 aa 39 f7 01 83 f8 ff 74 06 85 c0 0f 95 c0 c3 55 48 89 [ 141.595890][ C0] RSP: 0018:ffffc9000038b7b8 EFLAGS: 00000246 [ 141.601783][ C0] RAX: 0000000000000003 RBX: ffff888237c2b6c0 RCX: 0000000000000008 [ 141.610050][ C0] RDX: 0000000000000000 RSI: 0000000000000003 RDI: ffff8881081d94ac [ 141.618220][ C0] RBP: ffffc9000038b7f8 R08: ffff88823fff1d00 R09: 0000000000000000 [ 141.626033][ C0] R10: 0000000000000001 R11: ffff888237c2b6c0 R12: ffff8881081d94ac [ 141.633933][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000100 [ 141.641829][ C0] ? __pv_queued_spin_lock_slowpath+0x29f/0x2e0 [ 141.648102][ C0] _raw_spin_lock_bh+0x39/0x40 [ 141.652707][ C0] get_dist_table+0x92/0xd0 [ 141.657044][ C0] netem_change+0xf8/0x610 [ 141.661296][ C0] netem_init+0x41/0x60 [ 141.665288][ C0] qdisc_create+0x13f/0x590 [ 141.669855][ C0] ? security_capable+0x33/0x50 [ 141.674573][ C0] tc_modify_qdisc+0x13c/0x9c0 [ 141.679437][ C0] rtnetlink_rcv_msg+0x13e/0x380 [ 141.684392][ C0] ? rtnl_calcit.isra.0+0x130/0x130 [ 141.689589][ C0] netlink_rcv_skb+0x4e/0xf0 [ 141.694031][ C0] rtnetlink_rcv+0x10/0x20 [ 141.698354][ C0] netlink_unicast+0x252/0x350 [ 141.702957][ C0] netlink_sendmsg+0x241/0x490 [ 141.707553][ C0] sock_sendmsg+0x35/0x40 [ 141.711753][ C0] ____sys_sendmsg+0x23e/0x260 [ 141.716845][ C0] ? import_iovec+0x31/0x40 [ 141.721182][ C0] ? sendmsg_copy_msghdr+0x79/0xa0 [ 141.726127][ C0] ___sys_sendmsg+0x74/0xc0 [ 141.730467][ C0] ? do_futex+0x103/0xaf0 [ 141.734633][ C0] ? _copy_to_user+0x4a/0x60 [ 141.739266][ C0] ? put_user_ifreq+0x62/0x80 [ 141.743834][ C0] ? sock_do_ioctl+0xaa/0xd0 [ 141.748260][ C0] ? __fget_light.part.0+0x87/0xd0 [ 141.753210][ C0] __sys_sendmsg+0x5d/0xb0 [ 141.757468][ C0] __x64_sys_sendmsg+0x1a/0x20 [ 141.762058][ C0] do_syscall_64+0x35/0xb0 [ 141.766400][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 141.772215][ C0] RIP: 0033:0x7f9382e18389 [ 141.776586][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 141.796023][ C0] RSP: 002b:00007f938298b168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.804269][ C0] RAX: ffffffffffffffda RBX: 00007f9382f37f80 RCX: 00007f9382e18389 [ 141.812077][ C0] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 141.820157][ C0] RBP: 00007f9382e63493 R08: 0000000000000000 R09: 0000000000000000 [ 141.828058][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.836035][ C0] R13: 00007ffcb738fe3f R14: 00007f938298b300 R15: 0000000000022000 [ 141.843946][ C0] [ 286.530321][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [syz-executor.0:435] [ 286.538738][ C0] Modules linked in: [ 286.542461][ C0] CPU: 0 PID: 435 Comm: syz-executor.0 Not tainted 5.15.118-syzkaller #0 [ 286.551760][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 286.561831][ C0] RIP: 0010:kvm_wait+0x3e/0x40 [ 286.566420][ C0] Code: 0b fa 0f b6 07 40 38 f0 74 15 fb c3 0f b6 07 40 38 c6 75 f7 66 90 0f 00 2d 7d 04 35 01 f4 c3 66 90 0f 00 2d 72 04 35 01 fb f4 90 8b 05 aa 39 f7 01 83 f8 ff 74 06 85 c0 0f 95 c0 c3 55 48 89 [ 286.586599][ C0] RSP: 0018:ffffc9000038b7b8 EFLAGS: 00000246 [ 286.592923][ C0] RAX: 0000000000000003 RBX: ffff888237c2b6c0 RCX: 0000000000000008 [ 286.601367][ C0] RDX: 0000000000000000 RSI: 0000000000000003 RDI: ffff8881081d94ac [ 286.609538][ C0] RBP: ffffc9000038b7f8 R08: ffff88823fff1d00 R09: 0000000000000000 [ 286.617448][ C0] R10: 0000000000000001 R11: ffff888237c2b6c0 R12: ffff8881081d94ac [ 286.625259][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000100 [ 286.633355][ C0] FS: 00007f938298b700(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 286.642182][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.648729][ C0] CR2: 0000000020000080 CR3: 0000000101992000 CR4: 00000000003506b0 [ 286.656701][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.664520][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.672326][ C0] Call Trace: [ 286.675446][ C0] [ 286.678570][ C0] ? show_regs.part.0+0x1e/0x20 [ 286.683254][ C0] ? show_regs.cold+0x8/0xd [ 286.687856][ C0] ? watchdog_timer_fn+0x21b/0x280 [ 286.692932][ C0] ? softlockup_fn+0x70/0x70 [ 286.697316][ C0] ? __hrtimer_run_queues+0x117/0x290 [ 286.702734][ C0] ? hrtimer_interrupt+0xfe/0x210 [ 286.707573][ C0] ? __sysvec_apic_timer_interrupt+0x73/0x160 [ 286.713587][ C0] ? sysvec_apic_timer_interrupt+0xa7/0xd0 [ 286.719403][ C0] [ 286.722274][ C0] [ 286.725057][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 286.731045][ C0] ? kvm_wait+0x3e/0x40 [ 286.735038][ C0] ? __pv_queued_spin_lock_slowpath+0x29f/0x2e0 [ 286.741130][ C0] _raw_spin_lock_bh+0x39/0x40 [ 286.745999][ C0] get_dist_table+0x92/0xd0 [ 286.750291][ C0] netem_change+0xf8/0x610 [ 286.754642][ C0] netem_init+0x41/0x60 [ 286.758717][ C0] qdisc_create+0x13f/0x590 [ 286.763139][ C0] ? security_capable+0x33/0x50 [ 286.767925][ C0] tc_modify_qdisc+0x13c/0x9c0 [ 286.772622][ C0] rtnetlink_rcv_msg+0x13e/0x380 [ 286.777468][ C0] ? rtnl_calcit.isra.0+0x130/0x130 [ 286.782604][ C0] netlink_rcv_skb+0x4e/0xf0 [ 286.787010][ C0] rtnetlink_rcv+0x10/0x20 [ 286.791259][ C0] netlink_unicast+0x252/0x350 [ 286.795867][ C0] netlink_sendmsg+0x241/0x490 [ 286.800457][ C0] sock_sendmsg+0x35/0x40 [ 286.804630][ C0] ____sys_sendmsg+0x23e/0x260 [ 286.809223][ C0] ? import_iovec+0x31/0x40 [ 286.813841][ C0] ? sendmsg_copy_msghdr+0x79/0xa0 [ 286.818863][ C0] ___sys_sendmsg+0x74/0xc0 [ 286.823204][ C0] ? do_futex+0x103/0xaf0 [ 286.828407][ C0] ? _copy_to_user+0x4a/0x60 [ 286.832830][ C0] ? put_user_ifreq+0x62/0x80 [ 286.837352][ C0] ? sock_do_ioctl+0xaa/0xd0 [ 286.841777][ C0] ? __fget_light.part.0+0x87/0xd0 [ 286.846715][ C0] __sys_sendmsg+0x5d/0xb0 [ 286.850988][ C0] __x64_sys_sendmsg+0x1a/0x20 [ 286.855572][ C0] do_syscall_64+0x35/0xb0 [ 286.859833][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 286.865548][ C0] RIP: 0033:0x7f9382e18389 [ 286.869891][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 286.889752][ C0] RSP: 002b:00007f938298b168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.898417][ C0] RAX: ffffffffffffffda RBX: 00007f9382f37f80 RCX: 00007f9382e18389 [ 286.906397][ C0] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 286.914661][ C0] RBP: 00007f9382e63493 R08: 0000000000000000 R09: 0000000000000000 [ 286.922472][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.930268][ C0] R13: 00007ffcb738fe3f R14: 00007f938298b300 R15: 0000000000022000 [ 286.938253][ C0] [ 286.941115][ C0] Sending NMI from CPU 0 to CPUs 1: [ 286.947024][ C1] NMI backtrace for cpu 1 [ 286.947027][ C1] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted 5.15.118-syzkaller #0 [ 286.947030][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 286.947033][ C1] Workqueue: events_unbound toggle_allocation_gate [ 286.947040][ C1] RIP: 0010:smp_call_function_many_cond+0xcc/0x260 [ 286.947045][ C1] Code: 48 89 de e8 a6 34 47 00 3b 05 54 b0 03 02 89 c7 73 21 48 63 c7 49 8b 14 24 48 03 14 c5 80 18 d7 82 8b 42 08 a8 01 74 09 f3 90 <8b> 42 08 a8 01 75 f7 eb cd 48 83 c4 48 5b 41 5c 41 5d 41 5e 41 5f [ 286.947048][ C1] RSP: 0018:ffffc9000005fc68 EFLAGS: 00000202 [ 286.947050][ C1] RAX: 0000000000000011 RBX: ffff888237d2bb08 RCX: 0000000000000000 [ 286.947052][ C1] RDX: ffff888237c30360 RSI: ffff888237d2bb08 RDI: 0000000000000000 [ 286.947053][ C1] RBP: ffffc9000005fcd8 R08: 0000000000000000 R09: 8000000000000063 [ 286.947055][ C1] R10: 0000000000000000 R11: 0000000000000002 R12: ffff888237d2bb00 [ 286.947056][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 286.947057][ C1] FS: 0000000000000000(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 286.947059][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.947064][ C1] CR2: 00007fa74bbdb7c0 CR3: 000000000300b000 CR4: 00000000003506a0 [ 286.947066][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.947067][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.947068][ C1] Call Trace: [ 286.947070][ C1] [ 286.947072][ C1] ? show_regs.part.0+0x1e/0x20 [ 286.947077][ C1] ? show_regs.cold+0x8/0xd [ 286.947080][ C1] ? nmi_cpu_backtrace.cold+0x1c/0x74 [ 286.947085][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 286.947089][ C1] ? nmi_handle+0x53/0x120 [ 286.947093][ C1] ? smp_call_function_many_cond+0xcc/0x260 [ 286.947096][ C1] ? default_do_nmi+0x71/0x2d0 [ 286.947100][ C1] ? exc_nmi+0x109/0x130 [ 286.947104][ C1] ? end_repeat_nmi+0x16/0x31 [ 286.947108][ C1] ? smp_call_function_many_cond+0xcc/0x260 [ 286.947110][ C1] ? smp_call_function_many_cond+0xcc/0x260 [ 286.947112][ C1] ? smp_call_function_many_cond+0xcc/0x260 [ 286.947115][ C1] [ 286.947115][ C1] [ 286.947116][ C1] ? optimize_nops+0x1d0/0x1d0 [ 286.947120][ C1] ? optimize_nops+0x1d0/0x1d0 [ 286.947123][ C1] on_each_cpu_cond_mask+0x44/0x80 [ 286.947126][ C1] text_poke_bp_batch+0xa0/0x1f0 [ 286.947130][ C1] text_poke_finish+0x1a/0x30 [ 286.947133][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 286.947136][ C1] __jump_label_update+0xe4/0xf0 [ 286.947142][ C1] jump_label_update+0xd7/0x100 [ 286.947145][ C1] static_key_disable_cpuslocked+0x54/0x60 [ 286.947148][ C1] static_key_disable+0x16/0x30 [ 286.947151][ C1] toggle_allocation_gate+0x93/0x190 [ 286.947154][ C1] ? do_wait_intr_irq+0xa0/0xa0 [ 286.947160][ C1] process_one_work+0x199/0x340 [ 286.947165][ C1] worker_thread+0x4e/0x340 [ 286.947168][ C1] kthread+0x13a/0x160 [ 286.947171][ C1] ? rescuer_thread+0x370/0x370 [ 286.947174][ C1] ? set_kthread_struct+0x50/0x50 [ 286.947177][ C1] ret_from_fork+0x1f/0x30 [ 286.947182][ C1]