Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. 2024/06/18 22:22:24 ignoring optional flag "sandboxArg"="0" 2024/06/18 22:22:25 parsed 1 programs [ 40.559447][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 40.559460][ T24] audit: type=1400 audit(1718749345.090:94): avc: denied { mount } for pid=337 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2024/06/18 22:22:25 executed programs: 0 [ 40.591544][ T24] audit: type=1400 audit(1718749345.120:95): avc: denied { unlink } for pid=337 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 40.638000][ T337] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 40.689925][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.697225][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.705127][ T343] device bridge_slave_0 entered promiscuous mode [ 40.713621][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.721170][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.729029][ T343] device bridge_slave_1 entered promiscuous mode [ 40.768334][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.775209][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.782298][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.789359][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.808273][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.815534][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.823405][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.831199][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.844339][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.853689][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.861061][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.868830][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.877648][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.884693][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.901566][ T343] device veth0_vlan entered promiscuous mode [ 40.908791][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.917811][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.925779][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.933322][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.941935][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.950176][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.962381][ T343] device veth1_macvtap entered promiscuous mode [ 40.969896][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.980594][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.991872][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.005159][ T24] audit: type=1400 audit(1718749345.540:96): avc: denied { mounton } for pid=343 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 41.032931][ T24] audit: type=1400 audit(1718749345.560:97): avc: denied { create } for pid=349 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.053088][ T24] audit: type=1400 audit(1718749345.560:98): avc: denied { setopt } for pid=349 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.073671][ T24] audit: type=1400 audit(1718749345.560:99): avc: denied { write } for pid=349 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.824236][ T24] audit: type=1400 audit(1718749346.350:100): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 2024/06/18 22:22:30 executed programs: 623 2024/06/18 22:22:35 executed programs: 1334 2024/06/18 22:22:40 executed programs: 2021 2024/06/18 22:22:45 executed programs: 2727 2024/06/18 22:22:50 executed programs: 3443 2024/06/18 22:22:55 executed programs: 4144 2024/06/18 22:23:00 executed programs: 4838 2024/06/18 22:23:05 executed programs: 5538 [ 183.223771][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 183.230674][ C1] rcu: 1-...!: (10000 ticks this GP) idle=45a/1/0x4000000000000000 softirq=33631/33631 fqs=0 last_accelerate: aafc/d20d dyntick_enabled: 1 [ 183.245128][ C1] (t=10000 jiffies g=21685 q=425) [ 183.250017][ C1] rcu: rcu_preempt kthread starved for 10000 jiffies! g21685 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 183.261301][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 183.271144][ C1] rcu: RCU grace-period kthread stack dump: [ 183.277006][ C1] task:rcu_preempt state:I stack: 0 pid: 13 ppid: 2 flags:0x00004000 [ 183.286417][ C1] Call Trace: [ 183.289672][ C1] __schedule+0xbe6/0x1330 [ 183.294063][ C1] ? release_firmware_map_entry+0x192/0x192 [ 183.299794][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 183.305076][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 183.309969][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 183.314907][ C1] schedule+0x13d/0x1d0 [ 183.319028][ C1] schedule_timeout+0x18c/0x360 [ 183.323751][ C1] ? prepare_to_swait_event+0x39f/0x3e0 [ 183.329262][ C1] ? console_conditional_schedule+0x10/0x10 [ 183.335209][ C1] ? run_local_timers+0x160/0x160 [ 183.340053][ C1] ? __note_gp_changes+0x2d8/0x6f0 [ 183.344992][ C1] rcu_gp_kthread+0xefc/0x23a0 [ 183.349701][ C1] ? dump_blkd_tasks+0x7e0/0x7e0 [ 183.354584][ C1] ? rcu_barrier_callback+0x50/0x50 [ 183.359958][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 183.364736][ C1] ? __kasan_check_read+0x11/0x20 [ 183.369674][ C1] ? __kthread_parkme+0xb9/0x1c0 [ 183.374458][ C1] kthread+0x34b/0x3d0 [ 183.378350][ C1] ? rcu_barrier_callback+0x50/0x50 [ 183.383386][ C1] ? kthread_blkcg+0xd0/0xd0 [ 183.387810][ C1] ret_from_fork+0x1f/0x30 [ 183.392171][ C1] NMI backtrace for cpu 1 [ 183.396325][ C1] CPU: 1 PID: 18047 Comm: syz-executor.0 Not tainted 5.10.215-syzkaller-1002366-gb58b8f9dad93 #0 [ 183.407378][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 183.417347][ C1] Call Trace: [ 183.420465][ C1] [ 183.423199][ C1] dump_stack_lvl+0x1e2/0x24b [ 183.427974][ C1] ? panic+0x812/0x812 [ 183.431889][ C1] ? bfq_pos_tree_add_move+0x43b/0x43b [ 183.437172][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 183.442705][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 183.447458][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 183.453621][ C1] dump_stack+0x15/0x17 [ 183.457697][ C1] nmi_trigger_cpumask_backtrace+0x2b5/0x300 [ 183.463517][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 183.469742][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 183.475873][ C1] rcu_dump_cpu_stacks+0x199/0x2b0 [ 183.481116][ C1] rcu_sched_clock_irq+0xf8a/0x1890 [ 183.486311][ C1] ? rcutree_dead_cpu+0x340/0x340 [ 183.491368][ C1] ? hrtimer_run_queues+0x15f/0x440 [ 183.496368][ C1] update_process_times+0x198/0x200 [ 183.501575][ C1] tick_sched_timer+0x188/0x240 [ 183.506448][ C1] ? tick_setup_sched_timer+0x480/0x480 [ 183.511950][ C1] __hrtimer_run_queues+0x3d7/0xa50 [ 183.517091][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 183.522027][ C1] ? clockevents_program_event+0x214/0x2c0 [ 183.527949][ C1] ? ktime_get_update_offsets_now+0x266/0x280 [ 183.534543][ C1] hrtimer_interrupt+0x39a/0x8b0 [ 183.539294][ C1] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 183.545106][ C1] asm_call_irq_on_stack+0xf/0x20 [ 183.549953][ C1] [ 183.552737][ C1] sysvec_apic_timer_interrupt+0x85/0xe0 [ 183.558205][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 183.564122][ C1] RIP: 0010:tipc_sk_rcv+0x484/0x1e30 [ 183.569335][ C1] Code: 5b d2 fc eb 1d e8 9c 5b d2 fc eb 0c e8 95 5b d2 fc eb 0f e8 8e 5b d2 fc 49 bc 00 00 00 00 00 fc ff df 48 8b bc 24 80 00 00 00 b7 4a 19 00 48 8b bc 24 d8 00 00 00 44 89 f6 e8 97 19 00 00 48 [ 183.588942][ C1] RSP: 0018:ffffc900031a6900 EFLAGS: 00000293 [ 183.594842][ C1] RAX: ffffffff849851cb RBX: ffff88812091e8c4 RCX: ffff888112be8000 [ 183.602739][ C1] RDX: 0000000000000000 RSI: 00000000ba55b22f RDI: ffffc900031a6d94 [ 183.610564][ C1] RBP: ffffc900031a6b90 R08: ffffffff84985065 R09: 0000000000000003 [ 183.618441][ C1] R10: fffff52000634d10 R11: dffffc0000000001 R12: dffffc0000000000 [ 183.626403][ C1] R13: ffffc900031a6d80 R14: 00000000ba55b22f R15: ffffc900031a6d80 [ 183.634201][ C1] ? tipc_sk_rcv+0x305/0x1e30 [ 183.638770][ C1] ? tipc_sk_rcv+0x46b/0x1e30 [ 183.643423][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 183.649516][ C1] ? __stack_depot_save+0x468/0x4d0 [ 183.655202][ C1] ? kmem_cache_free+0xa9/0x1e0 [ 183.660100][ C1] ? kasan_set_free_info+0x23/0x40 [ 183.665659][ C1] ? ____kasan_slab_free+0x121/0x160 [ 183.671208][ C1] ? __kasan_slab_free+0x11/0x20 [ 183.676177][ C1] ? slab_free_freelist_hook+0xc0/0x190 [ 183.681681][ C1] ? kfree_skbmem+0x104/0x170 [ 183.686264][ C1] ? kfree_skb+0xc1/0x320 [ 183.690632][ C1] ? tipc_sk_rcv+0x8a1/0x1e30 [ 183.695136][ C1] ? tipc_node_xmit+0x34b/0xe30 [ 183.699916][ C1] ? __skb_queue_purge+0x180/0x180 [ 183.705169][ C1] tipc_node_xmit+0x34b/0xe30 [ 183.709663][ C1] ? ____kasan_slab_free+0x12c/0x160 [ 183.714966][ C1] ? tipc_node_get_linkname+0x190/0x190 [ 183.720849][ C1] ? __kasan_slab_free+0x11/0x20 [ 183.725862][ C1] ? slab_free_freelist_hook+0xc0/0x190 [ 183.731542][ C1] tipc_node_distr_xmit+0x36a/0x4d0 [ 183.736720][ C1] ? tipc_node_xmit_skb+0x1b0/0x1b0 [ 183.741749][ C1] ? trace_tipc_sk_rej_msg+0x2b/0x6f0 [ 183.746950][ C1] tipc_sk_rcv+0x177d/0x1e30 [ 183.751462][ C1] ? __skb_queue_purge+0x180/0x180 [ 183.756406][ C1] tipc_node_xmit+0x34b/0xe30 [ 183.761052][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 183.765896][ C1] ? __kernel_text_address+0x9b/0x110 [ 183.771106][ C1] ? tipc_node_get_linkname+0x190/0x190 [ 183.776709][ C1] ? __kasan_check_write+0x14/0x20 [ 183.781790][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 183.787143][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 183.792006][ C1] tipc_sk_filter_rcv+0x1da8/0x3e00 [ 183.797129][ C1] ? tipc_sk_dump+0xf50/0xf50 [ 183.801667][ C1] ? __kasan_check_write+0x14/0x20 [ 183.806676][ C1] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 183.811741][ C1] ? kmem_cache_free+0xa9/0x1e0 [ 183.816516][ C1] tipc_sk_rcv+0x8a1/0x1e30 [ 183.821106][ C1] ? __skb_queue_purge+0x180/0x180 [ 183.826291][ C1] ? tipc_sk_filter_rcv+0x3583/0x3e00 [ 183.832125][ C1] tipc_node_xmit+0x34b/0xe30 [ 183.836997][ C1] ? tipc_node_get_linkname+0x190/0x190 [ 183.842378][ C1] tipc_node_distr_xmit+0x36a/0x4d0 [ 183.847503][ C1] ? tipc_node_xmit_skb+0x1b0/0x1b0 [ 183.852537][ C1] ? futex_wake+0x630/0x790 [ 183.856913][ C1] tipc_sk_backlog_rcv+0x18b/0x210 [ 183.862070][ C1] ? tipc_sk_timeout+0xab0/0xab0 [ 183.867037][ C1] ? cap_capable+0x40/0x270 [ 183.871664][ C1] __release_sock+0x148/0x410 [ 183.876447][ C1] sock_setsockopt+0x1e3b/0x2e00 [ 183.881205][ C1] ? __sock_set_mark+0x160/0x160 [ 183.886091][ C1] ? selinux_socket_getsockopt+0x340/0x340 [ 183.891853][ C1] ? security_socket_setsockopt+0x82/0xb0 [ 183.897384][ C1] __sys_setsockopt+0x441/0x870 [ 183.902095][ C1] ? __ia32_sys_recv+0xb0/0xb0 [ 183.906772][ C1] ? __kasan_check_write+0x14/0x20 [ 183.911916][ C1] ? switch_fpu_return+0x1e4/0x3c0 [ 183.916856][ C1] ? fpu__clear_all+0x20/0x20 [ 183.921339][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 183.926202][ C1] do_syscall_64+0x34/0x70 [ 183.930453][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 183.936203][ C1] RIP: 0033:0x7f98326acda9 [ 183.940452][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 183.960442][ C1] RSP: 002b:00007f983222e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 183.968808][ C1] RAX: ffffffffffffffda RBX: 00007f98327daf80 RCX: 00007f98326acda9 [ 183.976994][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 183.984813][ C1] RBP: 00007f98326f947a R08: 0000000000000004 R09: 0000000000000000 [ 183.992843][ C1] R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000000 [ 184.000758][ C1] R13: 000000000000000b R14: 00007f98327daf80 R15: 00007ffd58a06e18 [ 221.024616][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 123s! [syz-executor.0:18046] [ 221.033537][ C0] Modules linked in: [ 221.037268][ C0] CPU: 0 PID: 18046 Comm: syz-executor.0 Not tainted 5.10.215-syzkaller-1002366-gb58b8f9dad93 #0 [ 221.047584][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 221.057494][ C0] RIP: 0010:__pv_queued_spin_lock_slowpath+0x5a1/0xc70 [ 221.064165][ C0] Code: 85 ba 01 00 00 c6 03 00 48 8b 44 24 28 42 0f b6 04 30 84 c0 0f 85 bf 01 00 00 48 8b 04 24 c6 00 01 bb 00 80 ff ff eb 06 f3 90 c3 74 50 43 0f b6 44 35 00 84 c0 75 32 41 80 3c 24 00 75 e9 4c [ 221.084337][ C0] RSP: 0018:ffffc9000318faa0 EFLAGS: 00000206 [ 221.090368][ C0] RAX: 0000000000000000 RBX: 00000000ffffb8f1 RCX: ffffffff8150b884 [ 221.098185][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffffc9000318fa20 [ 221.106344][ C0] RBP: ffffc9000318fb90 R08: dffffc0000000000 R09: ffffed102171ad12 [ 221.114429][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88810b8d6888 [ 221.122406][ C0] R13: 1ffff1102171ad11 R14: dffffc0000000000 R15: ffff88823fe12400 [ 221.130498][ C0] FS: 0000555555b19480(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 221.140200][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 221.146828][ C0] CR2: 000000c0011a9014 CR3: 000000011fce1000 CR4: 00000000003506b0 [ 221.155585][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 221.163777][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 221.171619][ C0] Call Trace: [ 221.174783][ C0] [ 221.177445][ C0] ? show_regs+0x58/0x60 [ 221.181604][ C0] ? watchdog_timer_fn+0x471/0x590 [ 221.186565][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 221.192018][ C0] ? __hrtimer_run_queues+0x3d7/0xa50 [ 221.197227][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 221.202262][ C0] ? clockevents_program_event+0x214/0x2c0 [ 221.207905][ C0] ? ktime_get_update_offsets_now+0x266/0x280 [ 221.213991][ C0] ? hrtimer_interrupt+0x39a/0x8b0 [ 221.219111][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 221.225263][ C0] ? asm_call_irq_on_stack+0xf/0x20 [ 221.230686][ C0] [ 221.233548][ C0] ? sysvec_apic_timer_interrupt+0x85/0xe0 [ 221.239209][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 221.245268][ C0] ? __pv_queued_spin_lock_slowpath+0x6d4/0xc70 [ 221.251559][ C0] ? __pv_queued_spin_lock_slowpath+0x5a1/0xc70 [ 221.257619][ C0] ? __pv_queued_spin_unlock_slowpath+0x280/0x280 [ 221.263955][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 221.268996][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 221.274008][ C0] ? __kasan_record_aux_stack+0xd3/0x100 [ 221.279479][ C0] ? memset+0x35/0x40 [ 221.283289][ C0] lock_sock_nested+0x92/0x300 [ 221.287898][ C0] ? locks_remove_posix+0x610/0x610 [ 221.293191][ C0] ? sock_init_data+0xc0/0xc0 [ 221.298169][ C0] tipc_release+0x57/0x1440 [ 221.302521][ C0] sock_close+0xdf/0x270 [ 221.306668][ C0] ? sock_mmap+0xa0/0xa0 [ 221.310748][ C0] __fput+0x309/0x760 [ 221.314729][ C0] ____fput+0x15/0x20 [ 221.318768][ C0] task_work_run+0x129/0x190 [ 221.323535][ C0] exit_to_user_mode_loop+0xbf/0xd0 [ 221.328569][ C0] syscall_exit_to_user_mode+0xa2/0x1a0 [ 221.333957][ C0] do_syscall_64+0x40/0x70 [ 221.338735][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 221.344563][ C0] RIP: 0033:0x7f98326abc9a [ 221.349087][ C0] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 221.368856][ C0] RSP: 002b:00007ffd58a06ee0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 221.377184][ C0] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00007f98326abc9a [ 221.385082][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 221.392896][ C0] RBP: 00007f98327dc980 R08: 0000001b31260000 R09: 00007ffd58bf10b0 [ 221.400780][ C0] R10: 0000000000002e96 R11: 0000000000000293 R12: 0000000000014840 [ 221.408890][ C0] R13: ffffffffffffffff R14: 00007f983222f000 R15: 00000000000144ff [ 221.416687][ C0] Sending NMI from CPU 0 to CPUs 1: [ 221.422670][ C1] NMI backtrace for cpu 1 [ 221.422683][ C1] CPU: 1 PID: 18047 Comm: syz-executor.0 Not tainted 5.10.215-syzkaller-1002366-gb58b8f9dad93 #0 [ 221.422689][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 221.422693][ C1] RIP: 0010:preempt_count_sub+0x32/0x160 [ 221.422705][ C1] Code: fb 48 c7 c0 00 79 a8 86 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df 42 0f b6 04 30 84 c0 0f 85 c1 00 00 00 83 3d 2e 64 5f 05 00 <75> 22 65 8b 05 b1 58 b9 7e 89 c1 81 e1 ff ff ff 7f 39 d9 7c 24 81 [ 221.422709][ C1] RSP: 0018:ffffc900031a68b8 EFLAGS: 00000246 [ 221.422719][ C1] RAX: 0000000000000004 RBX: 0000000000000001 RCX: ffffffff86a87903 [ 221.422724][ C1] RDX: 0000000000000000 RSI: 0000000000000201 RDI: 0000000000000001 [ 221.422729][ C1] RBP: ffffc900031a68c8 R08: ffffffff84985065 R09: 0000000000000003 [ 221.422735][ C1] R10: fffff52000634d10 R11: dffffc0000000001 R12: dffffc0000000000 [ 221.422740][ C1] R13: ffffc900031a6d80 R14: dffffc0000000000 R15: ffffc900031a6d80 [ 221.422745][ C1] FS: 00007f983222e6c0(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 [ 221.422750][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 221.422755][ C1] CR2: 00007f983220dd58 CR3: 000000011fce1000 CR4: 00000000003506a0 [ 221.422760][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 221.422765][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 221.422768][ C1] Call Trace: [ 221.422770][ C1] [ 221.422773][ C1] ? show_regs+0x58/0x60 [ 221.422777][ C1] ? nmi_cpu_backtrace+0x133/0x160 [ 221.422781][ C1] ? preempt_count_sub+0x32/0x160 [ 221.422784][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 221.422788][ C1] ? nmi_handle+0xa8/0x280 [ 221.422791][ C1] ? preempt_count_sub+0x32/0x160 [ 221.422795][ C1] ? default_do_nmi+0x69/0x160 [ 221.422798][ C1] ? exc_nmi+0xad/0x100 [ 221.422801][ C1] ? end_repeat_nmi+0x16/0x31 [ 221.422804][ C1] ? tipc_sk_rcv+0x305/0x1e30 [ 221.422808][ C1] ? preempt_count_sub+0x32/0x160 [ 221.422811][ C1] ? preempt_count_sub+0x32/0x160 [ 221.422814][ C1] ? preempt_count_sub+0x32/0x160 [ 221.422816][ C1] [ 221.422819][ C1] __local_bh_enable_ip+0x53/0x80 [ 221.422822][ C1] _raw_spin_unlock_bh+0x51/0x60 [ 221.422825][ C1] tipc_sk_rcv+0x489/0x1e30 [ 221.422828][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 221.422831][ C1] ? __stack_depot_save+0x468/0x4d0 [ 221.422834][ C1] ? kmem_cache_free+0xa9/0x1e0 [ 221.422837][ C1] ? kasan_set_free_info+0x23/0x40 [ 221.422840][ C1] ? ____kasan_slab_free+0x121/0x160 [ 221.422843][ C1] ? __kasan_slab_free+0x11/0x20 [ 221.422846][ C1] ? slab_free_freelist_hook+0xc0/0x190 [ 221.422849][ C1] ? kfree_skbmem+0x104/0x170 [ 221.422851][ C1] ? kfree_skb+0xc1/0x320 [ 221.422860][ C1] ? tipc_sk_rcv+0x8a1/0x1e30 [ 221.422863][ C1] ? tipc_node_xmit+0x34b/0xe30 [ 221.422866][ C1] ? __skb_queue_purge+0x180/0x180 [ 221.422868][ C1] tipc_node_xmit+0x34b/0xe30 [ 221.422871][ C1] ? ____kasan_slab_free+0x12c/0x160 [ 221.422875][ C1] ? tipc_node_get_linkname+0x190/0x190 [ 221.422878][ C1] ? __kasan_slab_free+0x11/0x20 [ 221.422881][ C1] ? slab_free_freelist_hook+0xc0/0x190 [ 221.422884][ C1] tipc_node_distr_xmit+0x36a/0x4d0 [ 221.422887][ C1] ? tipc_node_xmit_skb+0x1b0/0x1b0 [ 221.422890][ C1] ? trace_tipc_sk_rej_msg+0x2b/0x6f0 [ 221.422893][ C1] tipc_sk_rcv+0x177d/0x1e30 [ 221.422896][ C1] ? __skb_queue_purge+0x180/0x180 [ 221.422898][ C1] tipc_node_xmit+0x34b/0xe30 [ 221.422901][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 221.422905][ C1] ? __kernel_text_address+0x9b/0x110 [ 221.422908][ C1] ? tipc_node_get_linkname+0x190/0x190 [ 221.422911][ C1] ? __kasan_check_write+0x14/0x20 [ 221.422914][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 221.422917][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 221.422920][ C1] tipc_sk_filter_rcv+0x1da8/0x3e00 [ 221.422922][ C1] ? tipc_sk_dump+0xf50/0xf50 [ 221.422925][ C1] ? __kasan_check_write+0x14/0x20 [ 221.422928][ C1] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 221.422931][ C1] ? kmem_cache_free+0xa9/0x1e0 [ 221.422934][ C1] tipc_sk_rcv+0x8a1/0x1e30 [ 221.422937][ C1] ? __skb_queue_purge+0x180/0x180 [ 221.422940][ C1] ? tipc_sk_filter_rcv+0x3583/0x3e00 [ 221.422943][ C1] tipc_node_xmit+0x34b/0xe30 [ 221.422946][ C1] ? tipc_node_get_linkname+0x190/0x190 [ 221.422949][ C1] tipc_node_distr_xmit+0x36a/0x4d0 [ 221.422952][ C1] ? tipc_node_xmit_skb+0x1b0/0x1b0 [ 221.422954][ C1] ? futex_wake+0x630/0x790 [ 221.422957][ C1] tipc_sk_backlog_rcv+0x18b/0x210 [ 221.422960][ C1] ? tipc_sk_timeout+0xab0/0xab0 [ 221.422963][ C1] ? cap_capable+0x40/0x270 [ 221.422966][ C1] __release_sock+0x148/0x410 [ 221.422969][ C1] sock_setsockopt+0x1e3b/0x2e00 [ 221.422972][ C1] ? __sock_set_mark+0x160/0x160 [ 221.422975][ C1] ? selinux_socket_getsockopt+0x340/0x340 [ 221.422978][ C1] ? security_socket_setsockopt+0x82/0xb0 [ 221.422981][ C1] __sys_setsockopt+0x441/0x870 [ 221.422984][ C1] ? __ia32_sys_recv+0xb0/0xb0 [ 221.422987][ C1] ? __kasan_check_write+0x14/0x20 [ 221.422990][ C1] ? switch_fpu_return+0x1e4/0x3c0 [ 221.422992][ C1] ? fpu__clear_all+0x20/0x20 [ 221.422995][ C1] __x64_sys_setsockopt+0xbf/0xd0 [ 221.422998][ C1] do_syscall_64+0x34/0x70 [ 221.423001][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 221.423004][ C1] RIP: 0033:0x7f98326acda9 [ 221.423013][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 221.423017][ C1] RSP: 002b:00007f983222e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 221.423024][ C1] RAX: ffffffffffffffda RBX: 00007f98327daf80 RCX: 00007f98326acda9 [ 221.423029][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 221.423033][ C1] RBP: 00007f98326f947a R08: 0000000000000004 R09: 0000000000000000 [ 221.423037][ C1] R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000000 [ 221.423041][ C1] R13: 000000000000000b R14: 00007f98327daf80 R15: 00007ffd58a06e18