Warning: Permanently added '10.128.0.228' (ED25519) to the list of known hosts.
2024/11/21 03:15:54 ignoring optional flag "sandboxArg"="0"
2024/11/21 03:15:54 ignoring optional flag "type"="gce"
2024/11/21 03:15:54 parsed 1 programs
[ 54.059770][ T24] kauditd_printk_skb: 18 callbacks suppressed
[ 54.059784][ T24] audit: type=1400 audit(1732158954.290:94): avc: denied { mount } for pid=350 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 54.089362][ T24] audit: type=1400 audit(1732158954.320:95): avc: denied { unlink } for pid=350 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
2024/11/21 03:15:54 executed programs: 0
[ 54.163094][ T350] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 54.215113][ T356] bridge0: port 1(bridge_slave_0) entered blocking state
[ 54.222176][ T356] bridge0: port 1(bridge_slave_0) entered disabled state
[ 54.229593][ T356] device bridge_slave_0 entered promiscuous mode
[ 54.236489][ T356] bridge0: port 2(bridge_slave_1) entered blocking state
[ 54.243319][ T356] bridge0: port 2(bridge_slave_1) entered disabled state
[ 54.251081][ T356] device bridge_slave_1 entered promiscuous mode
[ 54.287162][ T356] bridge0: port 2(bridge_slave_1) entered blocking state
[ 54.294015][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 54.301215][ T356] bridge0: port 1(bridge_slave_0) entered blocking state
[ 54.308267][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 54.325063][ T7] bridge0: port 1(bridge_slave_0) entered disabled state
[ 54.332454][ T7] bridge0: port 2(bridge_slave_1) entered disabled state
[ 54.340070][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 54.347805][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 54.356874][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 54.364936][ T7] bridge0: port 1(bridge_slave_0) entered blocking state
[ 54.371800][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 54.380044][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 54.388420][ T7] bridge0: port 2(bridge_slave_1) entered blocking state
[ 54.395387][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 54.406707][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 54.415552][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 54.428386][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 54.439712][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 54.447900][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 54.455778][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 54.464215][ T356] device veth0_vlan entered promiscuous mode
[ 54.474417][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 54.483635][ T356] device veth1_macvtap entered promiscuous mode
[ 54.492919][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 54.502870][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 54.517079][ T24] audit: type=1400 audit(1732158954.750:96): avc: denied { mounton } for pid=356 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 54.544335][ T24] audit: type=1400 audit(1732158954.770:97): avc: denied { create } for pid=362 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 54.565143][ T24] audit: type=1400 audit(1732158954.770:98): avc: denied { setopt } for pid=362 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 54.586027][ T24] audit: type=1400 audit(1732158954.770:99): avc: denied { write } for pid=362 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 55.246848][ T24] audit: type=1400 audit(1732158955.470:100): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
2024/11/21 03:15:59 executed programs: 636
2024/11/21 03:16:04 executed programs: 1324
2024/11/21 03:16:09 executed programs: 2026
2024/11/21 03:16:14 executed programs: 2726
2024/11/21 03:16:19 executed programs: 3420
2024/11/21 03:16:24 executed programs: 4122
2024/11/21 03:16:29 executed programs: 4817
2024/11/21 03:16:34 executed programs: 5508
2024/11/21 03:16:39 executed programs: 6204
2024/11/21 03:16:44 executed programs: 6905
2024/11/21 03:16:49 executed programs: 7601
2024/11/21 03:16:54 executed programs: 8319
[ 214.525864][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[ 214.532494][ C1] rcu: 1-...!: (1 GPs behind) idle=8fa/1/0x4000000000000000 softirq=46689/46698 fqs=41 last_accelerate: b737/de4a dyntick_enabled: 1
[ 214.546293][ C1] (t=10003 jiffies g=31381 q=236)
[ 214.551228][ C1] rcu: rcu_preempt kthread starved for 9921 jiffies! g31381 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[ 214.563098][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 214.573171][ C1] rcu: RCU grace-period kthread stack dump:
[ 214.579010][ C1] task:rcu_preempt state:I stack: 0 pid: 13 ppid: 2 flags:0x00004000
[ 214.588544][ C1] Call Trace:
[ 214.591722][ C1] __schedule+0xbe6/0x1330
[ 214.595944][ C1] ? release_firmware_map_entry+0x18d/0x18d
[ 214.601870][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210
[ 214.607279][ C1] ? _raw_spin_lock+0x1b0/0x1b0
[ 214.612110][ C1] schedule+0x13d/0x1d0
[ 214.616073][ C1] schedule_timeout+0x18c/0x360
[ 214.620847][ C1] ? prepare_to_swait_event+0x39f/0x3e0
[ 214.626401][ C1] ? console_conditional_schedule+0x10/0x10
[ 214.632118][ C1] ? run_local_timers+0x160/0x160
[ 214.636994][ C1] rcu_gp_kthread+0xefc/0x23a0
[ 214.641782][ C1] ? dyntick_save_progress_counter+0x1c0/0x1c0
[ 214.648042][ C1] ? rcu_barrier_callback+0x50/0x50
[ 214.653180][ C1] ? _raw_spin_lock+0x1b0/0x1b0
[ 214.657941][ C1] ? __kasan_check_read+0x11/0x20
[ 214.662962][ C1] ? __kthread_parkme+0xb9/0x1c0
[ 214.667763][ C1] kthread+0x34b/0x3d0
[ 214.671756][ C1] ? rcu_barrier_callback+0x50/0x50
[ 214.676789][ C1] ? kthread_blkcg+0xd0/0xd0
[ 214.681211][ C1] ret_from_fork+0x1f/0x30
[ 214.685504][ C1] NMI backtrace for cpu 1
[ 214.689950][ C1] CPU: 1 PID: 25482 Comm: syz-executor.0 Not tainted 5.10.226-syzkaller-1003449-g6a01908517df #0
[ 214.700730][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 214.710729][ C1] Call Trace:
[ 214.713868][ C1]
[ 214.716750][ C1] dump_stack_lvl+0x1e2/0x24b
[ 214.721258][ C1] ? panic+0x812/0x812
[ 214.725235][ C1] ? bfq_pos_tree_add_move+0x43b/0x43b
[ 214.730527][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210
[ 214.735930][ C1] ? _raw_spin_lock+0x1b0/0x1b0
[ 214.740632][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20
[ 214.746595][ C1] dump_stack+0x15/0x17
[ 214.750691][ C1] nmi_trigger_cpumask_backtrace+0x2b5/0x300
[ 214.756494][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20
[ 214.762404][ C1] arch_trigger_cpumask_backtrace+0x10/0x20
[ 214.768760][ C1] rcu_dump_cpu_stacks+0x199/0x2b0
[ 214.773948][ C1] rcu_sched_clock_irq+0xf8a/0x1890
[ 214.779029][ C1] ? rcutree_dead_cpu+0x340/0x340
[ 214.784171][ C1] ? hrtimer_run_queues+0x15f/0x440
[ 214.789120][ C1] update_process_times+0x198/0x200
[ 214.794356][ C1] tick_sched_timer+0x188/0x240
[ 214.799029][ C1] ? tick_setup_sched_timer+0x480/0x480
[ 214.804507][ C1] __hrtimer_run_queues+0x3d7/0xa50
[ 214.809537][ C1] ? hrtimer_interrupt+0x8b0/0x8b0
[ 214.814557][ C1] ? clockevents_program_event+0x214/0x2c0
[ 214.820141][ C1] ? ktime_get_update_offsets_now+0x266/0x280
[ 214.826036][ C1] hrtimer_interrupt+0x39a/0x8b0
[ 214.831017][ C1] __sysvec_apic_timer_interrupt+0xfd/0x3c0
[ 214.836744][ C1] asm_call_irq_on_stack+0xf/0x20
[ 214.841759][ C1]
[ 214.844527][ C1] sysvec_apic_timer_interrupt+0x85/0xe0
[ 214.849999][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 214.856182][ C1] RIP: 0010:__rcu_read_unlock+0x2e/0x90
[ 214.861563][ C1] Code: 41 57 41 56 53 49 bf 00 00 00 00 00 fc ff df 65 4c 8b 35 45 b4 aa 7e 49 8d 9e 08 04 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 31 ff 0b 75 1c 49 8d 9e 0c 04 00 00 48 89 d8 48 c1 e8 03
[ 214.881107][ C1] RSP: 0018:ffffc9000333e7d8 EFLAGS: 00000a06
[ 214.886985][ C1] RAX: 0000000000000000 RBX: ffff888116a117c8 RCX: ffff888116a113c0
[ 214.894930][ C1] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 00000000ffffffff
[ 214.902686][ C1] RBP: ffffc9000333e7f0 R08: ffffffff8499a121 R09: ffffed10220343d1
[ 214.910608][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: fffffffffffffc18
[ 214.918392][ C1] R13: ffff8881101a1e00 R14: ffff888116a113c0 R15: dffffc0000000000
[ 214.926321][ C1] ? tipc_sk_lookup+0x511/0x650
[ 214.931318][ C1] tipc_sk_lookup+0x542/0x650
[ 214.935840][ C1] ? tipc_sk_rcv+0x1e30/0x1e30
[ 214.940676][ C1] ? tipc_sk_rcv+0x1795/0x1e30
[ 214.945413][ C1] tipc_sk_rcv+0x499/0x1e30
[ 214.949750][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80
[ 214.955411][ C1] ? __stack_depot_save+0x468/0x4d0
[ 214.960851][ C1] ? kmem_cache_free+0xa9/0x1e0
[ 214.965519][ C1] ? kasan_set_free_info+0x23/0x40
[ 214.970685][ C1] ? ____kasan_slab_free+0x121/0x160
[ 214.976162][ C1] ? __kasan_slab_free+0x11/0x20
[ 214.981041][ C1] ? slab_free_freelist_hook+0xc0/0x190
[ 214.986587][ C1] ? kfree_skbmem+0x104/0x170
[ 214.991186][ C1] ? kfree_skb+0xc1/0x320
[ 214.995354][ C1] ? tipc_sk_rcv+0x8a1/0x1e30
[ 214.999858][ C1] ? tipc_node_xmit+0x34b/0xe30
[ 215.004575][ C1] ? __skb_queue_purge+0x180/0x180
[ 215.009582][ C1] tipc_node_xmit+0x34b/0xe30
[ 215.014122][ C1] ? ____kasan_slab_free+0x12c/0x160
[ 215.019303][ C1] ? tipc_node_get_linkname+0x190/0x190
[ 215.024683][ C1] ? __kasan_slab_free+0x11/0x20
[ 215.029545][ C1] ? slab_free_freelist_hook+0xc0/0x190
[ 215.035489][ C1] tipc_node_distr_xmit+0x36a/0x4d0
[ 215.040593][ C1] ? tipc_node_xmit_skb+0x1b0/0x1b0
[ 215.045805][ C1] ? trace_tipc_sk_rej_msg+0x2b/0x6f0
[ 215.051106][ C1] tipc_sk_rcv+0x177d/0x1e30
[ 215.055589][ C1] ? __skb_queue_purge+0x180/0x180
[ 215.060520][ C1] tipc_node_xmit+0x34b/0xe30
[ 215.065361][ C1] ? stack_trace_save+0x1c0/0x1c0
[ 215.070390][ C1] ? __kernel_text_address+0x9b/0x110
[ 215.075676][ C1] ? tipc_node_get_linkname+0x190/0x190
[ 215.081079][ C1] ? arch_stack_walk+0xf3/0x140
[ 215.085886][ C1] tipc_sk_filter_rcv+0x1da8/0x3e00
[ 215.090904][ C1] ? tipc_sk_dump+0xf50/0xf50
[ 215.095417][ C1] ? __kasan_check_write+0x14/0x20
[ 215.100550][ C1] ? _raw_spin_lock_bh+0xa4/0x1b0
[ 215.105338][ C1] ? kmem_cache_free+0xa9/0x1e0
[ 215.110025][ C1] tipc_sk_rcv+0x8a1/0x1e30
[ 215.114366][ C1] ? __skb_queue_purge+0x180/0x180
[ 215.119300][ C1] ? tipc_sk_filter_rcv+0x3583/0x3e00
[ 215.124517][ C1] tipc_node_xmit+0x34b/0xe30
[ 215.129034][ C1] ? tipc_node_get_linkname+0x190/0x190
[ 215.134412][ C1] tipc_node_distr_xmit+0x36a/0x4d0
[ 215.139573][ C1] ? tipc_node_xmit_skb+0x1b0/0x1b0
[ 215.144753][ C1] ? futex_wake+0x630/0x790
[ 215.149124][ C1] tipc_sk_backlog_rcv+0x18b/0x210
[ 215.154330][ C1] ? tipc_sk_timeout+0xab0/0xab0
[ 215.159062][ C1] ? __local_bh_enable_ip+0x53/0x80
[ 215.164107][ C1] ? lock_sock_nested+0x26a/0x300
[ 215.169054][ C1] __release_sock+0x148/0x410
[ 215.173590][ C1] sock_setsockopt+0x1e3b/0x2e00
[ 215.178535][ C1] ? __sock_set_mark+0x160/0x160
[ 215.183423][ C1] ? selinux_socket_getsockopt+0x340/0x340
[ 215.189403][ C1] ? security_socket_setsockopt+0x82/0xb0
[ 215.195093][ C1] __sys_setsockopt+0x441/0x870
[ 215.200040][ C1] ? __ia32_sys_recv+0xb0/0xb0
[ 215.204834][ C1] ? __kasan_check_write+0x14/0x20
[ 215.209806][ C1] ? switch_fpu_return+0x1e4/0x3c0
[ 215.214739][ C1] ? fpu__clear_all+0x20/0x20
[ 215.219235][ C1] __x64_sys_setsockopt+0xbf/0xd0
[ 215.224327][ C1] do_syscall_64+0x34/0x70
[ 215.228824][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 215.234877][ C1] RIP: 0033:0x7ff543bd9da9
[ 215.239282][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 215.259274][ C1] RSP: 002b:00007ff54375b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 215.267605][ C1] RAX: ffffffffffffffda RBX: 00007ff543d07f80 RCX: 00007ff543bd9da9
[ 215.275749][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003
[ 215.283556][ C1] RBP: 00007ff543c2647a R08: 0000000000000004 R09: 0000000000000000
[ 215.291368][ C1] R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000000
[ 215.299366][ C1] R13: 000000000000000b R14: 00007ff543d07f80 R15: 00007ffedba6a358
[ 264.993398][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 123s! [syz-executor.0:25481]
[ 265.001916][ C0] Modules linked in:
[ 265.005657][ C0] CPU: 0 PID: 25481 Comm: syz-executor.0 Not tainted 5.10.226-syzkaller-1003449-g6a01908517df #0
[ 265.016061][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 265.025978][ C0] RIP: 0010:kvm_wait+0xfc/0x150
[ 265.030649][ C0] Code: 38 f0 75 26 41 f7 c7 00 02 00 00 75 0f 0f 1f 44 00 00 0f 00 2d 55 53 d5 03 f4 eb 0e 0f 1f 44 00 00 0f 00 2d 46 53 d5 03 fb f4 <4c> 89 7c 24 18 ff 74 24 18 9d 48 c7 44 24 20 0e 36 e0 45 49 c7 04
[ 265.050601][ C0] RSP: 0018:ffffc900031b79e0 EFLAGS: 00000246
[ 265.056608][ C0] RAX: 0000000000000003 RBX: 1ffff92000636f40 RCX: ffffffff8150b854
[ 265.064575][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffffc900031b7a20
[ 265.072670][ C0] RBP: ffffc900031b7a90 R08: dffffc0000000000 R09: ffffed10220343d2
[ 265.080745][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[ 265.088548][ C0] R13: ffff8881101a1e88 R14: 0000000000000003 R15: 0000000000000246
[ 265.096373][ C0] FS: 0000555591ac8480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 265.105213][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 265.111633][ C0] CR2: 00007ff54373ad58 CR3: 00000001134c6000 CR4: 00000000003506b0
[ 265.119671][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 265.127492][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 265.135372][ C0] Call Trace:
[ 265.138522][ C0]
[ 265.141289][ C0] ? show_regs+0x58/0x60
[ 265.145314][ C0] ? watchdog_timer_fn+0x471/0x590
[ 265.150325][ C0] ? proc_watchdog_cpumask+0xd0/0xd0
[ 265.155435][ C0] ? __hrtimer_run_queues+0x3d7/0xa50
[ 265.160820][ C0] ? hrtimer_interrupt+0x8b0/0x8b0
[ 265.165764][ C0] ? clockevents_program_event+0x214/0x2c0
[ 265.171413][ C0] ? ktime_get_update_offsets_now+0x266/0x280
[ 265.177302][ C0] ? hrtimer_interrupt+0x39a/0x8b0
[ 265.182254][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0
[ 265.188236][ C0] ? asm_call_irq_on_stack+0xf/0x20
[ 265.193260][ C0]
[ 265.196048][ C0] ? sysvec_apic_timer_interrupt+0x85/0xe0
[ 265.202036][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 265.208060][ C0] ? __pv_queued_spin_lock_slowpath+0x6d4/0xc70
[ 265.214101][ C0] ? kvm_wait+0xfc/0x150
[ 265.218632][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 265.224623][ C0] ? kvm_arch_para_hints+0x30/0x30
[ 265.229650][ C0] ? __pv_queued_spin_lock_slowpath+0x6d4/0xc70
[ 265.235717][ C0] __pv_queued_spin_lock_slowpath+0x72f/0xc70
[ 265.241993][ C0] ? __pv_queued_spin_unlock_slowpath+0x280/0x280
[ 265.248238][ C0] _raw_spin_lock_bh+0x139/0x1b0
[ 265.252991][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0
[ 265.258020][ C0] ? __kasan_record_aux_stack+0xd3/0x100
[ 265.263486][ C0] ? memset+0x35/0x40
[ 265.267393][ C0] lock_sock_nested+0x92/0x300
[ 265.272043][ C0] ? locks_remove_posix+0x610/0x610
[ 265.277137][ C0] ? sock_init_data+0xc0/0xc0
[ 265.281904][ C0] tipc_release+0x57/0x1440
[ 265.286217][ C0] sock_close+0xdf/0x270
[ 265.290283][ C0] ? sock_mmap+0xa0/0xa0
[ 265.294363][ C0] __fput+0x33d/0x7b0
[ 265.298366][ C0] ____fput+0x15/0x20
[ 265.302186][ C0] task_work_run+0x129/0x190
[ 265.306851][ C0] exit_to_user_mode_loop+0xbf/0xd0
[ 265.311955][ C0] syscall_exit_to_user_mode+0xa2/0x1a0
[ 265.317322][ C0] do_syscall_64+0x40/0x70
[ 265.321658][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 265.327412][ C0] RIP: 0033:0x7ff543bd8c9a
[ 265.331697][ C0] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24
[ 265.351104][ C0] RSP: 002b:00007ffedba6a420 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 265.359354][ C0] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00007ff543bd8c9a
[ 265.367230][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 265.375134][ C0] RBP: 00007ff543d09980 R08: 0000001b31f60000 R09: 00007ffedbb170b0
[ 265.383115][ C0] R10: 0000000000003ea8 R11: 0000000000000293 R12: 000000000001c272
[ 265.390935][ C0] R13: ffffffffffffffff R14: 00007ff54375c000 R15: 000000000001bf31
[ 265.398844][ C0] Sending NMI from CPU 0 to CPUs 1:
[ 265.404773][ C1] NMI backtrace for cpu 1
[ 265.404784][ C1] CPU: 1 PID: 25482 Comm: syz-executor.0 Not tainted 5.10.226-syzkaller-1003449-g6a01908517df #0
[ 265.404791][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 265.404795][ C1] RIP: 0010:kasan_check_range+0x1bf/0x2a0
[ 265.404807][ C1] Code: d5 49 8d 5d 07 4d 85 ed 49 0f 49 dd 48 83 e3 f8 49 29 dd 74 12 41 80 39 00 0f 85 a6 00 00 00 49 ff c1 49 ff cd 75 ee 5b 41 5c <41> 5d 41 5e 41 5f 5d c3 45 84 f6 75 61 41 f7 c6 00 ff 00 00 75 5d
[ 265.404811][ C1] RSP: 0018:ffffc9000333e828 EFLAGS: 00000256
[ 265.404820][ C1] RAX: 0000000000000401 RBX: ffffc9000333e880 RCX: ffffffff84b2c4fb
[ 265.404825][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881101a1e88
[ 265.404830][ C1] RBP: ffffc9000333e840 R08: dffffc0000000000 R09: ffffed10220343d2
[ 265.404835][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000667d0c
[ 265.404841][ C1] R13: 0000000000000001 R14: ffffed10220343d2 R15: dffffc0000000000
[ 265.404846][ C1] FS: 00007ff54375b6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 265.404850][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 265.404856][ C1] CR2: 000000c0019c8024 CR3: 00000001134c6000 CR4: 00000000003506a0
[ 265.404861][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 265.404866][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 265.404868][ C1] Call Trace:
[ 265.404871][ C1]
[ 265.404873][ C1] ? show_regs+0x58/0x60
[ 265.404877][ C1] ? nmi_cpu_backtrace+0x133/0x160
[ 265.404880][ C1] ? kasan_check_range+0x1bf/0x2a0
[ 265.404883][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20
[ 265.404886][ C1] ? nmi_handle+0xa8/0x280
[ 265.404889][ C1] ? kasan_check_range+0x1bf/0x2a0
[ 265.404892][ C1] ? default_do_nmi+0x69/0x160
[ 265.404895][ C1] ? exc_nmi+0xad/0x100
[ 265.404898][ C1] ? end_repeat_nmi+0x16/0x31
[ 265.404901][ C1] ? _raw_spin_trylock_bh+0x7b/0x190
[ 265.404905][ C1] ? kasan_check_range+0x1bf/0x2a0
[ 265.404909][ C1] ? kasan_check_range+0x1bf/0x2a0
[ 265.404913][ C1] ? kasan_check_range+0x1bf/0x2a0
[ 265.404915][ C1]
[ 265.404918][ C1] __kasan_check_read+0x11/0x20
[ 265.404921][ C1] _raw_spin_trylock_bh+0x7b/0x190
[ 265.404924][ C1] ? _raw_spin_trylock+0x1a0/0x1a0
[ 265.404927][ C1] ? preempt_count_sub+0xec/0x160
[ 265.404930][ C1] tipc_sk_rcv+0x4c2/0x1e30
[ 265.404933][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80
[ 265.404936][ C1] ? __stack_depot_save+0x468/0x4d0
[ 265.404939][ C1] ? kmem_cache_free+0xa9/0x1e0
[ 265.404942][ C1] ? kasan_set_free_info+0x23/0x40
[ 265.404945][ C1] ? ____kasan_slab_free+0x121/0x160
[ 265.404948][ C1] ? __kasan_slab_free+0x11/0x20
[ 265.404951][ C1] ? slab_free_freelist_hook+0xc0/0x190
[ 265.404954][ C1] ? kfree_skbmem+0x104/0x170
[ 265.404957][ C1] ? kfree_skb+0xc1/0x320
[ 265.404959][ C1] ? tipc_sk_rcv+0x8a1/0x1e30
[ 265.404962][ C1] ? tipc_node_xmit+0x34b/0xe30
[ 265.404965][ C1] ? __skb_queue_purge+0x180/0x180
[ 265.404968][ C1] tipc_node_xmit+0x34b/0xe30
[ 265.404971][ C1] ? ____kasan_slab_free+0x12c/0x160
[ 265.404974][ C1] ? tipc_node_get_linkname+0x190/0x190
[ 265.404977][ C1] ? __kasan_slab_free+0x11/0x20
[ 265.404981][ C1] ? slab_free_freelist_hook+0xc0/0x190
[ 265.404984][ C1] tipc_node_distr_xmit+0x36a/0x4d0
[ 265.404987][ C1] ? tipc_node_xmit_skb+0x1b0/0x1b0
[ 265.404990][ C1] ? trace_tipc_sk_rej_msg+0x2b/0x6f0
[ 265.404992][ C1] tipc_sk_rcv+0x177d/0x1e30
[ 265.404995][ C1] ? __skb_queue_purge+0x180/0x180
[ 265.404998][ C1] tipc_node_xmit+0x34b/0xe30
[ 265.405001][ C1] ? stack_trace_save+0x1c0/0x1c0
[ 265.405004][ C1] ? __kernel_text_address+0x9b/0x110
[ 265.405007][ C1] ? tipc_node_get_linkname+0x190/0x190
[ 265.405010][ C1] ? arch_stack_walk+0xf3/0x140
[ 265.405013][ C1] tipc_sk_filter_rcv+0x1da8/0x3e00
[ 265.405016][ C1] ? tipc_sk_dump+0xf50/0xf50
[ 265.405019][ C1] ? __kasan_check_write+0x14/0x20
[ 265.405022][ C1] ? _raw_spin_lock_bh+0xa4/0x1b0
[ 265.405025][ C1] ? kmem_cache_free+0xa9/0x1e0
[ 265.405027][ C1] tipc_sk_rcv+0x8a1/0x1e30
[ 265.405030][ C1] ? __skb_queue_purge+0x180/0x180
[ 265.405033][ C1] ? tipc_sk_filter_rcv+0x3583/0x3e00
[ 265.405036][ C1] tipc_node_xmit+0x34b/0xe30
[ 265.405039][ C1] ? tipc_node_get_linkname+0x190/0x190
[ 265.405042][ C1] tipc_node_distr_xmit+0x36a/0x4d0
[ 265.405045][ C1] ? tipc_node_xmit_skb+0x1b0/0x1b0
[ 265.405048][ C1] ? futex_wake+0x630/0x790
[ 265.405051][ C1] tipc_sk_backlog_rcv+0x18b/0x210
[ 265.405054][ C1] ? tipc_sk_timeout+0xab0/0xab0
[ 265.405057][ C1] ? __local_bh_enable_ip+0x53/0x80
[ 265.405060][ C1] ? lock_sock_nested+0x26a/0x300
[ 265.405062][ C1] __release_sock+0x148/0x410
[ 265.405065][ C1] sock_setsockopt+0x1e3b/0x2e00
[ 265.405068][ C1] ? __sock_set_mark+0x160/0x160
[ 265.405071][ C1] ? selinux_socket_getsockopt+0x340/0x340
[ 265.405075][ C1] ? security_socket_setsockopt+0x82/0xb0
[ 265.405077][ C1] __sys_setsockopt+0x441/0x870
[ 265.405080][ C1] ? __ia32_sys_recv+0xb0/0xb0
[ 265.405083][ C1] ? __kasan_check_write+0x14/0x20
[ 265.405086][ C1] ? switch_fpu_return+0x1e4/0x3c0
[ 265.405089][ C1] ? fpu__clear_all+0x20/0x20
[ 265.405092][ C1] __x64_sys_setsockopt+0xbf/0xd0
[ 265.405095][ C1] do_syscall_64+0x34/0x70
[ 265.405098][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 265.405101][ C1] RIP: 0033:0x7ff543bd9da9
[ 265.405111][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 265.405114][ C1] RSP: 002b:00007ff54375b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 265.405122][ C1] RAX: ffffffffffffffda RBX: 00007ff543d07f80 RCX: 00007ff543bd9da9
[ 265.405126][ C1] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003
[ 265.405130][ C1] RBP: 00007ff543c2647a R08: 0000000000000004 R09: 0000000000000000
[ 265.405134][ C1] R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000000
[ 265.405139][ C1] R13: 000000000000000b R14: 00007ff543d07f80 R15: 00007ffedba6a358