Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts. 2024/11/10 07:53:22 ignoring optional flag "sandboxArg"="0" 2024/11/10 07:53:22 ignoring optional flag "type"="gce" 2024/11/10 07:53:22 parsed 1 programs 2024/11/10 07:53:22 executed programs: 0 [ 49.058974][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 49.058990][ T28] audit: type=1400 audit(1731225202.300:94): avc: denied { unlink } for pid=353 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.095934][ T353] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.157156][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.164127][ T359] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.171677][ T359] device bridge_slave_0 entered promiscuous mode [ 49.178326][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.185217][ T359] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.192672][ T359] device bridge_slave_1 entered promiscuous mode [ 49.241413][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.248266][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.255398][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.262158][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.282587][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.289710][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.296883][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.304257][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.313138][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.321239][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.328070][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.336525][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.344764][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.351766][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.364682][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.373893][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.388254][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.400419][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.408386][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.415860][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.424114][ T359] device veth0_vlan entered promiscuous mode [ 49.434393][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.443798][ T359] device veth1_macvtap entered promiscuous mode [ 49.453238][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.463249][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.485159][ T28] audit: type=1400 audit(1731225202.720:95): avc: denied { create } for pid=363 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.505773][ T28] audit: type=1400 audit(1731225202.720:96): avc: denied { setopt } for pid=363 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.525460][ T28] audit: type=1400 audit(1731225202.740:97): avc: denied { write } for pid=363 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.846413][ T28] audit: type=1400 audit(1731225203.080:98): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 2024/11/10 07:53:27 executed programs: 603 2024/11/10 07:53:32 executed programs: 1275 2024/11/10 07:53:37 executed programs: 1946 2024/11/10 07:53:42 executed programs: 2620 2024/11/10 07:53:47 executed programs: 3295 2024/11/10 07:53:52 executed programs: 3975 [ 180.448477][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 180.455390][ C0] (detected by 0, t=10002 jiffies, g=15605, q=231 ncpus=2) [ 180.462491][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4294955263-4294945261), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 180.475684][ C0] rcu: rcu_preempt kthread starved for 10002 jiffies! g15605 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 180.486702][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 180.496509][ C0] rcu: RCU grace-period kthread stack dump: [ 180.502237][ C0] task:rcu_preempt state:R running task stack:27688 pid:14 ppid:2 flags:0x00004000 [ 180.512837][ C0] Call Trace: [ 180.515950][ C0] [ 180.518737][ C0] __schedule+0xcb5/0x1560 [ 180.522981][ C0] ? update_load_avg+0x513/0x1530 [ 180.527844][ C0] ? __sched_text_start+0x8/0x8 [ 180.532530][ C0] ? __kasan_check_write+0x14/0x20 [ 180.537477][ C0] schedule+0xc3/0x180 [ 180.541382][ C0] schedule_timeout+0x18c/0x380 [ 180.546077][ C0] ? _raw_spin_unlock_irq+0x4d/0x70 [ 180.551109][ C0] ? console_conditional_schedule+0x10/0x10 [ 180.556829][ C0] ? update_process_times+0x1b0/0x1b0 [ 180.562039][ C0] ? prepare_to_swait_event+0x308/0x320 [ 180.567422][ C0] rcu_gp_fqs_loop+0x2ed/0x10a0 [ 180.572108][ C0] ? _raw_spin_unlock_irq+0x4d/0x70 [ 180.577141][ C0] ? rcu_gp_init+0xc7f/0xfa0 [ 180.581573][ C0] ? rcu_gp_init+0xfa0/0xfa0 [ 180.585995][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 180.591636][ C0] ? finish_swait+0x17d/0x1b0 [ 180.596157][ C0] rcu_gp_kthread+0xa3/0x3a0 [ 180.600580][ C0] ? queued_spin_lock_slowpath+0x50/0x50 [ 180.606045][ C0] ? set_cpus_allowed_ptr+0xa4/0xe0 [ 180.611254][ C0] ? __kasan_check_read+0x11/0x20 [ 180.616113][ C0] ? __kthread_parkme+0x12d/0x180 [ 180.621073][ C0] kthread+0x26d/0x300 [ 180.624977][ C0] ? queued_spin_lock_slowpath+0x50/0x50 [ 180.630445][ C0] ? kthread_blkcg+0xd0/0xd0 [ 180.634870][ C0] ret_from_fork+0x1f/0x30 [ 180.639312][ C0] [ 180.642160][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 180.648341][ C0] CPU: 0 PID: 12851 Comm: syz-executor.0 Not tainted 6.1.112-syzkaller-1151949-geef3d33656ce #0 [ 180.658566][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 180.668463][ C0] RIP: 0010:tipc_sk_rcv+0x132c/0x1c40 [ 180.673666][ C0] Code: 7a f2 fe ff 48 8b 7c 24 30 48 83 ef 80 48 89 7c 24 30 be 04 00 00 00 e8 92 c3 c0 fc bb ff ff ff ff f0 41 0f c1 9d 80 00 00 00 01 00 00 00 89 de e8 68 5b 79 fc 83 fb 01 75 0f e8 ae 57 79 fc [ 180.693107][ C0] RSP: 0018:ffffc90001396960 EFLAGS: 00000213 [ 180.699009][ C0] RAX: 0000000000000001 RBX: 0000000000000005 RCX: ffffffff84fc4c3e [ 180.706817][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888122a80080 [ 180.714811][ C0] RBP: ffffc90001396bb0 R08: dffffc0000000000 R09: ffffed1024550011 [ 180.722615][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 180.730429][ C0] R13: ffff888122a80000 R14: 00000000e5215f1e R15: ffffc90001396da0 [ 180.738240][ C0] FS: 00007f7b668a16c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 180.747007][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.753427][ C0] CR2: 00007f7b66880d58 CR3: 00000001205d6000 CR4: 00000000003506b0 [ 180.761239][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 180.769053][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 180.776862][ C0] Call Trace: [ 180.779997][ C0] [ 180.782679][ C0] ? show_regs+0x58/0x60 [ 180.786761][ C0] ? dump_cpu_task+0x3c/0x70 [ 180.791179][ C0] ? rcu_check_gp_kthread_starvation+0x1d1/0x240 [ 180.797376][ C0] ? _find_next_bit+0x126/0x130 [ 180.802029][ C0] ? print_other_cpu_stall+0x1140/0x1300 [ 180.807499][ C0] ? __kasan_check_read+0x11/0x20 [ 180.812360][ C0] ? print_cpu_stall+0x590/0x590 [ 180.817146][ C0] ? acct_account_cputime+0x1c2/0x2c0 [ 180.822341][ C0] ? rcu_sched_clock_irq+0xb19/0x1350 [ 180.827550][ C0] ? rcu_boost_kthread_setaffinity+0x590/0x590 [ 180.833536][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 180.838574][ C0] ? update_wall_time+0x25/0x30 [ 180.843255][ C0] ? update_process_times+0x149/0x1b0 [ 180.848468][ C0] ? tick_sched_timer+0x188/0x240 [ 180.853324][ C0] ? tick_setup_sched_timer+0x490/0x490 [ 180.858743][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 180.863914][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 180.868860][ C0] ? clockevents_program_event+0x22f/0x300 [ 180.874499][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 180.880403][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 180.885362][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 180.891346][ C0] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 180.897126][ C0] [ 180.899868][ C0] [ 180.902737][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 180.908725][ C0] ? tipc_sk_rcv+0x131e/0x1c40 [ 180.913320][ C0] ? tipc_sk_rcv+0x132c/0x1c40 [ 180.917921][ C0] ? __stack_depot_save+0x419/0x480 [ 180.922955][ C0] ? kasan_save_free_info+0x2b/0x40 [ 180.927984][ C0] ? ____kasan_slab_free+0x131/0x180 [ 180.933110][ C0] ? __kasan_slab_free+0x11/0x20 [ 180.937877][ C0] ? kmem_cache_free+0x291/0x510 [ 180.942655][ C0] ? tipc_node_xmit+0x34e/0xe40 [ 180.947354][ C0] ? tipc_node_distr_xmit+0x36a/0x4d0 [ 180.952549][ C0] ? __release_sock+0x145/0x410 [ 180.957238][ C0] ? __skb_queue_purge+0x180/0x180 [ 180.962356][ C0] ? __sys_setsockopt+0x423/0x8b0 [ 180.967215][ C0] ? __x64_sys_setsockopt+0xbf/0xd0 [ 180.972339][ C0] ? x64_sys_call+0x1a2/0x9a0 [ 180.976850][ C0] ? do_syscall_64+0x3b/0xb0 [ 180.981277][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.987186][ C0] tipc_node_xmit+0x34e/0xe40 [ 180.991693][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 180.997070][ C0] ? kfree_skbmem+0x104/0x170 [ 181.001584][ C0] ? ____kasan_slab_free+0x13c/0x180 [ 181.006730][ C0] ? __kasan_slab_free+0x11/0x20 [ 181.011481][ C0] tipc_node_distr_xmit+0x36a/0x4d0 [ 181.016517][ C0] ? tipc_node_xmit_skb+0x1b0/0x1b0 [ 181.021558][ C0] ? tipc_msg_reverse+0x6f0/0x990 [ 181.026419][ C0] tipc_sk_rcv+0x1306/0x1c40 [ 181.030845][ C0] ? __skb_queue_purge+0x180/0x180 [ 181.035787][ C0] tipc_node_xmit+0x34e/0xe40 [ 181.040297][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 181.045249][ C0] ? kernel_text_address+0xa9/0xe0 [ 181.050191][ C0] ? __kernel_text_address+0xd/0x40 [ 181.055318][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 181.060700][ C0] ? __kasan_check_write+0x14/0x20 [ 181.065638][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 181.070933][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 181.075623][ C0] tipc_sk_filter_rcv+0x194e/0x3390 [ 181.080666][ C0] ? tipc_sk_publish+0x4b0/0x4b0 [ 181.085427][ C0] ? __kasan_check_write+0x14/0x20 [ 181.090385][ C0] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 181.095237][ C0] tipc_sk_rcv+0x815/0x1c40 [ 181.099582][ C0] ? __skb_queue_purge+0x180/0x180 [ 181.104521][ C0] ? trace_tipc_sk_rej_msg+0x25/0x180 [ 181.109729][ C0] ? tipc_sk_filter_rcv+0x30d5/0x3390 [ 181.114943][ C0] tipc_node_xmit+0x34e/0xe40 [ 181.119545][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 181.124919][ C0] tipc_node_distr_xmit+0x36a/0x4d0 [ 181.130395][ C0] ? tipc_node_xmit_skb+0x1b0/0x1b0 [ 181.135419][ C0] ? __kasan_check_read+0x11/0x20 [ 181.140281][ C0] ? preempt_schedule_irq+0xe7/0x140 [ 181.145399][ C0] tipc_sk_backlog_rcv+0x18b/0x210 [ 181.150346][ C0] ? tipc_sk_timeout+0xab0/0xab0 [ 181.155123][ C0] ? irqentry_exit+0x30/0x40 [ 181.159550][ C0] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 181.165113][ C0] __release_sock+0x145/0x410 [ 181.169618][ C0] sockopt_release_sock+0x9a/0x1f0 [ 181.174568][ C0] sk_setsockopt+0x165d/0x3160 [ 181.179168][ C0] ? sockopt_capable+0x60/0x60 [ 181.183764][ C0] ? selinux_socket_setsockopt+0x260/0x360 [ 181.189411][ C0] ? __fget_files+0x2cb/0x330 [ 181.193920][ C0] sock_setsockopt+0x59/0x70 [ 181.198348][ C0] __sys_setsockopt+0x423/0x8b0 [ 181.203033][ C0] ? __ia32_sys_recv+0xb0/0xb0 [ 181.207631][ C0] ? fpregs_restore_userregs+0x130/0x290 [ 181.213100][ C0] __x64_sys_setsockopt+0xbf/0xd0 [ 181.217960][ C0] x64_sys_call+0x1a2/0x9a0 [ 181.222301][ C0] do_syscall_64+0x3b/0xb0 [ 181.226549][ C0] ? clear_bhb_loop+0x55/0xb0 [ 181.231062][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.236790][ C0] RIP: 0033:0x7f7b65a7dda9 [ 181.241050][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 181.260491][ C0] RSP: 002b:00007f7b668a10c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 181.268732][ C0] RAX: ffffffffffffffda RBX: 00007f7b65babf80 RCX: 00007f7b65a7dda9 [ 181.276541][ C0] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 181.284351][ C0] RBP: 00007f7b65aca47a R08: 0000000000000004 R09: 0000000000000000 [ 181.292423][ C0] R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000000 [ 181.300235][ C0] R13: 000000000000000b R14: 00007f7b65babf80 R15: 00007ffd5d953e48 [ 181.308053][ C0] [ 221.064926][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 143s! [syz-executor.0:12850] [ 221.073445][ C1] Modules linked in: [ 221.077177][ C1] CPU: 1 PID: 12850 Comm: syz-executor.0 Not tainted 6.1.112-syzkaller-1151949-geef3d33656ce #0 [ 221.087431][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 221.097311][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 221.102178][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b f9 50 04 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 221.122067][ C1] RSP: 0018:ffffc9000134f860 EFLAGS: 00000246 [ 221.127951][ C1] RAX: 0000000000000003 RBX: 1ffff92000269f10 RCX: ffffffff85213c9c [ 221.135770][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888122a80098 [ 221.143835][ C1] RBP: ffffc9000134f910 R08: dffffc0000000000 R09: ffffed1024550014 [ 221.151645][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 221.159627][ C1] R13: ffff888122a80098 R14: 0000000000000003 R15: 1ffff92000269f14 [ 221.167437][ C1] FS: 000055555fa4e480(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 221.176204][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 221.182626][ C1] CR2: 00007f7b66880d58 CR3: 00000001205d6000 CR4: 00000000003506a0 [ 221.190443][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 221.198249][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 221.206147][ C1] Call Trace: [ 221.209280][ C1] [ 221.211963][ C1] ? show_regs+0x58/0x60 [ 221.216070][ C1] ? watchdog_timer_fn+0x4b1/0x5f0 [ 221.220989][ C1] ? proc_watchdog_cpumask+0xf0/0xf0 [ 221.226110][ C1] ? __hrtimer_run_queues+0x41a/0xad0 [ 221.231336][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 221.236264][ C1] ? clockevents_program_event+0x22f/0x300 [ 221.241904][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 221.247813][ C1] ? hrtimer_interrupt+0x40c/0xaa0 [ 221.252759][ C1] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 221.258657][ C1] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 221.264392][ C1] [ 221.267168][ C1] [ 221.269949][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 221.275940][ C1] ? __pv_queued_spin_lock_slowpath+0x67c/0xda0 [ 221.282122][ C1] ? kvm_wait+0x147/0x180 [ 221.286289][ C1] ? asm_common_interrupt+0x27/0x40 [ 221.291409][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 221.296353][ C1] ? __pv_queued_spin_lock_slowpath+0x67c/0xda0 [ 221.302516][ C1] __pv_queued_spin_lock_slowpath+0x6de/0xda0 [ 221.308419][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 221.314670][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 221.319441][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 221.324475][ C1] ? __stack_depot_save+0x36/0x480 [ 221.329430][ C1] lock_sock_nested+0x92/0x300 [ 221.334020][ C1] ? kasan_save_stack+0x4d/0x60 [ 221.338718][ C1] ? sock_init_data+0xc0/0xc0 [ 221.343221][ C1] ? filp_close+0x105/0x150 [ 221.347563][ C1] ? __x64_sys_close+0x3b/0x90 [ 221.352161][ C1] ? x64_sys_call+0x3d/0x9a0 [ 221.356590][ C1] ? do_syscall_64+0x3b/0xb0 [ 221.361017][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.366922][ C1] tipc_release+0xc0/0x1310 [ 221.371259][ C1] ? rwsem_write_trylock+0x153/0x340 [ 221.376377][ C1] ? tipc_sock_destruct+0x190/0x190 [ 221.381428][ C1] sock_close+0xdf/0x270 [ 221.385489][ C1] ? sock_mmap+0xa0/0xa0 [ 221.389572][ C1] __fput+0x1e5/0x870 [ 221.393399][ C1] ____fput+0x15/0x20 [ 221.397205][ C1] task_work_run+0x24d/0x2e0 [ 221.401636][ C1] ? task_work_cancel+0x2e0/0x2e0 [ 221.406493][ C1] ? filp_close+0x105/0x150 [ 221.410836][ C1] exit_to_user_mode_loop+0x94/0xa0 [ 221.415869][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 221.421161][ C1] syscall_exit_to_user_mode+0x26/0x130 [ 221.426542][ C1] do_syscall_64+0x47/0xb0 [ 221.430794][ C1] ? clear_bhb_loop+0x55/0xb0 [ 221.435308][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.441039][ C1] RIP: 0033:0x7f7b65a7cc9a [ 221.445289][ C1] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 221.464735][ C1] RSP: 002b:00007ffd5d953f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 221.472974][ C1] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00007f7b65a7cc9a [ 221.480791][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 221.488598][ C1] RBP: 00007f7b65bad980 R08: 0000001b32260000 R09: 00007ffd5d9c00b0 [ 221.496411][ C1] R10: 000000000000290e R11: 0000000000000293 R12: 0000000000013d5d [ 221.504217][ C1] R13: ffffffffffffffff R14: 00007f7b65600000 R15: 0000000000013a1c [ 221.512036][ C1] [ 221.514914][ C1] Sending NMI from CPU 1 to CPUs 0: [ 221.520041][ C0] NMI backtrace for cpu 0 [ 221.520051][ C0] CPU: 0 PID: 12851 Comm: syz-executor.0 Not tainted 6.1.112-syzkaller-1151949-geef3d33656ce #0 [ 221.520070][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 221.520079][ C0] RIP: 0010:__kasan_check_write+0x15/0x20 [ 221.520101][ C0] Code: d2 e8 7f eb ff ff 5d c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 89 f6 48 8b 4d 08 ba 01 00 00 00 e8 5c eb ff ff 5d 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 53 49 89 [ 221.520114][ C0] RSP: 0018:ffffc90001396958 EFLAGS: 00000256 [ 221.520129][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff84fc4c3e [ 221.520140][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888122a80080 [ 221.520151][ C0] RBP: ffffc90001396bb0 R08: dffffc0000000000 R09: ffffed1024550011 [ 221.520164][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 221.520176][ C0] R13: ffff888122a80000 R14: 00000000e5215f1e R15: ffffc90001396da0 [ 221.520189][ C0] FS: 00007f7b668a16c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 221.520204][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 221.520216][ C0] CR2: 00007f7b66880d58 CR3: 00000001205d6000 CR4: 00000000003506b0 [ 221.520232][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 221.520242][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 221.520253][ C0] Call Trace: [ 221.520258][ C0] [ 221.520263][ C0] ? show_regs+0x58/0x60 [ 221.520281][ C0] ? nmi_cpu_backtrace+0x285/0x2f0 [ 221.520304][ C0] ? nmi_trigger_cpumask_backtrace+0x3b0/0x3b0 [ 221.520329][ C0] ? __kasan_check_write+0x15/0x20 [ 221.520345][ C0] ? __kasan_check_write+0x15/0x20 [ 221.520362][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 221.520382][ C0] ? nmi_handle+0xa7/0x280 [ 221.520400][ C0] ? __kasan_check_write+0x15/0x20 [ 221.520416][ C0] ? default_do_nmi+0x69/0x160 [ 221.520437][ C0] ? exc_nmi+0xad/0x100 [ 221.520456][ C0] ? end_repeat_nmi+0x16/0x31 [ 221.520479][ C0] ? tipc_sk_rcv+0x131e/0x1c40 [ 221.520499][ C0] ? __kasan_check_write+0x15/0x20 [ 221.520515][ C0] ? __kasan_check_write+0x15/0x20 [ 221.520537][ C0] ? __kasan_check_write+0x15/0x20 [ 221.520554][ C0] [ 221.520559][ C0] [ 221.520563][ C0] ? tipc_sk_rcv+0x131e/0x1c40 [ 221.520584][ C0] ? __stack_depot_save+0x419/0x480 [ 221.520610][ C0] ? kasan_save_free_info+0x2b/0x40 [ 221.520625][ C0] ? ____kasan_slab_free+0x131/0x180 [ 221.520649][ C0] ? __kasan_slab_free+0x11/0x20 [ 221.520671][ C0] ? kmem_cache_free+0x291/0x510 [ 221.520690][ C0] ? tipc_node_xmit+0x34e/0xe40 [ 221.520707][ C0] ? tipc_node_distr_xmit+0x36a/0x4d0 [ 221.520725][ C0] ? __release_sock+0x145/0x410 [ 221.520745][ C0] ? __skb_queue_purge+0x180/0x180 [ 221.520764][ C0] ? __sys_setsockopt+0x423/0x8b0 [ 221.520788][ C0] ? __x64_sys_setsockopt+0xbf/0xd0 [ 221.520811][ C0] ? x64_sys_call+0x1a2/0x9a0 [ 221.520831][ C0] ? do_syscall_64+0x3b/0xb0 [ 221.520847][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.520873][ C0] tipc_node_xmit+0x34e/0xe40 [ 221.520893][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 221.520911][ C0] ? kfree_skbmem+0x104/0x170 [ 221.520934][ C0] ? ____kasan_slab_free+0x13c/0x180 [ 221.520958][ C0] ? __kasan_slab_free+0x11/0x20 [ 221.520983][ C0] tipc_node_distr_xmit+0x36a/0x4d0 [ 221.521004][ C0] ? tipc_node_xmit_skb+0x1b0/0x1b0 [ 221.521021][ C0] ? tipc_msg_reverse+0x6f0/0x990 [ 221.521049][ C0] tipc_sk_rcv+0x1306/0x1c40 [ 221.521076][ C0] ? __skb_queue_purge+0x180/0x180 [ 221.521101][ C0] tipc_node_xmit+0x34e/0xe40 [ 221.521119][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 221.521137][ C0] ? kernel_text_address+0xa9/0xe0 [ 221.521153][ C0] ? __kernel_text_address+0xd/0x40 [ 221.521168][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 221.521188][ C0] ? __kasan_check_write+0x14/0x20 [ 221.521204][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 221.521223][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 221.521241][ C0] tipc_sk_filter_rcv+0x194e/0x3390 [ 221.521280][ C0] ? tipc_sk_publish+0x4b0/0x4b0 [ 221.521301][ C0] ? __kasan_check_write+0x14/0x20 [ 221.521317][ C0] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 221.521338][ C0] tipc_sk_rcv+0x815/0x1c40 [ 221.521364][ C0] ? __skb_queue_purge+0x180/0x180 [ 221.521384][ C0] ? trace_tipc_sk_rej_msg+0x25/0x180 [ 221.521405][ C0] ? tipc_sk_filter_rcv+0x30d5/0x3390 [ 221.521429][ C0] tipc_node_xmit+0x34e/0xe40 [ 221.521448][ C0] ? tipc_node_get_linkname+0x190/0x190 [ 221.521471][ C0] tipc_node_distr_xmit+0x36a/0x4d0 [ 221.521492][ C0] ? tipc_node_xmit_skb+0x1b0/0x1b0 [ 221.521510][ C0] ? __kasan_check_read+0x11/0x20 [ 221.521532][ C0] ? preempt_schedule_irq+0xe7/0x140 [ 221.521557][ C0] tipc_sk_backlog_rcv+0x18b/0x210 [ 221.521579][ C0] ? tipc_sk_timeout+0xab0/0xab0 [ 221.521599][ C0] ? irqentry_exit+0x30/0x40 [ 221.521621][ C0] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 221.521644][ C0] __release_sock+0x145/0x410 [ 221.521666][ C0] sockopt_release_sock+0x9a/0x1f0 [ 221.521685][ C0] sk_setsockopt+0x165d/0x3160 [ 221.521704][ C0] ? sockopt_capable+0x60/0x60 [ 221.521722][ C0] ? selinux_socket_setsockopt+0x260/0x360 [ 221.521748][ C0] ? __fget_files+0x2cb/0x330 [ 221.521775][ C0] sock_setsockopt+0x59/0x70 [ 221.521793][ C0] __sys_setsockopt+0x423/0x8b0 [ 221.521818][ C0] ? __ia32_sys_recv+0xb0/0xb0 [ 221.521843][ C0] ? fpregs_restore_userregs+0x130/0x290 [ 221.521864][ C0] __x64_sys_setsockopt+0xbf/0xd0 [ 221.521889][ C0] x64_sys_call+0x1a2/0x9a0 [ 221.521908][ C0] do_syscall_64+0x3b/0xb0 [ 221.521925][ C0] ? clear_bhb_loop+0x55/0xb0 [ 221.521946][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.521966][ C0] RIP: 0033:0x7f7b65a7dda9 [ 221.521979][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 221.521992][ C0] RSP: 002b:00007f7b668a10c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 221.522009][ C0] RAX: ffffffffffffffda RBX: 00007f7b65babf80 RCX: 00007f7b65a7dda9 [ 221.522021][ C0] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 [ 221.522031][ C0] RBP: 00007f7b65aca47a R08: 0000000000000004 R09: 0000000000000000 [ 221.522042][ C0] R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000000 [ 221.522052][ C0] R13: 000000000000000b R14: 00007f7b65babf80 R15: 00007ffd5d953e48 [ 221.522068][ C0]