./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1899113462 <...> Warning: Permanently added '10.128.1.230' (ED25519) to the list of known hosts. execve("./syz-executor1899113462", ["./syz-executor1899113462"], 0x7ffe2a20a8f0 /* 10 vars */) = 0 brk(NULL) = 0x555557084000 brk(0x555557084d00) = 0x555557084d00 arch_prctl(ARCH_SET_FS, 0x555557084380) = 0 set_tid_address(0x555557084650) = 348 set_robust_list(0x555557084660, 24) = 0 rseq(0x555557084ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1899113462", 4096) = 28 getrandom("\xac\xa3\xce\xba\x5a\x20\x86\x25", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555557084d00 brk(0x5555570a5d00) = 0x5555570a5d00 brk(0x5555570a6000) = 0x5555570a6000 mprotect(0x7fdc569ed000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555557084650) = 349 ./strace-static-x86_64: Process 349 attached [pid 349] set_robust_list(0x555557084660, 24) = 0 [pid 349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 349] setpgid(0, 0) = 0 [pid 349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 349] write(3, "1000", 4) = 4 [pid 349] close(3) = 0 [pid 349] write(1, "executing program\n", 18executing program ) = 18 [pid 349] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 349] socketpair(AF_UNIX, SOCK_STREAM, 0, [3, 4]) = 0 [pid 349] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=2, value_size=4, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 349] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000040, value=0x20000140, flags=BPF_ANY}, 32) = 0 [pid 349] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [ 76.764512][ T30] audit: type=1400 audit(1722378382.101:66): avc: denied { execmem } for pid=348 comm="syz-executor189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 76.783783][ T30] audit: type=1400 audit(1722378382.101:67): avc: denied { prog_load } for pid=349 comm="syz-executor189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 76.803747][ T30] audit: type=1400 audit(1722378382.101:68): avc: denied { map_create } for pid=349 comm="syz-executor189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 76.823071][ T30] audit: type=1400 audit(1722378382.101:69): avc: denied { map_read map_write } for pid=349 comm="syz-executor189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 76.843094][ T30] audit: type=1400 audit(1722378382.101:70): avc: denied { bpf } for pid=349 comm="syz-executor189" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.863906][ T30] audit: type=1400 audit(1722378382.101:71): avc: denied { perfmon } for pid=349 comm="syz-executor189" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [pid 349] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 6 [pid 349] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=6}}, 16) = 7 [ 77.011905][ T30] audit: type=1400 audit(1722378382.351:72): avc: denied { prog_run } for pid=349 comm="syz-executor189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 177.028791][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 177.035249][ C0] rcu: 0-...!: (10000 ticks this GP) idle=491/1/0x4000000000000000 softirq=2530/2530 fqs=0 last_accelerate: a89b/cfab dyntick_enabled: 1 [ 177.049128][ C0] (t=10002 jiffies g=1193 q=21) [ 177.053898][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10001 jiffies! g1193 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 177.066124][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=597 [ 177.073690][ C0] rcu: rcu_preempt kthread starved for 10004 jiffies! g1193 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 177.084848][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 177.094659][ C0] rcu: RCU grace-period kthread stack dump: [ 177.100531][ C0] task:rcu_preempt state:I stack:28328 pid: 14 ppid: 2 flags:0x00004000 [ 177.109555][ C0] Call Trace: [ 177.112670][ C0] [ 177.115449][ C0] __schedule+0xccc/0x1590 [ 177.119711][ C0] ? __sched_text_start+0x8/0x8 [ 177.124385][ C0] ? __kasan_check_write+0x14/0x20 [ 177.129337][ C0] ? __kasan_check_write+0x14/0x20 [ 177.134280][ C0] schedule+0x11f/0x1e0 [ 177.138286][ C0] schedule_timeout+0x18c/0x370 [ 177.142963][ C0] ? native_set_ldt+0x360/0x360 [ 177.147664][ C0] ? console_conditional_schedule+0x30/0x30 [ 177.153373][ C0] ? update_process_times+0x200/0x200 [ 177.158580][ C0] ? prepare_to_swait_event+0x308/0x320 [ 177.163962][ C0] rcu_gp_fqs_loop+0x2af/0xf80 [ 177.168563][ C0] ? debug_smp_processor_id+0x17/0x20 [ 177.173785][ C0] ? __note_gp_changes+0x4ab/0x920 [ 177.178717][ C0] ? rcu_gp_init+0xc30/0xc30 [ 177.183142][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 177.188349][ C0] ? rcu_gp_init+0x9cf/0xc30 [ 177.192779][ C0] rcu_gp_kthread+0xa4/0x350 [ 177.197207][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 177.201892][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 177.206406][ C0] ? __kasan_check_read+0x11/0x20 [ 177.211267][ C0] ? __kthread_parkme+0xb2/0x200 [ 177.216036][ C0] kthread+0x421/0x510 [ 177.219943][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 177.224454][ C0] ? kthread_blkcg+0xd0/0xd0 [ 177.228890][ C0] ret_from_fork+0x1f/0x30 [ 177.233139][ C0] [ 177.236012][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 177.242164][ C0] NMI backtrace for cpu 0 [ 177.246338][ C0] CPU: 0 PID: 349 Comm: syz-executor189 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 177.256396][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 177.266293][ C0] Call Trace: [ 177.269765][ C0] [ 177.272454][ C0] dump_stack_lvl+0x151/0x1b7 [ 177.276966][ C0] ? io_uring_drop_tctx_refs+0x190/0x190 [ 177.282437][ C0] dump_stack+0x15/0x17 [ 177.286429][ C0] nmi_cpu_backtrace+0x2f7/0x300 [ 177.291204][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 177.297188][ C0] ? panic+0x751/0x751 [ 177.301098][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 177.306999][ C0] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 177.312820][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 177.318724][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 177.324451][ C0] rcu_check_gp_kthread_starvation+0x1e3/0x250 [ 177.330436][ C0] ? rcu_check_gp_kthread_expired_fqs_timer+0x18e/0x230 [ 177.337204][ C0] print_cpu_stall+0x310/0x5f0 [ 177.341804][ C0] rcu_sched_clock_irq+0x989/0x12f0 [ 177.346856][ C0] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 177.352914][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 177.357960][ C0] update_process_times+0x198/0x200 [ 177.362983][ C0] tick_sched_timer+0x188/0x240 [ 177.367665][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 177.373047][ C0] __hrtimer_run_queues+0x41a/0xad0 [ 177.378195][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 177.383133][ C0] ? clockevents_program_event+0x22f/0x300 [ 177.388761][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 177.394658][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 177.399438][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 177.405169][ C0] sysvec_apic_timer_interrupt+0x95/0xc0 [ 177.410631][ C0] [ 177.413409][ C0] [ 177.416184][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 177.422096][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 177.426858][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 2b 02 13 04 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 177.446304][ C0] RSP: 0018:ffffc900007a7800 EFLAGS: 00000246 [ 177.452202][ C0] RAX: 0000000000000003 RBX: 1ffff920000f4f04 RCX: ffffffff8155068f [ 177.460016][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888119e42090 [ 177.467827][ C0] RBP: ffffc900007a78b0 R08: dffffc0000000000 R09: ffffed10233c8413 [ 177.475637][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 177.483449][ C0] R13: ffff888119e42090 R14: 0000000000000003 R15: 1ffff920000f4f08 [ 177.491262][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 177.497335][ C0] ? asm_common_interrupt+0x27/0x40 [ 177.502370][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 177.507318][ C0] ? pv_hash+0x86/0x150 [ 177.511312][ C0] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 177.517213][ C0] ? do_syscall_64+0x3d/0xb0 [ 177.521638][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 177.527886][ C0] ? __kasan_check_write+0x14/0x20 [ 177.532892][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 177.537608][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 177.542642][ C0] ? __local_bh_enable_ip+0x58/0x80 [ 177.547675][ C0] ? lock_sock_nested+0x266/0x300 [ 177.552539][ C0] ? unix_peer_get+0xe0/0xe0 [ 177.556964][ C0] sk_psock_link_pop+0x2e/0x170 [ 177.561650][ C0] ? unix_peer_get+0xe0/0xe0 [ 177.566076][ C0] sock_map_remove_links+0x25/0x570 [ 177.571111][ C0] ? __kasan_check_read+0x11/0x20 [ 177.575973][ C0] ? unix_peer_get+0xe0/0xe0 [ 177.580401][ C0] sock_map_close+0x2ac/0x4c0 [ 177.584913][ C0] ? sock_map_remove_links+0x570/0x570 [ 177.590205][ C0] ? rwsem_mark_wake+0x770/0x770 [ 177.594978][ C0] ? security_file_free+0xc6/0xe0 [ 177.599840][ C0] unix_release+0x82/0xc0 [ 177.604005][ C0] sock_close+0xdf/0x270 [ 177.608084][ C0] ? sock_mmap+0xa0/0xa0 [ 177.612164][ C0] __fput+0x3fe/0x910 [ 177.615983][ C0] ____fput+0x15/0x20 [ 177.619802][ C0] task_work_run+0x129/0x190 [ 177.624231][ C0] do_exit+0xc48/0x2ca0 [ 177.628224][ C0] ? put_task_struct+0x80/0x80 [ 177.632820][ C0] ? ptrace_notify+0x24c/0x350 [ 177.637422][ C0] ? do_notify_parent+0xa30/0xa30 [ 177.642283][ C0] do_group_exit+0x141/0x310 [ 177.646709][ C0] __x64_sys_exit_group+0x3f/0x40 [ 177.651570][ C0] do_syscall_64+0x3d/0xb0 [ 177.655819][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 177.661549][ C0] RIP: 0033:0x7fdc569781c9 [ 177.665802][ C0] Code: Unable to access opcode bytes at RIP 0x7fdc5697819f. [ 177.673008][ C0] RSP: 002b:00007fff964e63e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 177.681251][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdc569781c9 [ 177.689063][ C0] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 177.696873][ C0] RBP: 00007fdc569f32b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 177.704685][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdc569f32b0 [ 177.712498][ C0] R13: 0000000000000000 R14: 00007fdc569f3d00 R15: 00007fdc56949400 [ 177.720314][ C0] [ 177.723216][ C0] NMI backtrace for cpu 0 [ 177.727348][ C0] CPU: 0 PID: 349 Comm: syz-executor189 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 177.737417][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 177.747302][ C0] Call Trace: [ 177.750434][ C0] [ 177.753120][ C0] dump_stack_lvl+0x151/0x1b7 [ 177.757641][ C0] ? io_uring_drop_tctx_refs+0x190/0x190 [ 177.763098][ C0] ? ttwu_do_wakeup+0x187/0x430 [ 177.767790][ C0] dump_stack+0x15/0x17 [ 177.771777][ C0] nmi_cpu_backtrace+0x2f7/0x300 [ 177.776641][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 177.782628][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 177.787921][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 177.792613][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 177.798509][ C0] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 177.804327][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 177.810228][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 177.815956][ C0] rcu_dump_cpu_stacks+0x1d8/0x330 [ 177.820908][ C0] print_cpu_stall+0x315/0x5f0 [ 177.825506][ C0] rcu_sched_clock_irq+0x989/0x12f0 [ 177.830544][ C0] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 177.836528][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 177.841563][ C0] update_process_times+0x198/0x200 [ 177.846593][ C0] tick_sched_timer+0x188/0x240 [ 177.851279][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 177.856660][ C0] __hrtimer_run_queues+0x41a/0xad0 [ 177.861787][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 177.866730][ C0] ? clockevents_program_event+0x22f/0x300 [ 177.872370][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 177.878272][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 177.883050][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 177.888779][ C0] sysvec_apic_timer_interrupt+0x95/0xc0 [ 177.894244][ C0] [ 177.897021][ C0] [ 177.899798][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 177.905622][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 177.910392][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 2b 02 13 04 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 177.929832][ C0] RSP: 0018:ffffc900007a7800 EFLAGS: 00000246 [ 177.935729][ C0] RAX: 0000000000000003 RBX: 1ffff920000f4f04 RCX: ffffffff8155068f [ 177.943542][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888119e42090 [ 177.951352][ C0] RBP: ffffc900007a78b0 R08: dffffc0000000000 R09: ffffed10233c8413 [ 177.959167][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 177.966980][ C0] R13: ffff888119e42090 R14: 0000000000000003 R15: 1ffff920000f4f08 [ 177.974793][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 177.980871][ C0] ? asm_common_interrupt+0x27/0x40 [ 177.986079][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 177.991022][ C0] ? pv_hash+0x86/0x150 [ 177.995012][ C0] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 178.000915][ C0] ? do_syscall_64+0x3d/0xb0 [ 178.005342][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 178.011589][ C0] ? __kasan_check_write+0x14/0x20 [ 178.016536][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 178.021310][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 178.026343][ C0] ? __local_bh_enable_ip+0x58/0x80 [ 178.031378][ C0] ? lock_sock_nested+0x266/0x300 [ 178.036235][ C0] ? unix_peer_get+0xe0/0xe0 [ 178.040666][ C0] sk_psock_link_pop+0x2e/0x170 [ 178.045352][ C0] ? unix_peer_get+0xe0/0xe0 [ 178.049778][ C0] sock_map_remove_links+0x25/0x570 [ 178.054811][ C0] ? __kasan_check_read+0x11/0x20 [ 178.059682][ C0] ? unix_peer_get+0xe0/0xe0 [ 178.064107][ C0] sock_map_close+0x2ac/0x4c0 [ 178.068611][ C0] ? sock_map_remove_links+0x570/0x570 [ 178.073909][ C0] ? rwsem_mark_wake+0x770/0x770 [ 178.078679][ C0] ? security_file_free+0xc6/0xe0 [ 178.083545][ C0] unix_release+0x82/0xc0 [ 178.087707][ C0] sock_close+0xdf/0x270 [ 178.091941][ C0] ? sock_mmap+0xa0/0xa0 [ 178.096016][ C0] __fput+0x3fe/0x910 [ 178.099862][ C0] ____fput+0x15/0x20 [ 178.103766][ C0] task_work_run+0x129/0x190 [ 178.108188][ C0] do_exit+0xc48/0x2ca0 [ 178.112189][ C0] ? put_task_struct+0x80/0x80 [ 178.116777][ C0] ? ptrace_notify+0x24c/0x350 [ 178.121391][ C0] ? do_notify_parent+0xa30/0xa30 [ 178.126244][ C0] do_group_exit+0x141/0x310 [ 178.130670][ C0] __x64_sys_exit_group+0x3f/0x40 [ 178.135524][ C0] do_syscall_64+0x3d/0xb0 [ 178.139779][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 178.145505][ C0] RIP: 0033:0x7fdc569781c9 [ 178.149763][ C0] Code: Unable to access opcode bytes at RIP 0x7fdc5697819f. [ 178.156972][ C0] RSP: 002b:00007fff964e63e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 178.165210][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdc569781c9 [ 178.173020][ C0] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 178.180833][ C0] RBP: 00007fdc569f32b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 178.188641][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdc569f32b0 [ 178.196467][ C0] R13: 0000000000000000 R14: 00007fdc569f3d00 R15: 00007fdc56949400 [ 178.204276][ C0] [ 178.207131][ C0] Sending NMI from CPU 0 to CPUs 1: [ 178.212195][ C1] NMI backtrace for cpu 1 [ 178.212207][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 178.212225][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 178.212235][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 178.212259][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 2b 02 13 04 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 178.212273][ C1] RSP: 0018:ffffc900001cf540 EFLAGS: 00000246 [ 178.212288][ C1] RAX: 0000000000000003 RBX: 1ffff92000039eac RCX: ffffffff8155068f [ 178.212301][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88810f843d98 [ 178.212314][ C1] RBP: ffffc900001cf5f0 R08: dffffc0000000000 R09: ffffed1021f087b4 [ 178.212327][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 178.212339][ C1] R13: ffff88810f843d98 R14: 0000000000000003 R15: 1ffff92000039eb0 [ 178.212351][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 178.212366][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.212379][ C1] CR2: 0000000000000000 CR3: 00000001227e5000 CR4: 00000000003506a0 [ 178.212393][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 178.212403][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 178.212414][ C1] Call Trace: [ 178.212420][ C1] [ 178.212426][ C1] ? show_regs+0x58/0x60 [ 178.212444][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 178.212465][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 178.212486][ C1] ? kvm_wait+0x147/0x180 [ 178.212502][ C1] ? kvm_wait+0x147/0x180 [ 178.212517][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 178.212536][ C1] ? nmi_handle+0xa8/0x280 [ 178.212553][ C1] ? kvm_wait+0x147/0x180 [ 178.212569][ C1] ? default_do_nmi+0x69/0x160 [ 178.212584][ C1] ? exc_nmi+0xaf/0x120 [ 178.212599][ C1] ? end_repeat_nmi+0x16/0x31 [ 178.212615][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 178.212637][ C1] ? kvm_wait+0x147/0x180 [ 178.212652][ C1] ? kvm_wait+0x147/0x180 [ 178.212668][ C1] ? kvm_wait+0x147/0x180 [ 178.212683][ C1] [ 178.212688][ C1] [ 178.212693][ C1] ? asm_common_interrupt+0x27/0x40 [ 178.212713][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 178.212729][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 178.212750][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 178.212771][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 178.212792][ C1] ? is_bpf_text_address+0x172/0x190 [ 178.212813][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 178.212831][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 178.212850][ C1] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 178.212871][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 178.212890][ C1] ? sock_map_unref+0x352/0x4d0 [ 178.212909][ C1] ? bpf_trace_run2+0xec/0x210 [ 178.212927][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 178.212945][ C1] ? sock_map_unref+0x352/0x4d0 [ 178.212964][ C1] ? sock_map_unref+0x352/0x4d0 [ 178.212982][ C1] ? __bpf_trace_kfree+0x6f/0x90 [ 178.212999][ C1] ? sock_map_unref+0x352/0x4d0 [ 178.213017][ C1] ? kfree+0x1f3/0x220 [ 178.213036][ C1] ? sock_map_unref+0x352/0x4d0 [ 178.213061][ C1] ? sock_hash_delete_elem+0x274/0x2f0 [ 178.213080][ C1] ? skb_release_data+0x8a9/0xa80 [ 178.213098][ C1] ? bpf_trace_run2+0xec/0x210 [ 178.213115][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 178.213132][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 178.213150][ C1] ? skb_release_data+0x8a9/0xa80 [ 178.213166][ C1] ? unwind_get_return_address+0x4d/0x90 [ 178.213185][ C1] ? arch_stack_walk+0xf3/0x140 [ 178.213205][ C1] ? skb_release_data+0x8a9/0xa80 [ 178.213222][ C1] ? __bpf_trace_kfree+0x6f/0x90 [ 178.213238][ C1] ? skb_release_data+0x8a9/0xa80 [ 178.213255][ C1] ? kfree+0x1f3/0x220 [ 178.213273][ C1] ? skb_release_data+0x8a9/0xa80 [ 178.213291][ C1] ? __kfree_skb+0x50/0x70 [ 178.213307][ C1] ? tcp_rtx_queue_unlink_and_free+0x203/0x720 [ 178.213330][ C1] ? tcp_ack+0x23e0/0x68a0 [ 178.213355][ C1] ? tcp_rcv_established+0x1ac0/0x1ac0 [ 178.213378][ C1] ? ktime_get+0x12f/0x160 [ 178.213395][ C1] ? tcp_rcv_established+0xcd6/0x1ac0 [ 178.213416][ C1] ? tcp_check_space+0x9d0/0x9d0 [ 178.213435][ C1] ? __kasan_check_read+0x11/0x20 [ 178.213453][ C1] ? ipv4_dst_check+0xe3/0x150 [ 178.213471][ C1] ? tcp_v4_do_rcv+0x3d7/0xa00 [ 178.213488][ C1] ? tcp_v4_rcv+0x23dd/0x2a70 [ 178.213504][ C1] ? get_stack_info+0x3b/0x100 [ 178.213527][ C1] ? __kasan_check_write+0x14/0x20 [ 178.213545][ C1] ? tcp_filter+0x90/0x90 [ 178.213562][ C1] ? ip_protocol_deliver_rcu+0x32f/0x710 [ 178.213583][ C1] ? ip_local_deliver+0x2c6/0x590 [ 178.213602][ C1] ? ip_protocol_deliver_rcu+0x710/0x710 [ 178.213621][ C1] ? ip_rcv_finish_core+0xb0d/0x1490 [ 178.213642][ C1] ? ip_sublist_rcv+0x7e2/0x980 [ 178.213660][ C1] ? packet_rcv+0x160/0x1150 [ 178.213680][ C1] ? ip_list_rcv+0x470/0x470 [ 178.213698][ C1] ? memset+0x35/0x40 [ 178.213714][ C1] ? ip_rcv_core+0x736/0xb50 [ 178.213733][ C1] ? ip_list_rcv+0x422/0x470 [ 178.213752][ C1] ? ip_rcv_finish+0xd0/0xd0 [ 178.213771][ C1] ? ip_rcv_finish+0xd0/0xd0 [ 178.213788][ C1] ? __netif_receive_skb_list_core+0x6b1/0x890 [ 178.213810][ C1] ? __netif_receive_skb+0x530/0x530 [ 178.213827][ C1] ? receive_buf+0x37ce/0x5720 [ 178.213847][ C1] ? netif_receive_skb_list_internal+0x967/0xcc0 [ 178.213869][ C1] ? virtnet_poll_tx+0x500/0x500 [ 178.213885][ C1] ? netif_receive_skb_list+0x2d0/0x2d0 [ 178.213906][ C1] ? virtqueue_get_buf_ctx+0x482/0xe30 [ 178.213925][ C1] ? detach_buf_split+0x71a/0xae0 [ 178.213944][ C1] ? napi_complete_done+0x344/0x770 [ 178.213961][ C1] ? __napi_schedule_irqoff+0x280/0x280 [ 178.213978][ C1] ? virtqueue_enable_cb_prepare+0x2c6/0x5b0 [ 178.213998][ C1] ? virtnet_poll+0xbee/0x1260 [ 178.214017][ C1] ? refill_work+0x220/0x220 [ 178.214034][ C1] ? __kasan_check_write+0x14/0x20 [ 178.214056][ C1] ? virtqueue_disable_cb+0xff/0x3a0 [ 178.214086][ C1] ? trace_xdp_exception+0x140/0x140 [ 178.214103][ C1] ? vring_interrupt+0x20b/0x300 [ 178.214121][ C1] ? __napi_poll+0xc4/0x5a0 [ 178.214137][ C1] ? net_rx_action+0x47d/0xc50 [ 178.214156][ C1] ? net_tx_action+0x550/0x550 [ 178.214172][ C1] ? native_sched_clock_from_tsc+0x100/0x130 [ 178.214190][ C1] ? irqtime_account_irq+0x79/0x3c0 [ 178.214208][ C1] ? __do_softirq+0x26d/0x5bf [ 178.214224][ C1] ? __irq_exit_rcu+0x50/0xf0 [ 178.214241][ C1] ? irq_exit_rcu+0x9/0x10 [ 178.214257][ C1] ? common_interrupt+0xb4/0xd0 [ 178.214275][ C1] [ 178.214280][ C1] [ 178.214285][ C1] ? asm_common_interrupt+0x27/0x40 [ 178.214304][ C1] ? acpi_idle_enter+0x3f9/0x760 [ 178.214320][ C1] ? acpi_idle_enter+0x40d/0x760 [ 178.214337][ C1] ? acpi_idle_enter+0x416/0x760 [ 178.214354][ C1] ? intel_idle_ibrs+0x130/0x130 [ 178.214371][ C1] ? cpuidle_enter_state+0x5e1/0x1550 [ 178.214390][ C1] ? cpuidle_enter_s2idle+0x600/0x600 [ 178.214408][ C1] ? menu_enable_device+0x380/0x380 [ 178.214426][ C1] ? sched_clock_cpu+0x18/0x3b0 [ 178.214443][ C1] ? cpuidle_enter+0x5f/0xa0 [ 178.214460][ C1] ? do_idle+0x36b/0x5d0 [ 178.214477][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 178.214494][ C1] ? _raw_spin_unlock+0x50/0x70 [ 178.214512][ C1] ? cpu_startup_entry+0x18/0x20 [ 178.214529][ C1] ? start_secondary+0x2e6/0x3a0 [ 178.214545][ C1] ? secondary_startup_64_no_verify+0xb1/0xbb [ 178.214564][ C1] [ 178.214576][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.375 msecs [ 309.045258][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 225s! [syz-executor189:349] [ 309.053699][ C0] Modules linked in: [ 309.057429][ C0] CPU: 0 PID: 349 Comm: syz-executor189 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 309.067695][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 309.077684][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 309.082444][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 2b 02 13 04 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 309.102401][ C0] RSP: 0018:ffffc900007a7800 EFLAGS: 00000246 [ 309.108304][ C0] RAX: 0000000000000003 RBX: 1ffff920000f4f04 RCX: ffffffff8155068f [ 309.116116][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888119e42090 [ 309.123926][ C0] RBP: ffffc900007a78b0 R08: dffffc0000000000 R09: ffffed10233c8413 [ 309.131737][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 309.139548][ C0] R13: ffff888119e42090 R14: 0000000000000003 R15: 1ffff920000f4f08 [ 309.147361][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 309.156125][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.162548][ C0] CR2: 00007fdc569f4110 CR3: 0000000006a0f000 CR4: 00000000003506b0 [ 309.170373][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 309.178172][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.185991][ C0] Call Trace: [ 309.189122][ C0] [ 309.191811][ C0] ? show_regs+0x58/0x60 [ 309.195879][ C0] ? watchdog_timer_fn+0x4b1/0x5f0 [ 309.200827][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 309.205947][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 309.211159][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 309.216099][ C0] ? clockevents_program_event+0x22f/0x300 [ 309.221741][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 309.227646][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 309.232594][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 309.238495][ C0] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 309.244137][ C0] [ 309.246911][ C0] [ 309.249702][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 309.255678][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 309.261754][ C0] ? kvm_wait+0x147/0x180 [ 309.265921][ C0] ? asm_common_interrupt+0x27/0x40 [ 309.270954][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 309.275902][ C0] ? pv_hash+0x86/0x150 [ 309.279894][ C0] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 309.285797][ C0] ? do_syscall_64+0x3d/0xb0 [ 309.291030][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 309.297254][ C0] ? __kasan_check_write+0x14/0x20 [ 309.302201][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 309.306973][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 309.312006][ C0] ? __local_bh_enable_ip+0x58/0x80 [ 309.317040][ C0] ? lock_sock_nested+0x266/0x300 [ 309.322007][ C0] ? unix_peer_get+0xe0/0xe0 [ 309.326436][ C0] sk_psock_link_pop+0x2e/0x170 [ 309.331120][ C0] ? unix_peer_get+0xe0/0xe0 [ 309.335545][ C0] sock_map_remove_links+0x25/0x570 [ 309.340584][ C0] ? __kasan_check_read+0x11/0x20 [ 309.345451][ C0] ? unix_peer_get+0xe0/0xe0 [ 309.349871][ C0] sock_map_close+0x2ac/0x4c0 [ 309.354385][ C0] ? sock_map_remove_links+0x570/0x570 [ 309.359765][ C0] ? rwsem_mark_wake+0x770/0x770 [ 309.364536][ C0] ? security_file_free+0xc6/0xe0 [ 309.369401][ C0] unix_release+0x82/0xc0 [ 309.373562][ C0] sock_close+0xdf/0x270 [ 309.377640][ C0] ? sock_mmap+0xa0/0xa0 [ 309.381736][ C0] __fput+0x3fe/0x910 [ 309.385550][ C0] ____fput+0x15/0x20 [ 309.389364][ C0] task_work_run+0x129/0x190 [ 309.393785][ C0] do_exit+0xc48/0x2ca0 [ 309.397780][ C0] ? put_task_struct+0x80/0x80 [ 309.402387][ C0] ? ptrace_notify+0x24c/0x350 [ 309.406980][ C0] ? do_notify_parent+0xa30/0xa30 [ 309.411839][ C0] do_group_exit+0x141/0x310 [ 309.416266][ C0] __x64_sys_exit_group+0x3f/0x40 [ 309.421125][ C0] do_syscall_64+0x3d/0xb0 [ 309.425378][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 309.431107][ C0] RIP: 0033:0x7fdc569781c9 [ 309.435360][ C0] Code: Unable to access opcode bytes at RIP 0x7fdc5697819f. [ 309.442563][ C0] RSP: 002b:00007fff964e63e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 309.450809][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdc569781c9 [ 309.458620][ C0] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 309.466432][ C0] RBP: 00007fdc569f32b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 309.474244][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdc569f32b0 [ 309.482056][ C0] R13: 0000000000000000 R14: 00007fdc569f3d00 R15: 00007fdc56949400 [ 309.489868][ C0]