./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor198383605 <...> Warning: Permanently added '10.128.0.102' (ED25519) to the list of known hosts. execve("./syz-executor198383605", ["./syz-executor198383605"], 0x7ffeb164c7b0 /* 10 vars */) = 0 brk(NULL) = 0x555555c21000 brk(0x555555c21d00) = 0x555555c21d00 arch_prctl(ARCH_SET_FS, 0x555555c21380) = 0 set_tid_address(0x555555c21650) = 294 set_robust_list(0x555555c21660, 24) = 0 rseq(0x555555c21ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor198383605", 4096) = 27 getrandom("\xa6\x63\x0c\x4b\xfb\xc4\x26\x60", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555c21d00 brk(0x555555c42d00) = 0x555555c42d00 brk(0x555555c43000) = 0x555555c43000 mprotect(0x7ff8909cb000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555c21650) = 295 ./strace-static-x86_64: Process 295 attached [pid 295] set_robust_list(0x555555c21660, 24) = 0 [pid 295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 295] setpgid(0, 0) = 0 [pid 295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 295] write(3, "1000", 4) = 4 [pid 295] close(3) = 0 [pid 295] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_LPM_TRIE, key_size=8, value_size=65537, max_entries=9, map_flags=BPF_F_NO_PREALLOC, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 295] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000740, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 295] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="timer_start", prog_fd=4}}, 16) = 5 [ 20.577274][ T28] audit: type=1400 audit(1712037115.649:66): avc: denied { execmem } for pid=294 comm="syz-executor198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.580142][ T28] audit: type=1400 audit(1712037115.649:67): avc: denied { bpf } for pid=295 comm="syz-executor198" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 20.583180][ T28] audit: type=1400 audit(1712037115.649:68): avc: denied { map_create } for pid=295 comm="syz-executor198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 120.595458][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 120.602220][ C1] rcu: 0-...!: (0 ticks this GP) idle=53dc/1/0x4000000000000000 softirq=1671/1671 fqs=0 [ 120.611856][ C1] (detected by 1, t=10002 jiffies, g=297, q=195 ncpus=2) [ 120.618795][ C1] Sending NMI from CPU 1 to CPUs 0: [ 120.623880][ C0] NMI backtrace for cpu 0 [ 120.623891][ C0] CPU: 0 PID: 288 Comm: sshd Not tainted 6.1.68-syzkaller-00102-g931187cc187d #0 [ 120.623907][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 120.623916][ C0] RIP: 0010:kvm_wait+0x117/0x180 [ 120.623943][ C0] Code: 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 53 41 0f b6 45 00 44 38 f0 0f 85 63 ff ff ff 66 90 0f 00 2d aa 10 11 04 f4 54 ff ff ff fa 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b [ 120.623956][ C0] RSP: 0018:ffffc90000e76a80 EFLAGS: 00000046 [ 120.623969][ C0] RAX: 0000000000000003 RBX: 1ffff920001ced54 RCX: ffffffff84ff1d4c [ 120.623980][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881f7027b80 [ 120.623991][ C0] RBP: ffffc90000e76b30 R08: dffffc0000000000 R09: ffffed103ee04f71 [ 120.624002][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 120.624012][ C0] R13: ffff8881f7027b80 R14: 0000000000000003 R15: 1ffff920001ced58 [ 120.624023][ C0] FS: 00007f114696d800(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 120.624036][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.624047][ C0] CR2: 000055d804a3a528 CR3: 0000000108dd9000 CR4: 00000000003506b0 [ 120.624060][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 120.624069][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 120.624078][ C0] Call Trace: [ 120.624083][ C0] [ 120.624091][ C0] ? show_regs+0x58/0x60 [ 120.624106][ C0] ? nmi_cpu_backtrace+0x285/0x2f0 [ 120.624123][ C0] ? nmi_trigger_cpumask_backtrace+0x3c0/0x3c0 [ 120.624142][ C0] ? kvm_wait+0x117/0x180 [ 120.624154][ C0] ? kvm_wait+0x117/0x180 [ 120.624167][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 120.624185][ C0] ? nmi_handle+0xa7/0x280 [ 120.624200][ C0] ? kvm_wait+0x117/0x180 [ 120.624213][ C0] ? default_do_nmi+0x69/0x160 [ 120.624228][ C0] ? exc_nmi+0xaf/0x120 [ 120.624241][ C0] ? end_repeat_nmi+0x16/0x31 [ 120.624264][ C0] ? __pv_queued_spin_lock_slowpath+0x67c/0xda0 [ 120.624284][ C0] ? kvm_wait+0x117/0x180 [ 120.624297][ C0] ? kvm_wait+0x117/0x180 [ 120.624310][ C0] ? kvm_wait+0x117/0x180 [ 120.624323][ C0] [ 120.624328][ C0] [ 120.624333][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 120.624348][ C0] ? pv_hash+0x86/0x150 [ 120.624367][ C0] __pv_queued_spin_lock_slowpath+0x6de/0xda0 [ 120.624389][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 120.624409][ C0] ? __kasan_check_read+0x11/0x20 [ 120.624432][ C0] _raw_spin_lock_irqsave+0x1a0/0x210 [ 120.624450][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 120.624467][ C0] ? sch_direct_xmit+0x38b/0x9b0 [ 120.624528][ C0] lock_timer_base+0x12f/0x270 [ 120.624547][ C0] __mod_timer+0x1c9/0xcf0 [ 120.624565][ C0] ? __dev_queue_xmit+0x1597/0x36e0 [ 120.624584][ C0] ? mod_timer_pending+0x30/0x30 [ 120.624603][ C0] ? __dev_queue_xmit+0x2a6/0x36e0 [ 120.624620][ C0] ? netdev_core_pick_tx+0x350/0x350 [ 120.624638][ C0] add_timer+0x68/0x80 [ 120.624655][ C0] __queue_delayed_work+0x16d/0x1f0 [ 120.624673][ C0] queue_delayed_work_on+0x10f/0x180 [ 120.624690][ C0] ? delayed_work_timer_fn+0x80/0x80 [ 120.624707][ C0] ? kasan_addr_to_slab+0xd/0x80 [ 120.624725][ C0] kvfree_call_rcu+0x490/0x800 [ 120.624743][ C0] ? __kasan_check_write+0x14/0x20 [ 120.624764][ C0] ? call_rcu+0x1340/0x1340 [ 120.624780][ C0] ? longest_prefix_match+0x331/0x650 [ 120.624802][ C0] trie_delete_elem+0x58d/0x760 [ 120.624824][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 120.624839][ C0] bpf_trace_run3+0x177/0x2e0 [ 120.624853][ C0] ? bpf_trace_run2+0x290/0x290 [ 120.624866][ C0] ? calc_wheel_index+0xe4/0xa50 [ 120.624886][ C0] ? debug_smp_processor_id+0x17/0x20 [ 120.624902][ C0] ? get_nohz_timer_target+0x79/0x740 [ 120.624920][ C0] __bpf_trace_timer_start+0x2b/0x40 [ 120.624938][ C0] enqueue_timer+0x303/0x480 [ 120.624958][ C0] __mod_timer+0x83d/0xcf0 [ 120.624978][ C0] ? mod_timer_pending+0x30/0x30 [ 120.624998][ C0] mod_timer+0x1f/0x30 [ 120.625015][ C0] sk_reset_timer+0x22/0xb0 [ 120.625034][ C0] tcp_rearm_rto+0x2d6/0x390 [ 120.625054][ C0] tcp_event_new_data_sent+0x242/0x3f0 [ 120.625071][ C0] tcp_write_xmit+0x152a/0x5f50 [ 120.625093][ C0] __tcp_push_pending_frames+0x98/0x2f0 [ 120.625109][ C0] tcp_push+0x48c/0x660 [ 120.625125][ C0] ? __kasan_check_read+0x11/0x20 [ 120.625146][ C0] tcp_sendmsg_locked+0x36af/0x4000 [ 120.625173][ C0] ? tcp_set_state+0x6c0/0x6c0 [ 120.625193][ C0] tcp_sendmsg+0x2f/0x50 [ 120.625210][ C0] inet_sendmsg+0xa1/0xc0 [ 120.625228][ C0] ? inet_send_prepare+0x4a0/0x4a0 [ 120.625249][ C0] sock_write_iter+0x394/0x4e0 [ 120.625265][ C0] ? sock_read_iter+0x4b0/0x4b0 [ 120.625282][ C0] ? fsnotify_perm+0x6a/0x5d0 [ 120.625303][ C0] vfs_write+0x902/0xeb0 [ 120.625320][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 120.625341][ C0] ? file_end_write+0x1c0/0x1c0 [ 120.625358][ C0] ? __set_current_blocked+0x2a5/0x2f0 [ 120.625378][ C0] ? __kasan_check_read+0x11/0x20 [ 120.625397][ C0] ? __fdget_pos+0x204/0x390 [ 120.625416][ C0] ksys_write+0x199/0x2c0 [ 120.625433][ C0] ? __x64_sys_rt_sigprocmask+0xb0/0xb0 [ 120.625451][ C0] ? __ia32_sys_read+0x90/0x90 [ 120.625468][ C0] ? debug_smp_processor_id+0x17/0x20 [ 120.625488][ C0] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 120.625506][ C0] __x64_sys_write+0x7b/0x90 [ 120.625524][ C0] do_syscall_64+0x3d/0xb0 [ 120.625544][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.625568][ C0] RIP: 0033:0x7f1146516bf2 [ 120.625584][ C0] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83 [ 120.625596][ C0] RSP: 002b:00007ffc762aa248 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 120.625610][ C0] RAX: ffffffffffffffda RBX: 000000000000062c RCX: 00007f1146516bf2 [ 120.625621][ C0] RDX: 000000000000062c RSI: 000055d804a42080 RDI: 0000000000000004 [ 120.625630][ C0] RBP: 000055d804a332f0 R08: 0000000000000000 R09: 0000000000000000 [ 120.625639][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000055d8036c9aa4 [ 120.625649][ C0] R13: 0000000000000014 R14: 000055d8036ca3e8 R15: 00007ffc762aa2b8 [ 120.625662][ C0] [ 120.625668][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.788 msecs [ 120.625828][ C1] rcu: rcu_preempt kthread starved for 10002 jiffies! g297 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 121.239675][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 121.249447][ C1] rcu: RCU grace-period kthread stack dump: [ 121.255181][ C1] task:rcu_preempt state:R running task stack:28040 pid:14 ppid:2 flags:0x00004000 [ 121.265764][ C1] Call Trace: [ 121.268887][ C1] [ 121.271668][ C1] __schedule+0xca7/0x1550 [ 121.275929][ C1] ? __sched_text_start+0x8/0x8 [ 121.280697][ C1] ? __kasan_check_write+0x14/0x20 [ 121.285638][ C1] schedule+0xc3/0x180 [ 121.289550][ C1] schedule_timeout+0x18c/0x380 [ 121.294237][ C1] ? _raw_spin_unlock_irq+0x4d/0x70 [ 121.299276][ C1] ? console_conditional_schedule+0x10/0x10 [ 121.304998][ C1] ? update_process_times+0x1b0/0x1b0 [ 121.310209][ C1] ? prepare_to_swait_event+0x308/0x320 [ 121.315593][ C1] rcu_gp_fqs_loop+0x2ed/0x1060 [ 121.320272][ C1] ? _raw_spin_unlock_irq+0x4d/0x70 [ 121.325303][ C1] ? rcu_gp_init+0xc7f/0xf80 [ 121.329732][ C1] ? rcu_gp_init+0xf80/0xf80 [ 121.334162][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 121.339807][ C1] ? finish_swait+0x17d/0x1b0 [ 121.344310][ C1] rcu_gp_kthread+0xa3/0x390 [ 121.348742][ C1] ? queued_spin_lock_slowpath+0x50/0x50 [ 121.354205][ C1] ? set_cpus_allowed_ptr+0xa4/0xe0 [ 121.359347][ C1] ? __kasan_check_read+0x11/0x20 [ 121.364204][ C1] ? __kthread_parkme+0x12d/0x180 [ 121.369066][ C1] kthread+0x26d/0x300 [ 121.372972][ C1] ? queued_spin_lock_slowpath+0x50/0x50 [ 121.378438][ C1] ? kthread_blkcg+0xd0/0xd0 [ 121.382863][ C1] ret_from_fork+0x1f/0x30 [ 121.387118][ C1] [ 121.389980][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 121.396152][ C1] CPU: 1 PID: 295 Comm: syz-executor198 Not tainted 6.1.68-syzkaller-00102-g931187cc187d #0 [ 121.406038][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 121.415938][ C1] RIP: 0010:smp_call_function_many_cond+0x867/0x930 [ 121.422355][ C1] Code: 00 00 00 fc ff df 75 0a e8 46 9a 09 00 e9 2f ff ff ff f3 90 42 0f b6 04 3b 84 c0 75 14 41 f7 06 01 00 00 00 0f 84 12 ff ff ff 24 9a 09 00 eb e1 44 89 f1 80 e1 07 80 c1 03 38 c1 7c df 4c 89 [ 121.441904][ C1] RSP: 0018:ffffc90000ea7620 EFLAGS: 00000202 [ 121.447804][ C1] RAX: 0000000000000000 RBX: 1ffff1103ee07919 RCX: ffff888121709440 [ 121.455616][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 121.463429][ C1] RBP: ffffc90000ea7738 R08: ffffffff816bd725 R09: ffffed103ee2707b [ 121.471237][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 121.479049][ C1] R13: 0000000800000000 R14: ffff8881f703c8c8 R15: dffffc0000000000 [ 121.486947][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 121.495716][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.502136][ C1] CR2: 00007ff8909d2110 CR3: 0000000006c0f000 CR4: 00000000003506a0 [ 121.509950][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 121.517759][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 121.525570][ C1] Call Trace: [ 121.528693][ C1] [ 121.531386][ C1] ? show_regs+0x58/0x60 [ 121.535462][ C1] ? dump_cpu_task+0x3c/0x70 [ 121.539891][ C1] ? rcu_check_gp_kthread_starvation+0x1d1/0x240 [ 121.546051][ C1] ? print_other_cpu_stall+0x1140/0x1300 [ 121.551522][ C1] ? print_cpu_stall+0x590/0x590 [ 121.556294][ C1] ? acct_account_cputime+0x2b0/0x2c0 [ 121.561501][ C1] ? rcu_sched_clock_irq+0xaeb/0x1330 [ 121.566709][ C1] ? rcu_boost_kthread_setaffinity+0x5a0/0x5a0 [ 121.572703][ C1] ? hrtimer_run_queues+0x15f/0x440 [ 121.577732][ C1] ? update_wall_time+0x25/0x30 [ 121.582419][ C1] ? update_process_times+0x149/0x1b0 [ 121.587634][ C1] ? tick_sched_timer+0x188/0x240 [ 121.592497][ C1] ? tick_setup_sched_timer+0x490/0x490 [ 121.597867][ C1] ? __hrtimer_run_queues+0x41a/0xad0 [ 121.603083][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 121.608021][ C1] ? clockevents_program_event+0x22f/0x300 [ 121.613753][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 121.619741][ C1] ? hrtimer_interrupt+0x40c/0xaa0 [ 121.624692][ C1] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 121.630763][ C1] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 121.636490][ C1] [ 121.639266][ C1] [ 121.642045][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 121.648032][ C1] ? smp_call_function_many_cond+0x835/0x930 [ 121.653865][ C1] ? smp_call_function_many_cond+0x867/0x930 [ 121.659666][ C1] ? text_poke_sync+0x30/0x30 [ 121.664175][ C1] ? smp_call_function_many+0x40/0x40 [ 121.669383][ C1] ? text_poke_sync+0x30/0x30 [ 121.673898][ C1] on_each_cpu_cond_mask+0x40/0x80 [ 121.678844][ C1] ? enqueue_timer+0x16e/0x480 [ 121.683443][ C1] text_poke_bp_batch+0x1e9/0x730 [ 121.688303][ C1] ? text_poke_loc_init+0x680/0x680 [ 121.693337][ C1] ? __kasan_check_write+0x14/0x20 [ 121.698304][ C1] ? mutex_lock+0xb1/0x1e0 [ 121.702559][ C1] ? __mutex_lock_slowpath+0x10/0x10 [ 121.707662][ C1] ? bit_wait_io_timeout+0x120/0x120 [ 121.712874][ C1] ? text_poke_queue+0xe4/0x1a0 [ 121.717558][ C1] text_poke_finish+0x1a/0x30 [ 121.722078][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 121.727896][ C1] __jump_label_update+0x36a/0x380 [ 121.732830][ C1] jump_label_update+0x3af/0x450 [ 121.737604][ C1] static_key_disable_cpuslocked+0xcd/0x1b0 [ 121.743340][ C1] static_key_disable+0x1a/0x30 [ 121.748017][ C1] tracepoint_probe_unregister+0x60a/0x900 [ 121.753656][ C1] ? __bpf_trace_timer_class+0x30/0x30 [ 121.758951][ C1] bpf_probe_unregister+0x61/0x70 [ 121.763813][ C1] bpf_raw_tp_link_release+0x63/0x90 [ 121.768943][ C1] bpf_link_free+0x129/0x3f0 [ 121.773464][ C1] ? bpf_link_put_deferred+0x20/0x20 [ 121.778870][ C1] ? bpf_prog_get_stats+0x290/0x290 [ 121.783916][ C1] bpf_link_release+0x170/0x180 [ 121.788790][ C1] ? bpf_prog_get_stats+0x290/0x290 [ 121.793816][ C1] __fput+0x3ab/0x870 [ 121.797650][ C1] ____fput+0x15/0x20 [ 121.801711][ C1] task_work_run+0x24d/0x2e0 [ 121.806163][ C1] ? task_work_cancel+0x2b0/0x2b0 [ 121.810997][ C1] ? __kasan_check_write+0x14/0x20 [ 121.815949][ C1] ? exit_task_namespaces+0xc2/0xd0 [ 121.820995][ C1] do_exit+0xbd5/0x2b80 [ 121.824976][ C1] ? put_task_struct+0x80/0x80 [ 121.829581][ C1] ? __kasan_check_write+0x14/0x20 [ 121.834603][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 121.839553][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 121.844941][ C1] ? zap_other_threads+0x29c/0x2d0 [ 121.849888][ C1] do_group_exit+0x21a/0x2d0 [ 121.854306][ C1] __x64_sys_exit_group+0x3f/0x40 [ 121.859174][ C1] do_syscall_64+0x3d/0xb0 [ 121.863602][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.869326][ C1] RIP: 0033:0x7ff890955f09 [ 121.873575][ C1] Code: Unable to access opcode bytes at 0x7ff890955edf. [ 121.880430][ C1] RSP: 002b:00007ffeee271058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 121.888675][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff890955f09 [ 121.896484][ C1] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 121.904297][ C1] RBP: 00007ff8909d12b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 121.912106][ C1] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ff8909d12b0 [ 121.919988][ C1] R13: 0000000000000000 R14: 00007ff8909d1d00 R15: 00007ff890927170 [ 121.927743][ C1] [ 265.054356][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 246s! [syz-executor198:295] [ 265.062787][ C1] Modules linked in: [ 265.066508][ C1] CPU: 1 PID: 295 Comm: syz-executor198 Not tainted 6.1.68-syzkaller-00102-g931187cc187d #0 [ 265.076399][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 265.086295][ C1] RIP: 0010:smp_call_function_many_cond+0x851/0x930 [ 265.092716][ C1] Code: 3e 44 89 fe 83 e6 01 31 ff e8 0b 9e 09 00 41 83 e7 01 49 bf 00 00 00 00 00 fc ff df 75 0a e8 46 9a 09 00 e9 2f ff ff ff f3 90 <42> 0f b6 04 3b 84 c0 75 14 41 f7 06 01 00 00 00 0f 84 12 ff ff ff [ 265.112593][ C1] RSP: 0018:ffffc90000ea7620 EFLAGS: 00000293 [ 265.119273][ C1] RAX: ffffffff816bd75c RBX: 1ffff1103ee07919 RCX: ffff888121709440 [ 265.127087][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 265.134938][ C1] RBP: ffffc90000ea7738 R08: ffffffff816bd725 R09: ffffed103ee2707b [ 265.142707][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 265.150520][ C1] R13: 0000000800000000 R14: ffff8881f703c8c8 R15: dffffc0000000000 [ 265.158331][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 265.167097][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.173521][ C1] CR2: 00007ff8909d2110 CR3: 0000000006c0f000 CR4: 00000000003506a0 [ 265.181338][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.189141][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.196952][ C1] Call Trace: [ 265.200079][ C1] [ 265.202772][ C1] ? show_regs+0x58/0x60 [ 265.206846][ C1] ? watchdog_timer_fn+0x4b1/0x5f0 [ 265.211797][ C1] ? proc_watchdog_cpumask+0xf0/0xf0 [ 265.216913][ C1] ? __hrtimer_run_queues+0x41a/0xad0 [ 265.222124][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 265.227070][ C1] ? clockevents_program_event+0x22f/0x300 [ 265.232713][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 265.238614][ C1] ? hrtimer_interrupt+0x40c/0xaa0 [ 265.243565][ C1] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 265.249461][ C1] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 265.255102][ C1] [ 265.257879][ C1] [ 265.260659][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 265.266646][ C1] ? smp_call_function_many_cond+0x835/0x930 [ 265.272462][ C1] ? smp_call_function_many_cond+0x86c/0x930 [ 265.278277][ C1] ? smp_call_function_many_cond+0x851/0x930 [ 265.284095][ C1] ? text_poke_sync+0x30/0x30 [ 265.288604][ C1] ? smp_call_function_many+0x40/0x40 [ 265.293813][ C1] ? text_poke_sync+0x30/0x30 [ 265.298331][ C1] on_each_cpu_cond_mask+0x40/0x80 [ 265.303282][ C1] ? enqueue_timer+0x16e/0x480 [ 265.307875][ C1] text_poke_bp_batch+0x1e9/0x730 [ 265.312738][ C1] ? text_poke_loc_init+0x680/0x680 [ 265.317929][ C1] ? __kasan_check_write+0x14/0x20 [ 265.322802][ C1] ? mutex_lock+0xb1/0x1e0 [ 265.327067][ C1] ? __mutex_lock_slowpath+0x10/0x10 [ 265.332174][ C1] ? bit_wait_io_timeout+0x120/0x120 [ 265.337354][ C1] ? text_poke_queue+0xe4/0x1a0 [ 265.341981][ C1] text_poke_finish+0x1a/0x30 [ 265.346495][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 265.352311][ C1] __jump_label_update+0x36a/0x380 [ 265.357256][ C1] jump_label_update+0x3af/0x450 [ 265.362030][ C1] static_key_disable_cpuslocked+0xcd/0x1b0 [ 265.367759][ C1] static_key_disable+0x1a/0x30 [ 265.372444][ C1] tracepoint_probe_unregister+0x60a/0x900 [ 265.378088][ C1] ? __bpf_trace_timer_class+0x30/0x30 [ 265.383383][ C1] bpf_probe_unregister+0x61/0x70 [ 265.388240][ C1] bpf_raw_tp_link_release+0x63/0x90 [ 265.393364][ C1] bpf_link_free+0x129/0x3f0 [ 265.397789][ C1] ? bpf_link_put_deferred+0x20/0x20 [ 265.402911][ C1] ? bpf_prog_get_stats+0x290/0x290 [ 265.407942][ C1] bpf_link_release+0x170/0x180 [ 265.412629][ C1] ? bpf_prog_get_stats+0x290/0x290 [ 265.417662][ C1] __fput+0x3ab/0x870 [ 265.421482][ C1] ____fput+0x15/0x20 [ 265.425301][ C1] task_work_run+0x24d/0x2e0 [ 265.429725][ C1] ? task_work_cancel+0x2b0/0x2b0 [ 265.434586][ C1] ? __kasan_check_write+0x14/0x20 [ 265.439535][ C1] ? exit_task_namespaces+0xc2/0xd0 [ 265.444568][ C1] do_exit+0xbd5/0x2b80 [ 265.448561][ C1] ? put_task_struct+0x80/0x80 [ 265.453159][ C1] ? __kasan_check_write+0x14/0x20 [ 265.458109][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 265.463065][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 265.468436][ C1] ? zap_other_threads+0x29c/0x2d0 [ 265.473479][ C1] do_group_exit+0x21a/0x2d0 [ 265.477903][ C1] __x64_sys_exit_group+0x3f/0x40 [ 265.482760][ C1] do_syscall_64+0x3d/0xb0 [ 265.487011][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 265.492739][ C1] RIP: 0033:0x7ff890955f09 [ 265.496991][ C1] Code: Unable to access opcode bytes at 0x7ff890955edf. [ 265.503846][ C1] RSP: 002b:00007ffeee271058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 265.512092][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff890955f09 [ 265.519904][ C1] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 265.527722][ C1] RBP: 00007ff8909d12b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 265.535532][ C1] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ff8909d12b0 [ 265.543339][ C1] R13: 0000000000000000 R14: 00007ff8909d1d00 R15: 00007ff890927170 [ 265.551156][ C1]