./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3553007012 <...> Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts. execve("./syz-executor3553007012", ["./syz-executor3553007012"], 0x7ffc5f8f7ab0 /* 10 vars */) = 0 brk(NULL) = 0x5555558c8000 brk(0x5555558c8d00) = 0x5555558c8d00 arch_prctl(ARCH_SET_FS, 0x5555558c8380) = 0 set_tid_address(0x5555558c8650) = 367 set_robust_list(0x5555558c8660, 24) = 0 rseq(0x5555558c8ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3553007012", 4096) = 28 getrandom("\xe8\x87\x77\xed\x87\x36\x40\x43", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555558c8d00 brk(0x5555558e9d00) = 0x5555558e9d00 brk(0x5555558ea000) = 0x5555558ea000 mprotect(0x7f424ee84000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558c8650) = 368 ./strace-static-x86_64: Process 368 attached [pid 368] set_robust_list(0x5555558c8660, 24) = 0 [pid 368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 368] setpgid(0, 0) = 0 [pid 368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 368] write(3, "1000", 4) = 4 [pid 368] close(3) = 0 [pid 368] write(1, "executing program\n", 18executing program ) = 18 [pid 368] socketpair(AF_UNIX, SOCK_STREAM, 0, [3, 4]) = 0 [pid 368] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=2, value_size=4, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 368] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000040, value=0x20000140, flags=BPF_ANY}, 32) = 0 [pid 368] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [ 95.184301][ T30] audit: type=1400 audit(1724560578.306:66): avc: denied { execmem } for pid=367 comm="syz-executor355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 95.210034][ T30] audit: type=1400 audit(1724560578.336:67): avc: denied { map_create } for pid=368 comm="syz-executor355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 95.229749][ T30] audit: type=1400 audit(1724560578.336:68): avc: denied { map_read map_write } for pid=368 comm="syz-executor355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 95.249822][ T30] audit: type=1400 audit(1724560578.336:69): avc: denied { prog_load } for pid=368 comm="syz-executor355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 95.269070][ T30] audit: type=1400 audit(1724560578.336:70): avc: denied { bpf } for pid=368 comm="syz-executor355" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.289807][ T30] audit: type=1400 audit(1724560578.336:71): avc: denied { perfmon } for pid=368 comm="syz-executor355" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [pid 368] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 6 [pid 368] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=6}}, 16) = 7 [pid 368] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 15, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 368] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_FLOW_DISSECTOR, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 8 [ 95.372452][ T30] audit: type=1400 audit(1724560578.496:72): avc: denied { prog_run } for pid=368 comm="syz-executor355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 195.386362][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 195.392824][ C1] rcu: 1-...!: (10013 ticks this GP) idle=713/1/0x4000000000000000 softirq=2351/2355 fqs=0 last_accelerate: afc6/d6d6 dyntick_enabled: 1 [ 195.406694][ C1] (t=10000 jiffies g=1013 q=7) [ 195.411373][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 9999 jiffies! g1013 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 195.423351][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=806 [ 195.430904][ C1] rcu: rcu_preempt kthread starved for 10000 jiffies! g1013 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 195.442011][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 195.451822][ C1] rcu: RCU grace-period kthread stack dump: [ 195.457561][ C1] task:rcu_preempt state:I stack:28328 pid: 14 ppid: 2 flags:0x00004000 [ 195.466587][ C1] Call Trace: [ 195.469699][ C1] [ 195.472495][ C1] __schedule+0xccc/0x1590 [ 195.476730][ C1] ? release_firmware_map_entry+0x190/0x190 [ 195.482456][ C1] ? __kasan_check_write+0x14/0x20 [ 195.487407][ C1] ? __kasan_check_write+0x14/0x20 [ 195.492351][ C1] schedule+0x11f/0x1e0 [ 195.496348][ C1] schedule_timeout+0x18c/0x370 [ 195.501030][ C1] ? console_conditional_schedule+0x30/0x30 [ 195.506759][ C1] ? update_process_times+0x200/0x200 [ 195.511967][ C1] ? prepare_to_swait_event+0x308/0x320 [ 195.517349][ C1] rcu_gp_fqs_loop+0x2af/0xf80 [ 195.521956][ C1] ? debug_smp_processor_id+0x17/0x20 [ 195.527154][ C1] ? __note_gp_changes+0x4ab/0x920 [ 195.532102][ C1] ? rcu_gp_init+0xc30/0xc30 [ 195.536527][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 195.541560][ C1] ? rcu_gp_init+0x9cf/0xc30 [ 195.545987][ C1] rcu_gp_kthread+0xa4/0x350 [ 195.550415][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 195.555101][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 195.559616][ C1] ? __kasan_check_read+0x11/0x20 [ 195.564474][ C1] ? __kthread_parkme+0xb2/0x200 [ 195.569257][ C1] kthread+0x421/0x510 [ 195.573153][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 195.577666][ C1] ? kthread_blkcg+0xd0/0xd0 [ 195.582093][ C1] ret_from_fork+0x1f/0x30 [ 195.586348][ C1] [ 195.589229][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 195.595376][ C1] Sending NMI from CPU 1 to CPUs 0: [ 195.600433][ C0] NMI backtrace for cpu 0 [ 195.600453][ C0] CPU: 0 PID: 89 Comm: klogd Not tainted 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 195.600468][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 195.600477][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 195.600495][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 6b ef 12 04 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 195.600507][ C0] RSP: 0018:ffffc900009d7600 EFLAGS: 00000246 [ 195.600520][ C0] RAX: 0000000000000001 RBX: 1ffff9200013aec4 RCX: 1ffffffff0d5ab14 [ 195.600531][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7038ad4 [ 195.600540][ C0] RBP: ffffc900009d76b0 R08: dffffc0000000000 R09: ffffed103ee0715b [ 195.600551][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 195.600562][ C0] R13: ffff8881f7038ad4 R14: 0000000000000001 R15: 1ffff9200013aec8 [ 195.600572][ C0] FS: 00007fca86b34380(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 195.600586][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.600596][ C0] CR2: 000000000064a110 CR3: 000000010c614000 CR4: 00000000003506b0 [ 195.600609][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 195.600618][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 195.600627][ C0] Call Trace: [ 195.600631][ C0] [ 195.600636][ C0] ? show_regs+0x58/0x60 [ 195.600652][ C0] ? nmi_cpu_backtrace+0x29f/0x300 [ 195.600669][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 195.600687][ C0] ? kvm_wait+0x147/0x180 [ 195.600699][ C0] ? kvm_wait+0x147/0x180 [ 195.600712][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 195.600728][ C0] ? nmi_handle+0xa8/0x280 [ 195.600742][ C0] ? kvm_wait+0x147/0x180 [ 195.600755][ C0] ? default_do_nmi+0x69/0x160 [ 195.600769][ C0] ? exc_nmi+0xad/0x100 [ 195.600781][ C0] ? end_repeat_nmi+0x16/0x31 [ 195.600796][ C0] ? kvm_wait+0x147/0x180 [ 195.600809][ C0] ? kvm_wait+0x147/0x180 [ 195.600822][ C0] ? kvm_wait+0x147/0x180 [ 195.600835][ C0] [ 195.600839][ C0] [ 195.600843][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 195.600861][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 195.600876][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 195.600895][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 195.600911][ C0] ? desc_read+0x1bb/0x420 [ 195.600927][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 195.600942][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 195.600957][ C0] ? _prb_read_valid+0xb43/0xbd0 [ 195.600971][ C0] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 195.600990][ C0] sock_hash_delete_elem+0x177/0x400 [ 195.601007][ C0] ? sock_hash_lookup+0x610/0x610 [ 195.601022][ C0] ? sprintf+0xd6/0x120 [ 195.601036][ C0] ? syslog_print+0x8fe/0x990 [ 195.601050][ C0] bpf_prog_586ab708469db861+0x41/0xca8 [ 195.601066][ C0] bpf_trace_run2+0xec/0x210 [ 195.601082][ C0] ? __kasan_check_write+0x14/0x20 [ 195.601097][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 195.601112][ C0] ? syslog_print+0x8fe/0x990 [ 195.601125][ C0] ? syslog_print+0x8fe/0x990 [ 195.601139][ C0] __bpf_trace_kfree+0x6f/0x90 [ 195.601153][ C0] ? syslog_print+0x8fe/0x990 [ 195.601166][ C0] kfree+0x1f3/0x220 [ 195.601181][ C0] ? __kasan_check_read+0x11/0x20 [ 195.601196][ C0] syslog_print+0x8fe/0x990 [ 195.601212][ C0] ? do_syslog+0x830/0x830 [ 195.601227][ C0] ? avc_has_perm_noaudit+0x430/0x430 [ 195.601244][ C0] ? cap_capable+0x1d2/0x270 [ 195.601258][ C0] ? io_schedule+0x120/0x120 [ 195.601273][ C0] do_syslog+0x340/0x830 [ 195.601287][ C0] ? devkmsg_release+0x130/0x130 [ 195.601303][ C0] ? fpu_flush_thread+0xf0/0xf0 [ 195.601319][ C0] ? debug_smp_processor_id+0x17/0x20 [ 195.601337][ C0] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 195.601353][ C0] __x64_sys_syslog+0x7c/0x90 [ 195.601367][ C0] x64_sys_call+0x2f9/0x9a0 [ 195.601381][ C0] do_syscall_64+0x3b/0xb0 [ 195.601396][ C0] ? clear_bhb_loop+0x35/0x90 [ 195.601408][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 195.601425][ C0] RIP: 0033:0x7fca86c95fa7 [ 195.601441][ C0] Code: 73 01 c3 48 8b 0d 81 ce 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 51 ce 0c 00 f7 d8 64 89 01 48 [ 195.601453][ C0] RSP: 002b:00007ffc65cafd68 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 195.601467][ C0] RAX: ffffffffffffffda RBX: 00007fca86e344a0 RCX: 00007fca86c95fa7 [ 195.601477][ C0] RDX: 00000000000003ff RSI: 00007fca86e344a0 RDI: 0000000000000002 [ 195.601486][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 56578c4e58b4dca6 [ 195.601496][ C0] R10: 0000000000004000 R11: 0000000000000206 R12: 00007fca86e344a0 [ 195.601505][ C0] R13: 00007fca86e24212 R14: 00007fca86e34592 R15: 00007fca86e34592 [ 195.601518][ C0] [ 195.601527][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.097 msecs [ 195.602448][ C1] NMI backtrace for cpu 1 [ 196.077606][ C1] CPU: 1 PID: 368 Comm: syz-executor355 Not tainted 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 196.087662][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 196.097558][ C1] Call Trace: [ 196.100689][ C1] [ 196.103374][ C1] dump_stack_lvl+0x151/0x1c0 [ 196.107884][ C1] ? io_uring_drop_tctx_refs+0x190/0x190 [ 196.113354][ C1] ? ttwu_do_wakeup+0x187/0x430 [ 196.118039][ C1] dump_stack+0x15/0x20 [ 196.122029][ C1] nmi_cpu_backtrace+0x2f7/0x300 [ 196.126807][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 196.132792][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 196.138087][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 196.142774][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 196.148675][ C1] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 196.154490][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 196.160393][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 196.166119][ C1] rcu_dump_cpu_stacks+0x1d8/0x330 [ 196.171070][ C1] print_cpu_stall+0x315/0x5f0 [ 196.175668][ C1] rcu_sched_clock_irq+0x989/0x12f0 [ 196.180701][ C1] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 196.186693][ C1] ? hrtimer_run_queues+0x15f/0x440 [ 196.191724][ C1] update_process_times+0x198/0x200 [ 196.196758][ C1] tick_sched_timer+0x188/0x240 [ 196.201443][ C1] ? tick_setup_sched_timer+0x480/0x480 [ 196.206826][ C1] __hrtimer_run_queues+0x41a/0xad0 [ 196.211861][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 196.216807][ C1] ? clockevents_program_event+0x22f/0x300 [ 196.222447][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 196.228351][ C1] hrtimer_interrupt+0x40c/0xaa0 [ 196.233127][ C1] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 196.238853][ C1] sysvec_apic_timer_interrupt+0x95/0xc0 [ 196.244320][ C1] [ 196.247096][ C1] [ 196.249873][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 196.255690][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 196.260463][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 6b ef 12 04 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 196.279904][ C1] RSP: 0018:ffffc90000957460 EFLAGS: 00000246 [ 196.285805][ C1] RAX: 0000000000000003 RBX: 1ffff9200012ae90 RCX: ffffffff81552d3f [ 196.293616][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881210ea0d8 [ 196.301427][ C1] RBP: ffffc90000957510 R08: dffffc0000000000 R09: ffffed102421d41c [ 196.309239][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 196.317050][ C1] R13: ffff8881210ea0d8 R14: 0000000000000003 R15: 1ffff9200012ae94 [ 196.324863][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 196.331029][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 196.337014][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 196.341959][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 196.348037][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 196.353938][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 196.360188][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 196.364959][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 196.369993][ C1] ? 0xffffffffa0026358 [ 196.373987][ C1] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 196.379281][ C1] sock_hash_delete_elem+0x177/0x400 [ 196.384401][ C1] ? sock_hash_lookup+0x610/0x610 [ 196.389267][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 196.394555][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 196.399244][ C1] ? sock_map_unref+0x352/0x4d0 [ 196.403929][ C1] bpf_prog_586ab708469db861+0x41/0xca8 [ 196.409310][ C1] bpf_trace_run2+0xec/0x210 [ 196.413743][ C1] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 196.419379][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 196.424064][ C1] ? sock_map_unref+0x352/0x4d0 [ 196.428752][ C1] ? sock_map_unref+0x352/0x4d0 [ 196.433438][ C1] __bpf_trace_kfree+0x6f/0x90 [ 196.438039][ C1] ? sock_map_unref+0x352/0x4d0 [ 196.442723][ C1] kfree+0x1f3/0x220 [ 196.446460][ C1] sock_map_unref+0x352/0x4d0 [ 196.450970][ C1] sock_hash_delete_elem+0x388/0x400 [ 196.456091][ C1] ? sock_hash_lookup+0x610/0x610 [ 196.460952][ C1] bpf_prog_cbcf82cd0a495324+0x45/0x35c [ 196.466335][ C1] bpf_flow_dissect+0x128/0x3e0 [ 196.471021][ C1] bpf_prog_test_run_flow_dissector+0x51a/0x860 [ 196.477098][ C1] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 196.482476][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 196.487161][ C1] ? finish_task_switch+0x167/0x7b0 [ 196.492198][ C1] ? __kasan_check_read+0x11/0x20 [ 196.497056][ C1] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 196.502437][ C1] bpf_prog_test_run+0x3b0/0x630 [ 196.507212][ C1] ? bpf_prog_query+0x220/0x220 [ 196.511898][ C1] ? selinux_bpf+0xd2/0x100 [ 196.516239][ C1] ? security_bpf+0x82/0xb0 [ 196.520577][ C1] __sys_bpf+0x525/0x760 [ 196.524656][ C1] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 196.529865][ C1] ? __kasan_check_read+0x11/0x20 [ 196.534724][ C1] __x64_sys_bpf+0x7c/0x90 [ 196.538988][ C1] x64_sys_call+0x87f/0x9a0 [ 196.543318][ C1] do_syscall_64+0x3b/0xb0 [ 196.547571][ C1] ? clear_bhb_loop+0x35/0x90 [ 196.552085][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 196.557813][ C1] RIP: 0033:0x7f424ee11279 [ 196.562065][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 196.581591][ C1] RSP: 002b:00007ffd1d5c1be8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.589835][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f424ee11279 [ 196.597649][ C1] RDX: 0000000000000050 RSI: 0000000020000180 RDI: 000000000000000a [ 196.605458][ C1] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000006 [ 196.613269][ C1] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 196.621081][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 196.628898][ C1] [ 331.046504][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 226s! [klogd:89] [ 331.053973][ C0] Modules linked in: [ 331.056502][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 226s! [syz-executor355:368] [ 331.057709][ C0] CPU: 0 PID: 89 Comm: klogd Not tainted 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 331.066121][ C1] Modules linked in: [ 331.075234][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 331.078983][ C1] CPU: 1 PID: 368 Comm: syz-executor355 Not tainted 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 331.088873][ C0] RIP: 0010:__pv_queued_spin_lock_slowpath+0x38b/0xc40 [ 331.099882][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 331.106574][ C0] Code: 00 00 00 00 00 fc ff df 41 0f b6 04 16 84 c0 0f 85 ac 00 00 00 48 8b 44 24 08 83 38 00 0f 85 15 01 00 00 45 84 e4 74 09 f3 90 <41> ff cc 75 d9 eb 1b 48 8b 44 24 20 0f b6 04 10 84 c0 0f 85 cd 00 [ 331.116461][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x5ba/0xc40 [ 331.135902][ C0] RSP: 0018:ffffc900009d76c0 EFLAGS: 00000206 [ 331.142586][ C1] Code: 00 00 49 89 dc c6 03 00 48 8b 44 24 10 0f b6 04 10 84 c0 0f 85 48 01 00 00 48 8b 44 24 08 c6 00 01 bb 00 80 ff ff eb 06 f3 90 c3 74 5e 41 0f b6 44 15 00 84 c0 75 36 41 80 3f 00 75 ea 4c 89 [ 331.148485][ C0] RAX: ffff8881f7038ac8 RBX: ffff8881f7038ad4 RCX: 0000000000000000 [ 331.167934][ C1] RSP: 0018:ffffc90000957520 EFLAGS: 00000206 [ 331.175738][ C0] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8881f7038ad4 [ 331.175750][ C0] RBP: ffffc900009d77b0 R08: dffffc0000000000 R09: ffffed103ee0715b [ 331.181640][ C1] RAX: 0000000000000000 RBX: 00000000ffff9e9d RCX: ffffffff81552d3f [ 331.189450][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000006365 [ 331.197262][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881210ea0d8 [ 331.205073][ C0] R13: 1ffff1102421d41b R14: 1ffff1103ee07159 R15: ffff8881210ea0d8 [ 331.212885][ C1] RBP: ffffc90000957610 R08: dffffc0000000000 R09: ffffed102421d41c [ 331.220696][ C0] FS: 00007fca86b34380(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 331.228508][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f7138ad4 [ 331.236319][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.245084][ C1] R13: 1ffff1102421d41b R14: 1ffff1103ee20001 R15: ffff8881210ea0d8 [ 331.252896][ C0] CR2: 000000000064a110 CR3: 000000010c614000 CR4: 00000000003506b0 [ 331.259320][ C1] FS: 00005555558c8380(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 331.267147][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 331.274946][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.283708][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 331.291518][ C1] CR2: 0000000000000000 CR3: 0000000107be8000 CR4: 00000000003506a0 [ 331.297944][ C0] Call Trace: [ 331.297966][ C0] [ 331.305755][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 331.313580][ C0] ? show_regs+0x58/0x60 [ 331.316693][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 331.319378][ C0] ? watchdog_timer_fn+0x4b1/0x5f0 [ 331.327192][ C1] Call Trace: [ 331.327198][ C1] [ 331.331268][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 331.339081][ C1] ? show_regs+0x58/0x60 [ 331.344029][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 331.347153][ C1] ? watchdog_timer_fn+0x4b1/0x5f0 [ 331.349845][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 331.354965][ C1] ? proc_watchdog_cpumask+0xd0/0xd0 [ 331.359042][ C0] ? clockevents_program_event+0x22f/0x300 [ 331.364249][ C1] ? __hrtimer_run_queues+0x41a/0xad0 [ 331.369197][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 331.374146][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 331.379267][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 331.384908][ C1] ? clockevents_program_event+0x22f/0x300 [ 331.390124][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 331.396105][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 331.401051][ C0] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 331.405997][ C1] ? hrtimer_interrupt+0x40c/0xaa0 [ 331.411637][ C0] [ 331.411644][ C0] [ 331.417546][ C1] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 331.423441][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 331.429083][ C1] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 331.434031][ C0] ? __pv_queued_spin_lock_slowpath+0x38b/0xc40 [ 331.436806][ C1] [ 331.436811][ C1] [ 331.439586][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 331.445486][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 331.451477][ C0] ? desc_read+0x1bb/0x420 [ 331.457118][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 331.463194][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 331.465969][ C1] ? __pv_queued_spin_lock_slowpath+0x5ba/0xc40 [ 331.468747][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 331.474999][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 331.480983][ C0] ? _prb_read_valid+0xb43/0xbd0 [ 331.485239][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 331.491312][ C0] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 331.496088][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 331.502250][ C0] sock_hash_delete_elem+0x177/0x400 [ 331.507283][ C1] ? 0xffffffffa0026358 [ 331.513533][ C0] ? sock_hash_lookup+0x610/0x610 [ 331.518305][ C1] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 331.523080][ C0] ? sprintf+0xd6/0x120 [ 331.528373][ C1] sock_hash_delete_elem+0x177/0x400 [ 331.533406][ C0] ? syslog_print+0x8fe/0x990 [ 331.538534][ C1] ? sock_hash_lookup+0x610/0x610 [ 331.542522][ C0] bpf_prog_586ab708469db861+0x41/0xca8 [ 331.547381][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 331.552677][ C0] bpf_trace_run2+0xec/0x210 [ 331.556667][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 331.561786][ C0] ? __kasan_check_write+0x14/0x20 [ 331.566299][ C1] ? sock_map_unref+0x352/0x4d0 [ 331.571161][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 331.576542][ C1] bpf_prog_586ab708469db861+0x41/0xca8 [ 331.581838][ C0] ? syslog_print+0x8fe/0x990 [ 331.586263][ C1] bpf_trace_run2+0xec/0x210 [ 331.590950][ C0] ? syslog_print+0x8fe/0x990 [ 331.595897][ C1] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 331.600584][ C0] __bpf_trace_kfree+0x6f/0x90 [ 331.605271][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 331.610650][ C0] ? syslog_print+0x8fe/0x990 [ 331.615163][ C1] ? sock_map_unref+0x352/0x4d0 [ 331.619589][ C0] kfree+0x1f3/0x220 [ 331.624103][ C1] ? sock_map_unref+0x352/0x4d0 [ 331.629744][ C0] ? __kasan_check_read+0x11/0x20 [ 331.634345][ C1] __bpf_trace_kfree+0x6f/0x90 [ 331.639033][ C0] syslog_print+0x8fe/0x990 [ 331.643545][ C1] ? sock_map_unref+0x352/0x4d0 [ 331.648234][ C0] ? do_syslog+0x830/0x830 [ 331.651963][ C1] kfree+0x1f3/0x220 [ 331.656653][ C0] ? avc_has_perm_noaudit+0x430/0x430 [ 331.661513][ C1] sock_map_unref+0x352/0x4d0 [ 331.666112][ C0] ? cap_capable+0x1d2/0x270 [ 331.670452][ C1] sock_hash_delete_elem+0x388/0x400 [ 331.675137][ C0] ? io_schedule+0x120/0x120 [ 331.679391][ C1] ? sock_hash_lookup+0x610/0x610 [ 331.683123][ C0] do_syslog+0x340/0x830 [ 331.688331][ C1] bpf_prog_cbcf82cd0a495324+0x45/0x35c [ 331.692843][ C0] ? devkmsg_release+0x130/0x130 [ 331.697267][ C1] bpf_flow_dissect+0x128/0x3e0 [ 331.702391][ C0] ? fpu_flush_thread+0xf0/0xf0 [ 331.706817][ C1] bpf_prog_test_run_flow_dissector+0x51a/0x860 [ 331.711675][ C0] ? debug_smp_processor_id+0x17/0x20 [ 331.715756][ C1] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 331.721137][ C0] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 331.725910][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 331.730604][ C0] __x64_sys_syslog+0x7c/0x90 [ 331.735289][ C1] ? finish_task_switch+0x167/0x7b0 [ 331.741363][ C0] x64_sys_call+0x2f9/0x9a0 [ 331.746569][ C1] ? __kasan_check_read+0x11/0x20 [ 331.751948][ C0] do_syscall_64+0x3b/0xb0 [ 331.757848][ C1] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 331.762538][ C0] ? clear_bhb_loop+0x35/0x90 [ 331.767051][ C1] bpf_prog_test_run+0x3b0/0x630 [ 331.772081][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 331.776421][ C1] ? bpf_prog_query+0x220/0x220 [ 331.781282][ C0] RIP: 0033:0x7fca86c95fa7 [ 331.785535][ C1] ? selinux_bpf+0xd2/0x100 [ 331.790999][ C0] Code: 73 01 c3 48 8b 0d 81 ce 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 51 ce 0c 00 f7 d8 64 89 01 48 [ 331.795438][ C1] ? security_bpf+0x82/0xb0 [ 331.800206][ C0] RSP: 002b:00007ffc65cafd68 EFLAGS: 00000206 [ 331.805934][ C1] __sys_bpf+0x525/0x760 [ 331.810625][ C0] ORIG_RAX: 0000000000000067 [ 331.814879][ C1] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 331.819210][ C0] RAX: ffffffffffffffda RBX: 00007fca86e344a0 RCX: 00007fca86c95fa7 [ 331.838657][ C1] ? __kasan_check_read+0x11/0x20 [ 331.842989][ C0] RDX: 00000000000003ff RSI: 00007fca86e344a0 RDI: 0000000000000002 [ 331.848892][ C1] __x64_sys_bpf+0x7c/0x90 [ 331.852971][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 56578c4e58b4dca6 [ 331.857485][ C1] x64_sys_call+0x87f/0x9a0 [ 331.862694][ C0] R10: 0000000000004000 R11: 0000000000000206 R12: 00007fca86e344a0 [ 331.870503][ C1] do_syscall_64+0x3b/0xb0 [ 331.875363][ C0] R13: 00007fca86e24212 R14: 00007fca86e34592 R15: 00007fca86e34592 [ 331.883175][ C1] ? clear_bhb_loop+0x35/0x90 [ 331.887435][ C0] [ 331.895244][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 331.932564][ C1] RIP: 0033:0x7f424ee11279 [ 331.936817][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 331.956254][ C1] RSP: 002b:00007ffd1d5c1be8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 331.964497][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f424ee11279 [ 331.972308][ C1] RDX: 0000000000000050 RSI: 0000000020000180 RDI: 000000000000000a [ 331.980121][ C1] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000006 [ 331.987932][ C1] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 331.995742][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 332.003560][ C1]