./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3483570056 <...> hd_t tclass=fifo_file permissive=1 [ 12.300598][ T30] audit: type=1400 audit(1716023579.736:64): avc: denied { rlimitinh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.303581][ T30] audit: type=1400 audit(1716023579.736:65): avc: denied { siginh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. execve("./syz-executor3483570056", ["./syz-executor3483570056"], 0x7ffff72eecf0 /* 10 vars */) = 0 brk(NULL) = 0x55555644f000 brk(0x55555644fd00) = 0x55555644fd00 arch_prctl(ARCH_SET_FS, 0x55555644f380) = 0 set_tid_address(0x55555644f650) = 292 set_robust_list(0x55555644f660, 24) = 0 rseq(0x55555644fca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3483570056", 4096) = 28 getrandom("\x94\x13\xe7\xe2\xa7\xd7\xbc\x38", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555644fd00 brk(0x555556470d00) = 0x555556470d00 brk(0x555556471000) = 0x555556471000 mprotect(0x7f94dab69000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555644f650) = 293 ./strace-static-x86_64: Process 293 attached [pid 293] set_robust_list(0x55555644f660, 24) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... clone resumed>, child_tidptr=0x55555644f650) = 294 ./strace-static-x86_64: Process 294 attached [pid 294] set_robust_list(0x55555644f660, 24) = 0 [pid 294] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 294] setpgid(0, 0) = 0 [pid 294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 294] write(3, "1000", 4) = 4 [pid 294] close(3) = 0 executing program [pid 294] write(1, "executing program\n", 18) = 18 [pid 294] socketpair(AF_UNIX, SOCK_DGRAM, 0, [3, 4]) = 0 [pid 294] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 292] <... clone resumed>, child_tidptr=0x55555644f650) = 295 ./strace-static-x86_64: Process 295 attached [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 296 attached [pid 295] set_robust_list(0x55555644f660, 24 [pid 294] <... bpf resumed>) = 5 [pid 292] <... clone resumed>, child_tidptr=0x55555644f650) = 296 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555644f650) = 297 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555644f650) = 298 [pid 295] <... set_robust_list resumed>) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 297 attached ./strace-static-x86_64: Process 298 attached ./strace-static-x86_64: Process 299 attached [pid 298] set_robust_list(0x55555644f660, 24 [pid 297] set_robust_list(0x55555644f660, 24 [pid 295] <... clone resumed>, child_tidptr=0x55555644f650) = 299 [pid 299] set_robust_list(0x55555644f660, 24 [pid 298] <... set_robust_list resumed>) = 0 [pid 297] <... set_robust_list resumed>) = 0 [pid 296] set_robust_list(0x55555644f660, 24) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144./strace-static-x86_64: Process 301 attached ./strace-static-x86_64: Process 300 attached [pid 299] <... set_robust_list resumed>) = 0 [pid 298] <... clone resumed>, child_tidptr=0x55555644f650) = 300 [pid 297] <... clone resumed>, child_tidptr=0x55555644f650) = 301 [pid 301] set_robust_list(0x55555644f660, 24 [pid 299] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 300] set_robust_list(0x55555644f660, 24 [pid 301] <... set_robust_list resumed>) = 0 [pid 300] <... set_robust_list resumed>) = 0 [pid 299] <... prctl resumed>) = 0 [pid 299] setpgid(0, 0 [pid 301] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] <... setpgid resumed>) = 0 [pid 301] <... prctl resumed>) = 0 [pid 300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 301] setpgid(0, 0executing program ./strace-static-x86_64: Process 302 attached [pid 302] set_robust_list(0x55555644f660, 24) = 0 [pid 302] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 302] setpgid(0, 0) = 0 [pid 302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "1000", 4) = 4 [pid 302] close(3) = 0 [pid 302] write(1, "executing program\n", 18) = 18 [pid 302] socketpair(AF_UNIX, SOCK_DGRAM, 0, [3, 4]) = 0 [pid 302] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 302] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32) = 0 [pid 302] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 299] write(3, "1000", 4 [pid 301] <... setpgid resumed>) = 0 [pid 300] <... prctl resumed>) = 0 [ 20.574690][ T30] audit: type=1400 audit(1716023588.026:66): avc: denied { execmem } for pid=292 comm="syz-executor348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.582648][ T30] audit: type=1400 audit(1716023588.036:67): avc: denied { map_create } for pid=294 comm="syz-executor348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 20.586589][ T30] audit: type=1400 audit(1716023588.036:68): avc: denied { map_read map_write } for pid=294 comm="syz-executor348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 20.595136][ T30] audit: type=1400 audit(1716023588.046:69): avc: denied { prog_load } for pid=294 comm="syz-executor348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [pid 296] <... clone resumed>, child_tidptr=0x55555644f650) = 302 [pid 301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 300] setpgid(0, 0 [pid 299] <... write resumed>) = 4 [pid 301] <... openat resumed>) = 3 [pid 300] <... setpgid resumed>) = 0 [pid 299] close(3) = 0 [pid 300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 301] write(3, "1000", 4 [pid 299] write(1, "executing program\n", 18executing program ) = 18 [pid 300] <... openat resumed>) = 3 [pid 299] socketpair(AF_UNIX, SOCK_DGRAM, 0, [pid 301] <... write resumed>) = 4 [pid 300] write(3, "1000", 4 [pid 299] <... socketpair resumed>[3, 4]) = 0 [pid 301] close(3 [pid 300] <... write resumed>) = 4 [pid 299] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 301] <... close resumed>) = 0 [pid 300] close(3executing program [pid 299] <... bpf resumed>) = 5 [pid 301] write(1, "executing program\n", 18 [pid 300] <... close resumed>) = 0 [pid 301] <... write resumed>) = 18 [pid 300] write(1, "executing program\n", 18 [pid 299] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32executing program [pid 301] socketpair(AF_UNIX, SOCK_DGRAM, 0, [pid 300] <... write resumed>) = 18 [pid 299] <... bpf resumed>) = 0 [pid 301] <... socketpair resumed>[3, 4]) = 0 [pid 300] socketpair(AF_UNIX, SOCK_DGRAM, 0, [pid 299] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 301] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 300] <... socketpair resumed>[3, 4]) = 0 [pid 301] <... bpf resumed>) = 5 [pid 300] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 301] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32) = 0 [pid 301] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 300] <... bpf resumed>) = 5 [pid 300] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32) = 0 [ 20.615051][ T30] audit: type=1400 audit(1716023588.046:70): avc: denied { bpf } for pid=294 comm="syz-executor348" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 20.637687][ T30] audit: type=1400 audit(1716023588.046:71): avc: denied { perfmon } for pid=294 comm="syz-executor348" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [pid 300] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 302] <... bpf resumed>) = 6 [pid 294] <... bpf resumed>) = 6 [pid 294] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 299] <... bpf resumed>) = 6 [pid 294] <... bpf resumed>) = 7 [pid 294] ioctl(-1, KVM_CREATE_IRQCHIP, 0) = -1 EBADF (Bad file descriptor) [pid 294] exit_group(0 [pid 301] <... bpf resumed>) = 6 [pid 294] <... exit_group resumed>) = ? [pid 302] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 299] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 302] <... bpf resumed>) = 7 [pid 301] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 299] <... bpf resumed>) = 7 [pid 300] <... bpf resumed>) = 6 [pid 299] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 301] <... bpf resumed>) = 7 [pid 302] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 299] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 294] +++ exited with 0 +++ [pid 302] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 301] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 300] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 299] exit_group(0 [pid 302] exit_group(0) = ? [pid 302] +++ exited with 0 +++ [pid 301] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 301] exit_group(0) = ? [pid 299] <... exit_group resumed>) = ? [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=302, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555644f650) = 303 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=294, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555644f650) = 304 ./strace-static-x86_64: Process 303 attached [pid 303] set_robust_list(0x55555644f660, 24./strace-static-x86_64: Process 304 attached ) = 0 [pid 303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 303] setpgid(0, 0) = 0 [pid 304] set_robust_list(0x55555644f660, 24 [pid 303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 300] <... bpf resumed>) = 7 [pid 304] <... set_robust_list resumed>) = 0 [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 303] <... openat resumed>) = 3 [pid 300] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 304] <... prctl resumed>) = 0 [pid 300] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 304] setpgid(0, 0 [pid 303] write(3, "1000", 4 [pid 300] exit_group(0 [pid 304] <... setpgid resumed>) = 0 [pid 303] <... write resumed>) = 4 [pid 300] <... exit_group resumed>) = ? [pid 304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 303] close(3 [pid 304] <... openat resumed>) = 3 [pid 303] <... close resumed>) = 0 [pid 303] write(1, "executing program\n", 18 [pid 304] write(3, "1000", 4executing program [pid 303] <... write resumed>) = 18 [pid 304] <... write resumed>) = 4 [pid 303] socketpair(AF_UNIX, SOCK_DGRAM, 0, [pid 304] close(3 [pid 303] <... socketpair resumed>[3, 4]) = 0 [pid 304] <... close resumed>) = 0 [pid 303] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72executing program [pid 304] write(1, "executing program\n", 18 [pid 303] <... bpf resumed>) = 5 [pid 304] <... write resumed>) = 18 [pid 304] socketpair(AF_UNIX, SOCK_DGRAM, 0, [pid 303] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32 [pid 304] <... socketpair resumed>[3, 4]) = 0 [pid 303] <... bpf resumed>) = 0 [pid 304] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 303] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 301] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=301, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 304] <... bpf resumed>) = 5 [pid 297] <... restart_syscall resumed>) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 303] <... bpf resumed>) = 6 [pid 304] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32 [pid 303] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 304] <... bpf resumed>) = 0 [pid 297] <... clone resumed>, child_tidptr=0x55555644f650) = 305 ./strace-static-x86_64: Process 305 attached [pid 304] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 305] set_robust_list(0x55555644f660, 24) = 0 [pid 305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 305] setpgid(0, 0) = 0 [pid 304] <... bpf resumed>) = 6 [pid 305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 304] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 305] <... openat resumed>) = 3 [pid 305] write(3, "1000", 4) = 4 [pid 305] close(3) = 0 [pid 305] write(1, "executing program\n", 18executing program ) = 18 [pid 305] socketpair(AF_UNIX, SOCK_DGRAM, 0, [3, 4]) = 0 [pid 305] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 305] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32) = 0 [pid 305] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 6 [pid 305] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 299] +++ exited with 0 +++ [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=299, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 300] +++ exited with 0 +++ [pid 295] restart_syscall(<... resuming interrupted clone ...> [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=300, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 295] <... restart_syscall resumed>) = 0 [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 306 attached [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] <... clone resumed>, child_tidptr=0x55555644f650) = 306 ./strace-static-x86_64: Process 307 attached [pid 306] set_robust_list(0x55555644f660, 24 [pid 298] <... clone resumed>, child_tidptr=0x55555644f650) = 307 [pid 306] <... set_robust_list resumed>) = 0 [pid 307] set_robust_list(0x55555644f660, 24 [pid 306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 307] <... set_robust_list resumed>) = 0 [pid 306] <... prctl resumed>) = 0 [pid 306] setpgid(0, 0) = 0 [pid 306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 306] <... openat resumed>) = 3 [pid 307] <... prctl resumed>) = 0 [pid 306] write(3, "1000", 4 [pid 307] setpgid(0, 0) = 0 [pid 306] <... write resumed>) = 4 [pid 306] close(3) = 0 [pid 306] write(1, "executing program\n", 18 [pid 307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program [pid 306] <... write resumed>) = 18 [pid 307] <... openat resumed>) = 3 [pid 306] socketpair(AF_UNIX, SOCK_DGRAM, 0, [pid 307] write(3, "1000", 4) = 4 [pid 306] <... socketpair resumed>[3, 4]) = 0 [pid 307] close(3 [pid 306] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 307] <... close resumed>) = 0 [pid 306] <... bpf resumed>) = 5 [pid 307] write(1, "executing program\n", 18executing program [pid 306] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32) = 0 [pid 307] <... write resumed>) = 18 [pid 306] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 307] socketpair(AF_UNIX, SOCK_DGRAM, 0, [pid 306] <... bpf resumed>) = 6 [pid 306] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 307] <... socketpair resumed>[3, 4]) = 0 [pid 307] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 307] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32) = 0 [pid 307] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 6 [ 20.774778][ T30] audit: type=1400 audit(1716023588.226:72): avc: denied { prog_run } for pid=294 comm="syz-executor348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 20.793882][ T30] audit: type=1400 audit(1716023588.226:73): avc: denied { prog_run } for pid=302 comm="syz-executor348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [pid 307] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 303] <... bpf resumed>) = 7 [pid 307] <... bpf resumed>) = 7 [pid 306] <... bpf resumed>) = 7 [pid 305] <... bpf resumed>) = 7 [pid 304] <... bpf resumed>) = 7 [pid 303] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 306] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 305] ioctl(-1, KVM_CREATE_IRQCHIP, 0) = -1 EBADF (Bad file descriptor) [pid 307] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 306] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 305] exit_group(0 [pid 304] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 303] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... exit_group resumed>) = ? [pid 307] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 306] exit_group(0 [pid 305] +++ exited with 0 +++ [pid 304] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 303] exit_group(0 [pid 306] <... exit_group resumed>) = ? [pid 304] exit_group(0 [pid 307] exit_group(0 [pid 306] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=305, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 304] <... exit_group resumed>) = ? [pid 303] <... exit_group resumed>) = ? [pid 307] <... exit_group resumed>) = ? [pid 307] +++ exited with 0 +++ [pid 304] +++ exited with 0 +++ [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=306, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 295] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 303] +++ exited with 0 +++ [pid 297] <... restart_syscall resumed>) = 0 [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=303, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 308 attached [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=307, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 295] <... clone resumed>, child_tidptr=0x55555644f650) = 308 [pid 296] <... restart_syscall resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=304, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] set_robust_list(0x55555644f660, 24 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... set_robust_list resumed>) = 0 [pid 296] <... clone resumed>, child_tidptr=0x55555644f650) = 310 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 309 attached [pid 309] set_robust_list(0x55555644f660, 24) = 0 [pid 309] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 298] <... clone resumed>, child_tidptr=0x55555644f650) = 311 [pid 297] <... clone resumed>, child_tidptr=0x55555644f650) = 309 [pid 309] <... prctl resumed>) = 0 [pid 309] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 312 attached ./strace-static-x86_64: Process 311 attached [pid 309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 308] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... clone resumed>, child_tidptr=0x55555644f650) = 312 [pid 312] set_robust_list(0x55555644f660, 24 [pid 311] set_robust_list(0x55555644f660, 24 [pid 308] <... prctl resumed>) = 0 [pid 312] <... set_robust_list resumed>) = 0 [pid 311] <... set_robust_list resumed>) = 0 [pid 308] setpgid(0, 0 [pid 309] <... openat resumed>) = 3 [pid 309] write(3, "1000", 4) = 4 [pid 309] close(3) = 0 [pid 309] write(1, "executing program\n", 18executing program ) = 18 [pid 309] socketpair(AF_UNIX, SOCK_DGRAM, 0, [pid 312] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 311] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 309] <... socketpair resumed>[3, 4]) = 0 [pid 308] <... setpgid resumed>) = 0 [pid 312] <... prctl resumed>) = 0 [pid 311] <... prctl resumed>) = 0 [pid 308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 309] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 310 attached [pid 312] setpgid(0, 0 [pid 311] setpgid(0, 0 [pid 308] <... openat resumed>) = 3 [pid 309] <... bpf resumed>) = 5 [pid 309] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32 [pid 312] <... setpgid resumed>) = 0 [pid 311] <... setpgid resumed>) = 0 [pid 310] set_robust_list(0x55555644f660, 24 [pid 308] write(3, "1000", 4) = 4 [pid 308] close(3 [pid 312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 309] <... bpf resumed>) = 0 [pid 309] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 312] <... openat resumed>) = 3 [pid 308] <... close resumed>) = 0 [pid 312] write(3, "1000", 4 [pid 311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 310] <... set_robust_list resumed>) = 0 [pid 308] write(1, "executing program\n", 18executing program [pid 309] <... bpf resumed>) = 6 [pid 308] <... write resumed>) = 18 [pid 309] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 312] <... write resumed>) = 4 [pid 308] socketpair(AF_UNIX, SOCK_DGRAM, 0, [pid 310] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 308] <... socketpair resumed>[3, 4]) = 0 [pid 312] close(3 [pid 311] <... openat resumed>) = 3 [pid 308] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 312] <... close resumed>) = 0 [pid 311] write(3, "1000", 4 [pid 310] setpgid(0, 0) = 0 [pid 310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 312] write(1, "executing program\n", 18 [pid 311] <... write resumed>) = 4 [pid 308] <... bpf resumed>) = 5 executing program [pid 312] <... write resumed>) = 18 [pid 311] close(3 [pid 310] <... openat resumed>) = 3 [pid 308] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32 [pid 310] write(3, "1000", 4) = 4 [pid 310] close(3executing program ) = 0 [pid 310] write(1, "executing program\n", 18 [pid 308] <... bpf resumed>) = 0 [pid 310] <... write resumed>) = 18 [pid 308] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 312] socketpair(AF_UNIX, SOCK_DGRAM, 0, [pid 311] <... close resumed>) = 0 [pid 310] socketpair(AF_UNIX, SOCK_DGRAM, 0, [pid 312] <... socketpair resumed>[3, 4]) = 0 [pid 311] write(1, "executing program\n", 18 [pid 310] <... socketpair resumed>[3, 4]) = 0 [pid 308] <... bpf resumed>) = 6 [pid 308] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 310] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 310] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32executing program ) = 0 [pid 312] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 311] <... write resumed>) = 18 [pid 310] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 312] <... bpf resumed>) = 5 [pid 312] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32 [pid 311] socketpair(AF_UNIX, SOCK_DGRAM, 0, [pid 310] <... bpf resumed>) = 6 [pid 310] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 312] <... bpf resumed>) = 0 [pid 312] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 311] <... socketpair resumed>[3, 4]) = 0 [pid 312] <... bpf resumed>) = 6 [pid 311] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 309] <... bpf resumed>) = 7 [pid 308] <... bpf resumed>) = 7 [pid 309] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 308] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 312] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 310] <... bpf resumed>) = 7 [pid 309] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 308] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 312] <... bpf resumed>) = 7 [pid 311] <... bpf resumed>) = 5 [pid 310] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 312] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 310] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 309] exit_group(0 [pid 312] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 310] exit_group(0 [pid 308] exit_group(0 [pid 312] exit_group(0 [pid 311] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32 [pid 310] <... exit_group resumed>) = ? [pid 309] <... exit_group resumed>) = ? [pid 312] <... exit_group resumed>) = ? [pid 311] <... bpf resumed>) = 0 [pid 310] +++ exited with 0 +++ [pid 308] <... exit_group resumed>) = ? [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=310, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 312] +++ exited with 0 +++ [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 311] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=312, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 311] <... bpf resumed>) = 6 [pid 296] <... clone resumed>, child_tidptr=0x55555644f650) = 313 [pid 293] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 311] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 313 attached [pid 313] set_robust_list(0x55555644f660, 24) = 0 [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 293] <... clone resumed>, child_tidptr=0x55555644f650) = 314 [pid 313] setpgid(0, 0) = 0 [pid 313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 313] write(3, "1000", 4) = 4 [pid 313] close(3) = 0 [pid 313] write(1, "executing program\n", 18executing program ) = 18 [pid 313] socketpair(AF_UNIX, SOCK_DGRAM, 0, ./strace-static-x86_64: Process 314 attached [3, 4]) = 0 [pid 313] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 313] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32) = 0 [pid 313] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 6 [pid 313] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 314] set_robust_list(0x55555644f660, 24) = 0 [pid 314] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 314] setpgid(0, 0) = 0 [pid 314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 314] write(3, "1000", 4) = 4 [pid 314] close(3) = 0 [pid 314] write(1, "executing program\n", 18executing program ) = 18 [pid 314] socketpair(AF_UNIX, SOCK_DGRAM, 0, [3, 4]) = 0 [pid 314] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 314] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32) = 0 [pid 314] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 6 [pid 314] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 309] +++ exited with 0 +++ [pid 308] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=309, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=308, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] <... clone resumed>, child_tidptr=0x55555644f650) = 317 ./strace-static-x86_64: Process 317 attached [pid 317] set_robust_list(0x55555644f660, 24) = 0 [pid 317] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 295] <... clone resumed>, child_tidptr=0x55555644f650) = 318 [pid 317] <... prctl resumed>) = 0 [pid 317] setpgid(0, 0) = 0 [pid 317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 318 attached executing program [pid 317] write(3, "1000", 4 [pid 318] set_robust_list(0x55555644f660, 24 [pid 317] <... write resumed>) = 4 [pid 318] <... set_robust_list resumed>) = 0 [pid 317] close(3) = 0 [pid 317] write(1, "executing program\n", 18 [pid 318] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 317] <... write resumed>) = 18 [pid 318] <... prctl resumed>) = 0 [pid 317] socketpair(AF_UNIX, SOCK_DGRAM, 0, [3, 4]) = 0 [pid 318] setpgid(0, 0 [pid 317] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 318] <... setpgid resumed>) = 0 [pid 317] <... bpf resumed>) = 5 [pid 317] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32 [pid 318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 317] <... bpf resumed>) = 0 [pid 317] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 318] <... openat resumed>) = 3 [pid 318] write(3, "1000", 4 [pid 317] <... bpf resumed>) = 6 [pid 317] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 318] <... write resumed>) = 4 [pid 318] close(3) = 0 [pid 318] write(1, "executing program\n", 18executing program ) = 18 [pid 318] socketpair(AF_UNIX, SOCK_DGRAM, 0, [3, 4]) = 0 [pid 318] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 318] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32) = 0 [pid 318] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 6 [pid 318] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 311] <... bpf resumed>) = 7 [pid 314] <... bpf resumed>) = 7 [pid 317] <... bpf resumed>) = 7 [pid 313] <... bpf resumed>) = 7 [pid 311] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 318] <... bpf resumed>) = 7 [pid 317] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 314] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 313] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 311] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 318] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 317] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 313] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 311] exit_group(0 [pid 318] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 311] <... exit_group resumed>) = ? [pid 318] exit_group(0 [pid 317] exit_group(0 [pid 314] exit_group(0 [pid 313] exit_group(0 [pid 311] +++ exited with 0 +++ [pid 314] <... exit_group resumed>) = ? [pid 313] <... exit_group resumed>) = ? [pid 314] +++ exited with 0 +++ [pid 313] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=311, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=314, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=313, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] <... clone resumed>, child_tidptr=0x55555644f650) = 319 [pid 317] <... exit_group resumed>) = ? [pid 318] <... exit_group resumed>) = ? [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 319 attached [pid 319] set_robust_list(0x55555644f660, 24) = 0 [pid 319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 296] <... clone resumed>, child_tidptr=0x55555644f650) = 320 [pid 319] setpgid(0, 0) = 0 [pid 319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 319] write(3, "1000", 4) = 4 [pid 319] close(3 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 319] <... close resumed>) = 0 [pid 319] write(1, "executing program\n", 18) = 18 [pid 319] socketpair(AF_UNIX, SOCK_DGRAM, 0, [3, 4]) = 0 [pid 293] <... clone resumed>, child_tidptr=0x55555644f650) = 321 [pid 319] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 319] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32executing program ) = 0 [pid 319] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 6 ./strace-static-x86_64: Process 320 attached [pid 320] set_robust_list(0x55555644f660, 24) = 0 [pid 320] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 320] setpgid(0, 0) = 0 [pid 319] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 320] write(3, "1000", 4) = 4 [pid 320] close(3) = 0 executing program [pid 320] write(1, "executing program\n", 18) = 18 [pid 320] socketpair(AF_UNIX, SOCK_DGRAM, 0, [3, 4]) = 0 [pid 320] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 320] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32) = 0 [pid 320] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 6 ./strace-static-x86_64: Process 321 attached [pid 321] set_robust_list(0x55555644f660, 24) = 0 [pid 321] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 321] setpgid(0, 0) = 0 [pid 321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 320] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 321] <... openat resumed>) = 3 [pid 321] write(3, "1000", 4) = 4 executing program [pid 321] close(3) = 0 [pid 321] write(1, "executing program\n", 18) = 18 [pid 321] socketpair(AF_UNIX, SOCK_DGRAM, 0, [3, 4]) = 0 [pid 321] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 321] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32) = 0 [pid 321] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 6 [pid 321] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 318] +++ exited with 0 +++ [pid 317] +++ exited with 0 +++ [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=318, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=317, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 295] restart_syscall(<... resuming interrupted clone ...> [pid 297] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 295] <... restart_syscall resumed>) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 322 attached [pid 322] set_robust_list(0x55555644f660, 24 [pid 297] <... clone resumed>, child_tidptr=0x55555644f650) = 322 [pid 322] <... set_robust_list resumed>) = 0 [pid 295] <... clone resumed>, child_tidptr=0x55555644f650) = 323 [pid 322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 322] setpgid(0, 0) = 0 [pid 322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 323 attached ) = 3 [pid 322] write(3, "1000", 4 [pid 323] set_robust_list(0x55555644f660, 24) = 0 [pid 322] <... write resumed>) = 4 [pid 322] close(3) = 0 executing program [pid 322] write(1, "executing program\n", 18) = 18 [pid 322] socketpair(AF_UNIX, SOCK_DGRAM, 0, [pid 323] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 322] <... socketpair resumed>[3, 4]) = 0 [pid 322] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 323] setpgid(0, 0) = 0 [pid 322] <... bpf resumed>) = 5 [pid 322] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32) = 0 [pid 322] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 322] <... bpf resumed>) = 6 [pid 322] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 323] <... openat resumed>) = 3 [pid 323] write(3, "1000", 4) = 4 [pid 323] close(3) = 0 executing program [pid 323] write(1, "executing program\n", 18) = 18 [pid 323] socketpair(AF_UNIX, SOCK_DGRAM, 0, [3, 4]) = 0 [pid 323] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 323] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32) = 0 [pid 323] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 6 [pid 323] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 319] <... bpf resumed>) = 7 [pid 323] <... bpf resumed>) = 7 [pid 322] <... bpf resumed>) = 7 [pid 321] <... bpf resumed>) = 7 [pid 320] <... bpf resumed>) = 7 [pid 319] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 323] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 322] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 319] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 323] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 322] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 321] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 320] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 319] exit_group(0 [pid 323] exit_group(0 [pid 322] exit_group(0 [pid 321] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 319] <... exit_group resumed>) = ? [pid 323] <... exit_group resumed>) = ? [pid 322] <... exit_group resumed>) = ? [pid 321] exit_group(0 [pid 320] exit_group(0 [pid 319] +++ exited with 0 +++ [pid 323] +++ exited with 0 +++ [pid 322] +++ exited with 0 +++ [pid 320] <... exit_group resumed>) = ? [pid 321] <... exit_group resumed>) = ? [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=319, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=322, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=323, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 298] <... restart_syscall resumed>) = 0 [pid 295] restart_syscall(<... resuming interrupted clone ...> [pid 297] <... restart_syscall resumed>) = 0 [pid 295] <... restart_syscall resumed>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 325 attached ./strace-static-x86_64: Process 324 attached [pid 298] <... clone resumed>, child_tidptr=0x55555644f650) = 324 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] <... clone resumed>, child_tidptr=0x55555644f650) = 325 [pid 325] set_robust_list(0x55555644f660, 24) = 0 ./strace-static-x86_64: Process 326 attached [pid 324] set_robust_list(0x55555644f660, 24) = 0 [pid 295] <... clone resumed>, child_tidptr=0x55555644f650) = 326 [pid 326] set_robust_list(0x55555644f660, 24 [pid 325] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 326] <... set_robust_list resumed>) = 0 [pid 325] <... prctl resumed>) = 0 [pid 324] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 326] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 325] setpgid(0, 0 [pid 324] <... prctl resumed>) = 0 [pid 326] <... prctl resumed>) = 0 [pid 326] setpgid(0, 0) = 0 [pid 326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 325] <... setpgid resumed>) = 0 [pid 324] setpgid(0, 0 [pid 326] <... openat resumed>) = 3 [pid 324] <... setpgid resumed>) = 0 [pid 325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 326] write(3, "1000", 4 [pid 324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 326] <... write resumed>) = 4 [pid 326] close(3 [pid 324] <... openat resumed>) = 3 [pid 325] <... openat resumed>) = 3 [pid 324] write(3, "1000", 4 [pid 326] <... close resumed>) = 0 executing program [pid 326] write(1, "executing program\n", 18) = 18 [pid 326] socketpair(AF_UNIX, SOCK_DGRAM, 0, [3, 4]) = 0 [pid 325] write(3, "1000", 4 [pid 324] <... write resumed>) = 4 [pid 326] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 325] <... write resumed>) = 4 [pid 324] close(3 [pid 325] close(3 [pid 324] <... close resumed>) = 0 [pid 325] <... close resumed>) = 0 executing program executing program [pid 324] write(1, "executing program\n", 18 [pid 325] write(1, "executing program\n", 18 [pid 324] <... write resumed>) = 18 [pid 324] socketpair(AF_UNIX, SOCK_DGRAM, 0, [pid 325] <... write resumed>) = 18 [pid 324] <... socketpair resumed>[3, 4]) = 0 [pid 325] socketpair(AF_UNIX, SOCK_DGRAM, 0, [pid 326] <... bpf resumed>) = 5 [pid 324] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 325] <... socketpair resumed>[3, 4]) = 0 [pid 326] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32 [pid 324] <... bpf resumed>) = 5 [pid 325] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 324] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32 [pid 326] <... bpf resumed>) = 0 [pid 324] <... bpf resumed>) = 0 [pid 325] <... bpf resumed>) = 5 [pid 324] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 325] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32 [pid 326] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 6 [pid 325] <... bpf resumed>) = 0 [pid 324] <... bpf resumed>) = 6 [pid 325] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 324] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 326] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 325] <... bpf resumed>) = 6 [pid 325] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 321] +++ exited with 0 +++ [pid 320] +++ exited with 0 +++ [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=320, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=321, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555644f650) = 327 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 327 attached ./strace-static-x86_64: Process 328 attached [pid 328] set_robust_list(0x55555644f660, 24) = 0 [pid 328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 328] setpgid(0, 0) = 0 [pid 328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] <... clone resumed>, child_tidptr=0x55555644f650) = 328 [pid 328] <... openat resumed>) = 3 [pid 328] write(3, "1000", 4) = 4 [pid 328] close(3) = 0 executing program [pid 328] write(1, "executing program\n", 18) = 18 [pid 328] socketpair(AF_UNIX, SOCK_DGRAM, 0, [3, 4]) = 0 [pid 328] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 327] set_robust_list(0x55555644f660, 24 [pid 328] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32) = 0 [pid 328] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 327] <... set_robust_list resumed>) = 0 [pid 327] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 328] <... bpf resumed>) = 6 [pid 327] <... prctl resumed>) = 0 [pid 328] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 327] setpgid(0, 0) = 0 [pid 327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 327] write(3, "1000", 4) = 4 [pid 327] close(3) = 0 [pid 327] write(1, "executing program\n", 18executing program ) = 18 [pid 327] socketpair(AF_UNIX, SOCK_DGRAM, 0, [3, 4]) = 0 [pid 327] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=6, value_size=8, max_entries=2, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 327] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x20000100, flags=BPF_ANY}, 32) = 0 [pid 327] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000080, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 6 [pid 327] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mm_page_alloc", prog_fd=6}}, 16 [pid 326] <... bpf resumed>) = 7 [pid 324] <... bpf resumed>) = 7 [pid 328] <... bpf resumed>) = 7 [pid 326] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 325] <... bpf resumed>) = 7 [pid 328] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [pid 326] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 325] ioctl(-1, KVM_CREATE_IRQCHIP, 0 [ 121.010770][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 121.017244][ C1] rcu: 1-...!: (10000 ticks this GP) idle=ea1/1/0x4000000000000000 softirq=2077/2081 fqs=0 last_accelerate: 92b1/b9c1 dyntick_enabled: 1 [ 121.031116][ C1] (t=10002 jiffies g=525 q=31) [ 121.035793][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10001 jiffies! g525 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 121.047770][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=395 [ 121.055320][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g525 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 121.066688][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 121.076489][ C1] rcu: RCU grace-period kthread stack dump: [ 121.082227][ C1] task:rcu_preempt state:I stack:28328 pid: 14 ppid: 2 flags:0x00004000 [ 121.091262][ C1] Call Trace: [ 121.094385][ C1] [ 121.097246][ C1] __schedule+0xccc/0x1590 [ 121.101487][ C1] ? __sched_text_start+0x8/0x8 [ 121.106172][ C1] ? __kasan_check_write+0x14/0x20 [ 121.111119][ C1] schedule+0x11f/0x1e0 [ 121.115113][ C1] schedule_timeout+0x18c/0x370 [ 121.119800][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 121.124833][ C1] ? console_conditional_schedule+0x30/0x30 [ 121.130562][ C1] ? update_process_times+0x200/0x200 [ 121.135768][ C1] ? prepare_to_swait_event+0x308/0x320 [ 121.141149][ C1] rcu_gp_fqs_loop+0x2af/0xf80 [ 121.145752][ C1] ? debug_smp_processor_id+0x17/0x20 [ 121.150956][ C1] ? __note_gp_changes+0x4ab/0x920 [ 121.155905][ C1] ? rcu_gp_init+0xc30/0xc30 [ 121.160329][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 121.165366][ C1] ? rcu_gp_init+0x9cf/0xc30 [ 121.169792][ C1] rcu_gp_kthread+0xa4/0x350 [ 121.174218][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 121.178903][ C1] ? rcu_barrier_callback+0x50/0x50 [ 121.183940][ C1] ? __kasan_check_read+0x11/0x20 [ 121.188798][ C1] ? __kthread_parkme+0xb2/0x200 [ 121.193591][ C1] kthread+0x421/0x510 [ 121.197479][ C1] ? rcu_barrier_callback+0x50/0x50 [ 121.202513][ C1] ? kthread_blkcg+0xd0/0xd0 [ 121.206938][ C1] ret_from_fork+0x1f/0x30 [ 121.211197][ C1] [ 121.214065][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 121.220229][ C1] Sending NMI from CPU 1 to CPUs 0: [ 121.225281][ C0] NMI backtrace for cpu 0 [ 121.225304][ C0] CPU: 0 PID: 324 Comm: syz-executor348 Not tainted 5.15.149-syzkaller-00490-g5d96939590c0 #0 [ 121.225321][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 121.225333][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 121.225353][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 121.225364][ C0] RSP: 0000:ffffc90000aa7220 EFLAGS: 00000246 [ 121.225378][ C0] RAX: 0000000000000001 RBX: 1ffff92000154e48 RCX: 1ffffffff0d1aa9c [ 121.225389][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7037ed4 [ 121.225398][ C0] RBP: ffffc90000aa72d0 R08: dffffc0000000000 R09: ffffed103ee06fdb [ 121.225409][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 121.225419][ C0] R13: ffff8881f7037ed4 R14: 0000000000000001 R15: 1ffff92000154e4c [ 121.225429][ C0] FS: 000055555644f380(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 121.225442][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.225452][ C0] CR2: 00007f94dab6fd08 CR3: 0000000121b4b000 CR4: 00000000003506b0 [ 121.225466][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 121.225475][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 121.225484][ C0] Call Trace: [ 121.225489][ C0] [ 121.225494][ C0] ? show_regs+0x58/0x60 [ 121.225510][ C0] ? nmi_cpu_backtrace+0x29f/0x300 [ 121.225528][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 121.225545][ C0] ? kvm_wait+0x147/0x180 [ 121.225558][ C0] ? kvm_wait+0x147/0x180 [ 121.225571][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 121.225587][ C0] ? nmi_handle+0xa8/0x280 [ 121.225601][ C0] ? kvm_wait+0x147/0x180 [ 121.225614][ C0] ? default_do_nmi+0x69/0x160 [ 121.225630][ C0] ? exc_nmi+0xaf/0x120 [ 121.225643][ C0] ? end_repeat_nmi+0x16/0x31 [ 121.225660][ C0] ? kvm_wait+0x147/0x180 [ 121.225673][ C0] ? kvm_wait+0x147/0x180 [ 121.225686][ C0] ? kvm_wait+0x147/0x180 [ 121.225699][ C0] [ 121.225703][ C0] [ 121.225708][ C0] ? sched_clock_cpu+0x18/0x3b0 [ 121.225723][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 121.225737][ C0] ? page_ext_put+0x1c/0x30 [ 121.225752][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 121.225770][ C0] ? post_alloc_hook+0x1a3/0x1b0 [ 121.225793][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 121.225808][ C0] ? get_page_from_freelist+0x3550/0x35d0 [ 121.225825][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 121.225841][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 121.225857][ C0] ? sock_hash_bucket_hash+0x388/0x7e0 [ 121.225875][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 121.225890][ C0] bpf_prog_a8aaa52f2e199321+0x42/0xfe0 [ 121.225904][ C0] bpf_trace_run4+0x13f/0x270 [ 121.225921][ C0] ? bpf_trace_run3+0x250/0x250 [ 121.225937][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 121.225953][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 121.225969][ C0] __traceiter_mm_page_alloc+0x3a/0x60 [ 121.225983][ C0] __alloc_pages+0x3cb/0x8f0 [ 121.225998][ C0] ? prep_new_page+0x110/0x110 [ 121.226016][ C0] wp_page_copy+0x200/0x1b00 [ 121.226033][ C0] ? __kasan_check_write+0x14/0x20 [ 121.226048][ C0] ? insert_page_into_pte_locked+0x4e0/0x4e0 [ 121.226063][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 121.226078][ C0] ? __kasan_check_write+0x14/0x20 [ 121.226094][ C0] ? __pte_map_lock+0x442/0x620 [ 121.226109][ C0] do_wp_page+0x6fa/0xb60 [ 121.226123][ C0] handle_pte_fault+0x72e/0x2340 [ 121.226138][ C0] ? dequeue_task_fair+0x563/0x2450 [ 121.226154][ C0] ? fault_around_bytes_set+0xc0/0xc0 [ 121.226172][ C0] do_handle_mm_fault+0x1ea9/0x23a0 [ 121.226190][ C0] ? numa_migrate_prep+0xe0/0xe0 [ 121.226207][ C0] ? __kasan_check_write+0x14/0x20 [ 121.226221][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 121.226236][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 121.226252][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 121.226268][ C0] ? down_read_trylock+0x1f9/0x300 [ 121.226282][ C0] ? __init_rwsem+0x1c0/0x1c0 [ 121.226296][ C0] ? vmacache_find+0x21f/0x4d0 [ 121.226312][ C0] ? __find_vma+0x30/0x150 [ 121.226326][ C0] exc_page_fault+0x3b5/0x830 [ 121.226346][ C0] asm_exc_page_fault+0x27/0x30 [ 121.226358][ C0] RIP: 0033:0x7f94daacc0b0 [ 121.226376][ C0] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 3d 0f 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 50 3c 0a 00 0f 85 0f 02 00 00 4c 8d 25 43 3c 0a 00 4c [ 121.226387][ C0] RSP: 002b:00007fff5145d320 EFLAGS: 00010246 [ 121.226399][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 121.226407][ C0] RDX: 0000000000000001 RSI: 00007f94dab6d120 RDI: 0000000000000000 [ 121.226416][ C0] RBP: 00007f94dab6d120 R08: 00000000000000a0 R09: 00000000000000a0 [ 121.226425][ C0] R10: 00000000000000a0 R11: 0000000000000246 R12: 0000000000000000 [ 121.226434][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.226446][ C0] [ 121.226454][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.171 msecs [ 121.227322][ C1] NMI backtrace for cpu 1 [ 121.723191][ C1] CPU: 1 PID: 326 Comm: syz-executor348 Not tainted 5.15.149-syzkaller-00490-g5d96939590c0 #0 [ 121.733280][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 121.743139][ C1] Call Trace: [ 121.746261][ C1] [ 121.749039][ C1] dump_stack_lvl+0x151/0x1b7 [ 121.753555][ C1] ? io_uring_drop_tctx_refs+0x190/0x190 [ 121.759021][ C1] ? ttwu_do_wakeup+0x187/0x430 [ 121.763714][ C1] dump_stack+0x15/0x17 [ 121.767698][ C1] nmi_cpu_backtrace+0x2f7/0x300 [ 121.772473][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 121.778471][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 121.783761][ C1] ? __kasan_check_write+0x14/0x20 [ 121.788709][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 121.793388][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 121.799391][ C1] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 121.805302][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 121.811603][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 121.817327][ C1] rcu_dump_cpu_stacks+0x1d8/0x330 [ 121.822299][ C1] print_cpu_stall+0x315/0x5f0 [ 121.826876][ C1] rcu_sched_clock_irq+0x989/0x12f0 [ 121.831930][ C1] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 121.837897][ C1] ? hrtimer_run_queues+0x15f/0x440 [ 121.842935][ C1] update_process_times+0x198/0x200 [ 121.847964][ C1] tick_sched_timer+0x188/0x240 [ 121.852651][ C1] ? tick_setup_sched_timer+0x480/0x480 [ 121.858038][ C1] __hrtimer_run_queues+0x41a/0xad0 [ 121.863071][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 121.868013][ C1] ? clockevents_program_event+0x22f/0x300 [ 121.873658][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 121.879558][ C1] hrtimer_interrupt+0x40c/0xaa0 [ 121.884350][ C1] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 121.890058][ C1] sysvec_apic_timer_interrupt+0x95/0xc0 [ 121.895528][ C1] [ 121.898301][ C1] [ 121.901079][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 121.906982][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 121.911756][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 121.931199][ C1] RSP: 0000:ffffc90000ac63e0 EFLAGS: 00000246 [ 121.937098][ C1] RAX: 0000000000000003 RBX: 1ffff92000158c80 RCX: ffffffff8154fa7f [ 121.944911][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88812105b598 [ 121.952730][ C1] RBP: ffffc90000ac6490 R08: dffffc0000000000 R09: ffffed102420b6b4 [ 121.960532][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 121.968344][ C1] R13: ffff88812105b598 R14: 0000000000000003 R15: 1ffff92000158c84 [ 121.976158][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 121.982236][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 121.988220][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 121.993175][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 121.999242][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 122.005151][ C1] ? post_alloc_hook+0x1a3/0x1b0 [ 122.009918][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 122.016173][ C1] ? get_page_from_freelist+0x3550/0x35d0 [ 122.021727][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 122.026497][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 122.031529][ C1] ? sock_hash_bucket_hash+0x388/0x7e0 [ 122.036825][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 122.041858][ C1] bpf_prog_a8aaa52f2e199321+0x42/0xfe0 [ 122.047242][ C1] bpf_trace_run4+0x13f/0x270 [ 122.051751][ C1] ? bpf_trace_run3+0x250/0x250 [ 122.056447][ C1] ? __alloc_pages+0x8f0/0x8f0 [ 122.061042][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 122.066339][ C1] __traceiter_mm_page_alloc+0x3a/0x60 [ 122.071633][ C1] __alloc_pages+0x3cb/0x8f0 [ 122.076143][ C1] ? prep_new_page+0x110/0x110 [ 122.080743][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 122.086209][ C1] ? stack_trace_save+0x113/0x1c0 [ 122.091069][ C1] ? print_verifier_state+0x2230/0x2230 [ 122.096623][ C1] __stack_depot_save+0x38d/0x470 [ 122.101483][ C1] ? __kernel_text_address+0x9b/0x110 [ 122.106694][ C1] stack_depot_save+0xe/0x10 [ 122.111116][ C1] save_stack+0x104/0x1e0 [ 122.115283][ C1] ? __reset_page_owner+0x190/0x190 [ 122.120318][ C1] ? post_alloc_hook+0x1a3/0x1b0 [ 122.125089][ C1] ? prep_new_page+0x1b/0x110 [ 122.129603][ C1] ? get_page_from_freelist+0x3550/0x35d0 [ 122.135159][ C1] ? __alloc_pages+0x27e/0x8f0 [ 122.139764][ C1] ? __stack_depot_save+0x38d/0x470 [ 122.144909][ C1] ? kasan_set_track+0x5d/0x70 [ 122.149505][ C1] ? kasan_set_free_info+0x23/0x40 [ 122.154454][ C1] ? ____kasan_slab_free+0x126/0x160 [ 122.159627][ C1] ? __kasan_slab_free+0x11/0x20 [ 122.164348][ C1] ? slab_free_freelist_hook+0xbd/0x190 [ 122.169730][ C1] ? kfree+0xc8/0x220 [ 122.173548][ C1] ? sock_map_unref+0x352/0x4d0 [ 122.178237][ C1] ? sock_hash_delete_elem+0x274/0x2f0 [ 122.183532][ C1] ? bpf_prog_a8aaa52f2e199321+0x42/0xfe0 [ 122.189093][ C1] ? bpf_trace_run4+0x13f/0x270 [ 122.193771][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 122.199241][ C1] ? memset+0x35/0x40 [ 122.203057][ C1] __set_page_owner+0x28/0x2e0 [ 122.207663][ C1] ? kernel_init_free_pages+0xda/0xf0 [ 122.212869][ C1] post_alloc_hook+0x1a3/0x1b0 [ 122.217465][ C1] prep_new_page+0x1b/0x110 [ 122.221804][ C1] get_page_from_freelist+0x3550/0x35d0 [ 122.227185][ C1] ? is_bpf_text_address+0x172/0x190 [ 122.232310][ C1] ? lruvec_init+0x150/0x150 [ 122.236733][ C1] ? __alloc_pages+0x8f0/0x8f0 [ 122.241339][ C1] ? __alloc_pages_bulk+0xe40/0xe40 [ 122.246453][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 122.251314][ C1] __alloc_pages+0x27e/0x8f0 [ 122.255741][ C1] ? prep_new_page+0x110/0x110 [ 122.260341][ C1] ? stack_trace_save+0x113/0x1c0 [ 122.265200][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 122.270151][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 122.275098][ C1] __stack_depot_save+0x38d/0x470 [ 122.279956][ C1] ? kfree+0xc8/0x220 [ 122.283787][ C1] kasan_set_track+0x5d/0x70 [ 122.288294][ C1] ? kasan_set_track+0x4b/0x70 [ 122.292893][ C1] ? kasan_set_free_info+0x23/0x40 [ 122.297840][ C1] ? ____kasan_slab_free+0x126/0x160 [ 122.302954][ C1] ? __kasan_slab_free+0x11/0x20 [ 122.307726][ C1] ? slab_free_freelist_hook+0xbd/0x190 [ 122.313108][ C1] ? kfree+0xc8/0x220 [ 122.316928][ C1] ? sock_map_unref+0x352/0x4d0 [ 122.321613][ C1] ? sock_hash_delete_elem+0x274/0x2f0 [ 122.326909][ C1] ? bpf_prog_a8aaa52f2e199321+0x42/0xfe0 [ 122.332638][ C1] ? bpf_trace_run4+0x13f/0x270 [ 122.337323][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 122.342792][ C1] ? __traceiter_mm_page_alloc+0x3a/0x60 [ 122.348266][ C1] ? __alloc_pages+0x3cb/0x8f0 [ 122.352860][ C1] ? wp_page_copy+0x200/0x1b00 [ 122.357458][ C1] ? do_wp_page+0x6fa/0xb60 [ 122.361972][ C1] ? handle_pte_fault+0x72e/0x2340 [ 122.366920][ C1] ? do_handle_mm_fault+0x1ea9/0x23a0 [ 122.372128][ C1] ? exc_page_fault+0x3b5/0x830 [ 122.376813][ C1] ? asm_exc_page_fault+0x27/0x30 [ 122.381679][ C1] kasan_set_free_info+0x23/0x40 [ 122.386449][ C1] ____kasan_slab_free+0x126/0x160 [ 122.391394][ C1] __kasan_slab_free+0x11/0x20 [ 122.395995][ C1] slab_free_freelist_hook+0xbd/0x190 [ 122.401205][ C1] ? sock_map_unref+0x352/0x4d0 [ 122.405895][ C1] kfree+0xc8/0x220 [ 122.409536][ C1] sock_map_unref+0x352/0x4d0 [ 122.414049][ C1] sock_hash_delete_elem+0x274/0x2f0 [ 122.419169][ C1] bpf_prog_a8aaa52f2e199321+0x42/0xfe0 [ 122.424550][ C1] bpf_trace_run4+0x13f/0x270 [ 122.429062][ C1] ? bpf_trace_run3+0x250/0x250 [ 122.433750][ C1] ? __alloc_pages+0x8f0/0x8f0 [ 122.438349][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 122.443660][ C1] __traceiter_mm_page_alloc+0x3a/0x60 [ 122.449029][ C1] __alloc_pages+0x3cb/0x8f0 [ 122.453452][ C1] ? prep_new_page+0x110/0x110 [ 122.458057][ C1] wp_page_copy+0x200/0x1b00 [ 122.462481][ C1] ? __kasan_check_write+0x14/0x20 [ 122.467423][ C1] ? insert_page_into_pte_locked+0x4e0/0x4e0 [ 122.473256][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 122.478559][ C1] ? __pte_map_lock+0x442/0x620 [ 122.483229][ C1] do_wp_page+0x6fa/0xb60 [ 122.487388][ C1] handle_pte_fault+0x72e/0x2340 [ 122.492163][ C1] ? irqentry_exit+0x30/0x40 [ 122.496589][ C1] ? sysvec_call_function_single+0x52/0xb0 [ 122.502229][ C1] ? fault_around_bytes_set+0xc0/0xc0 [ 122.507437][ C1] do_handle_mm_fault+0x1ea9/0x23a0 [ 122.512474][ C1] ? numa_migrate_prep+0xe0/0xe0 [ 122.517246][ C1] ? __kasan_check_write+0x14/0x20 [ 122.522266][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 122.527136][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 122.532520][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 122.537551][ C1] ? down_read_trylock+0x1f9/0x300 [ 122.542499][ C1] ? __init_rwsem+0x1c0/0x1c0 [ 122.547012][ C1] ? vmacache_find+0x21f/0x4d0 [ 122.551613][ C1] ? __find_vma+0x30/0x150 [ 122.555868][ C1] exc_page_fault+0x3b5/0x830 [ 122.560380][ C1] asm_exc_page_fault+0x27/0x30 [ 122.565064][ C1] RIP: 0033:0x7f94daacc0b0 [ 122.569327][ C1] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 3d 0f 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 50 3c 0a 00 0f 85 0f 02 00 00 4c 8d 25 43 3c 0a 00 4c [ 122.589022][ C1] RSP: 002b:00007fff5145d320 EFLAGS: 00010246 [ 122.594950][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 122.602818][ C1] RDX: 0000000000000001 RSI: 00007f94dab6d120 RDI: 0000000000000000 [ 122.610632][ C1] RBP: 00007f94dab6d120 R08: 00000000000000a0 R09: 00000000000000a0 [ 122.618463][ C1] R10: 00000000000000a0 R11: 0000000000000246 R12: 0000000000000000 [ 122.626254][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.634160][ C1] [ 265.116074][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 245s! [syz-executor348:324] [ 265.124494][ C0] Modules linked in: [ 265.126054][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 245s! [syz-executor348:326] [ 265.128225][ C0] CPU: 0 PID: 324 Comm: syz-executor348 Not tainted 5.15.149-syzkaller-00490-g5d96939590c0 #0 [ 265.136636][ C1] Modules linked in: [ 265.136645][ C1] CPU: 1 PID: 326 Comm: syz-executor348 Not tainted 5.15.149-syzkaller-00490-g5d96939590c0 #0 [ 265.146706][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 265.150524][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 265.160609][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 265.171279][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 265.181193][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 265.185951][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 265.190717][ C0] RSP: 0000:ffffc90000aa7220 EFLAGS: 00000246 [ 265.210161][ C1] RSP: 0000:ffffc90000ac63e0 EFLAGS: 00000246 [ 265.229602][ C0] [ 265.229608][ C0] RAX: 0000000000000001 RBX: 1ffff92000154e48 RCX: 1ffffffff0d1aa9c [ 265.235502][ C1] [ 265.235507][ C1] RAX: 0000000000000003 RBX: 1ffff92000158c80 RCX: ffffffff8154fa7f [ 265.241403][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7037ed4 [ 265.243574][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88812105b598 [ 265.251384][ C0] RBP: ffffc90000aa72d0 R08: dffffc0000000000 R09: ffffed103ee06fdb [ 265.253554][ C1] RBP: ffffc90000ac6490 R08: dffffc0000000000 R09: ffffed102420b6b4 [ 265.261367][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 265.269178][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 265.276992][ C0] R13: ffff8881f7037ed4 R14: 0000000000000001 R15: 1ffff92000154e4c [ 265.284802][ C1] R13: ffff88812105b598 R14: 0000000000000003 R15: 1ffff92000158c84 [ 265.292610][ C0] FS: 000055555644f380(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 265.300422][ C1] FS: 000055555644f380(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 265.308322][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.316133][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.323943][ C0] CR2: 00007f94dab6fd08 CR3: 0000000121b4b000 CR4: 00000000003506b0 [ 265.332795][ C1] CR2: 00007f94dab6fd08 CR3: 0000000121b74000 CR4: 00000000003506a0 [ 265.341671][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.348075][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.354582][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.362391][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.370204][ C0] Call Trace: [ 265.370228][ C0] [ 265.378016][ C1] Call Trace: [ 265.378023][ C1] [ 265.385844][ C0] ? show_regs+0x58/0x60 [ 265.393639][ C1] ? show_regs+0x58/0x60 [ 265.401449][ C0] ? watchdog_timer_fn+0x4b1/0x5f0 [ 265.404572][ C1] ? watchdog_timer_fn+0x4b1/0x5f0 [ 265.407264][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 265.410389][ C1] ? proc_watchdog_cpumask+0xd0/0xd0 [ 265.413078][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 265.417160][ C1] ? __hrtimer_run_queues+0x41a/0xad0 [ 265.421241][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 265.426187][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 265.431130][ C0] ? clockevents_program_event+0x22f/0x300 [ 265.436251][ C1] ? clockevents_program_event+0x22f/0x300 [ 265.441371][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 265.446588][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 265.451789][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 265.456738][ C1] ? hrtimer_interrupt+0x40c/0xaa0 [ 265.461691][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 265.467329][ C1] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 265.472969][ C0] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 265.478867][ C1] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 265.484769][ C0] [ 265.484776][ C0] [ 265.489715][ C1] [ 265.489721][ C1] [ 265.494662][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 265.500564][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 265.506471][ C0] ? kvm_wait+0x147/0x180 [ 265.512111][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 265.517753][ C0] ? sched_clock_cpu+0x18/0x3b0 [ 265.520527][ C1] ? kvm_wait+0x147/0x180 [ 265.523304][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 265.526082][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 265.528859][ C0] ? page_ext_put+0x1c/0x30 [ 265.534847][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 265.540839][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 265.545002][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 265.551078][ C0] ? post_alloc_hook+0x1a3/0x1b0 [ 265.555853][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 265.560019][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 265.564965][ C1] ? post_alloc_hook+0x1a3/0x1b0 [ 265.570951][ C0] ? get_page_from_freelist+0x3550/0x35d0 [ 265.575293][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 265.580415][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 265.586313][ C1] ? get_page_from_freelist+0x3550/0x35d0 [ 265.592394][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 265.597165][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 265.603066][ C0] ? sock_hash_bucket_hash+0x388/0x7e0 [ 265.609314][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 265.614089][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 265.619644][ C1] ? sock_hash_bucket_hash+0x388/0x7e0 [ 265.625894][ C0] bpf_prog_a8aaa52f2e199321+0x42/0xfe0 [ 265.630666][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 265.636229][ C0] bpf_trace_run4+0x13f/0x270 [ 265.641256][ C1] bpf_prog_a8aaa52f2e199321+0x42/0xfe0 [ 265.646027][ C0] ? bpf_trace_run3+0x250/0x250 [ 265.651321][ C1] bpf_trace_run4+0x13f/0x270 [ 265.656358][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 265.661390][ C1] ? bpf_trace_run3+0x250/0x250 [ 265.666685][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 265.672067][ C1] ? __alloc_pages+0x8f0/0x8f0 [ 265.677099][ C0] __traceiter_mm_page_alloc+0x3a/0x60 [ 265.681619][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 265.687004][ C0] __alloc_pages+0x3cb/0x8f0 [ 265.691682][ C1] __traceiter_mm_page_alloc+0x3a/0x60 [ 265.696197][ C0] ? prep_new_page+0x110/0x110 [ 265.700793][ C1] __alloc_pages+0x3cb/0x8f0 [ 265.705484][ C0] wp_page_copy+0x200/0x1b00 [ 265.710775][ C1] ? prep_new_page+0x110/0x110 [ 265.715380][ C0] ? __kasan_check_write+0x14/0x20 [ 265.720670][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 265.725962][ C0] ? insert_page_into_pte_locked+0x4e0/0x4e0 [ 265.730390][ C1] ? stack_trace_save+0x113/0x1c0 [ 265.735683][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 265.740282][ C1] ? print_verifier_state+0x2230/0x2230 [ 265.744717][ C0] ? __kasan_check_write+0x14/0x20 [ 265.749153][ C1] __stack_depot_save+0x38d/0x470 [ 265.753740][ C0] ? __pte_map_lock+0x442/0x620 [ 265.759391][ C1] ? __kernel_text_address+0x9b/0x110 [ 265.764848][ C0] do_wp_page+0x6fa/0xb60 [ 265.770659][ C1] stack_depot_save+0xe/0x10 [ 265.775613][ C0] handle_pte_fault+0x72e/0x2340 [ 265.780901][ C1] save_stack+0x104/0x1e0 [ 265.786283][ C0] ? dequeue_task_fair+0x563/0x2450 [ 265.791228][ C1] ? __reset_page_owner+0x190/0x190 [ 265.796176][ C0] ? fault_around_bytes_set+0xc0/0xc0 [ 265.800948][ C1] ? post_alloc_hook+0x1a3/0x1b0 [ 265.806160][ C0] do_handle_mm_fault+0x1ea9/0x23a0 [ 265.810670][ C1] ? prep_new_page+0x1b/0x110 [ 265.815102][ C0] ? numa_migrate_prep+0xe0/0xe0 [ 265.819870][ C1] ? get_page_from_freelist+0x3550/0x35d0 [ 265.824043][ C0] ? __kasan_check_write+0x14/0x20 [ 265.829069][ C1] ? __alloc_pages+0x27e/0x8f0 [ 265.834119][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 265.839312][ C1] ? __stack_depot_save+0x38d/0x470 [ 265.844086][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 265.849293][ C1] ? kasan_set_track+0x5d/0x70 [ 265.853807][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 265.858577][ C1] ? kasan_set_free_info+0x23/0x40 [ 265.864220][ C0] ? down_read_trylock+0x1f9/0x300 [ 265.869167][ C1] ? ____kasan_slab_free+0x126/0x160 [ 265.873772][ C0] ? __init_rwsem+0x1c0/0x1c0 [ 265.878718][ C1] ? __kasan_slab_free+0x11/0x20 [ 265.883747][ C0] ? vmacache_find+0x21f/0x4d0 [ 265.889130][ C1] ? slab_free_freelist_hook+0xbd/0x190 [ 265.893731][ C0] ? __find_vma+0x30/0x150 [ 265.898763][ C1] ? kfree+0xc8/0x220 [ 265.903711][ C0] exc_page_fault+0x3b5/0x830 [ 265.908658][ C1] ? sock_map_unref+0x352/0x4d0 [ 265.913786][ C0] asm_exc_page_fault+0x27/0x30 [ 265.918290][ C1] ? sock_hash_delete_elem+0x274/0x2f0 [ 265.923070][ C0] RIP: 0033:0x7f94daacc0b0 [ 265.927666][ C1] ? bpf_prog_a8aaa52f2e199321+0x42/0xfe0 [ 265.933072][ C0] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 3d 0f 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 50 3c 0a 00 0f 85 0f 02 00 00 4c 8d 25 43 3c 0a 00 4c [ 265.937301][ C1] ? bpf_trace_run4+0x13f/0x270 [ 265.941216][ C0] RSP: 002b:00007fff5145d320 EFLAGS: 00010246 [ 265.945718][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 265.950407][ C0] [ 265.950412][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 265.955091][ C1] ? memset+0x35/0x40 [ 265.960386][ C0] RDX: 0000000000000001 RSI: 00007f94dab6d120 RDI: 0000000000000000 [ 265.964639][ C1] __set_page_owner+0x28/0x2e0 [ 265.970191][ C0] RBP: 00007f94dab6d120 R08: 00000000000000a0 R09: 00000000000000a0 [ 265.989637][ C1] ? kernel_init_free_pages+0xda/0xf0 [ 265.994334][ C0] R10: 00000000000000a0 R11: 0000000000000246 R12: 0000000000000000 [ 266.000224][ C1] post_alloc_hook+0x1a3/0x1b0 [ 266.005693][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 266.007865][ C1] prep_new_page+0x1b/0x110 [ 266.015675][ C0] [ 266.019492][ C1] get_page_from_freelist+0x3550/0x35d0 [ 266.077734][ C1] ? is_bpf_text_address+0x172/0x190 [ 266.082853][ C1] ? lruvec_init+0x150/0x150 [ 266.087278][ C1] ? __alloc_pages+0x8f0/0x8f0 [ 266.091876][ C1] ? __alloc_pages_bulk+0xe40/0xe40 [ 266.096997][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 266.101863][ C1] __alloc_pages+0x27e/0x8f0 [ 266.106284][ C1] ? prep_new_page+0x110/0x110 [ 266.110884][ C1] ? stack_trace_save+0x113/0x1c0 [ 266.115743][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 266.120690][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 266.125638][ C1] __stack_depot_save+0x38d/0x470 [ 266.130498][ C1] ? kfree+0xc8/0x220 [ 266.134316][ C1] kasan_set_track+0x5d/0x70 [ 266.138743][ C1] ? kasan_set_track+0x4b/0x70 [ 266.143358][ C1] ? kasan_set_free_info+0x23/0x40 [ 266.148317][ C1] ? ____kasan_slab_free+0x126/0x160 [ 266.153413][ C1] ? __kasan_slab_free+0x11/0x20 [ 266.158183][ C1] ? slab_free_freelist_hook+0xbd/0x190 [ 266.163564][ C1] ? kfree+0xc8/0x220 [ 266.167387][ C1] ? sock_map_unref+0x352/0x4d0 [ 266.172078][ C1] ? sock_hash_delete_elem+0x274/0x2f0 [ 266.177371][ C1] ? bpf_prog_a8aaa52f2e199321+0x42/0xfe0 [ 266.182926][ C1] ? bpf_trace_run4+0x13f/0x270 [ 266.187607][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 266.193076][ C1] ? __traceiter_mm_page_alloc+0x3a/0x60 [ 266.198552][ C1] ? __alloc_pages+0x3cb/0x8f0 [ 266.203152][ C1] ? wp_page_copy+0x200/0x1b00 [ 266.207746][ C1] ? do_wp_page+0x6fa/0xb60 [ 266.212087][ C1] ? handle_pte_fault+0x72e/0x2340 [ 266.217030][ C1] ? do_handle_mm_fault+0x1ea9/0x23a0 [ 266.222238][ C1] ? exc_page_fault+0x3b5/0x830 [ 266.226925][ C1] ? asm_exc_page_fault+0x27/0x30 [ 266.231815][ C1] kasan_set_free_info+0x23/0x40 [ 266.236558][ C1] ____kasan_slab_free+0x126/0x160 [ 266.241506][ C1] __kasan_slab_free+0x11/0x20 [ 266.246113][ C1] slab_free_freelist_hook+0xbd/0x190 [ 266.251315][ C1] ? sock_map_unref+0x352/0x4d0 [ 266.256000][ C1] kfree+0xc8/0x220 [ 266.259644][ C1] sock_map_unref+0x352/0x4d0 [ 266.264159][ C1] sock_hash_delete_elem+0x274/0x2f0 [ 266.269278][ C1] bpf_prog_a8aaa52f2e199321+0x42/0xfe0 [ 266.274659][ C1] bpf_trace_run4+0x13f/0x270 [ 266.279172][ C1] ? bpf_trace_run3+0x250/0x250 [ 266.283860][ C1] ? __alloc_pages+0x8f0/0x8f0 [ 266.288470][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 266.293756][ C1] __traceiter_mm_page_alloc+0x3a/0x60 [ 266.299051][ C1] __alloc_pages+0x3cb/0x8f0 [ 266.303474][ C1] ? prep_new_page+0x110/0x110 [ 266.308075][ C1] wp_page_copy+0x200/0x1b00 [ 266.312501][ C1] ? __kasan_check_write+0x14/0x20 [ 266.317446][ C1] ? insert_page_into_pte_locked+0x4e0/0x4e0 [ 266.323261][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 266.328557][ C1] ? __pte_map_lock+0x442/0x620 [ 266.333245][ C1] do_wp_page+0x6fa/0xb60 [ 266.337410][ C1] handle_pte_fault+0x72e/0x2340 [ 266.342183][ C1] ? irqentry_exit+0x30/0x40 [ 266.346608][ C1] ? sysvec_call_function_single+0x52/0xb0 [ 266.352253][ C1] ? fault_around_bytes_set+0xc0/0xc0 [ 266.357458][ C1] do_handle_mm_fault+0x1ea9/0x23a0 [ 266.362583][ C1] ? numa_migrate_prep+0xe0/0xe0 [ 266.367357][ C1] ? __kasan_check_write+0x14/0x20 [ 266.372299][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 266.377246][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 266.382629][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 266.387662][ C1] ? down_read_trylock+0x1f9/0x300 [ 266.392610][ C1] ? __init_rwsem+0x1c0/0x1c0 [ 266.397120][ C1] ? vmacache_find+0x21f/0x4d0 [ 266.401811][ C1] ? __find_vma+0x30/0x150 [ 266.406061][ C1] exc_page_fault+0x3b5/0x830 [ 266.410578][ C1] asm_exc_page_fault+0x27/0x30 [ 266.415263][ C1] RIP: 0033:0x7f94daacc0b0 [ 266.419516][ C1] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 3d 0f 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 50 3c 0a 00 0f 85 0f 02 00 00 4c 8d 25 43 3c 0a 00 4c [ 266.438963][ C1] RSP: 002b:00007fff5145d320 EFLAGS: 00010246 [ 266.444862][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 266.452842][ C1] RDX: 0000000000000001 RSI: 00007f94dab6d120 RDI: 0000000000000000 [ 266.460654][ C1] RBP: 00007f94dab6d120 R08: 00000000000000a0 R09: 00000000000000a0 [ 266.468464][ C1] R10: 00000000000000a0 R11: 0000000000000246 R12: 0000000000000000 [ 266.476276][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 266.484097][ C1]