Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts. 2024/04/15 05:14:18 fuzzer started 2024/04/15 05:14:18 dialing manager at 10.128.0.163:30004 [ 18.135247][ T30] audit: type=1400 audit(1713158058.434:66): avc: denied { node_bind } for pid=281 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 18.138602][ T30] audit: type=1400 audit(1713158058.434:67): avc: denied { name_bind } for pid=281 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 18.228308][ T30] audit: type=1400 audit(1713158058.534:68): avc: denied { integrity } for pid=288 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 18.252873][ T288] cgroup: Unknown subsys name 'net' [ 18.256521][ T30] audit: type=1400 audit(1713158058.564:69): avc: denied { mounton } for pid=288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.280452][ T30] audit: type=1400 audit(1713158058.564:70): avc: denied { mount } for pid=288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.286666][ T288] cgroup: Unknown subsys name 'devices' [ 18.302357][ T30] audit: type=1400 audit(1713158058.564:71): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.508194][ T288] cgroup: Unknown subsys name 'hugetlb' [ 18.513654][ T288] cgroup: Unknown subsys name 'rlimit' [ 18.668121][ T30] audit: type=1400 audit(1713158058.974:72): avc: denied { mounton } for pid=288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 18.692685][ T30] audit: type=1400 audit(1713158058.974:73): avc: denied { mount } for pid=288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 18.715627][ T30] audit: type=1400 audit(1713158058.974:74): avc: denied { setattr } for pid=288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.721771][ T290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). 2024/04/15 05:14:19 code coverage: enabled 2024/04/15 05:14:19 comparison tracing: enabled 2024/04/15 05:14:19 extra coverage: enabled 2024/04/15 05:14:19 delay kcov mmap: mmap returned an invalid pointer 2024/04/15 05:14:19 setuid sandbox: enabled 2024/04/15 05:14:19 namespace sandbox: enabled 2024/04/15 05:14:19 Android sandbox: enabled 2024/04/15 05:14:19 fault injection: enabled 2024/04/15 05:14:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/04/15 05:14:19 net packet injection: enabled 2024/04/15 05:14:19 net device setup: enabled 2024/04/15 05:14:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/04/15 05:14:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/04/15 05:14:19 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/04/15 05:14:19 USB emulation: enabled 2024/04/15 05:14:19 hci packet injection: /dev/vhci does not exist 2024/04/15 05:14:19 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2024/04/15 05:14:19 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 2024/04/15 05:14:19 swap file: enabled [ 18.747241][ T30] audit: type=1400 audit(1713158059.054:75): avc: denied { relabelto } for pid=290 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.777713][ T288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/04/15 05:14:19 starting 5 executor processes [ 19.262384][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.269261][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.276335][ T302] device bridge_slave_0 entered promiscuous mode [ 19.291958][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.298853][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.305872][ T301] device bridge_slave_0 entered promiscuous mode [ 19.312710][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.319577][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.326848][ T301] device bridge_slave_1 entered promiscuous mode [ 19.335315][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.342265][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.349351][ T302] device bridge_slave_1 entered promiscuous mode [ 19.374394][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.381271][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.388508][ T300] device bridge_slave_0 entered promiscuous mode [ 19.401168][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.408068][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.415714][ T304] device bridge_slave_0 entered promiscuous mode [ 19.433607][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.440454][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.447714][ T300] device bridge_slave_1 entered promiscuous mode [ 19.453982][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.460827][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.467902][ T304] device bridge_slave_1 entered promiscuous mode [ 19.479376][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.486199][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.493648][ T303] device bridge_slave_0 entered promiscuous mode [ 19.516408][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.523276][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.530513][ T303] device bridge_slave_1 entered promiscuous mode [ 19.605591][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.612450][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.619551][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.626316][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.640333][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.647183][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.654252][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.661079][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.716663][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.724903][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.732242][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.740261][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.748413][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.756153][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.764053][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.772539][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.779802][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.813183][ T301] device veth0_vlan entered promiscuous mode [ 19.832131][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.839848][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.847759][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 19.854867][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 19.865017][ T301] device veth1_macvtap entered promiscuous mode [ 19.881277][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 19.889498][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.896907][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.904753][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.911556][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.918734][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.926714][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.933536][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.952315][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.959712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 19.968636][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.976743][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.983566][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.990985][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.998900][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.005712][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.013017][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.020928][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.027756][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.043569][ T304] device veth0_vlan entered promiscuous mode [ 20.057587][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.064921][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.072853][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.081107][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.089364][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.096737][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.103873][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.111721][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.119489][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.127169][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.134781][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.142821][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.150744][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.157580][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.169795][ T304] device veth1_macvtap entered promiscuous mode [ 20.182052][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.197124][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.205232][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 05:14:20 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 05:14:20 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff}) [ 20.224538][ T302] device veth0_vlan entered promiscuous mode [ 20.242948][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.254553][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.266190][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.274513][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.282142][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.290841][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.298808][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.321495][ T302] device veth1_macvtap entered promiscuous mode [ 20.329760][ T300] device veth0_vlan entered promiscuous mode [ 20.338155][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.346334][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.354451][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.361940][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.369784][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.393541][ T300] device veth1_macvtap entered promiscuous mode [ 20.400481][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.407832][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.415128][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.423280][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.430721][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 20.439030][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.447348][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.454200][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.461664][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 05:14:20 executing program 0: r0 = socket(0x2, 0x3, 0x6) connect$unix(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="fb0201d20a"], 0x10) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e65aff61dcfb5a78a23d53b58b02a414595f624e0ab3e6aefff2960c85ed2497", 0x20}], 0x1) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000280)="25a31bf4ffffffff0000339451344f86d085e692", 0x14}], 0x1) [ 20.470013][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.478232][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.485085][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.492523][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.500462][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.511457][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 05:14:20 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x8, {0x8, 0x0, "e5e3792acec5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 20.520214][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.529807][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.537837][ T323] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 20.545633][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.553881][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.561979][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.570304][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.586708][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.594710][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.616333][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 05:14:21 executing program 2: ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x891c, &(0x7f0000000000)={0x0, {0x2, 0x0, @remote}, {}, {0x2, 0x0, @private}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 05:14:21 executing program 1: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xeffffdff, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x5}]}}) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) execve(&(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000780)) [ 20.636338][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.644855][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.653396][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.662641][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.679342][ T303] device veth0_vlan entered promiscuous mode [ 20.720755][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.729200][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.742755][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.756810][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.770380][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.785101][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.787747][ T344] process 'syz-executor.1' launched './file1' with NULL argv: empty string added [ 20.805493][ T303] device veth1_macvtap entered promiscuous mode [ 20.821156][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.829450][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.838313][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.846642][ T325] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 20.854983][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.863324][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 05:14:21 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="8bb177c20a7c0c4100ffa6f380d6f8b97ae2cf989619c4c6a3741628a38e59ce76f73bcd4623d6798a3234c32ef1fb6954cc0701000000acaea457f05e513b1a51d326d737a98527"], 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 05:14:21 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780), &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r4, &(0x7f0000000080)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00', 0x0) [ 20.871769][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.880398][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.916428][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 120.922983][ C0] rcu: 0-...!: (1 GPs behind) idle=9b5/1/0x4000000000000000 softirq=2033/2034 fqs=0 last_accelerate: 92ad/b9be dyntick_enabled: 1 [ 120.936399][ C0] (t=10001 jiffies g=589 q=277) [ 120.941159][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10001 jiffies! g589 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 120.953137][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=326 [ 120.960741][ C0] rcu: rcu_preempt kthread starved for 10004 jiffies! g589 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 120.971710][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 120.981531][ C0] rcu: RCU grace-period kthread stack dump: [ 120.987288][ C0] task:rcu_preempt state:I stack:28328 pid: 14 ppid: 2 flags:0x00004000 [ 120.996280][ C0] Call Trace: [ 120.999397][ C0] [ 121.002173][ C0] __schedule+0xccc/0x1590 [ 121.006433][ C0] ? __sched_text_start+0x8/0x8 [ 121.011113][ C0] ? __kasan_check_write+0x14/0x20 [ 121.016058][ C0] schedule+0x11f/0x1e0 [ 121.020052][ C0] schedule_timeout+0x18c/0x370 [ 121.024824][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 121.029860][ C0] ? console_conditional_schedule+0x30/0x30 [ 121.035586][ C0] ? update_process_times+0x200/0x200 [ 121.040794][ C0] ? prepare_to_swait_event+0x308/0x320 [ 121.046176][ C0] rcu_gp_fqs_loop+0x2af/0xf80 [ 121.050809][ C0] ? debug_smp_processor_id+0x17/0x20 [ 121.055983][ C0] ? __note_gp_changes+0x4ab/0x920 [ 121.061019][ C0] ? rcu_gp_init+0xc30/0xc30 [ 121.065458][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 121.070487][ C0] ? rcu_gp_init+0x9cf/0xc30 [ 121.074903][ C0] rcu_gp_kthread+0xa4/0x350 [ 121.079329][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 121.084018][ C0] ? rcu_barrier_callback+0x50/0x50 [ 121.089052][ C0] ? __kasan_check_read+0x11/0x20 [ 121.093909][ C0] ? __kthread_parkme+0xb2/0x200 [ 121.098685][ C0] kthread+0x421/0x510 [ 121.102589][ C0] ? rcu_barrier_callback+0x50/0x50 [ 121.107625][ C0] ? kthread_blkcg+0xd0/0xd0 [ 121.112051][ C0] ret_from_fork+0x1f/0x30 [ 121.116306][ C0] [ 121.119181][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 121.125421][ C0] Sending NMI from CPU 0 to CPUs 1: [ 121.130479][ C1] NMI backtrace for cpu 1 [ 121.130489][ C1] CPU: 1 PID: 343 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 121.130507][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 121.130516][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 121.130536][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 121.130549][ C1] RSP: 0018:ffffc900001d0760 EFLAGS: 00000246 [ 121.130563][ C1] RAX: 0000000000000001 RBX: 1ffff9200003a0f0 RCX: 1ffffffff0d1aa9c [ 121.130575][ C1] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7137ed4 [ 121.130585][ C1] RBP: ffffc900001d0810 R08: dffffc0000000000 R09: ffffed103ee26fdb [ 121.130597][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 121.130609][ C1] R13: ffff8881f7137ed4 R14: 0000000000000001 R15: 1ffff9200003a0f4 [ 121.130620][ C1] FS: 00007f201a4fa6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 121.130635][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.130647][ C1] CR2: 0000000020489000 CR3: 0000000129880000 CR4: 00000000003506a0 [ 121.130661][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 121.130671][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 121.130681][ C1] Call Trace: [ 121.130686][ C1] [ 121.130692][ C1] ? show_regs+0x58/0x60 [ 121.130708][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 121.130728][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 121.130747][ C1] ? kvm_wait+0x147/0x180 [ 121.130761][ C1] ? kvm_wait+0x147/0x180 [ 121.130775][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 121.130793][ C1] ? nmi_handle+0xa8/0x280 [ 121.130809][ C1] ? kvm_wait+0x147/0x180 [ 121.130823][ C1] ? default_do_nmi+0x69/0x160 [ 121.130839][ C1] ? exc_nmi+0xaf/0x120 [ 121.130872][ C1] ? end_repeat_nmi+0x16/0x31 [ 121.130889][ C1] ? kvm_wait+0x147/0x180 [ 121.130903][ C1] ? kvm_wait+0x147/0x180 [ 121.130918][ C1] ? kvm_wait+0x147/0x180 [ 121.130932][ C1] [ 121.130936][ C1] [ 121.130941][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 121.130961][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 121.130977][ C1] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 121.130998][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 121.131018][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 121.131035][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 121.131052][ C1] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 121.131071][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 121.131087][ C1] ? ip6_dst_destroy+0x8d/0x450 [ 121.131105][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0xc7c [ 121.131119][ C1] bpf_trace_run2+0xec/0x210 [ 121.131136][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 121.131152][ C1] ? ip6_dst_destroy+0x8d/0x450 [ 121.131169][ C1] ? ttwu_do_wakeup+0xe3/0x430 [ 121.131185][ C1] ? ip6_dst_destroy+0x8d/0x450 [ 121.131208][ C1] __bpf_trace_kfree+0x6f/0x90 [ 121.131223][ C1] ? ip6_dst_destroy+0x8d/0x450 [ 121.131239][ C1] kfree+0x1f3/0x220 [ 121.131255][ C1] ? try_to_wake_up+0x697/0x1160 [ 121.131274][ C1] ip6_dst_destroy+0x8d/0x450 [ 121.131291][ C1] ? ip6_default_advmss+0xf0/0xf0 [ 121.131308][ C1] dst_destroy+0x14f/0x330 [ 121.131324][ C1] ? dst_release+0xe0/0xe0 [ 121.131339][ C1] dst_destroy_rcu+0x19/0x20 [ 121.131353][ C1] rcu_do_batch+0x57a/0xc10 [ 121.131372][ C1] ? local_bh_enable+0x20/0x20 [ 121.131388][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 121.131405][ C1] ? delayed_work_timer_fn+0x61/0x80 [ 121.131423][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 121.131439][ C1] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 121.131456][ C1] ? rcu_report_qs_rnp+0x2bf/0x390 [ 121.131473][ C1] rcu_core+0x517/0x1020 [ 121.131491][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 121.131508][ C1] ? hrtimer_interrupt+0x867/0xaa0 [ 121.131525][ C1] rcu_core_si+0x9/0x10 [ 121.131540][ C1] __do_softirq+0x26d/0x5bf [ 121.131556][ C1] __irq_exit_rcu+0x50/0xf0 [ 121.131572][ C1] irq_exit_rcu+0x9/0x10 [ 121.131588][ C1] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 121.131605][ C1] [ 121.131609][ C1] [ 121.131614][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 121.131632][ C1] RIP: 0010:chacha_block_generic+0x1a8/0x1340 [ 121.131650][ C1] Code: 0f 85 69 07 00 00 44 8b 74 24 48 48 8d 5a 08 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 72 07 00 00 44 03 33 49 8d 5d 08 <4d> 8d 65 0b 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 7e 07 [ 121.131662][ C1] RSP: 0018:ffffc90005757b80 EFLAGS: 00000a96 [ 121.131675][ C1] RAX: 0000000000000000 RBX: ffffc90005757d48 RCX: 00000000a4285464 [ 121.131686][ C1] RDX: ffffc90005757ce0 RSI: ffffc90005757bc0 RDI: ffffc90005757bc8 [ 121.131698][ C1] RBP: ffffc90005757c70 R08: ffffc90005757bc8 R09: ffffc90005757be0 [ 121.131709][ C1] R10: 000000002ae55bcf R11: 00000000a4285464 R12: ffffc90005757d47 [ 121.131720][ C1] R13: ffffc90005757d40 R14: 00000000ec74c5f0 R15: dffffc0000000000 [ 121.131735][ C1] ? rational_best_approximation+0x250/0x250 [ 121.131752][ C1] ? get_random_bytes_user+0x215/0x400 [ 121.131771][ C1] get_random_bytes_user+0x196/0x400 [ 121.131789][ C1] ? signal_pending+0xa0/0xa0 [ 121.131806][ C1] ? __fdget+0x1ce/0x240 [ 121.131820][ C1] ? import_single_range+0xda/0x220 [ 121.131838][ C1] __x64_sys_getrandom+0x18a/0x270 [ 121.131860][ C1] ? __kasan_check_write+0x14/0x20 [ 121.131876][ C1] ? add_disk_randomness+0xd0/0xd0 [ 121.131895][ C1] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 121.131912][ C1] do_syscall_64+0x3d/0xb0 [ 121.131926][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 121.131944][ C1] RIP: 0033:0x7f201b786e69 [ 121.131971][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 121.131984][ C1] RSP: 002b:00007f201a4fa0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 121.131999][ C1] RAX: ffffffffffffffda RBX: 00007f201b8b4f80 RCX: 00007f201b786e69 [ 121.132011][ C1] RDX: 0000000000000000 RSI: 00000000ffffff4f RDI: 0000000020000600 [ 121.132021][ C1] RBP: 00007f201b7d347a R08: 0000000000000000 R09: 0000000000000000 [ 121.132032][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.132041][ C1] R13: 000000000000000b R14: 00007f201b8b4f80 R15: 00007ffef7b24fa8 [ 121.132055][ C1] [ 121.132477][ C0] NMI backtrace for cpu 0 [ 121.747503][ C0] CPU: 0 PID: 349 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 121.757482][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 121.767376][ C0] Call Trace: [ 121.770507][ C0] [ 121.773213][ C0] dump_stack_lvl+0x151/0x1b7 [ 121.777790][ C0] ? io_uring_drop_tctx_refs+0x190/0x190 [ 121.783264][ C0] ? ttwu_do_wakeup+0x187/0x430 [ 121.787955][ C0] dump_stack+0x15/0x17 [ 121.791940][ C0] nmi_cpu_backtrace+0x2f7/0x300 [ 121.796740][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 121.802698][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 121.807995][ C0] ? __kasan_check_write+0x14/0x20 [ 121.812955][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 121.817635][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 121.823531][ C0] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 121.829431][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 121.835339][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 121.841157][ C0] rcu_dump_cpu_stacks+0x1d8/0x330 [ 121.846094][ C0] print_cpu_stall+0x315/0x5f0 [ 121.850696][ C0] rcu_sched_clock_irq+0x989/0x12f0 [ 121.855741][ C0] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 121.861732][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 121.866755][ C0] update_process_times+0x198/0x200 [ 121.871787][ C0] tick_sched_timer+0x188/0x240 [ 121.876483][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 121.881857][ C0] __hrtimer_run_queues+0x41a/0xad0 [ 121.886891][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 121.891873][ C0] ? clockevents_program_event+0x22f/0x300 [ 121.897588][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 121.903492][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 121.908257][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 121.913966][ C0] sysvec_apic_timer_interrupt+0x95/0xc0 [ 121.919437][ C0] [ 121.922224][ C0] [ 121.925084][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 121.930903][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 121.936326][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 121.955722][ C0] RSP: 0018:ffffc90005a17480 EFLAGS: 00000246 [ 121.961792][ C0] RAX: 0000000000000003 RBX: 1ffff92000b42e94 RCX: ffffffff8154f88f [ 121.969778][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888129baaae8 [ 121.977588][ C0] RBP: ffffc90005a17530 R08: dffffc0000000000 R09: ffffed102537555e [ 121.985571][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 121.993548][ C0] R13: ffff888129baaae8 R14: 0000000000000003 R15: 1ffff92000b42e98 [ 122.001332][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 122.007377][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 122.013366][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 122.018312][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 122.024393][ C0] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 122.030290][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 122.036575][ C0] ? __find_get_block+0xd38/0x1180 [ 122.041491][ C0] ? ext4_inode_block_valid+0x2e1/0x3f0 [ 122.046867][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 122.051653][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 122.056675][ C0] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 122.062093][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 122.067123][ C0] ? sock_map_unref+0x352/0x4d0 [ 122.071810][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0xc7c [ 122.077188][ C0] bpf_trace_run2+0xec/0x210 [ 122.081613][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 122.086443][ C0] ? sock_map_unref+0x352/0x4d0 [ 122.091103][ C0] ? ext4_match+0x1e0/0x720 [ 122.095620][ C0] ? sock_map_unref+0x352/0x4d0 [ 122.100304][ C0] __bpf_trace_kfree+0x6f/0x90 [ 122.105200][ C0] ? sock_map_unref+0x352/0x4d0 [ 122.109887][ C0] kfree+0x1f3/0x220 [ 122.113613][ C0] sock_map_unref+0x352/0x4d0 [ 122.118127][ C0] sock_hash_delete_elem+0x274/0x2f0 [ 122.123464][ C0] ? ext4_lookup+0x3f3/0xaa0 [ 122.127887][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0xc7c [ 122.133267][ C0] bpf_trace_run2+0xec/0x210 [ 122.138046][ C0] ? ext4_ci_compare+0x660/0x660 [ 122.142816][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 122.147498][ C0] ? ext4_lookup+0x3f3/0xaa0 [ 122.151923][ C0] ? ext4_lookup+0x3f3/0xaa0 [ 122.156348][ C0] __bpf_trace_kfree+0x6f/0x90 [ 122.160965][ C0] ? ext4_lookup+0x3f3/0xaa0 [ 122.165378][ C0] kfree+0x1f3/0x220 [ 122.169123][ C0] ext4_lookup+0x3f3/0xaa0 [ 122.173365][ C0] ? ext4_add_entry+0x12b0/0x12b0 [ 122.178221][ C0] ? slab_post_alloc_hook+0x72/0x2c0 [ 122.183354][ C0] ? __kasan_check_write+0x14/0x20 [ 122.188297][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 122.192891][ C0] ? __d_alloc+0x4dd/0x6c0 [ 122.197159][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 122.201914][ C0] ? d_alloc+0x199/0x1d0 [ 122.206126][ C0] lookup_one_qstr_excl+0x143/0x290 [ 122.211171][ C0] filename_create+0x28e/0x530 [ 122.216078][ C0] ? kern_path_create+0x1a0/0x1a0 [ 122.220926][ C0] do_mkdirat+0xbd/0x450 [ 122.225006][ C0] ? vfs_mkdir+0x610/0x610 [ 122.229251][ C0] __x64_sys_mkdirat+0x89/0xa0 [ 122.233850][ C0] do_syscall_64+0x3d/0xb0 [ 122.238108][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 122.243839][ C0] RIP: 0033:0x7f177a0d5e69 [ 122.248085][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 122.267650][ C0] RSP: 002b:00007f1778e490c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 122.275890][ C0] RAX: ffffffffffffffda RBX: 00007f177a203f80 RCX: 00007f177a0d5e69 [ 122.283703][ C0] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 122.291520][ C0] RBP: 00007f177a12247a R08: 0000000000000000 R09: 0000000000000000 [ 122.299322][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.307137][ C0] R13: 000000000000000b R14: 00007f177a203f80 R15: 00007ffe303c55b8 [ 122.314949][ C0] [ 265.046479][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 246s! [syz-executor.1:343] [ 265.054804][ C1] Modules linked in: [ 265.058536][ C1] CPU: 1 PID: 343 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 265.068515][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 265.078412][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x38b/0xc40 [ 265.085090][ C1] Code: 00 00 00 00 00 fc ff df 41 0f b6 04 16 84 c0 0f 85 ac 00 00 00 48 8b 44 24 08 83 38 00 0f 85 15 01 00 00 45 84 e4 74 09 f3 90 <41> ff cc 75 d9 eb 1b 48 8b 44 24 20 0f b6 04 10 84 c0 0f 85 cd 00 [ 265.105064][ C1] RSP: 0018:ffffc900001d0820 EFLAGS: 00000202 [ 265.110965][ C1] RAX: ffff8881f7137ec8 RBX: ffff8881f7137ed4 RCX: 0000000000000000 [ 265.118778][ C1] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8881f7137ed4 [ 265.126587][ C1] RBP: ffffc900001d0910 R08: dffffc0000000000 R09: ffffed103ee26fdb [ 265.134397][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000007167 [ 265.142215][ C1] R13: 1ffff1102537555d R14: 1ffff1103ee26fd9 R15: ffff888129baaae8 [ 265.150020][ C1] FS: 00007f201a4fa6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 265.158788][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.165211][ C1] CR2: 0000000020489000 CR3: 0000000129880000 CR4: 00000000003506a0 [ 265.173023][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.180863][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.188643][ C1] Call Trace: [ 265.191774][ C1] [ 265.194460][ C1] ? show_regs+0x58/0x60 [ 265.198540][ C1] ? watchdog_timer_fn+0x4b1/0x5f0 [ 265.203495][ C1] ? proc_watchdog_cpumask+0xd0/0xd0 [ 265.208608][ C1] ? __hrtimer_run_queues+0x41a/0xad0 [ 265.213881][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 265.218766][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 265.223794][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 265.229697][ C1] ? hrtimer_interrupt+0x40c/0xaa0 [ 265.234647][ C1] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 265.240550][ C1] ? sysvec_apic_timer_interrupt+0x44/0xc0 [ 265.246188][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 265.252189][ C1] ? __pv_queued_spin_lock_slowpath+0x38b/0xc40 [ 265.258254][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 265.264501][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 265.269274][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 265.274308][ C1] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 265.279602][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 265.284642][ C1] ? ip6_dst_destroy+0x8d/0x450 [ 265.289323][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0xc7c [ 265.294704][ C1] bpf_trace_run2+0xec/0x210 [ 265.299140][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 265.303816][ C1] ? ip6_dst_destroy+0x8d/0x450 [ 265.308505][ C1] ? ttwu_do_wakeup+0xe3/0x430 [ 265.313103][ C1] ? ip6_dst_destroy+0x8d/0x450 [ 265.317790][ C1] __bpf_trace_kfree+0x6f/0x90 [ 265.322389][ C1] ? ip6_dst_destroy+0x8d/0x450 [ 265.327092][ C1] kfree+0x1f3/0x220 [ 265.330833][ C1] ? try_to_wake_up+0x697/0x1160 [ 265.335585][ C1] ip6_dst_destroy+0x8d/0x450 [ 265.340097][ C1] ? ip6_default_advmss+0xf0/0xf0 [ 265.345084][ C1] dst_destroy+0x14f/0x330 [ 265.349330][ C1] ? dst_release+0xe0/0xe0 [ 265.353585][ C1] dst_destroy_rcu+0x19/0x20 [ 265.358006][ C1] rcu_do_batch+0x57a/0xc10 [ 265.362347][ C1] ? local_bh_enable+0x20/0x20 [ 265.366946][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 265.372241][ C1] ? delayed_work_timer_fn+0x61/0x80 [ 265.377360][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 265.382046][ C1] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 265.387695][ C1] ? rcu_report_qs_rnp+0x2bf/0x390 [ 265.392639][ C1] rcu_core+0x517/0x1020 [ 265.396719][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 265.401750][ C1] ? hrtimer_interrupt+0x867/0xaa0 [ 265.406700][ C1] rcu_core_si+0x9/0x10 [ 265.410689][ C1] __do_softirq+0x26d/0x5bf [ 265.415123][ C1] __irq_exit_rcu+0x50/0xf0 [ 265.419466][ C1] irq_exit_rcu+0x9/0x10 [ 265.423542][ C1] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 265.429009][ C1] [ 265.431785][ C1] [ 265.434567][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 265.440382][ C1] RIP: 0010:chacha_block_generic+0x1a8/0x1340 [ 265.446288][ C1] Code: 0f 85 69 07 00 00 44 8b 74 24 48 48 8d 5a 08 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 72 07 00 00 44 03 33 49 8d 5d 08 <4d> 8d 65 0b 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 7e 07 [ 265.465809][ C1] RSP: 0018:ffffc90005757b80 EFLAGS: 00000a96 [ 265.471713][ C1] RAX: 0000000000000000 RBX: ffffc90005757d48 RCX: 00000000a4285464 [ 265.479524][ C1] RDX: ffffc90005757ce0 RSI: ffffc90005757bc0 RDI: ffffc90005757bc8 [ 265.487333][ C1] RBP: ffffc90005757c70 R08: ffffc90005757bc8 R09: ffffc90005757be0 [ 265.495146][ C1] R10: 000000002ae55bcf R11: 00000000a4285464 R12: ffffc90005757d47 [ 265.502974][ C1] R13: ffffc90005757d40 R14: 00000000ec74c5f0 R15: dffffc0000000000 [ 265.510772][ C1] ? rational_best_approximation+0x250/0x250 [ 265.516585][ C1] ? get_random_bytes_user+0x215/0x400 [ 265.521880][ C1] get_random_bytes_user+0x196/0x400 [ 265.526999][ C1] ? signal_pending+0xa0/0xa0 [ 265.531510][ C1] ? __fdget+0x1ce/0x240 [ 265.535590][ C1] ? import_single_range+0xda/0x220 [ 265.540778][ C1] __x64_sys_getrandom+0x18a/0x270 [ 265.545727][ C1] ? __kasan_check_write+0x14/0x20 [ 265.550792][ C1] ? add_disk_randomness+0xd0/0xd0 [ 265.555700][ C1] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 265.561167][ C1] do_syscall_64+0x3d/0xb0 [ 265.565418][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 265.571166][ C1] RIP: 0033:0x7f201b786e69 [ 265.575435][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 265.594875][ C1] RSP: 002b:00007f201a4fa0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 265.603085][ C1] RAX: ffffffffffffffda RBX: 00007f201b8b4f80 RCX: 00007f201b786e69 [ 265.610895][ C1] RDX: 0000000000000000 RSI: 00000000ffffff4f RDI: 0000000020000600 [ 265.618794][ C1] RBP: 00007f201b7d347a R08: 0000000000000000 R09: 0000000000000000 [ 265.626605][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.634418][ C1] R13: 000000000000000b R14: 00007f201b8b4f80 R15: 00007ffef7b24fa8 [ 265.642233][ C1] [ 265.645093][ C1] Sending NMI from CPU 1 to CPUs 0: [ 265.650236][ C0] NMI backtrace for cpu 0 [ 265.650246][ C0] CPU: 0 PID: 349 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 265.650262][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 265.650270][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 265.650290][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 265.650302][ C0] RSP: 0018:ffffc90005a17480 EFLAGS: 00000246 [ 265.650315][ C0] RAX: 0000000000000003 RBX: 1ffff92000b42e94 RCX: ffffffff8154f88f [ 265.650326][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888129baaae8 [ 265.650337][ C0] RBP: ffffc90005a17530 R08: dffffc0000000000 R09: ffffed102537555e [ 265.650348][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 265.650358][ C0] R13: ffff888129baaae8 R14: 0000000000000003 R15: 1ffff92000b42e98 [ 265.650368][ C0] FS: 00007f1778e496c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 265.650387][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.650397][ C0] CR2: 0000001b2e322000 CR3: 000000012a4b8000 CR4: 00000000003506b0 [ 265.650411][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.650419][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.650428][ C0] Call Trace: [ 265.650433][ C0] [ 265.650439][ C0] ? show_regs+0x58/0x60 [ 265.650455][ C0] ? nmi_cpu_backtrace+0x29f/0x300 [ 265.650521][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 265.650538][ C0] ? kvm_wait+0x147/0x180 [ 265.650551][ C0] ? kvm_wait+0x147/0x180 [ 265.650564][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 265.650580][ C0] ? nmi_handle+0xa8/0x280 [ 265.650594][ C0] ? kvm_wait+0x147/0x180 [ 265.650607][ C0] ? default_do_nmi+0x69/0x160 [ 265.650623][ C0] ? exc_nmi+0xaf/0x120 [ 265.650636][ C0] ? end_repeat_nmi+0x16/0x31 [ 265.650650][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 265.650668][ C0] ? kvm_wait+0x147/0x180 [ 265.650681][ C0] ? kvm_wait+0x147/0x180 [ 265.650694][ C0] ? kvm_wait+0x147/0x180 [ 265.650707][ C0] [ 265.650711][ C0] [ 265.650715][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 265.650733][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 265.650747][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 265.650764][ C0] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 265.650782][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 265.650798][ C0] ? __find_get_block+0xd38/0x1180 [ 265.650846][ C0] ? ext4_inode_block_valid+0x2e1/0x3f0 [ 265.650882][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 265.650898][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 265.650913][ C0] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 265.650931][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 265.650946][ C0] ? sock_map_unref+0x352/0x4d0 [ 265.650960][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0xc7c [ 265.650973][ C0] bpf_trace_run2+0xec/0x210 [ 265.650989][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 265.651004][ C0] ? sock_map_unref+0x352/0x4d0 [ 265.651018][ C0] ? ext4_match+0x1e0/0x720 [ 265.651036][ C0] ? sock_map_unref+0x352/0x4d0 [ 265.651050][ C0] __bpf_trace_kfree+0x6f/0x90 [ 265.651064][ C0] ? sock_map_unref+0x352/0x4d0 [ 265.651078][ C0] kfree+0x1f3/0x220 [ 265.651094][ C0] sock_map_unref+0x352/0x4d0 [ 265.651110][ C0] sock_hash_delete_elem+0x274/0x2f0 [ 265.651125][ C0] ? ext4_lookup+0x3f3/0xaa0 [ 265.651138][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0xc7c [ 265.651150][ C0] bpf_trace_run2+0xec/0x210 [ 265.651164][ C0] ? ext4_ci_compare+0x660/0x660 [ 265.651178][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 265.651193][ C0] ? ext4_lookup+0x3f3/0xaa0 [ 265.651206][ C0] ? ext4_lookup+0x3f3/0xaa0 [ 265.651219][ C0] __bpf_trace_kfree+0x6f/0x90 [ 265.651232][ C0] ? ext4_lookup+0x3f3/0xaa0 [ 265.651245][ C0] kfree+0x1f3/0x220 [ 265.651259][ C0] ext4_lookup+0x3f3/0xaa0 [ 265.651273][ C0] ? ext4_add_entry+0x12b0/0x12b0 [ 265.651287][ C0] ? slab_post_alloc_hook+0x72/0x2c0 [ 265.651303][ C0] ? __kasan_check_write+0x14/0x20 [ 265.651317][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 265.651333][ C0] ? __d_alloc+0x4dd/0x6c0 [ 265.651347][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 265.651362][ C0] ? d_alloc+0x199/0x1d0 [ 265.651375][ C0] lookup_one_qstr_excl+0x143/0x290 [ 265.651409][ C0] filename_create+0x28e/0x530 [ 265.651424][ C0] ? kern_path_create+0x1a0/0x1a0 [ 265.651440][ C0] do_mkdirat+0xbd/0x450 [ 265.651455][ C0] ? vfs_mkdir+0x610/0x610 [ 265.651470][ C0] __x64_sys_mkdirat+0x89/0xa0 [ 265.651485][ C0] do_syscall_64+0x3d/0xb0 [ 265.651498][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 265.651515][ C0] RIP: 0033:0x7f177a0d5e69 [ 265.651527][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 265.651538][ C0] RSP: 002b:00007f1778e490c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 265.651553][ C0] RAX: ffffffffffffffda RBX: 00007f177a203f80 RCX: 00007f177a0d5e69 [ 265.651564][ C0] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 265.651574][ C0] RBP: 00007f177a12247a R08: 0000000000000000 R09: 0000000000000000 [ 265.651582][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.651591][ C0] R13: 000000000000000b R14: 00007f177a203f80 R15: 00007ffe303c55b8 [ 265.651603][ C0]