Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts. 2024/04/17 01:03:44 fuzzer started 2024/04/17 01:03:44 dialing manager at 10.128.0.163:30004 [ 20.581214][ T30] audit: type=1400 audit(1713315824.720:66): avc: denied { node_bind } for pid=284 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 20.601715][ T30] audit: type=1400 audit(1713315824.720:67): avc: denied { name_bind } for pid=284 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 20.701581][ T30] audit: type=1400 audit(1713315824.840:68): avc: denied { integrity } for pid=292 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 20.705200][ T292] cgroup: Unknown subsys name 'net' [ 20.723824][ T30] audit: type=1400 audit(1713315824.840:69): avc: denied { mounton } for pid=292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.751458][ T30] audit: type=1400 audit(1713315824.840:70): avc: denied { mount } for pid=292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.751642][ T292] cgroup: Unknown subsys name 'devices' [ 20.773376][ T30] audit: type=1400 audit(1713315824.870:71): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.037863][ T292] cgroup: Unknown subsys name 'hugetlb' [ 21.043330][ T292] cgroup: Unknown subsys name 'rlimit' [ 21.227900][ T30] audit: type=1400 audit(1713315825.370:72): avc: denied { mounton } for pid=292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.240936][ T293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). 2024/04/17 01:03:45 code coverage: enabled 2024/04/17 01:03:45 comparison tracing: enabled 2024/04/17 01:03:45 extra coverage: enabled 2024/04/17 01:03:45 delay kcov mmap: mmap returned an invalid pointer 2024/04/17 01:03:45 setuid sandbox: enabled 2024/04/17 01:03:45 namespace sandbox: enabled 2024/04/17 01:03:45 Android sandbox: enabled 2024/04/17 01:03:45 fault injection: enabled 2024/04/17 01:03:45 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/04/17 01:03:45 net packet injection: enabled 2024/04/17 01:03:45 net device setup: enabled 2024/04/17 01:03:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/04/17 01:03:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/04/17 01:03:45 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/04/17 01:03:45 USB emulation: enabled 2024/04/17 01:03:45 hci packet injection: /dev/vhci does not exist 2024/04/17 01:03:45 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2024/04/17 01:03:45 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 2024/04/17 01:03:45 swap file: enabled [ 21.252777][ T30] audit: type=1400 audit(1713315825.370:73): avc: denied { mount } for pid=292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.270917][ T292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.284112][ T30] audit: type=1400 audit(1713315825.370:74): avc: denied { setattr } for pid=292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.315744][ T30] audit: type=1400 audit(1713315825.400:75): avc: denied { relabelto } for pid=293 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2024/04/17 01:03:45 starting 5 executor processes [ 21.772175][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.779202][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.786467][ T302] device bridge_slave_0 entered promiscuous mode [ 21.793864][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.800820][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.808012][ T302] device bridge_slave_1 entered promiscuous mode [ 21.893611][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.900791][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.908100][ T303] device bridge_slave_0 entered promiscuous mode [ 21.914528][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.921408][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.928562][ T308] device bridge_slave_0 entered promiscuous mode [ 21.936398][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.943227][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.950518][ T308] device bridge_slave_1 entered promiscuous mode [ 21.956873][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.963784][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.970999][ T303] device bridge_slave_1 entered promiscuous mode [ 22.030515][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.037376][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.044436][ T304] device bridge_slave_0 entered promiscuous mode [ 22.059455][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.066325][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.073492][ T304] device bridge_slave_1 entered promiscuous mode [ 22.106875][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.113729][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.120997][ T307] device bridge_slave_0 entered promiscuous mode [ 22.127625][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.134473][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.141835][ T307] device bridge_slave_1 entered promiscuous mode [ 22.228010][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.234852][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.241989][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.248839][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.278392][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.285234][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.292367][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.299145][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.341238][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.348346][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.355354][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.362731][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.371340][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.400297][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.407840][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.415749][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.422506][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.430455][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.438484][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.445319][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.452572][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.460612][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.467454][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.474783][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.491940][ T303] device veth0_vlan entered promiscuous mode [ 22.505570][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.513840][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.521638][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.528894][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.536340][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.544011][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.554801][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.562305][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.569530][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.580102][ T303] device veth1_macvtap entered promiscuous mode [ 22.588050][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.611042][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.619384][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.627392][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.634317][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.641519][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.649456][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.656293][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.663421][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.671133][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.678856][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.698771][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.707110][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.715008][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.721768][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.729068][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.738644][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.745461][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.752849][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.760752][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.776177][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.784298][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.793002][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.799863][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.807004][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.814644][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.822472][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.842485][ T308] device veth0_vlan entered promiscuous mode [ 22.848676][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.856952][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.864976][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.873456][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.881687][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.889731][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.897706][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.904533][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.911727][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.919820][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.928043][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.935646][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.952249][ T304] device veth0_vlan entered promiscuous mode [ 22.965200][ T307] device veth0_vlan entered promiscuous mode [ 22.971680][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.979421][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.986678][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.994689][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.002989][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.010782][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.018552][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.026345][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.034026][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.042170][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.050268][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.057948][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.065725][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.073875][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.081945][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.089668][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.097768][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.105037][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.112358][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.119580][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.131652][ T308] device veth1_macvtap entered promiscuous mode [ 23.139271][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.147684][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.155579][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@nogrpid}, {@noload}, {@commit}]}, 0x1, 0x612, &(0x7f0000000740)="$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") [ 23.170253][ T302] device veth0_vlan entered promiscuous mode [ 23.176336][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.184400][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.192742][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.200486][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.226800][ T307] device veth1_macvtap entered promiscuous mode [ 23.236633][ T304] device veth1_macvtap entered promiscuous mode [ 23.246165][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.253748][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.261774][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.269863][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.278246][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.286572][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.291434][ T330] loop1: detected capacity change from 0 to 1024 [ 23.294632][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.309289][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.317347][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.325310][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.332822][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.340954][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.347380][ T330] EXT4-fs (loop1): filesystem is read-only [ 23.361935][ T330] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 23.362219][ T302] device veth1_macvtap entered promiscuous mode executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) [ 23.371886][ T330] EXT4-fs error (device loop1): ext4_get_journal_inode:5150: inode #32: comm syz-executor.1: iget: special inode unallocated [ 23.390615][ T330] EXT4-fs (loop1): no journal found [ 23.395693][ T330] EXT4-fs (loop1): can't get journal size [ 23.409773][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.418078][ T330] EXT4-fs error (device loop1): ext4_protect_reserved_inode:160: inode #32: comm syz-executor.1: iget: special inode unallocated [ 23.427366][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.431950][ T330] EXT4-fs (loop1): failed to initialize system zone (-117) [ 23.441587][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.446664][ T330] EXT4-fs (loop1): mount failed [ 23.466349][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) [ 23.474437][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.483334][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.491676][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.500074][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.508355][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r2}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a000090400000008000122"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000b8e9850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000022000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="0102", 0x2) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(0xffffffffffffffff) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 23.586356][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.611245][ T344] process 'syz-executor.2' launched './file1' with NULL argv: empty string added [ 23.621624][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.636032][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 123.642529][ C0] rcu: 0-...!: (1 GPs behind) idle=06b/1/0x4000000000000000 softirq=2407/2408 fqs=0 last_accelerate: 93b4/bacf dyntick_enabled: 1 [ 123.655773][ C0] (t=10001 jiffies g=757 q=333) [ 123.660543][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10001 jiffies! g757 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 123.672525][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=292 [ 123.680075][ C0] rcu: rcu_preempt kthread starved for 10004 jiffies! g757 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 123.691103][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 123.700953][ C0] rcu: RCU grace-period kthread stack dump: [ 123.706639][ C0] task:rcu_preempt state:I stack:28328 pid: 14 ppid: 2 flags:0x00004000 [ 123.715682][ C0] Call Trace: [ 123.718782][ C0] [ 123.721569][ C0] __schedule+0xccc/0x1590 [ 123.725812][ C0] ? __sched_text_start+0x8/0x8 [ 123.730499][ C0] ? __kasan_check_write+0x14/0x20 [ 123.735444][ C0] schedule+0x11f/0x1e0 [ 123.739445][ C0] schedule_timeout+0x18c/0x370 [ 123.744131][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 123.749162][ C0] ? console_conditional_schedule+0x30/0x30 [ 123.754999][ C0] ? update_process_times+0x200/0x200 [ 123.760198][ C0] ? prepare_to_swait_event+0x308/0x320 [ 123.765578][ C0] rcu_gp_fqs_loop+0x2af/0xf80 [ 123.770180][ C0] ? debug_smp_processor_id+0x17/0x20 [ 123.775383][ C0] ? __note_gp_changes+0x4ab/0x920 [ 123.780332][ C0] ? rcu_gp_init+0xc30/0xc30 [ 123.784756][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 123.789791][ C0] ? rcu_gp_init+0x9cf/0xc30 [ 123.794217][ C0] rcu_gp_kthread+0xa4/0x350 [ 123.798643][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 123.803329][ C0] ? rcu_barrier_callback+0x50/0x50 [ 123.808364][ C0] ? __kasan_check_read+0x11/0x20 [ 123.813224][ C0] ? __kthread_parkme+0xb2/0x200 [ 123.817999][ C0] kthread+0x421/0x510 [ 123.821902][ C0] ? rcu_barrier_callback+0x50/0x50 [ 123.826934][ C0] ? kthread_blkcg+0xd0/0xd0 [ 123.831364][ C0] ret_from_fork+0x1f/0x30 [ 123.835618][ C0] [ 123.838492][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 123.844649][ C0] Sending NMI from CPU 0 to CPUs 1: [ 123.849714][ C1] NMI backtrace for cpu 1 [ 123.849733][ C1] CPU: 1 PID: 348 Comm: syz-executor.4 Not tainted 5.15.148-syzkaller-00013-gad06eaf051cd #0 [ 123.849750][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 123.849761][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 123.849780][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 123.849792][ C1] RSP: 0018:ffffc90005337480 EFLAGS: 00000246 [ 123.849805][ C1] RAX: 0000000000000003 RBX: 1ffff92000a66e94 RCX: ffffffff8154f88f [ 123.849816][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888101fba7d8 [ 123.849826][ C1] RBP: ffffc90005337530 R08: dffffc0000000000 R09: ffffed10203f74fc [ 123.849837][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 123.849847][ C1] R13: ffff888101fba7d8 R14: 0000000000000003 R15: 1ffff92000a66e98 [ 123.849857][ C1] FS: 00007f038a3c66c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 123.849871][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.849881][ C1] CR2: 000000c002477000 CR3: 0000000128704000 CR4: 00000000003506a0 [ 123.849894][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 123.849903][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 123.849912][ C1] Call Trace: [ 123.849916][ C1] [ 123.849921][ C1] ? show_regs+0x58/0x60 [ 123.849937][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 123.849954][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 123.849971][ C1] ? kvm_wait+0x147/0x180 [ 123.849984][ C1] ? kvm_wait+0x147/0x180 [ 123.849997][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 123.850012][ C1] ? nmi_handle+0xa8/0x280 [ 123.850027][ C1] ? kvm_wait+0x147/0x180 [ 123.850040][ C1] ? default_do_nmi+0x69/0x160 [ 123.850056][ C1] ? exc_nmi+0xaf/0x120 [ 123.850069][ C1] ? end_repeat_nmi+0x16/0x31 [ 123.850084][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 123.850102][ C1] ? kvm_wait+0x147/0x180 [ 123.850115][ C1] ? kvm_wait+0x147/0x180 [ 123.850128][ C1] ? kvm_wait+0x147/0x180 [ 123.850141][ C1] [ 123.850145][ C1] [ 123.850150][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 123.850165][ C1] ? pv_hash+0x86/0x150 [ 123.850179][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 123.850197][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 123.850213][ C1] ? futex_wait_queue_me+0x364/0x760 [ 123.850231][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 123.850246][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 123.850262][ C1] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 123.850279][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 123.850303][ C1] ? security_compute_sid+0x1d7d/0x1f40 [ 123.850318][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x934 [ 123.850335][ C1] bpf_trace_run2+0xec/0x210 [ 123.850351][ C1] ? ebitmap_cmp+0x159/0x1c0 [ 123.850367][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 123.850381][ C1] ? security_compute_sid+0x1d7d/0x1f40 [ 123.850396][ C1] ? security_compute_sid+0x1d7d/0x1f40 [ 123.850410][ C1] __bpf_trace_kfree+0x6f/0x90 [ 123.850425][ C1] ? security_compute_sid+0x1d7d/0x1f40 [ 123.850438][ C1] __traceiter_kfree+0x2a/0x40 [ 123.850450][ C1] ? security_compute_sid+0x1d7d/0x1f40 [ 123.850464][ C1] kfree+0x1f3/0x220 [ 123.850479][ C1] ? policydb_context_isvalid+0x1de/0x430 [ 123.850496][ C1] security_compute_sid+0x1d7d/0x1f40 [ 123.850515][ C1] ? security_transition_sid+0x90/0x90 [ 123.850528][ C1] ? __mutex_lock_slowpath+0x10/0x10 [ 123.850542][ C1] ? tracepoint_add_func+0x5ee/0x940 [ 123.850560][ C1] ? preempt_count_add+0x92/0x1a0 [ 123.850575][ C1] ? fd_install+0x144/0x250 [ 123.850589][ C1] ? bpf_link_settle+0xc0/0x150 [ 123.850603][ C1] security_transition_sid+0x7d/0x90 [ 123.850618][ C1] selinux_socket_create+0x204/0x330 [ 123.850636][ C1] ? selinux_socket_unix_may_send+0x2f0/0x2f0 [ 123.850654][ C1] security_socket_create+0x77/0xb0 [ 123.850668][ C1] __sock_create+0xd6/0x760 [ 123.850683][ C1] __sys_socketpair+0x29f/0x6e0 [ 123.850696][ C1] ? __ia32_sys_socket+0x90/0x90 [ 123.850710][ C1] ? __kasan_check_read+0x11/0x20 [ 123.850725][ C1] __x64_sys_socketpair+0x9b/0xb0 [ 123.850738][ C1] do_syscall_64+0x3d/0xb0 [ 123.850752][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 123.850768][ C1] RIP: 0033:0x7f038b652ea9 [ 123.850788][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 123.850799][ C1] RSP: 002b:00007f038a3c60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 123.850813][ C1] RAX: ffffffffffffffda RBX: 00007f038b780f80 RCX: 00007f038b652ea9 [ 123.850824][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 123.850832][ C1] RBP: 00007f038b69f4a4 R08: 0000000000000000 R09: 0000000000000000 [ 123.850841][ C1] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 123.850850][ C1] R13: 000000000000000b R14: 00007f038b780f80 R15: 00007fff0b32b338 [ 123.850863][ C1] [ 123.851749][ C0] NMI backtrace for cpu 0 [ 124.342028][ C0] CPU: 0 PID: 303 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00013-gad06eaf051cd #0 [ 124.352068][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 124.361893][ C0] Call Trace: [ 124.365017][ C0] [ 124.367711][ C0] dump_stack_lvl+0x151/0x1b7 [ 124.372227][ C0] ? io_uring_drop_tctx_refs+0x190/0x190 [ 124.377689][ C0] ? ttwu_do_wakeup+0x187/0x430 [ 124.382376][ C0] dump_stack+0x15/0x17 [ 124.386367][ C0] nmi_cpu_backtrace+0x2f7/0x300 [ 124.391142][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 124.397157][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 124.402424][ C0] ? __kasan_check_write+0x14/0x20 [ 124.407370][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 124.412061][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 124.417958][ C0] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 124.423775][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 124.429687][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 124.435407][ C0] rcu_dump_cpu_stacks+0x1d8/0x330 [ 124.440357][ C0] print_cpu_stall+0x315/0x5f0 [ 124.445046][ C0] rcu_sched_clock_irq+0x989/0x12f0 [ 124.450075][ C0] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 124.456071][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 124.461096][ C0] update_process_times+0x198/0x200 [ 124.466131][ C0] tick_sched_timer+0x188/0x240 [ 124.470824][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 124.476202][ C0] __hrtimer_run_queues+0x41a/0xad0 [ 124.481252][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 124.486186][ C0] ? clockevents_program_event+0x22f/0x300 [ 124.491822][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 124.497733][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 124.502599][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 124.508318][ C0] sysvec_apic_timer_interrupt+0x95/0xc0 [ 124.513781][ C0] [ 124.516558][ C0] [ 124.519338][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 124.525153][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 124.529971][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 124.549527][ C0] RSP: 0018:ffffc90000ac6fe0 EFLAGS: 00000246 [ 124.555466][ C0] RAX: 0000000000000001 RBX: 1ffff92000158e00 RCX: 1ffffffff0d1aa9c [ 124.563244][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7037ed4 [ 124.571045][ C0] RBP: ffffc90000ac7090 R08: dffffc0000000000 R09: ffffed103ee06fdb [ 124.578861][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 124.586670][ C0] R13: ffff8881f7037ed4 R14: 0000000000000001 R15: 1ffff92000158e04 [ 124.594488][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 124.599437][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 124.605332][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 124.611581][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 124.616354][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 124.621386][ C0] ? 0xffffffffa00186cc [ 124.625379][ C0] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 124.630676][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 124.635707][ C0] ? sock_map_unref+0x352/0x4d0 [ 124.640395][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x934 [ 124.645775][ C0] bpf_trace_run2+0xec/0x210 [ 124.650204][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 124.654889][ C0] ? stack_trace_save+0x113/0x1c0 [ 124.659750][ C0] ? sock_map_unref+0x352/0x4d0 [ 124.664454][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 124.669391][ C0] ? sock_map_unref+0x352/0x4d0 [ 124.674079][ C0] __bpf_trace_kfree+0x6f/0x90 [ 124.678680][ C0] ? sock_map_unref+0x352/0x4d0 [ 124.683364][ C0] __traceiter_kfree+0x2a/0x40 [ 124.688065][ C0] ? sock_map_unref+0x352/0x4d0 [ 124.692778][ C0] kfree+0x1f3/0x220 [ 124.696484][ C0] sock_map_unref+0x352/0x4d0 [ 124.700999][ C0] sock_hash_delete_elem+0x274/0x2f0 [ 124.706113][ C0] ? fscrypt_fname_free_buffer+0x43/0x70 [ 124.711583][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x934 [ 124.716976][ C0] bpf_trace_run2+0xec/0x210 [ 124.721393][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 124.726165][ C0] ? fscrypt_fname_free_buffer+0x43/0x70 [ 124.731659][ C0] ? fscrypt_fname_free_buffer+0x43/0x70 [ 124.737105][ C0] __bpf_trace_kfree+0x6f/0x90 [ 124.741709][ C0] ? fscrypt_fname_free_buffer+0x43/0x70 [ 124.747165][ C0] __traceiter_kfree+0x2a/0x40 [ 124.751764][ C0] ? fscrypt_fname_free_buffer+0x43/0x70 [ 124.757235][ C0] kfree+0x1f3/0x220 [ 124.760968][ C0] ? ext4_sync_file+0xa50/0xa50 [ 124.765654][ C0] fscrypt_fname_free_buffer+0x43/0x70 [ 124.770948][ C0] htree_dirblock_to_tree+0xfc4/0x10d0 [ 124.776246][ C0] ? ext4_htree_fill_tree+0x13e0/0x13e0 [ 124.781629][ C0] ? ____kasan_kmalloc+0xed/0x110 [ 124.786511][ C0] ? kmem_cache_alloc_trace+0x115/0x210 [ 124.791868][ C0] ? ext4_readdir+0x52e/0x38d0 [ 124.796571][ C0] ? iterate_dir+0x265/0x610 [ 124.800988][ C0] ? __se_sys_getdents64+0x1c1/0x460 [ 124.806109][ C0] ? __x64_sys_getdents64+0x7b/0x90 [ 124.811163][ C0] ? do_syscall_64+0x3d/0xb0 [ 124.815574][ C0] ext4_htree_fill_tree+0x73d/0x13e0 [ 124.820722][ C0] ? ext4_handle_dirty_dirblock+0x6d0/0x6d0 [ 124.826423][ C0] ? __kasan_kmalloc+0x9/0x10 [ 124.830936][ C0] ? ext4_readdir+0x52e/0x38d0 [ 124.835542][ C0] ext4_readdir+0x2ec3/0x38d0 [ 124.840059][ C0] ? down_read_killable+0xc5c/0x1220 [ 124.845167][ C0] ? numa_migrate_prep+0xe0/0xe0 [ 124.849944][ C0] ? from_kgid_munged+0x1fa/0x7a0 [ 124.854842][ C0] ? ext4_dir_llseek+0x540/0x540 [ 124.859662][ C0] ? down_read_interruptible+0x1220/0x1220 [ 124.865304][ C0] ? fsnotify_perm+0x4dc/0x5d0 [ 124.869903][ C0] ? security_file_permission+0x86/0xb0 [ 124.875284][ C0] iterate_dir+0x265/0x610 [ 124.879537][ C0] ? ext4_dir_llseek+0x540/0x540 [ 124.884309][ C0] __se_sys_getdents64+0x1c1/0x460 [ 124.889259][ C0] ? __x64_sys_getdents64+0x90/0x90 [ 124.894298][ C0] ? filldir+0x680/0x680 [ 124.898375][ C0] __x64_sys_getdents64+0x7b/0x90 [ 124.903232][ C0] do_syscall_64+0x3d/0xb0 [ 124.907483][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 124.913213][ C0] RIP: 0033:0x7f09564c43a3 [ 124.917467][ C0] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 8b fa ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 b0 ff ff ff f7 d8 [ 124.936928][ C0] RSP: 002b:00007ffd72d6b728 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 124.945151][ C0] RAX: ffffffffffffffda RBX: 00005555571cf810 RCX: 00007f09564c43a3 [ 124.952966][ C0] RDX: 0000000000008000 RSI: 00005555571cf810 RDI: 0000000000000003 [ 124.960868][ C0] RBP: 00005555571cf7e4 R08: 00007ffd72dac080 R09: 00007ffd72dac0b0 [ 124.968687][ C0] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffb0 [ 124.976645][ C0] R13: 0000000000000016 R14: 00005555571cf7e0 R15: 0000000000000003 [ 124.984450][ C0] [ 124.987398][ C0] Sending NMI from CPU 0 to CPUs 1: [ 124.992470][ C1] NMI backtrace for cpu 1 [ 124.992483][ C1] CPU: 1 PID: 348 Comm: syz-executor.4 Not tainted 5.15.148-syzkaller-00013-gad06eaf051cd #0 [ 124.992501][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 124.992509][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 124.992531][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 124.992543][ C1] RSP: 0018:ffffc90005337480 EFLAGS: 00000246 [ 124.992557][ C1] RAX: 0000000000000003 RBX: 1ffff92000a66e94 RCX: ffffffff8154f88f [ 124.992568][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888101fba7d8 [ 124.992578][ C1] RBP: ffffc90005337530 R08: dffffc0000000000 R09: ffffed10203f74fc [ 124.992589][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 124.992599][ C1] R13: ffff888101fba7d8 R14: 0000000000000003 R15: 1ffff92000a66e98 [ 124.992609][ C1] FS: 00007f038a3c66c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 124.992622][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.992633][ C1] CR2: 000000c002477000 CR3: 0000000128704000 CR4: 00000000003506a0 [ 124.992646][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.992655][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 124.992664][ C1] Call Trace: [ 124.992670][ C1] [ 124.992677][ C1] ? show_regs+0x58/0x60 [ 124.992694][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 124.992712][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 124.992729][ C1] ? kvm_wait+0x147/0x180 [ 124.992742][ C1] ? kvm_wait+0x147/0x180 [ 124.992756][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 124.992771][ C1] ? nmi_handle+0xa8/0x280 [ 124.992786][ C1] ? kvm_wait+0x147/0x180 [ 124.992799][ C1] ? kvm_wait+0x147/0x180 [ 124.992812][ C1] ? default_do_nmi+0x69/0x160 [ 124.992828][ C1] ? exc_nmi+0xaf/0x120 [ 124.992841][ C1] ? end_repeat_nmi+0x16/0x31 [ 124.992857][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 124.992875][ C1] ? kvm_wait+0x147/0x180 [ 124.992888][ C1] ? kvm_wait+0x147/0x180 [ 124.992902][ C1] ? kvm_wait+0x147/0x180 [ 124.992914][ C1] [ 124.992919][ C1] [ 124.992924][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 124.992939][ C1] ? pv_hash+0x86/0x150 [ 124.992953][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 124.992972][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 124.992988][ C1] ? futex_wait_queue_me+0x364/0x760 [ 124.993006][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 124.993023][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 124.993038][ C1] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 124.993056][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 124.993071][ C1] ? security_compute_sid+0x1d7d/0x1f40 [ 124.993086][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x934 [ 124.993099][ C1] bpf_trace_run2+0xec/0x210 [ 124.993115][ C1] ? ebitmap_cmp+0x159/0x1c0 [ 124.993130][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 124.993145][ C1] ? security_compute_sid+0x1d7d/0x1f40 [ 124.993159][ C1] ? security_compute_sid+0x1d7d/0x1f40 [ 124.993174][ C1] __bpf_trace_kfree+0x6f/0x90 [ 124.993188][ C1] ? security_compute_sid+0x1d7d/0x1f40 [ 124.993202][ C1] __traceiter_kfree+0x2a/0x40 [ 124.993221][ C1] ? security_compute_sid+0x1d7d/0x1f40 [ 124.993235][ C1] kfree+0x1f3/0x220 [ 124.993250][ C1] ? policydb_context_isvalid+0x1de/0x430 [ 124.993268][ C1] security_compute_sid+0x1d7d/0x1f40 [ 124.993288][ C1] ? security_transition_sid+0x90/0x90 [ 124.993302][ C1] ? __mutex_lock_slowpath+0x10/0x10 [ 124.993316][ C1] ? tracepoint_add_func+0x5ee/0x940 [ 124.993334][ C1] ? preempt_count_add+0x92/0x1a0 [ 124.993349][ C1] ? fd_install+0x144/0x250 [ 124.993363][ C1] ? bpf_link_settle+0xc0/0x150 [ 124.993378][ C1] security_transition_sid+0x7d/0x90 [ 124.993392][ C1] selinux_socket_create+0x204/0x330 [ 124.993410][ C1] ? selinux_socket_unix_may_send+0x2f0/0x2f0 [ 124.993429][ C1] security_socket_create+0x77/0xb0 [ 124.993443][ C1] __sock_create+0xd6/0x760 [ 124.993458][ C1] __sys_socketpair+0x29f/0x6e0 [ 124.993472][ C1] ? __ia32_sys_socket+0x90/0x90 [ 124.993486][ C1] ? __kasan_check_read+0x11/0x20 [ 124.993502][ C1] __x64_sys_socketpair+0x9b/0xb0 [ 124.993516][ C1] do_syscall_64+0x3d/0xb0 [ 124.993530][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 124.993546][ C1] RIP: 0033:0x7f038b652ea9 [ 124.993560][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 124.993571][ C1] RSP: 002b:00007f038a3c60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 124.993586][ C1] RAX: ffffffffffffffda RBX: 00007f038b780f80 RCX: 00007f038b652ea9 [ 124.993597][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 124.993605][ C1] RBP: 00007f038b69f4a4 R08: 0000000000000000 R09: 0000000000000000 [ 124.993615][ C1] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 124.993624][ C1] R13: 000000000000000b R14: 00007f038b780f80 R15: 00007fff0b32b338 [ 124.993636][ C1] [ 265.043652][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 225s! [syz-executor.1:303] [ 265.051986][ C0] Modules linked in: [ 265.055720][ C0] CPU: 0 PID: 303 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00013-gad06eaf051cd #0 [ 265.065709][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 265.075788][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 265.080567][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 265.100693][ C0] RSP: 0018:ffffc90000ac6fe0 EFLAGS: 00000246 [ 265.106766][ C0] RAX: 0000000000000001 RBX: 1ffff92000158e00 RCX: 1ffffffff0d1aa9c [ 265.114674][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7037ed4 [ 265.122573][ C0] RBP: ffffc90000ac7090 R08: dffffc0000000000 R09: ffffed103ee06fdb [ 265.130381][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 265.138276][ C0] R13: ffff8881f7037ed4 R14: 0000000000000001 R15: 1ffff92000158e04 [ 265.146091][ C0] FS: 00005555571ce480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 265.154855][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.161277][ C0] CR2: 00005555571d7818 CR3: 00000001233a9000 CR4: 00000000003506b0 [ 265.169103][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.176989][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.184800][ C0] Call Trace: [ 265.187936][ C0] [ 265.190669][ C0] ? show_regs+0x58/0x60 [ 265.194693][ C0] ? watchdog_timer_fn+0x4b1/0x5f0 [ 265.199653][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 265.204775][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 265.209971][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 265.214918][ C0] ? clockevents_program_event+0x22f/0x300 [ 265.220560][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 265.226460][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 265.231408][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 265.237308][ C0] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 265.242953][ C0] [ 265.245729][ C0] [ 265.248512][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 265.254497][ C0] ? kvm_wait+0x147/0x180 [ 265.258661][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 265.263608][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 265.269514][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 265.275758][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 265.280546][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 265.285567][ C0] ? 0xffffffffa00186cc [ 265.289560][ C0] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 265.294852][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 265.299886][ C0] ? sock_map_unref+0x352/0x4d0 [ 265.304585][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x934 [ 265.309958][ C0] bpf_trace_run2+0xec/0x210 [ 265.314381][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 265.319070][ C0] ? stack_trace_save+0x113/0x1c0 [ 265.323928][ C0] ? sock_map_unref+0x352/0x4d0 [ 265.328616][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 265.333570][ C0] ? sock_map_unref+0x352/0x4d0 [ 265.338249][ C0] __bpf_trace_kfree+0x6f/0x90 [ 265.342851][ C0] ? sock_map_unref+0x352/0x4d0 [ 265.347536][ C0] __traceiter_kfree+0x2a/0x40 [ 265.352134][ C0] ? sock_map_unref+0x352/0x4d0 [ 265.356822][ C0] kfree+0x1f3/0x220 [ 265.360554][ C0] sock_map_unref+0x352/0x4d0 [ 265.365069][ C0] sock_hash_delete_elem+0x274/0x2f0 [ 265.370191][ C0] ? fscrypt_fname_free_buffer+0x43/0x70 [ 265.375654][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x934 [ 265.381040][ C0] bpf_trace_run2+0xec/0x210 [ 265.385773][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 265.390503][ C0] ? fscrypt_fname_free_buffer+0x43/0x70 [ 265.395969][ C0] ? fscrypt_fname_free_buffer+0x43/0x70 [ 265.401441][ C0] __bpf_trace_kfree+0x6f/0x90 [ 265.406035][ C0] ? fscrypt_fname_free_buffer+0x43/0x70 [ 265.411504][ C0] __traceiter_kfree+0x2a/0x40 [ 265.416110][ C0] ? fscrypt_fname_free_buffer+0x43/0x70 [ 265.421583][ C0] kfree+0x1f3/0x220 [ 265.425307][ C0] ? ext4_sync_file+0xa50/0xa50 [ 265.430022][ C0] fscrypt_fname_free_buffer+0x43/0x70 [ 265.435287][ C0] htree_dirblock_to_tree+0xfc4/0x10d0 [ 265.440712][ C0] ? ext4_htree_fill_tree+0x13e0/0x13e0 [ 265.446076][ C0] ? ____kasan_kmalloc+0xed/0x110 [ 265.450928][ C0] ? kmem_cache_alloc_trace+0x115/0x210 [ 265.456307][ C0] ? ext4_readdir+0x52e/0x38d0 [ 265.460908][ C0] ? iterate_dir+0x265/0x610 [ 265.465333][ C0] ? __se_sys_getdents64+0x1c1/0x460 [ 265.470455][ C0] ? __x64_sys_getdents64+0x7b/0x90 [ 265.475488][ C0] ? do_syscall_64+0x3d/0xb0 [ 265.479919][ C0] ext4_htree_fill_tree+0x73d/0x13e0 [ 265.485037][ C0] ? ext4_handle_dirty_dirblock+0x6d0/0x6d0 [ 265.490767][ C0] ? __kasan_kmalloc+0x9/0x10 [ 265.495278][ C0] ? ext4_readdir+0x52e/0x38d0 [ 265.499880][ C0] ext4_readdir+0x2ec3/0x38d0 [ 265.504394][ C0] ? down_read_killable+0xc5c/0x1220 [ 265.509539][ C0] ? numa_migrate_prep+0xe0/0xe0 [ 265.514290][ C0] ? from_kgid_munged+0x1fa/0x7a0 [ 265.519147][ C0] ? ext4_dir_llseek+0x540/0x540 [ 265.523920][ C0] ? down_read_interruptible+0x1220/0x1220 [ 265.529679][ C0] ? fsnotify_perm+0x4dc/0x5d0 [ 265.534271][ C0] ? security_file_permission+0x86/0xb0 [ 265.539657][ C0] iterate_dir+0x265/0x610 [ 265.543906][ C0] ? ext4_dir_llseek+0x540/0x540 [ 265.548682][ C0] __se_sys_getdents64+0x1c1/0x460 [ 265.553627][ C0] ? __x64_sys_getdents64+0x90/0x90 [ 265.558661][ C0] ? filldir+0x680/0x680 [ 265.562741][ C0] __x64_sys_getdents64+0x7b/0x90 [ 265.568033][ C0] do_syscall_64+0x3d/0xb0 [ 265.572287][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 265.578016][ C0] RIP: 0033:0x7f09564c43a3 [ 265.582289][ C0] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 8b fa ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 b0 ff ff ff f7 d8 [ 265.601907][ C0] RSP: 002b:00007ffd72d6b728 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 265.610150][ C0] RAX: ffffffffffffffda RBX: 00005555571cf810 RCX: 00007f09564c43a3 [ 265.617960][ C0] RDX: 0000000000008000 RSI: 00005555571cf810 RDI: 0000000000000003 [ 265.625772][ C0] RBP: 00005555571cf7e4 R08: 00007ffd72dac080 R09: 00007ffd72dac0b0 [ 265.633585][ C0] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffb0 [ 265.641493][ C0] R13: 0000000000000016 R14: 00005555571cf7e0 R15: 0000000000000003 [ 265.649301][ C0] [ 265.652167][ C0] Sending NMI from CPU 0 to CPUs 1: [ 265.657240][ C1] NMI backtrace for cpu 1 [ 265.657249][ C1] CPU: 1 PID: 348 Comm: syz-executor.4 Not tainted 5.15.148-syzkaller-00013-gad06eaf051cd #0 [ 265.657265][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 265.657273][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 265.657293][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 265.657305][ C1] RSP: 0018:ffffc90005337480 EFLAGS: 00000246 [ 265.657318][ C1] RAX: 0000000000000003 RBX: 1ffff92000a66e94 RCX: ffffffff8154f88f [ 265.657328][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888101fba7d8 [ 265.657338][ C1] RBP: ffffc90005337530 R08: dffffc0000000000 R09: ffffed10203f74fc [ 265.657349][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 265.657359][ C1] R13: ffff888101fba7d8 R14: 0000000000000003 R15: 1ffff92000a66e98 [ 265.657370][ C1] FS: 00007f038a3c66c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 265.657383][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.657393][ C1] CR2: 000000c002477000 CR3: 0000000128704000 CR4: 00000000003506a0 [ 265.657407][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.657415][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.657425][ C1] Call Trace: [ 265.657429][ C1] [ 265.657435][ C1] ? show_regs+0x58/0x60 [ 265.657451][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 265.657469][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 265.657486][ C1] ? kvm_wait+0x147/0x180 [ 265.657499][ C1] ? kvm_wait+0x147/0x180 [ 265.657512][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 265.657526][ C1] ? nmi_handle+0xa8/0x280 [ 265.657541][ C1] ? kvm_wait+0x147/0x180 [ 265.657554][ C1] ? kvm_wait+0x147/0x180 [ 265.657566][ C1] ? default_do_nmi+0x69/0x160 [ 265.657583][ C1] ? exc_nmi+0xaf/0x120 [ 265.657596][ C1] ? end_repeat_nmi+0x16/0x31 [ 265.657611][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 265.657629][ C1] ? kvm_wait+0x147/0x180 [ 265.657642][ C1] ? kvm_wait+0x147/0x180 [ 265.657655][ C1] ? kvm_wait+0x147/0x180 [ 265.657668][ C1] [ 265.657672][ C1] [ 265.657677][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 265.657692][ C1] ? pv_hash+0x86/0x150 [ 265.657706][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 265.657724][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 265.657740][ C1] ? futex_wait_queue_me+0x364/0x760 [ 265.657758][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 265.657780][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 265.657796][ C1] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 265.657813][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 265.657828][ C1] ? security_compute_sid+0x1d7d/0x1f40 [ 265.657843][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x934 [ 265.657855][ C1] bpf_trace_run2+0xec/0x210 [ 265.657871][ C1] ? ebitmap_cmp+0x159/0x1c0 [ 265.657885][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 265.657899][ C1] ? security_compute_sid+0x1d7d/0x1f40 [ 265.657914][ C1] ? security_compute_sid+0x1d7d/0x1f40 [ 265.657928][ C1] __bpf_trace_kfree+0x6f/0x90 [ 265.657941][ C1] ? security_compute_sid+0x1d7d/0x1f40 [ 265.657955][ C1] __traceiter_kfree+0x2a/0x40 [ 265.657967][ C1] ? security_compute_sid+0x1d7d/0x1f40 [ 265.657981][ C1] kfree+0x1f3/0x220 [ 265.657995][ C1] ? policydb_context_isvalid+0x1de/0x430 [ 265.658013][ C1] security_compute_sid+0x1d7d/0x1f40 [ 265.658032][ C1] ? security_transition_sid+0x90/0x90 [ 265.658046][ C1] ? __mutex_lock_slowpath+0x10/0x10 [ 265.658060][ C1] ? tracepoint_add_func+0x5ee/0x940 [ 265.658078][ C1] ? preempt_count_add+0x92/0x1a0 [ 265.658093][ C1] ? fd_install+0x144/0x250 [ 265.658106][ C1] ? bpf_link_settle+0xc0/0x150 [ 265.658121][ C1] security_transition_sid+0x7d/0x90 [ 265.658135][ C1] selinux_socket_create+0x204/0x330 [ 265.658152][ C1] ? selinux_socket_unix_may_send+0x2f0/0x2f0 [ 265.658171][ C1] security_socket_create+0x77/0xb0 [ 265.658185][ C1] __sock_create+0xd6/0x760 [ 265.658199][ C1] __sys_socketpair+0x29f/0x6e0 [ 265.658213][ C1] ? __ia32_sys_socket+0x90/0x90 [ 265.658227][ C1] ? __kasan_check_read+0x11/0x20 [ 265.658242][ C1] __x64_sys_socketpair+0x9b/0xb0 [ 265.658255][ C1] do_syscall_64+0x3d/0xb0 [ 265.658269][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 265.658285][ C1] RIP: 0033:0x7f038b652ea9 [ 265.658298][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 265.658309][ C1] RSP: 002b:00007f038a3c60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 265.658323][ C1] RAX: ffffffffffffffda RBX: 00007f038b780f80 RCX: 00007f038b652ea9 [ 265.658334][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 265.658342][ C1] RBP: 00007f038b69f4a4 R08: 0000000000000000 R09: 0000000000000000 [ 265.658351][ C1] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 265.658360][ C1] R13: 000000000000000b R14: 00007f038b780f80 R15: 00007fff0b32b338 [ 265.658372][ C1]