Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts. 2025/09/03 18:20:38 parsed 1 programs syzkaller login: [ 55.833158][ T4189] cgroup: Unknown subsys name 'net' [ 55.981787][ T4189] cgroup: Unknown subsys name 'rlimit' [ 57.255082][ T4189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.878666][ T4206] chnl_net:caif_netlink_parms(): no params data found [ 58.922121][ T4206] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.930089][ T4206] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.938711][ T4206] device bridge_slave_0 entered promiscuous mode [ 58.950112][ T4206] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.957330][ T4206] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.965181][ T4206] device bridge_slave_1 entered promiscuous mode [ 58.984628][ T4206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.998516][ T4206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.020249][ T4206] team0: Port device team_slave_0 added [ 59.029511][ T4206] team0: Port device team_slave_1 added [ 59.046288][ T4206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.053329][ T4206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.080605][ T4206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.092881][ T4206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.100029][ T4206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.126809][ T4206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.158010][ T4206] device hsr_slave_0 entered promiscuous mode [ 59.165224][ T4206] device hsr_slave_1 entered promiscuous mode [ 59.279867][ T4206] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.291450][ T4206] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.303069][ T4206] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.313356][ T4206] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.343269][ T4206] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.350688][ T4206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.359425][ T4206] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.368745][ T4206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.425647][ T4206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.441431][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.453378][ T3054] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.462596][ T3054] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.472818][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 59.487453][ T4206] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.500469][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.510435][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.517663][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.541885][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.552124][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.559474][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.570480][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.587632][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.595754][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.604882][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.618144][ T4206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.630759][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.640357][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.754821][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.763556][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.777403][ T4206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.800634][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.821141][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.832018][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.841855][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.853359][ T4206] device veth0_vlan entered promiscuous mode [ 59.867335][ T4206] device veth1_vlan entered promiscuous mode [ 59.892454][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.903567][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.924925][ T4206] device veth0_macvtap entered promiscuous mode [ 59.937657][ T4206] device veth1_macvtap entered promiscuous mode [ 59.956478][ T4206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.964082][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.974076][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.990938][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.000135][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.012028][ T4206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.019843][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.029677][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.042743][ T4206] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.052192][ T4206] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.061981][ T4206] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.071250][ T4206] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.172183][ T4206] syz-executor (4206) used greatest stack depth: 21120 bytes left [ 60.266524][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.277030][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.295960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.309571][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.318248][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.328108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.415522][ T145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.761928][ T145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.021697][ T145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.083060][ T145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.340880][ T145] device hsr_slave_0 left promiscuous mode [ 66.358046][ T145] device hsr_slave_1 left promiscuous mode [ 66.379786][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 2025/09/03 18:20:51 executed programs: 0 [ 66.395968][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.417305][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.424903][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.446749][ T145] device bridge_slave_1 left promiscuous mode [ 66.467007][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.497289][ T145] device bridge_slave_0 left promiscuous mode [ 66.503536][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.525197][ T145] device veth1_macvtap left promiscuous mode [ 66.531945][ T145] device veth0_macvtap left promiscuous mode [ 66.539739][ T145] device veth1_vlan left promiscuous mode [ 66.546557][ T145] device veth0_vlan left promiscuous mode [ 66.672369][ T145] team0 (unregistering): Port device team_slave_1 removed [ 66.687472][ T145] team0 (unregistering): Port device team_slave_0 removed [ 66.699494][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.712496][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.767158][ T145] bond0 (unregistering): Released all slaves [ 67.035111][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 67.111249][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.119259][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.128624][ T4328] device bridge_slave_0 entered promiscuous mode [ 67.147356][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.155279][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.165114][ T4328] device bridge_slave_1 entered promiscuous mode [ 67.193456][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.224035][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.278865][ T4328] team0: Port device team_slave_0 added [ 67.309122][ T4328] team0: Port device team_slave_1 added [ 67.351426][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.359895][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.393327][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.408725][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.415917][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.446952][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.505638][ T4328] device hsr_slave_0 entered promiscuous mode [ 67.527894][ T4328] device hsr_slave_1 entered promiscuous mode [ 68.193544][ T4328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.204727][ T4328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.215251][ T4328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.226831][ T4328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.311800][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.333513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.346944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.370902][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.396755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.416800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.430068][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.437183][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.457399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.479734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.494031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.513720][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.521383][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.536756][ T4219] Bluetooth: hci0: command 0x0409 tx timeout [ 68.551580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.570971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.606675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.627885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.646599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.666677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.675452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.696840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.710013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.719311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.732148][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.741839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.935568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.944414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.959096][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.014216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.040320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.091029][ T4328] device veth0_vlan entered promiscuous mode [ 69.105450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.121574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.141063][ T4328] device veth1_vlan entered promiscuous mode [ 69.155001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.163893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.179452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.216113][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.224846][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.234087][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.245120][ T4328] device veth0_macvtap entered promiscuous mode [ 69.257046][ T4328] device veth1_macvtap entered promiscuous mode [ 69.275582][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.285980][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.294752][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.303993][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.313729][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.332097][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.340190][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.356349][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.368494][ T4328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.385166][ T4328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.394006][ T4328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.407647][ T4328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.514578][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.531282][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.557984][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.578792][ T3054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.589906][ T3054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.603172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.618492][ T4444] Bluetooth: hci0: command 0x041b tx timeout [ 71.500663][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.508223][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.696990][ T1324] Bluetooth: hci0: command 0x040f tx timeout [ 74.776418][ T1324] Bluetooth: hci0: command 0x0419 tx timeout [ 86.033343][ T4541] chnl_net:caif_netlink_parms(): no params data found [ 87.896238][ T4444] Bluetooth: hci1: command 0x0409 tx timeout [ 89.976285][ T4444] Bluetooth: hci1: command 0x041b tx timeout [ 92.056173][ T4444] Bluetooth: hci1: command 0x040f tx timeout [ 94.136164][ T4444] Bluetooth: hci1: command 0x0419 tx timeout [ 132.939986][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.946668][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 147.976249][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 150.056197][ T1107] Bluetooth: hci2: command 0x041b tx timeout [ 152.136255][ T1107] Bluetooth: hci2: command 0x040f tx timeout [ 154.216211][ T1107] Bluetooth: hci2: command 0x0419 tx timeout [ 175.856004][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 175.863110][ C1] rcu: 0-....: (1 GPs behind) idle=cb9/1/0x4000000000000002 softirq=6882/6883 fqs=5248 [ 175.874438][ C1] (detected by 1, t=10502 jiffies, g=6981, q=1372) [ 175.882391][ C1] Sending NMI from CPU 1 to CPUs 0: [ 175.887989][ C0] NMI backtrace for cpu 0 [ 175.888012][ C0] CPU: 0 PID: 4497 Comm: syz.0.28 Not tainted syzkaller #0 [ 175.888027][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.888040][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x32/0x60 [ 175.888067][ C0] Code: 04 a5 8a 7e 65 8b 15 05 a5 8a 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 34 16 00 00 00 74 2c 8b 91 10 16 00 00 <83> fa 02 75 21 48 8b 91 18 16 00 00 48 8b 32 48 8d 7e 01 8b 89 14 [ 175.888078][ C0] RSP: 0018:ffffc900032bef98 EFLAGS: 00000046 [ 175.888091][ C0] RAX: ffffffff81965d40 RBX: 0000000000000000 RCX: ffff888029575940 [ 175.888100][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.888108][ C0] RBP: ffffc900032bf090 R08: dffffc0000000000 R09: ffffc900032bf0e0 [ 175.888117][ C0] R10: fffff52000657e23 R11: 1ffff92000657e1c R12: dffffc0000000000 [ 175.888127][ C0] R13: ffffc900032bf146 R14: 0000000000000000 R15: ffffc900032bf300 [ 175.888136][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 175.888147][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.888156][ C0] CR2: 00007f509c180600 CR3: 000000000be8e000 CR4: 00000000003506f0 [ 175.888168][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 175.888176][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 175.888184][ C0] Call Trace: [ 175.888191][ C0] [ 175.888196][ C0] perf_prepare_sample+0x1680/0x1cb0 [ 175.888216][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 175.888233][ C0] ? perf_callchain+0x190/0x190 [ 175.888247][ C0] perf_event_output_forward+0x146/0x280 [ 175.888256][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 175.888268][ C0] ? perf_get_page_size+0x420/0x420 [ 175.888280][ C0] ? perf_event_output_forward+0x222/0x280 [ 175.888292][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 175.888306][ C0] __perf_event_overflow+0x364/0x530 [ 175.888321][ C0] perf_swevent_event+0x4ad/0x530 [ 175.888340][ C0] perf_tp_event+0x32c/0xb50 [ 175.888352][ C0] ? __perf_event_overflow+0x415/0x530 [ 175.888366][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 175.888378][ C0] ? perf_swevent_event+0x33e/0x530 [ 175.888408][ C0] ? update_load_avg+0xbea/0x1130 [ 175.888425][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 175.888439][ C0] perf_trace_preemptirq_template+0x2be/0x380 [ 175.888455][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 175.888474][ C0] ? trace_event_raw_event_preemptirq_template+0x270/0x270 [ 175.888505][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 175.888520][ C0] ? lock_chain_count+0x20/0x20 [ 175.888536][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 175.888548][ C0] trace_irq_enable_rcuidle+0x108/0x180 [ 175.888562][ C0] trace_hardirqs_on+0x57/0x80 [ 175.888574][ C0] asm_sysvec_irq_work+0x16/0x20 [ 175.888587][ C0] RIP: 0010:rcu_read_unlock_special+0x84/0x480 [ 175.888601][ C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 dd 13 9e 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 175.888611][ C0] RSP: 0018:ffffc900032bf760 EFLAGS: 00000206 [ 175.888621][ C0] RAX: c3ab3940234e0d00 RBX: 1ffff92000657ef0 RCX: c3ab3940234e0d00 [ 175.888630][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b1620 RDI: ffffffff8a59a240 [ 175.888640][ C0] RBP: ffffc900032bf830 R08: dffffc0000000000 R09: fffffbfff1ff7619 [ 175.888649][ C0] R10: fffffbfff1ff7619 R11: 1ffffffff1ff7618 R12: ffffffff8c120900 [ 175.888658][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001 [ 175.888675][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 175.888687][ C0] ? rcu_lock_acquire+0x30/0x30 [ 175.888701][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 175.888716][ C0] __rcu_read_unlock+0x78/0xd0 [ 175.888729][ C0] __unlock_page_memcg+0xea/0x100 [ 175.888745][ C0] unmap_page_range+0xfbc/0x2520 [ 175.888770][ C0] ? uprobe_munmap+0x165/0x3f0 [ 175.888789][ C0] unmap_vmas+0x11b/0x230 [ 175.888803][ C0] ? uprobe_clear_state+0x4f/0x460 [ 175.888816][ C0] ? unmap_page_range+0x2520/0x2520 [ 175.888829][ C0] ? __mutex_lock_common+0x431/0x2390 [ 175.888846][ C0] ? memset+0x1e/0x40 [ 175.888862][ C0] exit_mmap+0x38f/0x5f0 [ 175.888878][ C0] ? vm_brk+0x20/0x20 [ 175.888896][ C0] ? uprobe_clear_state+0x2f6/0x460 [ 175.888908][ C0] ? mm_update_next_owner+0x522/0x640 [ 175.888926][ C0] __mmput+0x115/0x3b0 [ 175.888938][ C0] exit_mm+0x567/0x6c0 [ 175.888952][ C0] ? xacct_add_tsk+0x4b0/0x4b0 [ 175.888966][ C0] ? do_exit+0x20a0/0x20a0 [ 175.888980][ C0] ? __ia32_sys_timer_delete+0x40/0x40 [ 175.888994][ C0] ? hrtimer_try_to_cancel+0x3c9/0x410 [ 175.889008][ C0] ? taskstats_exit+0x439/0xab0 [ 175.889023][ C0] ? tty_audit_exit+0x14e/0x1f0 [ 175.889038][ C0] do_exit+0x5a1/0x20a0 [ 175.889055][ C0] ? put_task_struct+0x80/0x80 [ 175.889067][ C0] ? rcu_nmi_exit+0x6f/0xf0 [ 175.889082][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 175.889098][ C0] ? lock_chain_count+0x20/0x20 [ 175.889113][ C0] do_group_exit+0x12e/0x300 [ 175.889129][ C0] __x64_sys_exit_group+0x3b/0x40 [ 175.889143][ C0] do_syscall_64+0x4c/0xa0 [ 175.889154][ C0] ? clear_bhb_loop+0x30/0x80 [ 175.889165][ C0] ? clear_bhb_loop+0x30/0x80 [ 175.889177][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.889190][ C0] RIP: 0033:0x7f509c2a6be9 [ 175.889200][ C0] Code: Unable to access opcode bytes at RIP 0x7f509c2a6bbf. [ 175.889206][ C0] RSP: 002b:00007ffcd4b49968 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 175.889219][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f509c2a6be9 [ 175.889228][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.889235][ C0] RBP: 00007ffcd4b499cc R08: 00000001d4b49a5f R09: 00000000000927c0 [ 175.889244][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000000b [ 175.889252][ C0] R13: 00000000000927c0 R14: 00000000000113c7 R15: 00007ffcd4b49a20 [ 175.889267][ C0] [ 179.016323][ T4219] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 10818 jiffies s: 2753 root: 0x1/. [ 179.031260][ T4219] rcu: blocking rcu_node structures (internal RCU debug): [ 179.038726][ T4219] Task dump for CPU 0: [ 179.042808][ T4219] task:syz.0.28 state:R running task stack:26752 pid: 4497 ppid: 4328 flags:0x00000008 [ 179.053742][ T4219] Call Trace: [ 179.057049][ T4219] [ 179.059981][ T4219] ? rcu_lock_acquire+0x30/0x30 [ 179.064845][ T4219] ? __lock_acquire+0x7c60/0x7c60 [ 179.069922][ T4219] ? __rcu_read_unlock+0x78/0xd0 [ 179.074870][ T4219] ? __unlock_page_memcg+0xea/0x100 [ 179.080127][ T4219] ? unmap_page_range+0xfbc/0x2520 [ 179.085342][ T4219] ? uprobe_munmap+0x165/0x3f0 [ 179.090166][ T4219] ? unmap_vmas+0x11b/0x230 [ 179.094668][ T4219] ? uprobe_clear_state+0x4f/0x460 [ 179.099865][ T4219] ? unmap_page_range+0x2520/0x2520 [ 179.105061][ T4219] ? __mutex_lock_common+0x431/0x2390 [ 179.110513][ T4219] ? memset+0x1e/0x40 [ 179.114512][ T4219] ? exit_mmap+0x38f/0x5f0 [ 179.118961][ T4219] ? vm_brk+0x20/0x20 [ 179.122951][ T4219] ? uprobe_clear_state+0x2f6/0x460 [ 179.128316][ T4219] ? mm_update_next_owner+0x522/0x640 [ 179.133700][ T4219] ? __mmput+0x115/0x3b0 [ 179.138148][ T4219] ? exit_mm+0x567/0x6c0 [ 179.142390][ T4219] ? xacct_add_tsk+0x4b0/0x4b0 [ 179.147199][ T4219] ? do_exit+0x20a0/0x20a0 [ 179.151617][ T4219] ? __ia32_sys_timer_delete+0x40/0x40 [ 179.157115][ T4219] ? hrtimer_try_to_cancel+0x3c9/0x410 [ 179.162671][ T4219] ? taskstats_exit+0x439/0xab0 [ 179.167665][ T4219] ? tty_audit_exit+0x14e/0x1f0 [ 179.172521][ T4219] ? do_exit+0x5a1/0x20a0 [ 179.176956][ T4219] ? put_task_struct+0x80/0x80 [ 179.181910][ T4219] ? rcu_nmi_exit+0x6f/0xf0 [ 179.186699][ T4219] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 179.192700][ T4219] ? lock_chain_count+0x20/0x20 [ 179.197705][ T4219] ? do_group_exit+0x12e/0x300 [ 179.202574][ T4219] ? __x64_sys_exit_group+0x3b/0x40 [ 179.208181][ T4219] ? do_syscall_64+0x4c/0xa0 [ 179.212790][ T4219] ? clear_bhb_loop+0x30/0x80 [ 179.217621][ T4219] ? clear_bhb_loop+0x30/0x80 [ 179.222339][ T4219] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.228482][ T4219]