ci2 starts bisection 2024-07-27 19:56:09.950815804 +0000 UTC m=+102596.095549562
bisecting fixing commit since 79bd336c7a94039e3d325195b978a04f3b89d2f3
building syzkaller on 048c640a64fd064361382a8800de05c87ff630cb
ensuring issue is reproducible on original commit 79bd336c7a94039e3d325195b978a04f3b89d2f3

testing commit 79bd336c7a94039e3d325195b978a04f3b89d2f3 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: a89f34179087cf6b63b9572e13bcde7cf3cc0deaae850cc6a53bb7cf631b5c99
run #0: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #1: crashed: BUG: soft lockup in sys_exit_group
run #2: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #3: crashed: BUG: soft lockup in sys_clone
run #4: crashed: BUG: soft lockup in corrupted
run #5: crashed: BUG: soft lockup in bpf_link_release
run #6: crashed: BUG: soft lockup in unix_release
run #7: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #8: crashed: BUG: soft lockup in corrupted
run #9: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #10: crashed: BUG: soft lockup in mld_ifc_work
run #11: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #12: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #13: crashed: BUG: soft lockup in corrupted
run #14: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #15: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #16: crashed: BUG: soft lockup in sys_umount
run #17: crashed: BUG: soft lockup in sys_symlinkat
run #18: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #19: crashed: BUG: soft lockup in corrupted
representative crash: BUG: soft lockup in syscall_exit_to_user_mode, types: [HANG]
check whether we can drop unnecessary instrumentation
disabling configs for [BUG KASAN LOCKDEP ATOMIC_SLEEP LEAK UBSAN], they are not needed
testing commit 79bd336c7a94039e3d325195b978a04f3b89d2f3 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: d92008456e0ddfaacfa77f7c50999436a403a5591699a5a7f1469a87af3682bc
all runs: OK
false negative chance: 0.000
kconfig minimization: base=4920 full=6158 leaves diff=244
split chunks (needed=false): <244>
split chunk #0 of len 244 into 5 parts
testing without sub-chunk 1/5
testing commit 79bd336c7a94039e3d325195b978a04f3b89d2f3 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: bfa7ada6b23974714dcccd8fd178a9dae2b93c550c10d93ab57e126e25948c5b
run #0: crashed: BUG: soft lockup in sys_socket
run #1: crashed: BUG: soft lockup in corrupted
run #2: crashed: BUG: soft lockup in sys_getsockopt
run #3: crashed: BUG: soft lockup in addrconf_dad_work
run #4: crashed: BUG: soft lockup in wb_workfn
run #5: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #6: crashed: BUG: soft lockup in sys_readlink
run #7: crashed: BUG: soft lockup in sys_openat
run #8: crashed: BUG: soft lockup in sys_symlinkat
run #9: crashed: BUG: soft lockup in corrupted
representative crash: BUG: soft lockup in sys_socket, types: [HANG]
the chunk can be dropped
testing without sub-chunk 2/5
testing commit 79bd336c7a94039e3d325195b978a04f3b89d2f3 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: f7985ddaad5f31491de92b46c0e21d7f102e71cdb1b085f85f79e8720c0c9b8e
run #0: crashed: BUG: soft lockup in bpf_link_release
run #1: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #2: crashed: BUG: soft lockup in sys_newfstatat
run #3: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #4: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #5: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #6: crashed: BUG: soft lockup in kernfs_iop_get_link
run #7: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #8: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #9: crashed: BUG: soft lockup in syscall_exit_to_user_mode
representative crash: BUG: soft lockup in bpf_link_release, types: [HANG]
the chunk can be dropped
testing without sub-chunk 3/5
testing commit 79bd336c7a94039e3d325195b978a04f3b89d2f3 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: bd646645e19122cbd1b15081e75d53f0d56a1fc8d6ce519c35c07244935a2e0f
run #0: crashed: BUG: soft lockup in unix_release
run #1: crashed: BUG: soft lockup in sys_readlink
run #2: crashed: BUG: soft lockup in addrconf_dad_work
run #3: crashed: BUG: soft lockup in sys_clone
run #4: crashed: BUG: soft lockup in corrupted
run #5: crashed: BUG: soft lockup in sys_exit_group
run #6: crashed: BUG: soft lockup in sys_clone
run #7: crashed: BUG: soft lockup in sys_umount
run #8: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #9: crashed: BUG: soft lockup in syscall_exit_to_user_mode
representative crash: BUG: soft lockup in unix_release, types: [HANG]
the chunk can be dropped
testing without sub-chunk 4/5
testing commit 79bd336c7a94039e3d325195b978a04f3b89d2f3 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 1941ea1d2a910923c73767d022b6ab50ee8d217dbdb6b6e9eb0389032ffd1fc1
run #0: crashed: BUG: soft lockup in addrconf_dad_work
run #1: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #2: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #3: crashed: BUG: soft lockup in corrupted
run #4: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #5: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #6: crashed: BUG: soft lockup in addrconf_dad_work
run #7: crashed: BUG: soft lockup in sys_bpf
run #8: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #9: crashed: BUG: soft lockup in corrupted
representative crash: BUG: soft lockup in addrconf_dad_work, types: [HANG]
the chunk can be dropped
testing without sub-chunk 5/5
testing commit 79bd336c7a94039e3d325195b978a04f3b89d2f3 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
failed building 79bd336c7a94039e3d325195b978a04f3b89d2f3: net/socket.c:1191: undefined reference to `wext_handle_ioctl'
net/socket.c:3385: undefined reference to `compat_wext_handle_ioctl'
net/core/net-procfs.c:343: undefined reference to `wext_proc_exit'
net/core/net-procfs.c:327: undefined reference to `wext_proc_init'
minimized to 48 configs; suspects: [HID_ZEROPLUS USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_DM9601 USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL USB_SERIAL_FTDI_SIO USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_ZYDAS X86_X32 ZEROPLUS_FF]
testing current HEAD 4edafe6c0231508d09617b2359e59eaa495ad232
testing commit 4edafe6c0231508d09617b2359e59eaa495ad232 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: ee5e8fe161cc94304231256a8d6559264844288ad12be4684603b55867307d88
run #0: crashed: BUG: soft lockup in addrconf_rs_timer
run #1: crashed: BUG: soft lockup in mld_dad_work
run #2: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #3: crashed: BUG: soft lockup in mld_ifc_work
run #4: crashed: BUG: soft lockup in unix_release
run #5: crashed: BUG: soft lockup in mld_ifc_work
run #6: crashed: BUG: soft lockup in addrconf_dad_work
run #7: crashed: BUG: soft lockup in corrupted
run #8: crashed: BUG: soft lockup in corrupted
run #9: crashed: BUG: soft lockup in sys_bpf
representative crash: BUG: soft lockup in addrconf_rs_timer, types: [HANG]
crash still not fixed/happens on the oldest tested release
revisions tested: 7, total time: 2h26m2.33245409s (build: 1h17m41.247626243s, test: 1h6m19.045645361s)
crash still not fixed or there were kernel test errors
commit msg: Merge fd63fb84ed6d ("fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()") into android13-5.15-lts
crash: BUG: soft lockup in addrconf_rs_timer
watchdog: BUG: soft lockup - CPU#1 stuck for 144s! [swapper/1:0]
Modules linked in:
CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.15.151-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
RIP: 0010:kvm_wait+0x91/0xc0 arch/x86/kernel/kvm.c:922
Code: d0 7f 04 84 c0 75 25 0f b6 07 40 38 f0 74 10 fb c9 c3 c3 66 90 0f 00 2d 5d bf 1b 03 f4 c9 c3 66 90 0f 00 2d 51 bf 1b 03 fb f4 <c9> c3 89 75 f4 48 89 7d f8 e8 41 c2 6d 00 8b 75 f4 48 8b 7d f8 eb
RSP: 0018:ffffc900001cfcd0 EFLAGS: 00000246
RAX: 0000000000000001 RBX: ffff8881f7238c80 RCX: ffffffff81497d65
RDX: 0000000000000004 RSI: 0000000000000001 RDI: ffff8881f7338c94
RBP: ffffc900001cfce0 R08: 0000000000000001 R09: ffff8881f7338c94
R10: ffffed103ee67192 R11: 0000000000000001 R12: ffff8881f7338c94
R13: ffffed103ee47192 R14: ffff8881f7238c94 R15: ffff8881f7338c80
FS:  0000000000000000(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000118cdc000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 pv_wait arch/x86/include/asm/paravirt.h:597 [inline]
 pv_wait_node kernel/locking/qspinlock_paravirt.h:325 [inline]
 __pv_queued_spin_lock_slowpath+0x735/0xc10 kernel/locking/qspinlock.c:473
 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:585 [inline]
 queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:51 [inline]
 queued_spin_lock include/asm-generic/qspinlock.h:85 [inline]
 do_raw_spin_lock include/linux/spinlock.h:187 [inline]
 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:136 [inline]
 _raw_spin_lock_bh+0xeb/0x110 kernel/locking/spinlock.c:178
 sock_hash_delete_elem+0xcf/0x300 net/core/sock_map.c:937
 bpf_prog_2c29ac5cdc6b1842+0x3a/0xa9c
 bpf_dispatcher_nop_func include/linux/bpf.h:785 [inline]
 __bpf_prog_run include/linux/filter.h:625 [inline]
 bpf_prog_run include/linux/filter.h:632 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:1880 [inline]
 bpf_trace_run4+0xac/0x1c0 kernel/trace/bpf_trace.c:1919
 __bpf_trace_mm_page_alloc+0xa5/0xd0 include/trace/events/kmem.h:201
 __traceiter_mm_page_alloc+0x3e/0x60 include/trace/events/kmem.h:201
 trace_mm_page_alloc include/trace/events/kmem.h:201 [inline]
 __alloc_pages+0x502/0x2730 mm/page_alloc.c:5799
 __alloc_pages_node include/linux/gfp.h:591 [inline]
 alloc_pages_node include/linux/gfp.h:605 [inline]
 alloc_pages include/linux/gfp.h:618 [inline]
 __stack_depot_save+0x3bb/0x500 lib/stackdepot.c:326
 stack_depot_save+0xe/0x10 lib/stackdepot.c:383
 save_stack+0x144/0x1c0 mm/page_owner.c:140
 __set_page_owner+0x21/0x260 mm/page_owner.c:200
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0x13a/0x160 mm/page_alloc.c:2605
 prep_new_page+0x1b/0x130 mm/page_alloc.c:2611
 get_page_from_freelist+0x1c54/0x3370 mm/page_alloc.c:4485
 __alloc_pages+0x2d1/0x2730 mm/page_alloc.c:5777
 __alloc_pages_node include/linux/gfp.h:591 [inline]
 alloc_pages_node include/linux/gfp.h:605 [inline]
 alloc_pages include/linux/gfp.h:618 [inline]
 __stack_depot_save+0x3bb/0x500 lib/stackdepot.c:326
 kasan_save_stack+0x3a/0x50 mm/kasan/common.c:39
 kasan_set_track mm/kasan/common.c:45 [inline]
 set_alloc_info mm/kasan/common.c:433 [inline]
 __kasan_slab_alloc+0x94/0xc0 mm/kasan/common.c:466
 kasan_slab_alloc include/linux/kasan.h:217 [inline]
 slab_post_alloc_hook mm/slab.h:550 [inline]
 slab_alloc_node mm/slub.c:3240 [inline]
 slab_alloc mm/slub.c:3248 [inline]
 kmem_cache_alloc+0x197/0x4a0 mm/slub.c:3253
 kmem_cache_alloc_node include/linux/slab.h:474 [inline]
 __alloc_skb+0x14b/0x250 net/core/skbuff.c:416
 alloc_skb include/linux/skbuff.h:1183 [inline]
 ndisc_alloc_skb+0x135/0x320 net/ipv6/ndisc.c:421
 ndisc_send_rs+0x67/0x630 net/ipv6/ndisc.c:687
 addrconf_rs_timer+0x265/0x700 net/ipv6/addrconf.c:3977
 call_timer_fn+0x28/0x1c0 kernel/time/timer.c:1427
 expire_timers kernel/time/timer.c:1472 [inline]
 __run_timers.part.0+0x559/0x930 kernel/time/timer.c:1743
 __run_timers kernel/time/timer.c:1721 [inline]
 run_timer_softirq+0xa2/0x1a0 kernel/time/timer.c:1756
 __do_softirq+0x1cb/0x66f kernel/softirq.c:565
 invoke_softirq kernel/softirq.c:425 [inline]
 __irq_exit_rcu kernel/softirq.c:648 [inline]
 irq_exit_rcu+0x64/0x110 kernel/softirq.c:660
 sysvec_apic_timer_interrupt+0x9d/0xc0 arch/x86/kernel/apic/apic.c:1096
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:40 [inline]
RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:75 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:110 [inline]
RIP: 0010:acpi_idle_do_entry+0x18e/0x200 drivers/acpi/processor_idle.c:570
Code: 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 5a 49 8b 04 24 a8 08 75 c5 66 90 0f 00 2d a4 70 be 00 fb f4 <fa> eb b7 4c 89 e7 e8 97 f5 ff ff 4c 8b 65 f8 c9 c3 e8 0c 7a ad fd
RSP: 0018:ffffc90000157cf0 EFLAGS: 00000246
RAX: 0000000000004000 RBX: ffff888106dca865 RCX: ffffffff83ebffb4
RDX: 1ffff1102005cc58 RSI: 0000000000000008 RDI: ffff8881002e62c0
RBP: ffffc90000157cf8 R08: 0000000000000000 R09: ffff8881002e62c7
R10: ffffed102005cc58 R11: 0000000000000001 R12: ffff8881002e62c0
R13: ffff888104b93800 R14: ffff888104b93804 R15: ffff888106dca864
 acpi_idle_enter+0x2c8/0x4c0 drivers/acpi/processor_idle.c:705
 cpuidle_enter_state+0x19e/0x1070 drivers/cpuidle/cpuidle.c:249
 cpuidle_enter+0x4a/0xa0 drivers/cpuidle/cpuidle.c:364
 call_cpuidle kernel/sched/idle.c:158 [inline]
 cpuidle_idle_call kernel/sched/idle.c:239 [inline]
 do_idle+0x3f9/0x5a0 kernel/sched/idle.c:306
 cpu_startup_entry+0x1b/0x20 kernel/sched/idle.c:403
 start_secondary+0x1c4/0x240 arch/x86/kernel/smpboot.c:281
 secondary_startup_64_no_verify+0xb0/0xbb
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 899 Comm: syz-executor.0 Not tainted 5.15.151-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
RIP: 0010:kvm_wait+0x91/0xc0 arch/x86/kernel/kvm.c:922
Code: d0 7f 04 84 c0 75 25 0f b6 07 40 38 f0 74 10 fb c9 c3 c3 66 90 0f 00 2d 5d bf 1b 03 f4 c9 c3 66 90 0f 00 2d 51 bf 1b 03 fb f4 <c9> c3 89 75 f4 48 89 7d f8 e8 41 c2 6d 00 8b 75 f4 48 8b 7d f8 eb
RSP: 0018:ffffc9000066e650 EFLAGS: 00000246
RAX: 0000000000000003 RBX: 0000000000000000 RCX: 1ffff1102158d763
RDX: 0000000000000000 RSI: 0000000000000003 RDI: ffff88810ac6bb18
RBP: ffffc9000066e660 R08: 0000000000000001 R09: ffff88810ac6bb18
R10: ffffed102158d763 R11: 0000000000000001 R12: ffff88810ac6bb18
R13: ffffed102158d763 R14: 0000000000000001 R15: 0000000000000000
FS:  0000555555935480(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3b29628988 CR3: 0000000117f73000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <TASK>
 pv_wait arch/x86/include/asm/paravirt.h:597 [inline]
 pv_wait_head_or_lock kernel/locking/qspinlock_paravirt.h:470 [inline]
 __pv_queued_spin_lock_slowpath+0x939/0xc10 kernel/locking/qspinlock.c:508
 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:585 [inline]
 queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:51 [inline]
 queued_spin_lock include/asm-generic/qspinlock.h:85 [inline]
 do_raw_spin_lock include/linux/spinlock.h:187 [inline]
 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:136 [inline]
 _raw_spin_lock_bh+0xeb/0x110 kernel/locking/spinlock.c:178
 sock_hash_delete_elem+0xcf/0x300 net/core/sock_map.c:937
 bpf_prog_2c29ac5cdc6b1842+0x3a/0xa9c
 bpf_dispatcher_nop_func include/linux/bpf.h:785 [inline]
 __bpf_prog_run include/linux/filter.h:625 [inline]
 bpf_prog_run include/linux/filter.h:632 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:1880 [inline]
 bpf_trace_run4+0xac/0x1c0 kernel/trace/bpf_trace.c:1919
 __bpf_trace_mm_page_alloc+0xa5/0xd0 include/trace/events/kmem.h:201
 __traceiter_mm_page_alloc+0x3e/0x60 include/trace/events/kmem.h:201
 trace_mm_page_alloc include/trace/events/kmem.h:201 [inline]
 __alloc_pages+0x502/0x2730 mm/page_alloc.c:5799
 __alloc_pages_node include/linux/gfp.h:591 [inline]
 alloc_pages_node include/linux/gfp.h:605 [inline]
 alloc_pages include/linux/gfp.h:618 [inline]
 __stack_depot_save+0x3bb/0x500 lib/stackdepot.c:326
 stack_depot_save+0xe/0x10 lib/stackdepot.c:383
 save_stack+0x144/0x1c0 mm/page_owner.c:140
 __set_page_owner+0x21/0x260 mm/page_owner.c:200
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0x13a/0x160 mm/page_alloc.c:2605
 prep_new_page+0x1b/0x130 mm/page_alloc.c:2611
 get_page_from_freelist+0x1c54/0x3370 mm/page_alloc.c:4485
 __alloc_pages+0x2d1/0x2730 mm/page_alloc.c:5777
 __alloc_pages_node include/linux/gfp.h:591 [inline]
 alloc_pages_node include/linux/gfp.h:605 [inline]
 alloc_pages include/linux/gfp.h:618 [inline]
 __stack_depot_save+0x3bb/0x500 lib/stackdepot.c:326
 kasan_save_stack+0x3a/0x50 mm/kasan/common.c:39
 kasan_set_track+0x25/0x30 mm/kasan/common.c:45
 kasan_set_free_info+0x24/0x40 mm/kasan/generic.c:370
 ____kasan_slab_free mm/kasan/common.c:365 [inline]
 ____kasan_slab_free mm/kasan/common.c:327 [inline]
 __kasan_slab_free+0x111/0x150 mm/kasan/common.c:373
 kasan_slab_free include/linux/kasan.h:193 [inline]
 slab_free_hook mm/slub.c:1723 [inline]
 slab_free_freelist_hook+0x94/0x1a0 mm/slub.c:1749
 slab_free mm/slub.c:3519 [inline]
 kfree+0xc2/0x270 mm/slub.c:4579
 sk_psock_free_link include/linux/skmsg.h:420 [inline]
 sock_map_del_link+0x299/0x540 net/core/sock_map.c:160
 sock_map_unref+0x68/0xd0 net/core/sock_map.c:182
 sock_hash_delete_elem+0x244/0x300 net/core/sock_map.c:941
 bpf_prog_2c29ac5cdc6b1842+0x3a/0xa9c
 bpf_dispatcher_nop_func include/linux/bpf.h:785 [inline]
 __bpf_prog_run include/linux/filter.h:625 [inline]
 bpf_prog_run include/linux/filter.h:632 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:1880 [inline]
 bpf_trace_run4+0xac/0x1c0 kernel/trace/bpf_trace.c:1919
 __bpf_trace_mm_page_alloc+0xa5/0xd0 include/trace/events/kmem.h:201
 __traceiter_mm_page_alloc+0x3e/0x60 include/trace/events/kmem.h:201
 trace_mm_page_alloc include/trace/events/kmem.h:201 [inline]
 __alloc_pages+0x502/0x2730 mm/page_alloc.c:5799
 __alloc_pages_node include/linux/gfp.h:591 [inline]
 alloc_pages_node include/linux/gfp.h:605 [inline]
 alloc_pages include/linux/gfp.h:618 [inline]
 alloc_slab_page mm/slub.c:1793 [inline]
 allocate_slab+0x3a4/0x530 mm/slub.c:1932
 new_slab mm/slub.c:1995 [inline]
 ___slab_alloc.constprop.0+0x427/0xa80 mm/slub.c:3028
 __slab_alloc.constprop.0+0x4a/0xa0 mm/slub.c:3115
 slab_alloc_node mm/slub.c:3206 [inline]
 slab_alloc mm/slub.c:3248 [inline]
 __kmalloc+0x325/0x380 mm/slub.c:4423
 kmalloc include/linux/slab.h:608 [inline]
 allocate_probes kernel/tracepoint.c:109 [inline]
 func_remove kernel/tracepoint.c:267 [inline]
 tracepoint_remove_func kernel/tracepoint.c:403 [inline]
 tracepoint_probe_unregister+0x122/0xb90 kernel/tracepoint.c:551
 bpf_probe_unregister+0x4d/0x80 kernel/trace/bpf_trace.c:1954
 bpf_raw_tp_link_release+0x51/0xa0 kernel/bpf/syscall.c:2880
 bpf_link_free+0xd3/0x190 kernel/bpf/syscall.c:2451
 bpf_link_put+0x114/0x190 kernel/bpf/syscall.c:2477
 bpf_link_release+0x32/0x50 kernel/bpf/syscall.c:2485
 __fput+0x317/0x960 fs/file_table.c:280
 ____fput+0x9/0x10 fs/file_table.c:308
 task_work_run+0xc2/0x150 kernel/task_work.c:164
 tracehook_notify_resume include/linux/tracehook.h:189 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:175 [inline]
 exit_to_user_mode_prepare+0x140/0x150 kernel/entry/common.c:208
 __syscall_exit_to_user_mode_work kernel/entry/common.c:290 [inline]
 syscall_exit_to_user_mode+0x21/0x40 kernel/entry/common.c:301
 do_syscall_64+0x42/0xb0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7f2c406d2f69
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc3ccb49b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 000000000000d98f RCX: 00007f2c406d2f69
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000000600000000
R10: 00007f2c40656000 R11: 0000000000000246 R12: 00007f2c40809f80
R13: 00007f2c40809f8c R14: 0000000000000226 R15: 00007f2c4080b980
 </TASK>