Warning: Permanently added '10.128.0.31' (ED25519) to the list of known hosts. 2024/07/23 20:56:27 ignoring optional flag "sandboxArg"="0" 2024/07/23 20:56:27 parsed 1 programs 2024/07/23 20:56:27 executed programs: 0 [ 50.582336][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 50.582352][ T30] audit: type=1400 audit(1721768187.694:95): avc: denied { unlink } for pid=354 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 50.621431][ T354] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.756602][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.763520][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.770850][ T367] device bridge_slave_0 entered promiscuous mode [ 50.778804][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.785762][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.793040][ T367] device bridge_slave_1 entered promiscuous mode [ 50.894750][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.901713][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.909115][ T366] device bridge_slave_0 entered promiscuous mode [ 50.923880][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.930822][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.938230][ T366] device bridge_slave_1 entered promiscuous mode [ 50.984147][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.991151][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.998597][ T369] device bridge_slave_0 entered promiscuous mode [ 51.008764][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.016859][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.024096][ T370] device bridge_slave_0 entered promiscuous mode [ 51.038604][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.046363][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.054675][ T369] device bridge_slave_1 entered promiscuous mode [ 51.065734][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.072623][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.079836][ T370] device bridge_slave_1 entered promiscuous mode [ 51.086646][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.093952][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.101559][ T368] device bridge_slave_0 entered promiscuous mode [ 51.124294][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.131684][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.139502][ T368] device bridge_slave_1 entered promiscuous mode [ 51.292606][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.299654][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.307052][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.314901][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.346930][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.353995][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.361172][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.367991][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.390174][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.397117][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.404302][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.411492][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.426830][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.433800][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.441007][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.447809][ T368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.476436][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.484288][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.493198][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.500482][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.508416][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.516127][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.523321][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.530480][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.537562][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.545361][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.552913][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.577973][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.586473][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.595021][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.602039][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.610120][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.618486][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.626818][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.634126][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.651926][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.661347][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.670412][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.692490][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.700460][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.707321][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.733609][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.741228][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.749725][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.757817][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.765339][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.773213][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.782586][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.790760][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.797929][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.805464][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.813929][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.821132][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.828499][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.842361][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.850524][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.862904][ T367] device veth0_vlan entered promiscuous mode [ 51.872522][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.880884][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.889391][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.896335][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.903577][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.910963][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.919896][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.928851][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.937137][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.944098][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.957451][ T367] device veth1_macvtap entered promiscuous mode [ 51.972413][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.980505][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.988621][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.997238][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.006036][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.013590][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.022321][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.030853][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.039236][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.047351][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.054525][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.061930][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.070085][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.088810][ T366] device veth0_vlan entered promiscuous mode [ 52.096115][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.106347][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.114717][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.122108][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.130361][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.139799][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.148998][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.157723][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.177000][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.184598][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.192463][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.200365][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.208404][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.216775][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.224808][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.233316][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.241161][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.249451][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.270462][ T370] device veth0_vlan entered promiscuous mode [ 52.278651][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.287326][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.295611][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.304110][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.313029][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.321017][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.334902][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.343798][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.360298][ T369] device veth0_vlan entered promiscuous mode [ 52.366948][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.375339][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.383855][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.392487][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.400593][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.408461][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.423515][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.432702][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.439973][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.447678][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.456094][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.464529][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.473615][ T366] device veth1_macvtap entered promiscuous mode [ 52.487406][ T370] device veth1_macvtap entered promiscuous mode [ 52.495381][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.503645][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.512743][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.520993][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.529096][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.537588][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.545368][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.553072][ T368] device veth0_vlan entered promiscuous mode [ 52.568906][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.577253][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.602911][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.611365][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.619994][ T30] audit: type=1400 audit(1721768189.714:96): avc: denied { map_create } for pid=390 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 52.646853][ T30] audit: type=1400 audit(1721768189.714:97): avc: denied { map_read map_write } for pid=390 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 52.649576][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.678625][ T369] device veth1_macvtap entered promiscuous mode [ 52.686416][ T30] audit: type=1400 audit(1721768189.714:98): avc: denied { prog_load } for pid=390 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 52.688242][ T368] device veth1_macvtap entered promiscuous mode [ 52.714664][ T30] audit: type=1400 audit(1721768189.714:99): avc: denied { bpf } for pid=390 comm="syz-executor.0" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.739683][ T30] audit: type=1400 audit(1721768189.714:100): avc: denied { perfmon } for pid=390 comm="syz-executor.0" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.739749][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.771247][ T30] audit: type=1400 audit(1721768189.734:101): avc: denied { prog_run } for pid=390 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 52.777140][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.814702][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.824729][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.839924][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.849453][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.858867][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.867586][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.876301][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.884795][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.899151][ T30] audit: type=1400 audit(1721768190.004:102): avc: denied { mounton } for pid=370 comm="syz-executor.2" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 52.925139][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.933823][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.935022][ T30] audit: type=1400 audit(1721768190.034:103): avc: denied { read } for pid=82 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 154.711839][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 154.718611][ C1] rcu: 1-...!: (10001 ticks this GP) idle=ba7/1/0x4000000000000000 softirq=3710/3717 fqs=0 last_accelerate: 9fd9/c6e9 dyntick_enabled: 1 [ 154.732672][ C1] (t=10000 jiffies g=2565 q=13) [ 154.737596][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 9999 jiffies! g2565 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 154.750421][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=461 [ 154.757925][ C1] rcu: rcu_preempt kthread starved for 10000 jiffies! g2565 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 154.769333][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 154.779197][ C1] rcu: RCU grace-period kthread stack dump: [ 154.785185][ C1] task:rcu_preempt state:I stack:28288 pid: 14 ppid: 2 flags:0x00004000 [ 154.794219][ C1] Call Trace: [ 154.797329][ C1] [ 154.800142][ C1] __schedule+0xccc/0x1590 [ 154.804555][ C1] ? __sched_text_start+0x8/0x8 [ 154.809253][ C1] ? __kasan_check_write+0x14/0x20 [ 154.814203][ C1] ? __kasan_check_write+0x14/0x20 [ 154.819320][ C1] schedule+0x11f/0x1e0 [ 154.823313][ C1] schedule_timeout+0x18c/0x370 [ 154.828187][ C1] ? __update_idle_core+0x2a0/0x2a0 [ 154.833226][ C1] ? console_conditional_schedule+0x30/0x30 [ 154.838951][ C1] ? update_process_times+0x200/0x200 [ 154.844243][ C1] ? prepare_to_swait_event+0x308/0x320 [ 154.849635][ C1] rcu_gp_fqs_loop+0x2af/0xf80 [ 154.854318][ C1] ? debug_smp_processor_id+0x17/0x20 [ 154.859639][ C1] ? __note_gp_changes+0x4ab/0x920 [ 154.864690][ C1] ? rcu_gp_init+0xc30/0xc30 [ 154.869211][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 154.874327][ C1] ? rcu_gp_init+0x9cf/0xc30 [ 154.878756][ C1] rcu_gp_kthread+0xa4/0x350 [ 154.883186][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 154.888193][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 154.892855][ C1] ? __kasan_check_read+0x11/0x20 [ 154.897716][ C1] ? __kthread_parkme+0xb2/0x200 [ 154.902765][ C1] kthread+0x421/0x510 [ 154.906881][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 154.911588][ C1] ? kthread_blkcg+0xd0/0xd0 [ 154.916096][ C1] ret_from_fork+0x1f/0x30 [ 154.920505][ C1] [ 154.923401][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 154.929583][ C1] Sending NMI from CPU 1 to CPUs 0: [ 154.935020][ C0] NMI backtrace for cpu 0 [ 154.935047][ C0] CPU: 0 PID: 741 Comm: syz-executor.3 Not tainted 5.15.151-syzkaller-1069583-g5356d2f17edf #0 [ 154.935068][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 154.935081][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 154.935106][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 2b 02 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 154.935123][ C0] RSP: 0018:ffffc90000ba60a0 EFLAGS: 00000246 [ 154.935139][ C0] RAX: 0000000000000003 RBX: 1ffff92000174c18 RCX: ffffffff815504ef [ 154.935151][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888114045d18 [ 154.935163][ C0] RBP: ffffc90000ba6150 R08: dffffc0000000000 R09: ffffed1022808ba4 [ 154.935176][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 154.935188][ C0] R13: ffff888114045d18 R14: 0000000000000003 R15: 1ffff92000174c1c [ 154.935200][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 154.935214][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.935226][ C0] CR2: 00007fa1af53decc CR3: 000000000620f000 CR4: 00000000003506b0 [ 154.935241][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 154.935251][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 154.935261][ C0] Call Trace: [ 154.935266][ C0] [ 154.935274][ C0] ? show_regs+0x58/0x60 [ 154.935292][ C0] ? nmi_cpu_backtrace+0x29f/0x300 [ 154.935313][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 154.935334][ C0] ? kvm_wait+0x147/0x180 [ 154.935349][ C0] ? kvm_wait+0x147/0x180 [ 154.935364][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 154.935383][ C0] ? nmi_handle+0xa8/0x280 [ 154.935400][ C0] ? kvm_wait+0x147/0x180 [ 154.935415][ C0] ? default_do_nmi+0x69/0x160 [ 154.935434][ C0] ? exc_nmi+0xaf/0x120 [ 154.935450][ C0] ? end_repeat_nmi+0x16/0x31 [ 154.935468][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 154.935489][ C0] ? kvm_wait+0x147/0x180 [ 154.935504][ C0] ? kvm_wait+0x147/0x180 [ 154.935526][ C0] ? kvm_wait+0x147/0x180 [ 154.935541][ C0] [ 154.935545][ C0] [ 154.935550][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 154.935568][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 154.935585][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 154.935606][ C0] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 154.935625][ C0] ? post_alloc_hook+0x1a3/0x1b0 [ 154.935645][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 154.935664][ C0] ? get_page_from_freelist+0x3550/0x35d0 [ 154.935685][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 154.935701][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 154.935717][ C0] ? sock_hash_bucket_hash+0x388/0x7e0 [ 154.935739][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 154.935758][ C0] bpf_prog_a8aaa52f2e199321+0x42/0x2a0 [ 154.935778][ C0] bpf_trace_run4+0x13f/0x270 [ 154.935798][ C0] ? bpf_trace_run3+0x250/0x250 [ 154.935817][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 154.935836][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 154.935855][ C0] __traceiter_mm_page_alloc+0x3a/0x60 [ 154.935871][ C0] __alloc_pages+0x3cb/0x8f0 [ 154.935889][ C0] ? prep_new_page+0x110/0x110 [ 154.935907][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 154.935924][ C0] ? stack_trace_save+0x113/0x1c0 [ 154.935943][ C0] __stack_depot_save+0x38d/0x470 [ 154.935960][ C0] stack_depot_save+0xe/0x10 [ 154.935974][ C0] save_stack+0x104/0x1e0 [ 154.935991][ C0] ? __reset_page_owner+0x190/0x190 [ 154.936006][ C0] ? post_alloc_hook+0x1a3/0x1b0 [ 154.936023][ C0] ? prep_new_page+0x1b/0x110 [ 154.936039][ C0] ? get_page_from_freelist+0x3550/0x35d0 [ 154.936057][ C0] ? __alloc_pages+0x27e/0x8f0 [ 154.936074][ C0] ? __stack_depot_save+0x38d/0x470 [ 154.936088][ C0] ? kasan_set_track+0x5d/0x70 [ 154.936103][ C0] ? kasan_set_free_info+0x23/0x40 [ 154.936119][ C0] ? ____kasan_slab_free+0x126/0x160 [ 154.936135][ C0] ? __kasan_slab_free+0x11/0x20 [ 154.936150][ C0] ? slab_free_freelist_hook+0xbd/0x190 [ 154.936169][ C0] ? kfree+0xc8/0x220 [ 154.936185][ C0] ? sock_map_unref+0x352/0x4d0 [ 154.936202][ C0] ? sock_hash_delete_elem+0x274/0x2f0 [ 154.936220][ C0] ? bpf_prog_a8aaa52f2e199321+0x42/0x2a0 [ 154.936232][ C0] ? bpf_trace_run4+0x13f/0x270 [ 154.936249][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 154.936266][ C0] ? post_alloc_hook+0x1a3/0x1b0 [ 154.936284][ C0] __set_page_owner+0x28/0x2e0 [ 154.936299][ C0] ? kernel_init_free_pages+0xda/0xf0 [ 154.936317][ C0] post_alloc_hook+0x1a3/0x1b0 [ 154.936335][ C0] prep_new_page+0x1b/0x110 [ 154.936352][ C0] get_page_from_freelist+0x3550/0x35d0 [ 154.936373][ C0] ? check_stack_access_within_bounds+0x5a0/0x5a0 [ 154.936394][ C0] ? __kernel_text_address+0x9b/0x110 [ 154.936411][ C0] ? unwind_get_return_address+0x4d/0x90 [ 154.936431][ C0] ? check_stack_range_initialized+0x10fe/0x1410 [ 154.936452][ C0] ? lruvec_init+0x150/0x150 [ 154.936471][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 154.936489][ C0] ? __alloc_pages_bulk+0xe40/0xe40 [ 154.936507][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 154.936532][ C0] __alloc_pages+0x27e/0x8f0 [ 154.936550][ C0] ? prep_new_page+0x110/0x110 [ 154.936568][ C0] ? stack_trace_save+0x113/0x1c0 [ 154.936586][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 154.936603][ C0] __stack_depot_save+0x38d/0x470 [ 154.936619][ C0] ? kfree+0xc8/0x220 [ 154.936636][ C0] kasan_set_track+0x5d/0x70 [ 154.936650][ C0] ? kasan_set_track+0x4b/0x70 [ 154.936665][ C0] ? kasan_set_free_info+0x23/0x40 [ 154.936681][ C0] ? ____kasan_slab_free+0x126/0x160 [ 154.936697][ C0] ? __kasan_slab_free+0x11/0x20 [ 154.936712][ C0] ? slab_free_freelist_hook+0xbd/0x190 [ 154.936730][ C0] ? kfree+0xc8/0x220 [ 154.936746][ C0] ? sock_map_unref+0x352/0x4d0 [ 154.936763][ C0] ? sock_hash_delete_elem+0x274/0x2f0 [ 154.936781][ C0] ? bpf_prog_a8aaa52f2e199321+0x42/0x2a0 [ 154.936794][ C0] ? bpf_trace_run4+0x13f/0x270 [ 154.936811][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 154.936827][ C0] ? __traceiter_mm_page_alloc+0x3a/0x60 [ 154.936842][ C0] ? __alloc_pages+0x3cb/0x8f0 [ 154.936859][ C0] ? __get_free_pages+0x10/0x30 [ 154.936876][ C0] ? __tlb_remove_page_size+0x178/0x300 [ 154.936894][ C0] ? unmap_page_range+0x1226/0x1ed0 [ 154.936909][ C0] ? unmap_vmas+0x389/0x560 [ 154.936924][ C0] ? exit_mmap+0x3e4/0x940 [ 154.936940][ C0] ? __mmput+0x95/0x310 [ 154.936956][ C0] ? mmput+0x5b/0x170 [ 154.936972][ C0] ? do_exit+0xb9c/0x2ca0 [ 154.936987][ C0] ? do_group_exit+0x141/0x310 [ 154.937002][ C0] ? get_signal+0x7a3/0x1630 [ 154.937019][ C0] ? arch_do_signal_or_restart+0xbd/0x1680 [ 154.937035][ C0] ? exit_to_user_mode_loop+0xa0/0xe0 [ 154.937051][ C0] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 154.937068][ C0] ? syscall_exit_to_user_mode+0x26/0x160 [ 154.937086][ C0] ? do_syscall_64+0x49/0xb0 [ 154.937102][ C0] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 154.937125][ C0] kasan_set_free_info+0x23/0x40 [ 154.937142][ C0] ____kasan_slab_free+0x126/0x160 [ 154.937159][ C0] __kasan_slab_free+0x11/0x20 [ 154.937175][ C0] slab_free_freelist_hook+0xbd/0x190 [ 154.937195][ C0] ? sock_map_unref+0x352/0x4d0 [ 154.937212][ C0] kfree+0xc8/0x220 [ 154.937230][ C0] sock_map_unref+0x352/0x4d0 [ 154.937249][ C0] sock_hash_delete_elem+0x274/0x2f0 [ 154.937269][ C0] bpf_prog_a8aaa52f2e199321+0x42/0x2a0 [ 154.937282][ C0] bpf_trace_run4+0x13f/0x270 [ 154.937300][ C0] ? bpf_trace_run3+0x250/0x250 [ 154.937319][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 154.937338][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 154.937355][ C0] __traceiter_mm_page_alloc+0x3a/0x60 [ 154.937371][ C0] __alloc_pages+0x3cb/0x8f0 [ 154.937388][ C0] ? page_remove_rmap+0xe36/0x1420 [ 154.937404][ C0] ? prep_new_page+0x110/0x110 [ 154.937421][ C0] ? page_remove_rmap+0xebe/0x1420 [ 154.937438][ C0] ? page_add_file_rmap+0x8e0/0x8e0 [ 154.937453][ C0] ? mark_page_accessed+0x56b/0xbf0 [ 154.937470][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 154.937485][ C0] __get_free_pages+0x10/0x30 [ 154.937502][ C0] __tlb_remove_page_size+0x178/0x300 [ 154.937526][ C0] unmap_page_range+0x1226/0x1ed0 [ 154.937549][ C0] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 154.937567][ C0] ? __pagevec_lru_add+0xcde/0xd70 [ 154.937584][ C0] ? uprobe_munmap+0x18d/0x450 [ 154.937603][ C0] ? lru_cache_add+0x540/0x540 [ 154.937619][ C0] unmap_vmas+0x389/0x560 [ 154.937635][ C0] ? unmap_page_range+0x1ed0/0x1ed0 [ 154.937653][ C0] ? tlb_gather_mmu_fullmm+0x165/0x210 [ 154.937673][ C0] exit_mmap+0x3e4/0x940 [ 154.937691][ C0] ? exit_aio+0x25e/0x3c0 [ 154.937705][ C0] ? vm_brk+0x30/0x30 [ 154.937721][ C0] ? mutex_unlock+0xb2/0x260 [ 154.937742][ C0] ? uprobe_clear_state+0x2cd/0x320 [ 154.937762][ C0] __mmput+0x95/0x310 [ 154.937781][ C0] mmput+0x5b/0x170 [ 154.937797][ C0] do_exit+0xb9c/0x2ca0 [ 154.937815][ C0] ? put_task_struct+0x80/0x80 [ 154.937831][ C0] ? alloc_file_pseudo+0x280/0x2f0 [ 154.937851][ C0] ? __kasan_check_write+0x14/0x20 [ 154.937868][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 154.937883][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 154.937899][ C0] do_group_exit+0x141/0x310 [ 154.937916][ C0] get_signal+0x7a3/0x1630 [ 154.937937][ C0] arch_do_signal_or_restart+0xbd/0x1680 [ 154.937958][ C0] ? get_sigframe_size+0x10/0x10 [ 154.937974][ C0] ? __se_sys_futex+0x37b/0x3e0 [ 154.937994][ C0] ? fpu_flush_thread+0xf0/0xf0 [ 154.938013][ C0] exit_to_user_mode_loop+0xa0/0xe0 [ 154.938030][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 154.938047][ C0] syscall_exit_to_user_mode+0x26/0x160 [ 154.938066][ C0] do_syscall_64+0x49/0xb0 [ 154.938083][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 154.938099][ C0] RIP: 0033:0x7ff9c34c3ea9 [ 154.938111][ C0] Code: Unable to access opcode bytes at RIP 0x7ff9c34c3e7f. [ 154.938119][ C0] RSP: 002b:00007ff9c3045178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 154.938136][ C0] RAX: fffffffffffffe00 RBX: 00007ff9c35f1f88 RCX: 00007ff9c34c3ea9 [ 154.938148][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff9c35f1f88 [ 154.938159][ C0] RBP: 00007ff9c35f1f80 R08: 00007ff9c30456c0 R09: 00007ff9c30456c0 [ 154.938171][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9c35f1f8c [ 154.938181][ C0] R13: 000000000000000b R14: 00007fff6dc87e50 R15: 00007fff6dc87f38 [ 154.938196][ C0] [ 154.939053][ C1] Sending NMI from CPU 1 to CPUs 0: [ 155.959823][ C0] NMI backtrace for cpu 0 [ 155.959840][ C0] CPU: 0 PID: 741 Comm: syz-executor.3 Not tainted 5.15.151-syzkaller-1069583-g5356d2f17edf #0 [ 155.959860][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 155.959870][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 155.959895][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 2b 02 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 155.959908][ C0] RSP: 0018:ffffc90000ba60a0 EFLAGS: 00000246 [ 155.959924][ C0] RAX: 0000000000000003 RBX: 1ffff92000174c18 RCX: ffffffff815504ef [ 155.959937][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888114045d18 [ 155.959949][ C0] RBP: ffffc90000ba6150 R08: dffffc0000000000 R09: ffffed1022808ba4 [ 155.959962][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 155.959974][ C0] R13: ffff888114045d18 R14: 0000000000000003 R15: 1ffff92000174c1c [ 155.959986][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 155.960000][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.960012][ C0] CR2: 00007fa1af53decc CR3: 000000000620f000 CR4: 00000000003506b0 [ 155.960027][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 155.960037][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 155.960047][ C0] Call Trace: [ 155.960054][ C0] [ 155.960061][ C0] ? show_regs+0x58/0x60 [ 155.960079][ C0] ? nmi_cpu_backtrace+0x29f/0x300 [ 155.960101][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 155.960122][ C0] ? kvm_wait+0x147/0x180 [ 155.960136][ C0] ? kvm_wait+0x147/0x180 [ 155.960151][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 155.960170][ C0] ? nmi_handle+0xa8/0x280 [ 155.960187][ C0] ? kvm_wait+0x147/0x180 [ 155.960202][ C0] ? kvm_wait+0x147/0x180 [ 155.960217][ C0] ? default_do_nmi+0x69/0x160 [ 155.960236][ C0] ? exc_nmi+0xaf/0x120 [ 155.960252][ C0] ? end_repeat_nmi+0x16/0x31 [ 155.960271][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 155.960292][ C0] ? kvm_wait+0x147/0x180 [ 155.960307][ C0] ? kvm_wait+0x147/0x180 [ 155.960322][ C0] ? kvm_wait+0x147/0x180 [ 155.960337][ C0] [ 155.960342][ C0] [ 155.960347][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 155.960365][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 155.960382][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 155.960402][ C0] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 155.960421][ C0] ? post_alloc_hook+0x1a3/0x1b0 [ 155.960442][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 155.960461][ C0] ? get_page_from_freelist+0x3550/0x35d0 [ 155.960482][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 155.960498][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 155.960514][ C0] ? sock_hash_bucket_hash+0x388/0x7e0 [ 155.960536][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 155.960556][ C0] bpf_prog_a8aaa52f2e199321+0x42/0x2a0 [ 155.960570][ C0] bpf_trace_run4+0x13f/0x270 [ 155.960590][ C0] ? bpf_trace_run3+0x250/0x250 [ 155.960609][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 155.960628][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 155.960647][ C0] __traceiter_mm_page_alloc+0x3a/0x60 [ 155.960671][ C0] __alloc_pages+0x3cb/0x8f0 [ 155.960689][ C0] ? prep_new_page+0x110/0x110 [ 155.960707][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 155.960724][ C0] ? stack_trace_save+0x113/0x1c0 [ 155.960744][ C0] __stack_depot_save+0x38d/0x470 [ 155.960761][ C0] stack_depot_save+0xe/0x10 [ 155.960775][ C0] save_stack+0x104/0x1e0 [ 155.960791][ C0] ? __reset_page_owner+0x190/0x190 [ 155.960812][ C0] ? post_alloc_hook+0x1a3/0x1b0 [ 155.960829][ C0] ? prep_new_page+0x1b/0x110 [ 155.960845][ C0] ? get_page_from_freelist+0x3550/0x35d0 [ 155.960864][ C0] ? __alloc_pages+0x27e/0x8f0 [ 155.960880][ C0] ? __stack_depot_save+0x38d/0x470 [ 155.960894][ C0] ? kasan_set_track+0x5d/0x70 [ 155.960910][ C0] ? kasan_set_free_info+0x23/0x40 [ 155.960926][ C0] ? ____kasan_slab_free+0x126/0x160 [ 155.960942][ C0] ? __kasan_slab_free+0x11/0x20 [ 155.960957][ C0] ? slab_free_freelist_hook+0xbd/0x190 [ 155.960976][ C0] ? kfree+0xc8/0x220 [ 155.960992][ C0] ? sock_map_unref+0x352/0x4d0 [ 155.961017][ C0] ? sock_hash_delete_elem+0x274/0x2f0 [ 155.961035][ C0] ? bpf_prog_a8aaa52f2e199321+0x42/0x2a0 [ 155.961047][ C0] ? bpf_trace_run4+0x13f/0x270 [ 155.961065][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 155.961082][ C0] ? post_alloc_hook+0x1a3/0x1b0 [ 155.961100][ C0] __set_page_owner+0x28/0x2e0 [ 155.961115][ C0] ? kernel_init_free_pages+0xda/0xf0 [ 155.961134][ C0] post_alloc_hook+0x1a3/0x1b0 [ 155.961152][ C0] prep_new_page+0x1b/0x110 [ 155.961169][ C0] get_page_from_freelist+0x3550/0x35d0 [ 155.961190][ C0] ? check_stack_access_within_bounds+0x5a0/0x5a0 [ 155.961212][ C0] ? __kernel_text_address+0x9b/0x110 [ 155.961229][ C0] ? unwind_get_return_address+0x4d/0x90 [ 155.961249][ C0] ? check_stack_range_initialized+0x10fe/0x1410 [ 155.961271][ C0] ? lruvec_init+0x150/0x150 [ 155.961316][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 155.961334][ C0] ? __alloc_pages_bulk+0xe40/0xe40 [ 155.961352][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 155.961370][ C0] __alloc_pages+0x27e/0x8f0 [ 155.961388][ C0] ? prep_new_page+0x110/0x110 [ 155.961407][ C0] ? stack_trace_save+0x113/0x1c0 [ 155.961425][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 155.961443][ C0] __stack_depot_save+0x38d/0x470 [ 155.961459][ C0] ? kfree+0xc8/0x220 [ 155.961475][ C0] kasan_set_track+0x5d/0x70 [ 155.961490][ C0] ? kasan_set_track+0x4b/0x70 [ 155.961505][ C0] ? kasan_set_free_info+0x23/0x40 [ 155.961521][ C0] ? ____kasan_slab_free+0x126/0x160 [ 155.961537][ C0] ? __kasan_slab_free+0x11/0x20 [ 155.961552][ C0] ? slab_free_freelist_hook+0xbd/0x190 [ 155.961571][ C0] ? kfree+0xc8/0x220 [ 155.961587][ C0] ? sock_map_unref+0x352/0x4d0 [ 155.961604][ C0] ? sock_hash_delete_elem+0x274/0x2f0 [ 155.961622][ C0] ? bpf_prog_a8aaa52f2e199321+0x42/0x2a0 [ 155.961635][ C0] ? bpf_trace_run4+0x13f/0x270 [ 155.961652][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 155.961673][ C0] ? __traceiter_mm_page_alloc+0x3a/0x60 [ 155.961688][ C0] ? __alloc_pages+0x3cb/0x8f0 [ 155.961709][ C0] ? __get_free_pages+0x10/0x30 [ 155.961725][ C0] ? __tlb_remove_page_size+0x178/0x300 [ 155.961745][ C0] ? unmap_page_range+0x1226/0x1ed0 [ 155.961761][ C0] ? unmap_vmas+0x389/0x560 [ 155.961775][ C0] ? exit_mmap+0x3e4/0x940 [ 155.961791][ C0] ? __mmput+0x95/0x310 [ 155.961809][ C0] ? mmput+0x5b/0x170 [ 155.961825][ C0] ? do_exit+0xb9c/0x2ca0 [ 155.961840][ C0] ? do_group_exit+0x141/0x310 [ 155.961856][ C0] ? get_signal+0x7a3/0x1630 [ 155.961872][ C0] ? arch_do_signal_or_restart+0xbd/0x1680 [ 155.961889][ C0] ? exit_to_user_mode_loop+0xa0/0xe0 [ 155.961905][ C0] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 155.961922][ C0] ? syscall_exit_to_user_mode+0x26/0x160 [ 155.961940][ C0] ? do_syscall_64+0x49/0xb0 [ 155.961956][ C0] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 155.961980][ C0] kasan_set_free_info+0x23/0x40 [ 155.961996][ C0] ____kasan_slab_free+0x126/0x160 [ 155.962013][ C0] __kasan_slab_free+0x11/0x20 [ 155.962029][ C0] slab_free_freelist_hook+0xbd/0x190 [ 155.962049][ C0] ? sock_map_unref+0x352/0x4d0 [ 155.962067][ C0] kfree+0xc8/0x220 [ 155.962085][ C0] sock_map_unref+0x352/0x4d0 [ 155.962104][ C0] sock_hash_delete_elem+0x274/0x2f0 [ 155.962124][ C0] bpf_prog_a8aaa52f2e199321+0x42/0x2a0 [ 155.962137][ C0] bpf_trace_run4+0x13f/0x270 [ 155.962155][ C0] ? bpf_trace_run3+0x250/0x250 [ 155.962174][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 155.962193][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 155.962233][ C0] __traceiter_mm_page_alloc+0x3a/0x60 [ 155.962249][ C0] __alloc_pages+0x3cb/0x8f0 [ 155.962266][ C0] ? page_remove_rmap+0xe36/0x1420 [ 155.962282][ C0] ? prep_new_page+0x110/0x110 [ 155.962299][ C0] ? page_remove_rmap+0xebe/0x1420 [ 155.962317][ C0] ? page_add_file_rmap+0x8e0/0x8e0 [ 155.962332][ C0] ? mark_page_accessed+0x56b/0xbf0 [ 155.962362][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 155.962377][ C0] __get_free_pages+0x10/0x30 [ 155.962394][ C0] __tlb_remove_page_size+0x178/0x300 [ 155.962414][ C0] unmap_page_range+0x1226/0x1ed0 [ 155.962437][ C0] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 155.962455][ C0] ? __pagevec_lru_add+0xcde/0xd70 [ 155.962473][ C0] ? uprobe_munmap+0x18d/0x450 [ 155.962492][ C0] ? lru_cache_add+0x540/0x540 [ 155.962509][ C0] unmap_vmas+0x389/0x560 [ 155.962525][ C0] ? unmap_page_range+0x1ed0/0x1ed0 [ 155.962543][ C0] ? tlb_gather_mmu_fullmm+0x165/0x210 [ 155.962575][ C0] exit_mmap+0x3e4/0x940 [ 155.962593][ C0] ? exit_aio+0x25e/0x3c0 [ 155.962608][ C0] ? vm_brk+0x30/0x30 [ 155.962624][ C0] ? mutex_unlock+0xb2/0x260 [ 155.962645][ C0] ? uprobe_clear_state+0x2cd/0x320 [ 155.962669][ C0] __mmput+0x95/0x310 [ 155.962687][ C0] mmput+0x5b/0x170 [ 155.962703][ C0] do_exit+0xb9c/0x2ca0 [ 155.962722][ C0] ? put_task_struct+0x80/0x80 [ 155.962746][ C0] ? alloc_file_pseudo+0x280/0x2f0 [ 155.962765][ C0] ? __kasan_check_write+0x14/0x20 [ 155.962782][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 155.962797][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 155.962814][ C0] do_group_exit+0x141/0x310 [ 155.962832][ C0] get_signal+0x7a3/0x1630 [ 155.962852][ C0] arch_do_signal_or_restart+0xbd/0x1680 [ 155.962874][ C0] ? get_sigframe_size+0x10/0x10 [ 155.962890][ C0] ? __se_sys_futex+0x37b/0x3e0 [ 155.962911][ C0] ? fpu_flush_thread+0xf0/0xf0 [ 155.962931][ C0] exit_to_user_mode_loop+0xa0/0xe0 [ 155.962948][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 155.962965][ C0] syscall_exit_to_user_mode+0x26/0x160 [ 155.962984][ C0] do_syscall_64+0x49/0xb0 [ 155.963001][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 155.963017][ C0] RIP: 0033:0x7ff9c34c3ea9 [ 155.963029][ C0] Code: Unable to access opcode bytes at RIP 0x7ff9c34c3e7f. [ 155.963037][ C0] RSP: 002b:00007ff9c3045178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 155.963054][ C0] RAX: fffffffffffffe00 RBX: 00007ff9c35f1f88 RCX: 00007ff9c34c3ea9 [ 155.963067][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff9c35f1f88 [ 155.963077][ C0] RBP: 00007ff9c35f1f80 R08: 00007ff9c30456c0 R09: 00007ff9c30456c0 [ 155.963089][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9c35f1f8c [ 155.963100][ C0] R13: 000000000000000b R14: 00007fff6dc87e50 R15: 00007fff6dc87f38 [ 155.963115][ C0] [ 155.963780][ C1] NMI backtrace for cpu 1 [ 156.992196][ C1] CPU: 1 PID: 743 Comm: syz-executor.2 Not tainted 5.15.151-syzkaller-1069583-g5356d2f17edf #0 [ 157.004393][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 157.015430][ C1] Call Trace: [ 157.018643][ C1] [ 157.021635][ C1] dump_stack_lvl+0x151/0x1b7 [ 157.026718][ C1] ? io_uring_drop_tctx_refs+0x190/0x190 [ 157.032286][ C1] ? cpumask_next+0x8a/0xb0 [ 157.036821][ C1] dump_stack+0x15/0x17 [ 157.041489][ C1] nmi_cpu_backtrace+0x2f7/0x300 [ 157.046522][ C1] ? init_x2apic_ldr+0x10/0x10 [ 157.051193][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 157.057280][ C1] ? irq_work_queue+0xd4/0x160 [ 157.061954][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 157.067973][ C1] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 157.073881][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 157.080026][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 157.085845][ C1] rcu_dump_cpu_stacks+0x1d8/0x330 [ 157.090891][ C1] print_cpu_stall+0x315/0x5f0 [ 157.095586][ C1] rcu_sched_clock_irq+0x989/0x12f0 [ 157.101326][ C1] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 157.107403][ C1] ? hrtimer_run_queues+0x15f/0x440 [ 157.112524][ C1] update_process_times+0x198/0x200 [ 157.117886][ C1] tick_sched_timer+0x188/0x240 [ 157.122563][ C1] ? tick_setup_sched_timer+0x480/0x480 [ 157.127951][ C1] __hrtimer_run_queues+0x41a/0xad0 [ 157.132983][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 157.138360][ C1] ? clockevents_program_event+0x22f/0x300 [ 157.144340][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 157.150745][ C1] hrtimer_interrupt+0x40c/0xaa0 [ 157.155613][ C1] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 157.161590][ C1] sysvec_apic_timer_interrupt+0x95/0xc0 [ 157.167056][ C1] [ 157.169836][ C1] [ 157.172625][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 157.178444][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 157.183462][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 2b 02 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 157.203272][ C1] RSP: 0018:ffffc90000bb6ee0 EFLAGS: 00000246 [ 157.209315][ C1] RAX: 0000000000000001 RBX: 1ffff92000176de0 RCX: 1ffffffff0c5aa9c [ 157.217645][ C1] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7138ad4 [ 157.226172][ C1] RBP: ffffc90000bb6f90 R08: dffffc0000000000 R09: ffffed103ee2715b [ 157.234062][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 157.242047][ C1] R13: ffff8881f7138ad4 R14: 0000000000000001 R15: 1ffff92000176de4 [ 157.250279][ C1] ? asm_common_interrupt+0x27/0x40 [ 157.255486][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 157.260510][ C1] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 157.266420][ C1] ? post_alloc_hook+0x1a3/0x1b0 [ 157.271346][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 157.277579][ C1] ? get_page_from_freelist+0x3550/0x35d0 [ 157.283259][ C1] ? __reset_page_owner+0x190/0x190 [ 157.288437][ C1] ? free_unref_page_list+0x14b/0xa60 [ 157.293639][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 157.298486][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 157.303786][ C1] ? sock_hash_bucket_hash+0x388/0x7e0 [ 157.309843][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 157.315142][ C1] bpf_prog_a8aaa52f2e199321+0x42/0x2a0 [ 157.320790][ C1] bpf_trace_run4+0x13f/0x270 [ 157.325301][ C1] ? bpf_trace_run3+0x250/0x250 [ 157.330088][ C1] ? __alloc_pages+0x8f0/0x8f0 [ 157.334783][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 157.340152][ C1] __traceiter_mm_page_alloc+0x3a/0x60 [ 157.345474][ C1] __alloc_pages+0x3cb/0x8f0 [ 157.350038][ C1] ? page_remove_rmap+0xe36/0x1420 [ 157.355295][ C1] ? prep_new_page+0x110/0x110 [ 157.360504][ C1] ? page_remove_rmap+0xebe/0x1420 [ 157.365515][ C1] ? page_add_file_rmap+0x8e0/0x8e0 [ 157.370765][ C1] ? mark_page_accessed+0x56b/0xbf0 [ 157.375893][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 157.380487][ C1] __get_free_pages+0x10/0x30 [ 157.385180][ C1] __tlb_remove_page_size+0x178/0x300 [ 157.390580][ C1] unmap_page_range+0x1226/0x1ed0 [ 157.395677][ C1] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 157.402083][ C1] ? __pagevec_lru_add+0xcde/0xd70 [ 157.407039][ C1] ? uprobe_munmap+0x18d/0x450 [ 157.411746][ C1] ? lru_cache_add+0x540/0x540 [ 157.416360][ C1] unmap_vmas+0x389/0x560 [ 157.420581][ C1] ? unmap_page_range+0x1ed0/0x1ed0 [ 157.425620][ C1] ? tlb_gather_mmu_fullmm+0x165/0x210 [ 157.431004][ C1] exit_mmap+0x3e4/0x940 [ 157.435130][ C1] ? exit_aio+0x25e/0x3c0 [ 157.439447][ C1] ? vm_brk+0x30/0x30 [ 157.443337][ C1] ? mutex_unlock+0xb2/0x260 [ 157.447865][ C1] ? uprobe_clear_state+0x2cd/0x320 [ 157.452886][ C1] __mmput+0x95/0x310 [ 157.456788][ C1] mmput+0x5b/0x170 [ 157.460708][ C1] do_exit+0xb9c/0x2ca0 [ 157.464705][ C1] ? put_task_struct+0x80/0x80 [ 157.469653][ C1] ? __kasan_check_write+0x14/0x20 [ 157.475044][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 157.480183][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 157.485792][ C1] do_group_exit+0x141/0x310 [ 157.490551][ C1] get_signal+0x7a3/0x1630 [ 157.494885][ C1] arch_do_signal_or_restart+0xbd/0x1680 [ 157.500347][ C1] ? get_sigframe_size+0x10/0x10 [ 157.505312][ C1] ? __se_sys_futex+0x37b/0x3e0 [ 157.510190][ C1] ? fpu_flush_thread+0xf0/0xf0 [ 157.514878][ C1] exit_to_user_mode_loop+0xa0/0xe0 [ 157.519975][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 157.525363][ C1] syscall_exit_to_user_mode+0x26/0x160 [ 157.530836][ C1] do_syscall_64+0x49/0xb0 [ 157.535173][ C1] ? sysvec_call_function_single+0x52/0xb0 [ 157.541386][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 157.547265][ C1] RIP: 0033:0x7f69ee502ea9 [ 157.551482][ C1] Code: Unable to access opcode bytes at RIP 0x7f69ee502e7f. [ 157.558765][ C1] RSP: 002b:00007f69ee084178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 157.567099][ C1] RAX: fffffffffffffe00 RBX: 00007f69ee630f88 RCX: 00007f69ee502ea9 [ 157.575084][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f69ee630f88 [ 157.583171][ C1] RBP: 00007f69ee630f80 R08: 00007f69ee0846c0 R09: 00007f69ee0846c0 [ 157.591103][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f69ee630f8c [ 157.599293][ C1] R13: 000000000000000b R14: 00007ffe7399a430 R15: 00007ffe7399a518 [ 157.607203][ C1] [ 287.142087][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 225s! [syz-executor.2:743] [ 287.150891][ C1] Modules linked in: [ 287.154635][ C1] CPU: 1 PID: 743 Comm: syz-executor.2 Not tainted 5.15.151-syzkaller-1069583-g5356d2f17edf #0 [ 287.164868][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 287.174860][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x38b/0xc40 [ 287.181655][ C1] Code: 00 00 00 00 00 fc ff df 41 0f b6 04 16 84 c0 0f 85 ac 00 00 00 48 8b 44 24 08 83 38 00 0f 85 15 01 00 00 45 84 e4 74 09 f3 90 <41> ff cc 75 d9 eb 1b 48 8b 44 24 20 0f b6 04 10 84 c0 0f 85 cd 00 [ 287.202048][ C1] RSP: 0018:ffffc90000bb6fa0 EFLAGS: 00000202 [ 287.208233][ C1] RAX: ffff8881f7138ac8 RBX: ffff8881f7138ad4 RCX: 0000000000000000 [ 287.216158][ C1] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8881f7138ad4 [ 287.223958][ C1] RBP: ffffc90000bb7090 R08: dffffc0000000000 R09: ffffed103ee2715b [ 287.231895][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000006a52 [ 287.239667][ C1] R13: 1ffff11022808ba3 R14: 1ffff1103ee27159 R15: ffff888114045d18 [ 287.247553][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 287.256435][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.263032][ C1] CR2: 0000000020000000 CR3: 000000000620f000 CR4: 00000000003506a0 [ 287.270936][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.278930][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.286977][ C1] Call Trace: [ 287.290109][ C1] [ 287.292938][ C1] ? show_regs+0x58/0x60 [ 287.297121][ C1] ? watchdog_timer_fn+0x4b1/0x5f0 [ 287.302148][ C1] ? proc_watchdog_cpumask+0xd0/0xd0 [ 287.307547][ C1] ? __hrtimer_run_queues+0x41a/0xad0 [ 287.312978][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 287.318126][ C1] ? clockevents_program_event+0x22f/0x300 [ 287.324000][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 287.330244][ C1] ? hrtimer_interrupt+0x40c/0xaa0 [ 287.335370][ C1] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 287.341482][ C1] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 287.347212][ C1] [ 287.350232][ C1] [ 287.353105][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 287.359196][ C1] ? __pv_queued_spin_lock_slowpath+0x38b/0xc40 [ 287.365272][ C1] ? post_alloc_hook+0x1a3/0x1b0 [ 287.370021][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 287.376444][ C1] ? get_page_from_freelist+0x3550/0x35d0 [ 287.382188][ C1] ? __reset_page_owner+0x190/0x190 [ 287.387327][ C1] ? free_unref_page_list+0x14b/0xa60 [ 287.392598][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 287.397685][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 287.402801][ C1] ? sock_hash_bucket_hash+0x388/0x7e0 [ 287.408092][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 287.413133][ C1] bpf_prog_a8aaa52f2e199321+0x42/0x2a0 [ 287.418503][ C1] bpf_trace_run4+0x13f/0x270 [ 287.423105][ C1] ? bpf_trace_run3+0x250/0x250 [ 287.427800][ C1] ? __alloc_pages+0x8f0/0x8f0 [ 287.432831][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 287.438255][ C1] __traceiter_mm_page_alloc+0x3a/0x60 [ 287.443815][ C1] __alloc_pages+0x3cb/0x8f0 [ 287.448240][ C1] ? page_remove_rmap+0xe36/0x1420 [ 287.453431][ C1] ? prep_new_page+0x110/0x110 [ 287.458091][ C1] ? page_remove_rmap+0xebe/0x1420 [ 287.463124][ C1] ? page_add_file_rmap+0x8e0/0x8e0 [ 287.468151][ C1] ? mark_page_accessed+0x56b/0xbf0 [ 287.473503][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 287.478165][ C1] __get_free_pages+0x10/0x30 [ 287.482688][ C1] __tlb_remove_page_size+0x178/0x300 [ 287.487929][ C1] unmap_page_range+0x1226/0x1ed0 [ 287.492854][ C1] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 287.499026][ C1] ? __pagevec_lru_add+0xcde/0xd70 [ 287.504175][ C1] ? uprobe_munmap+0x18d/0x450 [ 287.508840][ C1] ? lru_cache_add+0x540/0x540 [ 287.513533][ C1] unmap_vmas+0x389/0x560 [ 287.517691][ C1] ? unmap_page_range+0x1ed0/0x1ed0 [ 287.523054][ C1] ? tlb_gather_mmu_fullmm+0x165/0x210 [ 287.528430][ C1] exit_mmap+0x3e4/0x940 [ 287.532603][ C1] ? exit_aio+0x25e/0x3c0 [ 287.536837][ C1] ? vm_brk+0x30/0x30 [ 287.540663][ C1] ? mutex_unlock+0xb2/0x260 [ 287.545088][ C1] ? uprobe_clear_state+0x2cd/0x320 [ 287.550233][ C1] __mmput+0x95/0x310 [ 287.554046][ C1] mmput+0x5b/0x170 [ 287.558278][ C1] do_exit+0xb9c/0x2ca0 [ 287.562821][ C1] ? put_task_struct+0x80/0x80 [ 287.567537][ C1] ? __kasan_check_write+0x14/0x20 [ 287.572664][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 287.577582][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 287.582965][ C1] do_group_exit+0x141/0x310 [ 287.587673][ C1] get_signal+0x7a3/0x1630 [ 287.592101][ C1] arch_do_signal_or_restart+0xbd/0x1680 [ 287.597835][ C1] ? get_sigframe_size+0x10/0x10 [ 287.602869][ C1] ? __se_sys_futex+0x37b/0x3e0 [ 287.607646][ C1] ? fpu_flush_thread+0xf0/0xf0 [ 287.612380][ C1] exit_to_user_mode_loop+0xa0/0xe0 [ 287.617446][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 287.622742][ C1] syscall_exit_to_user_mode+0x26/0x160 [ 287.628127][ C1] do_syscall_64+0x49/0xb0 [ 287.632519][ C1] ? sysvec_call_function_single+0x52/0xb0 [ 287.638227][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 287.644601][ C1] RIP: 0033:0x7f69ee502ea9 [ 287.648831][ C1] Code: Unable to access opcode bytes at RIP 0x7f69ee502e7f. [ 287.656107][ C1] RSP: 002b:00007f69ee084178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 287.664353][ C1] RAX: fffffffffffffe00 RBX: 00007f69ee630f88 RCX: 00007f69ee502ea9 [ 287.672336][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f69ee630f88 [ 287.680156][ C1] RBP: 00007f69ee630f80 R08: 00007f69ee0846c0 R09: 00007f69ee0846c0 [ 287.688088][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f69ee630f8c [ 287.696083][ C1] R13: 000000000000000b R14: 00007ffe7399a430 R15: 00007ffe7399a518 [ 287.704096][ C1] [ 287.706950][ C1] Sending NMI from CPU 1 to CPUs 0: [ 287.712179][ C0] NMI backtrace for cpu 0 [ 287.712189][ C0] CPU: 0 PID: 741 Comm: syz-executor.3 Not tainted 5.15.151-syzkaller-1069583-g5356d2f17edf #0 [ 287.712208][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 287.712217][ C0] RIP: 0010:__pv_queued_spin_lock_slowpath+0x5ba/0xc40 [ 287.712245][ C0] Code: 00 00 49 89 dc c6 03 00 48 8b 44 24 10 0f b6 04 10 84 c0 0f 85 48 01 00 00 48 8b 44 24 08 c6 00 01 bb 00 80 ff ff eb 06 f3 90 c3 74 5e 41 0f b6 44 15 00 84 c0 75 36 41 80 3f 00 75 ea 4c 89 [ 287.712258][ C0] RSP: 0018:ffffc90000ba6160 EFLAGS: 00000206 [ 287.712274][ C0] RAX: 0000000000000000 RBX: 00000000ffff9b3f RCX: ffffffff815504ef [ 287.712286][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888114045d18 [ 287.712298][ C0] RBP: ffffc90000ba6250 R08: dffffc0000000000 R09: ffffed1022808ba4 [ 287.712311][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f7038ad4 [ 287.712323][ C0] R13: 1ffff11022808ba3 R14: 1ffff1103ee00001 R15: ffff888114045d18 [ 287.712337][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 287.712351][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.712363][ C0] CR2: 00007fa1af53decc CR3: 000000000620f000 CR4: 00000000003506b0 [ 287.712379][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.712388][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.712399][ C0] Call Trace: [ 287.712404][ C0] [ 287.712410][ C0] ? show_regs+0x58/0x60 [ 287.712429][ C0] ? nmi_cpu_backtrace+0x29f/0x300 [ 287.712450][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 287.712471][ C0] ? __pv_queued_spin_lock_slowpath+0x5ba/0xc40 [ 287.712490][ C0] ? __pv_queued_spin_lock_slowpath+0x5ba/0xc40 [ 287.712509][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 287.712528][ C0] ? nmi_handle+0xa8/0x280 [ 287.712545][ C0] ? __pv_queued_spin_lock_slowpath+0x5ba/0xc40 [ 287.712564][ C0] ? kvm_wait+0x147/0x180 [ 287.712586][ C0] ? default_do_nmi+0x69/0x160 [ 287.712606][ C0] ? exc_nmi+0xaf/0x120 [ 287.712622][ C0] ? end_repeat_nmi+0x16/0x31 [ 287.712640][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 287.712659][ C0] ? __pv_queued_spin_lock_slowpath+0x5ba/0xc40 [ 287.712678][ C0] ? __pv_queued_spin_lock_slowpath+0x5ba/0xc40 [ 287.712697][ C0] ? __pv_queued_spin_lock_slowpath+0x5ba/0xc40 [ 287.712717][ C0] [ 287.712721][ C0] [ 287.712726][ C0] ? post_alloc_hook+0x1a3/0x1b0 [ 287.712746][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 287.712764][ C0] ? get_page_from_freelist+0x3550/0x35d0 [ 287.712785][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 287.712801][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 287.712817][ C0] ? sock_hash_bucket_hash+0x388/0x7e0 [ 287.712839][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 287.712858][ C0] bpf_prog_a8aaa52f2e199321+0x42/0x2a0 [ 287.712873][ C0] bpf_trace_run4+0x13f/0x270 [ 287.712892][ C0] ? bpf_trace_run3+0x250/0x250 [ 287.712911][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 287.712929][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 287.712948][ C0] __traceiter_mm_page_alloc+0x3a/0x60 [ 287.712964][ C0] __alloc_pages+0x3cb/0x8f0 [ 287.712982][ C0] ? prep_new_page+0x110/0x110 [ 287.712999][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 287.713017][ C0] ? stack_trace_save+0x113/0x1c0 [ 287.713037][ C0] __stack_depot_save+0x38d/0x470 [ 287.713054][ C0] stack_depot_save+0xe/0x10 [ 287.713068][ C0] save_stack+0x104/0x1e0 [ 287.713084][ C0] ? __reset_page_owner+0x190/0x190 [ 287.713099][ C0] ? post_alloc_hook+0x1a3/0x1b0 [ 287.713115][ C0] ? prep_new_page+0x1b/0x110 [ 287.713131][ C0] ? get_page_from_freelist+0x3550/0x35d0 [ 287.713149][ C0] ? __alloc_pages+0x27e/0x8f0 [ 287.713166][ C0] ? __stack_depot_save+0x38d/0x470 [ 287.713180][ C0] ? kasan_set_track+0x5d/0x70 [ 287.713195][ C0] ? kasan_set_free_info+0x23/0x40 [ 287.713211][ C0] ? ____kasan_slab_free+0x126/0x160 [ 287.713227][ C0] ? __kasan_slab_free+0x11/0x20 [ 287.713242][ C0] ? slab_free_freelist_hook+0xbd/0x190 [ 287.713261][ C0] ? kfree+0xc8/0x220 [ 287.713277][ C0] ? sock_map_unref+0x352/0x4d0 [ 287.713294][ C0] ? sock_hash_delete_elem+0x274/0x2f0 [ 287.713325][ C0] ? bpf_prog_a8aaa52f2e199321+0x42/0x2a0 [ 287.713338][ C0] ? bpf_trace_run4+0x13f/0x270 [ 287.713355][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 287.713372][ C0] ? post_alloc_hook+0x1a3/0x1b0 [ 287.713390][ C0] __set_page_owner+0x28/0x2e0 [ 287.713406][ C0] ? kernel_init_free_pages+0xda/0xf0 [ 287.713424][ C0] post_alloc_hook+0x1a3/0x1b0 [ 287.713441][ C0] prep_new_page+0x1b/0x110 [ 287.713465][ C0] get_page_from_freelist+0x3550/0x35d0 [ 287.713486][ C0] ? check_stack_access_within_bounds+0x5a0/0x5a0 [ 287.713507][ C0] ? __kernel_text_address+0x9b/0x110 [ 287.713524][ C0] ? unwind_get_return_address+0x4d/0x90 [ 287.713544][ C0] ? check_stack_range_initialized+0x10fe/0x1410 [ 287.713565][ C0] ? lruvec_init+0x150/0x150 [ 287.713592][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 287.713611][ C0] ? __alloc_pages_bulk+0xe40/0xe40 [ 287.713636][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 287.713654][ C0] __alloc_pages+0x27e/0x8f0 [ 287.713672][ C0] ? prep_new_page+0x110/0x110 [ 287.713691][ C0] ? stack_trace_save+0x113/0x1c0 [ 287.713708][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 287.713731][ C0] __stack_depot_save+0x38d/0x470 [ 287.713747][ C0] ? kfree+0xc8/0x220 [ 287.713764][ C0] kasan_set_track+0x5d/0x70 [ 287.713788][ C0] ? kasan_set_track+0x4b/0x70 [ 287.713802][ C0] ? kasan_set_free_info+0x23/0x40 [ 287.713818][ C0] ? ____kasan_slab_free+0x126/0x160 [ 287.713834][ C0] ? __kasan_slab_free+0x11/0x20 [ 287.713849][ C0] ? slab_free_freelist_hook+0xbd/0x190 [ 287.713868][ C0] ? kfree+0xc8/0x220 [ 287.713883][ C0] ? sock_map_unref+0x352/0x4d0 [ 287.713901][ C0] ? sock_hash_delete_elem+0x274/0x2f0 [ 287.713919][ C0] ? bpf_prog_a8aaa52f2e199321+0x42/0x2a0 [ 287.713931][ C0] ? bpf_trace_run4+0x13f/0x270 [ 287.713948][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 287.713964][ C0] ? __traceiter_mm_page_alloc+0x3a/0x60 [ 287.713979][ C0] ? __alloc_pages+0x3cb/0x8f0 [ 287.713996][ C0] ? __get_free_pages+0x10/0x30 [ 287.714012][ C0] ? __tlb_remove_page_size+0x178/0x300 [ 287.714032][ C0] ? unmap_page_range+0x1226/0x1ed0 [ 287.714047][ C0] ? unmap_vmas+0x389/0x560 [ 287.714062][ C0] ? exit_mmap+0x3e4/0x940 [ 287.714078][ C0] ? __mmput+0x95/0x310 [ 287.714095][ C0] ? mmput+0x5b/0x170 [ 287.714111][ C0] ? do_exit+0xb9c/0x2ca0 [ 287.714126][ C0] ? do_group_exit+0x141/0x310 [ 287.714141][ C0] ? get_signal+0x7a3/0x1630 [ 287.714158][ C0] ? arch_do_signal_or_restart+0xbd/0x1680 [ 287.714174][ C0] ? exit_to_user_mode_loop+0xa0/0xe0 [ 287.714190][ C0] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 287.714207][ C0] ? syscall_exit_to_user_mode+0x26/0x160 [ 287.714225][ C0] ? do_syscall_64+0x49/0xb0 [ 287.714241][ C0] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 287.714265][ C0] kasan_set_free_info+0x23/0x40 [ 287.714281][ C0] ____kasan_slab_free+0x126/0x160 [ 287.714298][ C0] __kasan_slab_free+0x11/0x20 [ 287.714314][ C0] slab_free_freelist_hook+0xbd/0x190 [ 287.714335][ C0] ? sock_map_unref+0x352/0x4d0 [ 287.714353][ C0] kfree+0xc8/0x220 [ 287.714371][ C0] sock_map_unref+0x352/0x4d0 [ 287.714390][ C0] sock_hash_delete_elem+0x274/0x2f0 [ 287.714410][ C0] bpf_prog_a8aaa52f2e199321+0x42/0x2a0 [ 287.714423][ C0] bpf_trace_run4+0x13f/0x270 [ 287.714441][ C0] ? bpf_trace_run3+0x250/0x250 [ 287.714460][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 287.714478][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 287.714496][ C0] __traceiter_mm_page_alloc+0x3a/0x60 [ 287.714513][ C0] __alloc_pages+0x3cb/0x8f0 [ 287.714529][ C0] ? page_remove_rmap+0xe36/0x1420 [ 287.714545][ C0] ? prep_new_page+0x110/0x110 [ 287.714562][ C0] ? page_remove_rmap+0xebe/0x1420 [ 287.714584][ C0] ? page_add_file_rmap+0x8e0/0x8e0 [ 287.714600][ C0] ? mark_page_accessed+0x56b/0xbf0 [ 287.714616][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 287.714631][ C0] __get_free_pages+0x10/0x30 [ 287.714648][ C0] __tlb_remove_page_size+0x178/0x300 [ 287.714668][ C0] unmap_page_range+0x1226/0x1ed0 [ 287.714690][ C0] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 287.714708][ C0] ? __pagevec_lru_add+0xcde/0xd70 [ 287.714725][ C0] ? uprobe_munmap+0x18d/0x450 [ 287.714743][ C0] ? lru_cache_add+0x540/0x540 [ 287.714760][ C0] unmap_vmas+0x389/0x560 [ 287.714776][ C0] ? unmap_page_range+0x1ed0/0x1ed0 [ 287.714793][ C0] ? tlb_gather_mmu_fullmm+0x165/0x210 [ 287.714813][ C0] exit_mmap+0x3e4/0x940 [ 287.714831][ C0] ? exit_aio+0x25e/0x3c0 [ 287.714845][ C0] ? vm_brk+0x30/0x30 [ 287.714861][ C0] ? mutex_unlock+0xb2/0x260 [ 287.714880][ C0] ? uprobe_clear_state+0x2cd/0x320 [ 287.714900][ C0] __mmput+0x95/0x310 [ 287.714917][ C0] mmput+0x5b/0x170 [ 287.714934][ C0] do_exit+0xb9c/0x2ca0 [ 287.714952][ C0] ? put_task_struct+0x80/0x80 [ 287.714967][ C0] ? alloc_file_pseudo+0x280/0x2f0 [ 287.714986][ C0] ? __kasan_check_write+0x14/0x20 [ 287.715003][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 287.715018][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 287.715034][ C0] do_group_exit+0x141/0x310 [ 287.715051][ C0] get_signal+0x7a3/0x1630 [ 287.715072][ C0] arch_do_signal_or_restart+0xbd/0x1680 [ 287.715093][ C0] ? get_sigframe_size+0x10/0x10 [ 287.715109][ C0] ? __se_sys_futex+0x37b/0x3e0 [ 287.715130][ C0] ? fpu_flush_thread+0xf0/0xf0 [ 287.715149][ C0] exit_to_user_mode_loop+0xa0/0xe0 [ 287.715166][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 287.715183][ C0] syscall_exit_to_user_mode+0x26/0x160 [ 287.715203][ C0] do_syscall_64+0x49/0xb0 [ 287.715219][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 287.715235][ C0] RIP: 0033:0x7ff9c34c3ea9 [ 287.715247][ C0] Code: Unable to access opcode bytes at RIP 0x7ff9c34c3e7f. [ 287.715255][ C0] RSP: 002b:00007ff9c3045178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 287.715272][ C0] RAX: fffffffffffffe00 RBX: 00007ff9c35f1f88 RCX: 00007ff9c34c3ea9 [ 287.715284][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff9c35f1f88 [ 287.715295][ C0] RBP: 00007ff9c35f1f80 R08: 00007ff9c30456c0 R09: 00007ff9c30456c0 [ 287.715306][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9c35f1f8c [ 287.715317][ C0] R13: 000000000000000b R14: 00007fff6dc87e50 R15: 00007fff6dc87f38 [ 287.715332][ C0]