Warning: Permanently added '10.128.1.159' (ED25519) to the list of known hosts. 2024/05/14 19:30:37 ignoring optional flag "sandboxArg"="0" 2024/05/14 19:30:37 parsed 1 programs [ 41.344638][ T30] audit: type=1400 audit(1715715037.411:157): avc: denied { mounton } for pid=340 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 41.370248][ T30] audit: type=1400 audit(1715715037.411:158): avc: denied { mount } for pid=340 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 41.472272][ T30] audit: type=1400 audit(1715715037.541:159): avc: denied { unlink } for pid=340 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2024/05/14 19:30:37 executed programs: 0 [ 41.528615][ T340] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 41.654068][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.660921][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.668316][ T350] device bridge_slave_0 entered promiscuous mode [ 41.676168][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.683195][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.690352][ T350] device bridge_slave_1 entered promiscuous mode [ 41.774504][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.781359][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.789320][ T357] device bridge_slave_0 entered promiscuous mode [ 41.797841][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.804825][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.812220][ T357] device bridge_slave_1 entered promiscuous mode [ 41.852519][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.859371][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.866960][ T356] device bridge_slave_0 entered promiscuous mode [ 41.881113][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.888012][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.895575][ T356] device bridge_slave_1 entered promiscuous mode [ 41.923334][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.930178][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.937632][ T358] device bridge_slave_0 entered promiscuous mode [ 41.944354][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.951196][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.958543][ T358] device bridge_slave_1 entered promiscuous mode [ 42.001684][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.008556][ T359] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.016006][ T359] device bridge_slave_0 entered promiscuous mode [ 42.036885][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.043788][ T359] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.050915][ T359] device bridge_slave_1 entered promiscuous mode [ 42.070978][ T30] audit: type=1400 audit(1715715038.131:160): avc: denied { write } for pid=350 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.091659][ T30] audit: type=1400 audit(1715715038.131:161): avc: denied { read } for pid=350 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.146708][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.153658][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.239916][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.246977][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.254115][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.261029][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.298403][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.305459][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.312931][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.321052][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.328652][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.344421][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.352589][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.360563][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.367537][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.374691][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.382760][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.389917][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.408960][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.423651][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.431270][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.448408][ T350] device veth0_vlan entered promiscuous mode [ 42.462658][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.470896][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.479748][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.487107][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.495127][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.503248][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.510086][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.517469][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.525540][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.532398][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.566109][ T350] device veth1_macvtap entered promiscuous mode [ 42.572786][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.580415][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.609900][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.617673][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.626050][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.634560][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.642868][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.649694][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.656933][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.664737][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.672767][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.679644][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.687006][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.695160][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.702120][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.709284][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.717180][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.725012][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.733061][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.739981][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.747588][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.755118][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.775948][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.784633][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.792888][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.799890][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.808234][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.816554][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.824762][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.831815][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.839257][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.847669][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.856309][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.864851][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.873163][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.881155][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.889724][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.910581][ T358] device veth0_vlan entered promiscuous mode [ 42.924140][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.932599][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.942137][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.950088][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.958305][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.966681][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.974695][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.982644][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.002044][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.007015][ T30] audit: type=1400 audit(1715715039.071:162): avc: denied { mounton } for pid=350 comm="syz-executor.3" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 43.009821][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.039771][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.048456][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.056756][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.065365][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.077837][ T357] device veth0_vlan entered promiscuous mode [ 43.092129][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.099974][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.111068][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.121255][ T30] audit: type=1400 audit(1715715039.191:163): avc: denied { map_create } for pid=376 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 43.142516][ T30] audit: type=1400 audit(1715715039.191:164): avc: denied { map_read map_write } for pid=376 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 43.163192][ T30] audit: type=1400 audit(1715715039.191:165): avc: denied { prog_load } for pid=376 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 43.163474][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.191240][ T30] audit: type=1400 audit(1715715039.191:166): avc: denied { bpf } for pid=376 comm="syz-executor.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.192208][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.220766][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.235248][ T356] device veth0_vlan entered promiscuous mode [ 43.249624][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.264431][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.273840][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.281687][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.293093][ T358] device veth1_macvtap entered promiscuous mode [ 43.300335][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.309354][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.318111][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.328682][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.337742][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.352036][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.360065][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.379616][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.387434][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.398380][ T357] device veth1_macvtap entered promiscuous mode [ 43.410832][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.419812][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.428520][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.442101][ T356] device veth1_macvtap entered promiscuous mode [ 43.449159][ T359] device veth0_vlan entered promiscuous mode [ 43.462350][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.470654][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.479480][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.487716][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.496150][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.504732][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.513045][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.521324][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.529658][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.538065][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.546300][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.583855][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.600917][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.613167][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.623910][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.632330][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.640926][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.654423][ T359] device veth1_macvtap entered promiscuous mode [ 43.682688][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.690707][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.701562][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.713549][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.728640][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.941686][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 143.948214][ C0] rcu: 0-...!: (10000 ticks this GP) idle=68d/1/0x4000000000000000 softirq=3088/3088 fqs=0 last_accelerate: 9ba9/c2bb dyntick_enabled: 1 [ 143.962283][ C0] (t=10002 jiffies g=1957 q=405) [ 143.967137][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10001 jiffies! g1957 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 143.979330][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=903 [ 143.986874][ C0] rcu: rcu_preempt kthread starved for 10004 jiffies! g1957 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 143.998374][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 144.008245][ C0] rcu: RCU grace-period kthread stack dump: [ 144.013986][ C0] task:rcu_preempt state:I stack:28328 pid: 14 ppid: 2 flags:0x00004000 [ 144.023013][ C0] Call Trace: [ 144.026124][ C0] [ 144.028909][ C0] __schedule+0xccc/0x1590 [ 144.033154][ C0] ? __sched_text_start+0x8/0x8 [ 144.037849][ C0] ? __kasan_check_write+0x14/0x20 [ 144.042792][ C0] schedule+0x11f/0x1e0 [ 144.046806][ C0] schedule_timeout+0x18c/0x370 [ 144.051479][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 144.056503][ C0] ? console_conditional_schedule+0x30/0x30 [ 144.062241][ C0] ? update_process_times+0x200/0x200 [ 144.067438][ C0] ? prepare_to_swait_event+0x308/0x320 [ 144.072846][ C0] rcu_gp_fqs_loop+0x2af/0xf80 [ 144.077747][ C0] ? debug_smp_processor_id+0x17/0x20 [ 144.082948][ C0] ? __note_gp_changes+0x4ab/0x920 [ 144.087905][ C0] ? rcu_gp_init+0xc30/0xc30 [ 144.092319][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 144.097383][ C0] ? rcu_gp_init+0x9cf/0xc30 [ 144.101782][ C0] rcu_gp_kthread+0xa4/0x350 [ 144.106298][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 144.110988][ C0] ? rcu_barrier_callback+0x50/0x50 [ 144.116014][ C0] ? __kasan_check_read+0x11/0x20 [ 144.120871][ C0] ? __kthread_parkme+0xb2/0x200 [ 144.125655][ C0] kthread+0x421/0x510 [ 144.130169][ C0] ? rcu_barrier_callback+0x50/0x50 [ 144.135201][ C0] ? kthread_blkcg+0xd0/0xd0 [ 144.139611][ C0] ret_from_fork+0x1f/0x30 [ 144.143861][ C0] [ 144.146740][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 144.152978][ C0] NMI backtrace for cpu 0 [ 144.157160][ C0] CPU: 0 PID: 436 Comm: syz-executor.1 Not tainted 5.15.149-syzkaller-1069109-g5d96939590c0 #0 [ 144.167303][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 144.177193][ C0] Call Trace: [ 144.180318][ C0] [ 144.183091][ C0] dump_stack_lvl+0x151/0x1b7 [ 144.187599][ C0] ? io_uring_drop_tctx_refs+0x190/0x190 [ 144.193076][ C0] dump_stack+0x15/0x17 [ 144.197148][ C0] nmi_cpu_backtrace+0x2f7/0x300 [ 144.202115][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 144.208187][ C0] ? panic+0x751/0x751 [ 144.212094][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 144.218093][ C0] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 144.223906][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 144.229816][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 144.235564][ C0] rcu_check_gp_kthread_starvation+0x1e3/0x250 [ 144.241522][ C0] ? rcu_check_gp_kthread_expired_fqs_timer+0x18e/0x230 [ 144.248295][ C0] print_cpu_stall+0x310/0x5f0 [ 144.252927][ C0] rcu_sched_clock_irq+0x989/0x12f0 [ 144.258034][ C0] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 144.264006][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 144.269051][ C0] update_process_times+0x198/0x200 [ 144.274070][ C0] tick_sched_timer+0x188/0x240 [ 144.278773][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 144.284140][ C0] __hrtimer_run_queues+0x41a/0xad0 [ 144.289176][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 144.294120][ C0] ? clockevents_program_event+0x22f/0x300 [ 144.300023][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 144.306021][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 144.310806][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 144.316517][ C0] sysvec_apic_timer_interrupt+0x95/0xc0 [ 144.321983][ C0] [ 144.324758][ C0] [ 144.327576][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 144.333364][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 144.338250][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 144.357882][ C0] RSP: 0018:ffffc90000b460e0 EFLAGS: 00000246 [ 144.364064][ C0] RAX: 0000000000000001 RBX: 1ffff92000168c20 RCX: 1ffffffff0c5aa9c [ 144.372051][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7037ed4 [ 144.379861][ C0] RBP: ffffc90000b46190 R08: dffffc0000000000 R09: ffffed103ee06fdb [ 144.387700][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 144.395481][ C0] R13: ffff8881f7037ed4 R14: 0000000000000001 R15: 1ffff92000168c24 [ 144.403323][ C0] ? asm_common_interrupt+0x27/0x40 [ 144.408347][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 144.413277][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 144.419186][ C0] ? post_alloc_hook+0x1a3/0x1b0 [ 144.423953][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 144.430203][ C0] ? get_page_from_freelist+0x3550/0x35d0 [ 144.435778][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 144.440683][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 144.445680][ C0] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 144.450958][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 144.456100][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x734 [ 144.461461][ C0] bpf_trace_run4+0x13f/0x270 [ 144.465970][ C0] ? bpf_trace_run3+0x250/0x250 [ 144.470657][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 144.475256][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 144.480639][ C0] __traceiter_mm_page_alloc+0x3a/0x60 [ 144.485933][ C0] __alloc_pages+0x3cb/0x8f0 [ 144.490357][ C0] ? prep_new_page+0x110/0x110 [ 144.495045][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 144.500514][ C0] ? stack_trace_save+0x113/0x1c0 [ 144.505374][ C0] __stack_depot_save+0x38d/0x470 [ 144.510320][ C0] stack_depot_save+0xe/0x10 [ 144.514751][ C0] save_stack+0x104/0x1e0 [ 144.518915][ C0] ? __reset_page_owner+0x190/0x190 [ 144.524051][ C0] ? post_alloc_hook+0x1a3/0x1b0 [ 144.528806][ C0] ? prep_new_page+0x1b/0x110 [ 144.533321][ C0] ? get_page_from_freelist+0x3550/0x35d0 [ 144.538880][ C0] ? __alloc_pages+0x27e/0x8f0 [ 144.543476][ C0] ? __stack_depot_save+0x38d/0x470 [ 144.548571][ C0] ? kasan_set_track+0x5d/0x70 [ 144.553111][ C0] ? kasan_set_free_info+0x23/0x40 [ 144.558142][ C0] ? ____kasan_slab_free+0x126/0x160 [ 144.563268][ C0] ? __kasan_slab_free+0x11/0x20 [ 144.568036][ C0] ? slab_free_freelist_hook+0xbd/0x190 [ 144.573430][ C0] ? kfree+0xc8/0x220 [ 144.577239][ C0] ? sock_map_unref+0x352/0x4d0 [ 144.582011][ C0] ? sock_hash_delete_elem+0x274/0x2f0 [ 144.587306][ C0] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x734 [ 144.592862][ C0] ? bpf_trace_run4+0x13f/0x270 [ 144.597547][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 144.603019][ C0] __set_page_owner+0x28/0x2e0 [ 144.607616][ C0] ? kernel_init_free_pages+0xda/0xf0 [ 144.612824][ C0] post_alloc_hook+0x1a3/0x1b0 [ 144.617421][ C0] prep_new_page+0x1b/0x110 [ 144.621765][ C0] get_page_from_freelist+0x3550/0x35d0 [ 144.627142][ C0] ? print_verifier_state+0x2230/0x2230 [ 144.632525][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 144.637389][ C0] ? lruvec_init+0x150/0x150 [ 144.641816][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 144.646412][ C0] ? __alloc_pages_bulk+0xe40/0xe40 [ 144.651445][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 144.656310][ C0] __alloc_pages+0x27e/0x8f0 [ 144.660733][ C0] ? prep_new_page+0x110/0x110 [ 144.665335][ C0] ? stack_trace_save+0x113/0x1c0 [ 144.670191][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 144.675139][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 144.680090][ C0] __stack_depot_save+0x38d/0x470 [ 144.684948][ C0] ? kfree+0xc8/0x220 [ 144.688766][ C0] kasan_set_track+0x5d/0x70 [ 144.693201][ C0] ? kasan_set_track+0x4b/0x70 [ 144.697798][ C0] ? kasan_set_free_info+0x23/0x40 [ 144.702743][ C0] ? ____kasan_slab_free+0x126/0x160 [ 144.707859][ C0] ? __kasan_slab_free+0x11/0x20 [ 144.712640][ C0] ? slab_free_freelist_hook+0xbd/0x190 [ 144.718109][ C0] ? kfree+0xc8/0x220 [ 144.721926][ C0] ? sock_map_unref+0x352/0x4d0 [ 144.726607][ C0] ? sock_hash_delete_elem+0x274/0x2f0 [ 144.731906][ C0] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x734 [ 144.737657][ C0] ? bpf_trace_run4+0x13f/0x270 [ 144.742342][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 144.747906][ C0] ? __traceiter_mm_page_alloc+0x3a/0x60 [ 144.753368][ C0] ? __alloc_pages+0x3cb/0x8f0 [ 144.757987][ C0] ? __get_free_pages+0x10/0x30 [ 144.762654][ C0] ? __tlb_remove_page_size+0x178/0x300 [ 144.768123][ C0] ? unmap_page_range+0x120a/0x1ca0 [ 144.773158][ C0] ? unmap_vmas+0x389/0x560 [ 144.777581][ C0] ? exit_mmap+0x3d8/0x6f0 [ 144.781838][ C0] ? __mmput+0x95/0x310 [ 144.785828][ C0] ? mmput+0x5b/0x170 [ 144.789645][ C0] ? do_exit+0xb9c/0x2ca0 [ 144.793903][ C0] ? do_group_exit+0x141/0x310 [ 144.798775][ C0] ? get_signal+0x7a3/0x1630 [ 144.803204][ C0] ? arch_do_signal_or_restart+0xbd/0x1680 [ 144.808855][ C0] ? exit_to_user_mode_loop+0xa0/0xe0 [ 144.814053][ C0] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 144.819605][ C0] ? syscall_exit_to_user_mode+0x26/0x160 [ 144.825187][ C0] ? do_syscall_64+0x49/0xb0 [ 144.829586][ C0] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 144.835498][ C0] kasan_set_free_info+0x23/0x40 [ 144.840362][ C0] ____kasan_slab_free+0x126/0x160 [ 144.845307][ C0] __kasan_slab_free+0x11/0x20 [ 144.849908][ C0] slab_free_freelist_hook+0xbd/0x190 [ 144.855209][ C0] ? sock_map_unref+0x352/0x4d0 [ 144.859895][ C0] kfree+0xc8/0x220 [ 144.863628][ C0] sock_map_unref+0x352/0x4d0 [ 144.868151][ C0] sock_hash_delete_elem+0x274/0x2f0 [ 144.873263][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x734 [ 144.878641][ C0] bpf_trace_run4+0x13f/0x270 [ 144.883153][ C0] ? bpf_trace_run3+0x250/0x250 [ 144.888034][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 144.892741][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 144.898029][ C0] __traceiter_mm_page_alloc+0x3a/0x60 [ 144.903326][ C0] __alloc_pages+0x3cb/0x8f0 [ 144.907833][ C0] ? page_remove_rmap+0xe36/0x1420 [ 144.912782][ C0] ? prep_new_page+0x110/0x110 [ 144.917379][ C0] ? page_remove_rmap+0xebe/0x1420 [ 144.922329][ C0] ? page_add_file_rmap+0x8e0/0x8e0 [ 144.927361][ C0] ? mark_page_accessed+0x56b/0xbf0 [ 144.932395][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 144.936994][ C0] __get_free_pages+0x10/0x30 [ 144.941523][ C0] __tlb_remove_page_size+0x178/0x300 [ 144.946811][ C0] unmap_page_range+0x120a/0x1ca0 [ 144.951679][ C0] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 144.957826][ C0] ? __pagevec_lru_add+0xcde/0xd70 [ 144.962869][ C0] ? uprobe_munmap+0x18d/0x450 [ 144.967548][ C0] ? lru_cache_add+0x540/0x540 [ 144.972156][ C0] unmap_vmas+0x389/0x560 [ 144.976318][ C0] ? unmap_page_range+0x1ca0/0x1ca0 [ 144.981347][ C0] ? tlb_gather_mmu_fullmm+0x165/0x210 [ 144.986690][ C0] exit_mmap+0x3d8/0x6f0 [ 144.990767][ C0] ? exit_aio+0x25e/0x3c0 [ 144.995000][ C0] ? vm_brk+0x30/0x30 [ 144.998797][ C0] ? mutex_unlock+0xb2/0x260 [ 145.003224][ C0] ? uprobe_clear_state+0x2cd/0x320 [ 145.008253][ C0] __mmput+0x95/0x310 [ 145.012083][ C0] mmput+0x5b/0x170 [ 145.015726][ C0] do_exit+0xb9c/0x2ca0 [ 145.019722][ C0] ? put_task_struct+0x80/0x80 [ 145.024312][ C0] ? __kasan_check_write+0x14/0x20 [ 145.029269][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 145.034206][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 145.039674][ C0] do_group_exit+0x141/0x310 [ 145.044118][ C0] get_signal+0x7a3/0x1630 [ 145.048352][ C0] arch_do_signal_or_restart+0xbd/0x1680 [ 145.053823][ C0] ? get_sigframe_size+0x10/0x10 [ 145.058591][ C0] ? __se_sys_futex+0x37b/0x3e0 [ 145.063280][ C0] ? fpu_flush_thread+0xf0/0xf0 [ 145.068060][ C0] exit_to_user_mode_loop+0xa0/0xe0 [ 145.073095][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 145.078384][ C0] syscall_exit_to_user_mode+0x26/0x160 [ 145.083768][ C0] do_syscall_64+0x49/0xb0 [ 145.088014][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 145.093753][ C0] RIP: 0033:0x7f8a23e5dea9 [ 145.097996][ C0] Code: Unable to access opcode bytes at RIP 0x7f8a23e5de7f. [ 145.105200][ C0] RSP: 002b:00007f8a239df178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 145.113446][ C0] RAX: fffffffffffffe00 RBX: 00007f8a23f8bf88 RCX: 00007f8a23e5dea9 [ 145.121365][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8a23f8bf88 [ 145.129284][ C0] RBP: 00007f8a23f8bf80 R08: 00007f8a239df6c0 R09: 00007f8a239df6c0 [ 145.137070][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a23f8bf8c [ 145.144887][ C0] R13: 000000000000000b R14: 00007fff21bef980 R15: 00007fff21befa68 [ 145.152825][ C0] [ 145.155743][ C0] NMI backtrace for cpu 0 [ 145.159849][ C0] CPU: 0 PID: 436 Comm: syz-executor.1 Not tainted 5.15.149-syzkaller-1069109-g5d96939590c0 #0 [ 145.170819][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 145.180791][ C0] Call Trace: [ 145.183908][ C0] [ 145.186600][ C0] dump_stack_lvl+0x151/0x1b7 [ 145.191121][ C0] ? io_uring_drop_tctx_refs+0x190/0x190 [ 145.196634][ C0] ? ttwu_do_wakeup+0x187/0x430 [ 145.201569][ C0] dump_stack+0x15/0x17 [ 145.205721][ C0] nmi_cpu_backtrace+0x2f7/0x300 [ 145.210503][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 145.216906][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 145.222300][ C0] ? __kasan_check_write+0x14/0x20 [ 145.227231][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 145.231920][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 145.237903][ C0] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 145.243722][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 145.249621][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 145.255351][ C0] rcu_dump_cpu_stacks+0x1d8/0x330 [ 145.260317][ C0] print_cpu_stall+0x315/0x5f0 [ 145.264896][ C0] rcu_sched_clock_irq+0x989/0x12f0 [ 145.270119][ C0] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 145.276133][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 145.281134][ C0] update_process_times+0x198/0x200 [ 145.286170][ C0] tick_sched_timer+0x188/0x240 [ 145.290852][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 145.296236][ C0] __hrtimer_run_queues+0x41a/0xad0 [ 145.301270][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 145.306304][ C0] ? clockevents_program_event+0x22f/0x300 [ 145.311943][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 145.317859][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 145.322630][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 145.328355][ C0] sysvec_apic_timer_interrupt+0x95/0xc0 [ 145.334084][ C0] [ 145.336857][ C0] [ 145.339633][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 145.345446][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 145.350220][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 145.369668][ C0] RSP: 0018:ffffc90000b460e0 EFLAGS: 00000246 [ 145.375564][ C0] RAX: 0000000000000001 RBX: 1ffff92000168c20 RCX: 1ffffffff0c5aa9c [ 145.383376][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7037ed4 [ 145.391187][ C0] RBP: ffffc90000b46190 R08: dffffc0000000000 R09: ffffed103ee06fdb [ 145.398997][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 145.406809][ C0] R13: ffff8881f7037ed4 R14: 0000000000000001 R15: 1ffff92000168c24 [ 145.414626][ C0] ? asm_common_interrupt+0x27/0x40 [ 145.419829][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 145.424776][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 145.430677][ C0] ? post_alloc_hook+0x1a3/0x1b0 [ 145.435453][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 145.441789][ C0] ? get_page_from_freelist+0x3550/0x35d0 [ 145.447350][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 145.452117][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 145.457148][ C0] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 145.462590][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 145.467563][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x734 [ 145.472946][ C0] bpf_trace_run4+0x13f/0x270 [ 145.477459][ C0] ? bpf_trace_run3+0x250/0x250 [ 145.482409][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 145.487092][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 145.492391][ C0] __traceiter_mm_page_alloc+0x3a/0x60 [ 145.497694][ C0] __alloc_pages+0x3cb/0x8f0 [ 145.502111][ C0] ? prep_new_page+0x110/0x110 [ 145.506709][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 145.512281][ C0] ? stack_trace_save+0x113/0x1c0 [ 145.517136][ C0] __stack_depot_save+0x38d/0x470 [ 145.521988][ C0] stack_depot_save+0xe/0x10 [ 145.526409][ C0] save_stack+0x104/0x1e0 [ 145.531013][ C0] ? __reset_page_owner+0x190/0x190 [ 145.536131][ C0] ? post_alloc_hook+0x1a3/0x1b0 [ 145.540905][ C0] ? prep_new_page+0x1b/0x110 [ 145.545443][ C0] ? get_page_from_freelist+0x3550/0x35d0 [ 145.550972][ C0] ? __alloc_pages+0x27e/0x8f0 [ 145.555936][ C0] ? __stack_depot_save+0x38d/0x470 [ 145.561068][ C0] ? kasan_set_track+0x5d/0x70 [ 145.565646][ C0] ? kasan_set_free_info+0x23/0x40 [ 145.570587][ C0] ? ____kasan_slab_free+0x126/0x160 [ 145.575710][ C0] ? __kasan_slab_free+0x11/0x20 [ 145.580479][ C0] ? slab_free_freelist_hook+0xbd/0x190 [ 145.585880][ C0] ? kfree+0xc8/0x220 [ 145.589681][ C0] ? sock_map_unref+0x352/0x4d0 [ 145.594456][ C0] ? sock_hash_delete_elem+0x274/0x2f0 [ 145.599753][ C0] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x734 [ 145.605303][ C0] ? bpf_trace_run4+0x13f/0x270 [ 145.609992][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 145.615461][ C0] __set_page_owner+0x28/0x2e0 [ 145.620058][ C0] ? kernel_init_free_pages+0xda/0xf0 [ 145.625271][ C0] post_alloc_hook+0x1a3/0x1b0 [ 145.629875][ C0] prep_new_page+0x1b/0x110 [ 145.634214][ C0] get_page_from_freelist+0x3550/0x35d0 [ 145.639692][ C0] ? print_verifier_state+0x2230/0x2230 [ 145.645080][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 145.649939][ C0] ? lruvec_init+0x150/0x150 [ 145.654368][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 145.658962][ C0] ? __alloc_pages_bulk+0xe40/0xe40 [ 145.663995][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 145.668953][ C0] __alloc_pages+0x27e/0x8f0 [ 145.673377][ C0] ? prep_new_page+0x110/0x110 [ 145.677985][ C0] ? stack_trace_save+0x113/0x1c0 [ 145.682836][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 145.687790][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 145.692727][ C0] __stack_depot_save+0x38d/0x470 [ 145.697591][ C0] ? kfree+0xc8/0x220 [ 145.701519][ C0] kasan_set_track+0x5d/0x70 [ 145.706184][ C0] ? kasan_set_track+0x4b/0x70 [ 145.710776][ C0] ? kasan_set_free_info+0x23/0x40 [ 145.715897][ C0] ? ____kasan_slab_free+0x126/0x160 [ 145.721017][ C0] ? __kasan_slab_free+0x11/0x20 [ 145.725899][ C0] ? slab_free_freelist_hook+0xbd/0x190 [ 145.731277][ C0] ? kfree+0xc8/0x220 [ 145.735102][ C0] ? sock_map_unref+0x352/0x4d0 [ 145.739789][ C0] ? sock_hash_delete_elem+0x274/0x2f0 [ 145.745169][ C0] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x734 [ 145.750720][ C0] ? bpf_trace_run4+0x13f/0x270 [ 145.755407][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 145.760960][ C0] ? __traceiter_mm_page_alloc+0x3a/0x60 [ 145.766430][ C0] ? __alloc_pages+0x3cb/0x8f0 [ 145.771028][ C0] ? __get_free_pages+0x10/0x30 [ 145.775717][ C0] ? __tlb_remove_page_size+0x178/0x300 [ 145.781095][ C0] ? unmap_page_range+0x120a/0x1ca0 [ 145.786232][ C0] ? unmap_vmas+0x389/0x560 [ 145.790563][ C0] ? exit_mmap+0x3d8/0x6f0 [ 145.794817][ C0] ? __mmput+0x95/0x310 [ 145.798920][ C0] ? mmput+0x5b/0x170 [ 145.802802][ C0] ? do_exit+0xb9c/0x2ca0 [ 145.806969][ C0] ? do_group_exit+0x141/0x310 [ 145.811575][ C0] ? get_signal+0x7a3/0x1630 [ 145.816081][ C0] ? arch_do_signal_or_restart+0xbd/0x1680 [ 145.821732][ C0] ? exit_to_user_mode_loop+0xa0/0xe0 [ 145.826930][ C0] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 145.832398][ C0] ? syscall_exit_to_user_mode+0x26/0x160 [ 145.837963][ C0] ? do_syscall_64+0x49/0xb0 [ 145.842383][ C0] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 145.848380][ C0] kasan_set_free_info+0x23/0x40 [ 145.853150][ C0] ____kasan_slab_free+0x126/0x160 [ 145.858210][ C0] __kasan_slab_free+0x11/0x20 [ 145.862793][ C0] slab_free_freelist_hook+0xbd/0x190 [ 145.868118][ C0] ? sock_map_unref+0x352/0x4d0 [ 145.872765][ C0] kfree+0xc8/0x220 [ 145.876408][ C0] sock_map_unref+0x352/0x4d0 [ 145.880919][ C0] sock_hash_delete_elem+0x274/0x2f0 [ 145.886134][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x734 [ 145.891598][ C0] bpf_trace_run4+0x13f/0x270 [ 145.896106][ C0] ? bpf_trace_run3+0x250/0x250 [ 145.900795][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 145.905393][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 145.910695][ C0] __traceiter_mm_page_alloc+0x3a/0x60 [ 145.915981][ C0] __alloc_pages+0x3cb/0x8f0 [ 145.920406][ C0] ? page_remove_rmap+0xe36/0x1420 [ 145.925356][ C0] ? prep_new_page+0x110/0x110 [ 145.929963][ C0] ? page_remove_rmap+0xebe/0x1420 [ 145.934915][ C0] ? page_add_file_rmap+0x8e0/0x8e0 [ 145.939956][ C0] ? mark_page_accessed+0x56b/0xbf0 [ 145.944971][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 145.949591][ C0] __get_free_pages+0x10/0x30 [ 145.954185][ C0] __tlb_remove_page_size+0x178/0x300 [ 145.959476][ C0] unmap_page_range+0x120a/0x1ca0 [ 145.964333][ C0] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 145.970576][ C0] ? __pagevec_lru_add+0xcde/0xd70 [ 145.975532][ C0] ? uprobe_munmap+0x18d/0x450 [ 145.980120][ C0] ? lru_cache_add+0x540/0x540 [ 145.984730][ C0] unmap_vmas+0x389/0x560 [ 145.988890][ C0] ? unmap_page_range+0x1ca0/0x1ca0 [ 145.993956][ C0] ? tlb_gather_mmu_fullmm+0x165/0x210 [ 145.999401][ C0] exit_mmap+0x3d8/0x6f0 [ 146.003483][ C0] ? exit_aio+0x25e/0x3c0 [ 146.007734][ C0] ? vm_brk+0x30/0x30 [ 146.011549][ C0] ? mutex_unlock+0xb2/0x260 [ 146.015969][ C0] ? uprobe_clear_state+0x2cd/0x320 [ 146.021002][ C0] __mmput+0x95/0x310 [ 146.024819][ C0] mmput+0x5b/0x170 [ 146.028475][ C0] do_exit+0xb9c/0x2ca0 [ 146.032462][ C0] ? put_task_struct+0x80/0x80 [ 146.037144][ C0] ? __kasan_check_write+0x14/0x20 [ 146.042091][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 146.047039][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 146.052421][ C0] do_group_exit+0x141/0x310 [ 146.056850][ C0] get_signal+0x7a3/0x1630 [ 146.061190][ C0] arch_do_signal_or_restart+0xbd/0x1680 [ 146.066745][ C0] ? get_sigframe_size+0x10/0x10 [ 146.071514][ C0] ? __se_sys_futex+0x37b/0x3e0 [ 146.076201][ C0] ? fpu_flush_thread+0xf0/0xf0 [ 146.080987][ C0] exit_to_user_mode_loop+0xa0/0xe0 [ 146.086021][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 146.091313][ C0] syscall_exit_to_user_mode+0x26/0x160 [ 146.096697][ C0] do_syscall_64+0x49/0xb0 [ 146.100948][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 146.106676][ C0] RIP: 0033:0x7f8a23e5dea9 [ 146.110929][ C0] Code: Unable to access opcode bytes at RIP 0x7f8a23e5de7f. [ 146.118134][ C0] RSP: 002b:00007f8a239df178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 146.126377][ C0] RAX: fffffffffffffe00 RBX: 00007f8a23f8bf88 RCX: 00007f8a23e5dea9 [ 146.134224][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8a23f8bf88 [ 146.142011][ C0] RBP: 00007f8a23f8bf80 R08: 00007f8a239df6c0 R09: 00007f8a239df6c0 [ 146.149813][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a23f8bf8c [ 146.157915][ C0] R13: 000000000000000b R14: 00007fff21bef980 R15: 00007fff21befa68 [ 146.165720][ C0] [ 146.168591][ C0] Sending NMI from CPU 0 to CPUs 1: [ 146.173645][ C1] NMI backtrace for cpu 1 [ 146.173658][ C1] CPU: 1 PID: 443 Comm: syz-executor.4 Not tainted 5.15.149-syzkaller-1069109-g5d96939590c0 #0 [ 146.173678][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 146.173689][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x5ba/0xc40 [ 146.173722][ C1] Code: 00 00 49 89 dc c6 03 00 48 8b 44 24 10 0f b6 04 10 84 c0 0f 85 48 01 00 00 48 8b 44 24 08 c6 00 01 bb 00 80 ff ff eb 06 f3 90 c3 74 5e 41 0f b6 44 15 00 84 c0 75 36 41 80 3f 00 75 ea 4c 89 [ 146.173736][ C1] RSP: 0018:ffffc90000b56fe0 EFLAGS: 00000206 [ 146.173752][ C1] RAX: 0000000000000000 RBX: 00000000fffff1dc RCX: ffffffff8154fa7f [ 146.173764][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88810eb3c798 [ 146.173776][ C1] RBP: ffffc90000b570d0 R08: dffffc0000000000 R09: ffffed1021d678f4 [ 146.173789][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f7137ed4 [ 146.173800][ C1] R13: 1ffff11021d678f3 R14: 1ffff1103ee20001 R15: ffff88810eb3c798 [ 146.173813][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 146.173827][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 146.173839][ C1] CR2: 0000000000000000 CR3: 000000000620f000 CR4: 00000000003506a0 [ 146.173854][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 146.173863][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 146.173873][ C1] Call Trace: [ 146.173879][ C1] [ 146.173886][ C1] ? show_regs+0x58/0x60 [ 146.173905][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 146.173926][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 146.173947][ C1] ? __pv_queued_spin_lock_slowpath+0x5ba/0xc40 [ 146.173966][ C1] ? __pv_queued_spin_lock_slowpath+0x5ba/0xc40 [ 146.173985][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 146.174003][ C1] ? nmi_handle+0xa8/0x280 [ 146.174020][ C1] ? __pv_queued_spin_lock_slowpath+0x5ba/0xc40 [ 146.174039][ C1] ? default_do_nmi+0x69/0x160 [ 146.174057][ C1] ? exc_nmi+0xaf/0x120 [ 146.174072][ C1] ? end_repeat_nmi+0x16/0x31 [ 146.174090][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 146.174110][ C1] ? __pv_queued_spin_lock_slowpath+0x5ba/0xc40 [ 146.174129][ C1] ? __pv_queued_spin_lock_slowpath+0x5ba/0xc40 [ 146.174148][ C1] ? __pv_queued_spin_lock_slowpath+0x5ba/0xc40 [ 146.174167][ C1] [ 146.174172][ C1] [ 146.174176][ C1] ? post_alloc_hook+0x1a3/0x1b0 [ 146.174196][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 146.174214][ C1] ? get_page_from_freelist+0x3550/0x35d0 [ 146.174232][ C1] ? __reset_page_owner+0x190/0x190 [ 146.174248][ C1] ? free_unref_page_list+0x14b/0xa60 [ 146.174266][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 146.174284][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 146.174303][ C1] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 146.174323][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 146.174341][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x734 [ 146.174355][ C1] bpf_trace_run4+0x13f/0x270 [ 146.174374][ C1] ? bpf_trace_run3+0x250/0x250 [ 146.174393][ C1] ? __alloc_pages+0x8f0/0x8f0 [ 146.174410][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 146.174429][ C1] __traceiter_mm_page_alloc+0x3a/0x60 [ 146.174445][ C1] __alloc_pages+0x3cb/0x8f0 [ 146.174461][ C1] ? page_remove_rmap+0xe36/0x1420 [ 146.174477][ C1] ? prep_new_page+0x110/0x110 [ 146.174493][ C1] ? page_remove_rmap+0xebe/0x1420 [ 146.174511][ C1] ? page_add_file_rmap+0x8e0/0x8e0 [ 146.174525][ C1] ? mark_page_accessed+0x56b/0xbf0 [ 146.174542][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 146.174561][ C1] __get_free_pages+0x10/0x30 [ 146.174577][ C1] __tlb_remove_page_size+0x178/0x300 [ 146.174597][ C1] unmap_page_range+0x120a/0x1ca0 [ 146.174619][ C1] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 146.174635][ C1] ? __pagevec_lru_add+0xcde/0xd70 [ 146.174653][ C1] ? uprobe_munmap+0x18d/0x450 [ 146.174672][ C1] ? lru_cache_add+0x540/0x540 [ 146.174688][ C1] unmap_vmas+0x389/0x560 [ 146.174704][ C1] ? unmap_page_range+0x1ca0/0x1ca0 [ 146.174728][ C1] ? tlb_gather_mmu_fullmm+0x165/0x210 [ 146.174748][ C1] exit_mmap+0x3d8/0x6f0 [ 146.174765][ C1] ? exit_aio+0x25e/0x3c0 [ 146.174779][ C1] ? vm_brk+0x30/0x30 [ 146.174795][ C1] ? mutex_unlock+0xb2/0x260 [ 146.174813][ C1] ? uprobe_clear_state+0x2cd/0x320 [ 146.174833][ C1] __mmput+0x95/0x310 [ 146.174852][ C1] mmput+0x5b/0x170 [ 146.174868][ C1] do_exit+0xb9c/0x2ca0 [ 146.174886][ C1] ? put_task_struct+0x80/0x80 [ 146.174904][ C1] ? __kasan_check_write+0x14/0x20 [ 146.174921][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 146.174939][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 146.174958][ C1] do_group_exit+0x141/0x310 [ 146.174975][ C1] get_signal+0x7a3/0x1630 [ 146.174995][ C1] arch_do_signal_or_restart+0xbd/0x1680 [ 146.175017][ C1] ? get_sigframe_size+0x10/0x10 [ 146.175033][ C1] ? __se_sys_futex+0x37b/0x3e0 [ 146.175053][ C1] ? fpu_flush_thread+0xf0/0xf0 [ 146.175072][ C1] exit_to_user_mode_loop+0xa0/0xe0 [ 146.175089][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 146.175106][ C1] syscall_exit_to_user_mode+0x26/0x160 [ 146.175124][ C1] do_syscall_64+0x49/0xb0 [ 146.175140][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 146.175160][ C1] RIP: 0033:0x7f3f63418ea9 [ 146.175171][ C1] Code: Unable to access opcode bytes at RIP 0x7f3f63418e7f. [ 146.175179][ C1] RSP: 002b:00007f3f62f9a178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 146.175196][ C1] RAX: fffffffffffffe00 RBX: 00007f3f63546f88 RCX: 00007f3f63418ea9 [ 146.175208][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3f63546f88 [ 146.175219][ C1] RBP: 00007f3f63546f80 R08: 00007f3f62f9a6c0 R09: 00007f3f62f9a6c0 [ 146.175231][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3f63546f8c [ 146.175241][ C1] R13: 000000000000000b R14: 00007fff2be42940 R15: 00007fff2be42a28 [ 146.175256][ C1] [ 287.101410][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [syz-executor.1:436] [ 287.109808][ C0] Modules linked in: [ 287.113818][ C0] CPU: 0 PID: 436 Comm: syz-executor.1 Not tainted 5.15.149-syzkaller-1069109-g5d96939590c0 #0 [ 287.124708][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 287.134865][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 287.140265][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 287.161218][ C0] RSP: 0018:ffffc90000b460e0 EFLAGS: 00000246 [ 287.167271][ C0] RAX: 0000000000000001 RBX: 1ffff92000168c20 RCX: 1ffffffff0c5aa9c [ 287.175251][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7037ed4 [ 287.183811][ C0] RBP: ffffc90000b46190 R08: dffffc0000000000 R09: ffffed103ee06fdb [ 287.191987][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 287.199732][ C0] R13: ffff8881f7037ed4 R14: 0000000000000001 R15: 1ffff92000168c24 [ 287.207719][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 287.216828][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.223514][ C0] CR2: 00007f3f63548988 CR3: 000000000620f000 CR4: 00000000003506b0 [ 287.231624][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.239509][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.247318][ C0] Call Trace: [ 287.250456][ C0] [ 287.253273][ C0] ? show_regs+0x58/0x60 [ 287.257440][ C0] ? watchdog_timer_fn+0x4b1/0x5f0 [ 287.262461][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 287.267606][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 287.272929][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 287.277966][ C0] ? clockevents_program_event+0x22f/0x300 [ 287.283672][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 287.289749][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 287.294964][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 287.300865][ C0] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 287.306509][ C0] [ 287.309530][ C0] [ 287.312342][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 287.318464][ C0] ? kvm_wait+0x147/0x180 [ 287.322903][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 287.329083][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 287.334019][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 287.340183][ C0] ? post_alloc_hook+0x1a3/0x1b0 [ 287.345040][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 287.351705][ C0] ? get_page_from_freelist+0x3550/0x35d0 [ 287.357325][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 287.362542][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 287.367650][ C0] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 287.372991][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 287.378055][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x734 [ 287.383581][ C0] bpf_trace_run4+0x13f/0x270 [ 287.388085][ C0] ? bpf_trace_run3+0x250/0x250 [ 287.392769][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 287.397466][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 287.402757][ C0] __traceiter_mm_page_alloc+0x3a/0x60 [ 287.408283][ C0] __alloc_pages+0x3cb/0x8f0 [ 287.412684][ C0] ? prep_new_page+0x110/0x110 [ 287.417275][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 287.422749][ C0] ? stack_trace_save+0x113/0x1c0 [ 287.428005][ C0] __stack_depot_save+0x38d/0x470 [ 287.433458][ C0] stack_depot_save+0xe/0x10 [ 287.437876][ C0] save_stack+0x104/0x1e0 [ 287.442055][ C0] ? __reset_page_owner+0x190/0x190 [ 287.447071][ C0] ? post_alloc_hook+0x1a3/0x1b0 [ 287.451853][ C0] ? prep_new_page+0x1b/0x110 [ 287.456477][ C0] ? get_page_from_freelist+0x3550/0x35d0 [ 287.462218][ C0] ? __alloc_pages+0x27e/0x8f0 [ 287.466810][ C0] ? __stack_depot_save+0x38d/0x470 [ 287.471851][ C0] ? kasan_set_track+0x5d/0x70 [ 287.476527][ C0] ? kasan_set_free_info+0x23/0x40 [ 287.481477][ C0] ? ____kasan_slab_free+0x126/0x160 [ 287.486606][ C0] ? __kasan_slab_free+0x11/0x20 [ 287.491380][ C0] ? slab_free_freelist_hook+0xbd/0x190 [ 287.496841][ C0] ? kfree+0xc8/0x220 [ 287.500774][ C0] ? sock_map_unref+0x352/0x4d0 [ 287.505644][ C0] ? sock_hash_delete_elem+0x274/0x2f0 [ 287.510959][ C0] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x734 [ 287.516573][ C0] ? bpf_trace_run4+0x13f/0x270 [ 287.521282][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 287.526736][ C0] __set_page_owner+0x28/0x2e0 [ 287.531325][ C0] ? kernel_init_free_pages+0xda/0xf0 [ 287.536539][ C0] post_alloc_hook+0x1a3/0x1b0 [ 287.541138][ C0] prep_new_page+0x1b/0x110 [ 287.545476][ C0] get_page_from_freelist+0x3550/0x35d0 [ 287.550945][ C0] ? print_verifier_state+0x2230/0x2230 [ 287.556322][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 287.561279][ C0] ? lruvec_init+0x150/0x150 [ 287.565704][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 287.570312][ C0] ? __alloc_pages_bulk+0xe40/0xe40 [ 287.575332][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 287.580223][ C0] __alloc_pages+0x27e/0x8f0 [ 287.584618][ C0] ? prep_new_page+0x110/0x110 [ 287.589217][ C0] ? stack_trace_save+0x113/0x1c0 [ 287.594072][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 287.599051][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 287.603969][ C0] __stack_depot_save+0x38d/0x470 [ 287.608829][ C0] ? kfree+0xc8/0x220 [ 287.612811][ C0] kasan_set_track+0x5d/0x70 [ 287.617250][ C0] ? kasan_set_track+0x4b/0x70 [ 287.621927][ C0] ? kasan_set_free_info+0x23/0x40 [ 287.626990][ C0] ? ____kasan_slab_free+0x126/0x160 [ 287.632082][ C0] ? __kasan_slab_free+0x11/0x20 [ 287.636939][ C0] ? slab_free_freelist_hook+0xbd/0x190 [ 287.642328][ C0] ? kfree+0xc8/0x220 [ 287.646138][ C0] ? sock_map_unref+0x352/0x4d0 [ 287.650827][ C0] ? sock_hash_delete_elem+0x274/0x2f0 [ 287.656133][ C0] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x734 [ 287.661683][ C0] ? bpf_trace_run4+0x13f/0x270 [ 287.666361][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 287.671829][ C0] ? __traceiter_mm_page_alloc+0x3a/0x60 [ 287.677314][ C0] ? __alloc_pages+0x3cb/0x8f0 [ 287.681901][ C0] ? __get_free_pages+0x10/0x30 [ 287.686615][ C0] ? __tlb_remove_page_size+0x178/0x300 [ 287.691967][ C0] ? unmap_page_range+0x120a/0x1ca0 [ 287.697085][ C0] ? unmap_vmas+0x389/0x560 [ 287.701429][ C0] ? exit_mmap+0x3d8/0x6f0 [ 287.705776][ C0] ? __mmput+0x95/0x310 [ 287.709758][ C0] ? mmput+0x5b/0x170 [ 287.713579][ C0] ? do_exit+0xb9c/0x2ca0 [ 287.717756][ C0] ? do_group_exit+0x141/0x310 [ 287.722345][ C0] ? get_signal+0x7a3/0x1630 [ 287.726800][ C0] ? arch_do_signal_or_restart+0xbd/0x1680 [ 287.732502][ C0] ? exit_to_user_mode_loop+0xa0/0xe0 [ 287.737791][ C0] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 287.743261][ C0] ? syscall_exit_to_user_mode+0x26/0x160 [ 287.748988][ C0] ? do_syscall_64+0x49/0xb0 [ 287.753417][ C0] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 287.759325][ C0] kasan_set_free_info+0x23/0x40 [ 287.764093][ C0] ____kasan_slab_free+0x126/0x160 [ 287.769039][ C0] __kasan_slab_free+0x11/0x20 [ 287.773649][ C0] slab_free_freelist_hook+0xbd/0x190 [ 287.779019][ C0] ? sock_map_unref+0x352/0x4d0 [ 287.783712][ C0] kfree+0xc8/0x220 [ 287.787357][ C0] sock_map_unref+0x352/0x4d0 [ 287.791957][ C0] sock_hash_delete_elem+0x274/0x2f0 [ 287.797077][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x734 [ 287.802461][ C0] bpf_trace_run4+0x13f/0x270 [ 287.806977][ C0] ? bpf_trace_run3+0x250/0x250 [ 287.811862][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 287.816468][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 287.821761][ C0] __traceiter_mm_page_alloc+0x3a/0x60 [ 287.827044][ C0] __alloc_pages+0x3cb/0x8f0 [ 287.831473][ C0] ? page_remove_rmap+0xe36/0x1420 [ 287.836428][ C0] ? prep_new_page+0x110/0x110 [ 287.841015][ C0] ? page_remove_rmap+0xebe/0x1420 [ 287.845974][ C0] ? page_add_file_rmap+0x8e0/0x8e0 [ 287.851085][ C0] ? mark_page_accessed+0x56b/0xbf0 [ 287.856119][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 287.860719][ C0] __get_free_pages+0x10/0x30 [ 287.865319][ C0] __tlb_remove_page_size+0x178/0x300 [ 287.870537][ C0] unmap_page_range+0x120a/0x1ca0 [ 287.875394][ C0] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 287.881803][ C0] ? __pagevec_lru_add+0xcde/0xd70 [ 287.886745][ C0] ? uprobe_munmap+0x18d/0x450 [ 287.891342][ C0] ? lru_cache_add+0x540/0x540 [ 287.895942][ C0] unmap_vmas+0x389/0x560 [ 287.900109][ C0] ? unmap_page_range+0x1ca0/0x1ca0 [ 287.905153][ C0] ? tlb_gather_mmu_fullmm+0x165/0x210 [ 287.910435][ C0] exit_mmap+0x3d8/0x6f0 [ 287.914516][ C0] ? exit_aio+0x25e/0x3c0 [ 287.918682][ C0] ? vm_brk+0x30/0x30 [ 287.922677][ C0] ? mutex_unlock+0xb2/0x260 [ 287.927121][ C0] ? uprobe_clear_state+0x2cd/0x320 [ 287.932158][ C0] __mmput+0x95/0x310 [ 287.935996][ C0] mmput+0x5b/0x170 [ 287.939628][ C0] do_exit+0xb9c/0x2ca0 [ 287.943684][ C0] ? put_task_struct+0x80/0x80 [ 287.948306][ C0] ? __kasan_check_write+0x14/0x20 [ 287.953255][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 287.958454][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 287.963827][ C0] do_group_exit+0x141/0x310 [ 287.968255][ C0] get_signal+0x7a3/0x1630 [ 287.972601][ C0] arch_do_signal_or_restart+0xbd/0x1680 [ 287.978149][ C0] ? get_sigframe_size+0x10/0x10 [ 287.982913][ C0] ? __se_sys_futex+0x37b/0x3e0 [ 287.987601][ C0] ? fpu_flush_thread+0xf0/0xf0 [ 287.992494][ C0] exit_to_user_mode_loop+0xa0/0xe0 [ 287.997744][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 288.003216][ C0] syscall_exit_to_user_mode+0x26/0x160 [ 288.008787][ C0] do_syscall_64+0x49/0xb0 [ 288.013039][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 288.018765][ C0] RIP: 0033:0x7f8a23e5dea9 [ 288.023033][ C0] Code: Unable to access opcode bytes at RIP 0x7f8a23e5de7f. [ 288.030494][ C0] RSP: 002b:00007f8a239df178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 288.038736][ C0] RAX: fffffffffffffe00 RBX: 00007f8a23f8bf88 RCX: 00007f8a23e5dea9 [ 288.046547][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8a23f8bf88 [ 288.054404][ C0] RBP: 00007f8a23f8bf80 R08: 00007f8a239df6c0 R09: 00007f8a239df6c0 [ 288.062180][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a23f8bf8c [ 288.069982][ C0] R13: 000000000000000b R14: 00007fff21bef980 R15: 00007fff21befa68 [ 288.077797][ C0] [ 288.080761][ C0] Sending NMI from CPU 0 to CPUs 1: [ 288.085826][ C1] NMI backtrace for cpu 1 [ 288.085841][ C1] CPU: 1 PID: 443 Comm: syz-executor.4 Not tainted 5.15.149-syzkaller-1069109-g5d96939590c0 #0 [ 288.085860][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 288.085869][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 288.085891][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 288.085904][ C1] RSP: 0018:ffffc90000b56f20 EFLAGS: 00000246 [ 288.085919][ C1] RAX: 0000000000000003 RBX: 1ffff9200016ade8 RCX: ffffffff8154fa7f [ 288.085931][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88810eb3c798 [ 288.085943][ C1] RBP: ffffc90000b56fd0 R08: dffffc0000000000 R09: ffffed1021d678f4 [ 288.085955][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 288.085967][ C1] R13: ffff88810eb3c798 R14: 0000000000000003 R15: 1ffff9200016adec [ 288.085979][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 288.085993][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.086005][ C1] CR2: 0000000000000000 CR3: 000000000620f000 CR4: 00000000003506a0 [ 288.086019][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.086028][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 288.086039][ C1] Call Trace: [ 288.086045][ C1] [ 288.086051][ C1] ? show_regs+0x58/0x60 [ 288.086069][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 288.086090][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 288.086110][ C1] ? kvm_wait+0x147/0x180 [ 288.086124][ C1] ? kvm_wait+0x147/0x180 [ 288.086139][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 288.086158][ C1] ? nmi_handle+0xa8/0x280 [ 288.086175][ C1] ? kvm_wait+0x147/0x180 [ 288.086189][ C1] ? __pv_queued_spin_lock_slowpath+0x5ba/0xc40 [ 288.086211][ C1] ? default_do_nmi+0x69/0x160 [ 288.086229][ C1] ? exc_nmi+0xaf/0x120 [ 288.086245][ C1] ? end_repeat_nmi+0x16/0x31 [ 288.086262][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 288.086282][ C1] ? kvm_wait+0x147/0x180 [ 288.086296][ C1] ? kvm_wait+0x147/0x180 [ 288.086312][ C1] ? kvm_wait+0x147/0x180 [ 288.086326][ C1] [ 288.086331][ C1] [ 288.086336][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 288.086353][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 288.086369][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 288.086389][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 288.086408][ C1] ? post_alloc_hook+0x1a3/0x1b0 [ 288.086428][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 288.086447][ C1] ? get_page_from_freelist+0x3550/0x35d0 [ 288.086470][ C1] ? __reset_page_owner+0x190/0x190 [ 288.086495][ C1] ? free_unref_page_list+0x14b/0xa60 [ 288.086514][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 288.086532][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 288.086551][ C1] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 288.086571][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 288.086590][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x734 [ 288.086604][ C1] bpf_trace_run4+0x13f/0x270 [ 288.086623][ C1] ? bpf_trace_run3+0x250/0x250 [ 288.086642][ C1] ? __alloc_pages+0x8f0/0x8f0 [ 288.086659][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 288.086677][ C1] __traceiter_mm_page_alloc+0x3a/0x60 [ 288.086693][ C1] __alloc_pages+0x3cb/0x8f0 [ 288.086709][ C1] ? page_remove_rmap+0xe36/0x1420 [ 288.086725][ C1] ? prep_new_page+0x110/0x110 [ 288.086741][ C1] ? page_remove_rmap+0xebe/0x1420 [ 288.086758][ C1] ? page_add_file_rmap+0x8e0/0x8e0 [ 288.086773][ C1] ? mark_page_accessed+0x56b/0xbf0 [ 288.086789][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 288.086807][ C1] __get_free_pages+0x10/0x30 [ 288.086823][ C1] __tlb_remove_page_size+0x178/0x300 [ 288.086843][ C1] unmap_page_range+0x120a/0x1ca0 [ 288.086865][ C1] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 288.086882][ C1] ? __pagevec_lru_add+0xcde/0xd70 [ 288.086898][ C1] ? uprobe_munmap+0x18d/0x450 [ 288.086917][ C1] ? lru_cache_add+0x540/0x540 [ 288.086933][ C1] unmap_vmas+0x389/0x560 [ 288.086948][ C1] ? unmap_page_range+0x1ca0/0x1ca0 [ 288.086966][ C1] ? tlb_gather_mmu_fullmm+0x165/0x210 [ 288.086985][ C1] exit_mmap+0x3d8/0x6f0 [ 288.087002][ C1] ? exit_aio+0x25e/0x3c0 [ 288.087016][ C1] ? vm_brk+0x30/0x30 [ 288.087032][ C1] ? mutex_unlock+0xb2/0x260 [ 288.087050][ C1] ? uprobe_clear_state+0x2cd/0x320 [ 288.087070][ C1] __mmput+0x95/0x310 [ 288.087088][ C1] mmput+0x5b/0x170 [ 288.087104][ C1] do_exit+0xb9c/0x2ca0 [ 288.087122][ C1] ? put_task_struct+0x80/0x80 [ 288.087140][ C1] ? __kasan_check_write+0x14/0x20 [ 288.087156][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 288.087174][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 288.087192][ C1] do_group_exit+0x141/0x310 [ 288.087210][ C1] get_signal+0x7a3/0x1630 [ 288.087230][ C1] arch_do_signal_or_restart+0xbd/0x1680 [ 288.087252][ C1] ? get_sigframe_size+0x10/0x10 [ 288.087269][ C1] ? __se_sys_futex+0x37b/0x3e0 [ 288.087289][ C1] ? fpu_flush_thread+0xf0/0xf0 [ 288.087308][ C1] exit_to_user_mode_loop+0xa0/0xe0 [ 288.087324][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 288.087341][ C1] syscall_exit_to_user_mode+0x26/0x160 [ 288.087372][ C1] do_syscall_64+0x49/0xb0 [ 288.087387][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 288.087406][ C1] RIP: 0033:0x7f3f63418ea9 [ 288.087418][ C1] Code: Unable to access opcode bytes at RIP 0x7f3f63418e7f. [ 288.087426][ C1] RSP: 002b:00007f3f62f9a178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 288.087442][ C1] RAX: fffffffffffffe00 RBX: 00007f3f63546f88 RCX: 00007f3f63418ea9 [ 288.087454][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3f63546f88 [ 288.087464][ C1] RBP: 00007f3f63546f80 R08: 00007f3f62f9a6c0 R09: 00007f3f62f9a6c0 [ 288.087476][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3f63546f8c [ 288.087496][ C1] R13: 000000000000000b R14: 00007fff2be42940 R15: 00007fff2be42a28 [ 288.087511][ C1]