Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts. 2025/04/16 17:39:46 ignoring optional flag "sandboxArg"="0" 2025/04/16 17:39:47 parsed 1 programs [ 105.970071][ T4560] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 107.493404][ T4576] chnl_net:caif_netlink_parms(): no params data found [ 107.541629][ T4576] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.548931][ T4576] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.557001][ T4576] device bridge_slave_0 entered promiscuous mode [ 107.566224][ T4576] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.573363][ T4576] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.581467][ T4576] device bridge_slave_1 entered promiscuous mode [ 107.606840][ T4576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.618668][ T4576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.648238][ T4576] team0: Port device team_slave_0 added [ 107.656646][ T4576] team0: Port device team_slave_1 added [ 107.678882][ T4576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.686044][ T4576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.712633][ T4576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.725670][ T4576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.732767][ T4576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.759527][ T4576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.792269][ T4576] device hsr_slave_0 entered promiscuous mode [ 107.799255][ T4576] device hsr_slave_1 entered promiscuous mode [ 108.394524][ T4576] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.404175][ T4576] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.417752][ T4576] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.446129][ T4576] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.480971][ T4576] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.488131][ T4576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.495824][ T4576] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.502909][ T4576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.539397][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.555999][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.675541][ T4576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.699064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.715104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.736228][ T4576] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.757749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.771682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.786637][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.794044][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.817145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.828223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.838800][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.845940][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.861765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.876475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.885495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.897245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.918198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.926872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.940141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.965265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.974858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.995042][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.003701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.028714][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.212379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.221771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.239887][ T4576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.287021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.296833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.329005][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.339018][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.352634][ T4576] device veth0_vlan entered promiscuous mode [ 109.359995][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.369878][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.383708][ T4576] device veth1_vlan entered promiscuous mode [ 109.407900][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.426823][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.447052][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.466961][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.488378][ T4576] device veth0_macvtap entered promiscuous mode [ 109.507504][ T4576] device veth1_macvtap entered promiscuous mode [ 109.543307][ T4576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.553022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.561896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.570844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.580973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.593654][ T4576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.605295][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.614100][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.626118][ T4576] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.635875][ T4576] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.645364][ T4576] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.654091][ T4576] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.085184][ T450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.093211][ T450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.129717][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.166991][ T3078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.182117][ T3078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.192837][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 112.457203][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/04/16 17:39:58 executed programs: 0 [ 113.406489][ T4802] chnl_net:caif_netlink_parms(): no params data found [ 113.472405][ T4802] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.480092][ T4802] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.491835][ T4802] device bridge_slave_0 entered promiscuous mode [ 113.500849][ T4802] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.510854][ T4802] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.519694][ T4802] device bridge_slave_1 entered promiscuous mode [ 113.554771][ T4802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.570430][ T4802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.598705][ T4802] team0: Port device team_slave_0 added [ 113.609349][ T4802] team0: Port device team_slave_1 added [ 113.639186][ T4802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.649047][ T4802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.675200][ T4802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.688134][ T4802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.695510][ T4802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.722007][ T4802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.767053][ T4802] device hsr_slave_0 entered promiscuous mode [ 113.774124][ T4802] device hsr_slave_1 entered promiscuous mode [ 113.782666][ T4802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.801948][ T4802] Cannot create hsr debugfs directory [ 115.226434][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.292601][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.314522][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 115.364364][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.190445][ T4802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.199616][ T4802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.209618][ T4802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.219242][ T4802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.296072][ T4802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.331334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.339452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.351769][ T4802] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.364502][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.373376][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.382561][ T3078] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.389786][ T3078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.402718][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.413778][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.422548][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.433159][ T3078] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.440280][ T3078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.449455][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.478439][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.490941][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.500447][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.509303][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.521956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.531796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.543697][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.552458][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.563633][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.572471][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.605965][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.726872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.735849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.765888][ T4802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.783247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.792404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.820915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.830356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.839965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.848219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.858391][ T4802] device veth0_vlan entered promiscuous mode [ 116.875928][ T4802] device veth1_vlan entered promiscuous mode [ 116.908804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.917469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.925783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.936348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.947326][ T4802] device veth0_macvtap entered promiscuous mode [ 116.959751][ T4802] device veth1_macvtap entered promiscuous mode [ 116.983226][ T9] device hsr_slave_0 left promiscuous mode [ 116.990882][ T9] device hsr_slave_1 left promiscuous mode [ 116.999625][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.007959][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.016325][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.023750][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.031615][ T9] device bridge_slave_1 left promiscuous mode [ 117.038088][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.047537][ T9] device bridge_slave_0 left promiscuous mode [ 117.053907][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.066124][ T9] device veth1_macvtap left promiscuous mode [ 117.072177][ T9] device veth0_macvtap left promiscuous mode [ 117.079513][ T9] device veth1_vlan left promiscuous mode [ 117.085676][ T9] device veth0_vlan left promiscuous mode [ 117.249157][ T9] team0 (unregistering): Port device team_slave_1 removed [ 117.262959][ T9] team0 (unregistering): Port device team_slave_0 removed [ 117.276600][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.290596][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.351357][ T9] bond0 (unregistering): Released all slaves [ 117.394740][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 117.417511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.425870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.435625][ T4802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.442935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.452482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.467755][ T4802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.476386][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.486062][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.501438][ T4802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.510526][ T4802] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.519533][ T4802] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.528837][ T4802] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.597688][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.613158][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.629645][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.651625][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.659965][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.683415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/04/16 17:40:03 executed programs: 9 [ 119.464932][ T4172] Bluetooth: hci0: command 0x040f tx timeout [ 121.544961][ T4172] Bluetooth: hci0: command 0x0419 tx timeout [ 134.416147][ T5015] chnl_net:caif_netlink_parms(): no params data found [ 136.264347][ T4226] Bluetooth: hci1: command 0x0409 tx timeout [ 138.344359][ T4226] Bluetooth: hci1: command 0x041b tx timeout [ 140.424423][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 142.504469][ T4226] Bluetooth: hci1: command 0x0419 tx timeout [ 196.424314][ T4172] Bluetooth: hci2: command 0x0409 tx timeout [ 198.504291][ T4172] Bluetooth: hci2: command 0x041b tx timeout [ 200.584286][ T4172] Bluetooth: hci2: command 0x040f tx timeout [ 202.664281][ T4172] Bluetooth: hci2: command 0x0419 tx timeout [ 224.264190][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 224.271225][ C1] rcu: 0-...!: (0 ticks this GP) idle=603/1/0x4000000000000002 softirq=10276/10276 fqs=0 [ 224.282058][ C1] (detected by 1, t=10502 jiffies, g=11881, q=559) [ 224.288774][ C1] Sending NMI from CPU 1 to CPUs 0: [ 224.294015][ C0] NMI backtrace for cpu 0 [ 224.294038][ C0] CPU: 0 PID: 5012 Comm: syz.0.27 Not tainted 5.15.180-syzkaller #0 [ 224.294055][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.294064][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x32/0x60 [ 224.294100][ C0] Code: d4 d1 81 7e 65 8b 15 d5 d1 81 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 34 16 00 00 00 74 2c 8b 91 10 16 00 00 <83> fa 02 75 21 48 8b 91 18 16 00 00 48 8b 32 48 8d 7e 01 8b 89 14 [ 224.294113][ C0] RSP: 0018:ffffc90002cfee08 EFLAGS: 00000046 [ 224.294128][ C0] RAX: ffffffff81a15a92 RBX: 0000000000000000 RCX: ffff88801ed9d940 [ 224.294139][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.294148][ C0] RBP: dffffc0000000000 R08: ffffffff81a15a82 R09: fffffbfff2132019 [ 224.294160][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 224.294170][ C0] R13: ffff88802c054d98 R14: ffffc90002cff1c0 R15: ffffc90002cff006 [ 224.294183][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 224.294196][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.294206][ C0] CR2: 0000000000000004 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 224.294219][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 224.294229][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 224.294238][ C0] Call Trace: [ 224.294244][ C0] [ 224.294250][ C0] __perf_event_header__init_id+0x392/0x510 [ 224.294277][ C0] ? kvm_is_in_guest+0x24/0x30 [ 224.294298][ C0] perf_prepare_sample+0x165/0x1d00 [ 224.294317][ C0] ? rcu_lock_release+0x9/0x20 [ 224.294335][ C0] ? perf_callchain+0x190/0x190 [ 224.294357][ C0] perf_event_output_forward+0x199/0x310 [ 224.294378][ C0] ? perf_get_page_size+0x570/0x570 [ 224.294398][ C0] ? perf_event_output_forward+0x29e/0x310 [ 224.294419][ C0] ? __perf_event_account_interrupt+0x17e/0x2a0 [ 224.294441][ C0] __perf_event_overflow+0x35d/0x530 [ 224.294463][ C0] perf_swevent_event+0x4c5/0x550 [ 224.294485][ C0] perf_tp_event+0x363/0xc40 [ 224.294505][ C0] ? perf_trace_run_bpf_submit+0x1d0/0x1d0 [ 224.294525][ C0] ? perf_tp_event+0xaf7/0xc40 [ 224.294559][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 224.294578][ C0] perf_trace_run_bpf_submit+0xf7/0x1d0 [ 224.294600][ C0] perf_trace_preemptirq_template+0x31d/0x430 [ 224.294623][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 224.294641][ C0] ? trace_event_raw_event_preemptirq_template+0x270/0x270 [ 224.294667][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 224.294685][ C0] ? print_irqtrace_events+0x210/0x210 [ 224.294702][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 224.294719][ C0] trace_irq_enable_rcuidle+0x10e/0x190 [ 224.294738][ C0] trace_hardirqs_on+0x57/0x80 [ 224.294756][ C0] asm_sysvec_irq_work+0x16/0x20 [ 224.294772][ C0] RIP: 0010:rcu_read_unlock_special+0x84/0x520 [ 224.294791][ C0] Code: f1 f1 f1 00 f2 f2 f2 49 89 04 17 66 41 c7 44 17 09 f3 f3 41 c6 44 17 0b f3 65 44 8b 25 6d 6d 96 7e 41 f7 c4 00 00 f0 00 74 45 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 3a 00 00 00 00 66 42 c7 44 3a [ 224.294803][ C0] RSP: 0018:ffffc90002cff600 EFLAGS: 00000206 [ 224.294815][ C0] RAX: dcf03da69e311200 RBX: 1ffff9200059fec8 RCX: ffffffff816352a8 [ 224.294827][ C0] RDX: dffffc0000000000 RSI: ffffffff8aab2b60 RDI: ffffffff8af9fc80 [ 224.294839][ C0] RBP: ffffc90002cff6d8 R08: dffffc0000000000 R09: fffffbfff2132019 [ 224.294850][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8cb23500 [ 224.294861][ C0] R13: ffff88801ed9dd98 R14: ffffc90002cff640 R15: 1ffff9200059fec4 [ 224.294877][ C0] ? mark_lock+0x98/0x340 [ 224.294896][ C0] ? __rcu_read_unlock+0x100/0x100 [ 224.294914][ C0] ? mem_cgroup_print_oom_group+0x70/0x70 [ 224.294934][ C0] ? rcu_lock_acquire+0x30/0x30 [ 224.294950][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 224.294967][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 224.294985][ C0] __rcu_read_unlock+0x92/0x100 [ 224.295003][ C0] __unlock_page_memcg+0xfd/0x110 [ 224.295022][ C0] unmap_page_range+0xffa/0x2630 [ 224.295055][ C0] ? mmu_notifier_invalidate_range_end+0xf0/0xf0 [ 224.295073][ C0] ? __pagevec_lru_add+0x1584/0x18d0 [ 224.295091][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 224.295105][ C0] ? uprobe_munmap+0x17a/0x400 [ 224.295126][ C0] ? unmap_single_vma+0x1a1/0x2d0 [ 224.295146][ C0] unmap_vmas+0x1f8/0x390 [ 224.295166][ C0] ? unmap_page_range+0x2630/0x2630 [ 224.295188][ C0] ? tlb_gather_mmu_fullmm+0x159/0x200 [ 224.295207][ C0] exit_mmap+0x3b6/0x620 [ 224.295225][ C0] ? vm_brk+0x20/0x20 [ 224.295247][ C0] ? uprobe_clear_state+0x304/0x460 [ 224.295268][ C0] __mmput+0x112/0x3b0 [ 224.295285][ C0] exit_mm+0x688/0x7f0 [ 224.295302][ C0] ? _raw_spin_unlock+0x40/0x40 [ 224.295320][ C0] ? do_exit+0x2480/0x2480 [ 224.295339][ C0] ? taskstats_exit+0x491/0xa10 [ 224.295355][ C0] ? tty_audit_exit+0x150/0x1f0 [ 224.295375][ C0] do_exit+0x626/0x2480 [ 224.295391][ C0] ? preempt_schedule+0xd9/0xe0 [ 224.295408][ C0] ? preempt_schedule_common+0xa6/0xd0 [ 224.295426][ C0] ? preempt_schedule+0xd9/0xe0 [ 224.295443][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 224.295459][ C0] ? put_task_struct+0x80/0x80 [ 224.295478][ C0] ? print_irqtrace_events+0x210/0x210 [ 224.295492][ C0] ? _raw_spin_lock_irq+0xdb/0x110 [ 224.295509][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 224.295529][ C0] ? trace_irq_enable_rcuidle+0x158/0x190 [ 224.295550][ C0] do_group_exit+0x144/0x310 [ 224.295567][ C0] __x64_sys_exit_group+0x3b/0x40 [ 224.295581][ C0] do_syscall_64+0x3b/0xb0 [ 224.295599][ C0] ? clear_bhb_loop+0x15/0x70 [ 224.295615][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 224.295632][ C0] RIP: 0033:0x7f65e8e36d29 [ 224.295644][ C0] Code: Unable to access opcode bytes at RIP 0x7f65e8e36cff. [ 224.295651][ C0] RSP: 002b:00007ffd0aa28388 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 224.295678][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f65e8e36d29 [ 224.295689][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.295698][ C0] RBP: 00007ffd0aa283dc R08: 00007ffd0aa2846f R09: 000000000001d0d8 [ 224.295709][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 224.295718][ C0] R13: 000000000001d0d8 R14: 00007ffd0aa28430 R15: 00007ffd0aa28430 [ 224.295737][ C0] [ 224.296006][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g11881 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 224.921873][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=3894 [ 224.929854][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g11881 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 224.941329][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 224.951475][ C1] rcu: RCU grace-period kthread stack dump: [ 224.957456][ C1] task:rcu_preempt state:I stack:27352 pid: 15 ppid: 2 flags:0x00004000 [ 224.966677][ C1] Call Trace: [ 224.969960][ C1] [ 224.972899][ C1] __schedule+0x12c4/0x45b0 [ 224.977418][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 224.983416][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 224.989327][ C1] ? __mod_timer+0xa8e/0xeb0 [ 224.993938][ C1] ? release_firmware_map_entry+0x190/0x190 [ 224.999871][ C1] ? mod_timer_pending+0x20/0x20 [ 225.004825][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 225.010210][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 225.016119][ C1] schedule+0x11b/0x1f0 [ 225.020291][ C1] schedule_timeout+0x1b9/0x300 [ 225.025242][ C1] ? console_conditional_schedule+0x40/0x40 [ 225.031146][ C1] ? update_process_times+0x200/0x200 [ 225.036535][ C1] ? prepare_to_swait_event+0x321/0x340 [ 225.042104][ C1] rcu_gp_fqs_loop+0x2bf/0x1080 [ 225.046976][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 225.052226][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 225.057452][ C1] ? rcu_gp_init+0xdae/0x1140 [ 225.062154][ C1] ? rcu_gp_init+0x1140/0x1140 [ 225.066935][ C1] ? finish_swait+0xc5/0x1d0 [ 225.071625][ C1] rcu_gp_kthread+0xa4/0x360 [ 225.076231][ C1] ? _raw_spin_unlock+0x40/0x40 [ 225.081095][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 225.086237][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 225.092144][ C1] ? __kthread_parkme+0x15c/0x1c0 [ 225.097182][ C1] kthread+0x3f6/0x4f0 [ 225.101258][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 225.106381][ C1] ? kthread_blkcg+0xd0/0xd0 [ 225.110994][ C1] ret_from_fork+0x1f/0x30 [ 225.115549][ C1] [ 225.118579][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 225.125089][ C1] Sending NMI from CPU 1 to CPUs 0: [ 225.130394][ C0] NMI backtrace for cpu 0 [ 225.130404][ C0] CPU: 0 PID: 5012 Comm: syz.0.27 Not tainted 5.15.180-syzkaller #0 [ 225.130421][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 225.130430][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 225.130451][ C0] Code: 1f 84 00 00 00 00 00 0f 1f 00 53 48 89 fb e8 17 00 00 00 48 8b 3d 48 0b 8a 0c 48 89 de 5b e9 77 1c 49 00 cc cc cc cc cc cc cc <48> 8b 04 24 65 48 8b 0d d4 d1 81 7e 65 8b 15 d5 d1 81 7e 81 e2 00 [ 225.130464][ C0] RSP: 0018:ffffc90002cff078 EFLAGS: 00000046 [ 225.130479][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88801ed9d940 [ 225.130489][ C0] RDX: ffff88801ed9d940 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.130499][ C0] RBP: ffff88802c056f94 R08: ffffffff81a23e51 R09: ffffed100580adfd [ 225.130511][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 225.130522][ C0] R13: ffff88802c056b70 R14: ffff88802c056fe0 R15: 0000000000000000 [ 225.130534][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 225.130547][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.130558][ C0] CR2: 0000000000000004 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 225.130571][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 225.130580][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 225.130590][ C0] Call Trace: [ 225.130595][ C0] [ 225.130600][ C0] __perf_event_overflow+0x17e/0x530 [ 225.130626][ C0] perf_swevent_event+0x4c5/0x550 [ 225.130649][ C0] perf_tp_event+0x363/0xc40 [ 225.130670][ C0] ? perf_trace_run_bpf_submit+0x1d0/0x1d0 [ 225.130690][ C0] ? perf_tp_event+0xaf7/0xc40 [ 225.130724][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 225.130743][ C0] perf_trace_run_bpf_submit+0xf7/0x1d0 [ 225.130766][ C0] perf_trace_preemptirq_template+0x31d/0x430 [ 225.130789][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 225.130806][ C0] ? trace_event_raw_event_preemptirq_template+0x270/0x270 [ 225.130827][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 225.130845][ C0] ? print_irqtrace_events+0x210/0x210 [ 225.130862][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 225.130885][ C0] trace_irq_enable_rcuidle+0x10e/0x190 [ 225.130905][ C0] trace_hardirqs_on+0x57/0x80 [ 225.130923][ C0] asm_sysvec_irq_work+0x16/0x20 [ 225.130940][ C0] RIP: 0010:rcu_read_unlock_special+0x84/0x520 [ 225.130958][ C0] Code: f1 f1 f1 00 f2 f2 f2 49 89 04 17 66 41 c7 44 17 09 f3 f3 41 c6 44 17 0b f3 65 44 8b 25 6d 6d 96 7e 41 f7 c4 00 00 f0 00 74 45 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 3a 00 00 00 00 66 42 c7 44 3a [ 225.130971][ C0] RSP: 0018:ffffc90002cff600 EFLAGS: 00000206 [ 225.130983][ C0] RAX: dcf03da69e311200 RBX: 1ffff9200059fec8 RCX: ffffffff816352a8 [ 225.130995][ C0] RDX: dffffc0000000000 RSI: ffffffff8aab2b60 RDI: ffffffff8af9fc80 [ 225.131007][ C0] RBP: ffffc90002cff6d8 R08: dffffc0000000000 R09: fffffbfff2132019 [ 225.131019][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8cb23500 [ 225.131030][ C0] R13: ffff88801ed9dd98 R14: ffffc90002cff640 R15: 1ffff9200059fec4 [ 225.131046][ C0] ? mark_lock+0x98/0x340 [ 225.131065][ C0] ? __rcu_read_unlock+0x100/0x100 [ 225.131082][ C0] ? mem_cgroup_print_oom_group+0x70/0x70 [ 225.131102][ C0] ? rcu_lock_acquire+0x30/0x30 [ 225.131118][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 225.131135][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 225.131153][ C0] __rcu_read_unlock+0x92/0x100 [ 225.131171][ C0] __unlock_page_memcg+0xfd/0x110 [ 225.131190][ C0] unmap_page_range+0xffa/0x2630 [ 225.131223][ C0] ? mmu_notifier_invalidate_range_end+0xf0/0xf0 [ 225.131242][ C0] ? __pagevec_lru_add+0x1584/0x18d0 [ 225.131260][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 225.131274][ C0] ? uprobe_munmap+0x17a/0x400 [ 225.131295][ C0] ? unmap_single_vma+0x1a1/0x2d0 [ 225.131316][ C0] unmap_vmas+0x1f8/0x390 [ 225.131336][ C0] ? unmap_page_range+0x2630/0x2630 [ 225.131358][ C0] ? tlb_gather_mmu_fullmm+0x159/0x200 [ 225.131377][ C0] exit_mmap+0x3b6/0x620 [ 225.131395][ C0] ? vm_brk+0x20/0x20 [ 225.131417][ C0] ? uprobe_clear_state+0x304/0x460 [ 225.131437][ C0] __mmput+0x112/0x3b0 [ 225.131454][ C0] exit_mm+0x688/0x7f0 [ 225.131472][ C0] ? _raw_spin_unlock+0x40/0x40 [ 225.131490][ C0] ? do_exit+0x2480/0x2480 [ 225.131508][ C0] ? taskstats_exit+0x491/0xa10 [ 225.131525][ C0] ? tty_audit_exit+0x150/0x1f0 [ 225.131544][ C0] do_exit+0x626/0x2480 [ 225.131561][ C0] ? preempt_schedule+0xd9/0xe0 [ 225.131577][ C0] ? preempt_schedule_common+0xa6/0xd0 [ 225.131595][ C0] ? preempt_schedule+0xd9/0xe0 [ 225.131612][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 225.131630][ C0] ? put_task_struct+0x80/0x80 [ 225.131649][ C0] ? print_irqtrace_events+0x210/0x210 [ 225.131663][ C0] ? _raw_spin_lock_irq+0xdb/0x110 [ 225.131680][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 225.131699][ C0] ? trace_irq_enable_rcuidle+0x158/0x190 [ 225.131721][ C0] do_group_exit+0x144/0x310 [ 225.131738][ C0] __x64_sys_exit_group+0x3b/0x40 [ 225.131753][ C0] do_syscall_64+0x3b/0xb0 [ 225.131770][ C0] ? clear_bhb_loop+0x15/0x70 [ 225.131786][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 225.131803][ C0] RIP: 0033:0x7f65e8e36d29 [ 225.131815][ C0] Code: Unable to access opcode bytes at RIP 0x7f65e8e36cff. [ 225.131823][ C0] RSP: 002b:00007ffd0aa28388 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 225.131838][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f65e8e36d29 [ 225.131848][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.131857][ C0] RBP: 00007ffd0aa283dc R08: 00007ffd0aa2846f R09: 000000000001d0d8 [ 225.131868][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 225.131883][ C0] R13: 000000000001d0d8 R14: 00007ffd0aa28430 R15: 00007ffd0aa28430 [ 225.131901][ C0] [ 225.172414][ T1108] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 10645 jiffies s: 5733 root: 0x1/. [ 225.713439][ T1108] rcu: blocking rcu_node structures (internal RCU debug): [ 225.720597][ T1108] Task dump for CPU 0: [ 225.724704][ T1108] task:syz.0.27 state:R running task stack:26016 pid: 5012 ppid: 4802 flags:0x00004008 [ 225.735677][ T1108] Call Trace: [ 225.738969][ T1108] [ 225.741916][ T1108] ? uprobe_clear_state+0x304/0x460 [ 225.747300][ T1108] ? __mmput+0x112/0x3b0 [ 225.751567][ T1108] ? exit_mm+0x688/0x7f0 [ 225.755925][ T1108] ? _raw_spin_unlock+0x40/0x40 [ 225.760815][ T1108] ? do_exit+0x2480/0x2480 [ 225.765301][ T1108] ? taskstats_exit+0x491/0xa10 [ 225.770206][ T1108] ? tty_audit_exit+0x150/0x1f0 [ 225.775122][ T1108] ? do_exit+0x626/0x2480 [ 225.779602][ T1108] ? preempt_schedule+0xd9/0xe0 [ 225.784770][ T1108] ? preempt_schedule_common+0xa6/0xd0 [ 225.790259][ T1108] ? preempt_schedule+0xd9/0xe0 [ 225.795164][ T1108] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 225.801166][ T1108] ? put_task_struct+0x80/0x80 [ 225.806009][ T1108] ? print_irqtrace_events+0x210/0x210 [ 225.811482][ T1108] ? _raw_spin_lock_irq+0xdb/0x110 [ 225.816746][ T1108] ? preempt_schedule_thunk+0x16/0x18 [ 225.822250][ T1108] ? trace_irq_enable_rcuidle+0x158/0x190 [ 225.828122][ T1108] ? do_group_exit+0x144/0x310 [ 225.833428][ T1108] ? __x64_sys_exit_group+0x3b/0x40 [ 225.838866][ T1108] ? do_syscall_64+0x3b/0xb0 [ 225.843477][ T1108] ? clear_bhb_loop+0x15/0x70 [ 225.848219][ T1108] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 225.854350][ T1108]