Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts. 2024/07/23 19:22:12 ignoring optional flag "sandboxArg"="0" 2024/07/23 19:22:12 parsed 1 programs 2024/07/23 19:22:12 executed programs: 0 [ 48.090686][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 48.090699][ T30] audit: type=1400 audit(1721762532.700:95): avc: denied { unlink } for pid=351 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 48.105986][ T351] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.204090][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.211115][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.218320][ T361] device bridge_slave_0 entered promiscuous mode [ 48.225126][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.232122][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.239292][ T361] device bridge_slave_1 entered promiscuous mode [ 48.328574][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.335529][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.342787][ T364] device bridge_slave_0 entered promiscuous mode [ 48.354921][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.361820][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.368854][ T364] device bridge_slave_1 entered promiscuous mode [ 48.394801][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.401778][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.409163][ T366] device bridge_slave_0 entered promiscuous mode [ 48.427193][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.434138][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.441445][ T366] device bridge_slave_1 entered promiscuous mode [ 48.506877][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.513883][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.521158][ T371] device bridge_slave_0 entered promiscuous mode [ 48.538131][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.545114][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.552438][ T371] device bridge_slave_1 entered promiscuous mode [ 48.562293][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.569314][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.576556][ T365] device bridge_slave_0 entered promiscuous mode [ 48.583698][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.590711][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.597854][ T365] device bridge_slave_1 entered promiscuous mode [ 48.638079][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.644954][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.652038][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.659052][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.687720][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.694583][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.701692][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.708458][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.783343][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.790178][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.797396][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.804174][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.817914][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.825433][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.833203][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.840167][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.847328][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.854492][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.862219][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.869378][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.887277][ T361] device veth0_vlan entered promiscuous mode [ 48.901320][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.909544][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.917994][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.925306][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.932659][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.940647][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.947476][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.954695][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.962677][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.969761][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.977016][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.984771][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.003835][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.015235][ T361] device veth1_macvtap entered promiscuous mode [ 49.029157][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.051226][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.059072][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.067390][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.074232][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.082027][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.089918][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.096686][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.103816][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.112018][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.118839][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.131283][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.138611][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.146827][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.153777][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.180506][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.196771][ T366] device veth0_vlan entered promiscuous mode [ 49.206893][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.215323][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.223469][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.231615][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.239518][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.246286][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.253420][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.261322][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.268225][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.275490][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.283277][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.291107][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.298801][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.306666][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.314961][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.323170][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.330969][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.354963][ T366] device veth1_macvtap entered promiscuous mode [ 49.373077][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.374748][ T30] audit: type=1400 audit(1721762533.980:96): avc: denied { map_create } for pid=388 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.384343][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.407852][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.408089][ T30] audit: type=1400 audit(1721762534.010:97): avc: denied { map_read map_write } for pid=388 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.421827][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.442387][ T30] audit: type=1400 audit(1721762534.010:98): avc: denied { prog_load } for pid=388 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.442962][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.468715][ T30] audit: type=1400 audit(1721762534.010:99): avc: denied { bpf } for pid=388 comm="syz-executor.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.468857][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.489457][ T30] audit: type=1400 audit(1721762534.010:100): avc: denied { perfmon } for pid=388 comm="syz-executor.3" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.497866][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.518560][ T30] audit: type=1400 audit(1721762534.020:101): avc: denied { prog_run } for pid=388 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.526566][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.545346][ T30] audit: type=1400 audit(1721762534.020:102): avc: denied { read } for pid=82 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 49.552017][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.573944][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.589195][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.597214][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.604082][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.612616][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.620585][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.628625][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.637993][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.646015][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.654714][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.662943][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.671561][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.679666][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.688407][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.706315][ T371] device veth0_vlan entered promiscuous mode [ 49.717342][ T365] device veth0_vlan entered promiscuous mode [ 49.724614][ T364] device veth0_vlan entered promiscuous mode [ 49.731405][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.739603][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.747759][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.756315][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.764543][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.772577][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.780892][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.789021][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.796843][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.804486][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.812285][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.820433][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.828492][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.836241][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.851137][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.858304][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.865675][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.872923][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.880187][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.887534][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.895080][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.903291][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.913674][ T371] device veth1_macvtap entered promiscuous mode [ 49.926988][ T30] audit: type=1400 audit(1721762534.520:103): avc: denied { mounton } for pid=366 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 49.953970][ T365] device veth1_macvtap entered promiscuous mode [ 49.962283][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.970622][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.978671][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.986927][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.995106][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.012124][ T364] device veth1_macvtap entered promiscuous mode [ 50.036361][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.044480][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.052671][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.060163][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.069049][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.077296][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.085310][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.093518][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.101552][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.109873][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.118078][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.350302][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 150.356758][ C1] rcu: 1-...!: (1 GPs behind) idle=377/1/0x4000000000000000 softirq=2879/2880 fqs=0 last_accelerate: 9e29/c539 dyntick_enabled: 1 [ 150.370207][ C1] (t=10000 jiffies g=1505 q=238) [ 150.375144][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 9999 jiffies! g1505 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 150.387122][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=717 [ 150.394687][ C1] rcu: rcu_preempt kthread starved for 10000 jiffies! g1505 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 150.405889][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 150.415692][ C1] rcu: RCU grace-period kthread stack dump: [ 150.421427][ C1] task:rcu_preempt state:I stack:28328 pid: 14 ppid: 2 flags:0x00004000 [ 150.430456][ C1] Call Trace: [ 150.433582][ C1] [ 150.436368][ C1] __schedule+0xccc/0x1590 [ 150.440600][ C1] ? __sched_text_start+0x8/0x8 [ 150.445377][ C1] ? __kasan_check_write+0x14/0x20 [ 150.450328][ C1] schedule+0x11f/0x1e0 [ 150.454407][ C1] schedule_timeout+0x18c/0x370 [ 150.459118][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 150.464213][ C1] ? console_conditional_schedule+0x30/0x30 [ 150.469945][ C1] ? update_process_times+0x200/0x200 [ 150.475169][ C1] ? prepare_to_swait_event+0x308/0x320 [ 150.480531][ C1] rcu_gp_fqs_loop+0x2af/0xf80 [ 150.485144][ C1] ? debug_smp_processor_id+0x17/0x20 [ 150.490441][ C1] ? __note_gp_changes+0x4ab/0x920 [ 150.495386][ C1] ? rcu_gp_init+0xc30/0xc30 [ 150.499898][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 150.504933][ C1] ? rcu_gp_init+0x9cf/0xc30 [ 150.509359][ C1] rcu_gp_kthread+0xa4/0x350 [ 150.513792][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 150.518481][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 150.522989][ C1] ? __kasan_check_read+0x11/0x20 [ 150.527845][ C1] ? __kthread_parkme+0xb2/0x200 [ 150.532620][ C1] kthread+0x421/0x510 [ 150.536524][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 150.541141][ C1] ? kthread_blkcg+0xd0/0xd0 [ 150.545569][ C1] ret_from_fork+0x1f/0x30 [ 150.549810][ C1] [ 150.552681][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 150.558836][ C1] Sending NMI from CPU 1 to CPUs 0: [ 150.563911][ C0] NMI backtrace for cpu 0 [ 150.563933][ C0] CPU: 0 PID: 365 Comm: syz-executor.1 Not tainted 5.15.151-syzkaller-1069583-g5356d2f17edf #0 [ 150.563950][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 150.563961][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 150.563982][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 2b 02 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 150.563997][ C0] RSP: 0018:ffffc90000d777c0 EFLAGS: 00000246 [ 150.564010][ C0] RAX: 0000000000000001 RBX: 1ffff920001aeefc RCX: 1ffffffff0c5aa9c [ 150.564021][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7038ad4 [ 150.564030][ C0] RBP: ffffc90000d77870 R08: dffffc0000000000 R09: ffffed103ee0715b [ 150.564041][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 150.564051][ C0] R13: ffff8881f7038ad4 R14: 0000000000000001 R15: 1ffff920001aef00 [ 150.564061][ C0] FS: 0000555556348480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 150.564074][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.564084][ C0] CR2: 0000555556351818 CR3: 000000011a45a000 CR4: 00000000003506b0 [ 150.564102][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 150.564110][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 150.564119][ C0] Call Trace: [ 150.564125][ C0] [ 150.564131][ C0] ? show_regs+0x58/0x60 [ 150.564146][ C0] ? nmi_cpu_backtrace+0x29f/0x300 [ 150.564164][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 150.564181][ C0] ? kvm_wait+0x147/0x180 [ 150.564194][ C0] ? kvm_wait+0x147/0x180 [ 150.564207][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 150.564222][ C0] ? nmi_handle+0xa8/0x280 [ 150.564236][ C0] ? kvm_wait+0x147/0x180 [ 150.564249][ C0] ? default_do_nmi+0x69/0x160 [ 150.564264][ C0] ? exc_nmi+0xaf/0x120 [ 150.564278][ C0] ? end_repeat_nmi+0x16/0x31 [ 150.564294][ C0] ? kvm_wait+0x147/0x180 [ 150.564307][ C0] ? kvm_wait+0x147/0x180 [ 150.564319][ C0] ? kvm_wait+0x147/0x180 [ 150.564331][ C0] [ 150.564335][ C0] [ 150.564339][ C0] ? asm_common_interrupt+0x27/0x40 [ 150.564353][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 150.564368][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 150.564386][ C0] ? prep_compound_page+0x271/0x4a0 [ 150.564403][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 150.564418][ C0] ? get_page_from_freelist+0x3550/0x35d0 [ 150.564436][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 150.564449][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 150.564462][ C0] ? sock_hash_bucket_hash+0x388/0x7e0 [ 150.564480][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 150.564497][ C0] bpf_prog_a8aaa52f2e199321+0x42/0x7c0 [ 150.564514][ C0] bpf_trace_run4+0x13f/0x270 [ 150.564530][ C0] ? bpf_trace_run3+0x250/0x250 [ 150.564546][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 150.564561][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 150.564581][ C0] __traceiter_mm_page_alloc+0x3a/0x60 [ 150.564595][ C0] __alloc_pages+0x3cb/0x8f0 [ 150.564609][ C0] ? prep_new_page+0x110/0x110 [ 150.564625][ C0] ? __se_sys_newfstatat+0x5e2/0x760 [ 150.564643][ C0] ? __x64_sys_newfstatat+0xb0/0xb0 [ 150.564659][ C0] new_slab+0x9a/0x4e0 [ 150.564675][ C0] ___slab_alloc+0x39e/0x830 [ 150.564690][ C0] ? getname_flags+0xba/0x520 [ 150.564703][ C0] ? user_path_at_empty+0x14e/0x1a0 [ 150.564718][ C0] ? getname_flags+0xba/0x520 [ 150.564731][ C0] __slab_alloc+0x4a/0x90 [ 150.564746][ C0] ? getname_flags+0xba/0x520 [ 150.564758][ C0] kmem_cache_alloc+0x134/0x200 [ 150.564774][ C0] getname_flags+0xba/0x520 [ 150.564788][ C0] __x64_sys_unlink+0x3c/0x50 [ 150.564802][ C0] do_syscall_64+0x3d/0xb0 [ 150.564816][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 150.564829][ C0] RIP: 0033:0x7f63185c8657 [ 150.564843][ C0] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 150.564854][ C0] RSP: 002b:00007ffcc9aa8108 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 150.564868][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f63185c8657 [ 150.564878][ C0] RDX: 00007ffcc9aa8130 RSI: 00007ffcc9aa81c0 RDI: 00007ffcc9aa81c0 [ 150.564888][ C0] RBP: 00007ffcc9aa81c0 R08: 0000000000000000 R09: 0000000000000000 [ 150.564896][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffcc9aa9280 [ 150.564906][ C0] R13: 00007f63186143b9 R14: 000000000000c462 R15: 0000000000000005 [ 150.564917][ C0] [ 150.565919][ C1] Sending NMI from CPU 1 to CPUs 0: [ 151.009006][ C0] NMI backtrace for cpu 0 [ 151.009017][ C0] CPU: 0 PID: 365 Comm: syz-executor.1 Not tainted 5.15.151-syzkaller-1069583-g5356d2f17edf #0 [ 151.009033][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 151.009042][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 151.009063][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 2b 02 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 151.009075][ C0] RSP: 0018:ffffc90000d777c0 EFLAGS: 00000246 [ 151.009089][ C0] RAX: 0000000000000001 RBX: 1ffff920001aeefc RCX: 1ffffffff0c5aa9c [ 151.009099][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7038ad4 [ 151.009109][ C0] RBP: ffffc90000d77870 R08: dffffc0000000000 R09: ffffed103ee0715b [ 151.009119][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 151.009129][ C0] R13: ffff8881f7038ad4 R14: 0000000000000001 R15: 1ffff920001aef00 [ 151.009139][ C0] FS: 0000555556348480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 151.009153][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.009163][ C0] CR2: 0000555556351818 CR3: 000000011a45a000 CR4: 00000000003506b0 [ 151.009176][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 151.009184][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 151.009193][ C0] Call Trace: [ 151.009198][ C0] [ 151.009204][ C0] ? show_regs+0x58/0x60 [ 151.009219][ C0] ? nmi_cpu_backtrace+0x29f/0x300 [ 151.009237][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 151.009254][ C0] ? kvm_wait+0x147/0x180 [ 151.009266][ C0] ? kvm_wait+0x147/0x180 [ 151.009279][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 151.009295][ C0] ? nmi_handle+0xa8/0x280 [ 151.009309][ C0] ? kvm_wait+0x147/0x180 [ 151.009321][ C0] ? kvm_wait+0x147/0x180 [ 151.009334][ C0] ? default_do_nmi+0x69/0x160 [ 151.009350][ C0] ? exc_nmi+0xaf/0x120 [ 151.009364][ C0] ? end_repeat_nmi+0x16/0x31 [ 151.009380][ C0] ? kvm_wait+0x147/0x180 [ 151.009392][ C0] ? kvm_wait+0x147/0x180 [ 151.009405][ C0] ? kvm_wait+0x147/0x180 [ 151.009418][ C0] [ 151.009422][ C0] [ 151.009426][ C0] ? asm_common_interrupt+0x27/0x40 [ 151.009439][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 151.009455][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 151.009472][ C0] ? prep_compound_page+0x271/0x4a0 [ 151.009488][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 151.009504][ C0] ? get_page_from_freelist+0x3550/0x35d0 [ 151.009521][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 151.009534][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 151.009547][ C0] ? sock_hash_bucket_hash+0x388/0x7e0 [ 151.009580][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 151.009597][ C0] bpf_prog_a8aaa52f2e199321+0x42/0x7c0 [ 151.009609][ C0] bpf_trace_run4+0x13f/0x270 [ 151.009626][ C0] ? bpf_trace_run3+0x250/0x250 [ 151.009641][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 151.009656][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 151.009672][ C0] __traceiter_mm_page_alloc+0x3a/0x60 [ 151.009685][ C0] __alloc_pages+0x3cb/0x8f0 [ 151.009700][ C0] ? prep_new_page+0x110/0x110 [ 151.009715][ C0] ? __se_sys_newfstatat+0x5e2/0x760 [ 151.009733][ C0] ? __x64_sys_newfstatat+0xb0/0xb0 [ 151.009749][ C0] new_slab+0x9a/0x4e0 [ 151.009765][ C0] ___slab_alloc+0x39e/0x830 [ 151.009779][ C0] ? getname_flags+0xba/0x520 [ 151.009792][ C0] ? user_path_at_empty+0x14e/0x1a0 [ 151.009807][ C0] ? getname_flags+0xba/0x520 [ 151.009820][ C0] __slab_alloc+0x4a/0x90 [ 151.009835][ C0] ? getname_flags+0xba/0x520 [ 151.009847][ C0] kmem_cache_alloc+0x134/0x200 [ 151.009863][ C0] getname_flags+0xba/0x520 [ 151.009876][ C0] __x64_sys_unlink+0x3c/0x50 [ 151.009891][ C0] do_syscall_64+0x3d/0xb0 [ 151.009904][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 151.009918][ C0] RIP: 0033:0x7f63185c8657 [ 151.009931][ C0] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 151.009942][ C0] RSP: 002b:00007ffcc9aa8108 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 151.009956][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f63185c8657 [ 151.009965][ C0] RDX: 00007ffcc9aa8130 RSI: 00007ffcc9aa81c0 RDI: 00007ffcc9aa81c0 [ 151.009975][ C0] RBP: 00007ffcc9aa81c0 R08: 0000000000000000 R09: 0000000000000000 [ 151.009984][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffcc9aa9280 [ 151.009993][ C0] R13: 00007f63186143b9 R14: 000000000000c462 R15: 0000000000000005 [ 151.010005][ C0] [ 151.010993][ C1] NMI backtrace for cpu 1 [ 151.457741][ C1] CPU: 1 PID: 367 Comm: syz-execprog Not tainted 5.15.151-syzkaller-1069583-g5356d2f17edf #0 [ 151.467713][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 151.477609][ C1] Call Trace: [ 151.480820][ C1] [ 151.483507][ C1] dump_stack_lvl+0x151/0x1b7 [ 151.488034][ C1] ? io_uring_drop_tctx_refs+0x190/0x190 [ 151.493515][ C1] ? cpumask_next+0x8a/0xb0 [ 151.497869][ C1] dump_stack+0x15/0x17 [ 151.501820][ C1] nmi_cpu_backtrace+0x2f7/0x300 [ 151.506610][ C1] ? init_x2apic_ldr+0x10/0x10 [ 151.511282][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 151.517287][ C1] ? irq_work_queue+0xd4/0x160 [ 151.521871][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 151.527771][ C1] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 151.533614][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 151.539494][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 151.545219][ C1] rcu_dump_cpu_stacks+0x1d8/0x330 [ 151.550378][ C1] print_cpu_stall+0x315/0x5f0 [ 151.555166][ C1] rcu_sched_clock_irq+0x989/0x12f0 [ 151.560192][ C1] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 151.566182][ C1] ? hrtimer_run_queues+0x15f/0x440 [ 151.571389][ C1] update_process_times+0x198/0x200 [ 151.576422][ C1] tick_sched_timer+0x188/0x240 [ 151.581110][ C1] ? tick_setup_sched_timer+0x480/0x480 [ 151.586491][ C1] __hrtimer_run_queues+0x41a/0xad0 [ 151.591527][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 151.596470][ C1] ? clockevents_program_event+0x22f/0x300 [ 151.602116][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 151.608037][ C1] hrtimer_interrupt+0x40c/0xaa0 [ 151.612877][ C1] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 151.618612][ C1] sysvec_apic_timer_interrupt+0x95/0xc0 [ 151.624101][ C1] [ 151.626849][ C1] [ 151.629625][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 151.635443][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 151.640214][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 2b 02 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 151.659744][ C1] RSP: 0000:ffffc90000d96600 EFLAGS: 00000246 [ 151.665731][ C1] RAX: 0000000000000003 RBX: 1ffff920001b2cc4 RCX: ffffffff815504ef [ 151.673550][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88810ecc9dd8 [ 151.681549][ C1] RBP: ffffc90000d966b0 R08: dffffc0000000000 R09: ffffed1021d993bc [ 151.689356][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 151.697169][ C1] R13: ffff88810ecc9dd8 R14: 0000000000000003 R15: 1ffff920001b2cc8 [ 151.705159][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 151.711238][ C1] ? sched_clock_cpu+0x18/0x3b0 [ 151.716014][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 151.720953][ C1] ? pv_hash+0x86/0x150 [ 151.725057][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 151.730947][ C1] ? post_alloc_hook+0x1a3/0x1b0 [ 151.735729][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 151.742084][ C1] ? get_page_from_freelist+0x3550/0x35d0 [ 151.747638][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 151.752412][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 151.757643][ C1] ? sock_hash_bucket_hash+0x388/0x7e0 [ 151.763024][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 151.768244][ C1] bpf_prog_a8aaa52f2e199321+0x42/0x7c0 [ 151.773611][ C1] bpf_trace_run4+0x13f/0x270 [ 151.778126][ C1] ? bpf_trace_run3+0x250/0x250 [ 151.782819][ C1] ? __alloc_pages+0x8f0/0x8f0 [ 151.787411][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 151.792715][ C1] __traceiter_mm_page_alloc+0x3a/0x60 [ 151.798009][ C1] __alloc_pages+0x3cb/0x8f0 [ 151.802430][ C1] ? prep_new_page+0x110/0x110 [ 151.807057][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 151.812498][ C1] ? stack_trace_save+0x113/0x1c0 [ 151.817358][ C1] __stack_depot_save+0x38d/0x470 [ 151.822335][ C1] stack_depot_save+0xe/0x10 [ 151.827005][ C1] save_stack+0x104/0x1e0 [ 151.831173][ C1] ? __reset_page_owner+0x190/0x190 [ 151.836206][ C1] ? post_alloc_hook+0x1a3/0x1b0 [ 151.840977][ C1] ? prep_new_page+0x1b/0x110 [ 151.845489][ C1] ? get_page_from_freelist+0x3550/0x35d0 [ 151.851048][ C1] ? __alloc_pages+0x27e/0x8f0 [ 151.855654][ C1] ? __stack_depot_save+0x38d/0x470 [ 151.860680][ C1] ? kasan_set_track+0x5d/0x70 [ 151.865282][ C1] ? kasan_set_free_info+0x23/0x40 [ 151.870314][ C1] ? ____kasan_slab_free+0x126/0x160 [ 151.875437][ C1] ? __kasan_slab_free+0x11/0x20 [ 151.880208][ C1] ? slab_free_freelist_hook+0xbd/0x190 [ 151.885588][ C1] ? kfree+0xc8/0x220 [ 151.889459][ C1] ? sock_map_unref+0x352/0x4d0 [ 151.894207][ C1] ? sock_hash_delete_elem+0x274/0x2f0 [ 151.899481][ C1] ? bpf_prog_a8aaa52f2e199321+0x42/0x7c0 [ 151.905040][ C1] ? bpf_trace_run4+0x13f/0x270 [ 151.909726][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 151.915292][ C1] __set_page_owner+0x28/0x2e0 [ 151.919888][ C1] ? kernel_init_free_pages+0xda/0xf0 [ 151.925092][ C1] post_alloc_hook+0x1a3/0x1b0 [ 151.929893][ C1] prep_new_page+0x1b/0x110 [ 151.934224][ C1] get_page_from_freelist+0x3550/0x35d0 [ 151.939610][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 151.944455][ C1] ? lruvec_init+0x150/0x150 [ 151.948876][ C1] ? __alloc_pages+0x8f0/0x8f0 [ 151.953483][ C1] ? __alloc_pages_bulk+0xe40/0xe40 [ 151.958700][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 151.963642][ C1] __alloc_pages+0x27e/0x8f0 [ 151.968096][ C1] ? prep_new_page+0x110/0x110 [ 151.972669][ C1] ? stack_trace_save+0x113/0x1c0 [ 151.977555][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 151.982474][ C1] __stack_depot_save+0x38d/0x470 [ 151.987335][ C1] ? kfree+0xc8/0x220 [ 151.991158][ C1] kasan_set_track+0x5d/0x70 [ 151.995583][ C1] ? kasan_set_track+0x4b/0x70 [ 152.000272][ C1] ? kasan_set_free_info+0x23/0x40 [ 152.005232][ C1] ? ____kasan_slab_free+0x126/0x160 [ 152.010335][ C1] ? __kasan_slab_free+0x11/0x20 [ 152.015111][ C1] ? slab_free_freelist_hook+0xbd/0x190 [ 152.020525][ C1] ? kfree+0xc8/0x220 [ 152.024404][ C1] ? sock_map_unref+0x352/0x4d0 [ 152.029085][ C1] ? sock_hash_delete_elem+0x274/0x2f0 [ 152.034467][ C1] ? bpf_prog_a8aaa52f2e199321+0x42/0x7c0 [ 152.040025][ C1] ? bpf_trace_run4+0x13f/0x270 [ 152.044712][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 152.050456][ C1] ? __traceiter_mm_page_alloc+0x3a/0x60 [ 152.055900][ C1] ? __alloc_pages+0x3cb/0x8f0 [ 152.060678][ C1] ? handle_pte_fault+0xea0/0x24d0 [ 152.065622][ C1] ? do_handle_mm_fault+0x20bc/0x2400 [ 152.070915][ C1] ? exc_page_fault+0x26f/0x830 [ 152.075616][ C1] ? asm_exc_page_fault+0x27/0x30 [ 152.080496][ C1] kasan_set_free_info+0x23/0x40 [ 152.085238][ C1] ____kasan_slab_free+0x126/0x160 [ 152.090283][ C1] __kasan_slab_free+0x11/0x20 [ 152.094870][ C1] slab_free_freelist_hook+0xbd/0x190 [ 152.100434][ C1] ? sock_map_unref+0x352/0x4d0 [ 152.105295][ C1] kfree+0xc8/0x220 [ 152.109148][ C1] sock_map_unref+0x352/0x4d0 [ 152.113650][ C1] sock_hash_delete_elem+0x274/0x2f0 [ 152.118772][ C1] bpf_prog_a8aaa52f2e199321+0x42/0x7c0 [ 152.124245][ C1] bpf_trace_run4+0x13f/0x270 [ 152.128854][ C1] ? bpf_trace_run3+0x250/0x250 [ 152.133715][ C1] ? __alloc_pages+0x8f0/0x8f0 [ 152.138310][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 152.143693][ C1] __traceiter_mm_page_alloc+0x3a/0x60 [ 152.149022][ C1] __alloc_pages+0x3cb/0x8f0 [ 152.153612][ C1] ? prep_new_page+0x110/0x110 [ 152.158191][ C1] ? ktime_get_coarse_real_ts64+0x117/0x130 [ 152.164010][ C1] ? current_time+0x1af/0x2f0 [ 152.168541][ C1] ? atime_needs_update+0x810/0x810 [ 152.173552][ C1] handle_pte_fault+0xea0/0x24d0 [ 152.178333][ C1] ? fault_around_bytes_set+0xc0/0xc0 [ 152.183534][ C1] ? do_handle_mm_fault+0x159f/0x2400 [ 152.188737][ C1] ? memcpy+0x56/0x70 [ 152.192558][ C1] do_handle_mm_fault+0x20bc/0x2400 [ 152.197594][ C1] ? numa_migrate_prep+0xe0/0xe0 [ 152.202368][ C1] ? __kasan_check_read+0x11/0x20 [ 152.207223][ C1] ? vfs_read+0x64b/0xd40 [ 152.211402][ C1] ? kernel_read+0x1f0/0x1f0 [ 152.215819][ C1] ? exc_page_fault+0x222/0x830 [ 152.220509][ C1] ? access_error+0x246/0x270 [ 152.225088][ C1] exc_page_fault+0x26f/0x830 [ 152.229536][ C1] asm_exc_page_fault+0x27/0x30 [ 152.234233][ C1] RIP: 0033:0x556172 [ 152.237978][ C1] Code: 48 89 c1 48 8d 35 ce 71 48 00 48 89 f8 bf 01 00 00 00 e8 61 bd ef ff 48 8b 94 24 e8 00 00 00 48 8b 74 24 48 48 89 c7 48 89 c8 <40> 88 74 3b ff 48 89 9c 24 a8 00 00 00 48 89 84 24 b0 00 00 00 48 [ 152.257692][ C1] RSP: 002b:000000c0012c5c90 EFLAGS: 00010216 [ 152.263594][ C1] RAX: 0000000000001000 RBX: 0000000000000001 RCX: 0000000000000000 [ 152.271402][ C1] RDX: 000000c0012678c0 RSI: 000000000000000a RDI: 000000c001421000 [ 152.279216][ C1] RBP: 000000c0012c5d68 R08: 0000000000000030 R09: 00000000600003fd [ 152.287022][ C1] R10: 00000000000003fd R11: ffffffffffffffff R12: 0000000000004000 [ 152.294931][ C1] R13: 4924924924902cb2 R14: 000000c0010f0680 R15: 000000000000008d [ 152.302738][ C1] [ 287.086858][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 226s! [syz-executor.1:365] [ 287.095198][ C0] Modules linked in: [ 287.098922][ C0] CPU: 0 PID: 365 Comm: syz-executor.1 Not tainted 5.15.151-syzkaller-1069583-g5356d2f17edf #0 [ 287.109072][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 287.119092][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 287.123831][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 2b 02 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 287.143958][ C0] RSP: 0018:ffffc90000d777c0 EFLAGS: 00000246 [ 287.149864][ C0] RAX: 0000000000000001 RBX: 1ffff920001aeefc RCX: 1ffffffff0c5aa9c [ 287.157699][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7038ad4 [ 287.165568][ C0] RBP: ffffc90000d77870 R08: dffffc0000000000 R09: ffffed103ee0715b [ 287.173381][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 287.181199][ C0] R13: ffff8881f7038ad4 R14: 0000000000000001 R15: 1ffff920001aef00 [ 287.189011][ C0] FS: 0000555556348480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 287.197781][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.204280][ C0] CR2: 0000555556351818 CR3: 000000011a45a000 CR4: 00000000003506b0 [ 287.212193][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.219989][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.227805][ C0] Call Trace: [ 287.230944][ C0] [ 287.233675][ C0] ? show_regs+0x58/0x60 [ 287.237693][ C0] ? watchdog_timer_fn+0x4b1/0x5f0 [ 287.242651][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 287.247764][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 287.252974][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 287.257918][ C0] ? clockevents_program_event+0x22f/0x300 [ 287.263820][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 287.269722][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 287.274671][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 287.280575][ C0] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 287.286236][ C0] [ 287.288989][ C0] [ 287.291773][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 287.297830][ C0] ? kvm_wait+0x147/0x180 [ 287.302026][ C0] ? asm_common_interrupt+0x27/0x40 [ 287.307063][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 287.312006][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 287.318082][ C0] ? prep_compound_page+0x271/0x4a0 [ 287.323289][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 287.329541][ C0] ? get_page_from_freelist+0x3550/0x35d0 [ 287.335092][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 287.339930][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 287.344896][ C0] ? sock_hash_bucket_hash+0x388/0x7e0 [ 287.350211][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 287.355323][ C0] bpf_prog_a8aaa52f2e199321+0x42/0x7c0 [ 287.360699][ C0] bpf_trace_run4+0x13f/0x270 [ 287.365206][ C0] ? bpf_trace_run3+0x250/0x250 [ 287.369926][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 287.374504][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 287.379787][ C0] __traceiter_mm_page_alloc+0x3a/0x60 [ 287.385167][ C0] __alloc_pages+0x3cb/0x8f0 [ 287.389595][ C0] ? prep_new_page+0x110/0x110 [ 287.394195][ C0] ? __se_sys_newfstatat+0x5e2/0x760 [ 287.399514][ C0] ? __x64_sys_newfstatat+0xb0/0xb0 [ 287.404632][ C0] new_slab+0x9a/0x4e0 [ 287.408531][ C0] ___slab_alloc+0x39e/0x830 [ 287.412967][ C0] ? getname_flags+0xba/0x520 [ 287.417467][ C0] ? user_path_at_empty+0x14e/0x1a0 [ 287.422511][ C0] ? getname_flags+0xba/0x520 [ 287.427025][ C0] __slab_alloc+0x4a/0x90 [ 287.431195][ C0] ? getname_flags+0xba/0x520 [ 287.435708][ C0] kmem_cache_alloc+0x134/0x200 [ 287.440385][ C0] getname_flags+0xba/0x520 [ 287.444731][ C0] __x64_sys_unlink+0x3c/0x50 [ 287.449323][ C0] do_syscall_64+0x3d/0xb0 [ 287.453576][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 287.459306][ C0] RIP: 0033:0x7f63185c8657 [ 287.463576][ C0] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 287.483088][ C0] RSP: 002b:00007ffcc9aa8108 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 287.491332][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f63185c8657 [ 287.499157][ C0] RDX: 00007ffcc9aa8130 RSI: 00007ffcc9aa81c0 RDI: 00007ffcc9aa81c0 [ 287.506963][ C0] RBP: 00007ffcc9aa81c0 R08: 0000000000000000 R09: 0000000000000000 [ 287.514766][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffcc9aa9280 [ 287.522678][ C0] R13: 00007f63186143b9 R14: 000000000000c462 R15: 0000000000000005 [ 287.530500][ C0] [ 287.533362][ C0] Sending NMI from CPU 0 to CPUs 1: [ 287.538502][ C1] NMI backtrace for cpu 1 [ 287.538512][ C1] CPU: 1 PID: 367 Comm: syz-execprog Not tainted 5.15.151-syzkaller-1069583-g5356d2f17edf #0 [ 287.538527][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 287.538535][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 287.538556][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 2b 02 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 287.538568][ C1] RSP: 0000:ffffc90000d96600 EFLAGS: 00000246 [ 287.538581][ C1] RAX: 0000000000000003 RBX: 1ffff920001b2cc4 RCX: ffffffff815504ef [ 287.538591][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88810ecc9dd8 [ 287.538602][ C1] RBP: ffffc90000d966b0 R08: dffffc0000000000 R09: ffffed1021d993bc [ 287.538612][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 287.538622][ C1] R13: ffff88810ecc9dd8 R14: 0000000000000003 R15: 1ffff920001b2cc8 [ 287.538632][ C1] FS: 000000c0012c8090(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 287.538645][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.538655][ C1] CR2: 000000c001421000 CR3: 000000012413e000 CR4: 00000000003506a0 [ 287.538667][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.538675][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.538684][ C1] Call Trace: [ 287.538689][ C1] [ 287.538694][ C1] ? show_regs+0x58/0x60 [ 287.538709][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 287.538726][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 287.538744][ C1] ? kvm_wait+0x147/0x180 [ 287.538756][ C1] ? kvm_wait+0x147/0x180 [ 287.538769][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 287.538784][ C1] ? nmi_handle+0xa8/0x280 [ 287.538799][ C1] ? kvm_wait+0x147/0x180 [ 287.538811][ C1] ? default_do_nmi+0x69/0x160 [ 287.538827][ C1] ? exc_nmi+0xaf/0x120 [ 287.538840][ C1] ? end_repeat_nmi+0x16/0x31 [ 287.538855][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 287.538880][ C1] ? kvm_wait+0x147/0x180 [ 287.538893][ C1] ? kvm_wait+0x147/0x180 [ 287.538906][ C1] ? kvm_wait+0x147/0x180 [ 287.538919][ C1] [ 287.538922][ C1] [ 287.538926][ C1] ? sched_clock_cpu+0x18/0x3b0 [ 287.538942][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 287.538956][ C1] ? pv_hash+0x86/0x150 [ 287.538970][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 287.538986][ C1] ? post_alloc_hook+0x1a3/0x1b0 [ 287.539003][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 287.539019][ C1] ? get_page_from_freelist+0x3550/0x35d0 [ 287.539036][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 287.539049][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 287.539062][ C1] ? sock_hash_bucket_hash+0x388/0x7e0 [ 287.539081][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 287.539097][ C1] bpf_prog_a8aaa52f2e199321+0x42/0x7c0 [ 287.539110][ C1] bpf_trace_run4+0x13f/0x270 [ 287.539126][ C1] ? bpf_trace_run3+0x250/0x250 [ 287.539142][ C1] ? __alloc_pages+0x8f0/0x8f0 [ 287.539157][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 287.539173][ C1] __traceiter_mm_page_alloc+0x3a/0x60 [ 287.539187][ C1] __alloc_pages+0x3cb/0x8f0 [ 287.539201][ C1] ? prep_new_page+0x110/0x110 [ 287.539216][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 287.539230][ C1] ? stack_trace_save+0x113/0x1c0 [ 287.539252][ C1] __stack_depot_save+0x38d/0x470 [ 287.539266][ C1] stack_depot_save+0xe/0x10 [ 287.539282][ C1] save_stack+0x104/0x1e0 [ 287.539295][ C1] ? __reset_page_owner+0x190/0x190 [ 287.539308][ C1] ? post_alloc_hook+0x1a3/0x1b0 [ 287.539322][ C1] ? prep_new_page+0x1b/0x110 [ 287.539336][ C1] ? get_page_from_freelist+0x3550/0x35d0 [ 287.539351][ C1] ? __alloc_pages+0x27e/0x8f0 [ 287.539364][ C1] ? __stack_depot_save+0x38d/0x470 [ 287.539377][ C1] ? kasan_set_track+0x5d/0x70 [ 287.539389][ C1] ? kasan_set_free_info+0x23/0x40 [ 287.539403][ C1] ? ____kasan_slab_free+0x126/0x160 [ 287.539416][ C1] ? __kasan_slab_free+0x11/0x20 [ 287.539429][ C1] ? slab_free_freelist_hook+0xbd/0x190 [ 287.539444][ C1] ? kfree+0xc8/0x220 [ 287.539458][ C1] ? sock_map_unref+0x352/0x4d0 [ 287.539472][ C1] ? sock_hash_delete_elem+0x274/0x2f0 [ 287.539487][ C1] ? bpf_prog_a8aaa52f2e199321+0x42/0x7c0 [ 287.539498][ C1] ? bpf_trace_run4+0x13f/0x270 [ 287.539512][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 287.539527][ C1] __set_page_owner+0x28/0x2e0 [ 287.539540][ C1] ? kernel_init_free_pages+0xda/0xf0 [ 287.539555][ C1] post_alloc_hook+0x1a3/0x1b0 [ 287.539570][ C1] prep_new_page+0x1b/0x110 [ 287.539584][ C1] get_page_from_freelist+0x3550/0x35d0 [ 287.539601][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 287.539619][ C1] ? lruvec_init+0x150/0x150 [ 287.539636][ C1] ? __alloc_pages+0x8f0/0x8f0 [ 287.539651][ C1] ? __alloc_pages_bulk+0xe40/0xe40 [ 287.539666][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 287.539681][ C1] __alloc_pages+0x27e/0x8f0 [ 287.539695][ C1] ? prep_new_page+0x110/0x110 [ 287.539711][ C1] ? stack_trace_save+0x113/0x1c0 [ 287.539725][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 287.539740][ C1] __stack_depot_save+0x38d/0x470 [ 287.539753][ C1] ? kfree+0xc8/0x220 [ 287.539766][ C1] kasan_set_track+0x5d/0x70 [ 287.539779][ C1] ? kasan_set_track+0x4b/0x70 [ 287.539791][ C1] ? kasan_set_free_info+0x23/0x40 [ 287.539804][ C1] ? ____kasan_slab_free+0x126/0x160 [ 287.539817][ C1] ? __kasan_slab_free+0x11/0x20 [ 287.539830][ C1] ? slab_free_freelist_hook+0xbd/0x190 [ 287.539845][ C1] ? kfree+0xc8/0x220 [ 287.539859][ C1] ? sock_map_unref+0x352/0x4d0 [ 287.539873][ C1] ? sock_hash_delete_elem+0x274/0x2f0 [ 287.539888][ C1] ? bpf_prog_a8aaa52f2e199321+0x42/0x7c0 [ 287.539899][ C1] ? bpf_trace_run4+0x13f/0x270 [ 287.539913][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 287.539926][ C1] ? __traceiter_mm_page_alloc+0x3a/0x60 [ 287.539939][ C1] ? __alloc_pages+0x3cb/0x8f0 [ 287.539952][ C1] ? handle_pte_fault+0xea0/0x24d0 [ 287.539967][ C1] ? do_handle_mm_fault+0x20bc/0x2400 [ 287.539981][ C1] ? exc_page_fault+0x26f/0x830 [ 287.539995][ C1] ? asm_exc_page_fault+0x27/0x30 [ 287.540014][ C1] kasan_set_free_info+0x23/0x40 [ 287.540028][ C1] ____kasan_slab_free+0x126/0x160 [ 287.540042][ C1] __kasan_slab_free+0x11/0x20 [ 287.540055][ C1] slab_free_freelist_hook+0xbd/0x190 [ 287.540071][ C1] ? sock_map_unref+0x352/0x4d0 [ 287.540085][ C1] kfree+0xc8/0x220 [ 287.540100][ C1] sock_map_unref+0x352/0x4d0 [ 287.540116][ C1] sock_hash_delete_elem+0x274/0x2f0 [ 287.540133][ C1] bpf_prog_a8aaa52f2e199321+0x42/0x7c0 [ 287.540143][ C1] bpf_trace_run4+0x13f/0x270 [ 287.540159][ C1] ? bpf_trace_run3+0x250/0x250 [ 287.540174][ C1] ? __alloc_pages+0x8f0/0x8f0 [ 287.540189][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 287.540203][ C1] __traceiter_mm_page_alloc+0x3a/0x60 [ 287.540217][ C1] __alloc_pages+0x3cb/0x8f0 [ 287.540240][ C1] ? prep_new_page+0x110/0x110 [ 287.540254][ C1] ? ktime_get_coarse_real_ts64+0x117/0x130 [ 287.540270][ C1] ? current_time+0x1af/0x2f0 [ 287.540285][ C1] ? atime_needs_update+0x810/0x810 [ 287.540301][ C1] handle_pte_fault+0xea0/0x24d0 [ 287.540316][ C1] ? fault_around_bytes_set+0xc0/0xc0 [ 287.540332][ C1] ? do_handle_mm_fault+0x159f/0x2400 [ 287.540346][ C1] ? memcpy+0x56/0x70 [ 287.540360][ C1] do_handle_mm_fault+0x20bc/0x2400 [ 287.540377][ C1] ? numa_migrate_prep+0xe0/0xe0 [ 287.540392][ C1] ? __kasan_check_read+0x11/0x20 [ 287.540406][ C1] ? vfs_read+0x64b/0xd40 [ 287.540419][ C1] ? kernel_read+0x1f0/0x1f0 [ 287.540434][ C1] ? exc_page_fault+0x222/0x830 [ 287.540449][ C1] ? access_error+0x246/0x270 [ 287.540464][ C1] exc_page_fault+0x26f/0x830 [ 287.540484][ C1] asm_exc_page_fault+0x27/0x30 [ 287.540496][ C1] RIP: 0033:0x556172 [ 287.540508][ C1] Code: 48 89 c1 48 8d 35 ce 71 48 00 48 89 f8 bf 01 00 00 00 e8 61 bd ef ff 48 8b 94 24 e8 00 00 00 48 8b 74 24 48 48 89 c7 48 89 c8 <40> 88 74 3b ff 48 89 9c 24 a8 00 00 00 48 89 84 24 b0 00 00 00 48 [ 287.540519][ C1] RSP: 002b:000000c0012c5c90 EFLAGS: 00010216 [ 287.540530][ C1] RAX: 0000000000001000 RBX: 0000000000000001 RCX: 0000000000000000 [ 287.540539][ C1] RDX: 000000c0012678c0 RSI: 000000000000000a RDI: 000000c001421000 [ 287.540549][ C1] RBP: 000000c0012c5d68 R08: 0000000000000030 R09: 00000000600003fd [ 287.540558][ C1] R10: 00000000000003fd R11: ffffffffffffffff R12: 0000000000004000 [ 287.540567][ C1] R13: 4924924924902cb2 R14: 000000c0010f0680 R15: 000000000000008d [ 287.540580][ C1]