[ 35.940139][ T312] device veth1_macvtap entered promiscuous mode [ 35.952088][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.963518][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.086576][ T312] syz-executor.0 (312) used greatest stack depth: 20704 bytes left [ 37.025750][ T8] device bridge_slave_1 left promiscuous mode [ 37.031971][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.040099][ T8] device bridge_slave_0 left promiscuous mode [ 37.046635][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.056126][ T8] device veth1_macvtap left promiscuous mode [ 37.062595][ T8] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.1.74' (ED25519) to the list of known hosts. 2024/08/28 16:20:49 ignoring optional flag "sandboxArg"="0" 2024/08/28 16:20:49 parsed 1 programs 2024/08/28 16:20:49 executed programs: 0 [ 53.585380][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 53.585396][ T30] audit: type=1400 audit(1724862049.253:95): avc: denied { unlink } for pid=355 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 53.623399][ T355] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.670865][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.678174][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.685934][ T361] device bridge_slave_0 entered promiscuous mode [ 53.693403][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.700642][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.707972][ T361] device bridge_slave_1 entered promiscuous mode [ 53.746220][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.753333][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.760868][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.768682][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.785998][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.793496][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.801046][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.808501][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.825979][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.834171][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.842536][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.849915][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.858789][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.866327][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.874932][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.882819][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.895186][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.903247][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.910728][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.918518][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.927698][ T361] device veth0_vlan entered promiscuous mode [ 53.937983][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.947153][ T361] device veth1_macvtap entered promiscuous mode [ 53.956479][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.968598][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.987720][ T30] audit: type=1400 audit(1724862049.653:96): avc: denied { map_create } for pid=367 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 54.009553][ T30] audit: type=1400 audit(1724862049.653:97): avc: denied { map_read map_write } for pid=367 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 154.004826][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 154.011981][ C0] (detected by 0, t=10002 jiffies, g=1497, q=188) [ 154.018310][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294952599-4294942596), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 154.032165][ C0] rcu: rcu_preempt kthread starved for 10004 jiffies! g1497 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 154.043434][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 154.053504][ C0] rcu: RCU grace-period kthread stack dump: [ 154.059585][ C0] task:rcu_preempt state:R running task stack:27976 pid: 14 ppid: 2 flags:0x00004000 [ 154.070513][ C0] Call Trace: [ 154.074028][ C0] [ 154.076824][ C0] __schedule+0xccc/0x1590 [ 154.081402][ C0] ? release_firmware_map_entry+0x190/0x190 [ 154.087559][ C0] ? __kasan_check_write+0x14/0x20 [ 154.092811][ C0] schedule+0x11f/0x1e0 [ 154.096994][ C0] schedule_timeout+0x18c/0x370 [ 154.102005][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 154.107226][ C0] ? console_conditional_schedule+0x30/0x30 [ 154.113116][ C0] ? update_process_times+0x200/0x200 [ 154.118315][ C0] ? prepare_to_swait_event+0x308/0x320 [ 154.124182][ C0] rcu_gp_fqs_loop+0x2af/0xf80 [ 154.129111][ C0] ? debug_smp_processor_id+0x17/0x20 [ 154.134824][ C0] ? __note_gp_changes+0x4ab/0x920 [ 154.140206][ C0] ? rcu_gp_init+0xc30/0xc30 [ 154.145380][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 154.151335][ C0] ? rcu_gp_init+0x9cf/0xc30 [ 154.156047][ C0] rcu_gp_kthread+0xa4/0x350 [ 154.160795][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 154.165636][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 154.170145][ C0] ? __kasan_check_read+0x11/0x20 [ 154.175390][ C0] ? __kthread_parkme+0xb2/0x200 [ 154.180168][ C0] kthread+0x421/0x510 [ 154.184266][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 154.188877][ C0] ? kthread_blkcg+0xd0/0xd0 [ 154.193377][ C0] ret_from_fork+0x1f/0x30 [ 154.197821][ C0] [ 154.200956][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 154.207398][ C0] NMI backtrace for cpu 0 [ 154.211514][ C0] CPU: 0 PID: 368 Comm: syz-executor.0 Not tainted 5.15.156-syzkaller-1070798-g29d153aabd54 #0 [ 154.221765][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 154.232088][ C0] Call Trace: [ 154.235212][ C0] [ 154.237921][ C0] dump_stack_lvl+0x151/0x1c0 [ 154.242856][ C0] ? io_uring_drop_tctx_refs+0x190/0x190 [ 154.248415][ C0] dump_stack+0x15/0x20 [ 154.252407][ C0] nmi_cpu_backtrace+0x2f7/0x300 [ 154.257365][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 154.263459][ C0] ? panic+0x760/0x760 [ 154.267424][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 154.273422][ C0] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 154.279416][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 154.285488][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 154.292090][ C0] rcu_check_gp_kthread_starvation+0x1e3/0x250 [ 154.298233][ C0] print_other_cpu_stall+0x112d/0x1340 [ 154.303603][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 154.308374][ C0] ? __kasan_check_read+0x11/0x20 [ 154.313273][ C0] ? __kasan_check_read+0x11/0x20 [ 154.318199][ C0] rcu_sched_clock_irq+0xaec/0x12f0 [ 154.323412][ C0] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 154.329554][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 154.334620][ C0] update_process_times+0x198/0x200 [ 154.339705][ C0] tick_sched_timer+0x188/0x240 [ 154.344423][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 154.349856][ C0] __hrtimer_run_queues+0x41a/0xad0 [ 154.355195][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 154.360325][ C0] ? clockevents_program_event+0x22f/0x300 [ 154.366175][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 154.372217][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 154.377084][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 154.382956][ C0] sysvec_apic_timer_interrupt+0x95/0xc0 [ 154.388712][ C0] [ 154.391569][ C0] [ 154.394798][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 154.400772][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 154.405735][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 6b ef 12 04 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 154.425595][ C0] RSP: 0018:ffffc90000d57560 EFLAGS: 00000246 [ 154.432031][ C0] RAX: 0000000000000003 RBX: 1ffff920001aaeb0 RCX: ffffffff81552d3f [ 154.439924][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88810a6f9d08 [ 154.447902][ C0] RBP: ffffc90000d57610 R08: dffffc0000000000 R09: ffffed10214df3a2 [ 154.455800][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 154.463701][ C0] R13: ffff88810a6f9d08 R14: 0000000000000003 R15: 1ffff920001aaeb4 [ 154.471711][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 154.478471][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 154.484566][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 154.489664][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 154.495818][ C0] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 154.501981][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 154.508379][ C0] ? unwind_get_return_address+0x4d/0x90 [ 154.514447][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 154.519590][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 154.524955][ C0] ? sock_hash_bucket_hash+0x352/0x7e0 [ 154.530506][ C0] sock_hash_delete_elem+0x177/0x400 [ 154.535783][ C0] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 154.541660][ C0] ? sock_hash_lookup+0x610/0x610 [ 154.546598][ C0] ? ____kasan_kmalloc+0xed/0x110 [ 154.551825][ C0] ? ____kasan_kmalloc+0xdb/0x110 [ 154.557376][ C0] ? sock_map_unref+0x352/0x4d0 [ 154.562486][ C0] bpf_prog_3ffd2c70e20892c6+0x3a/0x49c [ 154.568117][ C0] bpf_trace_run2+0xec/0x210 [ 154.572710][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.579004][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 154.583874][ C0] ? sock_map_unref+0x352/0x4d0 [ 154.588865][ C0] ? sock_map_unref+0x352/0x4d0 [ 154.594164][ C0] __bpf_trace_kfree+0x6f/0x90 [ 154.598932][ C0] ? sock_map_unref+0x352/0x4d0 [ 154.603682][ C0] kfree+0x1f3/0x220 [ 154.607505][ C0] sock_map_unref+0x352/0x4d0 [ 154.612367][ C0] sock_hash_delete_elem+0x388/0x400 [ 154.617730][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 154.622764][ C0] ? sock_hash_lookup+0x610/0x610 [ 154.627647][ C0] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 154.632595][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 154.637694][ C0] ? __local_bh_enable_ip+0x58/0x80 [ 154.643265][ C0] ? _raw_spin_unlock_bh+0x51/0x60 [ 154.648563][ C0] ? kvfree+0x35/0x40 [ 154.652474][ C0] bpf_prog_3ffd2c70e20892c6+0x3a/0x49c [ 154.658229][ C0] bpf_trace_run2+0xec/0x210 [ 154.662738][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 154.667515][ C0] ? sock_map_update_elem_sys+0x439/0x660 [ 154.673084][ C0] ? kvfree+0x35/0x40 [ 154.677119][ C0] ? kvfree+0x35/0x40 [ 154.680884][ C0] __bpf_trace_kfree+0x6f/0x90 [ 154.685661][ C0] ? kvfree+0x35/0x40 [ 154.689580][ C0] kfree+0x1f3/0x220 [ 154.693584][ C0] ? bpf_map_update_value+0x164/0x3c0 [ 154.699064][ C0] kvfree+0x35/0x40 [ 154.702800][ C0] map_update_elem+0x653/0x770 [ 154.707770][ C0] __sys_bpf+0x405/0x760 [ 154.711906][ C0] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 154.717235][ C0] ? __kasan_check_read+0x11/0x20 [ 154.723041][ C0] __x64_sys_bpf+0x7c/0x90 [ 154.727396][ C0] x64_sys_call+0x87f/0x9a0 [ 154.731724][ C0] do_syscall_64+0x3b/0xb0 [ 154.736147][ C0] ? clear_bhb_loop+0x35/0x90 [ 154.740677][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.746593][ C0] RIP: 0033:0x7fb6a9067e69 [ 154.750814][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 154.770630][ C0] RSP: 002b:00007fb6a8be90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 154.779148][ C0] RAX: ffffffffffffffda RBX: 00007fb6a9195f80 RCX: 00007fb6a9067e69 [ 154.786960][ C0] RDX: 0000000000000020 RSI: 0000000020000c80 RDI: 0000000000000002 [ 154.794929][ C0] RBP: 00007fb6a90b447a R08: 0000000000000000 R09: 0000000000000000 [ 154.802826][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.810734][ C0] R13: 000000000000000b R14: 00007fb6a9195f80 R15: 00007ffcf22d2818 [ 154.818992][ C0] [ 199.285450][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 143s! [klogd:89] [ 199.294925][ C1] Modules linked in: [ 199.299447][ C1] CPU: 1 PID: 89 Comm: klogd Not tainted 5.15.156-syzkaller-1070798-g29d153aabd54 #0 [ 199.309761][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 199.320138][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x38b/0xc40 [ 199.327175][ C1] Code: 00 00 00 00 00 fc ff df 41 0f b6 04 16 84 c0 0f 85 ac 00 00 00 48 8b 44 24 08 83 38 00 0f 85 15 01 00 00 45 84 e4 74 09 f3 90 <41> ff cc 75 d9 eb 1b 48 8b 44 24 20 0f b6 04 10 84 c0 0f 85 cd 00 [ 199.349427][ C1] RSP: 0018:ffffc900009e76c0 EFLAGS: 00000206 [ 199.356082][ C1] RAX: ffff8881f7138ac8 RBX: ffff8881f7138ad4 RCX: 0000000000000000 [ 199.364486][ C1] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8881f7138ad4 [ 199.372588][ C1] RBP: ffffc900009e77b0 R08: dffffc0000000000 R09: ffffed103ee2715b [ 199.381235][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000003c0a [ 199.389731][ C1] R13: 1ffff110214df3a1 R14: 1ffff1103ee27159 R15: ffff88810a6f9d08 [ 199.398386][ C1] FS: 00007f238b241380(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 199.408010][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.414540][ C1] CR2: 00007f4fa3c3eae0 CR3: 000000010cb65000 CR4: 00000000003506a0 [ 199.423882][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.432212][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.440418][ C1] Call Trace: [ 199.443739][ C1] [ 199.446449][ C1] ? show_regs+0x58/0x60 [ 199.450495][ C1] ? watchdog_timer_fn+0x4b1/0x5f0 [ 199.455715][ C1] ? proc_watchdog_cpumask+0xd0/0xd0 [ 199.461081][ C1] ? __hrtimer_run_queues+0x41a/0xad0 [ 199.466765][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 199.471989][ C1] ? clockevents_program_event+0x22f/0x300 [ 199.478058][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 199.484027][ C1] ? hrtimer_interrupt+0x40c/0xaa0 [ 199.489266][ C1] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 199.495589][ C1] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 199.501523][ C1] [ 199.504351][ C1] [ 199.507253][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 199.513223][ C1] ? __pv_queued_spin_lock_slowpath+0x38b/0xc40 [ 199.519906][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 199.526405][ C1] ? desc_read+0x1bb/0x420 [ 199.530924][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 199.535955][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 199.541517][ C1] ? _prb_read_valid+0xb43/0xbd0 [ 199.546444][ C1] ? sock_hash_bucket_hash+0x352/0x7e0 [ 199.552219][ C1] sock_hash_delete_elem+0x177/0x400 [ 199.558379][ C1] ? sock_hash_lookup+0x610/0x610 [ 199.563690][ C1] ? sprintf+0xd6/0x120 [ 199.567774][ C1] ? syslog_print+0x8fe/0x990 [ 199.572264][ C1] bpf_prog_3ffd2c70e20892c6+0x3a/0x49c [ 199.577989][ C1] bpf_trace_run2+0xec/0x210 [ 199.583038][ C1] ? __kasan_check_write+0x14/0x20 [ 199.588357][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 199.593230][ C1] ? syslog_print+0x8fe/0x990 [ 199.597984][ C1] ? syslog_print+0x8fe/0x990 [ 199.602594][ C1] __bpf_trace_kfree+0x6f/0x90 [ 199.607578][ C1] ? syslog_print+0x8fe/0x990 [ 199.612310][ C1] kfree+0x1f3/0x220 [ 199.616292][ C1] ? __kasan_check_read+0x11/0x20 [ 199.621258][ C1] syslog_print+0x8fe/0x990 [ 199.625783][ C1] ? do_syslog+0x830/0x830 [ 199.630281][ C1] ? avc_has_perm_noaudit+0x430/0x430 [ 199.636049][ C1] ? cap_capable+0x1d2/0x270 [ 199.640781][ C1] ? io_schedule+0x120/0x120 [ 199.645404][ C1] do_syslog+0x340/0x830 [ 199.649483][ C1] ? devkmsg_release+0x130/0x130 [ 199.654589][ C1] ? fpu_flush_thread+0xf0/0xf0 [ 199.659386][ C1] ? debug_smp_processor_id+0x17/0x20 [ 199.664709][ C1] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 199.671273][ C1] __x64_sys_syslog+0x7c/0x90 [ 199.675982][ C1] x64_sys_call+0x2f9/0x9a0 [ 199.680836][ C1] do_syscall_64+0x3b/0xb0 [ 199.685478][ C1] ? clear_bhb_loop+0x35/0x90 [ 199.690156][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.696142][ C1] RIP: 0033:0x7f238b3a2fa7 [ 199.700481][ C1] Code: 73 01 c3 48 8b 0d 81 ce 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 51 ce 0c 00 f7 d8 64 89 01 48 [ 199.720759][ C1] RSP: 002b:00007fff0f005f58 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 199.729153][ C1] RAX: ffffffffffffffda RBX: 00007f238b5414a0 RCX: 00007f238b3a2fa7 [ 199.737149][ C1] RDX: 00000000000003ff RSI: 00007f238b5414a0 RDI: 0000000000000002 [ 199.745068][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 60dda68bc47eed11 [ 199.752876][ C1] R10: 0000000000004000 R11: 0000000000000206 R12: 00007f238b5414a0 [ 199.761711][ C1] R13: 00007f238b531212 R14: 00007f238b54155a R15: 00007f238b54155a [ 199.769666][ C1] [ 199.772910][ C1] Sending NMI from CPU 1 to CPUs 0: [ 199.778224][ C0] NMI backtrace for cpu 0 [ 199.778239][ C0] CPU: 0 PID: 368 Comm: syz-executor.0 Not tainted 5.15.156-syzkaller-1070798-g29d153aabd54 #0 [ 199.778257][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 199.778266][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 199.778288][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 6b ef 12 04 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 199.778300][ C0] RSP: 0018:ffffc90000d57560 EFLAGS: 00000246 [ 199.778316][ C0] RAX: 0000000000000003 RBX: 1ffff920001aaeb0 RCX: ffffffff81552d3f [ 199.778326][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88810a6f9d08 [ 199.778337][ C0] RBP: ffffc90000d57610 R08: dffffc0000000000 R09: ffffed10214df3a2 [ 199.778347][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 199.778357][ C0] R13: ffff88810a6f9d08 R14: 0000000000000003 R15: 1ffff920001aaeb4 [ 199.778367][ C0] FS: 00007fb6a8be96c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 199.778380][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.778391][ C0] CR2: 00007fb6a91920c0 CR3: 000000010c4da000 CR4: 00000000003506b0 [ 199.778406][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.778414][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.778424][ C0] Call Trace: [ 199.778429][ C0] [ 199.778436][ C0] ? show_regs+0x58/0x60 [ 199.778452][ C0] ? nmi_cpu_backtrace+0x29f/0x300 [ 199.778469][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 199.778487][ C0] ? kvm_wait+0x147/0x180 [ 199.778499][ C0] ? kvm_wait+0x147/0x180 [ 199.778512][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 199.778528][ C0] ? nmi_handle+0xa8/0x280 [ 199.778542][ C0] ? kvm_wait+0x147/0x180 [ 199.778555][ C0] ? default_do_nmi+0x69/0x160 [ 199.778569][ C0] ? exc_nmi+0xad/0x100 [ 199.778581][ C0] ? end_repeat_nmi+0x16/0x31 [ 199.778596][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 199.778614][ C0] ? kvm_wait+0x147/0x180 [ 199.778627][ C0] ? kvm_wait+0x147/0x180 [ 199.778640][ C0] ? kvm_wait+0x147/0x180 [ 199.778653][ C0] [ 199.778657][ C0] [ 199.778661][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 199.778679][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 199.778694][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 199.778711][ C0] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 199.778728][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 199.778744][ C0] ? unwind_get_return_address+0x4d/0x90 [ 199.778760][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 199.778775][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 199.778790][ C0] ? sock_hash_bucket_hash+0x352/0x7e0 [ 199.778808][ C0] sock_hash_delete_elem+0x177/0x400 [ 199.778824][ C0] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 199.778840][ C0] ? sock_hash_lookup+0x610/0x610 [ 199.778855][ C0] ? ____kasan_kmalloc+0xed/0x110 [ 199.778870][ C0] ? ____kasan_kmalloc+0xdb/0x110 [ 199.778883][ C0] ? sock_map_unref+0x352/0x4d0 [ 199.778898][ C0] bpf_prog_3ffd2c70e20892c6+0x3a/0x49c [ 199.778910][ C0] bpf_trace_run2+0xec/0x210 [ 199.778934][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.778950][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 199.778965][ C0] ? sock_map_unref+0x352/0x4d0 [ 199.778980][ C0] ? sock_map_unref+0x352/0x4d0 [ 199.778994][ C0] __bpf_trace_kfree+0x6f/0x90 [ 199.779009][ C0] ? sock_map_unref+0x352/0x4d0 [ 199.779023][ C0] kfree+0x1f3/0x220 [ 199.779039][ C0] sock_map_unref+0x352/0x4d0 [ 199.779055][ C0] sock_hash_delete_elem+0x388/0x400 [ 199.779070][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 199.779085][ C0] ? sock_hash_lookup+0x610/0x610 [ 199.779099][ C0] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 199.779114][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 199.779128][ C0] ? __local_bh_enable_ip+0x58/0x80 [ 199.779144][ C0] ? _raw_spin_unlock_bh+0x51/0x60 [ 199.779158][ C0] ? kvfree+0x35/0x40 [ 199.779172][ C0] bpf_prog_3ffd2c70e20892c6+0x3a/0x49c [ 199.779183][ C0] bpf_trace_run2+0xec/0x210 [ 199.779198][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 199.779212][ C0] ? sock_map_update_elem_sys+0x439/0x660 [ 199.779227][ C0] ? kvfree+0x35/0x40 [ 199.779240][ C0] ? kvfree+0x35/0x40 [ 199.779252][ C0] __bpf_trace_kfree+0x6f/0x90 [ 199.779265][ C0] ? kvfree+0x35/0x40 [ 199.779277][ C0] kfree+0x1f3/0x220 [ 199.779291][ C0] ? bpf_map_update_value+0x164/0x3c0 [ 199.779306][ C0] kvfree+0x35/0x40 [ 199.779318][ C0] map_update_elem+0x653/0x770 [ 199.779333][ C0] __sys_bpf+0x405/0x760 [ 199.779346][ C0] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 199.779362][ C0] ? __kasan_check_read+0x11/0x20 [ 199.779377][ C0] __x64_sys_bpf+0x7c/0x90 [ 199.779391][ C0] x64_sys_call+0x87f/0x9a0 [ 199.779405][ C0] do_syscall_64+0x3b/0xb0 [ 199.779419][ C0] ? clear_bhb_loop+0x35/0x90 [ 199.779432][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.779447][ C0] RIP: 0033:0x7fb6a9067e69 [ 199.779477][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 199.779488][ C0] RSP: 002b:00007fb6a8be90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.779502][ C0] RAX: ffffffffffffffda RBX: 00007fb6a9195f80 RCX: 00007fb6a9067e69 [ 199.779512][ C0] RDX: 0000000000000020 RSI: 0000000020000c80 RDI: 0000000000000002 [ 199.779522][ C0] RBP: 00007fb6a90b447a R08: 0000000000000000 R09: 0000000000000000 [ 199.779531][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.779540][ C0] R13: 000000000000000b R14: 00007fb6a9195f80 R15: 00007ffcf22d2818 [ 199.779552][ C0]