syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) loop6: detected capacity change from 0 to 264192 FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 26715 jiffies s: 669 root: 0x1/. rcu: blocking rcu_node structures (internal RCU debug): Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 4923 Comm: syz-executor.6 Not tainted 6.2.0-rc1-next-20221226 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:native_apic_mem_read+0x3a/0x50 Code: fb 48 8d bb 00 c0 5f ff 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 0c 8b 83 00 c0 5f ff <5b> e9 d4 97 2f 03 e8 eb ad 6b 00 eb ed 66 0f 1f 84 00 00 00 00 00 RSP: 0018:ffff88806ce096f0 EFLAGS: 00000046 RAX: 00000000000400f6 RBX: 0000000000000300 RCX: 0000000000000100 RDX: 0000000000000000 RSI: ffffffff81561639 RDI: ffffffffff5fc300 RBP: fffffbfff0a5518c R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 R13: ffff88806ce3a070 R14: ffff88806ce3a228 R15: ffff88806ce097c0 FS: 00007fc871a8c700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffea168ec48 CR3: 000000001418a000 CR4: 0000000000350ef0 Call Trace: native_apic_wait_icr_idle+0x51/0x80 __irq_work_queue_local+0x14e/0x180 irq_work_queue_on+0x129/0x140 __rcu_read_unlock+0x425/0x520 perf_event_output_forward+0x14d/0x280 __perf_event_overflow+0x3ed/0x760 perf_swevent_event+0x344/0x550 perf_tp_event+0x2c3/0xc90 perf_trace_run_bpf_submit+0xf3/0x1c0 perf_trace_preemptirq_template+0x272/0x410 trace_hardirqs_on+0xe3/0x130 asm_sysvec_irq_work+0x1a/0x20 RIP: 0010:kasan_quarantine_put+0x91/0x1f0 Code: c7 45 00 00 00 00 00 48 03 58 10 48 89 58 10 48 81 fb 00 00 10 00 77 63 41 bc 01 00 00 00 4d 85 ed 74 43 e8 d1 f3 d2 ff fb 5b <44> 89 e0 5d 41 5c 41 5d 41 5e e9 04 dc c3 02 e8 fb f4 d2 ff 48 c7 RSP: 0018:ffff88806ce09de8 EFLAGS: 00000206 RAX: 0000000000048d18 RBX: ffff88800d1835f0 RCX: ffffffff812b3b2f RDX: 0000000000000000 RSI: 0000000000000101 RDI: 0000000000000000 RBP: ffff88800d1835f0 R08: 0000000000000001 R09: ffffffff8763296f R10: fffffbfff0ec652d R11: 0000000000000001 R12: 0000000000000001 R13: 0000000000000200 R14: 0000000000000000 R15: ffff88800844f780 kmem_cache_free+0xfb/0x610 rcu_core+0x7be/0x19c0 __do_softirq+0x1c7/0x8f9 __irq_exit_rcu+0x11b/0x180 irq_exit_rcu+0x9/0x30 sysvec_apic_timer_interrupt+0x92/0xc0 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:generic_exec_single+0x210/0x300 Code: 31 e4 4c 89 ef e8 60 87 02 03 e9 e8 fe ff ff e8 16 91 0a 00 e8 11 a6 11 00 4c 89 ef e8 49 87 02 03 e8 c4 a4 11 00 fb 45 31 e4 c8 fe ff ff e8 f6 90 0a 00 0f 0b e9 73 ff ff ff 4c 89 f7 e8 07 RSP: 0018:ffff88800da77b48 EFLAGS: 00000246 RAX: 00000000000001b5 RBX: 0000000000000200 RCX: ffffffff812b3b2f RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffffff8157d660 R08: 0000000000000001 R09: ffffffff8763296f R10: fffffbfff0ec652d R11: 0000000000000001 R12: 0000000000000000 R13: ffff88800da77c78 R14: ffff88800da77bc8 R15: 0000000000000200 smp_call_function_single+0x18d/0x470 task_function_call+0xe5/0x180 perf_install_in_context+0x2cb/0x570 __do_sys_perf_event_open+0x187c/0x2920 do_syscall_64+0x3f/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc RIP: 0033:0x7fc874516b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fc871a8c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a RAX: ffffffffffffffda RBX: 00007fc874629f60 RCX: 00007fc874516b19 RDX: ffffffefffffffff RSI: 0000000000000000 RDI: 0000000020000280 RBP: 00007fc874570f6d R08: 0000000000000000 R09: 0000000000000000 R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe641326df R14: 00007fc871a8c300 R15: 0000000000022000 ---------------- Code disassembly (best guess): 0: fb sti 1: 48 8d bb 00 c0 5f ff lea -0xa04000(%rbx),%rdi 8: 48 89 fa mov %rdi,%rdx b: 48 c1 ea 03 shr $0x3,%rdx f: 0f b6 14 02 movzbl (%rdx,%rax,1),%edx 13: 48 89 f8 mov %rdi,%rax 16: 83 e0 07 and $0x7,%eax 19: 83 c0 03 add $0x3,%eax 1c: 38 d0 cmp %dl,%al 1e: 7c 04 jl 0x24 20: 84 d2 test %dl,%dl 22: 75 0c jne 0x30 24: 8b 83 00 c0 5f ff mov -0xa04000(%rbx),%eax * 2a: 5b pop %rbx <-- trapping instruction 2b: e9 d4 97 2f 03 jmpq 0x32f9804 30: e8 eb ad 6b 00 callq 0x6bae20 35: eb ed jmp 0x24 37: 66 0f 1f 84 00 00 00 nopw 0x0(%rax,%rax,1) 3e: 00 00