./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3047716685 <...> Warning: Permanently added '10.128.1.188' (ED25519) to the list of known hosts. execve("./syz-executor3047716685", ["./syz-executor3047716685"], 0x7ffc0602c730 /* 10 vars */) = 0 brk(NULL) = 0x55556342c000 brk(0x55556342cd00) = 0x55556342cd00 arch_prctl(ARCH_SET_FS, 0x55556342c380) = 0 set_tid_address(0x55556342c650) = 5068 set_robust_list(0x55556342c660, 24) = 0 rseq(0x55556342cca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3047716685", 4096) = 28 getrandom("\x38\x59\x26\xff\xe8\x5c\xd2\xa4", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556342cd00 brk(0x55556344dd00) = 0x55556344dd00 brk(0x55556344e000) = 0x55556344e000 mprotect(0x7f50a0d2d000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556342c650) = 5069 ./strace-static-x86_64: Process 5069 attached [pid 5069] set_robust_list(0x55556342c660, 24) = 0 [pid 5069] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5069] setpgid(0, 0) = 0 [pid 5069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5069] write(3, "1000", 4) = 4 [pid 5069] close(3) = 0 [pid 5069] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=4, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5069] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5069] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5069] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="timer_start", prog_fd=4}}, 16) = 5 [ 56.164691][ T5063] ------------[ cut here ]------------ [ 56.164917][ T5063] [ 56.164921][ T5063] ====================================================== [ 56.164924][ T5063] WARNING: possible circular locking dependency detected [ 56.164928][ T5063] 6.8.0-syzkaller-05271-gf99c5f563c17 #0 Not tainted [ 56.164933][ T5063] ------------------------------------------------------ [ 56.164936][ T5063] sshd/5063 is trying to acquire lock: [ 56.164940][ T5063] ffffffff8e125be0 (console_owner){....}-{0:0}, at: console_flush_all+0x14a/0xec0 [ 56.165089][ T5063] [ 56.165089][ T5063] but task is already holding lock: [ 56.165094][ T5063] ffff8880b952a758 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 56.165122][ T5063] [ 56.165122][ T5063] which lock already depends on the new lock. [ 56.165122][ T5063] [ 56.165125][ T5063] [ 56.165125][ T5063] the existing dependency chain (in reverse order) is: [ 56.165128][ T5063] [ 56.165128][ T5063] -> #4 (&base->lock){-.-.}-{2:2}: [ 56.165140][ T5063] lock_acquire+0x1e4/0x530 [ 56.165151][ T5063] _raw_spin_lock_irqsave+0xd5/0x120 [ 56.165174][ T5063] lock_timer_base+0x112/0x240 [ 56.165184][ T5063] __mod_timer+0x1ca/0xeb0 [ 56.165195][ T5063] worker_enter_idle+0x31d/0x4d0 [ 56.165204][ T5063] worker_thread+0x9c0/0xd70 [ 56.165212][ T5063] kthread+0x2f0/0x390 [ 56.165223][ T5063] ret_from_fork+0x4b/0x80 [ 56.165235][ T5063] ret_from_fork_asm+0x1a/0x30 [ 56.165249][ T5063] [ 56.165249][ T5063] -> #3 (&pool->lock){-.-.}-{2:2}: [ 56.165261][ T5063] lock_acquire+0x1e4/0x530 [ 56.165268][ T5063] _raw_spin_lock+0x2e/0x40 [ 56.165277][ T5063] __queue_work+0x6ec/0xec0 [ 56.165286][ T5063] queue_work_on+0x14f/0x250 [ 56.165294][ T5063] rpm_suspend+0x11bd/0x1c10 [ 56.165310][ T5063] __pm_runtime_idle+0x131/0x1a0 [ 56.165320][ T5063] __device_attach+0x3e5/0x520 [ 56.165332][ T5063] bus_probe_device+0x189/0x260 [ 56.165341][ T5063] device_add+0x8ff/0xca0 [ 56.165353][ T5063] serial_base_port_add+0x2b6/0x3f0 [ 56.165369][ T5063] serial_core_register_port+0x393/0x1e30 [ 56.165477][ T5063] serial8250_register_8250_port+0x1433/0x1cd0 [ 56.165497][ T5063] serial_pnp_probe+0x7d5/0xa20 [ 56.165512][ T5063] pnp_device_probe+0x2ba/0x460 [ 56.165523][ T5063] really_probe+0x29e/0xc50 [ 56.165537][ T5063] __driver_probe_device+0x1a2/0x3e0 [ 56.165549][ T5063] driver_probe_device+0x50/0x430 [ 56.165560][ T5063] __driver_attach+0x45f/0x710 [ 56.165571][ T5063] bus_for_each_dev+0x239/0x2b0 [ 56.165580][ T5063] bus_add_driver+0x347/0x620 [ 56.165588][ T5063] driver_register+0x23a/0x320 [ 56.165596][ T5063] serial8250_init+0x9e/0x170 [ 56.165608][ T5063] do_one_initcall+0x238/0x830 [ 56.165621][ T5063] do_initcall_level+0x157/0x210 [ 56.165630][ T5063] do_initcalls+0x3f/0x80 [ 56.165637][ T5063] kernel_init_freeable+0x435/0x5d0 [ 56.165666][ T5063] kernel_init+0x1d/0x2a0 [ 56.165681][ T5063] ret_from_fork+0x4b/0x80 [ 56.165694][ T5063] ret_from_fork_asm+0x1a/0x30 [ 56.165705][ T5063] [ 56.165705][ T5063] -> #2 (&dev->power.lock){-...}-{2:2}: [ 56.165725][ T5063] lock_acquire+0x1e4/0x530 [ 56.165735][ T5063] _raw_spin_lock_irqsave+0xd5/0x120 [ 56.165746][ T5063] __pm_runtime_resume+0x112/0x180 [ 56.165758][ T5063] __uart_start+0x17a/0x3c0 [ 56.165769][ T5063] uart_write+0x427/0x5c0 [ 56.165779][ T5063] n_tty_write+0xd6a/0x1230 [ 56.165788][ T5063] file_tty_write+0x54f/0x9b0 [ 56.165800][ T5063] vfs_write+0xa84/0xcb0 [ 56.165808][ T5063] ksys_write+0x1a0/0x2c0 [ 56.165816][ T5063] do_syscall_64+0xfb/0x240 [ 56.165826][ T5063] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 56.165839][ T5063] [ 56.165839][ T5063] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 56.165850][ T5063] lock_acquire+0x1e4/0x530 [ 56.165858][ T5063] _raw_spin_lock_irqsave+0xd5/0x120 [ 56.165867][ T5063] serial8250_console_write+0x1a8/0x1840 [ 56.165879][ T5063] console_flush_all+0x80b/0xec0 [ 56.165891][ T5063] console_unlock+0x13b/0x4d0 [ 56.165901][ T5063] vprintk_emit+0x509/0x720 [ 56.165910][ T5063] _printk+0xd5/0x120 [ 56.165918][ T5063] register_console+0x70a/0xcd0 [ 56.165929][ T5063] univ8250_console_init+0x49/0x50 [ 56.165939][ T5063] console_init+0x198/0x680 [ 56.165947][ T5063] start_kernel+0x2d3/0x500 [ 56.165954][ T5063] x86_64_start_reservations+0x2a/0x30 [ 56.165964][ T5063] x86_64_start_kernel+0x99/0xa0 [ 56.165975][ T5063] common_startup_64+0x13e/0x147 [ 56.165984][ T5063] [ 56.165984][ T5063] -> #0 (console_owner){....}-{0:0}: [ 56.165996][ T5063] validate_chain+0x18cb/0x58e0 [ 56.166006][ T5063] __lock_acquire+0x1346/0x1fd0 [ 56.166013][ T5063] lock_acquire+0x1e4/0x530 [ 56.166021][ T5063] console_flush_all+0x7ba/0xec0 [ 56.166031][ T5063] console_unlock+0x13b/0x4d0 [ 56.166040][ T5063] vprintk_emit+0x509/0x720 [ 56.166049][ T5063] _printk+0xd5/0x120 [ 56.166057][ T5063] report_bug+0x346/0x500 [ 56.166068][ T5063] handle_bug+0x3e/0x70 [ 56.166078][ T5063] exc_invalid_op+0x1a/0x50 [ 56.166087][ T5063] asm_exc_invalid_op+0x1a/0x20 [ 56.166098][ T5063] __local_bh_enable_ip+0x1be/0x200 [ 56.166106][ T5063] sock_hash_delete_elem+0x1a6/0x300 [ 56.166115][ T5063] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 56.166126][ T5063] bpf_trace_run2+0x204/0x420 [ 56.166135][ T5063] enqueue_timer+0x396/0x550 [ 56.166145][ T5063] __mod_timer+0x953/0xeb0 [ 56.166157][ T5063] sk_reset_timer+0x23/0xc0 [ 56.166169][ T5063] tcp_event_new_data_sent+0x203/0x360 [ 56.166181][ T5063] tcp_write_xmit+0x1468/0x6100 [ 56.166190][ T5063] __tcp_push_pending_frames+0x9b/0x360 [ 56.166200][ T5063] tcp_sendmsg_locked+0x42cc/0x4d00 [ 56.166209][ T5063] tcp_sendmsg+0x30/0x50 [ 56.166216][ T5063] __sock_sendmsg+0x1a6/0x270 [ 56.166223][ T5063] sock_write_iter+0x2dd/0x400 [ 56.166235][ T5063] vfs_write+0xa84/0xcb0 [ 56.166243][ T5063] ksys_write+0x1a0/0x2c0 [ 56.166251][ T5063] do_syscall_64+0xfb/0x240 [ 56.166260][ T5063] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 56.166272][ T5063] [ 56.166272][ T5063] other info that might help us debug this: [ 56.166272][ T5063] [ 56.166274][ T5063] Chain exists of: [ 56.166274][ T5063] console_owner --> &pool->lock --> &base->lock [ 56.166274][ T5063] [ 56.166288][ T5063] Possible unsafe locking scenario: [ 56.166288][ T5063] [ 56.166290][ T5063] CPU0 CPU1 [ 56.166292][ T5063] ---- ---- [ 56.166294][ T5063] lock(&base->lock); [ 56.166299][ T5063] lock(&pool->lock); [ 56.166305][ T5063] lock(&base->lock); [ 56.166310][ T5063] lock(console_owner); [ 56.166315][ T5063] [ 56.166315][ T5063] *** DEADLOCK *** [ 56.166315][ T5063] [ 56.166317][ T5063] 5 locks held by sshd/5063: [ 56.166323][ T5063] #0: ffff88802cf8a718 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x22/0x50 [ 56.166344][ T5063] #1: ffff8880b952a758 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 56.166368][ T5063] #2: ffffffff8e131920 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x114/0x420 [ 56.166388][ T5063] #3: ffffffff8e00d500 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 56.166409][ T5063] #4: ffffffff8e00d130 (console_srcu){....}-{0:0}, at: console_flush_all+0x14a/0xec0 [ 56.166431][ T5063] [ 56.166431][ T5063] stack backtrace: [ 56.166435][ T5063] CPU: 1 PID: 5063 Comm: sshd Not tainted 6.8.0-syzkaller-05271-gf99c5f563c17 #0 [ 56.166445][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 56.166451][ T5063] Call Trace: [ 56.166456][ T5063] [ 56.166460][ T5063] dump_stack_lvl+0x1e7/0x2e0 [ 56.166472][ T5063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 56.166485][ T5063] ? print_circular_bug+0x130/0x1a0 [ 56.166496][ T5063] check_noncircular+0x36a/0x4a0 [ 56.166508][ T5063] ? __pfx_check_noncircular+0x10/0x10 [ 56.166519][ T5063] ? lockdep_lock+0x123/0x2b0 [ 56.166533][ T5063] ? add_lock_to_list+0x1de/0x2e0 [ 56.166545][ T5063] validate_chain+0x18cb/0x58e0 [ 56.166561][ T5063] ? __pfx_validate_chain+0x10/0x10 [ 56.166572][ T5063] ? sprintf+0xda/0x120 [ 56.166586][ T5063] ? vsnprintf+0x1cc3/0x1da0 [ 56.166600][ T5063] ? info_print_prefix+0x204/0x310 [ 56.166615][ T5063] ? mark_lock+0x9a/0x350 [ 56.166625][ T5063] __lock_acquire+0x1346/0x1fd0 [ 56.166637][ T5063] lock_acquire+0x1e4/0x530 [ 56.166651][ T5063] ? console_flush_all+0x14a/0xec0 [ 56.166663][ T5063] ? __pfx_lock_acquire+0x10/0x10 [ 56.166672][ T5063] ? __pfx_lock_release+0x10/0x10 [ 56.166680][ T5063] ? do_raw_spin_lock+0x14f/0x370 [ 56.166693][ T5063] ? do_raw_spin_unlock+0x13c/0x8b0 [ 56.166704][ T5063] ? console_flush_all+0x3d0/0xec0 [ 56.166716][ T5063] ? console_flush_all+0x14a/0xec0 [ 56.166727][ T5063] console_flush_all+0x7ba/0xec0 [ 56.166743][ T5063] ? console_flush_all+0x14a/0xec0 [ 56.166754][ T5063] ? console_flush_all+0x14a/0xec0 [ 56.166768][ T5063] ? __pfx_console_flush_all+0x10/0x10 [ 56.166780][ T5063] ? __pfx_lock_acquire+0x10/0x10 [ 56.166789][ T5063] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 56.166800][ T5063] ? validate_chain+0x15a2/0x58e0 [ 56.166811][ T5063] console_unlock+0x13b/0x4d0 [ 56.166823][ T5063] ? __pfx_console_unlock+0x10/0x10 [ 56.166833][ T5063] ? _printk+0xd5/0x120 [ 56.166842][ T5063] ? _printk+0xd5/0x120 [ 56.166850][ T5063] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 56.166863][ T5063] ? __pfx_validate_chain+0x10/0x10 [ 56.166874][ T5063] vprintk_emit+0x509/0x720 [ 56.166885][ T5063] ? __pfx_vprintk_emit+0x10/0x10 [ 56.166897][ T5063] ? lockdep_unlock+0x16a/0x300 [ 56.166911][ T5063] _printk+0xd5/0x120 [ 56.166920][ T5063] ? report_bug+0x25e/0x500 [ 56.166932][ T5063] ? __pfx__printk+0x10/0x10 [ 56.166942][ T5063] ? __lock_acquire+0x1346/0x1fd0 [ 56.166951][ T5063] ? find_bug+0xa3/0x390 [ 56.166962][ T5063] ? __local_bh_enable_ip+0x1be/0x200 [ 56.166971][ T5063] report_bug+0x346/0x500 [ 56.166989][ T5063] ? __local_bh_enable_ip+0x1be/0x200 [ 56.166999][ T5063] handle_bug+0x3e/0x70 [ 56.167010][ T5063] exc_invalid_op+0x1a/0x50 [ 56.167021][ T5063] asm_exc_invalid_op+0x1a/0x20 [ 56.167033][ T5063] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 56.167044][ T5063] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 9c e1 86 8f 80 e1 07 80 c1 03 38 [ 56.167052][ T5063] RSP: 0018:ffffc900039771a0 EFLAGS: 00010046 [ 56.167059][ T5063] RAX: 0000000000000000 RBX: 1ffff9200072ee38 RCX: 0000000000000001 [ 56.167066][ T5063] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895fc7a6 [ 56.167071][ T5063] RBP: ffffc90003977260 R08: ffff88802ee3680b R09: 1ffff11005dc6d01 [ 56.167078][ T5063] R10: dffffc0000000000 R11: ffffed1005dc6d02 R12: dffffc0000000000 [ 56.167084][ T5063] R13: 0000000000000004 R14: ffffc900039771e0 R15: 0000000000000201 [ 56.167093][ T5063] ? sock_hash_delete_elem+0x1a6/0x300 [ 56.167104][ T5063] ? sock_hash_delete_elem+0x1a6/0x300 [ 56.167113][ T5063] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 56.167122][ T5063] ? sock_hash_delete_elem+0x1a6/0x300 [ 56.167130][ T5063] ? do_raw_spin_unlock+0x13c/0x8b0 [ 56.167142][ T5063] ? sock_hash_delete_elem+0xb0/0x300 [ 56.167153][ T5063] sock_hash_delete_elem+0x1a6/0x300 [ 56.167163][ T5063] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 56.167174][ T5063] bpf_trace_run2+0x204/0x420 [ 56.167184][ T5063] ? bpf_trace_run2+0x114/0x420 [ 56.167193][ T5063] ? __pfx_bpf_trace_run2+0x10/0x10 [ 56.167202][ T5063] ? __pfx_debug_object_activate+0x10/0x10 [ 56.167211][ T5063] ? __tcp_transmit_skb+0x21fe/0x3b80 [ 56.167224][ T5063] enqueue_timer+0x396/0x550 [ 56.167235][ T5063] __mod_timer+0x953/0xeb0 [ 56.167249][ T5063] ? __pfx___mod_timer+0x10/0x10 [ 56.167260][ T5063] ? seqcount_lockdep_reader_access+0x157/0x220 [ 56.167273][ T5063] ? lockdep_hardirqs_on+0x99/0x150 [ 56.167285][ T5063] ? __asan_memset+0x23/0x50 [ 56.167295][ T5063] sk_reset_timer+0x23/0xc0 [ 56.167308][ T5063] tcp_event_new_data_sent+0x203/0x360 [ 56.167321][ T5063] tcp_write_xmit+0x1468/0x6100 [ 56.167341][ T5063] __tcp_push_pending_frames+0x9b/0x360 [ 56.167353][ T5063] tcp_sendmsg_locked+0x42cc/0x4d00 [ 56.167373][ T5063] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 56.167382][ T5063] ? __local_bh_enable_ip+0x168/0x200 [ 56.167391][ T5063] ? do_raw_spin_unlock+0x13c/0x8b0 [ 56.167405][ T5063] tcp_sendmsg+0x30/0x50 [ 56.167414][ T5063] __sock_sendmsg+0x1a6/0x270 [ 56.167423][ T5063] sock_write_iter+0x2dd/0x400 [ 56.167435][ T5063] ? __pfx_sock_write_iter+0x10/0x10 [ 56.167450][ T5063] ? bpf_lsm_file_permission+0x9/0x10 [ 56.167461][ T5063] ? security_file_permission+0x7f/0xa0 [ 56.167472][ T5063] vfs_write+0xa84/0xcb0 [ 56.167483][ T5063] ? __pfx_vfs_write+0x10/0x10 [ 56.167492][ T5063] ? __set_current_blocked+0x310/0x380 [ 56.167503][ T5063] ? __might_fault+0xc6/0x120 [ 56.167513][ T5063] ? __fdget_pos+0x1a2/0x320 [ 56.167525][ T5063] ksys_write+0x1a0/0x2c0 [ 56.167535][ T5063] ? __pfx_ksys_write+0x10/0x10 [ 56.167545][ T5063] ? do_syscall_64+0x10a/0x240 [ 56.167556][ T5063] ? do_syscall_64+0xb6/0x240 [ 56.167566][ T5063] do_syscall_64+0xfb/0x240 [ 56.167577][ T5063] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 56.167589][ T5063] RIP: 0033:0x7f83c1b16bf2 [ 56.167597][ T5063] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83 [ 56.167604][ T5063] RSP: 002b:00007fff7ce5ec08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.167613][ T5063] RAX: ffffffffffffffda RBX: 0000000000000044 RCX: 00007f83c1b16bf2 [ 56.167619][ T5063] RDX: 0000000000000044 RSI: 000055bcb55ef960 RDI: 0000000000000004 [ 56.167625][ T5063] RBP: 000055bcb55f8de0 R08: 0000000000000000 R09: 0000000000000000 [ 56.167630][ T5063] R10: 0000000000000000 R11: 0000000000000246 R12: 000055bc9f526aa4 [ 56.167635][ T5063] R13: 0000000000000038 R14: 000055bc9f5273e8 R15: 00007fff7ce5ec78 [ 56.167649][ T5063] [ 57.533576][ T5063] WARNING: CPU: 1 PID: 5063 at kernel/softirq.c:362 __local_bh_enable_ip+0x1be/0x200 [ 57.543019][ T5063] Modules linked in: [ 57.546892][ T5063] CPU: 1 PID: 5063 Comm: sshd Not tainted 6.8.0-syzkaller-05271-gf99c5f563c17 #0 [ 57.555976][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 57.566020][ T5063] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 57.571994][ T5063] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 9c e1 86 8f 80 e1 07 80 c1 03 38 [ 57.591586][ T5063] RSP: 0018:ffffc900039771a0 EFLAGS: 00010046 [ 57.597632][ T5063] RAX: 0000000000000000 RBX: 1ffff9200072ee38 RCX: 0000000000000001 [ 57.605582][ T5063] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895fc7a6 [ 57.613548][ T5063] RBP: ffffc90003977260 R08: ffff88802ee3680b R09: 1ffff11005dc6d01 [ 57.621499][ T5063] R10: dffffc0000000000 R11: ffffed1005dc6d02 R12: dffffc0000000000 [ 57.629447][ T5063] R13: 0000000000000004 R14: ffffc900039771e0 R15: 0000000000000201 [ 57.637397][ T5063] FS: 00007f83c1fcf800(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 57.646306][ T5063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.652888][ T5063] CR2: 00007f50a0d34110 CR3: 00000000772de000 CR4: 00000000003506f0 [ 57.660850][ T5063] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.668804][ T5063] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.676754][ T5063] Call Trace: [ 57.680013][ T5063] [ 57.682925][ T5063] ? __warn+0x163/0x4b0 [ 57.687061][ T5063] ? __local_bh_enable_ip+0x1be/0x200 [ 57.692425][ T5063] ? report_bug+0x2b3/0x500 [ 57.696913][ T5063] ? __local_bh_enable_ip+0x1be/0x200 [ 57.702260][ T5063] ? handle_bug+0x3e/0x70 [ 57.706570][ T5063] ? exc_invalid_op+0x1a/0x50 [ 57.711227][ T5063] ? asm_exc_invalid_op+0x1a/0x20 [ 57.716235][ T5063] ? sock_hash_delete_elem+0x1a6/0x300 [ 57.721671][ T5063] ? __local_bh_enable_ip+0x1be/0x200 [ 57.727021][ T5063] ? sock_hash_delete_elem+0x1a6/0x300 [ 57.732477][ T5063] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 57.738192][ T5063] ? sock_hash_delete_elem+0x1a6/0x300 [ 57.743656][ T5063] ? do_raw_spin_unlock+0x13c/0x8b0 [ 57.748905][ T5063] ? sock_hash_delete_elem+0xb0/0x300 [ 57.754283][ T5063] sock_hash_delete_elem+0x1a6/0x300 [ 57.759557][ T5063] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 57.764998][ T5063] bpf_trace_run2+0x204/0x420 [ 57.769655][ T5063] ? bpf_trace_run2+0x114/0x420 [ 57.774490][ T5063] ? __pfx_bpf_trace_run2+0x10/0x10 [ 57.779666][ T5063] ? __pfx_debug_object_activate+0x10/0x10 [ 57.785450][ T5063] ? __tcp_transmit_skb+0x21fe/0x3b80 [ 57.790892][ T5063] enqueue_timer+0x396/0x550 [ 57.795464][ T5063] __mod_timer+0x953/0xeb0 [ 57.799867][ T5063] ? __pfx___mod_timer+0x10/0x10 [ 57.804794][ T5063] ? seqcount_lockdep_reader_access+0x157/0x220 [ 57.811036][ T5063] ? lockdep_hardirqs_on+0x99/0x150 [ 57.816223][ T5063] ? __asan_memset+0x23/0x50 [ 57.820796][ T5063] sk_reset_timer+0x23/0xc0 [ 57.825280][ T5063] tcp_event_new_data_sent+0x203/0x360 [ 57.830723][ T5063] tcp_write_xmit+0x1468/0x6100 [ 57.835581][ T5063] __tcp_push_pending_frames+0x9b/0x360 [ 57.841108][ T5063] tcp_sendmsg_locked+0x42cc/0x4d00 [ 57.846293][ T5063] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 57.851814][ T5063] ? __local_bh_enable_ip+0x168/0x200 [ 57.857162][ T5063] ? do_raw_spin_unlock+0x13c/0x8b0 [ 57.862344][ T5063] tcp_sendmsg+0x30/0x50 [ 57.866564][ T5063] __sock_sendmsg+0x1a6/0x270 [ 57.871221][ T5063] sock_write_iter+0x2dd/0x400 [ 57.875964][ T5063] ? __pfx_sock_write_iter+0x10/0x10 [ 57.881252][ T5063] ? bpf_lsm_file_permission+0x9/0x10 [ 57.886616][ T5063] ? security_file_permission+0x7f/0xa0 [ 57.892139][ T5063] vfs_write+0xa84/0xcb0 [ 57.896361][ T5063] ? __pfx_vfs_write+0x10/0x10 [ 57.901100][ T5063] ? __set_current_blocked+0x310/0x380 [ 57.906538][ T5063] ? __might_fault+0xc6/0x120 [ 57.911190][ T5063] ? __fdget_pos+0x1a2/0x320 [ 57.915758][ T5063] ksys_write+0x1a0/0x2c0 [ 57.920066][ T5063] ? __pfx_ksys_write+0x10/0x10 [ 57.924907][ T5063] ? do_syscall_64+0x10a/0x240 [ 57.929672][ T5063] ? do_syscall_64+0xb6/0x240 [ 57.934328][ T5063] do_syscall_64+0xfb/0x240 [ 57.938814][ T5063] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 57.944686][ T5063] RIP: 0033:0x7f83c1b16bf2 [ 57.949079][ T5063] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83 [ 57.968663][ T5063] RSP: 002b:00007fff7ce5ec08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.977055][ T5063] RAX: ffffffffffffffda RBX: 0000000000000044 RCX: 00007f83c1b16bf2 [ 57.985005][ T5063] RDX: 0000000000000044 RSI: 000055bcb55ef960 RDI: 0000000000000004 [ 57.992954][ T5063] RBP: 000055bcb55f8de0 R08: 0000000000000000 R09: 0000000000000000 [ 58.000921][ T5063] R10: 0000000000000000 R11: 0000000000000246 R12: 000055bc9f526aa4 [ 58.008868][ T5063] R13: 0000000000000038 R14: 000055bc9f5273e8 R15: 00007fff7ce5ec78 [ 58.016855][ T5063] [ 58.019873][ T5063] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 58.027127][ T5063] CPU: 1 PID: 5063 Comm: sshd Not tainted 6.8.0-syzkaller-05271-gf99c5f563c17 #0 [ 58.036210][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 58.046241][ T5063] Call Trace: [ 58.049499][ T5063] [ 58.052411][ T5063] dump_stack_lvl+0x1e7/0x2e0 [ 58.057068][ T5063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 58.062243][ T5063] ? __pfx__printk+0x10/0x10 [ 58.066813][ T5063] ? vscnprintf+0x5d/0x90 [ 58.071123][ T5063] panic+0x349/0x860 [ 58.074994][ T5063] ? __warn+0x172/0x4b0 [ 58.079130][ T5063] ? __pfx_panic+0x10/0x10 [ 58.083525][ T5063] __warn+0x31e/0x4b0 [ 58.087485][ T5063] ? __local_bh_enable_ip+0x1be/0x200 [ 58.092832][ T5063] report_bug+0x2b3/0x500 [ 58.097142][ T5063] ? __local_bh_enable_ip+0x1be/0x200 [ 58.102495][ T5063] handle_bug+0x3e/0x70 [ 58.106629][ T5063] exc_invalid_op+0x1a/0x50 [ 58.111124][ T5063] asm_exc_invalid_op+0x1a/0x20 [ 58.115957][ T5063] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 58.121916][ T5063] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 9c e1 86 8f 80 e1 07 80 c1 03 38 [ 58.141515][ T5063] RSP: 0018:ffffc900039771a0 EFLAGS: 00010046 [ 58.147563][ T5063] RAX: 0000000000000000 RBX: 1ffff9200072ee38 RCX: 0000000000000001 [ 58.155513][ T5063] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895fc7a6 [ 58.163478][ T5063] RBP: ffffc90003977260 R08: ffff88802ee3680b R09: 1ffff11005dc6d01 [ 58.171431][ T5063] R10: dffffc0000000000 R11: ffffed1005dc6d02 R12: dffffc0000000000 [ 58.179380][ T5063] R13: 0000000000000004 R14: ffffc900039771e0 R15: 0000000000000201 [ 58.187332][ T5063] ? sock_hash_delete_elem+0x1a6/0x300 [ 58.192771][ T5063] ? sock_hash_delete_elem+0x1a6/0x300 [ 58.198206][ T5063] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 58.203906][ T5063] ? sock_hash_delete_elem+0x1a6/0x300 [ 58.209340][ T5063] ? do_raw_spin_unlock+0x13c/0x8b0 [ 58.214518][ T5063] ? sock_hash_delete_elem+0xb0/0x300 [ 58.219869][ T5063] sock_hash_delete_elem+0x1a6/0x300 [ 58.225150][ T5063] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 58.230613][ T5063] bpf_trace_run2+0x204/0x420 [ 58.235302][ T5063] ? bpf_trace_run2+0x114/0x420 [ 58.240144][ T5063] ? __pfx_bpf_trace_run2+0x10/0x10 [ 58.245335][ T5063] ? __pfx_debug_object_activate+0x10/0x10 [ 58.251118][ T5063] ? __tcp_transmit_skb+0x21fe/0x3b80 [ 58.256474][ T5063] enqueue_timer+0x396/0x550 [ 58.261060][ T5063] __mod_timer+0x953/0xeb0 [ 58.265460][ T5063] ? __pfx___mod_timer+0x10/0x10 [ 58.270414][ T5063] ? seqcount_lockdep_reader_access+0x157/0x220 [ 58.276659][ T5063] ? lockdep_hardirqs_on+0x99/0x150 [ 58.281841][ T5063] ? __asan_memset+0x23/0x50 [ 58.286410][ T5063] sk_reset_timer+0x23/0xc0 [ 58.290894][ T5063] tcp_event_new_data_sent+0x203/0x360 [ 58.296336][ T5063] tcp_write_xmit+0x1468/0x6100 [ 58.301195][ T5063] __tcp_push_pending_frames+0x9b/0x360 [ 58.306736][ T5063] tcp_sendmsg_locked+0x42cc/0x4d00 [ 58.311943][ T5063] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 58.317490][ T5063] ? __local_bh_enable_ip+0x168/0x200 [ 58.322841][ T5063] ? do_raw_spin_unlock+0x13c/0x8b0 [ 58.328020][ T5063] tcp_sendmsg+0x30/0x50 [ 58.332239][ T5063] __sock_sendmsg+0x1a6/0x270 [ 58.336912][ T5063] sock_write_iter+0x2dd/0x400 [ 58.341674][ T5063] ? __pfx_sock_write_iter+0x10/0x10 [ 58.346943][ T5063] ? bpf_lsm_file_permission+0x9/0x10 [ 58.352293][ T5063] ? security_file_permission+0x7f/0xa0 [ 58.357835][ T5063] vfs_write+0xa84/0xcb0 [ 58.362059][ T5063] ? __pfx_vfs_write+0x10/0x10 [ 58.366812][ T5063] ? __set_current_blocked+0x310/0x380 [ 58.372249][ T5063] ? __might_fault+0xc6/0x120 [ 58.376918][ T5063] ? __fdget_pos+0x1a2/0x320 [ 58.381492][ T5063] ksys_write+0x1a0/0x2c0 [ 58.385800][ T5063] ? __pfx_ksys_write+0x10/0x10 [ 58.390626][ T5063] ? do_syscall_64+0x10a/0x240 [ 58.395371][ T5063] ? do_syscall_64+0xb6/0x240 [ 58.400026][ T5063] do_syscall_64+0xfb/0x240 [ 58.404527][ T5063] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 58.410404][ T5063] RIP: 0033:0x7f83c1b16bf2 [ 58.414799][ T5063] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83 [ 58.434448][ T5063] RSP: 002b:00007fff7ce5ec08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.442861][ T5063] RAX: ffffffffffffffda RBX: 0000000000000044 RCX: 00007f83c1b16bf2 [ 58.450817][ T5063] RDX: 0000000000000044 RSI: 000055bcb55ef960 RDI: 0000000000000004 [ 58.458765][ T5063] RBP: 000055bcb55f8de0 R08: 0000000000000000 R09: 0000000000000000 [ 58.466710][ T5063] R10: 0000000000000000 R11: 0000000000000246 R12: 000055bc9f526aa4 [ 58.474657][ T5063] R13: 0000000000000038 R14: 000055bc9f5273e8 R15: 00007fff7ce5ec78 [ 58.482610][ T5063] [ 59.552000][ T5063] Shutting down cpus with NMI [ 59.556915][ T5063] Kernel Offset: disabled [ 59.561245][ T5063] Rebooting in 86400 seconds..