./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2439384213
<...>
Warning: Permanently added '10.128.10.47' (ED25519) to the list of known hosts.
execve("./syz-executor2439384213", ["./syz-executor2439384213"], 0x7ffd150d74f0 /* 10 vars */) = 0
brk(NULL) = 0x555564183000
brk(0x555564183d00) = 0x555564183d00
arch_prctl(ARCH_SET_FS, 0x555564183380) = 0
set_tid_address(0x555564183650) = 5092
set_robust_list(0x555564183660, 24) = 0
rseq(0x555564183ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2439384213", 4096) = 28
getrandom("\xa5\xa6\xe0\xd6\x14\x95\x13\x1d", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555564183d00
brk(0x5555641a4d00) = 0x5555641a4d00
brk(0x5555641a5000) = 0x5555641a5000
mprotect(0x7f1c02bea000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5093 attached
, child_tidptr=0x555564183650) = 5093
[pid 5093] set_robust_list(0x555564183660, 24) = 0
[pid 5093] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5093] setpgid(0, 0) = 0
[pid 5093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5093] write(3, "1000", 4) = 4
[pid 5093] close(3executing program
) = 0
[pid 5093] write(1, "executing program\n", 18) = 18
[pid 5093] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966948, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address)
[pid 5093] socketpair(AF_TIPC, SOCK_DGRAM, 0, [3, 4]) = 0
[pid 5093] close(3) = 0
[pid 5093] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_LPM_TRIE, key_size=7, value_size=65537, max_entries=8, map_flags=BPF_F_NO_PREALLOC, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3
[pid 5093] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address)
[pid 5093] close(3) = 0
[pid 5093] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_LPM_TRIE, key_size=7, value_size=3983, max_entries=9, map_flags=BPF_F_NO_PREALLOC, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3
[pid 5093] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=3, key=0x20000340, value=0x20000200, flags=BPF_ANY}, 32) = 0
[pid 5093] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5
[pid 5093] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="timer_start", prog_fd=5}}, 16) = 6
[ 65.866558][ C0]
[ 65.868922][ C0] ======================================================
[ 65.875925][ C0] WARNING: possible circular locking dependency detected
[ 65.882920][ C0] 6.10.0-rc1-syzkaller-00217-g0dcc53abf58d #0 Not tainted
[ 65.890029][ C0] ------------------------------------------------------
[ 65.897040][ C0] swapper/0/0 is trying to acquire lock:
[ 65.902668][ C0] ffff8880b9429430 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x18a/0x790
[ 65.911286][ C0]
[ 65.911286][ C0] but task is already holding lock:
[ 65.918762][ C0] ffff8880b942a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240
[ 65.927618][ C0]
[ 65.927618][ C0] which lock already depends on the new lock.
[ 65.927618][ C0]
[ 65.937999][ C0]
[ 65.937999][ C0] the existing dependency chain (in reverse order) is:
[ 65.947003][ C0]
[ 65.947003][ C0] -> #1 (&base->lock){-.-.}-{2:2}:
[ 65.954288][ C0] lock_acquire+0x1ed/0x550
[ 65.959352][ C0] _raw_spin_lock_irqsave+0xd5/0x120
[ 65.965158][ C0] lock_timer_base+0x112/0x240
[ 65.970432][ C0] __mod_timer+0x1ca/0xeb0
[ 65.975355][ C0] queue_delayed_work_on+0x1ca/0x390
[ 65.981165][ C0] kvfree_call_rcu+0x47f/0x790
[ 65.986433][ C0] rtnl_register_internal+0x482/0x590
[ 65.992313][ C0] rtnl_register+0x36/0x80
[ 65.997239][ C0] ip_rt_init+0x2f6/0x3a0
[ 66.002114][ C0] ip_init+0xe/0x20
[ 66.006466][ C0] inet_init+0x3d8/0x580
[ 66.011231][ C0] do_one_initcall+0x248/0x880
[ 66.016507][ C0] do_initcall_level+0x157/0x210
[ 66.021953][ C0] do_initcalls+0x3f/0x80
[ 66.026783][ C0] kernel_init_freeable+0x435/0x5d0
[ 66.032483][ C0] kernel_init+0x1d/0x2b0
[ 66.037317][ C0] ret_from_fork+0x4b/0x80
[ 66.042245][ C0] ret_from_fork_asm+0x1a/0x30
[ 66.047516][ C0]
[ 66.047516][ C0] -> #0 (krc.lock){..-.}-{2:2}:
[ 66.054548][ C0] validate_chain+0x18e0/0x5900
[ 66.059921][ C0] __lock_acquire+0x1346/0x1fd0
[ 66.065280][ C0] lock_acquire+0x1ed/0x550
[ 66.070298][ C0] _raw_spin_lock+0x2e/0x40
[ 66.075338][ C0] kvfree_call_rcu+0x18a/0x790
[ 66.080620][ C0] trie_delete_elem+0x546/0x6a0
[ 66.085977][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46
[ 66.091946][ C0] bpf_trace_run2+0x2ec/0x540
[ 66.097134][ C0] enqueue_timer+0x3ce/0x570
[ 66.102232][ C0] __mod_timer+0x953/0xeb0
[ 66.107167][ C0] sk_reset_timer+0x23/0xc0
[ 66.112191][ C0] tcp_schedule_loss_probe+0x419/0x560
[ 66.118172][ C0] tcp_write_xmit+0x42c9/0x69d0
[ 66.123541][ C0] tcp_tsq_handler+0x12d/0x200
[ 66.128842][ C0] tcp_tasklet_func+0x4f3/0x570
[ 66.134206][ C0] tasklet_action_common+0x321/0x4d0
[ 66.140002][ C0] handle_softirqs+0x2c4/0x970
[ 66.145284][ C0] __irq_exit_rcu+0xf4/0x1c0
[ 66.150391][ C0] irq_exit_rcu+0x9/0x30
[ 66.155144][ C0] common_interrupt+0xaa/0xd0
[ 66.160340][ C0] asm_common_interrupt+0x26/0x40
[ 66.165871][ C0] finish_task_switch+0x1ea/0x870
[ 66.171404][ C0] __schedule+0x17f0/0x4a20
[ 66.176416][ C0] schedule_idle+0x53/0x90
[ 66.181359][ C0] do_idle+0x56a/0x5d0
[ 66.185957][ C0] cpu_startup_entry+0x42/0x60
[ 66.191319][ C0] rest_init+0x2dc/0x300
[ 66.196090][ C0] start_kernel+0x47a/0x500
[ 66.201107][ C0] x86_64_start_reservations+0x2a/0x30
[ 66.207073][ C0] x86_64_start_kernel+0x99/0xa0
[ 66.212515][ C0] common_startup_64+0x13e/0x147
[ 66.217954][ C0]
[ 66.217954][ C0] other info that might help us debug this:
[ 66.217954][ C0]
[ 66.228162][ C0] Possible unsafe locking scenario:
[ 66.228162][ C0]
[ 66.235602][ C0] CPU0 CPU1
[ 66.240954][ C0] ---- ----
[ 66.246339][ C0] lock(&base->lock);
[ 66.250402][ C0] lock(krc.lock);
[ 66.256712][ C0] lock(&base->lock);
[ 66.263321][ C0] lock(krc.lock);
[ 66.267113][ C0]
[ 66.267113][ C0] *** DEADLOCK ***
[ 66.267113][ C0]
[ 66.275238][ C0] 3 locks held by swapper/0/0:
[ 66.279984][ C0] #0: ffff88807b7e2698 (slock-AF_INET){+.-.}-{2:2}, at: tcp_tsq_handler+0x20/0x200
[ 66.289379][ C0] #1: ffff8880b942a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240
[ 66.298683][ C0] #2: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540
[ 66.308064][ C0]
[ 66.308064][ C0] stack backtrace:
[ 66.313959][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.10.0-rc1-syzkaller-00217-g0dcc53abf58d #0
[ 66.323657][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 66.333707][ C0] Call Trace:
[ 66.337001][ C0] <IRQ>
[ 66.339829][ C0] dump_stack_lvl+0x241/0x360
[ 66.344495][ C0] ? __pfx_dump_stack_lvl+0x10/0x10
[ 66.349686][ C0] ? print_circular_bug+0x130/0x1a0
[ 66.354888][ C0] check_noncircular+0x36a/0x4a0
[ 66.359825][ C0] ? __pfx_check_noncircular+0x10/0x10
[ 66.365271][ C0] ? lockdep_lock+0x123/0x2b0
[ 66.369951][ C0] ? deref_stack_reg+0x1c7/0x260
[ 66.374881][ C0] ? __bfs+0x368/0x6f0
[ 66.378941][ C0] validate_chain+0x18e0/0x5900
[ 66.383777][ C0] ? __pfx___bfs+0x10/0x10
[ 66.388184][ C0] ? mark_lock_irq+0x8e1/0xc20
[ 66.392937][ C0] ? __pfx_validate_chain+0x10/0x10
[ 66.398142][ C0] ? __pfx_stack_trace_save+0x10/0x10
[ 66.403521][ C0] ? do_raw_spin_unlock+0x13c/0x8b0
[ 66.408727][ C0] ? lockdep_unlock+0x16a/0x300
[ 66.413557][ C0] ? __pfx_lockdep_unlock+0x10/0x10
[ 66.418734][ C0] ? stack_trace_save+0x118/0x1d0
[ 66.423744][ C0] ? mark_lock+0x9a/0x350
[ 66.428061][ C0] __lock_acquire+0x1346/0x1fd0
[ 66.432922][ C0] lock_acquire+0x1ed/0x550
[ 66.437416][ C0] ? kvfree_call_rcu+0x18a/0x790
[ 66.442358][ C0] ? common_startup_64+0x13e/0x147
[ 66.447455][ C0] ? __pfx_lock_acquire+0x10/0x10
[ 66.452471][ C0] ? __phys_addr+0xba/0x170
[ 66.456975][ C0] _raw_spin_lock+0x2e/0x40
[ 66.461463][ C0] ? kvfree_call_rcu+0x18a/0x790
[ 66.466383][ C0] kvfree_call_rcu+0x18a/0x790
[ 66.471133][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 66.477102][ C0] ? __pfx_kvfree_call_rcu+0x10/0x10
[ 66.482373][ C0] ? longest_prefix_match+0x49f/0x650
[ 66.487733][ C0] trie_delete_elem+0x546/0x6a0
[ 66.492579][ C0] ? bpf_trace_run2+0x1fc/0x540
[ 66.497417][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46
[ 66.502891][ C0] bpf_trace_run2+0x2ec/0x540
[ 66.507657][ C0] ? __pfx_bpf_trace_run2+0x10/0x10
[ 66.512875][ C0] ? __pfx_debug_object_activate+0x10/0x10
[ 66.518694][ C0] enqueue_timer+0x3ce/0x570
[ 66.523274][ C0] __mod_timer+0x953/0xeb0
[ 66.527697][ C0] ? __pfx___mod_timer+0x10/0x10
[ 66.532617][ C0] ? ktime_get+0x3c/0xb0
[ 66.536864][ C0] sk_reset_timer+0x23/0xc0
[ 66.541372][ C0] tcp_schedule_loss_probe+0x419/0x560
[ 66.546816][ C0] tcp_write_xmit+0x42c9/0x69d0
[ 66.551661][ C0] ? virtqueue_poll+0x186/0x230
[ 66.556502][ C0] tcp_tsq_handler+0x12d/0x200
[ 66.561250][ C0] tcp_tasklet_func+0x4f3/0x570
[ 66.566177][ C0] ? __pfx_tcp_tasklet_func+0x10/0x10
[ 66.571530][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 66.577493][ C0] ? __pfx_wake_up_var+0x10/0x10
[ 66.582413][ C0] ? rcu_is_watching+0x15/0xb0
[ 66.587160][ C0] tasklet_action_common+0x321/0x4d0
[ 66.592434][ C0] ? __pfx_tasklet_action_common+0x10/0x10
[ 66.598224][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 66.604544][ C0] ? workqueue_softirq_action+0xca/0x140
[ 66.610171][ C0] handle_softirqs+0x2c4/0x970
[ 66.614924][ C0] ? __irq_exit_rcu+0xf4/0x1c0
[ 66.619677][ C0] ? __pfx_handle_softirqs+0x10/0x10
[ 66.624966][ C0] ? irqtime_account_irq+0xd4/0x1e0
[ 66.630162][ C0] __irq_exit_rcu+0xf4/0x1c0
[ 66.634739][ C0] ? __pfx___irq_exit_rcu+0x10/0x10
[ 66.640018][ C0] irq_exit_rcu+0x9/0x30
[ 66.644260][ C0] common_interrupt+0xaa/0xd0
[ 66.648945][ C0] </IRQ>
[ 66.651859][ C0] <TASK>
[ 66.654775][ C0] asm_common_interrupt+0x26/0x40
[ 66.659794][ C0] RIP: 0010:finish_task_switch+0x1ea/0x870
[ 66.665594][ C0] Code: c9 50 e8 99 c9 0b 00 48 83 c4 08 4c 89 f7 e8 cd 38 00 00 0f 1f 44 00 00 4c 89 f7 e8 d0 a6 2a 0a e8 5b f8 36 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc
[ 66.685183][ C0] RSP: 0018:ffffffff8e007b08 EFLAGS: 00000286
[ 66.691268][ C0] RAX: 2526d8bbbfb4fd00 RBX: ffffffff8e094680 RCX: ffffffff947a0603
[ 66.699224][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcaba80 RDI: ffffffff8c1ff240
[ 66.707180][ C0] RBP: ffffffff8e007b50 R08: ffffffff8fad486f R09: 1ffffffff1f5a90d
[ 66.715142][ C0] R10: dffffc0000000000 R11: fffffbfff1f5a90e R12: 1ffff11017287ea7
[ 66.723120][ C0] R13: dffffc0000000000 R14: ffff8880b943e7c0 R15: ffff8880b943f538
[ 66.731088][ C0] ? finish_task_switch+0x1e5/0x870
[ 66.736277][ C0] __schedule+0x17f0/0x4a20
[ 66.740777][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 66.747087][ C0] ? __pfx___schedule+0x10/0x10
[ 66.751948][ C0] ? tick_nohz_idle_exit+0x36e/0x480
[ 66.757312][ C0] ? flush_smp_call_function_queue+0x142/0x2a0
[ 66.763453][ C0] ? __pfx_tick_nohz_idle_exit+0x10/0x10
[ 66.769116][ C0] schedule_idle+0x53/0x90
[ 66.773533][ C0] do_idle+0x56a/0x5d0
[ 66.777584][ C0] ? __pfx___schedule+0x10/0x10
[ 66.782424][ C0] ? __pfx_do_idle+0x10/0x10
[ 66.787001][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 66.792966][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 66.799304][ C0] ? rest_init+0x31/0x300
[ 66.803630][ C0] ? rest_init+0x31/0x300
[ 66.807968][ C0] cpu_startup_entry+0x42/0x60
[ 66.812713][ C0] rest_init+0x2dc/0x300
[ 66.816942][ C0] ? __pfx_x86_late_time_init+0x10/0x10
[ 66.822501][ C0] start_kernel+0x47a/0x500
[ 66.826991][ C0] x86_64_start_reservations+0x2a/0x30
[ 66.832439][ C0] x86_64_start_kernel+0x99/0xa0
[ 66.837362][ C0] common_startup_64+0x13e/0x147
[ 66.842299][ C0] </TASK>