./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2116534420 <...> Warning: Permanently added '10.128.0.98' (ED25519) to the list of known hosts. execve("./syz-executor2116534420", ["./syz-executor2116534420"], 0x7ffc30b85a60 /* 10 vars */) = 0 brk(NULL) = 0x55558a5dd000 brk(0x55558a5ddd00) = 0x55558a5ddd00 arch_prctl(ARCH_SET_FS, 0x55558a5dd380) = 0 set_tid_address(0x55558a5dd650) = 5070 set_robust_list(0x55558a5dd660, 24) = 0 rseq(0x55558a5ddca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2116534420", 4096) = 28 getrandom("\xfc\xc4\x2f\xd3\x29\xa5\x65\x6f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558a5ddd00 brk(0x55558a5fed00) = 0x55558a5fed00 brk(0x55558a5ff000) = 0x55558a5ff000 mprotect(0x7ff228eae000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5071 attached , child_tidptr=0x55558a5dd650) = 5071 [pid 5071] set_robust_list(0x55558a5dd660, 24) = 0 [pid 5071] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5071] setpgid(0, 0) = 0 [pid 5071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "1000", 4) = 4 [pid 5071] close(3) = 0 [pid 5071] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=4, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5071] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5071] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5071] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="timer_start", prog_fd=4}}, 16) = 5 [ 74.244178][ T5065] ------------[ cut here ]------------ [ 74.244481][ T5065] [ 74.244486][ T5065] ====================================================== [ 74.244491][ T5065] WARNING: possible circular locking dependency detected [ 74.244495][ T5065] 6.8.0-syzkaller-05236-g443574b03387 #0 Not tainted [ 74.244502][ T5065] ------------------------------------------------------ [ 74.244506][ T5065] sshd/5065 is trying to acquire lock: [ 74.244512][ T5065] ffffffff8e125be0 (console_owner){....}-{0:0}, at: console_flush_all+0x14a/0xec0 [ 74.244569][ T5065] [ 74.244569][ T5065] but task is already holding lock: [ 74.244573][ T5065] ffff8880b942a758 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 74.244610][ T5065] [ 74.244610][ T5065] which lock already depends on the new lock. [ 74.244610][ T5065] [ 74.244614][ T5065] [ 74.244614][ T5065] the existing dependency chain (in reverse order) is: [ 74.244618][ T5065] [ 74.244618][ T5065] -> #4 (&base->lock){-.-.}-{2:2}: [ 74.244636][ T5065] lock_acquire+0x1e4/0x530 [ 74.244649][ T5065] _raw_spin_lock_irqsave+0xd5/0x120 [ 74.244668][ T5065] lock_timer_base+0x112/0x240 [ 74.244687][ T5065] __mod_timer+0x1ca/0xeb0 [ 74.244705][ T5065] worker_enter_idle+0x31d/0x4d0 [ 74.244717][ T5065] worker_thread+0x9c0/0xd70 [ 74.244730][ T5065] kthread+0x2f0/0x390 [ 74.244744][ T5065] ret_from_fork+0x4b/0x80 [ 74.244764][ T5065] ret_from_fork_asm+0x1a/0x30 [ 74.244784][ T5065] [ 74.244784][ T5065] -> #3 (&pool->lock){-.-.}-{2:2}: [ 74.244800][ T5065] lock_acquire+0x1e4/0x530 [ 74.244812][ T5065] _raw_spin_lock+0x2e/0x40 [ 74.244826][ T5065] __queue_work+0x6ec/0xec0 [ 74.244840][ T5065] queue_work_on+0x14f/0x250 [ 74.244853][ T5065] rpm_suspend+0x11bd/0x1c10 [ 74.244873][ T5065] __pm_runtime_idle+0x131/0x1a0 [ 74.244889][ T5065] __device_attach+0x3e5/0x520 [ 74.244908][ T5065] bus_probe_device+0x189/0x260 [ 74.244923][ T5065] device_add+0x8ff/0xca0 [ 74.244940][ T5065] serial_base_port_add+0x2b6/0x3f0 [ 74.244955][ T5065] serial_core_register_port+0x393/0x1e30 [ 74.244975][ T5065] serial8250_register_8250_port+0x1433/0x1cd0 [ 74.244993][ T5065] serial_pnp_probe+0x7d5/0xa20 [ 74.245010][ T5065] pnp_device_probe+0x2ba/0x460 [ 74.245028][ T5065] really_probe+0x29e/0xc50 [ 74.245055][ T5065] __driver_probe_device+0x1a2/0x3e0 [ 74.245081][ T5065] driver_probe_device+0x50/0x430 [ 74.245124][ C1] ------------[ cut here ]------------ [ 74.245120][ T5065] __driver_attach+0x45f/0x710 [ 74.245150][ T5065] bus_for_each_dev+0x239/0x2b0 [ 74.245167][ T5065] bus_add_driver+0x347/0x620 [ 74.245184][ T5065] driver_register+0x23a/0x320 [ 74.245198][ T5065] serial8250_init+0x9e/0x170 [ 74.245221][ T5065] do_one_initcall+0x238/0x830 [ 74.245241][ T5065] do_initcall_level+0x157/0x210 [ 74.245257][ T5065] do_initcalls+0x3f/0x80 [ 74.245270][ T5065] kernel_init_freeable+0x435/0x5d0 [ 74.245285][ T5065] kernel_init+0x1d/0x2a0 [ 74.245307][ T5065] ret_from_fork+0x4b/0x80 [ 74.245329][ T5065] ret_from_fork_asm+0x1a/0x30 [ 74.245350][ T5065] [ 74.245350][ T5065] -> #2 (&dev->power.lock){-...}-{2:2}: [ 74.245371][ T5065] lock_acquire+0x1e4/0x530 [ 74.245385][ T5065] _raw_spin_lock_irqsave+0xd5/0x120 [ 74.245402][ T5065] __pm_runtime_resume+0x112/0x180 [ 74.245421][ T5065] __uart_start+0x17a/0x3c0 [ 74.245442][ T5065] uart_write+0x427/0x5c0 [ 74.245464][ T5065] n_tty_write+0xd6a/0x1230 [ 74.245480][ T5065] file_tty_write+0x54f/0x9b0 [ 74.245502][ T5065] vfs_write+0xa84/0xcb0 [ 74.245518][ T5065] ksys_write+0x1a0/0x2c0 [ 74.245534][ T5065] do_syscall_64+0xfb/0x240 [ 74.245552][ T5065] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 74.245576][ T5065] [ 74.245576][ T5065] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 74.245595][ T5065] lock_acquire+0x1e4/0x530 [ 74.245608][ T5065] _raw_spin_lock_irqsave+0xd5/0x120 [ 74.245626][ T5065] serial8250_console_write+0x1a8/0x1840 [ 74.245642][ T5065] console_flush_all+0x80b/0xec0 [ 74.245662][ T5065] console_unlock+0x13b/0x4d0 [ 74.245679][ T5065] vprintk_emit+0x509/0x720 [ 74.245697][ T5065] _printk+0xd5/0x120 [ 74.245722][ T5065] register_console+0x70a/0xcd0 [ 74.245743][ T5065] univ8250_console_init+0x49/0x50 [ 74.245765][ T5065] console_init+0x198/0x680 [ 74.245779][ T5065] start_kernel+0x2d3/0x500 [ 74.245791][ T5065] x86_64_start_reservations+0x2a/0x30 [ 74.245810][ T5065] x86_64_start_kernel+0x99/0xa0 [ 74.245828][ T5065] common_startup_64+0x13e/0x147 [ 74.245846][ T5065] [ 74.245846][ T5065] -> #0 (console_owner){....}-{0:0}: [ 74.245865][ T5065] validate_chain+0x18cb/0x58e0 [ 74.245883][ T5065] __lock_acquire+0x1346/0x1fd0 [ 74.245897][ T5065] lock_acquire+0x1e4/0x530 [ 74.245911][ T5065] console_flush_all+0x7ba/0xec0 [ 74.245931][ T5065] console_unlock+0x13b/0x4d0 [ 74.245948][ T5065] vprintk_emit+0x509/0x720 [ 74.245966][ T5065] _printk+0xd5/0x120 [ 74.245981][ T5065] report_bug+0x346/0x500 [ 74.246004][ T5065] handle_bug+0x3e/0x70 [ 74.246023][ T5065] exc_invalid_op+0x1a/0x50 [ 74.246042][ T5065] asm_exc_invalid_op+0x1a/0x20 [ 74.246064][ T5065] __local_bh_enable_ip+0x1be/0x200 [ 74.246078][ T5065] sock_map_delete_elem+0xca/0x140 [ 74.246093][ T5065] bpf_prog_8a405b5ced52e191+0x4a/0x4e [ 74.246108][ T5065] bpf_trace_run2+0x204/0x420 [ 74.246129][ T5065] enqueue_timer+0x396/0x550 [ 74.246145][ T5065] __mod_timer+0x953/0xeb0 [ 74.246165][ T5065] sk_reset_timer+0x23/0xc0 [ 74.246178][ T5065] tcp_schedule_loss_probe+0x419/0x560 [ 74.246198][ T5065] tcp_write_xmit+0x3682/0x6100 [ 74.246217][ T5065] __tcp_push_pending_frames+0x9b/0x360 [ 74.246237][ T5065] tcp_sendmsg_locked+0x42cc/0x4d00 [ 74.246252][ T5065] tcp_sendmsg+0x30/0x50 [ 74.246266][ T5065] __sock_sendmsg+0x1a6/0x270 [ 74.246279][ T5065] sock_write_iter+0x2dd/0x400 [ 74.246301][ T5065] vfs_write+0xa84/0xcb0 [ 74.246322][ T5065] ksys_write+0x1a0/0x2c0 [ 74.246338][ T5065] do_syscall_64+0xfb/0x240 [ 74.246356][ T5065] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 74.246379][ T5065] [ 74.246379][ T5065] other info that might help us debug this: [ 74.246379][ T5065] [ 74.246384][ T5065] Chain exists of: [ 74.246384][ T5065] console_owner --> &pool->lock --> &base->lock [ 74.246384][ T5065] [ 74.246406][ T5065] Possible unsafe locking scenario: [ 74.246406][ T5065] [ 74.246410][ T5065] CPU0 CPU1 [ 74.246414][ T5065] ---- ---- [ 74.246417][ T5065] lock(&base->lock); [ 74.246426][ T5065] lock(&pool->lock); [ 74.246436][ T5065] lock(&base->lock); [ 74.246445][ T5065] lock(console_owner); [ 74.246454][ T5065] [ 74.246454][ T5065] *** DEADLOCK *** [ 74.246454][ T5065] [ 74.246457][ T5065] 5 locks held by sshd/5065: [ 74.246466][ T5065] #0: ffff88802d3eb358 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x22/0x50 [ 74.246502][ T5065] #1: ffff8880b942a758 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 74.246546][ T5065] #2: ffffffff8e131920 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x114/0x420 [ 74.246584][ T5065] #3: ffffffff8e00d500 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 74.246621][ T5065] #4: ffffffff8e00d130 (console_srcu){....}-{0:0}, at: console_flush_all+0x14a/0xec0 [ 74.246663][ T5065] [ 74.246663][ T5065] stack backtrace: [ 74.246668][ T5065] CPU: 0 PID: 5065 Comm: sshd Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0 [ 74.246684][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 74.246693][ T5065] Call Trace: [ 74.246699][ T5065] [ 74.246706][ T5065] dump_stack_lvl+0x1e7/0x2e0 [ 74.246728][ T5065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.246753][ T5065] ? print_circular_bug+0x130/0x1a0 [ 74.246776][ T5065] check_noncircular+0x36a/0x4a0 [ 74.246799][ T5065] ? __pfx_check_noncircular+0x10/0x10 [ 74.246820][ T5065] ? lockdep_lock+0x123/0x2b0 [ 74.246847][ T5065] ? add_lock_to_list+0x1de/0x2e0 [ 74.246871][ T5065] validate_chain+0x18cb/0x58e0 [ 74.246903][ T5065] ? __pfx_validate_chain+0x10/0x10 [ 74.246925][ T5065] ? sprintf+0xda/0x120 [ 74.246950][ T5065] ? vsnprintf+0x1cc3/0x1da0 [ 74.246980][ T5065] ? info_print_prefix+0x204/0x310 [ 74.247008][ T5065] ? mark_lock+0x9a/0x350 [ 74.247027][ T5065] __lock_acquire+0x1346/0x1fd0 [ 74.247051][ T5065] lock_acquire+0x1e4/0x530 [ 74.247066][ T5065] ? console_flush_all+0x14a/0xec0 [ 74.247092][ T5065] ? __pfx_lock_acquire+0x10/0x10 [ 74.247108][ T5065] ? __pfx_lock_release+0x10/0x10 [ 74.247122][ T5065] ? do_raw_spin_lock+0x14f/0x370 [ 74.247156][ T5065] ? do_raw_spin_unlock+0x13c/0x8b0 [ 74.247179][ T5065] ? console_flush_all+0x3d0/0xec0 [ 74.247201][ T5065] ? console_flush_all+0x14a/0xec0 [ 74.247223][ T5065] console_flush_all+0x7ba/0xec0 [ 74.247245][ T5065] ? console_flush_all+0x14a/0xec0 [ 74.247267][ T5065] ? console_flush_all+0x14a/0xec0 [ 74.247295][ T5065] ? __pfx_console_flush_all+0x10/0x10 [ 74.247319][ T5065] ? __pfx_lock_acquire+0x10/0x10 [ 74.247336][ T5065] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 74.247357][ T5065] ? validate_chain+0x15a2/0x58e0 [ 74.247378][ T5065] console_unlock+0x13b/0x4d0 [ 74.247401][ T5065] ? __pfx_console_unlock+0x10/0x10 [ 74.247420][ T5065] ? _printk+0xd5/0x120 [ 74.247437][ T5065] ? _printk+0xd5/0x120 [ 74.247454][ T5065] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 74.247478][ T5065] ? __pfx_validate_chain+0x10/0x10 [ 74.247501][ T5065] vprintk_emit+0x509/0x720 [ 74.247522][ T5065] ? __pfx_vprintk_emit+0x10/0x10 [ 74.247546][ T5065] ? lockdep_unlock+0x16a/0x300 [ 74.247573][ T5065] _printk+0xd5/0x120 [ 74.247592][ T5065] ? report_bug+0x25e/0x500 [ 74.247616][ T5065] ? __pfx__printk+0x10/0x10 [ 74.247636][ T5065] ? __lock_acquire+0x1346/0x1fd0 [ 74.247653][ T5065] ? find_bug+0xa3/0x390 [ 74.247674][ T5065] ? __local_bh_enable_ip+0x1be/0x200 [ 74.247693][ T5065] report_bug+0x346/0x500 [ 74.247716][ T5065] ? __local_bh_enable_ip+0x1be/0x200 [ 74.247734][ T5065] handle_bug+0x3e/0x70 [ 74.247756][ T5065] exc_invalid_op+0x1a/0x50 [ 74.247777][ T5065] asm_exc_invalid_op+0x1a/0x20 [ 74.247801][ T5065] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 74.247819][ T5065] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 9c e1 86 8f 80 e1 07 80 c1 03 38 [ 74.247832][ T5065] RSP: 0018:ffffc900039b71e0 EFLAGS: 00010046 [ 74.247845][ T5065] RAX: 0000000000000000 RBX: 1ffff92000736e40 RCX: 0000000000000000 [ 74.247855][ T5065] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895fa99a [ 74.247865][ T5065] RBP: ffffc900039b72a0 R08: ffff888022bbb1eb R09: 1ffff1100457763d [ 74.247877][ T5065] R10: dffffc0000000000 R11: ffffed100457763e R12: dffffc0000000000 [ 74.247889][ T5065] R13: ffff88802e5c8740 R14: ffffc900039b7220 R15: 0000000000000201 [ 74.247905][ T5065] ? sock_map_delete_elem+0xca/0x140 [ 74.247924][ T5065] ? sock_map_delete_elem+0xca/0x140 [ 74.247940][ T5065] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 74.247955][ T5065] ? sock_map_delete_elem+0xca/0x140 [ 74.247971][ T5065] ? do_raw_spin_unlock+0x13c/0x8b0 [ 74.247994][ T5065] ? __pfx___cant_migrate+0x10/0x10 [ 74.248013][ T5065] ? sock_map_delete_elem+0x97/0x140 [ 74.248031][ T5065] sock_map_delete_elem+0xca/0x140 [ 74.248049][ T5065] bpf_prog_8a405b5ced52e191+0x4a/0x4e [ 74.248064][ T5065] bpf_trace_run2+0x204/0x420 [ 74.248083][ T5065] ? bpf_trace_run2+0x114/0x420 [ 74.248100][ T5065] ? __pfx_bpf_trace_run2+0x10/0x10 [ 74.248117][ T5065] ? __pfx_debug_object_activate+0x10/0x10 [ 74.248143][ T5065] enqueue_timer+0x396/0x550 [ 74.248163][ T5065] __mod_timer+0x953/0xeb0 [ 74.248192][ T5065] ? __pfx___mod_timer+0x10/0x10 [ 74.248219][ T5065] ? __asan_memset+0x23/0x50 [ 74.248238][ T5065] sk_reset_timer+0x23/0xc0 [ 74.248253][ T5065] tcp_schedule_loss_probe+0x419/0x560 [ 74.248276][ T5065] tcp_write_xmit+0x3682/0x6100 [ 74.248317][ T5065] __tcp_push_pending_frames+0x9b/0x360 [ 74.248342][ T5065] tcp_sendmsg_locked+0x42cc/0x4d00 [ 74.248382][ T5065] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 74.248397][ T5065] ? __local_bh_enable_ip+0x168/0x200 [ 74.248415][ T5065] ? do_raw_spin_unlock+0x13c/0x8b0 [ 74.248443][ T5065] tcp_sendmsg+0x30/0x50 [ 74.248459][ T5065] __sock_sendmsg+0x1a6/0x270 [ 74.248476][ T5065] sock_write_iter+0x2dd/0x400 [ 74.248501][ T5065] ? __pfx_sock_write_iter+0x10/0x10 [ 74.248530][ T5065] ? bpf_lsm_file_permission+0x9/0x10 [ 74.248550][ T5065] ? security_file_permission+0x7f/0xa0 [ 74.248571][ T5065] vfs_write+0xa84/0xcb0 [ 74.248594][ T5065] ? __pfx_vfs_write+0x10/0x10 [ 74.248610][ T5065] ? __set_current_blocked+0x310/0x380 [ 74.248633][ T5065] ? __might_fault+0xc6/0x120 [ 74.248651][ T5065] ? __fdget_pos+0x1a2/0x320 [ 74.248673][ T5065] ksys_write+0x1a0/0x2c0 [ 74.248694][ T5065] ? __pfx_ksys_write+0x10/0x10 [ 74.248712][ T5065] ? do_syscall_64+0x10a/0x240 [ 74.248733][ T5065] ? do_syscall_64+0xb6/0x240 [ 74.248754][ T5065] do_syscall_64+0xfb/0x240 [ 74.248776][ T5065] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 74.248800][ T5065] RIP: 0033:0x7fdb7cb16bf2 [ 74.248813][ T5065] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83 [ 74.248825][ T5065] RSP: 002b:00007ffc884a63c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.248840][ T5065] RAX: ffffffffffffffda RBX: 000000000000002c RCX: 00007fdb7cb16bf2 [ 74.248851][ T5065] RDX: 000000000000002c RSI: 000055de20155960 RDI: 0000000000000004 [ 74.248861][ T5065] RBP: 000055de20163c20 R08: 0000000000000000 R09: 0000000000000000 [ 74.248870][ T5065] R10: 0000000000000000 R11: 0000000000000246 R12: 000055de0d2f1aa4 [ 74.248880][ T5065] R13: 000000000000004a R14: 000055de0d2f23e8 R15: 00007ffc884a6438 [ 74.248898][ T5065] [ 74.254355][ T5065] WARNING: CPU: 0 PID: 5065 at kernel/softirq.c:362 __local_bh_enable_ip+0x1be/0x200 [ 74.254384][ T5065] Modules linked in: [ 74.254395][ T5065] CPU: 0 PID: 5065 Comm: sshd Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0 [ 74.256747][ C1] raw_local_irq_restore() called with IRQs enabled [ 74.263804][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 74.270934][ C1] WARNING: CPU: 1 PID: 0 at kernel/locking/irqflag-debug.c:10 warn_bogus_irq_restore+0x29/0x40 [ 74.277472][ T5065] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 74.277500][ T5065] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 9c e1 86 8f 80 e1 07 80 c1 03 38 [ 74.284502][ C1] Modules linked in: [ 74.289951][ T5065] RSP: 0018:ffffc900039b71e0 EFLAGS: 00010046 [ 74.289980][ T5065] RAX: 0000000000000000 RBX: 1ffff92000736e40 RCX: 0000000000000000 [ 74.289993][ T5065] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895fa99a [ 74.290007][ T5065] RBP: ffffc900039b72a0 R08: ffff888022bbb1eb R09: 1ffff1100457763d [ 74.299332][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0 [ 74.306648][ T5065] R10: dffffc0000000000 R11: ffffed100457763e R12: dffffc0000000000 [ 74.306669][ T5065] R13: ffff88802e5c8740 R14: ffffc900039b7220 R15: 0000000000000201 [ 74.306684][ T5065] FS: 00007fdb7ceaf800(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 74.318405][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 74.328769][ T5065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.328788][ T5065] CR2: 0000000000000000 CR3: 000000007a032000 CR4: 00000000003506f0 [ 74.328805][ T5065] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.337873][ C1] RIP: 0010:warn_bogus_irq_restore+0x29/0x40 [ 74.345204][ T5065] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.345227][ T5065] Call Trace: [ 74.345237][ T5065] [ 74.345247][ T5065] ? __warn+0x163/0x4b0 [ 74.350284][ C1] Code: 90 f3 0f 1e fa 90 80 3d de 59 01 04 00 74 06 90 c3 cc cc cc cc c6 05 cf 59 01 04 01 90 48 c7 c7 20 ba aa 8b e8 f8 d5 e7 f5 90 <0f> 0b 90 90 90 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f [ 74.356080][ T5065] ? __local_bh_enable_ip+0x1be/0x200 [ 74.356109][ T5065] ? report_bug+0x2b3/0x500 [ 74.361389][ C1] RSP: 0018:ffffc90000a08898 EFLAGS: 00010246 [ 74.366309][ T5065] ? __local_bh_enable_ip+0x1be/0x200 [ 74.366336][ T5065] ? handle_bug+0x3e/0x70 [ 74.371783][ C1] [ 74.376875][ T5065] ? exc_invalid_op+0x1a/0x50 [ 74.376904][ T5065] ? asm_exc_invalid_op+0x1a/0x20 [ 74.381475][ C1] RAX: 27a57ee787c2af00 RBX: 1ffff92000141118 RCX: ffff8880172c5a00 [ 74.386405][ T5065] ? sock_map_delete_elem+0xca/0x140 [ 74.386429][ T5065] ? __local_bh_enable_ip+0x1be/0x200 [ 74.391697][ C1] RDX: 0000000000000103 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.398959][ T5065] ? sock_map_delete_elem+0xca/0x140 [ 74.398983][ T5065] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 74.403990][ C1] RBP: ffffc90000a08930 R08: ffffffff8157cc12 R09: 1ffffffff1f0d5cd [ 74.409006][ T5065] ? sock_map_delete_elem+0xca/0x140 [ 74.409027][ T5065] ? do_raw_spin_unlock+0x13c/0x8b0 [ 74.409056][ T5065] ? __pfx___cant_migrate+0x10/0x10 [ 74.414074][ C1] R10: dffffc0000000000 R11: fffffbfff1f0d5ce R12: dffffc0000000000 [ 74.419170][ T5065] ? sock_map_delete_elem+0x97/0x140 [ 74.419197][ T5065] sock_map_delete_elem+0xca/0x140 [ 74.424294][ C1] R13: 1ffff92000141114 R14: ffffc90000a088c0 R15: 0000000000000046 [ 74.429745][ T5065] bpf_prog_8a405b5ced52e191+0x4a/0x4e [ 74.429769][ T5065] bpf_trace_run2+0x204/0x420 [ 74.435031][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 74.440404][ T5065] ? bpf_trace_run2+0x114/0x420 [ 74.445256][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.450934][ T5065] ? __pfx_bpf_trace_run2+0x10/0x10 [ 74.457177][ C1] CR2: 00007ff228eb5110 CR3: 000000007ae54000 CR4: 00000000003506f0 [ 74.463813][ T5065] ? __pfx_debug_object_activate+0x10/0x10 [ 74.469189][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.474529][ T5065] enqueue_timer+0x396/0x550 [ 74.479552][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.485351][ T5065] __mod_timer+0x953/0xeb0 [ 74.490901][ C1] Call Trace: [ 74.490913][ C1] [ 74.496373][ T5065] ? __pfx___mod_timer+0x10/0x10 [ 74.496422][ T5065] ? __asan_memset+0x23/0x50 [ 74.501789][ C1] ? __warn+0x163/0x4b0 [ 74.507163][ T5065] sk_reset_timer+0x23/0xc0 [ 74.507189][ T5065] tcp_schedule_loss_probe+0x419/0x560 [ 74.512373][ C1] ? warn_bogus_irq_restore+0x29/0x40 [ 74.517644][ T5065] tcp_write_xmit+0x3682/0x6100 [ 74.517700][ T5065] __tcp_push_pending_frames+0x9b/0x360 [ 74.522852][ C1] ? report_bug+0x2b3/0x500 [ 74.528129][ T5065] tcp_sendmsg_locked+0x42cc/0x4d00 [ 74.528184][ T5065] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 74.533592][ C1] ? warn_bogus_irq_restore+0x29/0x40 [ 74.538423][ T5065] ? __local_bh_enable_ip+0x168/0x200 [ 74.538450][ T5065] ? do_raw_spin_unlock+0x13c/0x8b0 [ 74.544162][ C1] ? handle_bug+0x3e/0x70 [ 74.548997][ T5065] tcp_sendmsg+0x30/0x50 [ 74.549022][ T5065] __sock_sendmsg+0x1a6/0x270 [ 74.553939][ C1] ? exc_invalid_op+0x1a/0x50 [ 74.559218][ T5065] sock_write_iter+0x2dd/0x400 [ 74.566996][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 74.571997][ T5065] ? __pfx_sock_write_iter+0x10/0x10 [ 74.577820][ C1] ? __warn_printk+0x292/0x360 [ 74.583414][ T5065] ? bpf_lsm_file_permission+0x9/0x10 [ 74.588545][ C1] ? warn_bogus_irq_restore+0x29/0x40 [ 74.593600][ T5065] ? security_file_permission+0x7f/0xa0 [ 74.598736][ C1] ? warn_bogus_irq_restore+0x28/0x40 [ 74.603895][ T5065] vfs_write+0xa84/0xcb0 [ 74.608665][ C1] _raw_spin_unlock_irqrestore+0x120/0x140 [ 74.613487][ T5065] ? __pfx_vfs_write+0x10/0x10 [ 74.618511][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 74.624880][ T5065] ? __set_current_blocked+0x310/0x380 [ 74.632433][ C1] ? rcu_is_watching+0x15/0xb0 [ 74.637426][ T5065] ? __might_fault+0xc6/0x120 [ 74.637452][ T5065] ? __fdget_pos+0x1a2/0x320 [ 74.643232][ C1] ? enqueue_timer+0x20b/0x550 [ 74.649366][ T5065] ksys_write+0x1a0/0x2c0 [ 74.649396][ T5065] ? __pfx_ksys_write+0x10/0x10 [ 74.654833][ C1] __mod_timer+0xb89/0xeb0 [ 74.660034][ T5065] ? do_syscall_64+0x10a/0x240 [ 74.660065][ T5065] ? do_syscall_64+0xb6/0x240 [ 74.665106][ C1] ? __pfx___mod_timer+0x10/0x10 [ 74.669563][ T5065] do_syscall_64+0xfb/0x240 [ 74.674913][ C1] ? _raw_read_unlock_irqrestore+0xdd/0x140 [ 74.680529][ T5065] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 74.685620][ C1] ? __pfx__raw_read_unlock_irqrestore+0x10/0x10 [ 74.690610][ T5065] RIP: 0033:0x7fdb7cb16bf2 [ 74.696682][ C1] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 74.702104][ T5065] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83 [ 74.707566][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 74.715004][ T5065] RSP: 002b:00007ffc884a63c8 EFLAGS: 00000246 [ 74.720391][ C1] ? ktime_get+0x24c/0x280 [ 74.725717][ T5065] ORIG_RAX: 0000000000000001 [ 74.725728][ T5065] RAX: ffffffffffffffda RBX: 000000000000002c RCX: 00007fdb7cb16bf2 [ 74.725744][ T5065] RDX: 000000000000002c RSI: 000055de20155960 RDI: 0000000000000004 [ 74.730749][ C1] dsp_cmx_send+0x21bf/0x2240 [ 74.736185][ T5065] RBP: 000055de20163c20 R08: 0000000000000000 R09: 0000000000000000 [ 74.736200][ T5065] R10: 0000000000000000 R11: 0000000000000246 R12: 000055de0d2f1aa4 [ 74.736214][ T5065] R13: 000000000000004a R14: 000055de0d2f23e8 R15: 00007ffc884a6438 [ 74.741394][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 74.746407][ T5065] [ 74.746418][ T5065] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.746428][ T5065] CPU: 0 PID: 5065 Comm: sshd Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0 [ 74.746450][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 74.746462][ T5065] Call Trace: [ 74.746471][ T5065] [ 74.746478][ T5065] dump_stack_lvl+0x1e7/0x2e0 [ 74.746511][ T5065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.746545][ T5065] ? __pfx__printk+0x10/0x10 [ 74.746574][ T5065] ? vscnprintf+0x5d/0x90 [ 74.746605][ T5065] panic+0x349/0x860 [ 74.746630][ T5065] ? __warn+0x172/0x4b0 [ 74.746659][ T5065] ? __pfx_panic+0x10/0x10 [ 74.746693][ T5065] __warn+0x31e/0x4b0 [ 74.746722][ T5065] ? __local_bh_enable_ip+0x1be/0x200 [ 74.746745][ T5065] report_bug+0x2b3/0x500 [ 74.746776][ T5065] ? __local_bh_enable_ip+0x1be/0x200 [ 74.746800][ T5065] handle_bug+0x3e/0x70 [ 74.746827][ T5065] exc_invalid_op+0x1a/0x50 [ 74.746856][ T5065] asm_exc_invalid_op+0x1a/0x20 [ 74.746886][ T5065] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 74.746910][ T5065] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 9c e1 86 8f 80 e1 07 80 c1 03 38 [ 74.746927][ T5065] RSP: 0018:ffffc900039b71e0 EFLAGS: 00010046 [ 74.746946][ T5065] RAX: 0000000000000000 RBX: 1ffff92000736e40 RCX: 0000000000000000 [ 74.746959][ T5065] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895fa99a [ 74.746973][ T5065] RBP: ffffc900039b72a0 R08: ffff888022bbb1eb R09: 1ffff1100457763d [ 74.746989][ T5065] R10: dffffc0000000000 R11: ffffed100457763e R12: dffffc0000000000 [ 74.747004][ T5065] R13: ffff88802e5c8740 R14: ffffc900039b7220 R15: 0000000000000201 [ 74.747025][ T5065] ? sock_map_delete_elem+0xca/0x140 [ 74.747051][ T5065] ? sock_map_delete_elem+0xca/0x140 [ 74.747072][ T5065] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 74.747093][ T5065] ? sock_map_delete_elem+0xca/0x140 [ 74.747113][ T5065] ? do_raw_spin_unlock+0x13c/0x8b0 [ 74.747144][ T5065] ? __pfx___cant_migrate+0x10/0x10 [ 74.747168][ T5065] ? sock_map_delete_elem+0x97/0x140 [ 74.747192][ T5065] sock_map_delete_elem+0xca/0x140 [ 74.747215][ T5065] bpf_prog_8a405b5ced52e191+0x4a/0x4e [ 74.747238][ T5065] bpf_trace_run2+0x204/0x420 [ 74.747262][ T5065] ? bpf_trace_run2+0x114/0x420 [ 74.747285][ T5065] ? __pfx_bpf_trace_run2+0x10/0x10 [ 74.747308][ T5065] ? __pfx_debug_object_activate+0x10/0x10 [ 74.747336][ T5065] enqueue_timer+0x396/0x550 [ 74.747362][ T5065] __mod_timer+0x953/0xeb0 [ 74.747400][ T5065] ? __pfx___mod_timer+0x10/0x10 [ 74.747436][ T5065] ? __asan_memset+0x23/0x50 [ 74.747460][ T5065] sk_reset_timer+0x23/0xc0 [ 74.747481][ T5065] tcp_schedule_loss_probe+0x419/0x560 [ 74.747512][ T5065] tcp_write_xmit+0x3682/0x6100 [ 74.747570][ T5065] __tcp_push_pending_frames+0x9b/0x360 [ 74.747603][ T5065] tcp_sendmsg_locked+0x42cc/0x4d00 [ 74.747661][ T5065] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 74.747683][ T5065] ? __local_bh_enable_ip+0x168/0x200 [ 74.747706][ T5065] ? do_raw_spin_unlock+0x13c/0x8b0 [ 74.747741][ T5065] tcp_sendmsg+0x30/0x50 [ 74.747764][ T5065] __sock_sendmsg+0x1a6/0x270 [ 74.747786][ T5065] sock_write_iter+0x2dd/0x400 [ 74.747820][ T5065] ? __pfx_sock_write_iter+0x10/0x10 [ 74.747858][ T5065] ? bpf_lsm_file_permission+0x9/0x10 [ 74.747884][ T5065] ? security_file_permission+0x7f/0xa0 [ 74.747912][ T5065] vfs_write+0xa84/0xcb0 [ 74.747943][ T5065] ? __pfx_vfs_write+0x10/0x10 [ 74.747965][ T5065] ? __set_current_blocked+0x310/0x380 [ 74.747992][ T5065] ? __might_fault+0xc6/0x120 [ 74.748015][ T5065] ? __fdget_pos+0x1a2/0x320 [ 74.748044][ T5065] ksys_write+0x1a0/0x2c0 [ 74.748071][ T5065] ? __pfx_ksys_write+0x10/0x10 [ 74.748095][ T5065] ? do_syscall_64+0x10a/0x240 [ 74.748123][ T5065] ? do_syscall_64+0xb6/0x240 [ 74.748151][ T5065] do_syscall_64+0xfb/0x240 [ 74.748180][ T5065] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 74.748211][ T5065] RIP: 0033:0x7fdb7cb16bf2 [ 74.748228][ T5065] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83 [ 74.748244][ T5065] RSP: 002b:00007ffc884a63c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.748264][ T5065] RAX: ffffffffffffffda RBX: 000000000000002c RCX: 00007fdb7cb16bf2 [ 74.748279][ T5065] RDX: 000000000000002c RSI: 000055de20155960 RDI: 0000000000000004 [ 74.748292][ T5065] RBP: 000055de20163c20 R08: 0000000000000000 R09: 0000000000000000 [ 74.748305][ T5065] R10: 0000000000000000 R11: 0000000000000246 R12: 000055de0d2f1aa4 [ 74.748318][ T5065] R13: 000000000000004a R14: 000055de0d2f23e8 R15: 00007ffc884a6438 [ 74.748342][ T5065] [ 74.751224][ T5065] Kernel Offset: disabled