./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1004366679 <...> Warning: Permanently added '10.128.1.159' (ED25519) to the list of known hosts. execve("./syz-executor1004366679", ["./syz-executor1004366679"], 0x7ffec7a7b6c0 /* 10 vars */) = 0 brk(NULL) = 0x555574e1d000 brk(0x555574e1dd00) = 0x555574e1dd00 arch_prctl(ARCH_SET_FS, 0x555574e1d380) = 0 set_tid_address(0x555574e1d650) = 5065 set_robust_list(0x555574e1d660, 24) = 0 rseq(0x555574e1dca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1004366679", 4096) = 28 getrandom("\x0d\x85\x70\x8e\xfd\xab\x60\x9a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555574e1dd00 brk(0x555574e3ed00) = 0x555574e3ed00 brk(0x555574e3f000) = 0x555574e3f000 mprotect(0x7efc9ef23000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555574e1d650) = 5066 ./strace-static-x86_64: Process 5066 attached [pid 5066] set_robust_list(0x555574e1d660, 24) = 0 [pid 5066] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5066] setpgid(0, 0) = 0 [pid 5066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5066] write(3, "1000", 4) = 4 [pid 5066] close(3) = 0 [pid 5066] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=4, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5066] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5066] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5066] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="timer_start", prog_fd=4}}, 16) = 5 [ 62.145180][ T5060] ------------[ cut here ]------------ [ 62.145232][ T5060] [ 62.145237][ T5060] ====================================================== [ 62.145242][ T5060] WARNING: possible circular locking dependency detected [ 62.145247][ T5060] 6.8.0-syzkaller-05236-g443574b03387 #0 Not tainted [ 62.145256][ T5060] ------------------------------------------------------ [ 62.145260][ T5060] sshd/5060 is trying to acquire lock: [ 62.145268][ T5060] ffffffff8e00d498 ((console_sem).lock){-...}-{2:2}, at: down_trylock+0x20/0xa0 [ 62.145338][ T5060] [ 62.145338][ T5060] but task is already holding lock: [ 62.145342][ T5060] ffff8880b942a758 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 62.145382][ T5060] [ 62.145382][ T5060] which lock already depends on the new lock. [ 62.145382][ T5060] [ 62.145386][ T5060] [ 62.145386][ T5060] the existing dependency chain (in reverse order) is: [ 62.145391][ T5060] [ 62.145391][ T5060] -> #3 (&base->lock){-.-.}-{2:2}: [ 62.145411][ T5060] lock_acquire+0x1e4/0x530 [ 62.145426][ T5060] _raw_spin_lock_irqsave+0xd5/0x120 [ 62.145443][ T5060] lock_timer_base+0x112/0x240 [ 62.145462][ T5060] __mod_timer+0x1ca/0xeb0 [ 62.145488][ T5060] queue_delayed_work_on+0x15a/0x260 [ 62.145504][ T5060] psi_task_change+0xfd/0x280 [ 62.145522][ T5060] enqueue_task+0x2a6/0x2f0 [ 62.145535][ T5060] wake_up_new_task+0x564/0xc10 [ 62.145551][ T5060] kernel_clone+0x4d4/0x8d0 [ 62.145567][ T5060] user_mode_thread+0x132/0x1a0 [ 62.145582][ T5060] rest_init+0x27/0x300 [ 62.145600][ T5060] arch_call_rest_init+0xe/0x10 [ 62.145614][ T5060] start_kernel+0x47a/0x500 [ 62.145627][ T5060] x86_64_start_reservations+0x2a/0x30 [ 62.145644][ T5060] x86_64_start_kernel+0x99/0xa0 [ 62.145661][ T5060] common_startup_64+0x13e/0x147 [ 62.145677][ T5060] [ 62.145677][ T5060] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 62.145698][ T5060] lock_acquire+0x1e4/0x530 [ 62.145711][ T5060] _raw_spin_lock_nested+0x31/0x40 [ 62.145728][ T5060] raw_spin_rq_lock_nested+0x2a/0x140 [ 62.145748][ T5060] task_fork_fair+0x61/0x1e0 [ 62.145766][ T5060] sched_cgroup_fork+0x37c/0x410 [ 62.145783][ T5060] copy_process+0x2217/0x3df0 [ 62.145797][ T5060] kernel_clone+0x21e/0x8d0 [ 62.145813][ T5060] user_mode_thread+0x132/0x1a0 [ 62.145828][ T5060] rest_init+0x27/0x300 [ 62.145846][ T5060] arch_call_rest_init+0xe/0x10 [ 62.145859][ T5060] start_kernel+0x47a/0x500 [ 62.145872][ T5060] x86_64_start_reservations+0x2a/0x30 [ 62.145889][ T5060] x86_64_start_kernel+0x99/0xa0 [ 62.145905][ T5060] common_startup_64+0x13e/0x147 [ 62.145921][ T5060] [ 62.145921][ T5060] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 62.145941][ T5060] lock_acquire+0x1e4/0x530 [ 62.145954][ T5060] _raw_spin_lock_irqsave+0xd5/0x120 [ 62.145970][ T5060] try_to_wake_up+0xb0/0x1470 [ 62.145984][ T5060] up+0x72/0x90 [ 62.146002][ T5060] console_unlock+0x22f/0x4d0 [ 62.146018][ T5060] vprintk_emit+0x509/0x720 [ 62.146035][ T5060] dev_vprintk_emit+0x2ae/0x330 [ 62.146050][ T5060] dev_printk_emit+0xdd/0x120 [ 62.146064][ T5060] _dev_warn+0x122/0x170 [ 62.146078][ T5060] firmware_fallback_sysfs+0x4cf/0x9e0 [ 62.146100][ T5060] _request_firmware+0xc97/0x1250 [ 62.146113][ T5060] request_firmware_work_func+0x12a/0x280 [ 62.146127][ T5060] process_scheduled_works+0xa00/0x1770 [ 62.146141][ T5060] worker_thread+0x86d/0xd70 [ 62.146156][ T5060] kthread+0x2f0/0x390 [ 62.146172][ T5060] ret_from_fork+0x4b/0x80 [ 62.146190][ T5060] ret_from_fork_asm+0x1a/0x30 [ 62.146210][ T5060] [ 62.146210][ T5060] -> #0 ((console_sem).lock){-...}-{2:2}: [ 62.146231][ T5060] validate_chain+0x18cb/0x58e0 [ 62.146247][ T5060] __lock_acquire+0x1346/0x1fd0 [ 62.146260][ T5060] lock_acquire+0x1e4/0x530 [ 62.146273][ T5060] _raw_spin_lock_irqsave+0xd5/0x120 [ 62.146288][ T5060] down_trylock+0x20/0xa0 [ 62.146305][ T5060] __down_trylock_console_sem+0x109/0x250 [ 62.146323][ T5060] vprintk_emit+0x1ef/0x720 [ 62.146338][ T5060] _printk+0xd5/0x120 [ 62.146352][ T5060] report_bug+0x346/0x500 [ 62.146370][ T5060] handle_bug+0x3e/0x70 [ 62.146386][ T5060] exc_invalid_op+0x1a/0x50 [ 62.146400][ T5060] asm_exc_invalid_op+0x1a/0x20 [ 62.146416][ T5060] __local_bh_enable_ip+0x1be/0x200 [ 62.146427][ T5060] sock_map_delete_elem+0xca/0x140 [ 62.146438][ T5060] bpf_prog_8a405b5ced52e191+0x4a/0x4e [ 62.146450][ T5060] bpf_trace_run2+0x204/0x420 [ 62.146462][ T5060] enqueue_timer+0x396/0x550 [ 62.146478][ T5060] __mod_timer+0x953/0xeb0 [ 62.146493][ T5060] sk_reset_timer+0x23/0xc0 [ 62.146503][ T5060] tcp_event_new_data_sent+0x203/0x360 [ 62.146519][ T5060] tcp_write_xmit+0x1468/0x6100 [ 62.146533][ T5060] __tcp_push_pending_frames+0x9b/0x360 [ 62.146546][ T5060] tcp_sendmsg_locked+0x42cc/0x4d00 [ 62.146558][ T5060] tcp_sendmsg+0x30/0x50 [ 62.146568][ T5060] __sock_sendmsg+0x1a6/0x270 [ 62.146578][ T5060] sock_write_iter+0x2dd/0x400 [ 62.146593][ T5060] vfs_write+0xa84/0xcb0 [ 62.146605][ T5060] ksys_write+0x1a0/0x2c0 [ 62.146616][ T5060] do_syscall_64+0xfb/0x240 [ 62.146628][ T5060] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 62.146644][ T5060] [ 62.146644][ T5060] other info that might help us debug this: [ 62.146644][ T5060] [ 62.146647][ T5060] Chain exists of: [ 62.146647][ T5060] (console_sem).lock --> &rq->__lock --> &base->lock [ 62.146647][ T5060] [ 62.146665][ T5060] Possible unsafe locking scenario: [ 62.146665][ T5060] [ 62.146668][ T5060] CPU0 CPU1 [ 62.146671][ T5060] ---- ---- [ 62.146674][ T5060] lock(&base->lock); [ 62.146680][ T5060] lock(&rq->__lock); [ 62.146688][ T5060] lock(&base->lock); [ 62.146695][ T5060] lock((console_sem).lock); [ 62.146702][ T5060] [ 62.146702][ T5060] *** DEADLOCK *** [ 62.146702][ T5060] [ 62.146704][ T5060] 3 locks held by sshd/5060: [ 62.146711][ T5060] #0: ffff88823bda6258 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x22/0x50 [ 62.146739][ T5060] #1: ffff8880b942a758 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 62.146771][ T5060] #2: ffffffff8e131920 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x114/0x420 [ 62.146798][ T5060] [ 62.146798][ T5060] stack backtrace: [ 62.146802][ T5060] CPU: 0 PID: 5060 Comm: sshd Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0 [ 62.146814][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 62.146821][ T5060] Call Trace: [ 62.146826][ T5060] [ 62.146831][ T5060] dump_stack_lvl+0x1e7/0x2e0 [ 62.146848][ T5060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 62.146865][ T5060] ? print_circular_bug+0x130/0x1a0 [ 62.146881][ T5060] check_noncircular+0x36a/0x4a0 [ 62.146895][ T5060] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 62.146914][ T5060] ? __pfx_check_noncircular+0x10/0x10 [ 62.146929][ T5060] ? lockdep_lock+0x123/0x2b0 [ 62.146949][ T5060] ? __pfx_validate_chain+0x10/0x10 [ 62.146962][ T5060] ? _find_first_zero_bit+0xd4/0x100 [ 62.146980][ T5060] validate_chain+0x18cb/0x58e0 [ 62.147002][ T5060] ? start_xmit+0x16c/0x1420 [ 62.147016][ T5060] ? __pfx_validate_chain+0x10/0x10 [ 62.147029][ T5060] ? ip_finish_output2+0xd41/0x1380 [ 62.147040][ T5060] ? __ip_queue_xmit+0x118c/0x1b70 [ 62.147056][ T5060] ? __tcp_transmit_skb+0x2557/0x3b80 [ 62.147074][ T5060] ? rcu_is_watching+0x15/0xb0 [ 62.147087][ T5060] ? data_alloc+0x523/0x840 [ 62.147098][ T5060] ? __pfx_lock_acquire+0x10/0x10 [ 62.147112][ T5060] ? format_decode+0x6bc/0x1bb0 [ 62.147132][ T5060] ? mark_lock+0x9a/0x350 [ 62.147146][ T5060] __lock_acquire+0x1346/0x1fd0 [ 62.147164][ T5060] lock_acquire+0x1e4/0x530 [ 62.147175][ T5060] ? down_trylock+0x20/0xa0 [ 62.147194][ T5060] ? __pfx_lock_acquire+0x10/0x10 [ 62.147204][ T5060] ? rcu_is_watching+0x15/0xb0 [ 62.147217][ T5060] ? prb_final_commit+0x6f/0xa0 [ 62.147228][ T5060] ? vprintk_store+0xd3e/0x1160 [ 62.147246][ T5060] _raw_spin_lock_irqsave+0xd5/0x120 [ 62.147259][ T5060] ? down_trylock+0x20/0xa0 [ 62.147275][ T5060] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 62.147289][ T5060] ? validate_chain+0x15a2/0x58e0 [ 62.147305][ T5060] down_trylock+0x20/0xa0 [ 62.147322][ T5060] __down_trylock_console_sem+0x109/0x250 [ 62.147339][ T5060] ? _printk+0xd5/0x120 [ 62.147351][ T5060] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 62.147368][ T5060] ? __pfx_validate_chain+0x10/0x10 [ 62.147384][ T5060] vprintk_emit+0x1ef/0x720 [ 62.147399][ T5060] ? __pfx_vprintk_emit+0x10/0x10 [ 62.147415][ T5060] ? lockdep_unlock+0x16a/0x300 [ 62.147434][ T5060] _printk+0xd5/0x120 [ 62.147448][ T5060] ? report_bug+0x25e/0x500 [ 62.147464][ T5060] ? __pfx__printk+0x10/0x10 [ 62.147482][ T5060] ? __lock_acquire+0x1346/0x1fd0 [ 62.147494][ T5060] ? find_bug+0xa3/0x390 [ 62.147509][ T5060] ? __local_bh_enable_ip+0x1be/0x200 [ 62.147522][ T5060] report_bug+0x346/0x500 [ 62.147538][ T5060] ? __local_bh_enable_ip+0x1be/0x200 [ 62.147552][ T5060] handle_bug+0x3e/0x70 [ 62.147567][ T5060] exc_invalid_op+0x1a/0x50 [ 62.147582][ T5060] asm_exc_invalid_op+0x1a/0x20 [ 62.147598][ T5060] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 62.147611][ T5060] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 9c e1 86 8f 80 e1 07 80 c1 03 38 [ 62.147621][ T5060] RSP: 0018:ffffc90003c3f1c0 EFLAGS: 00010046 [ 62.147631][ T5060] RAX: 0000000000000000 RBX: 1ffff92000787e3c RCX: 0000000000000000 [ 62.147639][ T5060] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895fa99a [ 62.147647][ T5060] RBP: ffffc90003c3f280 R08: ffff8880226091eb R09: 1ffff110044c123d [ 62.147656][ T5060] R10: dffffc0000000000 R11: ffffed10044c123e R12: dffffc0000000000 [ 62.147664][ T5060] R13: ffff88801ff11f00 R14: ffffc90003c3f200 R15: 0000000000000201 [ 62.147676][ T5060] ? sock_map_delete_elem+0xca/0x140 [ 62.147690][ T5060] ? sock_map_delete_elem+0xca/0x140 [ 62.147702][ T5060] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 62.147713][ T5060] ? sock_map_delete_elem+0xca/0x140 [ 62.147725][ T5060] ? do_raw_spin_unlock+0x13c/0x8b0 [ 62.147741][ T5060] ? __pfx___cant_migrate+0x10/0x10 [ 62.147754][ T5060] ? sock_map_delete_elem+0x97/0x140 [ 62.147768][ T5060] sock_map_delete_elem+0xca/0x140 [ 62.147780][ T5060] bpf_prog_8a405b5ced52e191+0x4a/0x4e [ 62.147793][ T5060] bpf_trace_run2+0x204/0x420 [ 62.147806][ T5060] ? bpf_trace_run2+0x114/0x420 [ 62.147819][ T5060] ? __pfx_bpf_trace_run2+0x10/0x10 [ 62.147831][ T5060] ? __pfx_debug_object_activate+0x10/0x10 [ 62.147843][ T5060] ? __tcp_transmit_skb+0x21fe/0x3b80 [ 62.147862][ T5060] enqueue_timer+0x396/0x550 [ 62.147876][ T5060] __mod_timer+0x953/0xeb0 [ 62.147896][ T5060] ? __pfx___mod_timer+0x10/0x10 [ 62.147911][ T5060] ? seqcount_lockdep_reader_access+0x157/0x220 [ 62.147928][ T5060] ? lockdep_hardirqs_on+0x99/0x150 [ 62.147944][ T5060] ? __asan_memset+0x23/0x50 [ 62.147957][ T5060] sk_reset_timer+0x23/0xc0 [ 62.147968][ T5060] tcp_event_new_data_sent+0x203/0x360 [ 62.147988][ T5060] tcp_write_xmit+0x1468/0x6100 [ 62.148016][ T5060] __tcp_push_pending_frames+0x9b/0x360 [ 62.148033][ T5060] tcp_sendmsg_locked+0x42cc/0x4d00 [ 62.148062][ T5060] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 62.148074][ T5060] ? __local_bh_enable_ip+0x168/0x200 [ 62.148087][ T5060] ? do_raw_spin_unlock+0x13c/0x8b0 [ 62.148106][ T5060] tcp_sendmsg+0x30/0x50 [ 62.148118][ T5060] __sock_sendmsg+0x1a6/0x270 [ 62.148130][ T5060] sock_write_iter+0x2dd/0x400 [ 62.148147][ T5060] ? __pfx_sock_write_iter+0x10/0x10 [ 62.148168][ T5060] ? bpf_lsm_file_permission+0x9/0x10 [ 62.148182][ T5060] ? security_file_permission+0x7f/0xa0 [ 62.148197][ T5060] vfs_write+0xa84/0xcb0 [ 62.148213][ T5060] ? __pfx_vfs_write+0x10/0x10 [ 62.148225][ T5060] ? __set_current_blocked+0x310/0x380 [ 62.148240][ T5060] ? __might_fault+0xc6/0x120 [ 62.148253][ T5060] ? __fdget_pos+0x1a2/0x320 [ 62.148269][ T5060] ksys_write+0x1a0/0x2c0 [ 62.148284][ T5060] ? __pfx_ksys_write+0x10/0x10 [ 62.148297][ T5060] ? do_syscall_64+0x10a/0x240 [ 62.148312][ T5060] ? do_syscall_64+0xb6/0x240 [ 62.148327][ T5060] do_syscall_64+0xfb/0x240 [ 62.148342][ T5060] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 62.148359][ T5060] RIP: 0033:0x7faf9f116bf2 [ 62.148368][ T5060] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83 [ 62.148377][ T5060] RSP: 002b:00007fff0d0418e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 62.148389][ T5060] RAX: ffffffffffffffda RBX: 000000000000002c RCX: 00007faf9f116bf2 [ 62.148397][ T5060] RDX: 000000000000002c RSI: 000055dc69c88960 RDI: 0000000000000004 [ 62.148404][ T5060] RBP: 000055dc69c913f0 R08: 0000000000000000 R09: 0000000000000000 [ 62.148411][ T5060] R10: 0000000000000000 R11: 0000000000000246 R12: 000055dc47d42aa4 [ 62.148419][ T5060] R13: 000000000000003e R14: 000055dc47d433e8 R15: 00007fff0d041958 [ 62.148432][ T5060] [ 63.427450][ T5060] WARNING: CPU: 0 PID: 5060 at kernel/softirq.c:362 __local_bh_enable_ip+0x1be/0x200 [ 63.436913][ T5060] Modules linked in: [ 63.440881][ T5060] CPU: 0 PID: 5060 Comm: sshd Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0 [ 63.449971][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 63.460027][ T5060] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 63.466182][ T5060] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 9c e1 86 8f 80 e1 07 80 c1 03 38 [ 63.485796][ T5060] RSP: 0018:ffffc90003c3f1c0 EFLAGS: 00010046 [ 63.491854][ T5060] RAX: 0000000000000000 RBX: 1ffff92000787e3c RCX: 0000000000000000 [ 63.499817][ T5060] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895fa99a [ 63.507779][ T5060] RBP: ffffc90003c3f280 R08: ffff8880226091eb R09: 1ffff110044c123d [ 63.515749][ T5060] R10: dffffc0000000000 R11: ffffed10044c123e R12: dffffc0000000000 [ 63.524401][ T5060] R13: ffff88801ff11f00 R14: ffffc90003c3f200 R15: 0000000000000201 [ 63.532389][ T5060] FS: 00007faf9f4a5800(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 63.541307][ T5060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.547876][ T5060] CR2: 0000000000000000 CR3: 000000002212c000 CR4: 00000000003506f0 [ 63.555837][ T5060] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.563794][ T5060] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.571755][ T5060] Call Trace: [ 63.575023][ T5060] [ 63.577944][ T5060] ? __warn+0x163/0x4b0 [ 63.582092][ T5060] ? __local_bh_enable_ip+0x1be/0x200 [ 63.587539][ T5060] ? report_bug+0x2b3/0x500 [ 63.592031][ T5060] ? __local_bh_enable_ip+0x1be/0x200 [ 63.597390][ T5060] ? handle_bug+0x3e/0x70 [ 63.601801][ T5060] ? exc_invalid_op+0x1a/0x50 [ 63.606471][ T5060] ? asm_exc_invalid_op+0x1a/0x20 [ 63.611491][ T5060] ? sock_map_delete_elem+0xca/0x140 [ 63.616773][ T5060] ? __local_bh_enable_ip+0x1be/0x200 [ 63.622135][ T5060] ? sock_map_delete_elem+0xca/0x140 [ 63.627411][ T5060] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 63.633112][ T5060] ? sock_map_delete_elem+0xca/0x140 [ 63.638381][ T5060] ? do_raw_spin_unlock+0x13c/0x8b0 [ 63.643570][ T5060] ? __pfx___cant_migrate+0x10/0x10 [ 63.648753][ T5060] ? sock_map_delete_elem+0x97/0x140 [ 63.654024][ T5060] sock_map_delete_elem+0xca/0x140 [ 63.659124][ T5060] bpf_prog_8a405b5ced52e191+0x4a/0x4e [ 63.664568][ T5060] bpf_trace_run2+0x204/0x420 [ 63.669230][ T5060] ? bpf_trace_run2+0x114/0x420 [ 63.674063][ T5060] ? __pfx_bpf_trace_run2+0x10/0x10 [ 63.679254][ T5060] ? __pfx_debug_object_activate+0x10/0x10 [ 63.685042][ T5060] ? __tcp_transmit_skb+0x21fe/0x3b80 [ 63.690405][ T5060] enqueue_timer+0x396/0x550 [ 63.694982][ T5060] __mod_timer+0x953/0xeb0 [ 63.699393][ T5060] ? __pfx___mod_timer+0x10/0x10 [ 63.704321][ T5060] ? seqcount_lockdep_reader_access+0x157/0x220 [ 63.710636][ T5060] ? lockdep_hardirqs_on+0x99/0x150 [ 63.715852][ T5060] ? __asan_memset+0x23/0x50 [ 63.720457][ T5060] sk_reset_timer+0x23/0xc0 [ 63.724962][ T5060] tcp_event_new_data_sent+0x203/0x360 [ 63.730422][ T5060] tcp_write_xmit+0x1468/0x6100 [ 63.735281][ T5060] __tcp_push_pending_frames+0x9b/0x360 [ 63.740818][ T5060] tcp_sendmsg_locked+0x42cc/0x4d00 [ 63.746071][ T5060] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 63.751622][ T5060] ? __local_bh_enable_ip+0x168/0x200 [ 63.757013][ T5060] ? do_raw_spin_unlock+0x13c/0x8b0 [ 63.762211][ T5060] tcp_sendmsg+0x30/0x50 [ 63.766442][ T5060] __sock_sendmsg+0x1a6/0x270 [ 63.771106][ T5060] sock_write_iter+0x2dd/0x400 [ 63.775861][ T5060] ? __pfx_sock_write_iter+0x10/0x10 [ 63.781228][ T5060] ? bpf_lsm_file_permission+0x9/0x10 [ 63.786587][ T5060] ? security_file_permission+0x7f/0xa0 [ 63.792210][ T5060] vfs_write+0xa84/0xcb0 [ 63.796444][ T5060] ? __pfx_vfs_write+0x10/0x10 [ 63.801233][ T5060] ? __set_current_blocked+0x310/0x380 [ 63.806707][ T5060] ? __might_fault+0xc6/0x120 [ 63.811372][ T5060] ? __fdget_pos+0x1a2/0x320 [ 63.815949][ T5060] ksys_write+0x1a0/0x2c0 [ 63.820275][ T5060] ? __pfx_ksys_write+0x10/0x10 [ 63.825112][ T5060] ? do_syscall_64+0x10a/0x240 [ 63.829889][ T5060] ? do_syscall_64+0xb6/0x240 [ 63.834552][ T5060] do_syscall_64+0xfb/0x240 [ 63.839043][ T5060] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 63.844943][ T5060] RIP: 0033:0x7faf9f116bf2 [ 63.849347][ T5060] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83 [ 63.868940][ T5060] RSP: 002b:00007fff0d0418e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 63.877341][ T5060] RAX: ffffffffffffffda RBX: 000000000000002c RCX: 00007faf9f116bf2 [ 63.885298][ T5060] RDX: 000000000000002c RSI: 000055dc69c88960 RDI: 0000000000000004 [ 63.893253][ T5060] RBP: 000055dc69c913f0 R08: 0000000000000000 R09: 0000000000000000 [ 63.901208][ T5060] R10: 0000000000000000 R11: 0000000000000246 R12: 000055dc47d42aa4 [ 63.909165][ T5060] R13: 000000000000003e R14: 000055dc47d433e8 R15: 00007fff0d041958 [ 63.917392][ T5060] [ 63.920400][ T5060] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 63.927662][ T5060] CPU: 0 PID: 5060 Comm: sshd Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0 [ 63.936754][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 63.946791][ T5060] Call Trace: [ 63.950056][ T5060] [ 63.952975][ T5060] dump_stack_lvl+0x1e7/0x2e0 [ 63.957649][ T5060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 63.962835][ T5060] ? __pfx__printk+0x10/0x10 [ 63.967418][ T5060] ? vscnprintf+0x5d/0x90 [ 63.971736][ T5060] panic+0x349/0x860 [ 63.975628][ T5060] ? __warn+0x172/0x4b0 [ 63.979779][ T5060] ? __pfx_panic+0x10/0x10 [ 63.984191][ T5060] __warn+0x31e/0x4b0 [ 63.988247][ T5060] ? __local_bh_enable_ip+0x1be/0x200 [ 63.993605][ T5060] report_bug+0x2b3/0x500 [ 63.997926][ T5060] ? __local_bh_enable_ip+0x1be/0x200 [ 64.003287][ T5060] handle_bug+0x3e/0x70 [ 64.007431][ T5060] exc_invalid_op+0x1a/0x50 [ 64.011921][ T5060] asm_exc_invalid_op+0x1a/0x20 [ 64.016761][ T5060] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 64.022816][ T5060] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 9c e1 86 8f 80 e1 07 80 c1 03 38 [ 64.042411][ T5060] RSP: 0018:ffffc90003c3f1c0 EFLAGS: 00010046 [ 64.048467][ T5060] RAX: 0000000000000000 RBX: 1ffff92000787e3c RCX: 0000000000000000 [ 64.056451][ T5060] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895fa99a [ 64.064581][ T5060] RBP: ffffc90003c3f280 R08: ffff8880226091eb R09: 1ffff110044c123d [ 64.072538][ T5060] R10: dffffc0000000000 R11: ffffed10044c123e R12: dffffc0000000000 [ 64.080499][ T5060] R13: ffff88801ff11f00 R14: ffffc90003c3f200 R15: 0000000000000201 [ 64.088460][ T5060] ? sock_map_delete_elem+0xca/0x140 [ 64.093759][ T5060] ? sock_map_delete_elem+0xca/0x140 [ 64.099028][ T5060] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 64.104819][ T5060] ? sock_map_delete_elem+0xca/0x140 [ 64.110088][ T5060] ? do_raw_spin_unlock+0x13c/0x8b0 [ 64.115277][ T5060] ? __pfx___cant_migrate+0x10/0x10 [ 64.120551][ T5060] ? sock_map_delete_elem+0x97/0x140 [ 64.125825][ T5060] sock_map_delete_elem+0xca/0x140 [ 64.130929][ T5060] bpf_prog_8a405b5ced52e191+0x4a/0x4e [ 64.136376][ T5060] bpf_trace_run2+0x204/0x420 [ 64.141042][ T5060] ? bpf_trace_run2+0x114/0x420 [ 64.145906][ T5060] ? __pfx_bpf_trace_run2+0x10/0x10 [ 64.151208][ T5060] ? __pfx_debug_object_activate+0x10/0x10 [ 64.157103][ T5060] ? __tcp_transmit_skb+0x21fe/0x3b80 [ 64.162492][ T5060] enqueue_timer+0x396/0x550 [ 64.167093][ T5060] __mod_timer+0x953/0xeb0 [ 64.171534][ T5060] ? __pfx___mod_timer+0x10/0x10 [ 64.176482][ T5060] ? seqcount_lockdep_reader_access+0x157/0x220 [ 64.182755][ T5060] ? lockdep_hardirqs_on+0x99/0x150 [ 64.187963][ T5060] ? __asan_memset+0x23/0x50 [ 64.192649][ T5060] sk_reset_timer+0x23/0xc0 [ 64.197255][ T5060] tcp_event_new_data_sent+0x203/0x360 [ 64.202718][ T5060] tcp_write_xmit+0x1468/0x6100 [ 64.207575][ T5060] __tcp_push_pending_frames+0x9b/0x360 [ 64.213140][ T5060] tcp_sendmsg_locked+0x42cc/0x4d00 [ 64.218353][ T5060] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 64.223886][ T5060] ? __local_bh_enable_ip+0x168/0x200 [ 64.229308][ T5060] ? do_raw_spin_unlock+0x13c/0x8b0 [ 64.234517][ T5060] tcp_sendmsg+0x30/0x50 [ 64.238766][ T5060] __sock_sendmsg+0x1a6/0x270 [ 64.243456][ T5060] sock_write_iter+0x2dd/0x400 [ 64.248320][ T5060] ? __pfx_sock_write_iter+0x10/0x10 [ 64.253704][ T5060] ? bpf_lsm_file_permission+0x9/0x10 [ 64.259243][ T5060] ? security_file_permission+0x7f/0xa0 [ 64.264784][ T5060] vfs_write+0xa84/0xcb0 [ 64.269036][ T5060] ? __pfx_vfs_write+0x10/0x10 [ 64.273872][ T5060] ? __set_current_blocked+0x310/0x380 [ 64.279321][ T5060] ? __might_fault+0xc6/0x120 [ 64.283987][ T5060] ? __fdget_pos+0x1a2/0x320 [ 64.288569][ T5060] ksys_write+0x1a0/0x2c0 [ 64.292891][ T5060] ? __pfx_ksys_write+0x10/0x10 [ 64.297738][ T5060] ? do_syscall_64+0x10a/0x240 [ 64.302594][ T5060] ? do_syscall_64+0xb6/0x240 [ 64.307263][ T5060] do_syscall_64+0xfb/0x240 [ 64.311967][ T5060] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 64.317869][ T5060] RIP: 0033:0x7faf9f116bf2 [ 64.322283][ T5060] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83 [ 64.341892][ T5060] RSP: 002b:00007fff0d0418e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 64.350302][ T5060] RAX: ffffffffffffffda RBX: 000000000000002c RCX: 00007faf9f116bf2 [ 64.358257][ T5060] RDX: 000000000000002c RSI: 000055dc69c88960 RDI: 0000000000000004 [ 64.366213][ T5060] RBP: 000055dc69c913f0 R08: 0000000000000000 R09: 0000000000000000 [ 64.374361][ T5060] R10: 0000000000000000 R11: 0000000000000246 R12: 000055dc47d42aa4 [ 64.382335][ T5060] R13: 000000000000003e R14: 000055dc47d433e8 R15: 00007fff0d041958 [ 64.390314][ T5060] [ 64.393590][ T5060] Kernel Offset: disabled [ 64.397907][ T5060] Rebooting in 86400 seconds..