./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1207935911 <...> Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts. execve("./syz-executor1207935911", ["./syz-executor1207935911"], 0x7ffcc5834910 /* 10 vars */) = 0 brk(NULL) = 0x55555744b000 brk(0x55555744bd00) = 0x55555744bd00 arch_prctl(ARCH_SET_FS, 0x55555744b380) = 0 set_tid_address(0x55555744b650) = 5070 set_robust_list(0x55555744b660, 24) = 0 rseq(0x55555744bca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1207935911", 4096) = 28 getrandom("\xb0\xea\x10\xe8\xc4\x41\x50\x9f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555744bd00 brk(0x55555746cd00) = 0x55555746cd00 brk(0x55555746d000) = 0x55555746d000 mprotect(0x7fb80022e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/sync/sw_sync", O_RDONLY) = 3 ioctl(3, _IOC(_IOC_READ|_IOC_WRITE, 0x57, 0, 0x28), 0x20000080) = 0 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 7 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 9 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 10 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 11 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 12 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 13 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 14 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 15 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 16 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 17 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 18 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 19 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 20 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 21 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 22 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 23 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 24 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 25 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 26 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 27 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 28 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 29 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 30 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 31 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 32 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 33 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 34 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 35 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 36 openat(AT_FDCWD, "rdma.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 37 openat(AT_FDCWD, "/sys/kernel/debug/sync/sw_sync", O_RDONLY) = 38 ioctl(38, _IOC(_IOC_READ|_IOC_WRITE, 0x57, 0, 0x28), 0x200001c0) = 0 ioctl(39, SYNC_IOC_MERGE, 0x20000280) = 0 ppoll([{fd=-1}, {fd=3, events=POLLWRNORM|POLLREMOVE}, {fd=40, events=0}, {fd=40, events=0}], 4, NULL, NULL, 0) = 1 ([{fd=3, revents=POLLWRNORM}]) openat(AT_FDCWD, "/sys/kernel/debug/sync/info", O_RDONLY|O_TRUNC|O_LARGEFILE) = 41 read(41, "objs:\n--------------\nsyz-executor120: 0\n fence active: 3 / 0\n\nsyz-executor120: 0\n fence active: 21"..., 8224) = 137 exit_group(0) = ? [ 70.718258][ C0] [ 70.720698][ C0] ================================ [ 70.725878][ C0] WARNING: inconsistent lock state [ 70.730973][ C0] 6.8.0-rc6-syzkaller #0 Not tainted [ 70.736243][ C0] -------------------------------- [ 70.741337][ C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 70.748361][ C0] syz-executor120/5070 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 70.755133][ C0] ffffffff8ea8cd18 (sync_timeline_list_lock){?.+.}-{2:2}, at: sync_timeline_debug_remove+0x2c/0x150 [ 70.765977][ C0] {HARDIRQ-ON-W} state was registered at: [ 70.771695][ C0] trace_hardirqs_on+0x28/0x40 [ 70.776621][ C0] _raw_spin_unlock_irq+0x23/0x50 [ 70.781884][ C0] sync_info_debugfs_show+0x158/0x4d0 [ 70.787355][ C0] seq_read_iter+0x445/0xd60 [ 70.792044][ C0] seq_read+0x3a3/0x4f0 [ 70.796296][ C0] vfs_read+0x204/0xb70 [ 70.800553][ C0] ksys_read+0x1a0/0x2c0 [ 70.804912][ C0] do_syscall_64+0xf9/0x240 [ 70.809518][ C0] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 70.815505][ C0] irq event stamp: 9608 [ 70.819655][ C0] hardirqs last enabled at (9607): [] _raw_spin_unlock_irq+0x23/0x50 [ 70.829382][ C0] hardirqs last disabled at (9608): [] sysvec_irq_work+0xe/0xb0 [ 70.838580][ C0] softirqs last enabled at (9124): [] __irq_exit_rcu+0xf1/0x1c0 [ 70.847866][ C0] softirqs last disabled at (9119): [] __irq_exit_rcu+0xf1/0x1c0 [ 70.857142][ C0] [ 70.857142][ C0] other info that might help us debug this: [ 70.865190][ C0] Possible unsafe locking scenario: [ 70.865190][ C0] [ 70.872697][ C0] CPU0 [ 70.875969][ C0] ---- [ 70.879241][ C0] lock(sync_timeline_list_lock); [ 70.884353][ C0] [ 70.887885][ C0] lock(sync_timeline_list_lock); [ 70.893164][ C0] [ 70.893164][ C0] *** DEADLOCK *** [ 70.893164][ C0] [ 70.901473][ C0] no locks held by syz-executor120/5070. [ 70.907103][ C0] [ 70.907103][ C0] stack backtrace: [ 70.912983][ C0] CPU: 0 PID: 5070 Comm: syz-executor120 Not tainted 6.8.0-rc6-syzkaller #0 [ 70.921662][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 70.931738][ C0] Call Trace: [ 70.935010][ C0] [ 70.937856][ C0] dump_stack_lvl+0x1e7/0x2e0 [ 70.942539][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.947746][ C0] ? print_usage_bug+0x61a/0x8a0 [ 70.952673][ C0] ? is_bpf_text_address+0x28d/0x2b0 [ 70.957964][ C0] valid_state+0x13a/0x1c0 [ 70.962429][ C0] mark_lock_irq+0xbb/0xc20 [ 70.966944][ C0] ? arch_stack_walk+0x16c/0x1b0 [ 70.971876][ C0] ? __pfx_mark_lock_irq+0x10/0x10 [ 70.976979][ C0] ? stack_trace_save+0x117/0x1d0 [ 70.982008][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 70.987408][ C0] ? lockdep_lock+0x123/0x2b0 [ 70.992092][ C0] ? save_trace+0x5a/0xb40 [ 70.996518][ C0] ? do_raw_spin_unlock+0x13b/0x8b0 [ 71.001729][ C0] mark_lock+0x223/0x350 [ 71.005973][ C0] __lock_acquire+0xb8d/0x1fd0 [ 71.010756][ C0] lock_acquire+0x1e3/0x530 [ 71.015264][ C0] ? sync_timeline_debug_remove+0x2c/0x150 [ 71.021078][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 71.026193][ C0] ? timeline_fence_release+0x1ce/0x250 [ 71.031749][ C0] ? do_raw_spin_lock+0x14e/0x370 [ 71.036772][ C0] ? __pfx_lock_release+0x10/0x10 [ 71.041802][ C0] ? do_raw_spin_unlock+0x13b/0x8b0 [ 71.047053][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 71.052339][ C0] ? sync_timeline_debug_remove+0x2c/0x150 [ 71.058159][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 71.064050][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 71.069940][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 71.076263][ C0] ? kvfree_call_rcu+0x48c/0x790 [ 71.081205][ C0] sync_timeline_debug_remove+0x2c/0x150 [ 71.086845][ C0] timeline_fence_release+0x204/0x250 [ 71.092220][ C0] dma_fence_array_release+0x13e/0x240 [ 71.097674][ C0] irq_work_single+0xe1/0x240 [ 71.102349][ C0] irq_work_run+0x18b/0x350 [ 71.106867][ C0] ? __pfx_irq_work_run+0x10/0x10 [ 71.112019][ C0] ? __irq_exit_rcu+0xfd/0x1c0 [ 71.116812][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 71.122017][ C0] __sysvec_irq_work+0xa8/0x3e0 [ 71.126877][ C0] sysvec_irq_work+0x8f/0xb0 [ 71.131478][ C0] [ 71.134420][ C0] [ 71.137351][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 71.142290][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 71.148096][ C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 da 4b ff f5 48 89 df e8 92 8b 00 f6 e8 ad aa 28 f6 fb bf 01 00 00 00 62 5c f2 f5 65 8b 05 e3 cd 91 74 85 c0 74 06 5b c3 cc cc cc cc [ 71.167692][ C0] RSP: 0018:ffffc90003a87b50 EFLAGS: 00000282 [ 71.173748][ C0] RAX: 9ede7a61d4cee000 RBX: ffff888015fb5f30 RCX: ffffffff94485303 [ 71.181711][ C0] RDX: dffffc0000000000 RSI: ffffffff8baab640 RDI: 0000000000000001 [ 71.189674][ C0] RBP: ffff88807f87c63c R08: ffffffff8f8568af R09: 1ffffffff1f0ad15 [ 71.197639][ C0] R10: dffffc0000000000 R11: fffffbfff1f0ad16 R12: ffff888015fb5f20 [ 71.205598][ C0] R13: ffff88807f87c600 R14: dffffc0000000000 R15: ffff888015fb5ee0 [ 71.213589][ C0] sw_sync_debugfs_release+0x14b/0x1d0 [ 71.219065][ C0] ? __pfx_sw_sync_debugfs_release+0x10/0x10 [ 71.225049][ C0] __fput+0x429/0x8a0 [ 71.229035][ C0] task_work_run+0x24e/0x310 [ 71.233630][ C0] ? __pfx_task_work_run+0x10/0x10 [ 71.238740][ C0] ? switch_task_namespaces+0xe1/0x110 [ 71.244214][ C0] do_exit+0xa2c/0x2740 [ 71.248369][ C0] ? __pfx_do_exit+0x10/0x10 [ 71.252954][ C0] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 71.258938][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 71.265264][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 71.270457][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 71.275655][ C0] do_group_exit+0x206/0x2c0 [ 71.280243][ C0] __x64_sys_exit_group+0x3f/0x40 [ 71.285262][ C0] do_syscall_64+0xf9/0x240 [ 71.289766][ C0] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 71.295667][ C0] RIP: 0033:0x7fb8001b9f39 [ 71.300079][ C0] Code: Unable to access opcode bytes at 0x7fb8001b9f0f. [ 71.307084][ C0] RSP: 002b:00007ffdaf45d478 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 +++ exited with 0 +++ [ 71.315489][ C0] RAX: ffffffffffffffda RBX: 000000000000000