DUID 00:04:83:15:3d:b3:f9:44:11:d6:e6:e1:d9:1f:49:4d:f4:66 forked to background, child pid 3175 [ 29.277756][ T3176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.292529][ T3176] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.53' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 50.560745][ C1] [ 50.563220][ C1] ================================ [ 50.568307][ C1] WARNING: inconsistent lock state [ 50.573393][ C1] 5.17.0-rc4-syzkaller-00054-gf71077a4d84b #0 Not tainted [ 50.580736][ C1] -------------------------------- [ 50.585828][ C1] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 50.593068][ C1] syz-executor275/3597 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 50.600274][ C1] ffffffff8c70bf18 (sync_timeline_list_lock){?.+.}-{2:2}, at: sync_timeline_debug_remove+0x25/0x190 [ 50.611147][ C1] {HARDIRQ-ON-W} state was registered at: [ 50.616856][ C1] lockdep_hardirqs_on_prepare+0x135/0x400 [ 50.622752][ C1] trace_hardirqs_on+0x5b/0x1c0 [ 50.627857][ C1] _raw_spin_unlock_irq+0x1f/0x40 [ 50.633003][ C1] sync_info_debugfs_show+0xeb/0x200 [ 50.638389][ C1] seq_read_iter+0x4f5/0x1280 [ 50.643153][ C1] seq_read+0x3e8/0x5c0 [ 50.647391][ C1] vfs_read+0x1b5/0x600 [ 50.651619][ C1] ksys_read+0x12d/0x250 [ 50.655939][ C1] do_syscall_64+0x35/0xb0 [ 50.660447][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 50.666421][ C1] irq event stamp: 18314 [ 50.670648][ C1] hardirqs last enabled at (18313): [] _raw_spin_unlock_irq+0x1f/0x40 [ 50.680560][ C1] hardirqs last disabled at (18314): [] sysvec_irq_work+0xb/0xc0 [ 50.689846][ C1] softirqs last enabled at (14308): [] __irq_exit_rcu+0x123/0x180 [ 50.699300][ C1] softirqs last disabled at (14293): [] __irq_exit_rcu+0x123/0x180 [ 50.708759][ C1] [ 50.708759][ C1] other info that might help us debug this: [ 50.716813][ C1] Possible unsafe locking scenario: [ 50.716813][ C1] [ 50.724255][ C1] CPU0 [ 50.727520][ C1] ---- [ 50.730839][ C1] lock(sync_timeline_list_lock); [ 50.735944][ C1] [ 50.739472][ C1] lock(sync_timeline_list_lock); [ 50.744745][ C1] [ 50.744745][ C1] *** DEADLOCK *** [ 50.744745][ C1] [ 50.752876][ C1] no locks held by syz-executor275/3597. [ 50.758492][ C1] [ 50.758492][ C1] stack backtrace: [ 50.764363][ C1] CPU: 1 PID: 3597 Comm: syz-executor275 Not tainted 5.17.0-rc4-syzkaller-00054-gf71077a4d84b #0 [ 50.774846][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.784895][ C1] Call Trace: [ 50.788167][ C1] [ 50.791187][ C1] dump_stack_lvl+0xcd/0x134 [ 50.795777][ C1] mark_lock.part.0.cold+0x18/0xd8 [ 50.800882][ C1] ? mark_lock.part.0+0xee/0x1910 [ 50.806010][ C1] ? lock_chain_count+0x20/0x20 [ 50.810850][ C1] ? lock_chain_count+0x20/0x20 [ 50.815689][ C1] ? debug_object_activate+0x287/0x3e0 [ 50.821241][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 50.826085][ C1] __lock_acquire+0x14a9/0x56c0 [ 50.830926][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 50.836896][ C1] ? do_raw_spin_unlock+0x171/0x230 [ 50.842080][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 50.848060][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 50.853863][ C1] lock_acquire+0x1ab/0x510 [ 50.858367][ C1] ? sync_timeline_debug_remove+0x25/0x190 [ 50.864188][ C1] ? lock_release+0x720/0x720 [ 50.868880][ C1] ? timeline_fence_release+0x1f2/0x340 [ 50.874430][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 50.879289][ C1] _raw_spin_lock_irqsave+0x39/0x50 [ 50.884495][ C1] ? sync_timeline_debug_remove+0x25/0x190 [ 50.890293][ C1] sync_timeline_debug_remove+0x25/0x190 [ 50.895923][ C1] timeline_fence_release+0x263/0x340 [ 50.901310][ C1] ? sw_sync_debugfs_release+0x240/0x240 [ 50.906959][ C1] dma_fence_release+0x2ee/0x590 [ 50.911895][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 50.916747][ C1] dma_fence_array_release+0x1e4/0x2b0 [ 50.922233][ C1] ? dma_fence_array_cb_func+0x190/0x190 [ 50.927867][ C1] dma_fence_release+0x2ee/0x590 [ 50.932807][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 50.938612][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 50.944856][ C1] irq_dma_fence_array_work+0xa5/0xd0 [ 50.950221][ C1] irq_work_single+0x120/0x270 [ 50.955094][ C1] irq_work_run_list+0x91/0xc0 [ 50.959869][ C1] irq_work_run+0x54/0xd0 [ 50.964196][ C1] __sysvec_irq_work+0x95/0x3d0 [ 50.969049][ C1] sysvec_irq_work+0x8e/0xc0 [ 50.973640][ C1] [ 50.976569][ C1] [ 50.979541][ C1] asm_sysvec_irq_work+0x12/0x20 [ 50.984493][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 50.990300][ C1] Code: 0f 1f 44 00 00 55 48 8b 74 24 08 48 89 fd 48 83 c7 18 e8 4e f7 0c f8 48 89 ef e8 a6 75 0d f8 e8 31 72 2e f8 fb bf 01 00 00 00 c6 0a 00 f8 65 8b 05 0f c4 b1 76 85 c0 74 02 5d c3 e8 7b 99 af [ 51.009918][ C1] RSP: 0018:ffffc90001fb7d18 EFLAGS: 00000202 [ 51.016067][ C1] RAX: 0000000000004789 RBX: 00000000ffffffff RCX: 1ffffffff1b27c19 [ 51.024035][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 51.032005][ C1] RBP: ffff8880149d7350 R08: 0000000000000001 R09: 0000000000000001 [ 51.040095][ C1] R10: ffffffff817f1e08 R11: 0000000000000000 R12: ffff8880149d7300 [ 51.048063][ C1] R13: dffffc0000000000 R14: ffff8880149d7300 R15: ffff8880149d7350 [ 51.056028][ C1] ? trace_hardirqs_on+0x38/0x1c0 [ 51.061048][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 51.066238][ C1] sw_sync_debugfs_release+0x160/0x240 [ 51.071693][ C1] __fput+0x286/0x9f0 [ 51.075723][ C1] ? sync_timeline_signal+0x5b0/0x5b0 [ 51.081109][ C1] task_work_run+0xdd/0x1a0 [ 51.085626][ C1] do_exit+0xb29/0x2a30 [ 51.089778][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 51.094644][ C1] ? mm_update_next_owner+0x7a0/0x7a0 [ 51.100013][ C1] do_group_exit+0xd2/0x2f0 [ 51.104526][ C1] __x64_sys_exit_group+0x3a/0x50 [ 51.109547][ C1] do_syscall_64+0x35/0xb0 [ 51.113977][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 51.119875][ C1] RIP: 0033:0x7f8ef4d92ee9 [ 51.124288][ C1] Code: Unable to access opcode bytes at RIP 0x7f8ef4d92ebf. [ 51.131636][ C1] RSP: 002b:00007ffee62acb88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 51.140039][ C1] RAX: ffffffffffffffda RBX: 00007f8ef4e072b0 RCX: 00007f8ef4d92ee9 [ 51.148001][ C1] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 51.156073][ C1] RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 000000000000000