./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1045435149 <...> Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts. execve("./syz-executor1045435149", ["./syz-executor1045435149"], 0x7ffe656d8100 /* 10 vars */) = 0 brk(NULL) = 0x555589008000 brk(0x555589008d00) = 0x555589008d00 arch_prctl(ARCH_SET_FS, 0x555589008380) = 0 set_tid_address(0x555589008650) = 5089 set_robust_list(0x555589008660, 24) = 0 rseq(0x555589008ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1045435149", 4096) = 28 getrandom("\x38\x61\x08\x79\xd6\xe9\x15\x51", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555589008d00 brk(0x555589029d00) = 0x555589029d00 brk(0x55558902a000) = 0x55558902a000 mprotect(0x7f31d4120000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5090 attached , child_tidptr=0x555589008650) = 5090 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5090] set_robust_list(0x555589008660, 24) = 0 [pid 5090] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5091 attached [pid 5089] <... clone resumed>, child_tidptr=0x555589008650) = 5091 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5091] set_robust_list(0x555589008660, 24./strace-static-x86_64: Process 5092 attached ) = 0 ./strace-static-x86_64: Process 5093 attached [pid 5092] set_robust_list(0x555589008660, 24 [pid 5091] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5090] <... clone resumed>, child_tidptr=0x555589008650) = 5092 [pid 5089] <... clone resumed>, child_tidptr=0x555589008650) = 5093 [pid 5093] set_robust_list(0x555589008660, 24 [pid 5092] <... set_robust_list resumed>) = 0 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5095 attached ./strace-static-x86_64: Process 5094 attached [pid 5093] <... set_robust_list resumed>) = 0 [pid 5092] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5089] <... clone resumed>, child_tidptr=0x555589008650) = 5095 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5095] set_robust_list(0x555589008660, 24 [pid 5093] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5092] <... prctl resumed>) = 0 [pid 5094] set_robust_list(0x555589008660, 24 [pid 5091] <... clone resumed>, child_tidptr=0x555589008650) = 5094 [pid 5092] setpgid(0, 0 [pid 5095] <... set_robust_list resumed>) = 0 [pid 5094] <... set_robust_list resumed>) = 0 [pid 5092] <... setpgid resumed>) = 0 [pid 5095] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5094] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5097 attached ./strace-static-x86_64: Process 5096 attached ./strace-static-x86_64: Process 5098 attached [pid 5089] <... clone resumed>, child_tidptr=0x555589008650) = 5097 [pid 5097] set_robust_list(0x555589008660, 24 [pid 5096] set_robust_list(0x555589008660, 24 [pid 5094] <... prctl resumed>) = 0 [pid 5093] <... clone resumed>, child_tidptr=0x555589008650) = 5096 [pid 5092] <... openat resumed>) = 3 [pid 5098] set_robust_list(0x555589008660, 24 [pid 5097] <... set_robust_list resumed>) = 0 [pid 5096] <... set_robust_list resumed>) = 0 [pid 5094] setpgid(0, 0 [pid 5098] <... set_robust_list resumed>) = 0 [pid 5097] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5096] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5095] <... clone resumed>, child_tidptr=0x555589008650) = 5098 [pid 5094] <... setpgid resumed>) = 0 [pid 5092] write(3, "1000", 4 [pid 5098] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5096] <... prctl resumed>) = 0 [pid 5094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5098] <... prctl resumed>) = 0 [pid 5096] setpgid(0, 0 [pid 5098] setpgid(0, 0 [pid 5096] <... setpgid resumed>) = 0 [pid 5092] <... write resumed>) = 4 ./strace-static-x86_64: Process 5099 attached [pid 5098] <... setpgid resumed>) = 0 [pid 5096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5094] <... openat resumed>) = 3 [pid 5092] close(3) = 0 [pid 5092] write(1, "executing program\n", 18executing program [pid 5099] set_robust_list(0x555589008660, 24 [pid 5092] <... write resumed>) = 18 [pid 5094] write(3, "1000", 4 [pid 5092] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5099] <... set_robust_list resumed>) = 0 [pid 5098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5097] <... clone resumed>, child_tidptr=0x555589008650) = 5099 [pid 5096] <... openat resumed>) = 3 [pid 5094] <... write resumed>) = 4 [pid 5092] <... bpf resumed>) = 3 [pid 5099] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5096] write(3, "1000", 4 [pid 5094] close(3 [pid 5092] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000240, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5099] <... prctl resumed>) = 0 [pid 5098] <... openat resumed>) = 3 [pid 5096] <... write resumed>) = 4 [pid 5094] <... close resumed>) = 0 [pid 5099] setpgid(0, 0 [pid 5098] write(3, "1000", 4 [pid 5096] close(3 [pid 5094] write(1, "executing program\n", 18executing program [pid 5099] <... setpgid resumed>) = 0 [pid 5098] <... write resumed>) = 4 [pid 5096] <... close resumed>) = 0 [pid 5094] <... write resumed>) = 18 [pid 5092] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 5098] close(3 [pid 5092] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000240, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5098] <... close resumed>) = 0 [pid 5096] write(1, "executing program\n", 18 [pid 5094] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72executing program executing program [pid 5098] write(1, "executing program\n", 18 [pid 5096] <... write resumed>) = 18 [pid 5094] <... bpf resumed>) = 3 [pid 5092] <... bpf resumed>) = 4 [pid 5098] <... write resumed>) = 18 [pid 5096] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5099] <... openat resumed>) = 3 [pid 5098] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5094] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000240, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5099] write(3, "1000", 4 [pid 5098] <... bpf resumed>) = 3 [pid 5096] <... bpf resumed>) = 3 [pid 5094] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 5099] <... write resumed>) = 4 [pid 5098] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000240, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5096] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000240, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5099] close(3 [pid 5098] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 5094] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000240, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5099] <... close resumed>) = 0 [pid 5098] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000240, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5096] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 5099] write(1, "executing program\n", 18executing program [pid 5094] <... bpf resumed>) = 4 [pid 5099] <... write resumed>) = 18 [pid 5092] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="tlb_flush", prog_fd=4}}, 16 [pid 5099] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5098] <... bpf resumed>) = 4 [pid 5092] <... bpf resumed>) = 5 [pid 5092] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=5, insns=0x20000040, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=8, func_info=NULL, func_info_cnt=0, line_info_rec_size=16, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL, ...}, 144 [pid 5099] <... bpf resumed>) = 3 [pid 5098] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="tlb_flush", prog_fd=4}}, 16 [pid 5096] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000240, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5094] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="tlb_flush", prog_fd=4}}, 16 [pid 5099] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000240, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5098] <... bpf resumed>) = 5 [pid 5096] <... bpf resumed>) = 4 [pid 5094] <... bpf resumed>) = 5 [pid 5092] <... bpf resumed>) = 6 [pid 5099] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 5098] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=5, insns=0x20000040, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=8, func_info=NULL, func_info_cnt=0, line_info_rec_size=16, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL, ...}, 144 [pid 5096] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="tlb_flush", prog_fd=4}}, 16 [pid 5094] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=5, insns=0x20000040, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=8, func_info=NULL, func_info_cnt=0, line_info_rec_size=16, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL, ...}, 144 [pid 5092] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mmap_lock_acquire_returned", prog_fd=6}}, 16 [pid 5099] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000240, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5098] <... bpf resumed>) = 6 [pid 5098] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mmap_lock_acquire_returned", prog_fd=6}}, 16 [pid 5096] <... bpf resumed>) = 5 [pid 5094] <... bpf resumed>) = 6 [pid 5096] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=5, insns=0x20000040, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=8, func_info=NULL, func_info_cnt=0, line_info_rec_size=16, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL, ...}, 144 [pid 5094] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="mmap_lock_acquire_returned", prog_fd=6}}, 16 [pid 5099] <... bpf resumed>) = 4 [pid 5098] <... bpf resumed>) = 7 [pid 5096] <... bpf resumed>) = 6 [pid 5094] <... bpf resumed>) = 7 [pid 5092] <... bpf resumed>) = 7 [ 54.947644][ T5086] [ 54.949985][ T5086] ====================================================== [ 54.956994][ T5086] WARNING: possible circular locking dependency detected [ 54.963986][ T5086] 6.9.0-syzkaller-08557-g30a92c9e3d6b #0 Not tainted [ 54.970641][ T5086] ------------------------------------------------------ [ 54.977633][ T5086] strace-static-x/5086 is trying to acquire lock: [ 54.984019][ T5086] ffff8880183f9bd8 (&sighand->siglock){-...}-{2:2}, at: __lock_task_sighand+0x149/0x2d0 [ 54.993747][ T5086] [ 54.993747][ T5086] but task is already holding lock: [ 55.001087][ T5086] ffff8880b9538828 (lock#9){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 55.011339][ T5086] [ 55.011339][ T5086] which lock already depends on the new lock. [ 55.011339][ T5086] [ 55.021729][ T5086] [ 55.021729][ T5086] the existing dependency chain (in reverse order) is: [ 55.030720][ T5086] [ 55.030720][ T5086] -> #3 (lock#9){+.+.}-{2:2}: [ 55.037575][ T5086] lock_acquire+0x1ed/0x550 [ 55.042598][ T5086] __mmap_lock_do_trace_acquire_returned+0xa8/0x630 [ 55.049686][ T5086] stack_map_get_build_id_offset+0x9b2/0x9d0 [ 55.056167][ T5086] __bpf_get_stack+0x4ad/0x5a0 [ 55.061428][ T5086] bpf_get_stack_raw_tp+0x1a3/0x240 [ 55.067126][ T5086] bpf_prog_ec3b2eefa702d8d3+0x42/0x46 [ 55.073082][ T5086] bpf_trace_run2+0x2ec/0x540 [ 55.078259][ T5086] __traceiter_tlb_flush+0x77/0xd0 [ 55.083867][ T5086] trace_tlb_flush+0x118/0x140 [ 55.089130][ T5086] switch_mm_irqs_off+0x7cb/0xae0 [ 55.094658][ T5086] __schedule+0x1066/0x4a50 [ 55.099667][ T5086] preempt_schedule_common+0x84/0xd0 [ 55.105447][ T5086] preempt_schedule+0xe1/0xf0 [ 55.110618][ T5086] preempt_schedule_thunk+0x1a/0x30 [ 55.116312][ T5086] _raw_spin_unlock+0x3e/0x50 [ 55.121489][ T5086] __text_poke+0xa6b/0xd30 [ 55.126402][ T5086] text_poke_bp_batch+0x265/0xb30 [ 55.131924][ T5086] text_poke_finish+0x30/0x50 [ 55.137099][ T5086] arch_jump_label_transform_apply+0x1c/0x30 [ 55.143577][ T5086] static_key_enable_cpuslocked+0x136/0x260 [ 55.149970][ T5086] static_key_enable+0x1a/0x20 [ 55.155232][ T5086] tracepoint_add_func+0x953/0x9e0 [ 55.160847][ T5086] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 55.168281][ T5086] bpf_raw_tp_link_attach+0x48b/0x6e0 [ 55.174152][ T5086] bpf_raw_tracepoint_open+0x1c2/0x240 [ 55.180128][ T5086] __sys_bpf+0x3c0/0x810 [ 55.184874][ T5086] __x64_sys_bpf+0x7c/0x90 [ 55.189787][ T5086] do_syscall_64+0xf5/0x240 [ 55.194792][ T5086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.201189][ T5086] [ 55.201189][ T5086] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 55.208463][ T5086] lock_acquire+0x1ed/0x550 [ 55.213467][ T5086] _raw_spin_lock_nested+0x31/0x40 [ 55.219073][ T5086] raw_spin_rq_lock_nested+0x2a/0x140 [ 55.224945][ T5086] task_fork_fair+0x61/0x1e0 [ 55.230034][ T5086] sched_cgroup_fork+0x37c/0x410 [ 55.235472][ T5086] copy_process+0x2217/0x3dc0 [ 55.240646][ T5086] kernel_clone+0x226/0x8f0 [ 55.245647][ T5086] user_mode_thread+0x132/0x1a0 [ 55.250996][ T5086] rest_init+0x23/0x300 [ 55.255650][ T5086] start_kernel+0x47a/0x500 [ 55.260660][ T5086] x86_64_start_reservations+0x2a/0x30 [ 55.266621][ T5086] x86_64_start_kernel+0x99/0xa0 [ 55.272060][ T5086] common_startup_64+0x13e/0x147 [ 55.277498][ T5086] [ 55.277498][ T5086] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 55.284769][ T5086] lock_acquire+0x1ed/0x550 [ 55.289768][ T5086] _raw_spin_lock_irqsave+0xd5/0x120 [ 55.295555][ T5086] try_to_wake_up+0xb0/0x1470 [ 55.300731][ T5086] signal_wake_up_state+0xb4/0x120 [ 55.306342][ T5086] complete_signal+0x94a/0xcf0 [ 55.311606][ T5086] __send_signal_locked+0xb1b/0xdc0 [ 55.317308][ T5086] do_notify_parent+0xd96/0x10a0 [ 55.322744][ T5086] do_exit+0x1811/0x27e0 [ 55.327486][ T5086] do_group_exit+0x207/0x2c0 [ 55.332576][ T5086] __x64_sys_exit_group+0x3f/0x40 [ 55.338114][ T5086] do_syscall_64+0xf5/0x240 [ 55.343120][ T5086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.349511][ T5086] [ 55.349511][ T5086] -> #0 (&sighand->siglock){-...}-{2:2}: [ 55.357308][ T5086] validate_chain+0x18cb/0x58e0 [ 55.362659][ T5086] __lock_acquire+0x1346/0x1fd0 [ 55.368012][ T5086] lock_acquire+0x1ed/0x550 [ 55.373014][ T5086] _raw_spin_lock_irqsave+0xd5/0x120 [ 55.378799][ T5086] __lock_task_sighand+0x149/0x2d0 [ 55.384408][ T5086] group_send_sig_info+0x274/0x310 [ 55.390015][ T5086] bpf_send_signal_common+0x2dd/0x430 [ 55.395884][ T5086] bpf_send_signal_thread+0x16/0x20 [ 55.401582][ T5086] bpf_prog_16ecb682114cf56a+0x22/0x2a [ 55.407534][ T5086] bpf_trace_run4+0x334/0x590 [ 55.412712][ T5086] __traceiter_mmap_lock_acquire_returned+0x93/0xf0 [ 55.419800][ T5086] __mmap_lock_do_trace_acquire_returned+0x5c8/0x630 [ 55.426973][ T5086] process_vm_rw+0xa46/0xcf0 [ 55.432060][ T5086] __x64_sys_process_vm_readv+0xe0/0x100 [ 55.438203][ T5086] do_syscall_64+0xf5/0x240 [ 55.443225][ T5086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.449621][ T5086] [ 55.449621][ T5086] other info that might help us debug this: [ 55.449621][ T5086] [ 55.459824][ T5086] Chain exists of: [ 55.459824][ T5086] &sighand->siglock --> &rq->__lock --> lock#9 [ 55.459824][ T5086] [ 55.471966][ T5086] Possible unsafe locking scenario: [ 55.471966][ T5086] [ 55.479390][ T5086] CPU0 CPU1 [ 55.484731][ T5086] ---- ---- [ 55.490070][ T5086] lock(lock#9); [ 55.493697][ T5086] lock(&rq->__lock); [ 55.500263][ T5086] lock(lock#9); [ 55.506398][ T5086] lock(&sighand->siglock); [ 55.510964][ T5086] [ 55.510964][ T5086] *** DEADLOCK *** [ 55.510964][ T5086] [ 55.519083][ T5086] 5 locks held by strace-static-x/5086: [ 55.524601][ T5086] #0: ffff88802f77cda0 (&mm->mmap_lock){++++}-{3:3}, at: process_vm_rw+0x6e9/0xcf0 [ 55.533969][ T5086] #1: ffff8880b9538828 (lock#9){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 55.544641][ T5086] #2: ffffffff8e333d20 (rcu_read_lock){....}-{1:2}, at: get_mm_memcg_path+0xb1/0x600 [ 55.554198][ T5086] #3: ffffffff8e333d20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590 [ 55.563564][ T5086] #4: ffffffff8e333d20 (rcu_read_lock){....}-{1:2}, at: __lock_task_sighand+0x29/0x2d0 [ 55.573277][ T5086] [ 55.573277][ T5086] stack backtrace: [ 55.579143][ T5086] CPU: 1 PID: 5086 Comm: strace-static-x Not tainted 6.9.0-syzkaller-08557-g30a92c9e3d6b #0 [ 55.589178][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 55.599211][ T5086] Call Trace: [ 55.602477][ T5086] [ 55.605390][ T5086] dump_stack_lvl+0x241/0x360 [ 55.610050][ T5086] ? __pfx_dump_stack_lvl+0x10/0x10 [ 55.615231][ T5086] ? print_circular_bug+0x130/0x1a0 [ 55.620414][ T5086] check_noncircular+0x36a/0x4a0 [ 55.625331][ T5086] ? mark_lock+0x9a/0x350 [ 55.629638][ T5086] ? __pfx_check_noncircular+0x10/0x10 [ 55.635078][ T5086] ? lockdep_lock+0x123/0x2b0 [ 55.639728][ T5086] ? hlock_conflict+0x59/0x1e0 [ 55.644472][ T5086] ? _find_first_zero_bit+0xd4/0x100 [ 55.649745][ T5086] validate_chain+0x18cb/0x58e0 [ 55.654581][ T5086] ? do_raw_read_unlock+0x3c/0x80 [ 55.659585][ T5086] ? __pfx_validate_chain+0x10/0x10 [ 55.664762][ T5086] ? __pfx_lockdep_unlock+0x10/0x10 [ 55.669936][ T5086] ? __pfx_validate_chain+0x10/0x10 [ 55.675116][ T5086] ? __pfx_validate_chain+0x10/0x10 [ 55.680292][ T5086] ? validate_chain+0x15a2/0x58e0 [ 55.685302][ T5086] ? mark_lock+0x9a/0x350 [ 55.689607][ T5086] __lock_acquire+0x1346/0x1fd0 [ 55.694439][ T5086] lock_acquire+0x1ed/0x550 [ 55.698919][ T5086] ? __lock_task_sighand+0x149/0x2d0 [ 55.704186][ T5086] ? __pfx_lock_acquire+0x10/0x10 [ 55.709189][ T5086] ? __pfx_lock_acquire+0x10/0x10 [ 55.714191][ T5086] _raw_spin_lock_irqsave+0xd5/0x120 [ 55.719457][ T5086] ? __lock_task_sighand+0x149/0x2d0 [ 55.724722][ T5086] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 55.730599][ T5086] __lock_task_sighand+0x149/0x2d0 [ 55.735691][ T5086] ? __lock_task_sighand+0x29/0x2d0 [ 55.740871][ T5086] group_send_sig_info+0x274/0x310 [ 55.745963][ T5086] ? __pfx_group_send_sig_info+0x10/0x10 [ 55.751575][ T5086] bpf_send_signal_common+0x2dd/0x430 [ 55.756927][ T5086] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 55.762795][ T5086] ? _raw_read_unlock_irqrestore+0xdd/0x140 [ 55.768682][ T5086] ? __pfx__raw_read_unlock_irqrestore+0x10/0x10 [ 55.774986][ T5086] ? bpf_trace_run4+0x244/0x590 [ 55.779814][ T5086] bpf_send_signal_thread+0x16/0x20 [ 55.784991][ T5086] bpf_prog_16ecb682114cf56a+0x22/0x2a [ 55.790423][ T5086] bpf_trace_run4+0x334/0x590 [ 55.795080][ T5086] ? kernfs_path_from_node+0x235/0xb00 [ 55.800519][ T5086] ? __pfx_lock_release+0x10/0x10 [ 55.805530][ T5086] ? __pfx_bpf_trace_run4+0x10/0x10 [ 55.810714][ T5086] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 55.817974][ T5086] __traceiter_mmap_lock_acquire_returned+0x93/0xf0 [ 55.824544][ T5086] __mmap_lock_do_trace_acquire_returned+0x5c8/0x630 [ 55.831203][ T5086] ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 55.837944][ T5086] process_vm_rw+0xa46/0xcf0 [ 55.842521][ T5086] ? __pfx_process_vm_rw+0x10/0x10 [ 55.847708][ T5086] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 55.853610][ T5086] ? __lock_task_sighand+0x2a5/0x2d0 [ 55.858877][ T5086] ? __lock_task_sighand+0x29/0x2d0 [ 55.864056][ T5086] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 55.870012][ T5086] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 55.876342][ T5086] __x64_sys_process_vm_readv+0xe0/0x100 [ 55.881956][ T5086] do_syscall_64+0xf5/0x240 [ 55.886443][ T5086] ? clear_bhb_loop+0x35/0x90 [ 55.891105][ T5086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.896993][ T5086] RIP: 0033:0x4eacda [ 55.900875][ T5086] Code: 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 38 12 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 36 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 [ 55.920461][ T5086] RSP: 002b:00007ffe656d7be8 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 55.928866][ T5086] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 00000000004eacda [ 55.936824][ T5086] RDX: 0000000000000001 RSI: 00007ffe656d7c10 RDI: 00000000000013eb executing program [ 55.944778][ T5086] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 55.952729][ T5086] R10: 00007ffe656d7c20 R11: 0000000000000246 R12: 0000000020000080 [ 55.960679][ T5086] R13: 0000000012d21a30 R14: 0000000000001000 R15: 0000000000000010 [ 55.968640][ T5086] executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program