./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2773806959 <...> Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. execve("./syz-executor2773806959", ["./syz-executor2773806959"], 0x7fff447f1b90 /* 10 vars */) = 0 brk(NULL) = 0x555586ec8000 brk(0x555586ec8d00) = 0x555586ec8d00 arch_prctl(ARCH_SET_FS, 0x555586ec8380) = 0 set_tid_address(0x555586ec8650) = 5065 set_robust_list(0x555586ec8660, 24) = 0 rseq(0x555586ec8ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2773806959", 4096) = 28 getrandom("\x4d\xbc\x2e\x44\x03\x4c\xee\x45", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555586ec8d00 brk(0x555586ee9d00) = 0x555586ee9d00 brk(0x555586eea000) = 0x555586eea000 mprotect(0x7f39eaa3f000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5066 attached , child_tidptr=0x555586ec8650) = 5066 [pid 5066] set_robust_list(0x555586ec8660, 24) = 0 [pid 5066] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5066] setpgid(0, 0) = 0 [pid 5066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5066] write(3, "1000", 4) = 4 [pid 5066] close(3) = 0 [pid 5066] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5066] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5066] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5066] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="timer_start", prog_fd=4}}, 16) = 5 [ 60.704765][ T5060] ------------[ cut here ]------------ [ 60.704983][ T5060] [ 60.704986][ T5060] ====================================================== [ 60.704989][ T5060] WARNING: possible circular locking dependency detected [ 60.704992][ T5060] 6.8.0-syzkaller-05271-gf99c5f563c17 #0 Not tainted [ 60.704997][ T5060] ------------------------------------------------------ [ 60.705000][ T5060] sshd/5060 is trying to acquire lock: [ 60.705004][ T5060] ffffffff8e125be0 (console_owner){-...}-{0:0}, at: console_flush_all+0x14a/0xec0 [ 60.705050][ T5060] [ 60.705050][ T5060] but task is already holding lock: [ 60.705053][ T5060] ffff8880b952a758 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 60.705083][ T5060] [ 60.705083][ T5060] which lock already depends on the new lock. [ 60.705083][ T5060] [ 60.705085][ T5060] [ 60.705085][ T5060] the existing dependency chain (in reverse order) is: [ 60.705088][ T5060] [ 60.705088][ T5060] -> #4 (&base->lock){-.-.}-{2:2}: [ 60.705100][ T5060] lock_acquire+0x1e4/0x530 [ 60.705109][ T5060] _raw_spin_lock_irqsave+0xd5/0x120 [ 60.705123][ T5060] lock_timer_base+0x112/0x240 [ 60.705134][ T5060] __mod_timer+0x1ca/0xeb0 [ 60.705144][ T5060] worker_enter_idle+0x31d/0x4d0 [ 60.705152][ T5060] worker_thread+0x9c0/0xd70 [ 60.705160][ T5060] kthread+0x2f0/0x390 [ 60.705170][ T5060] ret_from_fork+0x4b/0x80 [ 60.705181][ T5060] ret_from_fork_asm+0x1a/0x30 [ 60.705193][ T5060] [ 60.705193][ T5060] -> #3 (&pool->lock){-.-.}-{2:2}: [ 60.705204][ T5060] lock_acquire+0x1e4/0x530 [ 60.705211][ T5060] _raw_spin_lock+0x2e/0x40 [ 60.705219][ T5060] __queue_work+0x6ec/0xec0 [ 60.705228][ T5060] queue_work_on+0x14f/0x250 [ 60.705236][ T5060] rpm_suspend+0x11bd/0x1c10 [ 60.705250][ T5060] __pm_runtime_idle+0x131/0x1a0 [ 60.705260][ T5060] __device_attach+0x3e5/0x520 [ 60.705271][ T5060] bus_probe_device+0x189/0x260 [ 60.705280][ T5060] device_add+0x8ff/0xca0 [ 60.705290][ T5060] serial_base_port_add+0x2b6/0x3f0 [ 60.705300][ T5060] serial_core_register_port+0x393/0x1e30 [ 60.705311][ T5060] serial8250_register_8250_port+0x1433/0x1cd0 [ 60.705324][ T5060] serial_pnp_probe+0x7d5/0xa20 [ 60.705335][ T5060] pnp_device_probe+0x2ba/0x460 [ 60.705346][ T5060] really_probe+0x29e/0xc50 [ 60.705357][ T5060] __driver_probe_device+0x1a2/0x3e0 [ 60.705368][ T5060] driver_probe_device+0x50/0x430 [ 60.705379][ T5060] __driver_attach+0x45f/0x710 [ 60.705390][ T5060] bus_for_each_dev+0x239/0x2b0 [ 60.705399][ T5060] bus_add_driver+0x347/0x620 [ 60.705408][ T5060] driver_register+0x23a/0x320 [ 60.705415][ T5060] serial8250_init+0x9e/0x170 [ 60.705427][ T5060] do_one_initcall+0x238/0x830 [ 60.705437][ T5060] do_initcall_level+0x157/0x210 [ 60.705446][ T5060] do_initcalls+0x3f/0x80 [ 60.705454][ T5060] kernel_init_freeable+0x435/0x5d0 [ 60.705461][ T5060] kernel_init+0x1d/0x2a0 [ 60.705473][ T5060] ret_from_fork+0x4b/0x80 [ 60.705484][ T5060] ret_from_fork_asm+0x1a/0x30 [ 60.705494][ T5060] [ 60.705494][ T5060] -> #2 (&dev->power.lock){-...}-{2:2}: [ 60.705506][ T5060] lock_acquire+0x1e4/0x530 [ 60.705513][ T5060] _raw_spin_lock_irqsave+0xd5/0x120 [ 60.705522][ T5060] __pm_runtime_resume+0x112/0x180 [ 60.705532][ T5060] __uart_start+0x17a/0x3c0 [ 60.705542][ T5060] uart_write+0x427/0x5c0 [ 60.705555][ T5060] n_tty_write+0xd6a/0x1230 [ 60.705564][ T5060] file_tty_write+0x54f/0x9b0 [ 60.705576][ T5060] vfs_write+0xa84/0xcb0 [ 60.705586][ T5060] ksys_write+0x1a0/0x2c0 [ 60.705594][ T5060] do_syscall_64+0xfb/0x240 [ 60.705604][ T5060] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 60.705616][ T5060] [ 60.705616][ T5060] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 60.705628][ T5060] lock_acquire+0x1e4/0x530 [ 60.705635][ T5060] _raw_spin_lock_irqsave+0xd5/0x120 [ 60.705644][ T5060] serial8250_console_write+0x1a8/0x1840 [ 60.705656][ T5060] console_flush_all+0x80b/0xec0 [ 60.705667][ T5060] console_unlock+0x13b/0x4d0 [ 60.705676][ T5060] vprintk_emit+0x509/0x720 [ 60.705685][ T5060] _printk+0xd5/0x120 [ 60.705693][ T5060] register_console+0x70a/0xcd0 [ 60.705703][ T5060] univ8250_console_init+0x49/0x50 [ 60.705714][ T5060] console_init+0x198/0x680 [ 60.705722][ T5060] start_kernel+0x2d3/0x500 [ 60.705729][ T5060] x86_64_start_reservations+0x2a/0x30 [ 60.705739][ T5060] x86_64_start_kernel+0x99/0xa0 [ 60.705748][ T5060] common_startup_64+0x13e/0x147 [ 60.705757][ T5060] [ 60.705757][ T5060] -> #0 (console_owner){-...}-{0:0}: [ 60.705768][ T5060] validate_chain+0x18cb/0x58e0 [ 60.705778][ T5060] __lock_acquire+0x1346/0x1fd0 [ 60.705786][ T5060] lock_acquire+0x1e4/0x530 [ 60.705793][ T5060] console_flush_all+0x7ba/0xec0 [ 60.705803][ T5060] console_unlock+0x13b/0x4d0 [ 60.705812][ T5060] vprintk_emit+0x509/0x720 [ 60.705821][ T5060] _printk+0xd5/0x120 [ 60.705829][ T5060] report_bug+0x346/0x500 [ 60.705841][ T5060] handle_bug+0x3e/0x70 [ 60.705850][ T5060] exc_invalid_op+0x1a/0x50 [ 60.705860][ T5060] asm_exc_invalid_op+0x1a/0x20 [ 60.705870][ T5060] __local_bh_enable_ip+0x1be/0x200 [ 60.705878][ T5060] sock_map_delete_elem+0xca/0x140 [ 60.705887][ T5060] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 60.705896][ T5060] bpf_trace_run2+0x204/0x420 [ 60.705906][ T5060] enqueue_timer+0x396/0x550 [ 60.705914][ T5060] __mod_timer+0x953/0xeb0 [ 60.705924][ T5060] sk_reset_timer+0x23/0xc0 [ 60.705936][ T5060] tcp_event_new_data_sent+0x203/0x360 [ 60.705948][ T5060] tcp_write_xmit+0x1468/0x6100 [ 60.705958][ T5060] __tcp_push_pending_frames+0x9b/0x360 [ 60.705968][ T5060] tcp_sendmsg_locked+0x42cc/0x4d00 [ 60.705976][ T5060] tcp_sendmsg+0x30/0x50 [ 60.705983][ T5060] __sock_sendmsg+0x1a6/0x270 [ 60.705990][ T5060] sock_write_iter+0x2dd/0x400 [ 60.706002][ T5060] vfs_write+0xa84/0xcb0 [ 60.706010][ T5060] ksys_write+0x1a0/0x2c0 [ 60.706018][ T5060] do_syscall_64+0xfb/0x240 [ 60.706027][ T5060] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 60.706038][ T5060] [ 60.706038][ T5060] other info that might help us debug this: [ 60.706038][ T5060] [ 60.706040][ T5060] Chain exists of: [ 60.706040][ T5060] console_owner --> &pool->lock --> &base->lock [ 60.706040][ T5060] [ 60.706053][ T5060] Possible unsafe locking scenario: [ 60.706053][ T5060] [ 60.706055][ T5060] CPU0 CPU1 [ 60.706057][ T5060] ---- ---- [ 60.706059][ T5060] lock(&base->lock); [ 60.706081][ T5060] lock(&pool->lock); [ 60.706087][ T5060] lock(&base->lock); [ 60.706093][ T5060] lock(console_owner); [ 60.706098][ T5060] [ 60.706098][ T5060] *** DEADLOCK *** [ 60.706098][ T5060] [ 60.706100][ T5060] 5 locks held by sshd/5060: [ 60.706105][ T5060] #0: ffff888026290e98 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x22/0x50 [ 60.706125][ T5060] #1: ffff8880b952a758 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 60.706149][ T5060] #2: ffffffff8e131920 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x114/0x420 [ 60.706169][ T5060] #3: ffffffff8e00d500 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 60.706190][ T5060] #4: ffffffff8e00d130 (console_srcu){....}-{0:0}, at: console_flush_all+0x14a/0xec0 [ 60.706212][ T5060] [ 60.706212][ T5060] stack backtrace: [ 60.706215][ T5060] CPU: 1 PID: 5060 Comm: sshd Not tainted 6.8.0-syzkaller-05271-gf99c5f563c17 #0 [ 60.706225][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 60.706231][ T5060] Call Trace: [ 60.706236][ T5060] [ 60.706240][ T5060] dump_stack_lvl+0x1e7/0x2e0 [ 60.706252][ T5060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 60.706265][ T5060] ? print_circular_bug+0x130/0x1a0 [ 60.706276][ T5060] check_noncircular+0x36a/0x4a0 [ 60.706288][ T5060] ? __pfx_check_noncircular+0x10/0x10 [ 60.706299][ T5060] ? lockdep_lock+0x123/0x2b0 [ 60.706312][ T5060] ? add_lock_to_list+0x1de/0x2e0 [ 60.706325][ T5060] validate_chain+0x18cb/0x58e0 [ 60.706341][ T5060] ? __pfx_validate_chain+0x10/0x10 [ 60.706352][ T5060] ? sprintf+0xda/0x120 [ 60.706364][ T5060] ? vsnprintf+0x1cc3/0x1da0 [ 60.706379][ T5060] ? info_print_prefix+0x204/0x310 [ 60.706393][ T5060] ? mark_lock+0x9a/0x350 [ 60.706403][ T5060] __lock_acquire+0x1346/0x1fd0 [ 60.706415][ T5060] lock_acquire+0x1e4/0x530 [ 60.706424][ T5060] ? console_flush_all+0x14a/0xec0 [ 60.706436][ T5060] ? __pfx_lock_acquire+0x10/0x10 [ 60.706445][ T5060] ? __pfx_lock_release+0x10/0x10 [ 60.706453][ T5060] ? do_raw_spin_lock+0x14f/0x370 [ 60.706467][ T5060] ? do_raw_spin_unlock+0x13c/0x8b0 [ 60.706478][ T5060] ? console_flush_all+0x3d0/0xec0 [ 60.706489][ T5060] ? console_flush_all+0x14a/0xec0 [ 60.706500][ T5060] console_flush_all+0x7ba/0xec0 [ 60.706511][ T5060] ? console_flush_all+0x14a/0xec0 [ 60.706522][ T5060] ? console_flush_all+0x14a/0xec0 [ 60.706536][ T5060] ? __pfx_console_flush_all+0x10/0x10 [ 60.706548][ T5060] ? __pfx_lock_acquire+0x10/0x10 [ 60.706557][ T5060] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 60.706569][ T5060] ? validate_chain+0x15a2/0x58e0 [ 60.706580][ T5060] console_unlock+0x13b/0x4d0 [ 60.706592][ T5060] ? __pfx_console_unlock+0x10/0x10 [ 60.706602][ T5060] ? _printk+0xd5/0x120 [ 60.706610][ T5060] ? _printk+0xd5/0x120 [ 60.706619][ T5060] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 60.706632][ T5060] ? __pfx_validate_chain+0x10/0x10 [ 60.706643][ T5060] vprintk_emit+0x509/0x720 [ 60.706654][ T5060] ? __pfx_vprintk_emit+0x10/0x10 [ 60.706666][ T5060] ? lockdep_unlock+0x16a/0x300 [ 60.706679][ T5060] _printk+0xd5/0x120 [ 60.706689][ T5060] ? report_bug+0x25e/0x500 [ 60.706700][ T5060] ? __pfx__printk+0x10/0x10 [ 60.706710][ T5060] ? __lock_acquire+0x1346/0x1fd0 [ 60.706719][ T5060] ? find_bug+0xa3/0x390 [ 60.706730][ T5060] ? __local_bh_enable_ip+0x1be/0x200 [ 60.706740][ T5060] report_bug+0x346/0x500 [ 60.706751][ T5060] ? __local_bh_enable_ip+0x1be/0x200 [ 60.706761][ T5060] handle_bug+0x3e/0x70 [ 60.706772][ T5060] exc_invalid_op+0x1a/0x50 [ 60.706783][ T5060] asm_exc_invalid_op+0x1a/0x20 [ 60.706795][ T5060] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 60.706805][ T5060] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 9c e1 86 8f 80 e1 07 80 c1 03 38 [ 60.706812][ T5060] RSP: 0018:ffffc9000395f1c0 EFLAGS: 00010046 [ 60.706820][ T5060] RAX: 0000000000000000 RBX: 1ffff9200072be3c RCX: 0000000000000001 [ 60.706826][ T5060] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895fa5ea [ 60.706832][ T5060] RBP: ffffc9000395f280 R08: ffff88802adb01eb R09: 1ffff110055b603d [ 60.706838][ T5060] R10: dffffc0000000000 R11: ffffed10055b603e R12: dffffc0000000000 [ 60.706844][ T5060] R13: ffff88807aad0d00 R14: ffffc9000395f200 R15: 0000000000000201 [ 60.706853][ T5060] ? sock_map_delete_elem+0xca/0x140 [ 60.706863][ T5060] ? sock_map_delete_elem+0xca/0x140 [ 60.706871][ T5060] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 60.706879][ T5060] ? sock_map_delete_elem+0xca/0x140 [ 60.706888][ T5060] ? do_raw_spin_unlock+0x13c/0x8b0 [ 60.706899][ T5060] ? __pfx___cant_migrate+0x10/0x10 [ 60.706909][ T5060] ? sock_map_delete_elem+0x97/0x140 [ 60.706919][ T5060] sock_map_delete_elem+0xca/0x140 [ 60.706928][ T5060] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 60.706938][ T5060] bpf_trace_run2+0x204/0x420 [ 60.706948][ T5060] ? bpf_trace_run2+0x114/0x420 [ 60.706957][ T5060] ? __pfx_bpf_trace_run2+0x10/0x10 [ 60.706966][ T5060] ? __pfx_debug_object_activate+0x10/0x10 [ 60.706975][ T5060] ? __tcp_transmit_skb+0x21fe/0x3b80 [ 60.706988][ T5060] enqueue_timer+0x396/0x550 [ 60.706998][ T5060] __mod_timer+0x953/0xeb0 [ 60.707012][ T5060] ? __pfx___mod_timer+0x10/0x10 [ 60.707024][ T5060] ? seqcount_lockdep_reader_access+0x157/0x220 [ 60.707036][ T5060] ? lockdep_hardirqs_on+0x99/0x150 [ 60.707048][ T5060] ? __asan_memset+0x23/0x50 [ 60.707057][ T5060] sk_reset_timer+0x23/0xc0 [ 60.707075][ T5060] tcp_event_new_data_sent+0x203/0x360 [ 60.707088][ T5060] tcp_write_xmit+0x1468/0x6100 [ 60.707108][ T5060] __tcp_push_pending_frames+0x9b/0x360 [ 60.707120][ T5060] tcp_sendmsg_locked+0x42cc/0x4d00 [ 60.707139][ T5060] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 60.707148][ T5060] ? __local_bh_enable_ip+0x168/0x200 [ 60.707157][ T5060] ? do_raw_spin_unlock+0x13c/0x8b0 [ 60.707171][ T5060] tcp_sendmsg+0x30/0x50 [ 60.707179][ T5060] __sock_sendmsg+0x1a6/0x270 [ 60.707188][ T5060] sock_write_iter+0x2dd/0x400 [ 60.707201][ T5060] ? __pfx_sock_write_iter+0x10/0x10 [ 60.707215][ T5060] ? bpf_lsm_file_permission+0x9/0x10 [ 60.707226][ T5060] ? security_file_permission+0x7f/0xa0 [ 60.707237][ T5060] vfs_write+0xa84/0xcb0 [ 60.707248][ T5060] ? __pfx_vfs_write+0x10/0x10 [ 60.707257][ T5060] ? __set_current_blocked+0x310/0x380 [ 60.707268][ T5060] ? __might_fault+0xc6/0x120 [ 60.707278][ T5060] ? __fdget_pos+0x1a2/0x320 [ 60.707290][ T5060] ksys_write+0x1a0/0x2c0 [ 60.707300][ T5060] ? __pfx_ksys_write+0x10/0x10 [ 60.707310][ T5060] ? do_syscall_64+0x10a/0x240 [ 60.707321][ T5060] ? do_syscall_64+0xb6/0x240 [ 60.707331][ T5060] do_syscall_64+0xfb/0x240 [ 60.707342][ T5060] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 60.707354][ T5060] RIP: 0033:0x7f23c2716bf2 [ 60.707361][ T5060] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83 [ 60.707368][ T5060] RSP: 002b:00007fff85326468 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 60.707377][ T5060] RAX: ffffffffffffffda RBX: 000000000000002c RCX: 00007f23c2716bf2 [ 60.707383][ T5060] RDX: 000000000000002c RSI: 0000564e61b77960 RDI: 0000000000000004 [ 60.707388][ T5060] RBP: 0000564e61b85220 R08: 0000000000000000 R09: 0000000000000000 [ 60.707393][ T5060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000564e24ee7aa4 [ 60.707399][ T5060] R13: 000000000000003c R14: 0000564e24ee83e8 R15: 00007fff853264d8 [ 60.707408][ T5060] [ 60.707825][ C0] ------------[ cut here ]------------ [ 60.712869][ T5060] WARNING: CPU: 1 PID: 5060 at kernel/softirq.c:362 __local_bh_enable_ip+0x1be/0x200 [ 60.715268][ C0] raw_local_irq_restore() called with IRQs enabled [ 60.722238][ T5060] Modules linked in: [ 60.722256][ T5060] CPU: 1 PID: 5060 Comm: sshd Not tainted 6.8.0-syzkaller-05271-gf99c5f563c17 #0 [ 60.722275][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 60.722283][ T5060] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 60.722306][ T5060] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 9c e1 86 8f 80 e1 07 80 c1 03 38 [ 60.722319][ T5060] RSP: 0018:ffffc9000395f1c0 EFLAGS: 00010046 [ 60.729431][ C0] WARNING: CPU: 0 PID: 0 at kernel/locking/irqflag-debug.c:10 warn_bogus_irq_restore+0x29/0x40 [ 60.736001][ T5060] [ 60.736008][ T5060] RAX: 0000000000000000 RBX: 1ffff9200072be3c RCX: 0000000000000001 [ 60.743059][ C0] Modules linked in: [ 60.748493][ T5060] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895fa5ea [ 60.748513][ T5060] RBP: ffffc9000395f280 R08: ffff88802adb01eb R09: 1ffff110055b603d [ 60.748525][ T5060] R10: dffffc0000000000 R11: ffffed10055b603e R12: dffffc0000000000 [ 60.748535][ T5060] R13: ffff88807aad0d00 R14: ffffc9000395f200 R15: 0000000000000201 [ 60.757757][ C0] [ 60.765130][ T5060] FS: 00007f23c2b85800(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 60.774137][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.8.0-syzkaller-05271-gf99c5f563c17 #0 [ 60.784511][ T5060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.784533][ T5060] CR2: 00007f23c27f1b10 CR3: 00000000793be000 CR4: 00000000003506f0 [ 60.784546][ T5060] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.784555][ T5060] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.784564][ T5060] Call Trace: [ 60.784573][ T5060] [ 60.793740][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 60.800962][ T5060] ? __warn+0x163/0x4b0 [ 60.800992][ T5060] ? __local_bh_enable_ip+0x1be/0x200 [ 60.806001][ C0] RIP: 0010:warn_bogus_irq_restore+0x29/0x40 [ 60.811879][ T5060] ? report_bug+0x2b3/0x500 [ 60.811910][ T5060] ? __local_bh_enable_ip+0x1be/0x200 [ 60.811930][ T5060] ? handle_bug+0x3e/0x70 [ 60.817197][ C0] Code: 90 f3 0f 1e fa 90 80 3d de 69 01 04 00 74 06 90 c3 cc cc cc cc c6 05 cf 69 01 04 01 90 48 c7 c7 20 ba aa 8b e8 f8 e5 e7 f5 90 <0f> 0b 90 90 90 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f [ 60.822117][ T5060] ? exc_invalid_op+0x1a/0x50 [ 60.822141][ T5060] ? asm_exc_invalid_op+0x1a/0x20 [ 60.822167][ T5060] ? sock_map_delete_elem+0xca/0x140 [ 60.827693][ C0] RSP: 0018:ffffc90000007958 EFLAGS: 00010246 [ 60.832870][ T5060] ? __local_bh_enable_ip+0x1be/0x200 [ 60.837455][ C0] [ 60.842367][ T5060] ? sock_map_delete_elem+0xca/0x140 [ 60.842386][ T5060] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 60.847674][ C0] RAX: bce298523a3cc400 RBX: 1ffff92000000f30 RCX: ffffffff8de94680 [ 60.854932][ T5060] ? sock_map_delete_elem+0xca/0x140 [ 60.859972][ C0] RDX: 0000000000000303 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.864951][ T5060] ? do_raw_spin_unlock+0x13c/0x8b0 [ 60.869966][ C0] RBP: ffffc900000079f0 R08: ffffffff8157cc12 R09: 1ffffffff1f0d5cd [ 60.875036][ T5060] ? __pfx___cant_migrate+0x10/0x10 [ 60.880144][ C0] R10: dffffc0000000000 R11: fffffbfff1f0d5ce R12: dffffc0000000000 [ 60.885554][ T5060] ? sock_map_delete_elem+0x97/0x140 [ 60.890923][ C0] R13: 1ffff92000000f2c R14: ffffc90000007980 R15: 0000000000000246 [ 60.896252][ T5060] sock_map_delete_elem+0xca/0x140 [ 60.901267][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 60.906968][ T5060] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 60.913206][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.919842][ T5060] bpf_trace_run2+0x204/0x420 [ 60.919867][ T5060] ? bpf_trace_run2+0x114/0x420 [ 60.925210][ C0] CR2: 00007f39eaa46110 CR3: 000000007d652000 CR4: 00000000003506f0 [ 60.930555][ T5060] ? __pfx_bpf_trace_run2+0x10/0x10 [ 60.930575][ T5060] ? __pfx_debug_object_activate+0x10/0x10 [ 60.930591][ T5060] ? __tcp_transmit_skb+0x21fe/0x3b80 [ 60.935588][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.941388][ T5060] enqueue_timer+0x396/0x550 [ 60.941413][ T5060] __mod_timer+0x953/0xeb0 [ 60.946954][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.952220][ T5060] ? __pfx___mod_timer+0x10/0x10 [ 60.952245][ T5060] ? seqcount_lockdep_reader_access+0x157/0x220 [ 60.957711][ C0] Call Trace: [ 60.962878][ T5060] ? lockdep_hardirqs_on+0x99/0x150 [ 60.968208][ C0] [ 60.973354][ T5060] ? __asan_memset+0x23/0x50 [ 60.978641][ C0] ? __warn+0x163/0x4b0 [ 60.984087][ T5060] sk_reset_timer+0x23/0xc0 [ 60.989011][ C0] ? warn_bogus_irq_restore+0x29/0x40 [ 60.994678][ T5060] tcp_event_new_data_sent+0x203/0x360 [ 60.999535][ C0] ? report_bug+0x2b3/0x500 [ 61.004423][ T5060] tcp_write_xmit+0x1468/0x6100 [ 61.009712][ C0] ? warn_bogus_irq_restore+0x29/0x40 [ 61.017411][ T5060] __tcp_push_pending_frames+0x9b/0x360 [ 61.022464][ C0] ? handle_bug+0x3e/0x70 [ 61.028214][ T5060] tcp_sendmsg_locked+0x42cc/0x4d00 [ 61.028259][ T5060] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 61.033868][ C0] ? exc_invalid_op+0x1a/0x50 [ 61.038968][ T5060] ? __local_bh_enable_ip+0x168/0x200 [ 61.038994][ T5060] ? do_raw_spin_unlock+0x13c/0x8b0 [ 61.039016][ T5060] tcp_sendmsg+0x30/0x50 [ 61.039035][ T5060] __sock_sendmsg+0x1a6/0x270 [ 61.043865][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 61.048927][ T5060] sock_write_iter+0x2dd/0x400 [ 61.048955][ T5060] ? __pfx_sock_write_iter+0x10/0x10 [ 61.048980][ T5060] ? bpf_lsm_file_permission+0x9/0x10 [ 61.054155][ C0] ? __warn_printk+0x292/0x360 [ 61.058889][ T5060] ? security_file_permission+0x7f/0xa0 [ 61.058911][ T5060] vfs_write+0xa84/0xcb0 [ 61.058934][ T5060] ? __pfx_vfs_write+0x10/0x10 [ 61.063765][ C0] ? warn_bogus_irq_restore+0x29/0x40 [ 61.068814][ T5060] ? __set_current_blocked+0x310/0x380 [ 61.068850][ T5060] ? __might_fault+0xc6/0x120 [ 61.068867][ T5060] ? __fdget_pos+0x1a2/0x320 [ 61.075269][ C0] ? warn_bogus_irq_restore+0x28/0x40 [ 61.082790][ T5060] ksys_write+0x1a0/0x2c0 [ 61.082814][ T5060] ? __pfx_ksys_write+0x10/0x10 [ 61.087838][ C0] _raw_spin_unlock_irqrestore+0x120/0x140 [ 61.093689][ T5060] ? do_syscall_64+0x10a/0x240 [ 61.099841][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 61.105253][ T5060] ? do_syscall_64+0xb6/0x240 [ 61.110537][ C0] ? rcu_is_watching+0x15/0xb0 [ 61.115522][ T5060] do_syscall_64+0xfb/0x240 [ 61.120128][ C0] ? enqueue_timer+0x20b/0x550 [ 61.125456][ T5060] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 61.131456][ C0] __mod_timer+0xb89/0xeb0 [ 61.136433][ T5060] RIP: 0033:0x7f23c2716bf2 [ 61.141474][ C0] ? __pfx___mod_timer+0x10/0x10 [ 61.147421][ T5060] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83 [ 61.152912][ C0] ? __pfx___timer_delete+0x10/0x10 [ 61.158325][ T5060] RSP: 002b:00007fff85326468 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.158352][ T5060] RAX: ffffffffffffffda RBX: 000000000000002c RCX: 00007f23c2716bf2 [ 61.158363][ T5060] RDX: 000000000000002c RSI: 0000564e61b77960 RDI: 0000000000000004 [ 61.158373][ T5060] RBP: 0000564e61b85220 R08: 0000000000000000 R09: 0000000000000000 [ 61.158383][ T5060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000564e24ee7aa4 [ 61.165823][ C0] ? lapb_transmit_buffer+0x17c/0x1f0 [ 61.171173][ T5060] R13: 000000000000003c R14: 0000564e24ee83e8 R15: 00007fff853264d8 [ 61.171192][ T5060] [ 61.171200][ T5060] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 61.171208][ T5060] CPU: 1 PID: 5060 Comm: sshd Not tainted 6.8.0-syzkaller-05271-gf99c5f563c17 #0 [ 61.171224][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 61.171232][ T5060] Call Trace: [ 61.171242][ T5060] [ 61.171247][ T5060] dump_stack_lvl+0x1e7/0x2e0 [ 61.171271][ T5060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 61.171290][ T5060] ? __pfx__printk+0x10/0x10 [ 61.171310][ T5060] ? vscnprintf+0x5d/0x90 [ 61.171332][ T5060] panic+0x349/0x860 [ 61.171348][ T5060] ? __warn+0x172/0x4b0 [ 61.171369][ T5060] ? __pfx_panic+0x10/0x10 [ 61.171393][ T5060] __warn+0x31e/0x4b0 [ 61.171412][ T5060] ? __local_bh_enable_ip+0x1be/0x200 [ 61.171430][ T5060] report_bug+0x2b3/0x500 [ 61.171450][ T5060] ? __local_bh_enable_ip+0x1be/0x200 [ 61.171468][ T5060] handle_bug+0x3e/0x70 [ 61.171493][ T5060] exc_invalid_op+0x1a/0x50 [ 61.171513][ T5060] asm_exc_invalid_op+0x1a/0x20 [ 61.171535][ T5060] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 61.171552][ T5060] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 9c e1 86 8f 80 e1 07 80 c1 03 38 [ 61.171564][ T5060] RSP: 0018:ffffc9000395f1c0 EFLAGS: 00010046 [ 61.171579][ T5060] RAX: 0000000000000000 RBX: 1ffff9200072be3c RCX: 0000000000000001 [ 61.171589][ T5060] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895fa5ea [ 61.171599][ T5060] RBP: ffffc9000395f280 R08: ffff88802adb01eb R09: 1ffff110055b603d [ 61.171610][ T5060] R10: dffffc0000000000 R11: ffffed10055b603e R12: dffffc0000000000 [ 61.171621][ T5060] R13: ffff88807aad0d00 R14: ffffc9000395f200 R15: 0000000000000201 [ 61.171637][ T5060] ? sock_map_delete_elem+0xca/0x140 [ 61.171656][ T5060] ? sock_map_delete_elem+0xca/0x140 [ 61.171671][ T5060] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 61.171686][ T5060] ? sock_map_delete_elem+0xca/0x140 [ 61.171701][ T5060] ? do_raw_spin_unlock+0x13c/0x8b0 [ 61.171722][ T5060] ? __pfx___cant_migrate+0x10/0x10 [ 61.171739][ T5060] ? sock_map_delete_elem+0x97/0x140 [ 61.171756][ T5060] sock_map_delete_elem+0xca/0x140 [ 61.171773][ T5060] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 61.171791][ T5060] bpf_trace_run2+0x204/0x420 [ 61.171809][ T5060] ? bpf_trace_run2+0x114/0x420 [ 61.171825][ T5060] ? __pfx_bpf_trace_run2+0x10/0x10 [ 61.171842][ T5060] ? __pfx_debug_object_activate+0x10/0x10 [ 61.171858][ T5060] ? __tcp_transmit_skb+0x21fe/0x3b80 [ 61.171883][ T5060] enqueue_timer+0x396/0x550 [ 61.171903][ T5060] __mod_timer+0x953/0xeb0 [ 61.171929][ T5060] ? __pfx___mod_timer+0x10/0x10 [ 61.171949][ T5060] ? seqcount_lockdep_reader_access+0x157/0x220 [ 61.171970][ T5060] ? lockdep_hardirqs_on+0x99/0x150 [ 61.171991][ T5060] ? __asan_memset+0x23/0x50 [ 61.172008][ T5060] sk_reset_timer+0x23/0xc0 [ 61.172031][ T5060] tcp_event_new_data_sent+0x203/0x360 [ 61.172054][ T5060] tcp_write_xmit+0x1468/0x6100 [ 61.172091][ T5060] __tcp_push_pending_frames+0x9b/0x360 [ 61.172113][ T5060] tcp_sendmsg_locked+0x42cc/0x4d00 [ 61.172150][ T5060] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 61.172165][ T5060] ? __local_bh_enable_ip+0x168/0x200 [ 61.172182][ T5060] ? do_raw_spin_unlock+0x13c/0x8b0 [ 61.172207][ T5060] tcp_sendmsg+0x30/0x50 [ 61.172223][ T5060] __sock_sendmsg+0x1a6/0x270 [ 61.172239][ T5060] sock_write_iter+0x2dd/0x400 [ 61.172262][ T5060] ? __pfx_sock_write_iter+0x10/0x10 [ 61.172287][ T5060] ? bpf_lsm_file_permission+0x9/0x10 [ 61.172304][ T5060] ? security_file_permission+0x7f/0xa0 [ 61.172324][ T5060] vfs_write+0xa84/0xcb0 [ 61.172346][ T5060] ? __pfx_vfs_write+0x10/0x10 [ 61.172361][ T5060] ? __set_current_blocked+0x310/0x380 [ 61.172381][ T5060] ? __might_fault+0xc6/0x120 [ 61.172397][ T5060] ? __fdget_pos+0x1a2/0x320 [ 61.172418][ T5060] ksys_write+0x1a0/0x2c0 [ 61.172437][ T5060] ? __pfx_ksys_write+0x10/0x10 [ 61.172454][ T5060] ? do_syscall_64+0x10a/0x240 [ 61.172472][ T5060] ? do_syscall_64+0xb6/0x240 [ 61.172498][ T5060] do_syscall_64+0xfb/0x240 [ 61.172518][ T5060] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 61.172539][ T5060] RIP: 0033:0x7f23c2716bf2 [ 61.172553][ T5060] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83 [ 61.172564][ T5060] RSP: 002b:00007fff85326468 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.172579][ T5060] RAX: ffffffffffffffda RBX: 000000000000002c RCX: 00007f23c2716bf2 [ 61.172589][ T5060] RDX: 000000000000002c RSI: 0000564e61b77960 RDI: 0000000000000004 [ 61.172599][ T5060] RBP: 0000564e61b85220 R08: 0000000000000000 R09: 0000000000000000 [ 61.172609][ T5060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000564e24ee7aa4 [ 61.172619][ T5060] R13: 000000000000003c R14: 0000564e24ee83e8 R15: 00007fff853264d8 [ 61.172636][ T5060] [ 61.177001][ T5060] Kernel Offset: disabled