./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3559080823 <...> Warning: Permanently added '10.128.1.43' (ED25519) to the list of known hosts. execve("./syz-executor3559080823", ["./syz-executor3559080823"], 0x7fff515819e0 /* 10 vars */) = 0 brk(NULL) = 0x55555bd8f000 brk(0x55555bd8fd00) = 0x55555bd8fd00 arch_prctl(ARCH_SET_FS, 0x55555bd8f380) = 0 set_tid_address(0x55555bd8f650) = 5056 set_robust_list(0x55555bd8f660, 24) = 0 rseq(0x55555bd8fca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3559080823", 4096) = 28 getrandom("\x56\xb4\xf4\x0c\xcd\x56\x75\x8e", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555bd8fd00 brk(0x55555bdb0d00) = 0x55555bdb0d00 brk(0x55555bdb1000) = 0x55555bdb1000 mprotect(0x7fc6f3e42000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555bd8f650) = 5057 ./strace-static-x86_64: Process 5057 attached [pid 5057] set_robust_list(0x55555bd8f660, 24) = 0 [pid 5057] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5057] setpgid(0, 0) = 0 [pid 5057] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5057] write(3, "1000", 4) = 4 [pid 5057] close(3) = 0 [pid 5057] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5057] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5057] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5057] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_kthread_work_queue_work", prog_fd=4}}, 16) = 5 [pid 5057] exit_group(0) = ? [pid 5057] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5057, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5058 attached , child_tidptr=0x55555bd8f650) = 5058 [pid 5058] set_robust_list(0x55555bd8f660, 24) = 0 [pid 5058] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5058] setpgid(0, 0) = 0 [pid 5058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5058] write(3, "1000", 4) = 4 [pid 5058] close(3) = 0 [pid 5058] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5058] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5058] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5058] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_kthread_work_queue_work", prog_fd=4}}, 16) = 5 [pid 5058] exit_group(0) = ? [pid 5058] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5058, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555bd8f650) = 5059 ./strace-static-x86_64: Process 5059 attached [pid 5059] set_robust_list(0x55555bd8f660, 24) = 0 [pid 5059] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5059] setpgid(0, 0) = 0 [pid 5059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5059] write(3, "1000", 4) = 4 [pid 5059] close(3) = 0 [pid 5059] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5059] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5059] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5059] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_kthread_work_queue_work", prog_fd=4}}, 16) = 5 [pid 5059] exit_group(0) = ? [pid 5059] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5059, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5060 attached , child_tidptr=0x55555bd8f650) = 5060 [pid 5060] set_robust_list(0x55555bd8f660, 24) = 0 [pid 5060] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5060] setpgid(0, 0) = 0 [pid 5060] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5060] write(3, "1000", 4) = 4 [pid 5060] close(3) = 0 [pid 5060] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5060] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5060] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5060] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_kthread_work_queue_work", prog_fd=4}}, 16) = 5 [pid 5060] exit_group(0) = ? [pid 5060] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5060, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5061 attached , child_tidptr=0x55555bd8f650) = 5061 [pid 5061] set_robust_list(0x55555bd8f660, 24) = 0 [pid 5061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5061] setpgid(0, 0) = 0 [pid 5061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5061] write(3, "1000", 4) = 4 [pid 5061] close(3) = 0 [pid 5061] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5061] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5061] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5061] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_kthread_work_queue_work", prog_fd=4}}, 16) = 5 [pid 5061] exit_group(0) = ? [pid 5061] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5061, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5062 attached , child_tidptr=0x55555bd8f650) = 5062 [pid 5062] set_robust_list(0x55555bd8f660, 24) = 0 [pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] setpgid(0, 0) = 0 [pid 5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] write(3, "1000", 4) = 4 [pid 5062] close(3) = 0 [pid 5062] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5062] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5062] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5062] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_kthread_work_queue_work", prog_fd=4}}, 16) = 5 [pid 5062] exit_group(0) = ? [pid 5062] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5062, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555bd8f650) = 5063 ./strace-static-x86_64: Process 5063 attached [pid 5063] set_robust_list(0x55555bd8f660, 24) = 0 [pid 5063] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] setpgid(0, 0) = 0 [pid 5063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "1000", 4) = 4 [pid 5063] close(3) = 0 [pid 5063] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5063] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5063] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5063] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_kthread_work_queue_work", prog_fd=4}}, 16) = 5 [pid 5063] exit_group(0) = ? [pid 5063] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5063, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555bd8f650) = 5064 ./strace-static-x86_64: Process 5064 attached [pid 5064] set_robust_list(0x55555bd8f660, 24) = 0 [pid 5064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5064] setpgid(0, 0) = 0 [pid 5064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5064] write(3, "1000", 4) = 4 [pid 5064] close(3) = 0 [pid 5064] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5064] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5064] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5064] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_kthread_work_queue_work", prog_fd=4}}, 16) = 5 [pid 5064] exit_group(0) = ? [pid 5064] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5064, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5065 attached , child_tidptr=0x55555bd8f650) = 5065 [pid 5065] set_robust_list(0x55555bd8f660, 24) = 0 [pid 5065] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5065] setpgid(0, 0) = 0 [pid 5065] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5065] write(3, "1000", 4) = 4 [pid 5065] close(3) = 0 [pid 5065] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5065] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5065] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5065] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_kthread_work_queue_work", prog_fd=4}}, 16) = 5 [pid 5065] exit_group(0) = ? [pid 5065] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5065, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5066 attached , child_tidptr=0x55555bd8f650) = 5066 [pid 5066] set_robust_list(0x55555bd8f660, 24) = 0 [pid 5066] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5066] setpgid(0, 0) = 0 [pid 5066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5066] write(3, "1000", 4) = 4 [pid 5066] close(3) = 0 [pid 5066] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5066] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5066] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5066] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_kthread_work_queue_work", prog_fd=4}}, 16) = 5 [pid 5066] exit_group(0) = ? [pid 5066] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5066, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555bd8f650) = 5067 ./strace-static-x86_64: Process 5067 attached [pid 5067] set_robust_list(0x55555bd8f660, 24) = 0 [pid 5067] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5067] setpgid(0, 0) = 0 [pid 5067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5067] write(3, "1000", 4) = 4 [pid 5067] close(3) = 0 [pid 5067] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5067] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5067] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5067] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_kthread_work_queue_work", prog_fd=4}}, 16) = 5 [pid 5067] exit_group(0) = ? [pid 5067] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5067, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5068 attached , child_tidptr=0x55555bd8f650) = 5068 [pid 5068] set_robust_list(0x55555bd8f660, 24) = 0 [pid 5068] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5068] setpgid(0, 0) = 0 [pid 5068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] write(3, "1000", 4) = 4 [pid 5068] close(3) = 0 [pid 5068] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5068] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5068] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5068] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_kthread_work_queue_work", prog_fd=4}}, 16) = 5 [pid 5068] exit_group(0) = ? [pid 5068] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5068, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5069 attached , child_tidptr=0x55555bd8f650) = 5069 [pid 5069] set_robust_list(0x55555bd8f660, 24) = 0 [pid 5069] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5069] setpgid(0, 0) = 0 [pid 5069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5069] write(3, "1000", 4) = 4 [pid 5069] close(3) = 0 [pid 5069] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5069] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5069] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5069] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_kthread_work_queue_work", prog_fd=4}}, 16) = 5 [pid 5069] exit_group(0) = ? [ 54.855600][ T754] ------------[ cut here ]------------ [ 54.855709][ T754] [ 54.855713][ T754] ====================================================== [ 54.855716][ T754] WARNING: possible circular locking dependency detected [ 54.855721][ T754] 6.8.0-syzkaller-08951-gfe46a7dd189e #0 Not tainted [ 54.855726][ T754] ------------------------------------------------------ [ 54.855729][ T754] kworker/u8:5/754 is trying to acquire lock: [ 54.855735][ T754] ffffffff8e126300 (console_owner){....}-{0:0}, at: console_flush_all+0x152/0xfd0 [ 54.855781][ T754] [ 54.855781][ T754] but task is already holding lock: [ 54.855784][ T754] ffff888016ebf020 ((worker)->lock){....}-{2:2}, at: kthread_queue_work+0x27/0x180 [ 54.855806][ T754] [ 54.855806][ T754] which lock already depends on the new lock. [ 54.855806][ T754] [ 54.855809][ T754] [ 54.855809][ T754] the existing dependency chain (in reverse order) is: [ 54.855812][ T754] [ 54.855812][ T754] -> #4 ((worker)->lock){....}-{2:2}: [ 54.855824][ T754] lock_acquire+0x1e4/0x530 [ 54.855833][ T754] _raw_spin_lock_irqsave+0xd5/0x120 [ 54.855850][ T754] kthread_queue_work+0x27/0x180 [ 54.855859][ T754] put_pwq_unlocked+0x12a/0x190 [ 54.855870][ T754] apply_workqueue_attrs_locked+0x132/0x210 [ 54.855881][ T754] apply_workqueue_attrs+0x30/0x50 [ 54.855892][ T754] padata_alloc+0x22b/0x370 [ 54.855899][ T754] pcrypt_init_padata+0x27/0x100 [ 54.855912][ T754] pcrypt_init+0x65/0xe0 [ 54.855924][ T754] do_one_initcall+0x238/0x830 [ 54.855936][ T754] do_initcall_level+0x157/0x210 [ 54.855948][ T754] do_initcalls+0x3f/0x80 [ 54.855959][ T754] kernel_init_freeable+0x435/0x5d0 [ 54.855971][ T754] kernel_init+0x1d/0x2a0 [ 54.855983][ T754] ret_from_fork+0x4b/0x80 [ 54.855995][ T754] ret_from_fork_asm+0x1a/0x30 [ 54.856007][ T754] [ 54.856007][ T754] -> #3 (&pool->lock){-.-.}-{2:2}: [ 54.856019][ T754] lock_acquire+0x1e4/0x530 [ 54.856027][ T754] _raw_spin_lock+0x2e/0x40 [ 54.856038][ T754] __queue_work+0x6ec/0xec0 [ 54.856047][ T754] queue_work_on+0x14f/0x250 [ 54.856056][ T754] rpm_suspend+0xe99/0x1780 [ 54.856070][ T754] __pm_runtime_idle+0x131/0x1a0 [ 54.856080][ T754] __device_attach+0x3e5/0x520 [ 54.856091][ T754] bus_probe_device+0x189/0x260 [ 54.856100][ T754] device_add+0x8ff/0xca0 [ 54.856111][ T754] serial_base_port_add+0x2b6/0x3f0 [ 54.856121][ T754] serial_core_register_port+0x393/0x1e30 [ 54.856133][ T754] serial8250_register_8250_port+0x1433/0x1cd0 [ 54.856144][ T754] serial_pnp_probe+0x7d5/0xa20 [ 54.856155][ T754] pnp_device_probe+0x2ba/0x460 [ 54.856167][ T754] really_probe+0x29e/0xc50 [ 54.856179][ T754] __driver_probe_device+0x1a2/0x3e0 [ 54.856190][ T754] driver_probe_device+0x50/0x430 [ 54.856202][ T754] __driver_attach+0x45f/0x710 [ 54.856214][ T754] bus_for_each_dev+0x239/0x2b0 [ 54.856222][ T754] bus_add_driver+0x347/0x620 [ 54.856235][ T754] driver_register+0x23a/0x320 [ 54.856242][ T754] serial8250_init+0x9e/0x170 [ 54.856252][ T754] do_one_initcall+0x238/0x830 [ 54.856263][ T754] do_initcall_level+0x157/0x210 [ 54.856275][ T754] do_initcalls+0x3f/0x80 [ 54.856285][ T754] kernel_init_freeable+0x435/0x5d0 [ 54.856297][ T754] kernel_init+0x1d/0x2a0 [ 54.856306][ T754] ret_from_fork+0x4b/0x80 [ 54.856318][ T754] ret_from_fork_asm+0x1a/0x30 [ 54.856329][ T754] [ 54.856329][ T754] -> #2 (&dev->power.lock){-...}-{2:2}: [ 54.856341][ T754] lock_acquire+0x1e4/0x530 [ 54.856349][ T754] _raw_spin_lock_irqsave+0xd5/0x120 [ 54.856361][ T754] __pm_runtime_resume+0x112/0x180 [ 54.856371][ T754] __uart_start+0x17a/0x3c0 [ 54.856383][ T754] uart_write+0x427/0x5c0 [ 54.856394][ T754] n_tty_write+0xd6a/0x1230 [ 54.856404][ T754] file_tty_write+0x54f/0x9b0 [ 54.856421][ T754] vfs_write+0xa84/0xcb0 [ 54.856429][ T754] ksys_write+0x1a0/0x2c0 [ 54.856437][ T754] do_syscall_64+0xfb/0x240 [ 54.856445][ T754] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 54.856456][ T754] [ 54.856456][ T754] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 54.856468][ T754] lock_acquire+0x1e4/0x530 [ 54.856476][ T754] _raw_spin_lock_irqsave+0xd5/0x120 [ 54.856488][ T754] serial8250_console_write+0x1a8/0x1840 [ 54.856501][ T754] console_flush_all+0x867/0xfd0 [ 54.856512][ T754] console_unlock+0x13b/0x4d0 [ 54.856522][ T754] vprintk_emit+0x5a6/0x770 [ 54.856532][ T754] _printk+0xd5/0x120 [ 54.856544][ T754] register_console+0x70a/0xcd0 [ 54.856556][ T754] univ8250_console_init+0x49/0x50 [ 54.856565][ T754] console_init+0x198/0x680 [ 54.856577][ T754] start_kernel+0x2d3/0x500 [ 54.856587][ T754] x86_64_start_reservations+0x2a/0x30 [ 54.856596][ T754] x86_64_start_kernel+0x99/0xa0 [ 54.856604][ T754] common_startup_64+0x13e/0x147 [ 54.856614][ T754] [ 54.856614][ T754] -> #0 (console_owner){....}-{0:0}: [ 54.856626][ T754] validate_chain+0x18cb/0x58e0 [ 54.856636][ T754] __lock_acquire+0x1346/0x1fd0 [ 54.856644][ T754] lock_acquire+0x1e4/0x530 [ 54.856652][ T754] console_flush_all+0x810/0xfd0 [ 54.856663][ T754] console_unlock+0x13b/0x4d0 [ 54.856673][ T754] vprintk_emit+0x5a6/0x770 [ 54.856683][ T754] _printk+0xd5/0x120 [ 54.856694][ T754] report_bug+0x346/0x500 [ 54.856704][ T754] handle_bug+0x3e/0x70 [ 54.856713][ T754] exc_invalid_op+0x1a/0x50 [ 54.856721][ T754] asm_exc_invalid_op+0x1a/0x20 [ 54.856730][ T754] __local_bh_enable_ip+0x1be/0x200 [ 54.856739][ T754] sock_map_delete_elem+0xca/0x140 [ 54.856751][ T754] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 54.856762][ T754] bpf_trace_run2+0x204/0x420 [ 54.856772][ T754] kthread_insert_work+0x3f4/0x460 [ 54.856781][ T754] kthread_queue_work+0xff/0x180 [ 54.856790][ T754] synchronize_rcu_expedited+0x593/0x820 [ 54.856801][ T754] synchronize_rcu+0x136/0x3e0 [ 54.856810][ T754] sock_map_free+0x29/0x3e0 [ 54.856820][ T754] bpf_map_free_deferred+0xe6/0x110 [ 54.856830][ T754] process_scheduled_works+0xa00/0x1770 [ 54.856838][ T754] worker_thread+0x86d/0xd70 [ 54.856847][ T754] kthread+0x2f0/0x390 [ 54.856857][ T754] ret_from_fork+0x4b/0x80 [ 54.856868][ T754] ret_from_fork_asm+0x1a/0x30 [ 54.856880][ T754] [ 54.856880][ T754] other info that might help us debug this: [ 54.856880][ T754] [ 54.856883][ T754] Chain exists of: [ 54.856883][ T754] console_owner --> &pool->lock --> (worker)->lock [ 54.856883][ T754] [ 54.856896][ T754] Possible unsafe locking scenario: [ 54.856896][ T754] [ 54.856899][ T754] CPU0 CPU1 [ 54.856901][ T754] ---- ---- [ 54.856904][ T754] lock((worker)->lock); [ 54.856910][ T754] lock(&pool->lock); [ 54.856916][ T754] lock((worker)->lock); [ 54.856922][ T754] lock(console_owner); [ 54.856927][ T754] [ 54.856927][ T754] *** DEADLOCK *** [ 54.856927][ T754] [ 54.856929][ T754] 7 locks held by kworker/u8:5/754: [ 54.856935][ T754] #0: ffff888014c81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8e0/0x1770 [ 54.856957][ T754] #1: ffffc900030b7d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x91b/0x1770 [ 54.856978][ T754] #2: ffffffff8e1373b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x39a/0x820 [ 54.857000][ T754] #3: ffff888016ebf020 ((worker)->lock){....}-{2:2}, at: kthread_queue_work+0x27/0x180 [ 54.857022][ T754] #4: ffffffff8e132020 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x114/0x420 [ 54.857044][ T754] #5: ffffffff8e00dc20 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 54.857068][ T754] #6: ffffffff8e00d850 (console_srcu){....}-{0:0}, at: console_flush_all+0x152/0xfd0 [ 54.857091][ T754] [ 54.857091][ T754] stack backtrace: [ 54.857095][ T754] CPU: 0 PID: 754 Comm: kworker/u8:5 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 54.857105][ T754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 54.857111][ T754] Workqueue: events_unbound bpf_map_free_deferred [ 54.857122][ T754] Call Trace: [ 54.857126][ T754] [ 54.857130][ T754] dump_stack_lvl+0x241/0x360 [ 54.857140][ T754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 54.857151][ T754] ? print_circular_bug+0x130/0x1a0 [ 54.857164][ T754] check_noncircular+0x36a/0x4a0 [ 54.857176][ T754] ? __pfx_check_noncircular+0x10/0x10 [ 54.857188][ T754] ? lockdep_lock+0x123/0x2b0 [ 54.857203][ T754] ? add_lock_to_list+0x1de/0x2e0 [ 54.857215][ T754] validate_chain+0x18cb/0x58e0 [ 54.857232][ T754] ? __pfx_validate_chain+0x10/0x10 [ 54.857244][ T754] ? sprintf+0xda/0x120 [ 54.857255][ T754] ? vsnprintf+0x1cc3/0x1da0 [ 54.857269][ T754] ? info_print_prefix+0x204/0x310 [ 54.857284][ T754] ? mark_lock+0x9a/0x350 [ 54.857294][ T754] __lock_acquire+0x1346/0x1fd0 [ 54.857307][ T754] lock_acquire+0x1e4/0x530 [ 54.857316][ T754] ? console_flush_all+0x152/0xfd0 [ 54.857330][ T754] ? __pfx_lock_acquire+0x10/0x10 [ 54.857339][ T754] ? __pfx_lock_release+0x10/0x10 [ 54.857348][ T754] ? do_raw_spin_lock+0x14f/0x370 [ 54.857363][ T754] ? do_raw_spin_unlock+0x13c/0x8b0 [ 54.857375][ T754] ? console_flush_all+0x3a8/0xfd0 [ 54.857388][ T754] console_flush_all+0x810/0xfd0 [ 54.857400][ T754] ? console_flush_all+0x152/0xfd0 [ 54.857417][ T754] ? console_flush_all+0x152/0xfd0 [ 54.857432][ T754] ? __pfx_console_flush_all+0x10/0x10 [ 54.857444][ T754] ? __pfx_lock_acquire+0x10/0x10 [ 54.857454][ T754] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 54.857468][ T754] ? validate_chain+0x15a2/0x58e0 [ 54.857480][ T754] console_unlock+0x13b/0x4d0 [ 54.857493][ T754] ? __pfx_console_unlock+0x10/0x10 [ 54.857504][ T754] ? _printk+0xd5/0x120 [ 54.857516][ T754] ? _printk+0xd5/0x120 [ 54.857528][ T754] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 54.857542][ T754] ? __pfx_validate_chain+0x10/0x10 [ 54.857555][ T754] vprintk_emit+0x5a6/0x770 [ 54.857567][ T754] ? __pfx_vprintk_emit+0x10/0x10 [ 54.857579][ T754] ? lockdep_unlock+0x16a/0x300 [ 54.857594][ T754] _printk+0xd5/0x120 [ 54.857607][ T754] ? report_bug+0x25e/0x500 [ 54.857618][ T754] ? __pfx__printk+0x10/0x10 [ 54.857631][ T754] ? __lock_acquire+0x1346/0x1fd0 [ 54.857641][ T754] ? find_bug+0xa3/0x390 [ 54.857650][ T754] ? __local_bh_enable_ip+0x1be/0x200 [ 54.857661][ T754] report_bug+0x346/0x500 [ 54.857671][ T754] ? __local_bh_enable_ip+0x1be/0x200 [ 54.857681][ T754] handle_bug+0x3e/0x70 [ 54.857690][ T754] exc_invalid_op+0x1a/0x50 [ 54.857700][ T754] asm_exc_invalid_op+0x1a/0x20 [ 54.857711][ T754] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 54.857721][ T754] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 0c 41 86 8f 80 e1 07 80 c1 03 38 [ 54.857729][ T754] RSP: 0018:ffffc900030b74a0 EFLAGS: 00010046 [ 54.857737][ T754] RAX: 0000000000000000 RBX: 1ffff92000616e98 RCX: 0000000000000000 [ 54.857743][ T754] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895b48fa [ 54.857750][ T754] RBP: ffffc900030b7560 R08: ffff88801c7d91eb R09: 1ffff110038fb23d [ 54.857756][ T754] R10: dffffc0000000000 R11: ffffed10038fb23e R12: dffffc0000000000 [ 54.857763][ T754] R13: ffff88801f876900 R14: ffffc900030b74e0 R15: 0000000000000201 [ 54.857772][ T754] ? sock_map_delete_elem+0xca/0x140 [ 54.857786][ T754] ? sock_map_delete_elem+0xca/0x140 [ 54.857798][ T754] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 54.857807][ T754] ? sock_map_delete_elem+0xca/0x140 [ 54.857818][ T754] ? do_raw_spin_unlock+0x13c/0x8b0 [ 54.857831][ T754] ? __pfx___cant_migrate+0x10/0x10 [ 54.857842][ T754] ? sock_map_delete_elem+0x97/0x140 [ 54.857854][ T754] sock_map_delete_elem+0xca/0x140 [ 54.857867][ T754] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 54.857878][ T754] bpf_trace_run2+0x204/0x420 [ 54.857888][ T754] ? bpf_trace_run2+0x114/0x420 [ 54.857898][ T754] ? __pfx_bpf_trace_run2+0x10/0x10 [ 54.857911][ T754] kthread_insert_work+0x3f4/0x460 [ 54.857923][ T754] kthread_queue_work+0xff/0x180 [ 54.857935][ T754] synchronize_rcu_expedited+0x593/0x820 [ 54.857946][ T754] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 54.857958][ T754] ? __pfx_validate_chain+0x10/0x10 [ 54.857968][ T754] ? mark_lock+0x9a/0x350 [ 54.857979][ T754] ? __lock_acquire+0x1346/0x1fd0 [ 54.857989][ T754] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 54.858003][ T754] ? __pfx___might_resched+0x10/0x10 [ 54.858017][ T754] synchronize_rcu+0x136/0x3e0 [ 54.858027][ T754] ? __pfx_synchronize_rcu+0x10/0x10 [ 54.858042][ T754] ? __pfx_lock_acquire+0x10/0x10 [ 54.858051][ T754] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 54.858061][ T754] sock_map_free+0x29/0x3e0 [ 54.858075][ T754] bpf_map_free_deferred+0xe6/0x110 [ 54.858085][ T754] ? process_scheduled_works+0x91b/0x1770 [ 54.858094][ T754] process_scheduled_works+0xa00/0x1770 [ 54.858109][ T754] ? __pfx_process_scheduled_works+0x10/0x10 [ 54.858121][ T754] ? assign_work+0x364/0x3d0 [ 54.858130][ T754] worker_thread+0x86d/0xd70 [ 54.858143][ T754] ? __kthread_parkme+0x169/0x1d0 [ 54.858153][ T754] ? __pfx_worker_thread+0x10/0x10 [ 54.858163][ T754] kthread+0x2f0/0x390 [ 54.858173][ T754] ? __pfx_worker_thread+0x10/0x10 [ 54.858183][ T754] ? __pfx_kthread+0x10/0x10 [ 54.858193][ T754] ret_from_fork+0x4b/0x80 [ 54.858206][ T754] ? __pfx_kthread+0x10/0x10 [ 54.858216][ T754] ret_from_fork_asm+0x1a/0x30 [ 54.858232][ T754] [ 56.184929][ T754] WARNING: CPU: 0 PID: 754 at kernel/softirq.c:362 __local_bh_enable_ip+0x1be/0x200 [ 56.194287][ T754] Modules linked in: [ 56.198158][ T754] CPU: 0 PID: 754 Comm: kworker/u8:5 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 56.207845][ T754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 56.217879][ T754] Workqueue: events_unbound bpf_map_free_deferred [ 56.224278][ T754] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 56.230240][ T754] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 0c 41 86 8f 80 e1 07 80 c1 03 38 [ 56.249943][ T754] RSP: 0018:ffffc900030b74a0 EFLAGS: 00010046 [ 56.256007][ T754] RAX: 0000000000000000 RBX: 1ffff92000616e98 RCX: 0000000000000000 [ 56.263956][ T754] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895b48fa [ 56.271904][ T754] RBP: ffffc900030b7560 R08: ffff88801c7d91eb R09: 1ffff110038fb23d [ 56.279858][ T754] R10: dffffc0000000000 R11: ffffed10038fb23e R12: dffffc0000000000 [ 56.287808][ T754] R13: ffff88801f876900 R14: ffffc900030b74e0 R15: 0000000000000201 [ 56.295758][ T754] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 56.304679][ T754] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.311239][ T754] CR2: 00007fc6f3e49110 CR3: 000000000df32000 CR4: 00000000003506f0 [ 56.319193][ T754] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.327157][ T754] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.335107][ T754] Call Trace: [ 56.338386][ T754] [ 56.341300][ T754] ? __warn+0x163/0x4b0 [ 56.345442][ T754] ? __local_bh_enable_ip+0x1be/0x200 [ 56.350790][ T754] ? report_bug+0x2b3/0x500 [ 56.355271][ T754] ? __local_bh_enable_ip+0x1be/0x200 [ 56.360619][ T754] ? handle_bug+0x3e/0x70 [ 56.364926][ T754] ? exc_invalid_op+0x1a/0x50 [ 56.369579][ T754] ? asm_exc_invalid_op+0x1a/0x20 [ 56.374583][ T754] ? sock_map_delete_elem+0xca/0x140 [ 56.379848][ T754] ? __local_bh_enable_ip+0x1be/0x200 [ 56.385197][ T754] ? sock_map_delete_elem+0xca/0x140 [ 56.390461][ T754] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 56.396153][ T754] ? sock_map_delete_elem+0xca/0x140 [ 56.401414][ T754] ? do_raw_spin_unlock+0x13c/0x8b0 [ 56.406591][ T754] ? __pfx___cant_migrate+0x10/0x10 [ 56.411769][ T754] ? sock_map_delete_elem+0x97/0x140 [ 56.417031][ T754] sock_map_delete_elem+0xca/0x140 [ 56.422147][ T754] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 56.427600][ T754] bpf_trace_run2+0x204/0x420 [ 56.432271][ T754] ? bpf_trace_run2+0x114/0x420 [ 56.437096][ T754] ? __pfx_bpf_trace_run2+0x10/0x10 [ 56.442272][ T754] kthread_insert_work+0x3f4/0x460 [ 56.447365][ T754] kthread_queue_work+0xff/0x180 [ 56.452281][ T754] synchronize_rcu_expedited+0x593/0x820 [ 56.457889][ T754] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 56.464018][ T754] ? __pfx_validate_chain+0x10/0x10 [ 56.469189][ T754] ? mark_lock+0x9a/0x350 [ 56.473510][ T754] ? __lock_acquire+0x1346/0x1fd0 [ 56.478514][ T754] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 56.483779][ T754] ? __pfx___might_resched+0x10/0x10 [ 56.489045][ T754] synchronize_rcu+0x136/0x3e0 [ 56.493785][ T754] ? __pfx_synchronize_rcu+0x10/0x10 [ 56.499065][ T754] ? __pfx_lock_acquire+0x10/0x10 [ 56.504062][ T754] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 56.510020][ T754] sock_map_free+0x29/0x3e0 [ 56.514504][ T754] bpf_map_free_deferred+0xe6/0x110 [ 56.519680][ T754] ? process_scheduled_works+0x91b/0x1770 [ 56.525377][ T754] process_scheduled_works+0xa00/0x1770 [ 56.530902][ T754] ? __pfx_process_scheduled_works+0x10/0x10 [ 56.536857][ T754] ? assign_work+0x364/0x3d0 [ 56.541428][ T754] worker_thread+0x86d/0xd70 [ 56.546000][ T754] ? __kthread_parkme+0x169/0x1d0 [ 56.550999][ T754] ? __pfx_worker_thread+0x10/0x10 [ 56.556099][ T754] kthread+0x2f0/0x390 [ 56.560145][ T754] ? __pfx_worker_thread+0x10/0x10 [ 56.565229][ T754] ? __pfx_kthread+0x10/0x10 [ 56.569794][ T754] ret_from_fork+0x4b/0x80 [ 56.574190][ T754] ? __pfx_kthread+0x10/0x10 [ 56.578755][ T754] ret_from_fork_asm+0x1a/0x30 [ 56.583503][ T754] [ 56.586502][ T754] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 56.593764][ T754] CPU: 0 PID: 754 Comm: kworker/u8:5 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 56.603463][ T754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 56.613499][ T754] Workqueue: events_unbound bpf_map_free_deferred [ 56.619899][ T754] Call Trace: [ 56.623159][ T754] [ 56.626088][ T754] dump_stack_lvl+0x241/0x360 [ 56.630746][ T754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 56.635938][ T754] ? __pfx__printk+0x10/0x10 [ 56.640511][ T754] ? vscnprintf+0x5d/0x90 [ 56.644817][ T754] panic+0x349/0x860 [ 56.648695][ T754] ? __warn+0x172/0x4b0 [ 56.652831][ T754] ? __pfx_panic+0x10/0x10 [ 56.657229][ T754] ? ret_from_fork_asm+0x1a/0x30 [ 56.662148][ T754] __warn+0x31e/0x4b0 [ 56.666109][ T754] ? __local_bh_enable_ip+0x1be/0x200 [ 56.671461][ T754] report_bug+0x2b3/0x500 [ 56.675769][ T754] ? __local_bh_enable_ip+0x1be/0x200 [ 56.681117][ T754] handle_bug+0x3e/0x70 [ 56.685250][ T754] exc_invalid_op+0x1a/0x50 [ 56.689729][ T754] asm_exc_invalid_op+0x1a/0x20 [ 56.694557][ T754] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 56.700515][ T754] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 0c 41 86 8f 80 e1 07 80 c1 03 38 [ 56.720096][ T754] RSP: 0018:ffffc900030b74a0 EFLAGS: 00010046 [ 56.726142][ T754] RAX: 0000000000000000 RBX: 1ffff92000616e98 RCX: 0000000000000000 [ 56.734093][ T754] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895b48fa [ 56.742044][ T754] RBP: ffffc900030b7560 R08: ffff88801c7d91eb R09: 1ffff110038fb23d [ 56.749991][ T754] R10: dffffc0000000000 R11: ffffed10038fb23e R12: dffffc0000000000 [ 56.757939][ T754] R13: ffff88801f876900 R14: ffffc900030b74e0 R15: 0000000000000201 [ 56.765890][ T754] ? sock_map_delete_elem+0xca/0x140 [ 56.771155][ T754] ? sock_map_delete_elem+0xca/0x140 [ 56.776421][ T754] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 56.782113][ T754] ? sock_map_delete_elem+0xca/0x140 [ 56.787377][ T754] ? do_raw_spin_unlock+0x13c/0x8b0 [ 56.792553][ T754] ? __pfx___cant_migrate+0x10/0x10 [ 56.797725][ T754] ? sock_map_delete_elem+0x97/0x140 [ 56.803008][ T754] sock_map_delete_elem+0xca/0x140 [ 56.808121][ T754] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 56.813566][ T754] bpf_trace_run2+0x204/0x420 [ 56.818225][ T754] ? bpf_trace_run2+0x114/0x420 [ 56.823052][ T754] ? __pfx_bpf_trace_run2+0x10/0x10 [ 56.828257][ T754] kthread_insert_work+0x3f4/0x460 [ 56.833356][ T754] kthread_queue_work+0xff/0x180 [ 56.838278][ T754] synchronize_rcu_expedited+0x593/0x820 [ 56.843899][ T754] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 56.850035][ T754] ? __pfx_validate_chain+0x10/0x10 [ 56.855212][ T754] ? mark_lock+0x9a/0x350 [ 56.859520][ T754] ? __lock_acquire+0x1346/0x1fd0 [ 56.864543][ T754] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 56.869826][ T754] ? __pfx___might_resched+0x10/0x10 [ 56.875113][ T754] synchronize_rcu+0x136/0x3e0 [ 56.879859][ T754] ? __pfx_synchronize_rcu+0x10/0x10 [ 56.885128][ T754] ? __pfx_lock_acquire+0x10/0x10 [ 56.890135][ T754] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 56.896097][ T754] sock_map_free+0x29/0x3e0 [ 56.900585][ T754] bpf_map_free_deferred+0xe6/0x110 [ 56.905765][ T754] ? process_scheduled_works+0x91b/0x1770 [ 56.911461][ T754] process_scheduled_works+0xa00/0x1770 [ 56.916987][ T754] ? __pfx_process_scheduled_works+0x10/0x10 [ 56.922946][ T754] ? assign_work+0x364/0x3d0 [ 56.927514][ T754] worker_thread+0x86d/0xd70 [ 56.932085][ T754] ? __kthread_parkme+0x169/0x1d0 [ 56.937090][ T754] ? __pfx_worker_thread+0x10/0x10 [ 56.942180][ T754] kthread+0x2f0/0x390 [ 56.946229][ T754] ? __pfx_worker_thread+0x10/0x10 [ 56.951315][ T754] ? __pfx_kthread+0x10/0x10 [ 56.955881][ T754] ret_from_fork+0x4b/0x80 [ 56.960280][ T754] ? __pfx_kthread+0x10/0x10 [ 56.964848][ T754] ret_from_fork_asm+0x1a/0x30 [ 56.969595][ T754] [ 56.972833][ T754] Kernel Offset: disabled [ 56.977141][ T754] Rebooting in 86400 seconds..