BUG: MAX_STACK_TRACE_ENTRIES too low! turning off the locking correctness validator. CPU: 1 UID: 0 PID: 5946 Comm: syz-executor212 Not tainted 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 save_trace+0x78f/0xb60 kernel/locking/lockdep.c:581 check_prev_add kernel/locking/lockdep.c:3224 [inline] check_prevs_add kernel/locking/lockdep.c:3282 [inline] validate_chain kernel/locking/lockdep.c:3906 [inline] __lock_acquire+0x312a/0x3c40 kernel/locking/lockdep.c:5228 lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5851 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:154 htab_lock_bucket kernel/bpf/hashtab.c:167 [inline] htab_lru_map_delete_elem+0x1c8/0x790 kernel/bpf/hashtab.c:1483 bpf_prog_6f5f05285f674219+0x43/0x4c bpf_dispatcher_nop_func include/linux/bpf.h:1290 [inline] __bpf_prog_run include/linux/filter.h:701 [inline] bpf_prog_run include/linux/filter.h:708 [inline] __bpf_trace_run kernel/trace/bpf_trace.c:2371 [inline] bpf_trace_run2+0x231/0x590 kernel/trace/bpf_trace.c:2412 __traceiter_kfree+0x2d/0x50 include/trace/events/kmem.h:94 __do_trace_kfree include/trace/events/kmem.h:94 [inline] trace_kfree include/trace/events/kmem.h:94 [inline] kfree+0x244/0x4d0 mm/slub.c:4744 security_task_free+0x9d/0x1a0 security/security.c:3181 __put_task_struct+0x120/0x3b0 kernel/fork.c:989 put_task_struct include/linux/sched/task.h:145 [inline] put_task_struct include/linux/sched/task.h:132 [inline] delayed_put_task_struct+0x119/0x2f0 kernel/exit.c:227 rcu_do_batch kernel/rcu/tree.c:2546 [inline] rcu_core+0x79d/0x14d0 kernel/rcu/tree.c:2802 handle_softirqs+0x213/0x8f0 kernel/softirq.c:561 __do_softirq kernel/softirq.c:595 [inline] invoke_softirq kernel/softirq.c:435 [inline] __irq_exit_rcu+0x109/0x170 kernel/softirq.c:662 irq_exit_rcu+0x9/0x30 kernel/softirq.c:678 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:194 Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 da 3c f6 48 89 df e8 0e 5a 3d f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 2f 2e f6 65 8b 05 a6 13 aa 74 85 c0 74 16 5b RSP: 0018:ffffc9000395fc68 EFLAGS: 00000246 RAX: 0000000000000006 RBX: ffff888029276c20 RCX: 1ffffffff20c4231 RDX: 0000000000000000 RSI: ffffffff8b6ced20 RDI: ffffffff8bd35680 RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000001 R10: ffffffff90625517 R11: 0000000000000000 R12: dffffc0000000000 R13: 0000000000000000 R14: ffffc9000395fd10 R15: 0000000000000004 do_wait+0x175/0x570 kernel/exit.c:1687 kernel_wait4+0x16c/0x280 kernel/exit.c:1850 __do_sys_wait4+0x15f/0x170 kernel/exit.c:1878 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7fbb6aadf3 Code: fe ff e9 41 ff ff ff 31 c9 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 80 3d 91 a2 07 00 00 49 89 ca 74 14 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5d c3 0f 1f 40 00 48 83 ec 28 89 54 24 14 48 RSP: 002b:00007ffc5bd76538 EFLAGS: 00000202 ORIG_RAX: 000000000000003d RAX: ffffffffffffffda RBX: 000000000004ab95 RCX: 00007f7fbb6aadf3 RDX: 0000000040000001 RSI: 00007ffc5bd7655c RDI: 00000000ffffffff RBP: 0000000000003f6c R08: 000000000000d34c R09: 00007f7fbb66c000 R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc5bd7655c R13: 00007ffc5bd76590 R14: 00007ffc5bd76570 R15: 0000000000002953 ---------------- Code disassembly (best guess): 0: f5 cmc 1: 53 push %rbx 2: 48 8b 74 24 10 mov 0x10(%rsp),%rsi 7: 48 89 fb mov %rdi,%rbx a: 48 83 c7 18 add $0x18,%rdi e: e8 b6 da 3c f6 call 0xf63cdac9 13: 48 89 df mov %rbx,%rdi 16: e8 0e 5a 3d f6 call 0xf63d5a29 1b: f7 c5 00 02 00 00 test $0x200,%ebp 21: 75 23 jne 0x46 23: 9c pushf 24: 58 pop %rax 25: f6 c4 02 test $0x2,%ah 28: 75 37 jne 0x61 * 2a: bf 01 00 00 00 mov $0x1,%edi <-- trapping instruction 2f: e8 85 2f 2e f6 call 0xf62e2fb9 34: 65 8b 05 a6 13 aa 74 mov %gs:0x74aa13a6(%rip),%eax # 0x74aa13e1 3b: 85 c0 test %eax,%eax 3d: 74 16 je 0x55 3f: 5b pop %rbx