BUG: MAX_STACK_TRACE_ENTRIES too low!
turning off the locking correctness validator.
CPU: 1 PID: 18733 Comm: syz-executor568 Not tainted 5.15.167-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x1e3/0x2d0 lib/dump_stack.c:106
save_trace+0x88a/0xab0 kernel/locking/lockdep.c:547
check_prev_add kernel/locking/lockdep.c:3114 [inline]
check_prevs_add kernel/locking/lockdep.c:3172 [inline]
validate_chain+0x28fa/0x5930 kernel/locking/lockdep.c:3788
__lock_acquire+0x1295/0x1ff0 kernel/locking/lockdep.c:5012
lock_acquire+0x1db/0x4f0 kernel/locking/lockdep.c:5623
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0xd1/0x120 kernel/locking/spinlock.c:162
htab_lock_bucket kernel/bpf/hashtab.c:183 [inline]
htab_map_delete_elem+0x1bd/0x560 kernel/bpf/hashtab.c:1358
bpf_prog_3ffd2c70e20892c6+0x3a/0xfe0
bpf_dispatcher_nop_func include/linux/bpf.h:790 [inline]
__bpf_prog_run include/linux/filter.h:628 [inline]
bpf_prog_run include/linux/filter.h:635 [inline]
__bpf_trace_run kernel/trace/bpf_trace.c:1880 [inline]
bpf_trace_run3+0x1d1/0x380 kernel/trace/bpf_trace.c:1918
__bpf_trace_kmem_cache_free+0x99/0xc0 include/trace/events/kmem.h:138
__traceiter_kmem_cache_free+0x2e/0x50 include/trace/events/kmem.h:138
trace_kmem_cache_free include/trace/events/kmem.h:138 [inline]
kmem_cache_free+0x1ce/0x1f0 mm/slub.c:3516
tcp_clean_rtx_queue net/ipv4/tcp_input.c:3368 [inline]
tcp_ack+0x2326/0x6ab0 net/ipv4/tcp_input.c:3925
tcp_rcv_established+0xf2d/0x1e20 net/ipv4/tcp_input.c:5938
tcp_v4_do_rcv+0x423/0x960 net/ipv4/tcp_ipv4.c:1728
tcp_v4_rcv+0x2740/0x2d80 net/ipv4/tcp_ipv4.c:2140
ip_protocol_deliver_rcu+0x381/0x730 net/ipv4/ip_input.c:204
ip_local_deliver_finish+0x1db/0x320 net/ipv4/ip_input.c:231
NF_HOOK+0x364/0x410 include/linux/netfilter.h:302
dst_input include/net/dst.h:453 [inline]
ip_sublist_rcv_finish net/ipv4/ip_input.c:577 [inline]
ip_list_rcv_finish net/ipv4/ip_input.c:628 [inline]
ip_sublist_rcv+0xb0f/0xe50 net/ipv4/ip_input.c:636
ip_list_rcv+0x422/0x470 net/ipv4/ip_input.c:671
__netif_receive_skb_list_ptype net/core/dev.c:5528 [inline]
__netif_receive_skb_list_core+0x6b1/0x890 net/core/dev.c:5576
__netif_receive_skb_list net/core/dev.c:5628 [inline]
netif_receive_skb_list_internal+0x9ed/0xdf0 net/core/dev.c:5719
gro_normal_list net/core/dev.c:5873 [inline]
napi_complete_done+0x352/0x820 net/core/dev.c:6611
virtqueue_napi_complete drivers/net/virtio_net.c:357 [inline]
virtnet_poll+0xbd1/0x1260 drivers/net/virtio_net.c:1592
__napi_poll+0xc7/0x440 net/core/dev.c:7035
napi_poll net/core/dev.c:7102 [inline]
net_rx_action+0x617/0xda0 net/core/dev.c:7192
handle_softirqs+0x3a7/0x930 kernel/softirq.c:558
__do_softirq kernel/softirq.c:592 [inline]
invoke_softirq kernel/softirq.c:432 [inline]
__irq_exit_rcu+0x157/0x240 kernel/softirq.c:641
irq_exit_rcu+0x5/0x20 kernel/softirq.c:653
common_interrupt+0xa4/0xc0 arch/x86/kernel/irq.c:240
asm_common_interrupt+0x22/0x40 arch/x86/include/asm/idtentry.h:629
RIP: 0010:__kasan_check_read+0x0/0x10 mm/kasan/shadow.c:31
Code: d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c7 d2 99 1b 8c eb 0a 48 c7 c7 0a 9a 1b 8c 4c 89 fe e8 b6 fc 68 08 31 db eb d7 cc cc <89> f6 48 8b 0c 24 31 d2 e9 63 ef ff ff 0f 1f 00 89 f6 48 8b 0c 24
RSP: 0000:ffffc90003017a08 EFLAGS: 00000293
RAX: ffffffff81a9980b RBX: ffffea0001cc2780 RCX: ffff888079db5940
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0001cc2780
RBP: 0000000000000000 R08: ffffffff81a997f3 R09: ffffffff81a996e0
R10: 0000000000000002 R11: ffff888079db5940 R12: ffffea0001cc2780
R13: ffffea0001cc2788 R14: 000000000000006a R15: 00fff00000002036
instrument_atomic_read include/linux/instrumented.h:71 [inline]
test_bit include/asm-generic/bitops/instrumented-non-atomic.h:134 [inline]
PageLocked include/linux/page-flags.h:342 [inline]
next_uptodate_page+0x19b/0x900 mm/filemap.c:3254
next_map_page mm/filemap.c:3296 [inline]
filemap_map_pages+0xfa1/0x15c0 mm/filemap.c:3352
do_fault_around mm/memory.c:4213 [inline]
do_read_fault mm/memory.c:4228 [inline]
do_fault mm/memory.c:4362 [inline]
handle_pte_fault mm/memory.c:4620 [inline]
__handle_mm_fault mm/memory.c:4755 [inline]
handle_mm_fault+0x341b/0x5960 mm/memory.c:4853
do_user_addr_fault arch/x86/mm/fault.c:1357 [inline]
handle_page_fault arch/x86/mm/fault.c:1445 [inline]
exc_page_fault+0x271/0x700 arch/x86/mm/fault.c:1501
asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:568
RIP: 0033:0x7f8b6fe47760
Code: 31 c0 eb cc 66 0f 1f 44 00 00 48 c7 c0 b8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb b4 e8 b9 9f fd ff 66 0f 1f 84 00 00 00 00 00 6d 00 00 00 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff
RSP: 002b:00007ffd208f3488 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8b6fe2120d
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00000000000f4240 R08: 0000000000000000 R09: 00007f8b6fe9ea80
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000003dfaa
R13: 00007ffd208f349c R14: 00007ffd208f34b0 R15: 0000000000000000
----------------
Code disassembly (best guess):
0: d8 5b 41 fcomps 0x41(%rbx)
3: 5c pop %rsp
4: 41 5d pop %r13
6: 41 5e pop %r14
8: 41 5f pop %r15
a: 5d pop %rbp
b: c3 ret
c: 48 c7 c7 d2 99 1b 8c mov $0xffffffff8c1b99d2,%rdi
13: eb 0a jmp 0x1f
15: 48 c7 c7 0a 9a 1b 8c mov $0xffffffff8c1b9a0a,%rdi
1c: 4c 89 fe mov %r15,%rsi
1f: e8 b6 fc 68 08 call 0x868fcda
24: 31 db xor %ebx,%ebx
26: eb d7 jmp 0xffffffff
28: cc int3
29: cc int3
* 2a: 89 f6 mov %esi,%esi <-- trapping instruction
2c: 48 8b 0c 24 mov (%rsp),%rcx
30: 31 d2 xor %edx,%edx
32: e9 63 ef ff ff jmp 0xffffef9a
37: 0f 1f 00 nopl (%rax)
3a: 89 f6 mov %esi,%esi
3c: 48 8b 0c 24 mov (%rsp),%rcx