BUG: MAX_STACK_TRACE_ENTRIES too low! turning off the locking correctness validator. CPU: 1 PID: 3526 Comm: syz-executor297 Not tainted 5.15.152-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1e3/0x2cb lib/dump_stack.c:106 save_trace+0x88a/0xab0 kernel/locking/lockdep.c:547 check_prev_add kernel/locking/lockdep.c:3114 [inline] check_prevs_add kernel/locking/lockdep.c:3172 [inline] validate_chain+0x28fa/0x5930 kernel/locking/lockdep.c:3788 __lock_acquire+0x1295/0x1ff0 kernel/locking/lockdep.c:5012 lock_acquire+0x1db/0x4f0 kernel/locking/lockdep.c:5623 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd1/0x120 kernel/locking/spinlock.c:162 htab_lock_bucket kernel/bpf/hashtab.c:183 [inline] htab_map_delete_elem+0x1bd/0x560 kernel/bpf/hashtab.c:1354 bpf_prog_d284ea97e99fac5b+0x3f/0xce4 bpf_dispatcher_nop_func include/linux/bpf.h:780 [inline] __bpf_prog_run include/linux/filter.h:625 [inline] bpf_prog_run include/linux/filter.h:632 [inline] __bpf_trace_run kernel/trace/bpf_trace.c:1880 [inline] bpf_trace_run2+0x19e/0x340 kernel/trace/bpf_trace.c:1917 __bpf_trace_kfree+0x6e/0x90 include/trace/events/kmem.h:118 __traceiter_kfree+0x26/0x40 include/trace/events/kmem.h:118 trace_kfree include/trace/events/kmem.h:118 [inline] kfree+0x22f/0x270 mm/slub.c:4549 skb_free_head net/core/skbuff.c:655 [inline] skb_release_data+0x73a/0x8a0 net/core/skbuff.c:677 skb_release_all net/core/skbuff.c:742 [inline] __kfree_skb+0x4c/0x60 net/core/skbuff.c:756 tcp_clean_rtx_queue net/ipv4/tcp_input.c:3342 [inline] tcp_ack+0x2326/0x6ab0 net/ipv4/tcp_input.c:3899 tcp_rcv_established+0xf2d/0x1e20 net/ipv4/tcp_input.c:5902 tcp_v4_do_rcv+0x423/0x960 net/ipv4/tcp_ipv4.c:1727 tcp_v4_rcv+0x2740/0x2d80 net/ipv4/tcp_ipv4.c:2130 ip_protocol_deliver_rcu+0x381/0x730 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x1db/0x320 net/ipv4/ip_input.c:231 NF_HOOK+0x364/0x410 include/linux/netfilter.h:302 dst_input include/net/dst.h:453 [inline] ip_sublist_rcv_finish net/ipv4/ip_input.c:577 [inline] ip_list_rcv_finish net/ipv4/ip_input.c:628 [inline] ip_sublist_rcv+0xb0f/0xe50 net/ipv4/ip_input.c:636 ip_list_rcv+0x422/0x470 net/ipv4/ip_input.c:671 __netif_receive_skb_list_ptype net/core/dev.c:5528 [inline] __netif_receive_skb_list_core+0x6b1/0x890 net/core/dev.c:5576 __netif_receive_skb_list net/core/dev.c:5628 [inline] netif_receive_skb_list_internal+0x9ed/0xdf0 net/core/dev.c:5719 gro_normal_list net/core/dev.c:5873 [inline] napi_complete_done+0x352/0x820 net/core/dev.c:6611 virtqueue_napi_complete drivers/net/virtio_net.c:357 [inline] virtnet_poll+0xbef/0x1270 drivers/net/virtio_net.c:1592 __napi_poll+0xc7/0x440 net/core/dev.c:7035 napi_poll net/core/dev.c:7102 [inline] net_rx_action+0x617/0xda0 net/core/dev.c:7189 __do_softirq+0x3b3/0x93a kernel/softirq.c:558 invoke_softirq kernel/softirq.c:432 [inline] __irq_exit_rcu+0x155/0x240 kernel/softirq.c:637 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649 common_interrupt+0xa4/0xc0 arch/x86/kernel/irq.c:240 asm_common_interrupt+0x22/0x40 arch/x86/include/asm/idtentry.h:629 RIP: 0010:unwind_get_return_address+0x37/0x80 arch/x86/kernel/unwind_orc.c:323 Code: 00 00 fc ff df 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 47 83 3b 00 74 3a 48 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 <74> 08 48 89 df e8 9f 8f 91 00 48 8b 3b e8 27 18 1c 00 85 c0 74 14 RSP: 0018:ffffc90002be73e0 EFLAGS: 00000246 RAX: 0000000000000000 RBX: ffffc90002be7448 RCX: 0000000080000000 RDX: dffffc0000000000 RSI: ffffc90002be7a90 RDI: ffffc90002be7400 RBP: ffffc90002be7490 R08: ffffc90002be7a90 R09: ffffc90002be7450 R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888024bb9dc0 R13: ffffffff816dd370 R14: dffffc0000000000 R15: 1ffff9200057ce89 arch_stack_walk+0xf3/0x140 arch/x86/kernel/stacktrace.c:26 stack_trace_save+0x113/0x1c0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:38 [inline] kasan_set_track mm/kasan/common.c:46 [inline] set_alloc_info mm/kasan/common.c:434 [inline] __kasan_slab_alloc+0x8e/0xc0 mm/kasan/common.c:467 kasan_slab_alloc include/linux/kasan.h:254 [inline] slab_post_alloc_hook+0x53/0x380 mm/slab.h:519 slab_alloc_node mm/slub.c:3220 [inline] slab_alloc mm/slub.c:3228 [inline] kmem_cache_alloc+0xf3/0x280 mm/slub.c:3233 anon_vma_chain_alloc mm/rmap.c:138 [inline] anon_vma_clone+0x9d/0x4e0 mm/rmap.c:284 anon_vma_fork+0x8c/0x580 mm/rmap.c:347 dup_mmap kernel/fork.c:573 [inline] dup_mm kernel/fork.c:1465 [inline] copy_mm+0x9f2/0x1370 kernel/fork.c:1517 copy_process+0x1816/0x3ef0 kernel/fork.c:2206 kernel_clone+0x210/0x960 kernel/fork.c:2604 __do_sys_clone kernel/fork.c:2721 [inline] __se_sys_clone kernel/fork.c:2705 [inline] __x64_sys_clone+0x23f/0x290 kernel/fork.c:2705 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x61/0xcb RIP: 0033:0x7fcd0fc9fca3 Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 RSP: 002b:00007ffe38949548 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcd0fc9fca3 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000010 R10: 000055555685d650 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffe38949720 R14: 000000000008a2b0 R15: 00007ffe389496fc ---------------- Code disassembly (best guess), 4 bytes skipped: 0: df 48 89 fisttps -0x77(%rax) 3: f8 clc 4: 48 c1 e8 03 shr $0x3,%rax 8: 42 0f b6 04 30 movzbl (%rax,%r14,1),%eax d: 84 c0 test %al,%al f: 75 47 jne 0x58 11: 83 3b 00 cmpl $0x0,(%rbx) 14: 74 3a je 0x50 16: 48 83 c3 48 add $0x48,%rbx 1a: 49 89 df mov %rbx,%r15 1d: 49 c1 ef 03 shr $0x3,%r15 21: 43 80 3c 37 00 cmpb $0x0,(%r15,%r14,1) * 26: 74 08 je 0x30 <-- trapping instruction 28: 48 89 df mov %rbx,%rdi 2b: e8 9f 8f 91 00 call 0x918fcf 30: 48 8b 3b mov (%rbx),%rdi 33: e8 27 18 1c 00 call 0x1c185f 38: 85 c0 test %eax,%eax 3a: 74 14 je 0x50