FAULT_INJECTION: forcing a failure.
name fail_usercopy, interval 1, probability 0, space 0, times 0
======================================================
WARNING: possible circular locking dependency detected
syzkaller #0 Not tainted
------------------------------------------------------
syz.2.239/6821 is trying to acquire lock:
ffffffff8e4ce840 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 kernel/printk/printk.c:1924

but task is already holding lock:
ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:644 [inline]
ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 kernel/sched/core.c:629

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #5 (&rq->__lock){-.-.}-{2:2}:
       _raw_spin_lock_nested+0x31/0x40 kernel/locking/spinlock.c:378
       raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:636
       raw_spin_rq_lock kernel/sched/sched.h:1519 [inline]
       task_rq_lock+0xcf/0x490 kernel/sched/core.c:736
       cgroup_move_task+0x81/0x2a0 kernel/sched/psi.c:1170
       css_set_move_task+0x288/0x5f0 kernel/cgroup/cgroup.c:918
       cgroup_post_fork+0x201/0x9e0 kernel/cgroup/cgroup.c:6759
       copy_process+0x5cfa/0x7690 kernel/fork.c:2419
       kernel_clone+0xfc/0x930 kernel/fork.c:2605
       user_mode_thread+0xc7/0x110 kernel/fork.c:2683
       rest_init+0x23/0x2b0 init/main.c:709
       start_kernel+0x3ee/0x4d0 init/main.c:1097
       x86_64_start_reservations+0x18/0x30 arch/x86/kernel/head64.c:307
       x86_64_start_kernel+0x130/0x190 arch/x86/kernel/head64.c:288
       common_startup_64+0x13e/0x148

-> #4 (&p->pi_lock){-.-.}-{2:2}:
       __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
       _raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:162
       class_raw_spinlock_irqsave_constructor include/linux/spinlock.h:557 [inline]
       try_to_wake_up+0xb7/0x1870 kernel/sched/core.c:4216
       create_worker+0x339/0x7e0 kernel/workqueue.c:2832
       workqueue_init+0x4e5/0xbd0 kernel/workqueue.c:7918
       kernel_init_freeable+0x32f/0x910 init/main.c:1564
       kernel_init+0x1c/0x2b0 init/main.c:1469
       ret_from_fork+0x5d7/0x6f0 arch/x86/kernel/process.c:148
       ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

-> #3 (&pool->lock){-.-.}-{2:2}:
       __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline]
       _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:154
       __queue_work+0x26b/0x1160 kernel/workqueue.c:2299
       queue_work_on+0x15f/0x1f0 kernel/workqueue.c:2390
       queue_work include/linux/workqueue.h:669 [inline]
       rpm_suspend+0xeba/0x11d0 drivers/base/power/runtime.c:685
       rpm_idle+0x5b4/0x730 drivers/base/power/runtime.c:559
       __pm_runtime_idle+0xba/0x1a0 drivers/base/power/runtime.c:1124
       pm_runtime_put include/linux/pm_runtime.h:555 [inline]
       __device_attach+0x37e/0x4b0 drivers/base/dd.c:1049
       bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:537
       device_add+0x1148/0x1aa0 drivers/base/core.c:3689
       serial_base_port_add+0x362/0x4c0 drivers/tty/serial/serial_base_bus.c:183
       serial_core_port_device_add drivers/tty/serial/serial_core.c:3309 [inline]
       serial_core_register_port+0x13c/0x25b0 drivers/tty/serial/serial_core.c:3348
       serial8250_register_8250_port+0x1599/0x23c0 drivers/tty/serial/8250/8250_core.c:829
       serial_pnp_probe+0x431/0x910 drivers/tty/serial/8250/8250_pnp.c:480
       pnp_device_probe+0x2a8/0x4d0 drivers/pnp/driver.c:111
       call_driver_probe drivers/base/dd.c:581 [inline]
       really_probe+0x241/0xa90 drivers/base/dd.c:659
       __driver_probe_device+0x1de/0x440 drivers/base/dd.c:801
       driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:831
       __driver_attach+0x283/0x580 drivers/base/dd.c:1217
       bus_for_each_dev+0x13e/0x1d0 drivers/base/bus.c:370
       bus_add_driver+0x2e9/0x690 drivers/base/bus.c:678
       driver_register+0x15c/0x4b0 drivers/base/driver.c:249
       serial8250_init+0xc9/0x1e0 drivers/tty/serial/8250/8250_platform.c:315
       do_one_initcall+0x120/0x6e0 init/main.c:1269
       do_initcall_level init/main.c:1331 [inline]
       do_initcalls init/main.c:1347 [inline]
       do_basic_setup init/main.c:1366 [inline]
       kernel_init_freeable+0x5c2/0x910 init/main.c:1579
       kernel_init+0x1c/0x2b0 init/main.c:1469
       ret_from_fork+0x5d7/0x6f0 arch/x86/kernel/process.c:148
       ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

-> #2 (&dev->power.lock){-.-.}-{3:3}:
       __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
       _raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:162
       __pm_runtime_resume+0xa9/0x170 drivers/base/power/runtime.c:1191
       pm_runtime_get include/linux/pm_runtime.h:492 [inline]
       __uart_start+0x1b0/0x500 drivers/tty/serial/serial_core.c:149
       uart_write+0x218/0xb30 drivers/tty/serial/serial_core.c:636
       process_output_block drivers/tty/n_tty.c:561 [inline]
       n_tty_write+0x41f/0x11e0 drivers/tty/n_tty.c:2377
       iterate_tty_write drivers/tty/tty_io.c:1006 [inline]
       file_tty_write.constprop.0+0x504/0x9b0 drivers/tty/tty_io.c:1081
       tty_write drivers/tty/tty_io.c:1102 [inline]
       redirected_tty_write drivers/tty/tty_io.c:1125 [inline]
       redirected_tty_write+0xd4/0x150 drivers/tty/tty_io.c:1105
       new_sync_write fs/read_write.c:593 [inline]
       vfs_write+0x7d3/0x11d0 fs/read_write.c:686
       ksys_write+0x12a/0x250 fs/read_write.c:738
       do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
       do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94
       entry_SYSCALL_64_after_hwframe+0x77/0x7f

-> #1 (&port_lock_key){-.-.}-{3:3}:
       __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
       _raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:162
       uart_port_lock_irqsave include/linux/serial_core.h:717 [inline]
       serial8250_console_write+0x181/0x1890 drivers/tty/serial/8250/8250_port.c:3355
       console_emit_next_record kernel/printk/printk.c:3138 [inline]
       console_flush_all+0x801/0xc60 kernel/printk/printk.c:3226
       __console_flush_and_unlock kernel/printk/printk.c:3285 [inline]
       console_unlock+0xd8/0x210 kernel/printk/printk.c:3325
       vprintk_emit+0x418/0x6d0 kernel/printk/printk.c:2450
       _printk+0xc7/0x100 kernel/printk/printk.c:2475
       register_console+0xc2d/0x11b0 kernel/printk/printk.c:4126
       univ8250_console_init+0x5f/0x90 drivers/tty/serial/8250/8250_core.c:516
       console_init+0x14f/0x680 kernel/printk/printk.c:4325
       start_kernel+0x29f/0x4d0 init/main.c:1035
       x86_64_start_reservations+0x18/0x30 arch/x86/kernel/head64.c:307
       x86_64_start_kernel+0x130/0x190 arch/x86/kernel/head64.c:288
       common_startup_64+0x13e/0x148

-> #0 (console_owner){-.-.}-{0:0}:
       check_prev_add kernel/locking/lockdep.c:3165 [inline]
       check_prevs_add kernel/locking/lockdep.c:3284 [inline]
       validate_chain kernel/locking/lockdep.c:3908 [inline]
       __lock_acquire+0x12a6/0x1ce0 kernel/locking/lockdep.c:5237
       lock_acquire kernel/locking/lockdep.c:5868 [inline]
       lock_acquire+0x179/0x350 kernel/locking/lockdep.c:5825
       console_lock_spinning_enable+0xb0/0xd0 kernel/printk/printk.c:1924
       console_emit_next_record kernel/printk/printk.c:3132 [inline]
       console_flush_all+0x7aa/0xc60 kernel/printk/printk.c:3226
       __console_flush_and_unlock kernel/printk/printk.c:3285 [inline]
       console_unlock+0xd8/0x210 kernel/printk/printk.c:3325
       vprintk_emit+0x418/0x6d0 kernel/printk/printk.c:2450
       _printk+0xc7/0x100 kernel/printk/printk.c:2475
       fail_dump lib/fault-inject.c:66 [inline]
       should_fail_ex+0x4e7/0x640 lib/fault-inject.c:174
       strncpy_from_user+0x3b/0x2e0 lib/strncpy_from_user.c:118
       strncpy_from_user_nofault+0x7f/0x180 mm/maccess.c:192
       bpf_trace_copy_string kernel/bpf/helpers.c:761 [inline]
       bpf_bprintf_prepare+0xe90/0x13f0 kernel/bpf/helpers.c:976
       ____bpf_trace_printk kernel/trace/bpf_trace.c:373 [inline]
       bpf_trace_printk+0xda/0x190 kernel/trace/bpf_trace.c:363
       bpf_prog_7c77c7e0f6645ad8+0x3e/0x44
       bpf_dispatcher_nop_func include/linux/bpf.h:1332 [inline]
       __bpf_prog_run include/linux/filter.h:718 [inline]
       bpf_prog_run include/linux/filter.h:725 [inline]
       __bpf_trace_run kernel/trace/bpf_trace.c:2257 [inline]
       bpf_trace_run2+0x236/0x590 kernel/trace/bpf_trace.c:2298
       __bpf_trace_contention_begin+0xc9/0x110 include/trace/events/lock.h:95
       __preempt_count_dec_and_test arch/x86/include/asm/preempt.h:95 [inline]
       class_preempt_notrace_destructor include/linux/preempt.h:473 [inline]
       __do_trace_contention_begin include/trace/events/lock.h:95 [inline]
       trace_contention_begin.constprop.0+0xde/0x160 include/trace/events/lock.h:95
       __pv_queued_spin_lock_slowpath+0x109/0xcf0 kernel/locking/qspinlock.c:219
       pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:557 [inline]
       queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:51 [inline]
       queued_spin_lock include/asm-generic/qspinlock.h:114 [inline]
       do_raw_spin_lock+0x20e/0x2b0 kernel/locking/spinlock_debug.c:116
       raw_spin_rq_lock_nested kernel/sched/core.c:644 [inline]
       raw_spin_rq_lock_nested+0x7e/0x130 kernel/sched/core.c:629
       raw_spin_rq_lock kernel/sched/sched.h:1519 [inline]
       rq_lock kernel/sched/sched.h:1841 [inline]
       __schedule+0x307/0x5de0 kernel/sched/core.c:6865
       preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7288
       irqentry_exit+0x36/0x90 kernel/entry/common.c:197
       asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:707
       variable_test_bit arch/x86/include/asm/bitops.h:227 [inline]
       arch_test_bit arch/x86/include/asm/bitops.h:239 [inline]
       _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:142 [inline]
       cpumask_test_cpu include/linux/cpumask.h:646 [inline]
       cpu_online include/linux/cpumask.h:1205 [inline]
       trace_lock_release include/trace/events/lock.h:69 [inline]
       lock_release+0x45/0x2f0 kernel/locking/lockdep.c:5879
       rcu_lock_release include/linux/rcupdate.h:341 [inline]
       rcu_read_unlock include/linux/rcupdate.h:871 [inline]
       get_task_pid+0x14e/0x390 kernel/pid.c:460
       proc_pid_make_inode+0xbb/0x160 fs/proc/base.c:1967
       proc_pid_make_base_inode.constprop.0+0x25/0x180 fs/proc/base.c:2004
       proc_task_instantiate+0x51/0x1e0 fs/proc/base.c:3793
       proc_task_lookup+0x4c4/0x5c0 fs/proc/base.c:3836
       __lookup_slow+0x251/0x460 fs/namei.c:1808
       lookup_slow fs/namei.c:1825 [inline]
       walk_component+0x353/0x5b0 fs/namei.c:2129
       link_path_walk+0x627/0xe20 fs/namei.c:2497
       path_openat+0x1b0/0x2cb0 fs/namei.c:4042
       do_filp_open+0x20b/0x470 fs/namei.c:4073
       do_sys_openat2+0x11b/0x1d0 fs/open.c:1435
       do_sys_open fs/open.c:1450 [inline]
       __do_sys_openat fs/open.c:1466 [inline]
       __se_sys_openat fs/open.c:1461 [inline]
       __x64_sys_openat+0x174/0x210 fs/open.c:1461
       do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
       do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94
       entry_SYSCALL_64_after_hwframe+0x77/0x7f

other info that might help us debug this:

Chain exists of:
  console_owner --> &p->pi_lock --> &rq->__lock

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(&rq->__lock);
                               lock(&p->pi_lock);
                               lock(&rq->__lock);
  lock(console_owner);

 *** DEADLOCK ***

6 locks held by syz.2.239/6821:
 #0: ffff888075d2d180 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:884 [inline]
 #0: ffff888075d2d180 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: lookup_slow fs/namei.c:1824 [inline]
 #0: ffff888075d2d180 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: walk_component+0x345/0x5b0 fs/namei.c:2129
 #1: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #1: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
 #1: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: get_task_pid+0x29/0x390 kernel/pid.c:458
 #2: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:644 [inline]
 #2: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 kernel/sched/core.c:629
 #3: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #3: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
 #3: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: __bpf_trace_run kernel/trace/bpf_trace.c:2256 [inline]
 #3: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1bc/0x590 kernel/trace/bpf_trace.c:2298
 #4: ffffffff8e5aec80 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 kernel/printk/printk.c:2475
 #5: ffffffff8e5aecf0 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:336 [inline]
 #5: ffffffff8e5aecf0 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:319 [inline]
 #5: ffffffff8e5aecf0 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:288 [inline]
 #5: ffffffff8e5aecf0 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 kernel/printk/printk.c:3203

stack backtrace:
CPU: 0 UID: 0 PID: 6821 Comm: syz.2.239 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_circular_bug+0x275/0x350 kernel/locking/lockdep.c:2043
 check_noncircular+0x14c/0x170 kernel/locking/lockdep.c:2175
 check_prev_add kernel/locking/lockdep.c:3165 [inline]
 check_prevs_add kernel/locking/lockdep.c:3284 [inline]
 validate_chain kernel/locking/lockdep.c:3908 [inline]
 __lock_acquire+0x12a6/0x1ce0 kernel/locking/lockdep.c:5237
 lock_acquire kernel/locking/lockdep.c:5868 [inline]
 lock_acquire+0x179/0x350 kernel/locking/lockdep.c:5825
 console_lock_spinning_enable+0xb0/0xd0 kernel/printk/printk.c:1924
 console_emit_next_record kernel/printk/printk.c:3132 [inline]
 console_flush_all+0x7aa/0xc60 kernel/printk/printk.c:3226
 __console_flush_and_unlock kernel/printk/printk.c:3285 [inline]
 console_unlock+0xd8/0x210 kernel/printk/printk.c:3325
 vprintk_emit+0x418/0x6d0 kernel/printk/printk.c:2450
 _printk+0xc7/0x100 kernel/printk/printk.c:2475
 fail_dump lib/fault-inject.c:66 [inline]
 should_fail_ex+0x4e7/0x640 lib/fault-inject.c:174
 strncpy_from_user+0x3b/0x2e0 lib/strncpy_from_user.c:118
 strncpy_from_user_nofault+0x7f/0x180 mm/maccess.c:192
 bpf_trace_copy_string kernel/bpf/helpers.c:761 [inline]
 bpf_bprintf_prepare+0xe90/0x13f0 kernel/bpf/helpers.c:976
 ____bpf_trace_printk kernel/trace/bpf_trace.c:373 [inline]
 bpf_trace_printk+0xda/0x190 kernel/trace/bpf_trace.c:363
 bpf_prog_7c77c7e0f6645ad8+0x3e/0x44
 bpf_dispatcher_nop_func include/linux/bpf.h:1332 [inline]
 __bpf_prog_run include/linux/filter.h:718 [inline]
 bpf_prog_run include/linux/filter.h:725 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:2257 [inline]
 bpf_trace_run2+0x236/0x590 kernel/trace/bpf_trace.c:2298
 __bpf_trace_contention_begin+0xc9/0x110 include/trace/events/lock.h:95
 __preempt_count_dec_and_test arch/x86/include/asm/preempt.h:95 [inline]
 class_preempt_notrace_destructor include/linux/preempt.h:473 [inline]
 __do_trace_contention_begin include/trace/events/lock.h:95 [inline]
 trace_contention_begin.constprop.0+0xde/0x160 include/trace/events/lock.h:95
 __pv_queued_spin_lock_slowpath+0x109/0xcf0 kernel/locking/qspinlock.c:219
 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:557 [inline]
 queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:51 [inline]
 queued_spin_lock include/asm-generic/qspinlock.h:114 [inline]
 do_raw_spin_lock+0x20e/0x2b0 kernel/locking/spinlock_debug.c:116
 raw_spin_rq_lock_nested kernel/sched/core.c:644 [inline]
 raw_spin_rq_lock_nested+0x7e/0x130 kernel/sched/core.c:629
 raw_spin_rq_lock kernel/sched/sched.h:1519 [inline]
 rq_lock kernel/sched/sched.h:1841 [inline]
 __schedule+0x307/0x5de0 kernel/sched/core.c:6865
 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7288
 irqentry_exit+0x36/0x90 kernel/entry/common.c:197
 asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:707
RIP: 0010:trace_lock_release include/trace/events/lock.h:69 [inline]
RIP: 0010:lock_release+0x45/0x2f0 kernel/locking/lockdep.c:5879
Code: b9 8f 3e 12 48 89 44 24 10 31 c0 0f 1f 44 00 00 65 8b 05 d2 8f 3e 12 83 f8 07 0f 87 38 02 00 00 89 c0 48 0f a3 05 1b 83 13 0f <0f> 82 b1 01 00 00 8b 3d d3 b4 13 0f 85 ff 0f 84 25 01 00 00 65 8b
RSP: 0018:ffffc900102af770 EFLAGS: 00000297
RAX: 0000000000000000 RBX: ffffffff8e5c1220 RCX: ffffffff81843fe1
RDX: ffff8880787c8000 RSI: ffffffff81843ee9 RDI: ffffffff8e5c1220
RBP: ffff88802a6d2f00 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff81843ee9
R13: fffffffffffffffe R14: ffff88803035c8a8 R15: ffff8880261021c0
 rcu_lock_release include/linux/rcupdate.h:341 [inline]
 rcu_read_unlock include/linux/rcupdate.h:871 [inline]
 get_task_pid+0x14e/0x390 kernel/pid.c:460
 proc_pid_make_inode+0xbb/0x160 fs/proc/base.c:1967
 proc_pid_make_base_inode.constprop.0+0x25/0x180 fs/proc/base.c:2004
 proc_task_instantiate+0x51/0x1e0 fs/proc/base.c:3793
 proc_task_lookup+0x4c4/0x5c0 fs/proc/base.c:3836
 __lookup_slow+0x251/0x460 fs/namei.c:1808
 lookup_slow fs/namei.c:1825 [inline]
 walk_component+0x353/0x5b0 fs/namei.c:2129
 link_path_walk+0x627/0xe20 fs/namei.c:2497
 path_openat+0x1b0/0x2cb0 fs/namei.c:4042
 do_filp_open+0x20b/0x470 fs/namei.c:4073
 do_sys_openat2+0x11b/0x1d0 fs/open.c:1435
 do_sys_open fs/open.c:1450 [inline]
 __do_sys_openat fs/open.c:1466 [inline]
 __se_sys_openat fs/open.c:1461 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1461
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f847ef8d550
Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
RSP: 002b:00007f847fe0df10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f847ef8d550
RDX: 0000000000000002 RSI: 00007f847fe0dfa0 RDI: 00000000ffffff9c
RBP: 00007f847fe0dfa0 R08: 0000000000000000 R09: 00007f847fe0dcd5
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
R13: 00007f847f1b6218 R14: 00007f847f1b6180 R15: 00007ffdfc8b7c78
 </TASK>
CPU: 0 UID: 0 PID: 6821 Comm: syz.2.239 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 fail_dump lib/fault-inject.c:73 [inline]
 should_fail_ex+0x512/0x640 lib/fault-inject.c:174
 strncpy_from_user+0x3b/0x2e0 lib/strncpy_from_user.c:118
 strncpy_from_user_nofault+0x7f/0x180 mm/maccess.c:192
 bpf_trace_copy_string kernel/bpf/helpers.c:761 [inline]
 bpf_bprintf_prepare+0xe90/0x13f0 kernel/bpf/helpers.c:976
 ____bpf_trace_printk kernel/trace/bpf_trace.c:373 [inline]
 bpf_trace_printk+0xda/0x190 kernel/trace/bpf_trace.c:363
 bpf_prog_7c77c7e0f6645ad8+0x3e/0x44
 bpf_dispatcher_nop_func include/linux/bpf.h:1332 [inline]
 __bpf_prog_run include/linux/filter.h:718 [inline]
 bpf_prog_run include/linux/filter.h:725 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:2257 [inline]
 bpf_trace_run2+0x236/0x590 kernel/trace/bpf_trace.c:2298
 __bpf_trace_contention_begin+0xc9/0x110 include/trace/events/lock.h:95
 __preempt_count_dec_and_test arch/x86/include/asm/preempt.h:95 [inline]
 class_preempt_notrace_destructor include/linux/preempt.h:473 [inline]
 __do_trace_contention_begin include/trace/events/lock.h:95 [inline]
 trace_contention_begin.constprop.0+0xde/0x160 include/trace/events/lock.h:95
 __pv_queued_spin_lock_slowpath+0x109/0xcf0 kernel/locking/qspinlock.c:219
 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:557 [inline]
 queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:51 [inline]
 queued_spin_lock include/asm-generic/qspinlock.h:114 [inline]
 do_raw_spin_lock+0x20e/0x2b0 kernel/locking/spinlock_debug.c:116
 raw_spin_rq_lock_nested kernel/sched/core.c:644 [inline]
 raw_spin_rq_lock_nested+0x7e/0x130 kernel/sched/core.c:629
 raw_spin_rq_lock kernel/sched/sched.h:1519 [inline]
 rq_lock kernel/sched/sched.h:1841 [inline]
 __schedule+0x307/0x5de0 kernel/sched/core.c:6865
 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7288
 irqentry_exit+0x36/0x90 kernel/entry/common.c:197
 asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:707
RIP: 0010:trace_lock_release include/trace/events/lock.h:69 [inline]
RIP: 0010:lock_release+0x45/0x2f0 kernel/locking/lockdep.c:5879
Code: b9 8f 3e 12 48 89 44 24 10 31 c0 0f 1f 44 00 00 65 8b 05 d2 8f 3e 12 83 f8 07 0f 87 38 02 00 00 89 c0 48 0f a3 05 1b 83 13 0f <0f> 82 b1 01 00 00 8b 3d d3 b4 13 0f 85 ff 0f 84 25 01 00 00 65 8b
RSP: 0018:ffffc900102af770 EFLAGS: 00000297
RAX: 0000000000000000 RBX: ffffffff8e5c1220 RCX: ffffffff81843fe1
RDX: ffff8880787c8000 RSI: ffffffff81843ee9 RDI: ffffffff8e5c1220
RBP: ffff88802a6d2f00 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff81843ee9
R13: fffffffffffffffe R14: ffff88803035c8a8 R15: ffff8880261021c0
 rcu_lock_release include/linux/rcupdate.h:341 [inline]
 rcu_read_unlock include/linux/rcupdate.h:871 [inline]
 get_task_pid+0x14e/0x390 kernel/pid.c:460
 proc_pid_make_inode+0xbb/0x160 fs/proc/base.c:1967
 proc_pid_make_base_inode.constprop.0+0x25/0x180 fs/proc/base.c:2004
 proc_task_instantiate+0x51/0x1e0 fs/proc/base.c:3793
 proc_task_lookup+0x4c4/0x5c0 fs/proc/base.c:3836
 __lookup_slow+0x251/0x460 fs/namei.c:1808
 lookup_slow fs/namei.c:1825 [inline]
 walk_component+0x353/0x5b0 fs/namei.c:2129
 link_path_walk+0x627/0xe20 fs/namei.c:2497
 path_openat+0x1b0/0x2cb0 fs/namei.c:4042
 do_filp_open+0x20b/0x470 fs/namei.c:4073
 do_sys_openat2+0x11b/0x1d0 fs/open.c:1435
 do_sys_open fs/open.c:1450 [inline]
 __do_sys_openat fs/open.c:1466 [inline]
 __se_sys_openat fs/open.c:1461 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1461
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f847ef8d550
Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
RSP: 002b:00007f847fe0df10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f847ef8d550
RDX: 0000000000000002 RSI: 00007f847fe0dfa0 RDI: 00000000ffffff9c
RBP: 00007f847fe0dfa0 R08: 0000000000000000 R09: 00007f847fe0dcd5
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
R13: 00007f847f1b6218 R14: 00007f847f1b6180 R15: 00007ffdfc8b7c78
 </TASK>
----------------
Code disassembly (best guess):
   0:	b9 8f 3e 12 48       	mov    $0x48123e8f,%ecx
   5:	89 44 24 10          	mov    %eax,0x10(%rsp)
   9:	31 c0                	xor    %eax,%eax
   b:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  10:	65 8b 05 d2 8f 3e 12 	mov    %gs:0x123e8fd2(%rip),%eax        # 0x123e8fe9
  17:	83 f8 07             	cmp    $0x7,%eax
  1a:	0f 87 38 02 00 00    	ja     0x258
  20:	89 c0                	mov    %eax,%eax
  22:	48 0f a3 05 1b 83 13 	bt     %rax,0xf13831b(%rip)        # 0xf138345
  29:	0f
* 2a:	0f 82 b1 01 00 00    	jb     0x1e1 <-- trapping instruction
  30:	8b 3d d3 b4 13 0f    	mov    0xf13b4d3(%rip),%edi        # 0xf13b509
  36:	85 ff                	test   %edi,%edi
  38:	0f 84 25 01 00 00    	je     0x163
  3e:	65                   	gs
  3f:	8b                   	.byte 0x8b