------------[ cut here ]------------ DEBUG_LOCKS_WARN_ON(!test_bit(class_idx, lock_classes_in_use)) WARNING: CPU: 1 PID: 11803 at kernel/locking/lockdep.c:5112 __lock_acquire+0x15e9/0x2040 kernel/locking/lockdep.c:5112 Modules linked in: CPU: 1 UID: 0 PID: 11803 Comm: syz.5.744 Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:__lock_acquire+0x15e9/0x2040 kernel/locking/lockdep.c:5112 Code: 0f b6 04 08 84 c0 0f 85 d7 09 00 00 83 3d 5e b8 a8 0e 00 75 19 90 48 c7 c7 00 d4 0a 8c 48 c7 c6 80 fc 0a 8c e8 18 c8 e5 ff 90 <0f> 0b 90 90 90 e9 13 fe ff ff 90 0f 0b 90 e9 69 fd ff ff 90 e8 4e RSP: 0018:ffffc900039a7310 EFLAGS: 00010046 RAX: 0d82f7600c1d4e00 RBX: 000000001eb762d8 RCX: 0000000000040000 RDX: ffffc9000e585000 RSI: 000000000003ffff RDI: 0000000000040000 RBP: ffff88802f93e4e0 R08: ffffffff8155b2f2 R09: 1ffff1101712519a R10: dffffc0000000000 R11: ffffed101712519b R12: ffff88802f93da00 R13: ffff88802f93e4d8 R14: 0000000000000000 R15: ffff88802f93e500 FS: 00007f1a724ab6c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020022030 CR3: 000000006852c000 CR4: 0000000000350ef0 Call Trace: lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5759 _raw_spin_lock_nested+0x31/0x40 kernel/locking/spinlock.c:378 raw_spin_rq_lock_nested+0xb0/0x140 kernel/sched/core.c:568 raw_spin_rq_lock kernel/sched/sched.h:1415 [inline] rq_lock kernel/sched/sched.h:1714 [inline] __schedule+0x357/0x4a60 kernel/sched/core.c:6436 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6851 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:707 RIP: 0010:copy_user_generic arch/x86/include/asm/uaccess_64.h:110 [inline] RIP: 0010:raw_copy_from_user arch/x86/include/asm/uaccess_64.h:125 [inline] RIP: 0010:_inline_copy_from_user include/linux/uaccess.h:163 [inline] RIP: 0010:_copy_from_user+0x89/0xe0 lib/usercopy.c:18 Code: 01 f8 78 6c 4c 39 e0 72 67 e8 e3 0d e1 fc 0f ae e8 4c 89 f7 44 89 fe e8 65 5b 48 fd 0f 01 cb 4c 89 f9 4c 89 e6 4c 89 f7 f3 a4 <0f> 1f 00 48 89 cb 0f 01 ca 31 ff 48 89 de e8 94 12 e1 fc 48 85 db RSP: 0018:ffffc900039a7938 EFLAGS: 00040256 RAX: ffffffff84b27e01 RBX: 0000000020022338 RCX: 0000000000000000 RDX: 0000000000000001 RSI: 0000000020022338 RDI: ffffc900039a79f8 RBP: ffffc900039a7a70 R08: ffffc900039a79f7 R09: 1ffff92000734f3e R10: dffffc0000000000 R11: fffff52000734f3f R12: 0000000020022300 R13: dffffc0000000000 R14: ffffc900039a79c0 R15: 0000000000000038 copy_from_user include/linux/uaccess.h:196 [inline] copy_msghdr_from_user+0xae/0x680 net/socket.c:2527 recvmsg_copy_msghdr net/socket.c:2782 [inline] ___sys_recvmsg net/socket.c:2854 [inline] do_recvmmsg+0x40f/0xae0 net/socket.c:2952 __sys_recvmmsg net/socket.c:3031 [inline] __do_sys_recvmmsg net/socket.c:3054 [inline] __se_sys_recvmmsg net/socket.c:3047 [inline] __x64_sys_recvmmsg+0x199/0x250 net/socket.c:3047 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f1a71779eb9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f1a724ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b RAX: ffffffffffffffda RBX: 00007f1a71916058 RCX: 00007f1a71779eb9 RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 RBP: 00007f1a717e793e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000001 R14: 00007f1a71916058 R15: 00007ffce14a2de8 ---------------- Code disassembly (best guess): 0: 01 f8 add %edi,%eax 2: 78 6c js 0x70 4: 4c 39 e0 cmp %r12,%rax 7: 72 67 jb 0x70 9: e8 e3 0d e1 fc call 0xfce10df1 e: 0f ae e8 lfence 11: 4c 89 f7 mov %r14,%rdi 14: 44 89 fe mov %r15d,%esi 17: e8 65 5b 48 fd call 0xfd485b81 1c: 0f 01 cb stac 1f: 4c 89 f9 mov %r15,%rcx 22: 4c 89 e6 mov %r12,%rsi 25: 4c 89 f7 mov %r14,%rdi 28: f3 a4 rep movsb %ds:(%rsi),%es:(%rdi) * 2a: 0f 1f 00 nopl (%rax) <-- trapping instruction 2d: 48 89 cb mov %rcx,%rbx 30: 0f 01 ca clac 33: 31 ff xor %edi,%edi 35: 48 89 de mov %rbx,%rsi 38: e8 94 12 e1 fc call 0xfce112d1 3d: 48 85 db test %rbx,%rbx