------------[ cut here ]------------ DEBUG_LOCKS_WARN_ON(1) WARNING: CPU: 1 PID: 6791 at kernel/locking/lockdep.c:232 hlock_class kernel/locking/lockdep.c:232 [inline] WARNING: CPU: 1 PID: 6791 at kernel/locking/lockdep.c:232 check_wait_context kernel/locking/lockdep.c:4850 [inline] WARNING: CPU: 1 PID: 6791 at kernel/locking/lockdep.c:232 __lock_acquire+0x564/0x2100 kernel/locking/lockdep.c:5176 Modules linked in: CPU: 1 UID: 0 PID: 6791 Comm: syz.4.205 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 RIP: 0010:hlock_class kernel/locking/lockdep.c:232 [inline] RIP: 0010:check_wait_context kernel/locking/lockdep.c:4850 [inline] RIP: 0010:__lock_acquire+0x564/0x2100 kernel/locking/lockdep.c:5176 Code: 00 00 83 3d a1 f4 9e 0e 00 75 23 90 48 c7 c7 00 96 0a 8c 48 c7 c6 00 99 0a 8c e8 67 5d e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f RSP: 0018:ffffc9000be9edb0 EFLAGS: 00010046 RAX: 60602e50e183d900 RBX: 00000000000019d8 RCX: 0000000000080000 RDX: dffffc0000000000 RSI: 000000000000ced9 RDI: 000000000000ceda RBP: 00000000000c19d8 R08: ffffffff81601a42 R09: 1ffff110170e519a R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff88802d46c6c4 R13: 0000000000000000 R14: 1ffff11005a8d8e0 R15: ffff88802d46c700 FS: 00007fd98eb1b6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020069000 CR3: 00000000272b8000 CR4: 0000000000350ef0 Call Trace: lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849 _raw_spin_lock_nested+0x31/0x40 kernel/locking/spinlock.c:378 raw_spin_rq_lock_nested+0xb0/0x140 kernel/sched/core.c:606 raw_spin_rq_lock kernel/sched/sched.h:1523 [inline] rq_lock kernel/sched/sched.h:1822 [inline] __schedule+0x35a/0x4c30 kernel/sched/core.c:6680 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7078 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:707 RIP: 0010:tomoyo_socket_sendmsg_permission+0x44/0x420 security/tomoyo/network.c:760 Code: 00 00 48 89 74 24 30 49 89 fe 65 48 8b 04 25 28 00 00 00 48 89 84 24 c0 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 5c 24 60 <48> c7 44 24 40 b3 8a b5 41 48 c7 44 24 48 f8 db 13 8e 48 c7 44 24 RSP: 0018:ffffc9000be9f400 EFLAGS: 00000286 RAX: 60602e50e183d900 RBX: ffffc9000be9f460 RCX: 0000000000080000 RDX: 0000000000001000 RSI: ffffc9000be9f940 RDI: ffff888051a33c00 RBP: ffffc9000be9f508 R08: ffffc9000be9f65f R09: ffffc9000be9f5e0 R10: dffffc0000000000 R11: fffff520017d3ecc R12: 0000000000000000 R13: ffffc9000be9f968 R14: ffff888051a33c00 R15: dffffc0000000000 security_socket_sendmsg+0x9a/0x2a0 security/security.c:4671 __sock_sendmsg+0x49/0x270 net/socket.c:723 sock_sendmsg+0x134/0x200 net/socket.c:749 splice_to_socket+0xa10/0x10b0 fs/splice.c:889 do_splice_from fs/splice.c:941 [inline] direct_splice_actor+0x11d/0x220 fs/splice.c:1164 splice_direct_to_actor+0x588/0xc80 fs/splice.c:1108 do_splice_direct_actor fs/splice.c:1207 [inline] do_splice_direct+0x289/0x3e0 fs/splice.c:1233 do_sendfile+0x564/0x8a0 fs/read_write.c:1363 __do_sys_sendfile64 fs/read_write.c:1424 [inline] __se_sys_sendfile64+0x17c/0x1e0 fs/read_write.c:1410 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd98dd85d29 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fd98eb1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007fd98df76320 RCX: 00007fd98dd85d29 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 RBP: 00007fd98de01aa8 R08: 0000000000000000 R09: 0000000000000000 R10: 000080001d00c0d1 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000001 R14: 00007fd98df76320 R15: 00007ffc18e187f8 ---------------- Code disassembly (best guess): 0: 00 00 add %al,(%rax) 2: 48 89 74 24 30 mov %rsi,0x30(%rsp) 7: 49 89 fe mov %rdi,%r14 a: 65 48 8b 04 25 28 00 mov %gs:0x28,%rax 11: 00 00 13: 48 89 84 24 c0 00 00 mov %rax,0xc0(%rsp) 1a: 00 1b: 49 bf 00 00 00 00 00 movabs $0xdffffc0000000000,%r15 22: fc ff df 25: 48 8d 5c 24 60 lea 0x60(%rsp),%rbx * 2a: 48 c7 44 24 40 b3 8a movq $0x41b58ab3,0x40(%rsp) <-- trapping instruction 31: b5 41 33: 48 c7 44 24 48 f8 db movq $0xffffffff8e13dbf8,0x48(%rsp) 3a: 13 8e 3c: 48 rex.W 3d: c7 .byte 0xc7 3e: 44 rex.R 3f: 24 .byte 0x24