WARNING in enqueue_to_backlog
------------[ cut here ]------------
raw_local_irq_restore() called with IRQs enabled
WARNING: kernel/locking/irqflag-debug.c:10 at warn_bogus_irq_restore+0xc/0x20 kernel/locking/irqflag-debug.c:10, CPU#1: aoe_tx0/1320
Modules linked in:
CPU: 1 UID: 0 PID: 1320 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:warn_bogus_irq_restore+0xc/0x20 kernel/locking/irqflag-debug.c:10
Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 90 48 8d 3d a4 5b 4c 04 <67> 48 0f b9 3a 90 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90
RSP: 0018:ffffc90005f0f728 EFLAGS: 00010293
RAX: ffffffff88f420a0 RBX: 0000000000000001 RCX: ffff8880283f8000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8f6d1e50
RBP: ffff8880b893d960 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: fffffbfff1ed3fd7 R12: ffff8880b893d978
R13: dffffc0000000000 R14: 0000000000000200 R15: ffff8880b893d958
FS: 0000000000000000(0000) GS:ffff88812644a000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055d732f5cee8 CR3: 000000000dbba000 CR4: 00000000003526f0
Call Trace:
backlog_unlock_irq_restore net/core/dev.c:253 [inline]
enqueue_to_backlog+0x525/0xcf0 net/core/dev.c:5347
netif_rx_internal+0x120/0x590 net/core/dev.c:5659
__netif_rx+0xa9/0x110 net/core/dev.c:5679
loopback_xmit+0x43a/0x660 drivers/net/loopback.c:90
__netdev_start_xmit include/linux/netdevice.h:5275 [inline]
netdev_start_xmit include/linux/netdevice.h:5284 [inline]
xmit_one net/core/dev.c:3864 [inline]
dev_hard_start_xmit+0x2f2/0x8b0 net/core/dev.c:3880
__dev_queue_xmit+0x16f4/0x39e0 net/core/dev.c:4829
dev_queue_xmit include/linux/netdevice.h:3384 [inline]
tx+0x6b/0x190 drivers/block/aoe/aoenet.c:62
kthread+0x1e0/0x3f0 drivers/block/aoe/aoecmd.c:1241
kthread+0x388/0x470 kernel/kthread.c:467
ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
----------------
Code disassembly (best guess):
0: cc int3
1: cc int3
2: cc int3
3: cc int3
4: cc int3
5: cc int3
6: cc int3
7: cc int3
8: cc int3
9: cc int3
a: cc int3
b: cc int3
c: cc int3
d: cc int3
e: 90 nop
f: 90 nop
10: 90 nop
11: 90 nop
12: 90 nop
13: 90 nop
14: 90 nop
15: 90 nop
16: 90 nop
17: 90 nop
18: 90 nop
19: 90 nop
1a: 90 nop
1b: 90 nop
1c: 90 nop
1d: 90 nop
1e: f3 0f 1e fa endbr64
22: 90 nop
23: 48 8d 3d a4 5b 4c 04 lea 0x44c5ba4(%rip),%rdi # 0x44c5bce
* 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction
2f: 90 nop
30: c3 ret
31: cc int3
32: cc int3
33: cc int3
34: cc int3
35: cc int3
36: cc int3
37: cc int3
38: cc int3
39: cc int3
3a: cc int3
3b: cc int3
3c: cc int3
3d: cc int3
3e: 90 nop
3f: 90 nop
[ 71.406248][ T1320] ------------[ cut here ]------------
[ 71.406261][ T1320] raw_local_irq_restore() called with IRQs enabled
[ 71.406272][ T1320] WARNING: kernel/locking/irqflag-debug.c:10 at warn_bogus_irq_restore+0xc/0x20, CPU#1: aoe_tx0/1320
[ 71.406337][ T1320] Modules linked in:
[ 71.406369][ T1320] CPU: 1 UID: 0 PID: 1320 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 71.406388][ T1320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 71.406402][ T1320] RIP: 0010:warn_bogus_irq_restore+0xc/0x20
[ 71.406426][ T1320] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 90 48 8d 3d a4 5b 4c 04 <67> 48 0f b9 3a 90 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90
[ 71.406444][ T1320] RSP: 0018:ffffc90005f0f728 EFLAGS: 00010293
[ 71.406458][ T1320] RAX: ffffffff88f420a0 RBX: 0000000000000001 RCX: ffff8880283f8000
[ 71.406471][ T1320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8f6d1e50
[ 71.406482][ T1320] RBP: ffff8880b893d960 R08: 0000000000000000 R09: 0000000000000000
[ 71.406492][ T1320] R10: dffffc0000000000 R11: fffffbfff1ed3fd7 R12: ffff8880b893d978
[ 71.406505][ T1320] R13: dffffc0000000000 R14: 0000000000000200 R15: ffff8880b893d958
[ 71.406517][ T1320] FS: 0000000000000000(0000) GS:ffff88812644a000(0000) knlGS:0000000000000000
[ 71.406531][ T1320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 71.406543][ T1320] CR2: 000055d732f5cee8 CR3: 000000000dbba000 CR4: 00000000003526f0
[ 71.406558][ T1320] Call Trace:
[ 71.406569][ T1320]
[ 71.406576][ T1320] enqueue_to_backlog+0x525/0xcf0
[ 71.406610][ T1320] netif_rx_internal+0x120/0x590
[ 71.406635][ T1320] ? __pfx_netif_rx_internal+0x10/0x10
[ 71.406653][ T1320] ? __lock_acquire+0x6b5/0x2cf0
[ 71.406675][ T1320] ? eth_type_trans+0x35e/0x6d0
[ 71.406696][ T1320] ? rcu_is_watching+0x15/0xb0
[ 71.406717][ T1320] __netif_rx+0xa9/0x110
[ 71.406733][ T1320] loopback_xmit+0x43a/0x660
[ 71.406763][ T1320] dev_hard_start_xmit+0x2f2/0x8b0
[ 71.406801][ T1320] __dev_queue_xmit+0x16f4/0x39e0
[ 71.406815][ T1320] ? sched_clock+0x3f/0x60
[ 71.406847][ T1320] ? __pfx___schedule+0x10/0x10
[ 71.406868][ T1320] ? __dev_queue_xmit+0x27d/0x39e0
[ 71.406897][ T1320] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 71.406922][ T1320] ? __pfx___dev_queue_xmit+0x10/0x10
[ 71.406941][ T1320] ? preempt_schedule_common+0x82/0xd0
[ 71.406966][ T1320] ? preempt_schedule_thunk+0x16/0x30
[ 71.406992][ T1320] ? rt_mutex_slowunlock+0x681/0x8b0
[ 71.407018][ T1320] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 71.407041][ T1320] ? rt_spin_unlock+0x14f/0x200
[ 71.407062][ T1320] ? rt_spin_unlock+0x160/0x200
[ 71.407081][ T1320] tx+0x6b/0x190
[ 71.407097][ T1320] ? __pfx_tx+0x10/0x10
[ 71.407110][ T1320] kthread+0x1e0/0x3f0
[ 71.407130][ T1320] ? __pfx_kthread+0x10/0x10
[ 71.407143][ T1320] ? __pfx_default_wake_function+0x10/0x10
[ 71.407155][ T1320] ? __kthread_parkme+0x7a/0x1f0
[ 71.407199][ T1320] kthread+0x388/0x470
[ 71.407209][ T1320] ? __pfx_kthread+0x10/0x10
[ 71.407221][ T1320] ? __pfx_kthread+0x10/0x10
[ 71.407231][ T1320] ret_from_fork+0x51e/0xb90
[ 71.407246][ T1320] ? __pfx_ret_from_fork+0x10/0x10
[ 71.407258][ T1320] ? __switch_to+0xc7d/0x1450
[ 71.407272][ T1320] ? __pfx_kthread+0x10/0x10
[ 71.407282][ T1320] ret_from_fork_asm+0x1a/0x30
[ 71.407299][ T1320]
[ 71.407304][ T1320] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 71.407313][ T1320] CPU: 1 UID: 0 PID: 1320 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 71.407323][ T1320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 71.407329][ T1320] Call Trace:
[ 71.407333][ T1320]
[ 71.407336][ T1320] vpanic+0x56c/0xa60
[ 71.407351][ T1320] ? __pfx__printk+0x10/0x10
[ 71.407361][ T1320] ? __pfx_vpanic+0x10/0x10
[ 71.407374][ T1320] ? is_bpf_text_address+0x292/0x2b0
[ 71.407386][ T1320] ? is_bpf_text_address+0x26/0x2b0
[ 71.407402][ T1320] panic+0xc5/0xd0
[ 71.407415][ T1320] ? __pfx_panic+0x10/0x10
[ 71.407432][ T1320] ? ret_from_fork_asm+0x1a/0x30
[ 71.407443][ T1320] __warn+0x315/0x4f0
[ 71.407457][ T1320] ? warn_bogus_irq_restore+0xc/0x20
[ 71.407471][ T1320] ? warn_bogus_irq_restore+0xc/0x20
[ 71.407485][ T1320] __report_bug+0x29a/0x540
[ 71.407502][ T1320] ? warn_bogus_irq_restore+0xc/0x20
[ 71.407515][ T1320] ? __pfx___report_bug+0x10/0x10
[ 71.407537][ T1320] report_bug_entry+0x19a/0x290
[ 71.407550][ T1320] ? warn_bogus_irq_restore+0xc/0x20
[ 71.407563][ T1320] ? warn_bogus_irq_restore+0x11/0x20
[ 71.407575][ T1320] handle_bug+0xca/0x200
[ 71.407585][ T1320] exc_invalid_op+0x1a/0x50
[ 71.407595][ T1320] asm_exc_invalid_op+0x1a/0x20
[ 71.407605][ T1320] RIP: 0010:warn_bogus_irq_restore+0xc/0x20
[ 71.407619][ T1320] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 90 48 8d 3d a4 5b 4c 04 <67> 48 0f b9 3a 90 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90
[ 71.407626][ T1320] RSP: 0018:ffffc90005f0f728 EFLAGS: 00010293
[ 71.407635][ T1320] RAX: ffffffff88f420a0 RBX: 0000000000000001 RCX: ffff8880283f8000
[ 71.407646][ T1320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8f6d1e50
[ 71.407652][ T1320] RBP: ffff8880b893d960 R08: 0000000000000000 R09: 0000000000000000
[ 71.407658][ T1320] R10: dffffc0000000000 R11: fffffbfff1ed3fd7 R12: ffff8880b893d978
[ 71.407664][ T1320] R13: dffffc0000000000 R14: 0000000000000200 R15: ffff8880b893d958
[ 71.407675][ T1320] ? enqueue_to_backlog+0x520/0xcf0
[ 71.407689][ T1320] enqueue_to_backlog+0x525/0xcf0
[ 71.407704][ T1320] netif_rx_internal+0x120/0x590
[ 71.407718][ T1320] ? __pfx_netif_rx_internal+0x10/0x10
[ 71.407730][ T1320] ? __lock_acquire+0x6b5/0x2cf0
[ 71.407744][ T1320] ? eth_type_trans+0x35e/0x6d0
[ 71.407758][ T1320] ? rcu_is_watching+0x15/0xb0
[ 71.407771][ T1320] __netif_rx+0xa9/0x110
[ 71.407781][ T1320] loopback_xmit+0x43a/0x660
[ 71.407794][ T1320] dev_hard_start_xmit+0x2f2/0x8b0
[ 71.407816][ T1320] __dev_queue_xmit+0x16f4/0x39e0
[ 71.407824][ T1320] ? sched_clock+0x3f/0x60
[ 71.407840][ T1320] ? __pfx___schedule+0x10/0x10
[ 71.407852][ T1320] ? __dev_queue_xmit+0x27d/0x39e0
[ 71.407865][ T1320] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 71.407879][ T1320] ? __pfx___dev_queue_xmit+0x10/0x10
[ 71.407894][ T1320] ? preempt_schedule_common+0x82/0xd0
[ 71.407907][ T1320] ? preempt_schedule_thunk+0x16/0x30
[ 71.407921][ T1320] ? rt_mutex_slowunlock+0x681/0x8b0
[ 71.407935][ T1320] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 71.407948][ T1320] ? rt_spin_unlock+0x14f/0x200
[ 71.407961][ T1320] ? rt_spin_unlock+0x160/0x200
[ 71.407973][ T1320] tx+0x6b/0x190
[ 71.407982][ T1320] ? __pfx_tx+0x10/0x10
[ 71.407991][ T1320] kthread+0x1e0/0x3f0
[ 71.408008][ T1320] ? __pfx_kthread+0x10/0x10
[ 71.408021][ T1320] ? __pfx_default_wake_function+0x10/0x10
[ 71.408033][ T1320] ? __kthread_parkme+0x7a/0x1f0
[ 71.408055][ T1320] kthread+0x388/0x470
[ 71.408065][ T1320] ? __pfx_kthread+0x10/0x10
[ 71.408077][ T1320] ? __pfx_kthread+0x10/0x10
[ 71.408087][ T1320] ret_from_fork+0x51e/0xb90
[ 71.408101][ T1320] ? __pfx_ret_from_fork+0x10/0x10
[ 71.408113][ T1320] ? __switch_to+0xc7d/0x1450
[ 71.408126][ T1320] ? __pfx_kthread+0x10/0x10
[ 71.408136][ T1320] ret_from_fork_asm+0x1a/0x30
[ 71.408153][ T1320]
[ 71.408573][ T1320] Kernel Offset: disabled
syzkaller build log:
go env (err=)
AR='ar'
CC='gcc'
CGO_CFLAGS='-O2 -g'
CGO_CPPFLAGS=''
CGO_CXXFLAGS='-O2 -g'
CGO_ENABLED='1'
CGO_FFLAGS='-O2 -g'
CGO_LDFLAGS='-O2 -g'
CXX='g++'
GCCGO='gccgo'
GO111MODULE='auto'
GOAMD64='v1'
GOARCH='amd64'
GOAUTH='netrc'
GOBIN=''
GOCACHE='/syzkaller/.cache/go-build'
GOCACHEPROG=''
GODEBUG=''
GOENV='/syzkaller/.config/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFIPS140='off'
GOFLAGS=''
GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build1100639872=/tmp/go-build -gno-record-gcc-switches'
GOHOSTARCH='amd64'
GOHOSTOS='linux'
GOINSECURE=''
GOMOD='/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod'
GOMODCACHE='/syzkaller/jobs-2/linux/gopath/pkg/mod'
GONOPROXY=''
GONOSUMDB=''
GOOS='linux'
GOPATH='/syzkaller/jobs-2/linux/gopath'
GOPRIVATE=''
GOPROXY='https://proxy.golang.org,direct'
GOROOT='/usr/local/go'
GOSUMDB='sum.golang.org'
GOTELEMETRY='local'
GOTELEMETRYDIR='/syzkaller/.config/go/telemetry'
GOTMPDIR=''
GOTOOLCHAIN='auto'
GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64'
GOVCS=''
GOVERSION='go1.24.4'
GOWORK=''
PKG_CONFIG='pkg-config'
git status (err=)
HEAD detached at 6b856513c1
nothing to commit, working tree clean
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
go list -f '{{.Stale}}' ./sys/syz-sysgen | grep -q false || go install ./sys/syz-sysgen
make .descriptions
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
bin/syz-sysgen
go fmt ./sys/... >/dev/null
touch .descriptions
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=6b856513c13bbdf86191190923fb64438219ea68 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20241108-145419'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog
mkdir -p ./bin/linux_amd64
g++ -o ./bin/linux_amd64/syz-executor executor/executor.cc \
-m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -std=c++17 -I. -Iexecutor/_include -fpermissive -w -DGOOS_linux=1 -DGOARCH_amd64=1 \
-DHOSTGOOS_linux=1 -DGIT_REVISION=\"6b856513c13bbdf86191190923fb64438219ea68\"
/usr/bin/ld: /tmp/ccXBLey1.o: in function `test_cover_filter()':
executor.cc:(.text+0x1693b): warning: the use of `tempnam' is dangerous, better use `mkstemp'
/usr/bin/ld: /tmp/ccXBLey1.o: in function `Connection::Connect(char const*, char const*)':
executor.cc:(.text._ZN10Connection7ConnectEPKcS1_[_ZN10Connection7ConnectEPKcS1_]+0x386): warning: Using 'gethostbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking