Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts. 2024/04/01 07:05:49 ignoring optional flag "sandboxArg"="0" 2024/04/01 07:05:50 parsed 1 programs [ 108.109129][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 108.109147][ T28] audit: type=1400 audit(1711955150.161:204): avc: denied { getattr } for pid=5409 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.140821][ T28] audit: type=1400 audit(1711955150.161:205): avc: denied { read } for pid=5409 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.163645][ T28] audit: type=1400 audit(1711955150.161:206): avc: denied { open } for pid=5409 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.190038][ T28] audit: type=1400 audit(1711955150.221:207): avc: denied { mounton } for pid=5414 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 108.217582][ T28] audit: type=1400 audit(1711955150.221:208): avc: denied { mount } for pid=5414 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 108.241981][ T28] audit: type=1400 audit(1711955150.221:209): avc: denied { setattr } for pid=5414 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.266047][ T28] audit: type=1400 audit(1711955150.251:210): avc: denied { read write } for pid=5414 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 108.293235][ T28] audit: type=1400 audit(1711955150.251:211): avc: denied { open } for pid=5414 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 108.320622][ T28] audit: type=1400 audit(1711955150.321:212): avc: denied { unlink } for pid=5414 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 108.810272][ T28] audit: type=1400 audit(1711955150.861:213): avc: denied { relabelto } for pid=5416 comm="mkswap" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2024/04/01 07:05:52 executed programs: 0 [ 110.213468][ T5414] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 110.286688][ T4456] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.295383][ T4456] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.303231][ T4456] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.312303][ T4456] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.321753][ T4456] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 110.329744][ T4456] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.485085][ T5420] chnl_net:caif_netlink_parms(): no params data found [ 110.554969][ T5420] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.562295][ T5420] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.570490][ T5420] bridge_slave_0: entered allmulticast mode [ 110.577713][ T5420] bridge_slave_0: entered promiscuous mode [ 110.586885][ T5420] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.594751][ T5420] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.602166][ T5420] bridge_slave_1: entered allmulticast mode [ 110.609762][ T5420] bridge_slave_1: entered promiscuous mode [ 110.640666][ T5420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.654629][ T5420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.690337][ T5420] team0: Port device team_slave_0 added [ 110.700321][ T5420] team0: Port device team_slave_1 added [ 110.728349][ T5420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.735568][ T5420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.762041][ T5420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.775658][ T5420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.782750][ T5420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.808799][ T5420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.851857][ T5420] hsr_slave_0: entered promiscuous mode [ 110.858914][ T5420] hsr_slave_1: entered promiscuous mode [ 111.549123][ T5420] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.567275][ T5420] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.580792][ T5420] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.596328][ T5420] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.733829][ T5420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.768022][ T5420] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.787838][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.795541][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.820089][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.828129][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.107016][ T5420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.179427][ T5420] veth0_vlan: entered promiscuous mode [ 112.197509][ T5420] veth1_vlan: entered promiscuous mode [ 112.255904][ T5420] veth0_macvtap: entered promiscuous mode [ 112.271523][ T5420] veth1_macvtap: entered promiscuous mode [ 112.301067][ T5420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.323173][ T5420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.341584][ T5420] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.355885][ T5420] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.366529][ T5420] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.375849][ T5420] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.417661][ T4456] Bluetooth: hci0: command tx timeout [ 112.493404][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.509657][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.569266][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.580111][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.679280][ T5485] ------------[ cut here ]------------ [ 112.679793][ T5485] [ 112.679801][ T5485] ====================================================== [ 112.679807][ T5485] WARNING: possible circular locking dependency detected [ 112.679814][ T5485] 6.8.0-syzkaller-08951-gfe46a7dd189e-dirty #0 Not tainted [ 112.679826][ T5485] ------------------------------------------------------ [ 112.679831][ T5485] syz-executor.0/5485 is trying to acquire lock: [ 112.679842][ T5485] ffffffff8d6bdea0 (console_owner){....}-{0:0}, at: console_flush_all+0x4ff/0xd70 [ 112.679893][ T5485] [ 112.679893][ T5485] but task is already holding lock: [ 112.679899][ T5485] ffff8880b953e698 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 112.679958][ T5485] [ 112.679958][ T5485] which lock already depends on the new lock. [ 112.679958][ T5485] [ 112.679964][ T5485] [ 112.679964][ T5485] the existing dependency chain (in reverse order) is: [ 112.679969][ T5485] [ 112.679969][ T5485] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 112.679994][ T5485] _raw_spin_lock_nested+0x31/0x40 [ 112.680018][ T5485] raw_spin_rq_lock_nested+0x29/0x130 [ 112.680048][ T5485] task_fork_fair+0x70/0x240 [ 112.680066][ T5485] sched_cgroup_fork+0x3cf/0x510 [ 112.680089][ T5485] copy_process+0x4106/0x9160 [ 112.680114][ T5485] kernel_clone+0xfd/0x940 [ 112.680137][ T5485] user_mode_thread+0xb4/0xf0 [ 112.680160][ T5485] rest_init+0x27/0x2b0 [ 112.680178][ T5485] arch_call_rest_init+0x13/0x40 [ 112.680205][ T5485] start_kernel+0x3a3/0x490 [ 112.680230][ T5485] x86_64_start_reservations+0x18/0x30 [ 112.680257][ T5485] x86_64_start_kernel+0xb2/0xc0 [ 112.680282][ T5485] common_startup_64+0x13e/0x148 [ 112.680303][ T5485] [ 112.680303][ T5485] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 112.680325][ T5485] _raw_spin_lock_irqsave+0x3a/0x60 [ 112.680347][ T5485] try_to_wake_up+0x9a/0x13e0 [ 112.680367][ T5485] __wake_up_common+0x131/0x1e0 [ 112.680386][ T5485] __wake_up+0x31/0x60 [ 112.680416][ T5485] tty_port_default_wakeup+0x2a/0x40 [ 112.680441][ T5485] serial8250_tx_chars+0x55a/0x8b0 [ 112.680463][ T5485] serial8250_handle_irq+0x5d3/0x780 [ 112.680489][ T5485] serial8250_default_handle_irq+0x9a/0x210 [ 112.680506][ T11] ------------[ cut here ]------------ [ 112.680516][ T5485] serial8250_interrupt+0x103/0x210 [ 112.680530][ T5485] __handle_irq_event_percpu+0x229/0x750 [ 112.680555][ T5485] handle_irq_event+0xab/0x1e0 [ 112.680577][ T5485] handle_edge_irq+0x263/0xd10 [ 112.680598][ T5485] __common_interrupt+0xde/0x250 [ 112.680620][ T5485] common_interrupt+0xab/0xd0 [ 112.680636][ T5485] asm_common_interrupt+0x26/0x40 [ 112.680660][ T5485] _raw_spin_unlock_irqrestore+0x31/0x80 [ 112.680678][ T5485] serial_port_runtime_resume+0x2b7/0x340 [ 112.680702][ T5485] __rpm_callback+0xc5/0x4c0 [ 112.680721][ T5485] rpm_callback+0x1da/0x220 [ 112.680738][ T5485] rpm_resume+0xcf9/0x12f0 [ 112.680755][ T5485] pm_runtime_work+0x10c/0x150 [ 112.680774][ T5485] process_one_work+0x9a9/0x1a60 [ 112.680789][ T5485] worker_thread+0x6c8/0xf70 [ 112.680803][ T5485] kthread+0x2c1/0x3a0 [ 112.680823][ T5485] ret_from_fork+0x45/0x80 [ 112.680846][ T5485] ret_from_fork_asm+0x1a/0x30 [ 112.680869][ T5485] [ 112.680869][ T5485] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 112.680888][ T5485] _raw_spin_lock_irqsave+0x3a/0x60 [ 112.680906][ T5485] __wake_up+0x1c/0x60 [ 112.680925][ T5485] tty_port_default_wakeup+0x2a/0x40 [ 112.680946][ T5485] serial8250_tx_chars+0x55a/0x8b0 [ 112.680966][ T5485] serial8250_handle_irq+0x5d3/0x780 [ 112.680987][ T5485] serial8250_default_handle_irq+0x9a/0x210 [ 112.681009][ T5485] serial8250_interrupt+0x103/0x210 [ 112.681023][ T5485] __handle_irq_event_percpu+0x229/0x750 [ 112.681046][ T5485] handle_irq_event+0xab/0x1e0 [ 112.681068][ T5485] handle_edge_irq+0x263/0xd10 [ 112.681089][ T5485] __common_interrupt+0xde/0x250 [ 112.681109][ T5485] common_interrupt+0xab/0xd0 [ 112.681124][ T5485] asm_common_interrupt+0x26/0x40 [ 112.681146][ T5485] _raw_spin_unlock_irqrestore+0x31/0x80 [ 112.681163][ T5485] serial_port_runtime_resume+0x2b7/0x340 [ 112.681187][ T5485] __rpm_callback+0xc5/0x4c0 [ 112.681204][ T5485] rpm_callback+0x1da/0x220 [ 112.681221][ T5485] rpm_resume+0xcf9/0x12f0 [ 112.681238][ T5485] pm_runtime_work+0x10c/0x150 [ 112.681256][ T5485] process_one_work+0x9a9/0x1a60 [ 112.681271][ T5485] worker_thread+0x6c8/0xf70 [ 112.681285][ T5485] kthread+0x2c1/0x3a0 [ 112.681305][ T5485] ret_from_fork+0x45/0x80 [ 112.681327][ T5485] ret_from_fork_asm+0x1a/0x30 [ 112.681348][ T5485] [ 112.681348][ T5485] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 112.681367][ T5485] _raw_spin_lock_irqsave+0x3a/0x60 [ 112.681384][ T5485] serial8250_console_write+0xaa6/0x1090 [ 112.681412][ T5485] console_flush_all+0x53f/0xd70 [ 112.681428][ T5485] console_unlock+0xae/0x290 [ 112.681443][ T5485] vprintk_emit+0x11a/0x5a0 [ 112.681458][ T5485] vprintk+0x7f/0xa0 [ 112.681473][ T5485] _printk+0xc8/0x100 [ 112.681494][ T5485] register_console+0xa7b/0x1060 [ 112.681510][ T5485] univ8250_console_init+0x35/0x50 [ 112.681535][ T5485] console_init+0xcc/0x5e0 [ 112.681556][ T5485] start_kernel+0x259/0x490 [ 112.681576][ T5485] x86_64_start_reservations+0x18/0x30 [ 112.681597][ T5485] x86_64_start_kernel+0xb2/0xc0 [ 112.681618][ T5485] common_startup_64+0x13e/0x148 [ 112.681634][ T5485] [ 112.681634][ T5485] -> #0 (console_owner){....}-{0:0}: [ 112.681652][ T5485] __lock_acquire+0x2478/0x3b30 [ 112.681674][ T5485] lock_acquire+0x1b1/0x540 [ 112.681695][ T5485] console_flush_all+0x514/0xd70 [ 112.681710][ T5485] console_unlock+0xae/0x290 [ 112.681725][ T5485] vprintk_emit+0x11a/0x5a0 [ 112.681740][ T5485] vprintk+0x7f/0xa0 [ 112.681755][ T5485] _printk+0xc8/0x100 [ 112.681775][ T5485] report_bug+0x4ac/0x580 [ 112.681791][ T5485] handle_bug+0x3d/0x70 [ 112.681803][ T5485] exc_invalid_op+0x17/0x50 [ 112.681817][ T5485] asm_exc_invalid_op+0x1a/0x20 [ 112.681838][ T5485] __local_bh_enable_ip+0xc3/0x120 [ 112.681856][ T5485] sock_hash_delete_elem+0x1f4/0x260 [ 112.681876][ T5485] ___bpf_prog_run+0x3e51/0xae80 [ 112.681900][ T5485] __bpf_prog_run32+0xc1/0x100 [ 112.681916][ T5485] bpf_trace_run4+0x176/0x460 [ 112.681932][ T5485] __bpf_trace_sched_switch+0x13e/0x190 [ 112.681947][ T5485] __schedule+0x2266/0x5c70 [ 112.681966][ T5485] preempt_schedule_common+0x44/0xc0 [ 112.681984][ T5485] preempt_schedule_thunk+0x1a/0x30 [ 112.681998][ T5485] try_to_wake_up+0xc08/0x13e0 [ 112.682015][ T5485] wake_up_q+0x91/0x140 [ 112.682030][ T5485] futex_wake+0x43e/0x4e0 [ 112.682051][ T5485] do_futex+0x1e5/0x350 [ 112.682068][ T5485] __x64_sys_futex+0x1e1/0x4c0 [ 112.682086][ T5485] do_syscall_64+0xd2/0x260 [ 112.682109][ T5485] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 112.682132][ T5485] [ 112.682132][ T5485] other info that might help us debug this: [ 112.682132][ T5485] [ 112.682136][ T5485] Chain exists of: [ 112.682136][ T5485] console_owner --> &p->pi_lock --> &rq->__lock [ 112.682136][ T5485] [ 112.682156][ T5485] Possible unsafe locking scenario: [ 112.682156][ T5485] [ 112.682159][ T5485] CPU0 CPU1 [ 112.682163][ T5485] ---- ---- [ 112.682167][ T5485] lock(&rq->__lock); [ 112.682175][ T5485] lock(&p->pi_lock); [ 112.682184][ T5485] lock(&rq->__lock); [ 112.682192][ T5485] lock(console_owner); [ 112.682201][ T5485] [ 112.682201][ T5485] *** DEADLOCK *** [ 112.682201][ T5485] [ 112.682204][ T5485] 4 locks held by syz-executor.0/5485: [ 112.682214][ T5485] #0: ffff8880b953e698 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 112.682257][ T5485] #1: ffffffff8d7b08e0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x107/0x460 [ 112.682292][ T5485] #2: ffffffff8d79e2e0 (console_lock){+.+.}-{0:0}, at: vprintk+0x7f/0xa0 [ 112.682328][ T5485] #3: ffffffff8d79e350 (console_srcu){....}-{0:0}, at: console_flush_all+0x12d/0xd70 [ 112.682363][ T5485] [ 112.682363][ T5485] stack backtrace: [ 112.682368][ T5485] CPU: 1 PID: 5485 Comm: syz-executor.0 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e-dirty #0 [ 112.682386][ T5485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 112.682395][ T5485] Call Trace: [ 112.682406][ T5485] [ 112.682412][ T5485] dump_stack_lvl+0x116/0x1f0 [ 112.682432][ T5485] check_noncircular+0x31a/0x400 [ 112.682454][ T5485] ? __pfx_check_noncircular+0x10/0x10 [ 112.682478][ T5485] ? lockdep_lock+0x1b8/0x200 [ 112.682496][ T5485] ? __pfx_lockdep_lock+0x10/0x10 [ 112.682516][ T5485] __lock_acquire+0x2478/0x3b30 [ 112.682541][ T5485] ? __pfx___lock_acquire+0x10/0x10 [ 112.682565][ T5485] lock_acquire+0x1b1/0x540 [ 112.682588][ T5485] ? console_flush_all+0x4ff/0xd70 [ 112.682606][ T5485] ? __pfx_lock_acquire+0x10/0x10 [ 112.682629][ T5485] ? __pfx_lock_release+0x10/0x10 [ 112.682651][ T5485] ? do_raw_spin_lock+0x12d/0x2c0 [ 112.682667][ T5485] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 112.682685][ T5485] console_flush_all+0x514/0xd70 [ 112.682702][ T5485] ? console_flush_all+0x4ff/0xd70 [ 112.682720][ T5485] ? __pfx_console_flush_all+0x10/0x10 [ 112.682739][ T5485] ? __pfx_lock_acquire+0x10/0x10 [ 112.682762][ T5485] console_unlock+0xae/0x290 [ 112.682778][ T5485] ? __pfx_console_unlock+0x10/0x10 [ 112.682795][ T5485] ? do_raw_spin_unlock+0x172/0x230 [ 112.682812][ T5485] ? vprintk+0x7f/0xa0 [ 112.682830][ T5485] vprintk_emit+0x11a/0x5a0 [ 112.682847][ T5485] vprintk+0x7f/0xa0 [ 112.682865][ T5485] _printk+0xc8/0x100 [ 112.682887][ T5485] ? __pfx__printk+0x10/0x10 [ 112.682911][ T5485] ? __pfx___lock_acquire+0x10/0x10 [ 112.682933][ T5485] ? report_bug+0x4a0/0x580 [ 112.682950][ T5485] ? __local_bh_enable_ip+0xc3/0x120 [ 112.682968][ T5485] report_bug+0x4ac/0x580 [ 112.682986][ T5485] handle_bug+0x3d/0x70 [ 112.683000][ T5485] exc_invalid_op+0x17/0x50 [ 112.683015][ T5485] asm_exc_invalid_op+0x1a/0x20 [ 112.683038][ T5485] RIP: 0010:__local_bh_enable_ip+0xc3/0x120 [ 112.683059][ T5485] Code: 00 e8 81 6c 0b 00 e8 9c 69 42 00 fb 65 8b 05 cc 34 b2 7e 85 c0 74 52 5b 5d c3 cc cc cc cc 65 8b 05 4e e9 b0 7e 85 c0 75 9e 90 <0f> 0b 90 eb 98 e8 c3 67 42 00 eb 99 48 89 ef e8 49 e0 19 00 eb a2 [ 112.683075][ T5485] RSP: 0018:ffffc900037a7600 EFLAGS: 00010046 [ 112.683088][ T5485] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 1ffffffff1f3d467 [ 112.683099][ T5485] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff88cb2794 [ 112.683110][ T5485] RBP: ffffffff88cb2794 R08: 0000000000000000 R09: ffffed100dab841c [ 112.683121][ T5485] R10: ffff88806d5c20e3 R11: ffffffff934716a8 R12: fffffffffffffffe [ 112.683132][ T5485] R13: ffff88806d5c20e0 R14: ffff88806d5c20d8 R15: 0000000023700e53 [ 112.683144][ T5485] ? sock_hash_delete_elem+0x1f4/0x260 [ 112.683164][ T5485] ? sock_hash_delete_elem+0x1f4/0x260 [ 112.683185][ T5485] sock_hash_delete_elem+0x1f4/0x260 [ 112.683206][ T5485] ? __pfx_bpf_map_delete_elem+0x10/0x10 [ 112.683225][ T5485] ___bpf_prog_run+0x3e51/0xae80 [ 112.683249][ T5485] ? llist_add_batch+0x100/0x160 [ 112.683270][ T5485] __bpf_prog_run32+0xc1/0x100 [ 112.683287][ T5485] ? __pfx___bpf_prog_run32+0x10/0x10 [ 112.683305][ T5485] ? __pfx_lock_acquire+0x10/0x10 [ 112.683330][ T5485] ? __pfx___cant_migrate+0x10/0x10 [ 112.683348][ T5485] bpf_trace_run4+0x176/0x460 [ 112.683365][ T5485] ? __pfx_bpf_trace_run4+0x10/0x10 [ 112.683382][ T5485] ? trace_pelt_se_tp+0xfc/0x140 [ 112.683410][ T5485] ? kvm_sched_clock_read+0x11/0x20 [ 112.683431][ T5485] ? sched_clock+0x38/0x60 [ 112.683453][ T5485] __bpf_trace_sched_switch+0x13e/0x190 [ 112.683469][ T5485] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 112.683488][ T5485] ? rcu_read_lock_sched_held+0x3e/0x70 [ 112.683505][ T5485] ? psi_task_switch+0x6f0/0x900 [ 112.683527][ T5485] __schedule+0x2266/0x5c70 [ 112.683546][ T5485] ? sched_clock_cpu+0x6d/0x4d0 [ 112.683568][ T5485] ? rcu_is_watching+0x12/0xc0 [ 112.683593][ T5485] ? __pfx___schedule+0x10/0x10 [ 112.683612][ T5485] ? find_held_lock+0x2d/0x110 [ 112.683631][ T5485] ? try_to_wake_up+0x5d7/0x13e0 [ 112.683649][ T5485] ? preempt_schedule_thunk+0x1a/0x30 [ 112.683665][ T5485] preempt_schedule_common+0x44/0xc0 [ 112.683685][ T5485] preempt_schedule_thunk+0x1a/0x30 [ 112.683702][ T5485] try_to_wake_up+0xc08/0x13e0 [ 112.683721][ T5485] ? __pfx_try_to_wake_up+0x10/0x10 [ 112.683739][ T5485] ? __pfx_lock_release+0x10/0x10 [ 112.683762][ T5485] ? plist_check_head+0x9e/0x140 [ 112.683780][ T5485] wake_up_q+0x91/0x140 [ 112.683797][ T5485] ? do_raw_spin_unlock+0x172/0x230 [ 112.683814][ T5485] futex_wake+0x43e/0x4e0 [ 112.683837][ T5485] ? __pfx_futex_wake+0x10/0x10 [ 112.683859][ T5485] ? __might_fault+0x13b/0x190 [ 112.683877][ T5485] ? __pfx_lock_release+0x10/0x10 [ 112.683901][ T5485] do_futex+0x1e5/0x350 [ 112.683921][ T5485] ? __pfx_do_futex+0x10/0x10 [ 112.683943][ T5485] ? rcu_is_watching+0x12/0xc0 [ 112.683966][ T5485] ? __rseq_handle_notify_resume+0x663/0x1030 [ 112.683986][ T5485] __x64_sys_futex+0x1e1/0x4c0 [ 112.684007][ T5485] ? __pfx___x64_sys_futex+0x10/0x10 [ 112.684028][ T5485] do_syscall_64+0xd2/0x260 [ 112.684051][ T5485] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 112.684075][ T5485] RIP: 0033:0x7f1002a7dda9 [ 112.684088][ T5485] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 112.684102][ T5485] RSP: 002b:00007f100382d178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.684117][ T5485] RAX: ffffffffffffffda RBX: 00007f1002babf88 RCX: 00007f1002a7dda9 [ 112.684128][ T5485] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1002babf8c [ 112.684138][ T5485] RBP: 00007f1002babf80 R08: 0000000000000001 R09: 00007f100382d6c0 [ 112.684148][ T5485] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f1002babf8c [ 112.684158][ T5485] R13: 000000000000000b R14: 00007fff6da22fd0 R15: 00007fff6da230b8 [ 112.684171][ T5485] [ 112.689801][ T5485] WARNING: CPU: 1 PID: 5485 at kernel/softirq.c:362 __local_bh_enable_ip+0xc3/0x120 [ 112.689832][ T5485] Modules linked in: [ 112.689840][ T5485] CPU: 1 PID: 5485 Comm: syz-executor.0 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e-dirty #0 [ 112.689858][ T5485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 112.689867][ T5485] RIP: 0010:__local_bh_enable_ip+0xc3/0x120 [ 112.689889][ T5485] Code: 00 e8 81 6c 0b 00 e8 9c 69 42 00 fb 65 8b 05 cc 34 b2 7e 85 c0 74 52 5b 5d c3 cc cc cc cc 65 8b 05 4e e9 b0 7e 85 c0 75 9e 90 <0f> 0b 90 eb 98 e8 c3 67 42 00 eb 99 48 89 ef e8 49 e0 19 00 eb a2 [ 112.689905][ T5485] RSP: 0018:ffffc900037a7600 EFLAGS: 00010046 [ 112.689919][ T5485] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 1ffffffff1f3d467 [ 112.689930][ T5485] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff88cb2794 [ 112.689941][ T5485] RBP: ffffffff88cb2794 R08: 0000000000000000 R09: ffffed100dab841c [ 112.689952][ T5485] R10: ffff88806d5c20e3 R11: ffffffff934716a8 R12: fffffffffffffffe [ 112.689964][ T5485] R13: ffff88806d5c20e0 R14: ffff88806d5c20d8 R15: 0000000023700e53 [ 112.689976][ T5485] FS: 00007f100382d6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 112.689994][ T5485] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.690006][ T5485] CR2: 00007f1002ba80c0 CR3: 000000007c110000 CR4: 00000000003506f0 [ 112.690018][ T5485] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 112.690028][ T5485] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 112.690039][ T5485] Call Trace: [ 112.690045][ T5485] [ 112.690051][ T5485] ? show_regs+0x8c/0xa0 [ 112.690066][ T5485] ? __warn+0xe5/0x390 [ 112.690080][ T5485] ? __local_bh_enable_ip+0xc3/0x120 [ 112.690100][ T5485] ? report_bug+0x3c0/0x580 [ 112.690118][ T5485] ? handle_bug+0x3d/0x70 [ 112.690133][ T5485] ? exc_invalid_op+0x17/0x50 [ 112.690148][ T5485] ? asm_exc_invalid_op+0x1a/0x20 [ 112.690172][ T5485] ? sock_hash_delete_elem+0x1f4/0x260 [ 112.690193][ T5485] ? sock_hash_delete_elem+0x1f4/0x260 [ 112.690214][ T5485] ? __local_bh_enable_ip+0xc3/0x120 [ 112.690234][ T5485] sock_hash_delete_elem+0x1f4/0x260 [ 112.690256][ T5485] ? __pfx_bpf_map_delete_elem+0x10/0x10 [ 112.690275][ T5485] ___bpf_prog_run+0x3e51/0xae80 [ 112.690302][ T5485] ? llist_add_batch+0x100/0x160 [ 112.690322][ T5485] __bpf_prog_run32+0xc1/0x100 [ 112.690340][ T5485] ? __pfx___bpf_prog_run32+0x10/0x10 [ 112.690359][ T5485] ? __pfx_lock_acquire+0x10/0x10 [ 112.690385][ T5485] ? __pfx___cant_migrate+0x10/0x10 [ 112.690410][ T5485] bpf_trace_run4+0x176/0x460 [ 112.690427][ T5485] ? __pfx_bpf_trace_run4+0x10/0x10 [ 112.690445][ T5485] ? trace_pelt_se_tp+0xfc/0x140 [ 112.690470][ T5485] ? kvm_sched_clock_read+0x11/0x20 [ 112.690491][ T5485] ? sched_clock+0x38/0x60 [ 112.690515][ T5485] __bpf_trace_sched_switch+0x13e/0x190 [ 112.690533][ T5485] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 112.690548][ T5485] ? rcu_read_lock_sched_held+0x3e/0x70 [ 112.690561][ T5485] ? psi_task_switch+0x6f0/0x900 [ 112.690578][ T5485] __schedule+0x2266/0x5c70 [ 112.690593][ T5485] ? sched_clock_cpu+0x6d/0x4d0 [ 112.690611][ T5485] ? rcu_is_watching+0x12/0xc0 [ 112.690631][ T5485] ? __pfx___schedule+0x10/0x10 [ 112.690646][ T5485] ? find_held_lock+0x2d/0x110 [ 112.690660][ T5485] ? try_to_wake_up+0x5d7/0x13e0 [ 112.690674][ T5485] ? preempt_schedule_thunk+0x1a/0x30 [ 112.690687][ T5485] preempt_schedule_common+0x44/0xc0 [ 112.690703][ T5485] preempt_schedule_thunk+0x1a/0x30 [ 112.690716][ T5485] try_to_wake_up+0xc08/0x13e0 [ 112.690731][ T5485] ? __pfx_try_to_wake_up+0x10/0x10 [ 112.690745][ T5485] ? __pfx_lock_release+0x10/0x10 [ 112.690763][ T5485] ? plist_check_head+0x9e/0x140 [ 112.690777][ T5485] wake_up_q+0x91/0x140 [ 112.690791][ T5485] ? do_raw_spin_unlock+0x172/0x230 [ 112.690804][ T5485] futex_wake+0x43e/0x4e0 [ 112.690821][ T5485] ? __pfx_futex_wake+0x10/0x10 [ 112.690839][ T5485] ? __might_fault+0x13b/0x190 [ 112.690852][ T5485] ? __pfx_lock_release+0x10/0x10 [ 112.690871][ T5485] do_futex+0x1e5/0x350 [ 112.690886][ T5485] ? __pfx_do_futex+0x10/0x10 [ 112.690900][ T5485] ? rcu_is_watching+0x12/0xc0 [ 112.690918][ T5485] ? __rseq_handle_notify_resume+0x663/0x1030 [ 112.690934][ T5485] __x64_sys_futex+0x1e1/0x4c0 [ 112.690950][ T5485] ? __pfx___x64_sys_futex+0x10/0x10 [ 112.690967][ T5485] do_syscall_64+0xd2/0x260 [ 112.690986][ T5485] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 112.691005][ T5485] RIP: 0033:0x7f1002a7dda9 [ 112.691014][ T5485] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 112.691025][ T5485] RSP: 002b:00007f100382d178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.691037][ T5485] RAX: ffffffffffffffda RBX: 00007f1002babf88 RCX: 00007f1002a7dda9 [ 112.691046][ T5485] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1002babf8c [ 112.691054][ T5485] RBP: 00007f1002babf80 R08: 0000000000000001 R09: 00007f100382d6c0 [ 112.691062][ T5485] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f1002babf8c [ 112.691070][ T5485] R13: 000000000000000b R14: 00007fff6da22fd0 R15: 00007fff6da230b8 [ 112.691080][ T5485] [ 112.691087][ T5485] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.691093][ T5485] CPU: 1 PID: 5485 Comm: syz-executor.0 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e-dirty #0 [ 112.691106][ T5485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 112.691112][ T5485] Call Trace: [ 112.691117][ T5485] [ 112.691121][ T5485] dump_stack_lvl+0x3d/0x1f0 [ 112.691136][ T5485] panic+0x6f5/0x7a0 [ 112.691156][ T5485] ? __pfx_panic+0x10/0x10 [ 112.691174][ T5485] ? show_trace_log_lvl+0x363/0x500 [ 112.691195][ T5485] ? check_panic_on_warn+0x1f/0xb0 [ 112.691214][ T5485] ? __local_bh_enable_ip+0xc3/0x120 [ 112.691229][ T5485] check_panic_on_warn+0xab/0xb0 [ 112.691249][ T5485] __warn+0xf1/0x390 [ 112.691259][ T5485] ? __local_bh_enable_ip+0xc3/0x120 [ 112.691275][ T5485] report_bug+0x3c0/0x580 [ 112.691288][ T5485] handle_bug+0x3d/0x70 [ 112.691299][ T5485] exc_invalid_op+0x17/0x50 [ 112.691311][ T5485] asm_exc_invalid_op+0x1a/0x20 [ 112.691329][ T5485] RIP: 0010:__local_bh_enable_ip+0xc3/0x120 [ 112.691345][ T5485] Code: 00 e8 81 6c 0b 00 e8 9c 69 42 00 fb 65 8b 05 cc 34 b2 7e 85 c0 74 52 5b 5d c3 cc cc cc cc 65 8b 05 4e e9 b0 7e 85 c0 75 9e 90 <0f> 0b 90 eb 98 e8 c3 67 42 00 eb 99 48 89 ef e8 49 e0 19 00 eb a2 [ 112.691357][ T5485] RSP: 0018:ffffc900037a7600 EFLAGS: 00010046 [ 112.691366][ T5485] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 1ffffffff1f3d467 [ 112.691375][ T5485] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff88cb2794 [ 112.691383][ T5485] RBP: ffffffff88cb2794 R08: 0000000000000000 R09: ffffed100dab841c [ 112.691391][ T5485] R10: ffff88806d5c20e3 R11: ffffffff934716a8 R12: fffffffffffffffe [ 112.691404][ T5485] R13: ffff88806d5c20e0 R14: ffff88806d5c20d8 R15: 0000000023700e53 [ 112.691413][ T5485] ? sock_hash_delete_elem+0x1f4/0x260 [ 112.691429][ T5485] ? sock_hash_delete_elem+0x1f4/0x260 [ 112.691446][ T5485] sock_hash_delete_elem+0x1f4/0x260 [ 112.691461][ T5485] ? __pfx_bpf_map_delete_elem+0x10/0x10 [ 112.691476][ T5485] ___bpf_prog_run+0x3e51/0xae80 [ 112.691496][ T5485] ? llist_add_batch+0x100/0x160 [ 112.691510][ T5485] __bpf_prog_run32+0xc1/0x100 [ 112.691524][ T5485] ? __pfx___bpf_prog_run32+0x10/0x10 [ 112.691538][ T5485] ? __pfx_lock_acquire+0x10/0x10 [ 112.691557][ T5485] ? __pfx___cant_migrate+0x10/0x10 [ 112.691572][ T5485] bpf_trace_run4+0x176/0x460 [ 112.691585][ T5485] ? __pfx_bpf_trace_run4+0x10/0x10 [ 112.691599][ T5485] ? trace_pelt_se_tp+0xfc/0x140 [ 112.691617][ T5485] ? kvm_sched_clock_read+0x11/0x20 [ 112.691634][ T5485] ? sched_clock+0x38/0x60 [ 112.691651][ T5485] __bpf_trace_sched_switch+0x13e/0x190 [ 112.691664][ T5485] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 112.691678][ T5485] ? rcu_read_lock_sched_held+0x3e/0x70 [ 112.691692][ T5485] ? psi_task_switch+0x6f0/0x900 [ 112.691709][ T5485] __schedule+0x2266/0x5c70 [ 112.691723][ T5485] ? sched_clock_cpu+0x6d/0x4d0 [ 112.691741][ T5485] ? rcu_is_watching+0x12/0xc0 [ 112.691761][ T5485] ? __pfx___schedule+0x10/0x10 [ 112.691776][ T5485] ? find_held_lock+0x2d/0x110 [ 112.691790][ T5485] ? try_to_wake_up+0x5d7/0x13e0 [ 112.691804][ T5485] ? preempt_schedule_thunk+0x1a/0x30 [ 112.691816][ T5485] preempt_schedule_common+0x44/0xc0 [ 112.691832][ T5485] preempt_schedule_thunk+0x1a/0x30 [ 112.691846][ T5485] try_to_wake_up+0xc08/0x13e0 [ 112.691860][ T5485] ? __pfx_try_to_wake_up+0x10/0x10 [ 112.691874][ T5485] ? __pfx_lock_release+0x10/0x10 [ 112.691892][ T5485] ? plist_check_head+0x9e/0x140 [ 112.691906][ T5485] wake_up_q+0x91/0x140 [ 112.691920][ T5485] ? do_raw_spin_unlock+0x172/0x230 [ 112.691933][ T5485] futex_wake+0x43e/0x4e0 [ 112.691950][ T5485] ? __pfx_futex_wake+0x10/0x10 [ 112.691968][ T5485] ? __might_fault+0x13b/0x190 [ 112.691980][ T5485] ? __pfx_lock_release+0x10/0x10 [ 112.691999][ T5485] do_futex+0x1e5/0x350 [ 112.692014][ T5485] ? __pfx_do_futex+0x10/0x10 [ 112.692029][ T5485] ? rcu_is_watching+0x12/0xc0 [ 112.692047][ T5485] ? __rseq_handle_notify_resume+0x663/0x1030 [ 112.692062][ T5485] __x64_sys_futex+0x1e1/0x4c0 [ 112.692078][ T5485] ? __pfx___x64_sys_futex+0x10/0x10 [ 112.692095][ T5485] do_syscall_64+0xd2/0x260 [ 112.692114][ T5485] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 112.692132][ T5485] RIP: 0033:0x7f1002a7dda9 [ 112.692141][ T5485] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 112.692153][ T5485] RSP: 002b:00007f100382d178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.692164][ T5485] RAX: ffffffffffffffda RBX: 00007f1002babf88 RCX: 00007f1002a7dda9 [ 112.692173][ T5485] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1002babf8c [ 112.692181][ T5485] RBP: 00007f1002babf80 R08: 0000000000000001 R09: 00007f100382d6c0 [ 112.692189][ T5485] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f1002babf8c [ 112.692197][ T5485] R13: 000000000000000b R14: 00007fff6da22fd0 R15: 00007fff6da230b8 [ 112.692207][ T5485] [ 113.776795][ T5485] Shutting down cpus with NMI [ 113.777060][ T5485] Kernel Offset: disabled