./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1494308401 <...> [ 97.364736][ T7] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts. execve("./syz-executor1494308401", ["./syz-executor1494308401"], 0x7ffd2e228760 /* 10 vars */) = 0 brk(NULL) = 0x5555732bd000 brk(0x5555732bdd00) = 0x5555732bdd00 arch_prctl(ARCH_SET_FS, 0x5555732bd380) = 0 set_tid_address(0x5555732bd650) = 5065 set_robust_list(0x5555732bd660, 24) = 0 rseq(0x5555732bdca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1494308401", 4096) = 28 getrandom("\xd8\x93\xd9\x67\xa8\x6b\xd1\xbc", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555732bdd00 brk(0x5555732ded00) = 0x5555732ded00 brk(0x5555732df000) = 0x5555732df000 mprotect(0x7ff61e2a0000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 sendto(4, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=864, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5065}, "\x01\x02\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00\x06\x00\x01\x00\x1d\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x30\x00\x00\x00\xe8\x02\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x05\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x03\x00"...], 4096, 0, NULL, NULL) = 864 [ 98.500385][ T28] audit: type=1400 audit(1712541652.846:87): avc: denied { execmem } for pid=5065 comm="syz-executor149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 98.523173][ T28] audit: type=1400 audit(1712541652.876:88): avc: denied { create } for pid=5065 comm="syz-executor149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5065}, {error=0, msg={nlmsg_len=36, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 [ 98.544411][ T28] audit: type=1400 audit(1712541652.876:89): avc: denied { create } for pid=5062 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 98.565567][ T28] audit: type=1400 audit(1712541652.876:90): avc: denied { write } for pid=5062 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x0a\x00\xa0\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5065}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0c\x00\x01\x00\x02\x00\xaa\xaa\xaa\xaa\xaa\xaa"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5065}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [ 98.586863][ T28] audit: type=1400 audit(1712541652.876:91): avc: denied { nlmsg_read } for pid=5062 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 98.608628][ T28] audit: type=1400 audit(1712541652.876:92): avc: denied { read } for pid=5062 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 98.629260][ T28] audit: type=1400 audit(1712541652.876:93): avc: denied { write } for pid=5065 comm="syz-executor149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 sendto(3, [{nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=0, ifi_flags=0, ifi_change=0}, [[{nla_len=11, nla_type=IFLA_IFNAME}, "lowpan0"...], [{nla_len=16, nla_type=IFLA_LINKINFO}, [{nla_len=10, nla_type=IFLA_INFO_KIND}, "lowpan"...]], [{nla_len=8, nla_type=IFLA_LINK}, 11]]], 68, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 68 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5065}, {error=0, msg={nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x06\x00\x0a\x00\xa1\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5065}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=if_nametoindex("wpan1"), ifi_flags=IFF_UP, ifi_change=0x1}, [{nla_len=12, nla_type=IFLA_ADDRESS}, 02:01:aa:aa:aa:aa:aa]], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5065}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 close(3) = 0 close(4) = 0 [ 98.652651][ T28] audit: type=1400 audit(1712541652.876:94): avc: denied { read } for pid=5065 comm="syz-executor149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.674181][ T28] audit: type=1400 audit(1712541653.006:95): avc: denied { read } for pid=4727 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_MSG, insn_cnt=4, insns=0x20000040, license="GPL", log_level=2, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 3 close(3) = 0 socketpair(AF_UNIX, SOCK_STREAM, 0, [3, 4]) = 0 bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000000, value=0x20000080, flags=BPF_ANY}, 32) = 0 bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 6 [ 98.711882][ T28] audit: type=1400 audit(1712541653.056:96): avc: denied { prog_load } for pid=5065 comm="syz-executor149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 98.772965][ T5065] ------------[ cut here ]------------ [ 98.778678][ T5065] WARNING: CPU: 1 PID: 5065 at kernel/softirq.c:362 __local_bh_enable_ip+0xc3/0x120 [ 98.788101][ T5065] Modules linked in: [ 98.791995][ T5065] CPU: 1 PID: 5065 Comm: syz-executor149 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 98.802059][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 98.812113][ T5065] RIP: 0010:__local_bh_enable_ip+0xc3/0x120 [ 98.818014][ T5065] Code: 00 e8 81 6c 0b 00 e8 4c 69 42 00 fb 65 8b 05 cc 34 b2 7e 85 c0 74 52 5b 5d c3 cc cc cc cc 65 8b 05 4e e9 b0 7e 85 c0 75 9e 90 <0f> 0b 90 eb 98 e8 73 67 42 00 eb 99 48 89 ef e8 f9 df 19 00 eb a2 [ 98.837632][ T5065] RSP: 0018:ffffc900033df350 EFLAGS: 00010046 [ 98.843703][ T5065] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 1ffffffff1f3d467 [ 98.851678][ T5065] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff88cb2222 [ 98.859652][ T5065] RBP: ffffffff88cb2222 R08: 0000000000000000 R09: ffffed100fc7b64f [ 98.867629][ T5065] R10: ffff88807e3db27b R11: ffffffff81e6fb83 R12: ffff88807e3db268 [ 98.875605][ T5065] R13: ffff88807e3db268 R14: ffff88807e3db268 R15: 0000000000000000 [ 98.883596][ T5065] FS: 00005555732bd380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 98.892538][ T5065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.898630][ T0] [ 98.899118][ T5065] CR2: 0000000000000000 CR3: 00000000295b2000 CR4: 00000000003506f0 [ 98.901446][ T0] ====================================================== [ 98.901457][ T0] WARNING: possible circular locking dependency detected [ 98.909406][ T5065] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 98.916405][ T0] 6.8.0-syzkaller-08951-gfe46a7dd189e #0 Not tainted [ 98.923404][ T5065] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 98.931364][ T0] ------------------------------------------------------ [ 98.931375][ T0] swapper/0/0 is trying to acquire lock: [ 98.938020][ T5065] Call Trace: [ 98.938032][ T5065] [ 98.945978][ T0] ffff88807d062a00 [ 98.952979][ T5065] ? show_regs+0x8c/0xa0 [ 98.958604][ T0] (&stab->lock [ 98.961884][ T5065] ? __warn+0xe5/0x390 [ 98.964805][ T0] ){+...}-{2:2} [ 98.968514][ T5065] ? __local_bh_enable_ip+0xc3/0x120 [ 98.972743][ T0] , at: sock_map_delete_elem+0xc8/0x150 [ 98.976183][ T5065] ? report_bug+0x3c0/0x580 [ 98.980319][ T0] [ 98.980319][ T0] but task is already holding lock: [ 98.980329][ T0] ffff8880b943e698 [ 98.983766][ T5065] ? handle_bug+0x3d/0x70 [ 98.989031][ T0] (&rq->__lock [ 98.994555][ T5065] ? exc_invalid_op+0x17/0x50 [ 98.999138][ T0] ){-.-.}-{2:2} [ 99.006576][ T5065] ? asm_exc_invalid_op+0x1a/0x20 [ 99.010281][ T0] , at: raw_spin_rq_lock_nested+0x29/0x130 [ 99.014599][ T5065] ? sock_map_unref+0x3b2/0x6e0 [ 99.018045][ T0] [ 99.018045][ T0] which lock already depends on the new lock. [ 99.018045][ T0] [ 99.018055][ T0] [ 99.018055][ T0] the existing dependency chain (in reverse order) is: [ 99.022735][ T5065] ? kasan_save_stack+0x33/0x60 [ 99.026176][ T0] [ 99.026176][ T0] -> #5 ( [ 99.031190][ T5065] ? sock_map_unref+0x3b2/0x6e0 [ 99.036979][ T0] &rq->__lock){-.-.}-{2:2} [ 99.041813][ T5065] ? __local_bh_enable_ip+0xc3/0x120 [ 99.052202][ T0] : [ 99.052212][ T0] _raw_spin_lock_nested+0x31/0x40 [ 99.061207][ T5065] sock_map_unref+0x3b2/0x6e0 [ 99.066047][ T0] raw_spin_rq_lock_nested+0x29/0x130 [ 99.071152][ T5065] ? __pfx_bpf_map_delete_elem+0x10/0x10 [ 99.075984][ T0] task_fork_fair+0x70/0x240 [ 99.080478][ T5065] sock_map_delete_elem+0xf0/0x150 [ 99.085757][ T0] sched_cgroup_fork+0x3cf/0x510 [ 99.088166][ T5065] ___bpf_prog_run+0x3e51/0xae80 [ 99.093778][ T0] copy_process+0x4106/0x9160 [ 99.098479][ T5065] __bpf_prog_run32+0xc1/0x100 [ 99.104352][ T0] kernel_clone+0xfd/0x940 [ 99.110056][ T5065] ? __pfx___bpf_prog_run32+0x10/0x10 [ 99.115146][ T0] user_mode_thread+0xb4/0xf0 [ 99.120246][ T5065] ? __pfx_lock_acquire+0x10/0x10 [ 99.125695][ T0] rest_init+0x27/0x2b0 [ 99.130619][ T5065] ? __pfx___cant_migrate+0x10/0x10 [ 99.135813][ T0] arch_call_rest_init+0x13/0x40 [ 99.140558][ T5065] bpf_trace_run2+0x151/0x420 [ 99.145471][ T0] start_kernel+0x3a3/0x490 [ 99.150856][ T5065] ? __pfx_bpf_trace_run2+0x10/0x10 [ 99.156060][ T0] x86_64_start_reservations+0x18/0x30 [ 99.161095][ T5065] __bpf_trace_tlb_flush+0xd2/0x110 [ 99.165754][ T0] x86_64_start_kernel+0xb2/0xc0 [ 99.170940][ T5065] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 99.176380][ T0] common_startup_64+0x13e/0x148 [ 99.181045][ T5065] ? __phys_addr+0xbc/0x150 [ 99.186056][ T0] [ 99.186056][ T0] -> #4 ( [ 99.191234][ T5065] ? trace_tlb_flush+0x51/0x150 [ 99.197195][ T0] &p->pi_lock){-.-.}-{2:2} [ 99.202378][ T5065] trace_tlb_flush+0xeb/0x150 [ 99.207818][ T0] : [ 99.207827][ T0] _raw_spin_lock_irqsave+0x3a/0x60 [ 99.213617][ T5065] switch_mm_irqs_off+0x68b/0xbc0 [ 99.219319][ T0] try_to_wake_up+0x9a/0x13e0 [ 99.224164][ T5065] ? trace_tlb_flush+0x6/0x150 [ 99.229260][ T0] __wake_up_common+0x131/0x1e0 [ 99.234094][ T5065] ? trace_tlb_flush+0x6/0x150 [ 99.238496][ T0] __wake_up+0x31/0x60 [ 99.243158][ T5065] __text_poke+0x543/0xcb0 [ 99.245566][ T0] tty_port_default_wakeup+0x2a/0x40 [ 99.251357][ T5065] ? __pfx_text_poke_memcpy+0x10/0x10 [ 99.256368][ T0] serial8250_tx_chars+0x55a/0x8b0 [ 99.261559][ T5065] ? __pfx___text_poke+0x10/0x10 [ 99.266326][ T0] serial8250_handle_irq+0x5d3/0x780 [ 99.271683][ T5065] ? trace_tlb_flush+0x6/0x150 [ 99.276426][ T0] serial8250_default_handle_irq+0x9a/0x210 [ 99.281116][ T5065] ? trace_tlb_flush+0x6/0x150 [ 99.286330][ T0] serial8250_interrupt+0x103/0x210 [ 99.292120][ T5065] text_poke_bp_batch+0x1cd/0x760 [ 99.297557][ T0] __handle_irq_event_percpu+0x229/0x750 [ 99.303172][ T5065] ? arch_jump_label_transform_apply+0x17/0x30 [ 99.308176][ T0] handle_irq_event+0xab/0x1e0 [ 99.313967][ T5065] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 99.318711][ T0] handle_edge_irq+0x263/0xd10 [ 99.325101][ T5065] ? __jump_label_patch+0x1db/0x400 [ 99.329847][ T0] __common_interrupt+0xde/0x250 [ 99.335549][ T5065] ? arch_jump_label_transform_queue+0xc0/0x120 [ 99.340576][ T0] common_interrupt+0xab/0xd0 [ 99.346743][ T5065] text_poke_finish+0x30/0x40 [ 99.352875][ T0] asm_common_interrupt+0x26/0x40 [ 99.358145][ T5065] arch_jump_label_transform_apply+0x1c/0x30 [ 99.363666][ T0] _raw_spin_unlock_irqrestore+0x31/0x80 [ 99.368938][ T5065] jump_label_update+0x1d7/0x400 [ 99.374132][ T0] serial_port_runtime_resume+0x2b7/0x340 [ 99.379575][ T5065] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 99.385801][ T0] __rpm_callback+0xc5/0x4c0 [ 99.391003][ T5065] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 99.395664][ T0] rpm_callback+0x1da/0x220 [ 99.401198][ T5065] static_key_enable_cpuslocked+0x1b7/0x270 [ 99.407169][ T0] rpm_resume+0xcf9/0x12f0 [ 99.413344][ T5065] static_key_enable+0x1a/0x20 [ 99.418263][ T0] pm_runtime_work+0x10c/0x150 [ 99.424488][ T5065] tracepoint_add_func+0xa4c/0xe50 [ 99.430275][ T0] process_one_work+0x9a9/0x1a60 [ 99.435378][ T5065] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 99.441163][ T0] worker_thread+0x6c8/0xf70 [ 99.446279][ T5065] tracepoint_probe_register_prio_may_exist+0xbd/0x110 [ 99.452156][ T0] kthread+0x2c1/0x3a0 [ 99.457089][ T5065] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 99.461830][ T0] ret_from_fork+0x45/0x80 [ 99.467110][ T5065] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 99.472201][ T0] ret_from_fork_asm+0x1a/0x30 [ 99.477640][ T5065] ? bpf_link_prime+0x8a/0x460 [ 99.483423][ T0] [ 99.483423][ T0] -> #3 ( [ 99.488519][ T5065] ? __local_bh_enable_ip+0xa4/0x120 [ 99.495392][ T0] &tty->write_wait){-.-.}-{2:2} [ 99.499993][ T5065] bpf_probe_register+0x164/0x1d0 [ 99.507429][ T0] : [ 99.507437][ T0] _raw_spin_lock_irqsave+0x3a/0x60 [ 99.512357][ T5065] bpf_raw_tp_link_attach+0x2e5/0x610 [ 99.518142][ T0] __wake_up+0x1c/0x60 [ 99.523407][ T5065] ? find_held_lock+0x2d/0x110 [ 99.528147][ T0] tty_port_default_wakeup+0x2a/0x40 [ 99.533241][ T5065] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 99.538510][ T0] serial8250_tx_chars+0x55a/0x8b0 [ 99.543347][ T5065] ? __might_fault+0x13b/0x190 [ 99.548350][ T0] serial8250_handle_irq+0x5d3/0x780 [ 99.550767][ T5065] ? __pfx_lock_release+0x10/0x10 [ 99.556467][ T0] serial8250_default_handle_irq+0x9a/0x210 [ 99.561838][ T5065] ? __fget_light+0x176/0x210 [ 99.566497][ T0] serial8250_interrupt+0x103/0x210 [ 99.571248][ T5065] ? __bpf_prog_get+0xa0/0x2f0 [ 99.577034][ T0] __handle_irq_event_percpu+0x229/0x750 [ 99.582914][ T5065] __sys_bpf+0x3a0/0x4b40 [ 99.588544][ T0] handle_irq_event+0xab/0x1e0 [ 99.593292][ T5065] ? __pfx_lock_acquire+0x10/0x10 [ 99.599076][ T0] handle_edge_irq+0x263/0xd10 [ 99.604100][ T5065] ? ptrace_stop.part.0+0x44a/0x940 [ 99.610494][ T0] __common_interrupt+0xde/0x250 [ 99.615156][ T5065] ? __pfx___sys_bpf+0x10/0x10 [ 99.620856][ T0] common_interrupt+0xab/0xd0 [ 99.625605][ T5065] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 99.631740][ T0] asm_common_interrupt+0x26/0x40 [ 99.636052][ T5065] ? cgroup_update_frozen+0x144/0x6b0 [ 99.641320][ T0] _raw_spin_unlock_irqrestore+0x31/0x80 [ 99.646339][ T5065] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 99.651597][ T0] serial_port_runtime_resume+0x2b7/0x340 [ 99.656886][ T5065] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.662323][ T0] __rpm_callback+0xc5/0x4c0 [ 99.667070][ T5065] ? lockdep_hardirqs_on+0x7c/0x110 [ 99.672263][ T0] rpm_callback+0x1da/0x220 [ 99.677625][ T5065] __x64_sys_bpf+0x78/0xc0 [ 99.683148][ T0] rpm_resume+0xcf9/0x12f0 [ 99.688611][ T5065] do_syscall_64+0xd2/0x260 [ 99.694740][ T0] pm_runtime_work+0x10c/0x150 [ 99.701052][ T5065] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 99.707268][ T0] process_one_work+0x9a9/0x1a60 [ 99.712456][ T5065] RIP: 0033:0x7ff61e228fb9 [ 99.717544][ T0] worker_thread+0x6c8/0xf70 [ 99.722821][ T5065] Code: Unable to access opcode bytes at 0x7ff61e228f8f. [ 99.727825][ T0] kthread+0x2c1/0x3a0 [ 99.732225][ T5065] RSP: 002b:00007fffcfb4b8a8 EFLAGS: 00000246 [ 99.737144][ T0] ret_from_fork+0x45/0x80 [ 99.741635][ T5065] ORIG_RAX: 0000000000000141 [ 99.746909][ T0] ret_from_fork_asm+0x1a/0x30 [ 99.752790][ T5065] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff61e228fb9 [ 99.758234][ T0] [ 99.758234][ T0] -> #2 ( [ 99.762636][ T5065] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000011 [ 99.767732][ T0] &port_lock_key){-.-.}-{2:2} [ 99.774734][ T5065] RBP: 0000000000000000 R08: 0000000000000140 R09: 0000000000000140 [ 99.779303][ T0] : [ 99.779311][ T0] _raw_spin_lock_irqsave+0x3a/0x60 [ 99.785349][ T5065] R10: 0000000000000140 R11: 0000000000000246 R12: 0000000000000000 [ 99.790267][ T0] serial8250_console_write+0xaa6/0x1090 [ 99.794929][ T5065] R13: 0000000000000000 R14: 00007fffcfb4b8d7 R15: 000000000000000c [ 99.800193][ T0] console_flush_all+0x53f/0xd70 [ 99.808153][ T5065] [ 99.813232][ T0] console_unlock+0xae/0x290 [ 99.821206][ T5065] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 99.821222][ T5065] CPU: 1 PID: 5065 Comm: syz-executor149 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 99.821256][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 99.821274][ T5065] Call Trace: [ 99.821288][ T5065] [ 99.821298][ T5065] dump_stack_lvl+0x3d/0x1f0 [ 99.821337][ T5065] panic+0x6f5/0x7a0 [ 99.821384][ T5065] ? __pfx_panic+0x10/0x10 [ 99.821428][ T5065] ? show_trace_log_lvl+0x363/0x500 [ 99.821486][ T5065] ? check_panic_on_warn+0x1f/0xb0 [ 99.821534][ T5065] ? __local_bh_enable_ip+0xc3/0x120 [ 99.821572][ T5065] check_panic_on_warn+0xab/0xb0 [ 99.821620][ T5065] __warn+0xf1/0x390 [ 99.821646][ T5065] ? __local_bh_enable_ip+0xc3/0x120 [ 99.821683][ T5065] report_bug+0x3c0/0x580 [ 99.821716][ T5065] handle_bug+0x3d/0x70 [ 99.821743][ T5065] exc_invalid_op+0x17/0x50 [ 99.821772][ T5065] asm_exc_invalid_op+0x1a/0x20 [ 99.821817][ T5065] RIP: 0010:__local_bh_enable_ip+0xc3/0x120 [ 99.821858][ T5065] Code: 00 e8 81 6c 0b 00 e8 4c 69 42 00 fb 65 8b 05 cc 34 b2 7e 85 c0 74 52 5b 5d c3 cc cc cc cc 65 8b 05 4e e9 b0 7e 85 c0 75 9e 90 <0f> 0b 90 eb 98 e8 73 67 42 00 eb 99 48 89 ef e8 f9 df 19 00 eb a2 [ 99.821887][ T5065] RSP: 0018:ffffc900033df350 EFLAGS: 00010046 [ 99.821911][ T5065] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 1ffffffff1f3d467 [ 99.821931][ T5065] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff88cb2222 [ 99.821951][ T5065] RBP: ffffffff88cb2222 R08: 0000000000000000 R09: ffffed100fc7b64f [ 99.821971][ T5065] R10: ffff88807e3db27b R11: ffffffff81e6fb83 R12: ffff88807e3db268 [ 99.821992][ T5065] R13: ffff88807e3db268 R14: ffff88807e3db268 R15: 0000000000000000 [ 99.822014][ T5065] ? sock_map_unref+0x3b2/0x6e0 [ 99.822062][ T5065] ? kasan_save_stack+0x33/0x60 [ 99.822101][ T5065] ? sock_map_unref+0x3b2/0x6e0 [ 99.822136][ T5065] sock_map_unref+0x3b2/0x6e0 [ 99.822172][ T5065] ? __pfx_bpf_map_delete_elem+0x10/0x10 [ 99.822206][ T5065] sock_map_delete_elem+0xf0/0x150 [ 99.822243][ T5065] ___bpf_prog_run+0x3e51/0xae80 [ 99.822291][ T5065] __bpf_prog_run32+0xc1/0x100 [ 99.822322][ T5065] ? __pfx___bpf_prog_run32+0x10/0x10 [ 99.822354][ T5065] ? __pfx_lock_acquire+0x10/0x10 [ 99.822399][ T5065] ? __pfx___cant_migrate+0x10/0x10 [ 99.822434][ T5065] bpf_trace_run2+0x151/0x420 [ 99.822469][ T5065] ? __pfx_bpf_trace_run2+0x10/0x10 [ 99.822501][ T5065] __bpf_trace_tlb_flush+0xd2/0x110 [ 99.822541][ T5065] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 99.822581][ T5065] ? __phys_addr+0xbc/0x150 [ 99.822609][ T5065] ? trace_tlb_flush+0x51/0x150 [ 99.822641][ T5065] trace_tlb_flush+0xeb/0x150 [ 99.822673][ T5065] switch_mm_irqs_off+0x68b/0xbc0 [ 99.822708][ T5065] ? trace_tlb_flush+0x6/0x150 [ 99.822738][ T5065] ? trace_tlb_flush+0x6/0x150 [ 99.822767][ T5065] __text_poke+0x543/0xcb0 [ 99.822799][ T5065] ? __pfx_text_poke_memcpy+0x10/0x10 [ 99.822834][ T5065] ? __pfx___text_poke+0x10/0x10 [ 99.822866][ T5065] ? trace_tlb_flush+0x6/0x150 [ 99.822897][ T5065] ? trace_tlb_flush+0x6/0x150 [ 99.822926][ T5065] text_poke_bp_batch+0x1cd/0x760 [ 99.822963][ T5065] ? arch_jump_label_transform_apply+0x17/0x30 [ 99.823005][ T5065] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 99.823041][ T5065] ? __jump_label_patch+0x1db/0x400 [ 99.823081][ T5065] ? arch_jump_label_transform_queue+0xc0/0x120 [ 99.823124][ T5065] text_poke_finish+0x30/0x40 [ 99.823159][ T5065] arch_jump_label_transform_apply+0x1c/0x30 [ 99.823201][ T5065] jump_label_update+0x1d7/0x400 [ 99.823248][ T5065] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 99.823286][ T5065] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 99.823325][ T5065] static_key_enable_cpuslocked+0x1b7/0x270 [ 99.823370][ T5065] static_key_enable+0x1a/0x20 [ 99.823413][ T5065] tracepoint_add_func+0xa4c/0xe50 [ 99.823461][ T5065] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 99.823500][ T5065] tracepoint_probe_register_prio_may_exist+0xbd/0x110 [ 99.823547][ T5065] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 99.823612][ T5065] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 99.823654][ T5065] ? bpf_link_prime+0x8a/0x460 [ 99.823691][ T5065] ? __local_bh_enable_ip+0xa4/0x120 [ 99.823729][ T5065] bpf_probe_register+0x164/0x1d0 [ 99.823769][ T5065] bpf_raw_tp_link_attach+0x2e5/0x610 [ 99.823809][ T5065] ? find_held_lock+0x2d/0x110 [ 99.823843][ T5065] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 99.823884][ T5065] ? __might_fault+0x13b/0x190 [ 99.823915][ T5065] ? __pfx_lock_release+0x10/0x10 [ 99.823962][ T5065] ? __fget_light+0x176/0x210 [ 99.823996][ T5065] ? __bpf_prog_get+0xa0/0x2f0 [ 99.824025][ T5065] __sys_bpf+0x3a0/0x4b40 [ 99.824063][ T5065] ? __pfx_lock_acquire+0x10/0x10 [ 99.824109][ T5065] ? ptrace_stop.part.0+0x44a/0x940 [ 99.824147][ T5065] ? __pfx___sys_bpf+0x10/0x10 [ 99.824184][ T5065] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 99.824216][ T5065] ? cgroup_update_frozen+0x144/0x6b0 [ 99.824261][ T5065] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 99.824303][ T5065] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.824338][ T5065] ? lockdep_hardirqs_on+0x7c/0x110 [ 99.824381][ T5065] __x64_sys_bpf+0x78/0xc0 [ 99.824422][ T5065] do_syscall_64+0xd2/0x260 [ 99.824477][ T5065] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 99.824524][ T5065] RIP: 0033:0x7ff61e228fb9 [ 99.824545][ T5065] Code: Unable to access opcode bytes at 0x7ff61e228f8f. [ 99.824559][ T5065] RSP: 002b:00007fffcfb4b8a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.824586][ T5065] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff61e228fb9 [ 99.824606][ T5065] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000011 [ 99.824626][ T5065] RBP: 0000000000000000 R08: 0000000000000140 R09: 0000000000000140 [ 99.824646][ T5065] R10: 0000000000000140 R11: 0000000000000246 R12: 0000000000000000 [ 99.824665][ T5065] R13: 0000000000000000 R14: 00007fffcfb4b8d7 R15: 000000000000000c [ 99.824689][ T5065] [ 100.978815][ T5065] Shutting down cpus with NMI [ 101.601696][ T5065] Kernel Offset: disabled [ 101.606027][ T5065] Rebooting in 86400 seconds..