[ 60.265033][ C0] [ 60.266059][ C0] ============================= [ 60.267715][ C0] [ BUG: Invalid wait context ] [ 60.269517][ C0] 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 Not tainted [ 60.272268][ C0] ----------------------------- [ 60.274170][ C0] sshd/5267 is trying to lock: [ 60.276028][ C0] ffff88805ffd7298 (&zone->lock){..-.}-{3:3}, at: __rmqueue_pcplist+0x4a2/0x2a90 [ 60.279410][ C0] other info that might help us debug this: [ 60.281350][ C0] context-{2:2} [ 60.282518][ C0] 4 locks held by sshd/5267: [ 60.284284][ C0] #0: ffff888000688ba0 (&mm->mmap_lock){++++}-{4:4}, at: vms_complete_munmap_vmas+0x196/0x8f0 [ 60.288339][ C0] #1: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: page_ext_get+0x20/0x2a0 [ 60.291812][ C0] #2: ffff88801fc3e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 60.295493][ C0] #3: ffff88801fc44ad8 (&pcp->lock){+.+.}-{3:3}, at: get_page_from_freelist+0x7d3/0x37a0 [ 60.299180][ C0] stack backtrace: [ 60.300603][ C0] CPU: 0 UID: 0 PID: 5267 Comm: sshd Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 60.304113][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.307803][ C0] Call Trace: [ 60.309081][ C0] [ 60.310191][ C0] dump_stack_lvl+0x241/0x360 [ 60.311843][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 60.313753][ C0] ? __pfx__printk+0x10/0x10 [ 60.315480][ C0] __lock_acquire+0x15a8/0x2100 [ 60.317294][ C0] lock_acquire+0x1ed/0x550 [ 60.318988][ C0] ? __rmqueue_pcplist+0x4a2/0x2a90 [ 60.320852][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 60.322666][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 60.324540][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 60.326798][ C0] ? kernel_text_address+0xa7/0xe0 [ 60.328731][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 60.330732][ C0] ? __rmqueue_pcplist+0x4a2/0x2a90 [ 60.332673][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 60.334787][ C0] __rmqueue_pcplist+0x4a2/0x2a90 [ 60.336770][ C0] ? __pfx_validate_chain+0x10/0x10 [ 60.338869][ C0] ? kasan_save_track+0x3f/0x80 [ 60.340847][ C0] get_page_from_freelist+0x886/0x37a0 [ 60.343049][ C0] __alloc_pages_noprof+0x292/0x710 [ 60.345092][ C0] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 60.347290][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 60.349768][ C0] ? __kernel_text_address+0xd/0x40 [ 60.351833][ C0] ? unwind_get_return_address+0x4d/0x90 [ 60.353907][ C0] alloc_pages_mpol_noprof+0x3e8/0x680 [ 60.355951][ C0] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 60.358295][ C0] ? stack_trace_save+0x118/0x1d0 [ 60.360298][ C0] ? alloc_pages_noprof+0x43/0x170 [ 60.362341][ C0] stack_depot_save_flags+0x72d/0x940 [ 60.364389][ C0] kasan_save_stack+0x4f/0x60 [ 60.366124][ C0] ? kasan_save_stack+0x3f/0x60 [ 60.368013][ C0] ? __kasan_record_aux_stack+0xac/0xc0 [ 60.370122][ C0] ? task_work_add+0xd9/0x490 [ 60.371974][ C0] ? task_tick_fair+0x58c/0x7b0 [ 60.373822][ C0] ? sched_tick+0x21e/0x660 [ 60.375543][ C0] ? update_process_times+0x276/0x2f0 [ 60.377680][ C0] ? tick_nohz_handler+0x37c/0x500 [ 60.379722][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 60.381852][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 60.383857][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 60.386200][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 60.388435][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 60.390724][ C0] ? __kernel_text_address+0x2c/0x40 [ 60.392699][ C0] ? unwind_get_return_address+0x4d/0x90 [ 60.394944][ C0] ? arch_stack_walk+0xfd/0x150 [ 60.396816][ C0] ? stack_trace_save+0x118/0x1d0 [ 60.398760][ C0] ? save_stack+0xfb/0x1f0 [ 60.400508][ C0] ? __reset_page_owner+0x76/0x430 [ 60.402550][ C0] ? free_unref_folios+0xe39/0x18b0 [ 60.404612][ C0] ? folios_put_refs+0x76c/0x860 [ 60.406635][ C0] ? free_pages_and_swap_cache+0x2ea/0x690 [ 60.408993][ C0] ? tlb_flush_mmu+0x3a3/0x680 [ 60.410875][ C0] ? tlb_finish_mmu+0xd4/0x200 [ 60.412774][ C0] ? vms_clear_ptes+0x437/0x530 [ 60.414635][ C0] ? vms_complete_munmap_vmas+0x210/0x8f0 [ 60.416887][ C0] ? do_vmi_align_munmap+0x5ef/0x6f0 [ 60.418993][ C0] ? do_vmi_munmap+0x24e/0x2d0 [ 60.420909][ C0] ? __vm_munmap+0x24c/0x480 [ 60.422697][ C0] ? __x64_sys_munmap+0x60/0x70 [ 60.424624][ C0] ? do_syscall_64+0xf3/0x230 [ 60.426510][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.428991][ C0] ? __phys_addr+0xba/0x170 [ 60.430757][ C0] __kasan_record_aux_stack+0xac/0xc0 [ 60.432821][ C0] task_work_add+0xd9/0x490 [ 60.434847][ C0] ? __pfx_task_work_add+0x10/0x10 [ 60.436819][ C0] ? task_scan_start+0x14c/0x430 [ 60.438719][ C0] ? task_scan_start+0x14c/0x430 [ 60.440573][ C0] ? task_scan_start+0x3f5/0x430 [ 60.442316][ C0] task_tick_fair+0x58c/0x7b0 [ 60.444027][ C0] sched_tick+0x21e/0x660 [ 60.445707][ C0] update_process_times+0x276/0x2f0 [ 60.447898][ C0] tick_nohz_handler+0x37c/0x500 [ 60.449906][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 60.452029][ C0] __hrtimer_run_queues+0x551/0xd30 [ 60.454053][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 60.456232][ C0] ? kvm_clock_get_cycles+0x52/0x70 [ 60.458257][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 60.460718][ C0] hrtimer_interrupt+0x403/0xa40 [ 60.462571][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 60.464847][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 60.466957][ C0] [ 60.468187][ C0] [ 60.469343][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 60.471617][ C0] RIP: 0010:__kernel_text_address+0x2c/0x40 [ 60.473958][ C0] Code: 1f 00 53 48 89 fb e8 43 00 00 00 85 c0 0f 95 c0 48 c7 c1 00 20 79 91 48 39 cb 0f 93 c1 48 c7 c2 af 28 94 91 48 39 d3 0f 92 c2 <20> ca 08 c2 0f b6 c2 5b c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 [ 60.481290][ C0] RSP: 0018:ffffc9000d22f010 EFLAGS: 00000293 [ 60.483663][ C0] RAX: 0000000000000001 RBX: ffffffff81f03e0c RCX: ffffffff91792000 [ 60.486748][ C0] RDX: ffffffff91942801 RSI: ffffc9000d228000 RDI: ffffffff81f03e0c [ 60.489782][ C0] RBP: ffffc9000d22f0d0 R08: ffffc9000d22fd90 R09: 0000000000000000 [ 60.492812][ C0] R10: ffffc9000d22f090 R11: fffff52001a45e14 R12: ffff88800097c880 [ 60.495726][ C0] R13: ffffffff818b39d0 R14: dffffc0000000000 R15: 1ffff92001a45e11 [ 60.498419][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 60.500849][ C0] ? __vm_munmap+0x24c/0x480 [ 60.502726][ C0] ? __init_begin+0x41000/0x41000 [ 60.504783][ C0] ? no_hash_pointers_enable+0xa1/0xe0 [ 60.506886][ C0] ? __vm_munmap+0x24c/0x480 [ 60.508815][ C0] unwind_get_return_address+0x4d/0x90 [ 60.510910][ C0] arch_stack_walk+0xfd/0x150 [ 60.512674][ C0] ? __vm_munmap+0x24c/0x480 [ 60.514423][ C0] stack_trace_save+0x118/0x1d0 [ 60.516316][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 60.518385][ C0] save_stack+0xfb/0x1f0 [ 60.519980][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 60.521931][ C0] ? __pfx_save_stack+0x10/0x10 [ 60.523822][ C0] ? free_unref_folios+0xe39/0x18b0 [ 60.525792][ C0] ? folios_put_refs+0x76c/0x860 [ 60.527771][ C0] ? free_pages_and_swap_cache+0x2ea/0x690 [ 60.529876][ C0] ? tlb_flush_mmu+0x3a3/0x680 [ 60.531558][ C0] ? tlb_finish_mmu+0xd4/0x200 [ 60.533332][ C0] ? vms_clear_ptes+0x437/0x530 [ 60.535102][ C0] ? vms_complete_munmap_vmas+0x210/0x8f0 [ 60.537362][ C0] ? do_vmi_align_munmap+0x5ef/0x6f0 [ 60.539401][ C0] ? do_vmi_munmap+0x24e/0x2d0 [ 60.541308][ C0] ? page_ext_get+0x20/0x2a0 [ 60.543151][ C0] __reset_page_owner+0x76/0x430 [ 60.545115][ C0] ? page_ext_get+0x1d6/0x2a0 [ 60.547207][ C0] free_unref_folios+0xe39/0x18b0 [ 60.549183][ C0] folios_put_refs+0x76c/0x860 [ 60.551030][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 60.553120][ C0] ? free_swap_cache+0x115/0x3e0 [ 60.554976][ C0] free_pages_and_swap_cache+0x2ea/0x690 [ 60.557190][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 60.559612][ C0] ? flush_tlb_mm_range+0x3df/0x5c0 [ 60.561545][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 60.563477][ C0] ? tlb_table_flush+0x143/0x410 [ 60.565370][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 60.567251][ C0] tlb_flush_mmu+0x3a3/0x680 [ 60.569096][ C0] tlb_finish_mmu+0xd4/0x200 [ 60.570780][ C0] vms_clear_ptes+0x437/0x530 [ 60.572664][ C0] ? __pfx_vms_clear_ptes+0x10/0x10 [ 60.574564][ C0] vms_complete_munmap_vmas+0x210/0x8f0 [ 60.576668][ C0] ? __mas_set_range+0x133/0x3c0 [ 60.578555][ C0] do_vmi_align_munmap+0x5ef/0x6f0 [ 60.580455][ C0] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 60.582449][ C0] ? mas_find+0x8c0/0xbb0 [ 60.584144][ C0] ? __vm_munmap+0x1fe/0x480 [ 60.585838][ C0] do_vmi_munmap+0x24e/0x2d0 [ 60.587505][ C0] __vm_munmap+0x24c/0x480 [ 60.589220][ C0] ? __pfx___vm_munmap+0x10/0x10 [ 60.591039][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 60.593215][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 60.595430][ C0] ? exc_page_fault+0x590/0x8b0 [ 60.597315][ C0] __x64_sys_munmap+0x60/0x70 [ 60.599070][ C0] do_syscall_64+0xf3/0x230 [ 60.600844][ C0] ? clear_bhb_loop+0x35/0x90 [ 60.602550][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.604667][ C0] RIP: 0033:0x7f8858f04817 [ 60.606209][ C0] Code: ff ff 76 10 48 8b 15 10 36 0d 00 f7 d8 64 89 02 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 35 0d 00 f7 d8 64 89 01 48 [ 60.613231][ C0] RSP: 002b:00007ffea45e5d48 EFLAGS: 00000207 ORIG_RAX: 000000000000000b [ 60.616353][ C0] RAX: ffffffffffffffda RBX: fffffffffffffe98 RCX: 00007f8858f04817 [ 60.619426][ C0] RDX: 0000000000000000 RSI: 0000000000291000 RDI: 00007f8858b43000 [ 60.622459][ C0] RBP: 0000000000000020 R08: 00007f8858b43000 R09: 0000000000000000 [ 60.625389][ C0] R10: 0000000000000022 R11: 0000000000000207 R12: 00007f8858b43000 [ 60.628533][ C0] R13: 00007f8858b43010 R14: 0000000000290000 R15: 00007ffea45e5f28 [ 60.631670][ C0] Warning: Permanently added '[localhost]:15518' (ED25519) to the list of known hosts. 2025/01/03 14:51:41 ignoring optional flag "sandboxArg"="0" 2025/01/03 14:51:41 parsed 1 programs [ 69.830004][ T5303] cgroup: Unknown subsys name 'net' [ 69.887945][ T5303] cgroup: Unknown subsys name 'cpuset' [ 69.891553][ T5303] cgroup: Unknown subsys name 'rlimit' [ 70.987114][ T5303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.055654][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.058475][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.061370][ T5322] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.064408][ T5322] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.067462][ T5322] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.070499][ T5322] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.357021][ T5318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.000585][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.003667][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.199767][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.216311][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 VM DIAGNOSIS: 14:51:40 Registers: info registers vcpu 0 CPU#0 RAX=ffffc9000d2bf490 RBX=1ffffffff2146eff RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffc9000d2bf4a0 RBP=dffffc0000000000 RSP=ffffc9000d2bf370 R8 =ffffc9000d2bf49f R9 =0000000000000000 R10=ffffc9000d2bf490 R11=fffff52001a57e94 R12=ffffc9000d2c0000 R13=ffffc9000d2bf440 R14=ffffffff81612e20 R15=ffffc9000d2bf490 RIP=ffffffff814bbe6a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe64fb3fa8 CR3=0000000043efe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000ffff3f01 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000002 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c5c9a374c5c9a374 c5c9a374c5c9a374 c5c9a374c5c9a374 c5c9a374c5c9a374 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f9dcf2d7f9dcf2d7 f9dcf2d7f9dcf2d7 f9dcf2d7f9dcf2d7 f9dcf2d7f9dcf2d7 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f957b425f957b42 5f957b425f957b42 5f957b425f957b42 5f957b425f957b42 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a9112804a911280 4a9112804a911280 4a9112804a911280 4a9112804a911280 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cbeefc43cbeefc43 cbeefc43cbeefc43 cbeefc43cbeefc43 cbeefc43cbeefc43 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5631a46c5631a46c 5631a46c5631a46c 5631a46c5631a46c 5631a46c5631a46c ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2946a34f2946a34f 2946a34f2946a34f 2946a34f2946a34f 2946a34f2946a34f ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000800000006 0000000400000002 0000000700000005 0000000300000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c0000000c000000 0c0000000c000000 0c0000000c000000 0c0000000c000000