------------[ cut here ]------------ DEBUG_LOCKS_WARN_ON(1) WARNING: CPU: 0 PID: 8566 at kernel/locking/lockdep.c:234 hlock_class kernel/locking/lockdep.c:234 [inline] WARNING: CPU: 0 PID: 8566 at kernel/locking/lockdep.c:234 check_wait_context kernel/locking/lockdep.c:4852 [inline] WARNING: CPU: 0 PID: 8566 at kernel/locking/lockdep.c:234 __lock_acquire+0x564/0x2100 kernel/locking/lockdep.c:5178 Modules linked in: CPU: 0 UID: 0 PID: 8566 Comm: syz.1.523 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 RIP: 0010:hlock_class kernel/locking/lockdep.c:234 [inline] RIP: 0010:check_wait_context kernel/locking/lockdep.c:4852 [inline] RIP: 0010:__lock_acquire+0x564/0x2100 kernel/locking/lockdep.c:5178 Code: 00 00 83 3d 01 4f a0 0e 00 75 23 90 48 c7 c7 40 b2 2a 8c 48 c7 c6 40 b5 2a 8c e8 97 bc e4 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f RSP: 0018:ffffc90003926670 EFLAGS: 00010046 RAX: d01d5edc3376ee00 RBX: 0000000000001b20 RCX: 0000000000080000 RDX: dffffc0000000000 RSI: 0000000000004206 RDI: 0000000000004207 RBP: 00000000000c1b20 R08: ffffffff81819e52 R09: 1ffff110170c519a R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff88801f7f64d4 R13: 0000000000000005 R14: 1ffff11003efeca7 R15: ffff88801f7f6538 FS: 00007f93dbb6d6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b3040cff8 CR3: 0000000056466000 CR4: 0000000000350ef0 Call Trace: <TASK> lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5851 _raw_spin_lock_nested+0x31/0x40 kernel/locking/spinlock.c:378 raw_spin_rq_lock_nested+0xb0/0x140 kernel/sched/core.c:606 raw_spin_rq_lock kernel/sched/sched.h:1521 [inline] rq_lock kernel/sched/sched.h:1852 [inline] __schedule+0x357/0x4c90 kernel/sched/core.c:6688 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7087 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:707 RIP: 0010:unwind_next_frame+0x18ed/0x22d0 arch/x86/kernel/unwind_orc.c:672 Code: 0c 01 75 40 80 3d 52 04 d8 11 00 75 37 c6 05 49 04 d8 11 01 e9 21 fa ff ff bf 01 00 00 00 e8 0a 36 22 00 65 8b 0d fb 88 96 7e <b0> 01 85 c9 75 73 e8 e8 f1 bc ff eb 6c 80 3d d4 bc b9 0e 00 0f 84 RSP: 0018:ffffc90003926c90 EFLAGS: 00000297 RAX: 0000000080000001 RBX: ffffc90003926d70 RCX: 0000000080000000 RDX: dffffc0000000000 RSI: ffffc90003920000 RDI: 0000000000000001 RBP: ffffc90003926d60 R08: ffffc90003927e10 R09: ffffc90003926db0 R10: dffffc0000000000 R11: fffff52000724db8 R12: dffffc0000000000 R13: ffffc90003926d60 R14: ffffc90003920000 R15: ffffc90003927e20 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:394 kasan_kmalloc include/linux/kasan.h:260 [inline] __do_kmalloc_node mm/slub.c:4294 [inline] __kmalloc_node_track_caller_noprof+0x28b/0x4c0 mm/slub.c:4313 kmemdup_noprof+0x2b/0x70 mm/util.c:136 _Z14kmemdup_noprofPKvU25pass_dynamic_object_size0mj include/linux/fortify-string.h:765 [inline] key_alloc+0x388/0xff0 security/keys/key.c:282 keyring_alloc+0x44/0xb0 security/keys/keyring.c:526 call_sbin_request_key+0x30e/0xc80 security/keys/request_key.c:140 construct_key security/keys/request_key.c:247 [inline] construct_key_and_link security/keys/request_key.c:519 [inline] request_key_and_link+0x11b2/0x19c0 security/keys/request_key.c:653 request_key_tag+0x52/0x190 security/keys/request_key.c:717 dns_query+0x31d/0x740 net/dns_resolver/dns_query.c:128 afs_probe_cell_name fs/afs/dynroot.c:134 [inline] afs_try_auto_mntpt+0x210/0x590 fs/afs/dynroot.c:170 afs_dynroot_lookup+0xc8/0x160 fs/afs/dynroot.c:206 lookup_open fs/namei.c:3629 [inline] open_last_lookups fs/namei.c:3750 [inline] path_openat+0x11b6/0x3590 fs/namei.c:3986 do_filp_open+0x27f/0x4e0 fs/namei.c:4016 do_sys_openat2+0x13e/0x1d0 fs/open.c:1428 do_sys_open fs/open.c:1443 [inline] __do_sys_openat fs/open.c:1459 [inline] __se_sys_openat fs/open.c:1454 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1454 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f93dad8d169 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f93dbb6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f93dafa5fa0 RCX: 00007f93dad8d169 RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c RBP: 00007f93dae0e2a0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f93dafa5fa0 R15: 00007ffc7ce757e8 </TASK> ---------------- Code disassembly (best guess): 0: 0c 01 or $0x1,%al 2: 75 40 jne 0x44 4: 80 3d 52 04 d8 11 00 cmpb $0x0,0x11d80452(%rip) # 0x11d8045d b: 75 37 jne 0x44 d: c6 05 49 04 d8 11 01 movb $0x1,0x11d80449(%rip) # 0x11d8045d 14: e9 21 fa ff ff jmp 0xfffffa3a 19: bf 01 00 00 00 mov $0x1,%edi 1e: e8 0a 36 22 00 call 0x22362d 23: 65 8b 0d fb 88 96 7e mov %gs:0x7e9688fb(%rip),%ecx # 0x7e968925 * 2a: b0 01 mov $0x1,%al <-- trapping instruction 2c: 85 c9 test %ecx,%ecx 2e: 75 73 jne 0xa3 30: e8 e8 f1 bc ff call 0xffbcf21d 35: eb 6c jmp 0xa3 37: 80 3d d4 bc b9 0e 00 cmpb $0x0,0xeb9bcd4(%rip) # 0xeb9bd12 3e: 0f .byte 0xf 3f: 84 .byte 0x84