Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 41.140179][ T2923] [ 41.142515][ T2923] ===================================================== [ 41.149425][ T2923] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 41.156856][ T2923] 5.15.152-syzkaller #0 Not tainted [ 41.162042][ T2923] ----------------------------------------------------- [ 41.168947][ T2923] kworker/0:3/2923 [HC0[0]:SC0[2]:HE0:SE0] is trying to acquire: [ 41.176646][ T2923] ffff88807ab8d820 (&htab->buckets[i].lock){+...}-{2:2}, at: sock_hash_delete_elem+0xac/0x2f0 [ 41.186948][ T2923] [ 41.186948][ T2923] and this task is already holding: [ 41.194295][ T2923] ffff8880b9a39b18 (&pool->lock){-.-.}-{2:2}, at: __queue_work+0x56d/0xd00 [ 41.202887][ T2923] which would create a new lock dependency: [ 41.208750][ T2923] (&pool->lock){-.-.}-{2:2} -> (&htab->buckets[i].lock){+...}-{2:2} [ 41.216816][ T2923] [ 41.216816][ T2923] but this new dependency connects a HARDIRQ-irq-safe lock: [ 41.226244][ T2923] (&pool->lock){-.-.}-{2:2} [ 41.226262][ T2923] [ 41.226262][ T2923] ... which became HARDIRQ-irq-safe at: [ 41.238506][ T2923] lock_acquire+0x1db/0x4f0 [ 41.243079][ T2923] _raw_spin_lock+0x2a/0x40 [ 41.247646][ T2923] __queue_work+0x56d/0xd00 [ 41.252217][ T2923] queue_work_on+0x14b/0x250 [ 41.256881][ T2923] hrtimer_run_queues+0x14b/0x450 [ 41.261971][ T2923] update_process_times+0xca/0x200 [ 41.267149][ T2923] tick_periodic+0x197/0x210 [ 41.271807][ T2923] tick_handle_periodic+0x46/0x150 [ 41.276984][ T2923] __sysvec_apic_timer_interrupt+0x139/0x470 [ 41.283029][ T2923] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 41.288734][ T2923] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 41.294782][ T2923] default_idle+0xb/0x10 [ 41.299087][ T2923] default_idle_call+0x81/0xc0 [ 41.303914][ T2923] do_idle+0x271/0x670 [ 41.308059][ T2923] cpu_startup_entry+0x14/0x20 [ 41.312887][ T2923] start_kernel+0x48c/0x535 [ 41.317457][ T2923] secondary_startup_64_no_verify+0xb1/0xbb [ 41.323416][ T2923] [ 41.323416][ T2923] to a HARDIRQ-irq-unsafe lock: [ 41.330409][ T2923] (&htab->buckets[i].lock){+...}-{2:2} [ 41.330429][ T2923] [ 41.330429][ T2923] ... which became HARDIRQ-irq-unsafe at: [ 41.343797][ T2923] ... [ 41.343802][ T2923] lock_acquire+0x1db/0x4f0 [ 41.350930][ T2923] _raw_spin_lock_bh+0x31/0x40 [ 41.355758][ T2923] sock_hash_free+0x14c/0x780 [ 41.360582][ T2923] process_one_work+0x8a1/0x10c0 [ 41.365582][ T2923] worker_thread+0xaca/0x1280 [ 41.370321][ T2923] kthread+0x3f6/0x4f0 [ 41.374452][ T2923] ret_from_fork+0x1f/0x30 [ 41.378933][ T2923] [ 41.378933][ T2923] other info that might help us debug this: [ 41.378933][ T2923] [ 41.389134][ T2923] Possible interrupt unsafe locking scenario: [ 41.389134][ T2923] [ 41.397423][ T2923] CPU0 CPU1 [ 41.402762][ T2923] ---- ---- [ 41.408100][ T2923] lock(&htab->buckets[i].lock); [ 41.412507][ C1] ------------[ cut here ]------------ [ 41.413101][ T2923] local_irq_disable(); [ 41.413107][ T2923] lock(&pool->lock [ 41.418542][ C1] WARNING: CPU: 1 PID: 3571 at kernel/softirq.c:308 __local_bh_disable_ip+0x1ec/0x210 [ 41.425269][ T2923] ); [ 41.425273][ T2923] lock( [ 41.431649][ C1] Modules linked in: [ 41.441151][ T2923] &htab->buckets[i].lock); [ 41.443626][ C1] CPU: 1 PID: 3571 Comm: syz-executor948 Not tainted 5.15.152-syzkaller #0 [ 41.449051][ T2923] [ 41.449055][ T2923] lock( [ 41.452913][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 41.457293][ T2923] &pool->lock); [ 41.465842][ C1] RIP: 0010:__local_bh_disable_ip+0x1ec/0x210 [ 41.469273][ T2923] [ 41.469273][ T2923] *** DEADLOCK *** [ 41.469273][ T2923] [ 41.469278][ T2923] 6 locks held by kworker/0:3/2923: [ 41.472354][ C1] Code: 00 00 43 c6 44 2c 0b 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 00 00 00 75 2d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 a0 fe ff ff e8 58 6b ce 08 41 f7 c6 00 02 00 00 0f 85 52 [ 41.482377][ T2923] #0: ffff888011c70938 [ 41.485806][ C1] RSP: 0018:ffffc90000dd0960 EFLAGS: 00010006 [ 41.491837][ T2923] ((wq_completion)events [ 41.499953][ C1] [ 41.499959][ C1] RAX: 0000000000010004 RBX: ffffffff884eb3fc RCX: ffff888078868000 [ 41.505117][ T2923] ){+.+.}-{0:0} [ 41.524690][ C1] RDX: dffffc0000000000 RSI: 0000000000000201 RDI: ffffffff884eb3fc [ 41.528812][ T2923] , at: process_one_work+0x78a/0x10c0 [ 41.534844][ C1] RBP: ffffc90000dd0a28 R08: 0000000000000005 R09: ffffffff884eeaae [ 41.539140][ T2923] #1: ffffc9000c00fd20 [ 41.541439][ C1] R10: 000000000000000c R11: ffff888078868000 R12: dffffc0000000000 [ 41.549380][ T2923] ((work_completion)(&map->work) [ 41.552808][ C1] R13: 1ffff920001ba130 R14: ffffc90000dd09c0 R15: 0000000000000201 [ 41.560749][ T2923] ){+.+.}-{0:0} [ 41.566086][ C1] FS: 0000555556db8380(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 41.574034][ T2923] , at: process_one_work+0x7d0/0x10c0 [ 41.578156][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.586097][ T2923] #2: ffffffff8c923ce8 [ 41.591091][ C1] CR2: 0000555556db8ca8 CR3: 0000000071716000 CR4: 00000000003506e0 [ 41.599033][ T2923] (rcu_state.exp_mutex [ 41.602463][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.611377][ T2923] ){+.+.}-{3:3} [ 41.616715][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.623267][ T2923] , at: synchronize_rcu_expedited+0x280/0x740 [ 41.627390][ C1] Call Trace: [ 41.627398][ C1] [ 41.635334][ T2923] #3: ffffffff8c91f720 [ 41.639471][ C1] ? __warn+0x15b/0x300 [ 41.647410][ T2923] (rcu_read_lock [ 41.650841][ C1] ? __local_bh_disable_ip+0x1ec/0x210 [ 41.658780][ T2923] ){....}-{1:2} [ 41.664814][ C1] ? report_bug+0x1b7/0x2e0 [ 41.668092][ T2923] , at: rcu_lock_acquire+0x5/0x30 [ 41.670918][ C1] ? handle_bug+0x3d/0x70 [ 41.675039][ T2923] #4: ffff8880b9a39b18 [ 41.679160][ C1] ? exc_invalid_op+0x16/0x40 [ 41.682760][ T2923] (&pool->lock [ 41.688183][ C1] ? asm_exc_invalid_op+0x16/0x20 [ 41.691611][ T2923] ){-.-.}-{2:2} [ 41.696083][ C1] ? sock_hash_delete_elem+0xac/0x2f0 [ 41.701070][ T2923] , at: __queue_work+0x56d/0xd00 [ 41.705368][ C1] ? sock_hash_bucket_hash+0x24e/0x6c0 [ 41.709490][ T2923] #5: ffffffff8c91f720 [ 41.714139][ C1] ? sock_hash_delete_elem+0xac/0x2f0 [ 41.717564][ T2923] (rcu_read_lock [ 41.722558][ C1] ? __local_bh_disable_ip+0x1ec/0x210 [ 41.725985][ T2923] ){....}-{1:2} [ 41.731322][ C1] ? sock_hash_delete_elem+0xac/0x2f0 [ 41.736225][ T2923] , at: rcu_lock_acquire+0x5/0x30 [ 41.741648][ C1] ? __bpf_trace_softirq+0x10/0x10 [ 41.745771][ T2923] [ 41.745771][ T2923] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 41.751112][ C1] ? sock_hash_delete_elem+0xac/0x2f0 [ 41.754710][ T2923] -> ( [ 41.760135][ C1] _raw_spin_lock_bh+0x18/0x40 [ 41.763561][ T2923] &pool->lock){-.-.}-{2:2} [ 41.768904][ C1] sock_hash_delete_elem+0xac/0x2f0 [ 41.773893][ T2923] { [ 41.773898][ T2923] IN-HARDIRQ-W [ 41.778972][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x400 [ 41.789341][ T2923] at: [ 41.789347][ T2923] lock_acquire+0x1db/0x4f0 [ 41.794681][ C1] bpf_trace_run3+0x1d1/0x380 [ 41.797325][ T2923] _raw_spin_lock+0x2a/0x40 [ 41.802056][ C1] ? bpf_trace_run2+0x340/0x340 [ 41.806438][ T2923] __queue_work+0x56d/0xd00 [ 41.811604][ C1] ? __queue_work+0xbef/0xd00 [ 41.814073][ T2923] queue_work_on+0x14b/0x250 [ 41.817680][ C1] __queue_work+0xc99/0xd00 [ 41.823188][ T2923] hrtimer_run_queues+0x14b/0x450 [ 41.825843][ C1] queue_work_on+0x14b/0x250 [ 41.831958][ T2923] update_process_times+0xca/0x200 [ 41.836605][ C1] ? wq_worker_last_func+0x40/0x40 [ 41.842721][ T2923] tick_periodic+0x197/0x210 [ 41.847537][ C1] ? __rwlock_init+0x140/0x140 [ 41.853655][ T2923] tick_handle_periodic+0x46/0x150 [ 41.858303][ C1] stats_request+0xcc/0xf0 [ 41.864502][ T2923] __sysvec_apic_timer_interrupt+0x139/0x470 [ 41.868978][ C1] ? balloon_ack+0x70/0x70 [ 41.875619][ T2923] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 41.880180][ C1] vring_interrupt+0x212/0x360 [ 41.886904][ T2923] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 41.891985][ C1] ? virtqueue_detach_unused_buf+0x360/0x360 [ 41.898190][ T2923] default_idle+0xb/0x10 [ 41.902922][ C1] __handle_irq_event_percpu+0x292/0xa70 [ 41.909651][ T2923] default_idle_call+0x81/0xc0 [ 41.914037][ C1] ? __irq_wake_thread+0x170/0x170 [ 41.921628][ T2923] do_idle+0x271/0x670 [ 41.926013][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 41.933258][ T2923] cpu_startup_entry+0x14/0x20 [ 41.937995][ C1] handle_irq_event+0xff/0x2b0 [ 41.945590][ T2923] start_kernel+0x48c/0x535 [ 41.951538][ C1] ? handle_irq_event_percpu+0x1a0/0x1a0 [ 41.957396][ T2923] secondary_startup_64_no_verify+0xb1/0xbb [ 41.962993][ C1] ? hrtimer_interrupt+0x76b/0x980 [ 41.969387][ T2923] IN-SOFTIRQ-W at: [ 41.974469][ C1] handle_edge_irq+0x245/0xbf0 [ 41.980148][ T2923] lock_acquire+0x1db/0x4f0 [ 41.985315][ C1] __common_interrupt+0xd7/0x1f0 [ 41.991691][ T2923] _raw_spin_lock+0x2a/0x40 [ 41.996424][ C1] common_interrupt+0x9f/0xc0 [ 42.002538][ T2923] __queue_work+0x56d/0xd00 [ 42.008142][ C1] [ 42.015649][ T2923] call_timer_fn+0x16d/0x560 [ 42.020727][ C1] [ 42.020735][ C1] asm_common_interrupt+0x22/0x40 [ 42.024678][ T2923] __run_timers+0x6a8/0x890 [ 42.029409][ C1] RIP: 0010:smp_call_function_many_cond+0xa91/0xd90 [ 42.035525][ T2923] __do_softirq+0x3b3/0x93a [ 42.040429][ C1] Code: 0f b6 04 03 84 c0 0f 85 84 00 00 00 45 8b 7d 00 44 89 fe 83 e6 01 31 ff e8 ac ce 0b 00 41 83 e7 01 75 07 e8 41 cb 0b 00 eb 41 90 48 b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 [ 42.046547][ T2923] __irq_exit_rcu+0x155/0x240 [ 42.051191][ C1] RSP: 0018:ffffc900014df800 EFLAGS: 00000293 [ 42.057310][ T2923] irq_exit_rcu+0x5/0x20 [ 42.060224][ C1] [ 42.060233][ C1] RAX: ffffffff81746eb4 RBX: 1ffff11017348541 RCX: ffff888078868000 [ 42.066438][ T2923] sysvec_apic_timer_interrupt+0x91/0xb0 [ 42.069347][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 42.074339][ T2923] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 42.080460][ C1] RBP: ffffc900014df940 R08: ffffffff81746e84 R09: fffffbfff1f79e19 [ 42.087015][ T2923] default_idle+0xb/0x10 [ 42.093134][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 42.112708][ T2923] default_idle_call+0x81/0xc0 [ 42.119003][ C1] R13: ffff8880b9a42a08 R14: ffff8880b9b3b380 R15: 0000000000000001 [ 42.125037][ T2923] do_idle+0x271/0x670 [ 42.130901][ C1] ? smp_call_function_many_cond+0xa84/0xd90 [ 42.133196][ T2923] cpu_startup_entry+0x14/0x20 [ 42.141140][ C1] ? smp_call_function_many_cond+0xab4/0xd90 [ 42.148386][ T2923] start_kernel+0x48c/0x535 [ 42.156336][ C1] ? text_poke_sync+0x20/0x20 [ 42.163926][ T2923] secondary_startup_64_no_verify+0xb1/0xbb [ 42.171872][ C1] ? smp_call_function_many+0x30/0x30 [ 42.177730][ T2923] INITIAL USE [ 42.185675][ C1] ? text_poke_sync+0x20/0x20 [ 42.192052][ T2923] at: [ 42.192058][ T2923] lock_acquire+0x1db/0x4f0 [ 42.199999][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 42.205686][ T2923] _raw_spin_lock_irqsave+0xd1/0x120 [ 42.211635][ C1] ? __queue_work+0x725/0xd00 [ 42.218013][ T2923] pwq_adjust_max_active+0x14e/0x550 [ 42.223959][ C1] text_poke_bp_batch+0x2ad/0x830 [ 42.230079][ T2923] alloc_workqueue+0xbb4/0x13f0 [ 42.234723][ C1] ? arch_jump_label_transform_apply+0xe/0x20 [ 42.242231][ T2923] workqueue_init_early+0x7b2/0x96c [ 42.247575][ C1] ? text_poke_loc_init+0x540/0x540 [ 42.251095][ T2923] start_kernel+0x1fa/0x535 [ 42.255756][ C1] ? arch_jump_label_transform_queue+0x7d/0xd0 [ 42.258409][ T2923] secondary_startup_64_no_verify+0xb1/0xbb [ 42.264446][ C1] text_poke_finish+0x16/0x30 [ 42.269531][ T2923] } [ 42.269539][ T2923] ... key at: [] init_worker_pool.__key+0x0/0x20 [ 42.276360][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 42.281010][ T2923] [ 42.281010][ T2923] the dependencies between the lock to be acquired [ 42.281018][ T2923] and HARDIRQ-irq-unsafe lock: [ 42.287828][ C1] static_key_enable_cpuslocked+0x12e/0x250 [ 42.292835][ T2923] -> [ 42.299202][ C1] ? perf_trace_workqueue_execute_end+0x3c0/0x3c0 [ 42.305236][ T2923] (&htab->buckets[i].lock [ 42.311963][ C1] static_key_enable+0x16/0x20 [ 42.317131][ T2923] ){+...}-{2:2} [ 42.323168][ C1] tracepoint_add_func+0x947/0x9d0 [ 42.329286][ T2923] { [ 42.329291][ T2923] HARDIRQ-ON-W [ 42.336711][ C1] ? perf_trace_workqueue_execute_end+0x3c0/0x3c0 [ 42.341353][ T2923] at: [ 42.341358][ T2923] lock_acquire+0x1db/0x4f0 [ 42.343829][ C1] tracepoint_probe_register_prio_may_exist+0x11e/0x190 [ 42.352204][ T2923] _raw_spin_lock_bh+0x31/0x40 [ 42.358161][ C1] ? rcu_lock_release+0x20/0x20 [ 42.366801][ T2923] sock_hash_free+0x14c/0x780 [ 42.371622][ C1] ? perf_trace_workqueue_execute_end+0x3c0/0x3c0 [ 42.377485][ T2923] process_one_work+0x8a1/0x10c0 [ 42.379961][ C1] ? anon_inode_getfile+0xfb/0x180 [ 42.386341][ T2923] worker_thread+0xaca/0x1280 [ 42.390755][ C1] ? bpf_probe_register+0x10f/0x1d0 [ 42.395495][ T2923] kthread+0x3f6/0x4f0 [ 42.398929][ C1] bpf_raw_tracepoint_open+0x65a/0x750 [ 42.404013][ T2923] ret_from_fork+0x1f/0x30 [ 42.406495][ C1] ? bpf_obj_get_info_by_fd+0x3e10/0x3e10 [ 42.410097][ T2923] INITIAL USE [ 42.416479][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 42.419125][ T2923] at: [ 42.419131][ T2923] lock_acquire+0x1db/0x4f0 [ 42.425249][ C1] ? __might_fault+0xb4/0x110 [ 42.432148][ T2923] _raw_spin_lock_bh+0x31/0x40 [ 42.438530][ C1] ? bpf_lsm_bpf+0x5/0x10 [ 42.443345][ T2923] sock_hash_free+0x14c/0x780 [ 42.449639][ C1] ? security_bpf+0x7d/0xa0 [ 42.456019][ T2923] process_one_work+0x8a1/0x10c0 [ 42.462584][ C1] __sys_bpf+0x468/0x670 [ 42.467667][ T2923] worker_thread+0xaca/0x1280 [ 42.473965][ C1] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 42.479128][ T2923] kthread+0x3f6/0x4f0 [ 42.484820][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 42.490243][ T2923] ret_from_fork+0x1f/0x30 [ 42.496278][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 42.501966][ T2923] } [ 42.501972][ T2923] ... key at: [] sock_hash_alloc.__key+0x0/0x20 [ 42.505485][ C1] __x64_sys_bpf+0x78/0x90 [ 42.510473][ T2923] ... acquired at: [ 42.510479][ T2923] lock_acquire+0x1db/0x4f0 [ 42.513123][ C1] do_syscall_64+0x3d/0xb0 [ 42.519156][ T2923] _raw_spin_lock_bh+0x31/0x40 [ 42.523805][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.530098][ T2923] sock_hash_delete_elem+0xac/0x2f0 [ 42.534402][ C1] RIP: 0033:0x7f84efb44d79 [ 42.540613][ T2923] bpf_prog_2c29ac5cdc6b1842+0x3a/0x400 [ 42.545090][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 42.551556][ T2923] bpf_trace_run3+0x1d1/0x380 [ 42.555767][ C1] RSP: 002b:00007ffe47c11a38 EFLAGS: 00000246 [ 42.561972][ T2923] __queue_work+0xc99/0xd00 [ 42.567309][ C1] ORIG_RAX: 0000000000000141 [ 42.572908][ T2923] queue_work_on+0x14b/0x250 [ 42.578856][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f84efb44d79 [ 42.584825][ T2923] synchronize_rcu_expedited+0x4eb/0x740 [ 42.589990][ C1] RDX: 0000000000000010 RSI: 0000000020000100 RDI: 0000000000000011 [ 42.592462][ T2923] synchronize_rcu+0x107/0x1a0 [ 42.600753][ C1] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000006 [ 42.605135][ T2923] sock_hash_free+0x6e8/0x780 [ 42.608910][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.613554][ T2923] process_one_work+0x8a1/0x10c0 [ 42.617952][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 42.622866][ T2923] worker_thread+0xaca/0x1280 [ 42.628733][ C1] [ 42.634061][ T2923] kthread+0x3f6/0x4f0 [ 42.638449][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 42.644130][ T2923] ret_from_fork+0x1f/0x30 [ 42.663708][ C1] CPU: 1 PID: 3571 Comm: syz-executor948 Not tainted 5.15.152-syzkaller #0 [ 42.668523][ T2923] [ 42.668528][ T2923] [ 42.668528][ T2923] stack backtrace: [ 42.674554][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 42.799364][ C1] Call Trace: [ 42.802626][ C1] [ 42.805451][ C1] dump_stack_lvl+0x1e3/0x2cb [ 42.810112][ C1] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 42.815724][ C1] ? panic+0x84d/0x84d [ 42.819771][ C1] ? panic+0x84d/0x84d [ 42.823815][ C1] ? __local_bh_disable_ip+0x150/0x210 [ 42.829251][ C1] ? __local_bh_disable_ip+0x150/0x210 [ 42.834686][ C1] panic+0x318/0x84d [ 42.838559][ C1] ? __warn+0x16a/0x300 [ 42.842693][ C1] ? fb_is_primary_device+0xcc/0xcc [ 42.847873][ C1] ? __local_bh_disable_ip+0x1ec/0x210 [ 42.853310][ C1] __warn+0x2b2/0x300 [ 42.857272][ C1] ? __local_bh_disable_ip+0x1ec/0x210 [ 42.862710][ C1] report_bug+0x1b7/0x2e0 [ 42.867037][ C1] handle_bug+0x3d/0x70 [ 42.871171][ C1] exc_invalid_op+0x16/0x40 [ 42.875654][ C1] asm_exc_invalid_op+0x16/0x20 [ 42.880483][ C1] RIP: 0010:__local_bh_disable_ip+0x1ec/0x210 [ 42.886531][ C1] Code: 00 00 43 c6 44 2c 0b 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 00 00 00 75 2d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 a0 fe ff ff e8 58 6b ce 08 41 f7 c6 00 02 00 00 0f 85 52 [ 42.906114][ C1] RSP: 0018:ffffc90000dd0960 EFLAGS: 00010006 [ 42.912158][ C1] RAX: 0000000000010004 RBX: ffffffff884eb3fc RCX: ffff888078868000 [ 42.920107][ C1] RDX: dffffc0000000000 RSI: 0000000000000201 RDI: ffffffff884eb3fc [ 42.928055][ C1] RBP: ffffc90000dd0a28 R08: 0000000000000005 R09: ffffffff884eeaae [ 42.936002][ C1] R10: 000000000000000c R11: ffff888078868000 R12: dffffc0000000000 [ 42.943952][ C1] R13: 1ffff920001ba130 R14: ffffc90000dd09c0 R15: 0000000000000201 [ 42.951904][ C1] ? sock_hash_delete_elem+0xac/0x2f0 [ 42.957260][ C1] ? sock_hash_bucket_hash+0x24e/0x6c0 [ 42.962701][ C1] ? sock_hash_delete_elem+0xac/0x2f0 [ 42.968056][ C1] ? sock_hash_delete_elem+0xac/0x2f0 [ 42.973405][ C1] ? __bpf_trace_softirq+0x10/0x10 [ 42.978496][ C1] ? sock_hash_delete_elem+0xac/0x2f0 [ 42.983850][ C1] _raw_spin_lock_bh+0x18/0x40 [ 42.988768][ C1] sock_hash_delete_elem+0xac/0x2f0 [ 42.993946][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x400 [ 42.999468][ C1] bpf_trace_run3+0x1d1/0x380 [ 43.004126][ C1] ? bpf_trace_run2+0x340/0x340 [ 43.008959][ C1] ? __queue_work+0xbef/0xd00 [ 43.013616][ C1] __queue_work+0xc99/0xd00 [ 43.018105][ C1] queue_work_on+0x14b/0x250 [ 43.022673][ C1] ? wq_worker_last_func+0x40/0x40 [ 43.027763][ C1] ? __rwlock_init+0x140/0x140 [ 43.032516][ C1] stats_request+0xcc/0xf0 [ 43.036920][ C1] ? balloon_ack+0x70/0x70 [ 43.041316][ C1] vring_interrupt+0x212/0x360 [ 43.046057][ C1] ? virtqueue_detach_unused_buf+0x360/0x360 [ 43.052015][ C1] __handle_irq_event_percpu+0x292/0xa70 [ 43.057628][ C1] ? __irq_wake_thread+0x170/0x170 [ 43.062719][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 43.067898][ C1] handle_irq_event+0xff/0x2b0 [ 43.072644][ C1] ? handle_irq_event_percpu+0x1a0/0x1a0 [ 43.078252][ C1] ? hrtimer_interrupt+0x76b/0x980 [ 43.083354][ C1] handle_edge_irq+0x245/0xbf0 [ 43.088124][ C1] __common_interrupt+0xd7/0x1f0 [ 43.093052][ C1] common_interrupt+0x9f/0xc0 [ 43.097716][ C1] [ 43.100632][ C1] [ 43.103551][ C1] asm_common_interrupt+0x22/0x40 [ 43.108562][ C1] RIP: 0010:smp_call_function_many_cond+0xa91/0xd90 [ 43.115135][ C1] Code: 0f b6 04 03 84 c0 0f 85 84 00 00 00 45 8b 7d 00 44 89 fe 83 e6 01 31 ff e8 ac ce 0b 00 41 83 e7 01 75 07 e8 41 cb 0b 00 eb 41 90 48 b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 [ 43.134720][ C1] RSP: 0018:ffffc900014df800 EFLAGS: 00000293 [ 43.140768][ C1] RAX: ffffffff81746eb4 RBX: 1ffff11017348541 RCX: ffff888078868000 [ 43.148718][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 43.156670][ C1] RBP: ffffc900014df940 R08: ffffffff81746e84 R09: fffffbfff1f79e19 [ 43.164620][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 43.172571][ C1] R13: ffff8880b9a42a08 R14: ffff8880b9b3b380 R15: 0000000000000001 [ 43.180525][ C1] ? smp_call_function_many_cond+0xa84/0xd90 [ 43.186490][ C1] ? smp_call_function_many_cond+0xab4/0xd90 [ 43.192451][ C1] ? text_poke_sync+0x20/0x20 [ 43.197109][ C1] ? smp_call_function_many+0x30/0x30 [ 43.202465][ C1] ? text_poke_sync+0x20/0x20 [ 43.207124][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 43.212212][ C1] ? __queue_work+0x725/0xd00 [ 43.216867][ C1] text_poke_bp_batch+0x2ad/0x830 [ 43.221884][ C1] ? arch_jump_label_transform_apply+0xe/0x20 [ 43.227935][ C1] ? text_poke_loc_init+0x540/0x540 [ 43.233114][ C1] ? arch_jump_label_transform_queue+0x7d/0xd0 [ 43.239249][ C1] text_poke_finish+0x16/0x30 [ 43.243907][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 43.249865][ C1] static_key_enable_cpuslocked+0x12e/0x250 [ 43.255745][ C1] ? perf_trace_workqueue_execute_end+0x3c0/0x3c0 [ 43.262137][ C1] static_key_enable+0x16/0x20 [ 43.266878][ C1] tracepoint_add_func+0x947/0x9d0 [ 43.271973][ C1] ? perf_trace_workqueue_execute_end+0x3c0/0x3c0 [ 43.278389][ C1] tracepoint_probe_register_prio_may_exist+0x11e/0x190 [ 43.285324][ C1] ? rcu_lock_release+0x20/0x20 [ 43.290157][ C1] ? perf_trace_workqueue_execute_end+0x3c0/0x3c0 [ 43.296557][ C1] ? anon_inode_getfile+0xfb/0x180 [ 43.301669][ C1] ? bpf_probe_register+0x10f/0x1d0 [ 43.306864][ C1] bpf_raw_tracepoint_open+0x65a/0x750 [ 43.312314][ C1] ? bpf_obj_get_info_by_fd+0x3e10/0x3e10 [ 43.318022][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 43.323030][ C1] ? __might_fault+0xb4/0x110 [ 43.327693][ C1] ? bpf_lsm_bpf+0x5/0x10 [ 43.332004][ C1] ? security_bpf+0x7d/0xa0 [ 43.336489][ C1] __sys_bpf+0x468/0x670 [ 43.340716][ C1] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 43.346073][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 43.352032][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 43.357209][ C1] __x64_sys_bpf+0x78/0x90 [ 43.361604][ C1] do_syscall_64+0x3d/0xb0 [ 43.366013][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.371901][ C1] RIP: 0033:0x7f84efb44d79 [ 43.376301][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 43.395885][ C1] RSP: 002b:00007ffe47c11a38 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 43.404285][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f84efb44d79 [ 43.412241][ C1] RDX: 0000000000000010 RSI: 0000000020000100 RDI: 0000000000000011 [ 43.420195][ C1] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000006 [ 43.428147][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.436099][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 43.444056][ C1] [ 43.447058][ T2923] CPU: 0 PID: 2923 Comm: kworker/0:3 Not tainted 5.15.152-syzkaller #0 [ 43.455295][ T2923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 43.465340][ T2923] Workqueue: events bpf_map_free_deferred [ 43.471062][ T2923] Call Trace: [ 43.474326][ T2923] [ 43.477240][ T2923] dump_stack_lvl+0x1e3/0x2cb [ 43.481911][ T2923] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 43.487537][ T2923] ? panic+0x84d/0x84d [ 43.491605][ T2923] ? print_shortest_lock_dependencies+0xee/0x150 [ 43.497922][ T2923] validate_chain+0x4d01/0x5930 [ 43.502772][ T2923] ? reacquire_held_locks+0x660/0x660 [ 43.508131][ T2923] ? reacquire_held_locks+0x660/0x660 [ 43.513487][ T2923] ? validate_chain+0x112/0x5930 [ 43.518410][ T2923] ? reacquire_held_locks+0x660/0x660 [ 43.523771][ T2923] ? register_lock_class+0x100/0x9a0 [ 43.529038][ T2923] ? __lock_acquire+0x1295/0x1ff0 [ 43.534048][ T2923] ? is_dynamic_key+0x1f0/0x1f0 [ 43.538887][ T2923] ? mark_lock+0x98/0x340 [ 43.543205][ T2923] __lock_acquire+0x1295/0x1ff0 [ 43.548049][ T2923] lock_acquire+0x1db/0x4f0 [ 43.552538][ T2923] ? sock_hash_delete_elem+0xac/0x2f0 [ 43.557895][ T2923] ? lockdep_softirqs_on+0x590/0x590 [ 43.563165][ T2923] ? read_lock_is_recursive+0x10/0x10 [ 43.568525][ T2923] ? sock_hash_delete_elem+0xac/0x2f0 [ 43.573884][ T2923] ? __bpf_trace_softirq+0x10/0x10 [ 43.578980][ T2923] ? sock_hash_delete_elem+0xac/0x2f0 [ 43.584335][ T2923] _raw_spin_lock_bh+0x31/0x40 [ 43.589085][ T2923] ? sock_hash_delete_elem+0xac/0x2f0 [ 43.594440][ T2923] sock_hash_delete_elem+0xac/0x2f0 [ 43.599622][ T2923] bpf_prog_2c29ac5cdc6b1842+0x3a/0x400 [ 43.605147][ T2923] bpf_trace_run3+0x1d1/0x380 [ 43.609808][ T2923] ? bpf_trace_run2+0x340/0x340 [ 43.614645][ T2923] ? __queue_work+0xbef/0xd00 [ 43.619307][ T2923] __queue_work+0xc99/0xd00 [ 43.623798][ T2923] queue_work_on+0x14b/0x250 [ 43.628374][ T2923] ? wq_worker_last_func+0x40/0x40 [ 43.633467][ T2923] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 43.639345][ T2923] synchronize_rcu_expedited+0x4eb/0x740 [ 43.644966][ T2923] ? synchronize_rcu+0x1a0/0x1a0 [ 43.649889][ T2923] ? register_lock_class+0x100/0x9a0 [ 43.655157][ T2923] ? rcu_exp_sel_wait_wake+0x1c00/0x1c00 [ 43.660772][ T2923] ? mark_lock+0x98/0x340 [ 43.665085][ T2923] ? __lock_acquire+0x1295/0x1ff0 [ 43.670093][ T2923] ? mark_lock+0x98/0x340 [ 43.674408][ T2923] synchronize_rcu+0x107/0x1a0 [ 43.679152][ T2923] ? kvfree_call_rcu+0x8a0/0x8a0 [ 43.684071][ T2923] ? __local_bh_enable_ip+0x164/0x1f0 [ 43.689423][ T2923] ? lockdep_hardirqs_on+0x94/0x130 [ 43.694602][ T2923] ? __local_bh_enable_ip+0x164/0x1f0 [ 43.699994][ T2923] ? sock_hash_free+0x301/0x780 [ 43.704842][ T2923] ? _local_bh_enable+0xa0/0xa0 [ 43.709683][ T2923] sock_hash_free+0x6e8/0x780 [ 43.714349][ T2923] ? sock_hash_alloc+0x520/0x520 [ 43.719271][ T2923] ? do_raw_spin_unlock+0x137/0x8b0 [ 43.724455][ T2923] ? bpf_lsm_bpf_map_free_security+0x5/0x10 [ 43.730334][ T2923] ? security_bpf_map_free+0x6a/0x80 [ 43.735605][ T2923] ? bpf_map_free_deferred+0xb8/0x2e0 [ 43.740962][ T2923] process_one_work+0x8a1/0x10c0 [ 43.745898][ T2923] ? worker_detach_from_pool+0x260/0x260 [ 43.751519][ T2923] ? _raw_spin_lock_irqsave+0x120/0x120 [ 43.757047][ T2923] ? kthread_data+0x4e/0xc0 [ 43.761535][ T2923] ? wq_worker_running+0x97/0x170 [ 43.766541][ T2923] worker_thread+0xaca/0x1280 [ 43.771201][ T2923] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 43.777083][ T2923] kthread+0x3f6/0x4f0 [ 43.781132][ T2923] ? rcu_lock_release+0x20/0x20 [ 43.785965][ T2923] ? kthread_blkcg+0xd0/0xd0 [ 43.790541][ T2923] ret_from_fork+0x1f/0x30 [ 43.794947][ T2923] [ 43.798173][ C1] Kernel Offset: disabled [ 43.802489][ C1] Rebooting in 86400 seconds..