./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor895364008 <...> Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts. execve("./syz-executor895364008", ["./syz-executor895364008"], 0x7fff9f6a76f0 /* 10 vars */) = 0 brk(NULL) = 0x55558ccfa000 brk(0x55558ccfad00) = 0x55558ccfad00 arch_prctl(ARCH_SET_FS, 0x55558ccfa380) = 0 set_tid_address(0x55558ccfa650) = 5066 set_robust_list(0x55558ccfa660, 24) = 0 rseq(0x55558ccfaca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor895364008", 4096) = 27 getrandom("\x60\x58\xdf\xb2\xfe\x1f\xb1\xa4", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558ccfad00 brk(0x55558cd1bd00) = 0x55558cd1bd00 brk(0x55558cd1c000) = 0x55558cd1c000 mprotect(0x7fc94ccbf000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ccfa650) = 5067 ./strace-static-x86_64: Process 5067 attached [pid 5067] set_robust_list(0x55558ccfa660, 24) = 0 [pid 5067] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5067] setpgid(0, 0) = 0 [pid 5067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5067] write(3, "1000", 4) = 4 [pid 5067] close(3) = 0 [pid 5067] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=4, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5067] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [ 56.158278][ T16] ------------[ cut here ]------------ [ 56.158363][ T16] [ 56.158362][ C0] ------------[ cut here ]------------ [ 56.158367][ T16] ====================================================== [ 56.158372][ T16] WARNING: possible circular locking dependency detected [ 56.158377][ T16] 6.8.0-syzkaller-05235-g122fdbd2a030 #0 Not tainted [ 56.158385][ T16] ------------------------------------------------------ [ 56.158389][ T16] rcu_preempt/16 is trying to acquire lock: [ 56.158395][ T16] ffffffff8e00d498 ((console_sem).lock){-...}-{2:2}, at: down_trylock+0x20/0xa0 [ 56.158463][ T16] [ 56.158463][ T16] but task is already holding lock: [ 56.158467][ T16] ffff8880b952a758 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 56.158506][ T16] [ 56.158506][ T16] which lock already depends on the new lock. [ 56.158506][ T16] [ 56.158510][ T16] [ 56.158510][ T16] the existing dependency chain (in reverse order) is: [ 56.158514][ T16] [ 56.158514][ T16] -> #3 (&base->lock){-.-.}-{2:2}: [ 56.158533][ T16] lock_acquire+0x1e4/0x530 [ 56.158548][ T16] _raw_spin_lock_irqsave+0xd5/0x120 [ 56.158564][ T16] lock_timer_base+0x112/0x240 [ 56.158582][ T16] __mod_timer+0x1ca/0xeb0 [ 56.158601][ T16] queue_delayed_work_on+0x15a/0x260 [ 56.158616][ T16] psi_task_change+0xfd/0x280 [ 56.158633][ T16] enqueue_task+0x2a6/0x2f0 [ 56.158646][ T16] wake_up_new_task+0x564/0xc10 [ 56.158662][ T16] kernel_clone+0x4d4/0x8d0 [ 56.158677][ T16] user_mode_thread+0x132/0x1a0 [ 56.158692][ T16] rest_init+0x27/0x300 [ 56.158710][ T16] arch_call_rest_init+0xe/0x10 [ 56.158730][ T16] start_kernel+0x47a/0x500 [ 56.158743][ T16] x86_64_start_reservations+0x2a/0x30 [ 56.158760][ T16] x86_64_start_kernel+0x99/0xa0 [ 56.158776][ T16] common_startup_64+0x13e/0x147 [ 56.158791][ T16] [ 56.158791][ T16] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 56.158810][ T16] lock_acquire+0x1e4/0x530 [ 56.158823][ T16] _raw_spin_lock_nested+0x31/0x40 [ 56.158840][ T16] raw_spin_rq_lock_nested+0x2a/0x140 [ 56.158860][ T16] task_fork_fair+0x61/0x1e0 [ 56.158877][ T16] sched_cgroup_fork+0x37c/0x410 [ 56.158893][ T16] copy_process+0x2217/0x3df0 [ 56.158907][ T16] kernel_clone+0x21e/0x8d0 [ 56.158921][ T16] user_mode_thread+0x132/0x1a0 [ 56.158937][ T16] rest_init+0x27/0x300 [ 56.158954][ T16] arch_call_rest_init+0xe/0x10 [ 56.158967][ T16] start_kernel+0x47a/0x500 [ 56.158978][ T16] x86_64_start_reservations+0x2a/0x30 [ 56.158995][ T16] x86_64_start_kernel+0x99/0xa0 [ 56.159010][ T16] common_startup_64+0x13e/0x147 [ 56.159025][ T16] [ 56.159025][ T16] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 56.159044][ T16] lock_acquire+0x1e4/0x530 [ 56.159056][ T16] _raw_spin_lock_irqsave+0xd5/0x120 [ 56.159071][ T16] try_to_wake_up+0xb0/0x1470 [ 56.159086][ T16] up+0x72/0x90 [ 56.159103][ T16] console_unlock+0x22f/0x4d0 [ 56.159119][ T16] vprintk_emit+0x509/0x720 [ 56.159135][ T16] dev_vprintk_emit+0x2ae/0x330 [ 56.159149][ T16] dev_printk_emit+0xdd/0x120 [ 56.159163][ T16] _dev_warn+0x122/0x170 [ 56.159176][ T16] firmware_fallback_sysfs+0x4cf/0x9e0 [ 56.159196][ T16] _request_firmware+0xc97/0x1250 [ 56.159207][ T16] request_firmware_work_func+0x12a/0x280 [ 56.159220][ T16] process_scheduled_works+0xa00/0x1770 [ 56.159233][ T16] worker_thread+0x86d/0xd70 [ 56.159247][ T16] kthread+0x2f0/0x390 [ 56.159262][ T16] ret_from_fork+0x4b/0x80 [ 56.159281][ T16] ret_from_fork_asm+0x1a/0x30 [ 56.159300][ T16] [ 56.159300][ T16] -> #0 ((console_sem).lock){-...}-{2:2}: [ 56.159318][ T16] validate_chain+0x18cb/0x58e0 [ 56.159334][ T16] __lock_acquire+0x1346/0x1fd0 [ 56.159347][ T16] lock_acquire+0x1e4/0x530 [ 56.159360][ T16] _raw_spin_lock_irqsave+0xd5/0x120 [ 56.159375][ T16] down_trylock+0x20/0xa0 [ 56.159393][ T16] __down_trylock_console_sem+0x109/0x250 [ 56.159410][ T16] vprintk_emit+0x1ef/0x720 [ 56.159426][ T16] _printk+0xd5/0x120 [ 56.159440][ T16] report_bug+0x346/0x500 [ 56.159459][ T16] handle_bug+0x3e/0x70 [ 56.159476][ T16] exc_invalid_op+0x1a/0x50 [ 56.159492][ T16] asm_exc_invalid_op+0x1a/0x20 [ 56.159511][ T16] __local_bh_enable_ip+0x1be/0x200 [ 56.159524][ T16] sock_hash_delete_elem+0x1a6/0x300 [ 56.159539][ T16] bpf_prog_2e01b746faa822d9+0x4a/0x4e [ 56.159554][ T16] bpf_trace_run2+0x204/0x420 [ 56.159568][ T16] enqueue_timer+0x396/0x550 [ 56.159582][ T16] __mod_timer+0xa0e/0xeb0 [ 56.159599][ T16] schedule_timeout+0x1b9/0x310 [ 56.159612][ T16] rcu_gp_fqs_loop+0x2df/0x1370 [ 56.159632][ T16] rcu_gp_kthread+0xa7/0x3b0 [ 56.159650][ T16] kthread+0x2f0/0x390 [ 56.159665][ T16] ret_from_fork+0x4b/0x80 [ 56.159683][ T16] ret_from_fork_asm+0x1a/0x30 [ 56.159701][ T16] [ 56.159701][ T16] other info that might help us debug this: [ 56.159701][ T16] [ 56.159705][ T16] Chain exists of: [ 56.159705][ T16] (console_sem).lock --> &rq->__lock --> &base->lock [ 56.159705][ T16] [ 56.159739][ T16] Possible unsafe locking scenario: [ 56.159739][ T16] [ 56.159742][ T16] CPU0 CPU1 [ 56.159746][ T16] ---- ---- [ 56.159749][ T16] lock(&base->lock); [ 56.159758][ T16] lock(&rq->__lock); [ 56.159767][ T16] lock(&base->lock); [ 56.159777][ T16] lock((console_sem).lock); [ 56.159785][ T16] [ 56.159785][ T16] *** DEADLOCK *** [ 56.159785][ T16] [ 56.159789][ T16] 2 locks held by rcu_preempt/16: [ 56.159797][ T16] #0: ffff8880b952a758 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 56.159843][ T16] #1: ffffffff8e131920 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x114/0x420 [ 56.159880][ T16] [ 56.159880][ T16] stack backtrace: [ 56.159885][ T16] CPU: 1 PID: 16 Comm: rcu_preempt Not tainted 6.8.0-syzkaller-05235-g122fdbd2a030 #0 [ 56.159900][ T16] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 56.159908][ T16] Call Trace: [ 56.159914][ T16] [ 56.159919][ T16] dump_stack_lvl+0x1e7/0x2e0 [ 56.159940][ T16] ? __pfx_dump_stack_lvl+0x10/0x10 [ 56.159962][ T16] ? print_circular_bug+0x130/0x1a0 [ 56.159982][ T16] check_noncircular+0x36a/0x4a0 [ 56.159999][ T16] ? __lock_acquire+0x1346/0x1fd0 [ 56.160015][ T16] ? __pfx_check_noncircular+0x10/0x10 [ 56.160034][ T16] ? queued_spin_lock_slowpath+0x42/0x50 [ 56.160050][ T16] ? lockdep_lock+0x1b0/0x2b0 [ 56.160073][ T16] ? rcu_read_lock_sched_held+0x8d/0x130 [ 56.160089][ T16] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 56.160106][ T16] ? _find_first_zero_bit+0xd4/0x100 [ 56.160127][ T16] validate_chain+0x18cb/0x58e0 [ 56.160145][ T16] ? cpufreq_update_util+0x94/0x250 [ 56.160176][ T16] ? __pfx_validate_chain+0x10/0x10 [ 56.160197][ T16] ? rcu_is_watching+0x15/0xb0 [ 56.160213][ T16] ? data_alloc+0x523/0x840 [ 56.160226][ T16] ? __pfx_lock_acquire+0x10/0x10 [ 56.160244][ T16] ? format_decode+0x6bc/0x1bb0 [ 56.160269][ T16] ? mark_lock+0x9a/0x350 [ 56.160286][ T16] __lock_acquire+0x1346/0x1fd0 [ 56.160309][ T16] lock_acquire+0x1e4/0x530 [ 56.160323][ T16] ? down_trylock+0x20/0xa0 [ 56.160346][ T16] ? __pfx_lock_acquire+0x10/0x10 [ 56.160360][ T16] ? rcu_is_watching+0x15/0xb0 [ 56.160376][ T16] ? prb_final_commit+0x6f/0xa0 [ 56.160390][ T16] ? vprintk_store+0xd3e/0x1160 [ 56.160413][ T16] _raw_spin_lock_irqsave+0xd5/0x120 [ 56.160430][ T16] ? down_trylock+0x20/0xa0 [ 56.160450][ T16] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 56.160467][ T16] ? validate_chain+0x15a2/0x58e0 [ 56.160488][ T16] down_trylock+0x20/0xa0 [ 56.160510][ T16] __down_trylock_console_sem+0x109/0x250 [ 56.160530][ T16] ? _printk+0xd5/0x120 [ 56.160545][ T16] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 56.160567][ T16] ? __pfx_validate_chain+0x10/0x10 [ 56.160588][ T16] vprintk_emit+0x1ef/0x720 [ 56.160607][ T16] ? __pfx_vprintk_emit+0x10/0x10 [ 56.160628][ T16] ? lockdep_unlock+0x16a/0x300 [ 56.160651][ T16] _printk+0xd5/0x120 [ 56.160668][ T16] ? report_bug+0x25e/0x500 [ 56.160688][ T16] ? __pfx__printk+0x10/0x10 [ 56.160705][ T16] ? __lock_acquire+0x1346/0x1fd0 [ 56.160721][ T16] ? find_bug+0xa3/0x390 [ 56.160745][ T16] ? __local_bh_enable_ip+0x1be/0x200 [ 56.160762][ T16] report_bug+0x346/0x500 [ 56.160782][ T16] ? __local_bh_enable_ip+0x1be/0x200 [ 56.160798][ T16] handle_bug+0x3e/0x70 [ 56.160817][ T16] exc_invalid_op+0x1a/0x50 [ 56.160836][ T16] asm_exc_invalid_op+0x1a/0x20 [ 56.160856][ T16] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 56.160873][ T16] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 9c e1 86 8f 80 e1 07 80 c1 03 38 [ 56.160884][ T16] RSP: 0018:ffffc900001577c0 EFLAGS: 00010046 [ 56.160897][ T16] RAX: 0000000000000000 RBX: 1ffff9200002aefc RCX: 0000000000000001 [ 56.160907][ T16] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895fcb56 [ 56.160917][ T16] RBP: ffffc90000157880 R08: ffff888021b5a00b R09: 1ffff1100436b401 [ 56.160928][ T16] R10: dffffc0000000000 R11: ffffed100436b402 R12: dffffc0000000000 [ 56.160939][ T16] R13: 0000000000000004 R14: ffffc90000157800 R15: 0000000000000201 [ 56.160954][ T16] ? sock_hash_delete_elem+0x1a6/0x300 [ 56.160972][ T16] ? sock_hash_delete_elem+0x1a6/0x300 [ 56.160988][ T16] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 56.161003][ T16] ? sock_hash_delete_elem+0x1a6/0x300 [ 56.161018][ T16] ? do_raw_spin_unlock+0x13c/0x8b0 [ 56.161039][ T16] ? sock_hash_delete_elem+0xb0/0x300 [ 56.161057][ T16] sock_hash_delete_elem+0x1a6/0x300 [ 56.161076][ T16] bpf_prog_2e01b746faa822d9+0x4a/0x4e [ 56.161092][ T16] bpf_trace_run2+0x204/0x420 [ 56.161108][ T16] ? bpf_trace_run2+0x114/0x420 [ 56.161124][ T16] ? __pfx_bpf_trace_run2+0x10/0x10 [ 56.161140][ T16] ? __pfx_debug_object_activate+0x10/0x10 [ 56.161157][ T16] ? lockdep_hardirqs_on+0x99/0x150 [ 56.161174][ T16] enqueue_timer+0x396/0x550 [ 56.161193][ T16] __mod_timer+0xa0e/0xeb0 [ 56.161215][ T16] ? __asan_memset+0x23/0x50 [ 56.161232][ T16] ? __pfx___mod_timer+0x10/0x10 [ 56.161252][ T16] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 56.161266][ T16] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 56.161287][ T16] schedule_timeout+0x1b9/0x310 [ 56.161303][ T16] ? __pfx_schedule_timeout+0x10/0x10 [ 56.161319][ T16] ? __pfx_process_timeout+0x10/0x10 [ 56.161336][ T16] ? prepare_to_swait_event+0x32e/0x350 [ 56.161360][ T16] rcu_gp_fqs_loop+0x2df/0x1370 [ 56.161386][ T16] ? __pfx_rcu_gp_init+0x10/0x10 [ 56.161407][ T16] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 56.161424][ T16] ? lockdep_hardirqs_on+0x99/0x150 [ 56.161441][ T16] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 56.161461][ T16] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 56.161481][ T16] ? finish_swait+0xd4/0x1e0 [ 56.161503][ T16] rcu_gp_kthread+0xa7/0x3b0 [ 56.161525][ T16] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 56.161545][ T16] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 56.161564][ T16] ? __kthread_parkme+0x169/0x1d0 [ 56.161581][ T16] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 56.161605][ T16] kthread+0x2f0/0x390 [ 56.161622][ T16] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 56.161643][ T16] ? __pfx_kthread+0x10/0x10 [ 56.161659][ T16] ret_from_fork+0x4b/0x80 [ 56.161680][ T16] ? __pfx_kthread+0x10/0x10 [ 56.161697][ T16] ret_from_fork_asm+0x1a/0x30 [ 56.161728][ T16] [ 56.163834][ C0] raw_local_irq_restore() called with IRQs enabled [ 56.163889][ C0] WARNING: CPU: 0 PID: 0 at kernel/locking/irqflag-debug.c:10 warn_bogus_irq_restore+0x29/0x40 [ 56.166142][ T16] WARNING: CPU: 1 PID: 16 at kernel/softirq.c:362 __local_bh_enable_ip+0x1be/0x200 [ 56.171612][ C0] Modules linked in: [ 56.178561][ T16] Modules linked in: [ 56.178571][ T16] CPU: 1 PID: 16 Comm: rcu_preempt Not tainted 6.8.0-syzkaller-05235-g122fdbd2a030 #0 [ 56.185573][ C0] [ 56.185581][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.8.0-syzkaller-05235-g122fdbd2a030 #0 [ 56.192216][ T16] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 56.192227][ T16] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 56.199245][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 56.205092][ T16] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 9c e1 86 8f 80 e1 07 80 c1 03 38 [ 56.214104][ C0] RIP: 0010:warn_bogus_irq_restore+0x29/0x40 [ 56.221414][ T16] RSP: 0018:ffffc900001577c0 EFLAGS: 00010046 [ 56.221430][ T16] RAX: 0000000000000000 RBX: 1ffff9200002aefc RCX: 0000000000000001 [ 56.221441][ T16] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895fcb56 [ 56.230266][ C0] Code: 90 f3 0f 1e fa 90 80 3d de 59 01 04 00 74 06 90 c3 cc cc cc cc c6 05 cf 59 01 04 01 90 48 c7 c7 20 ba aa 8b e8 f8 d5 e7 f5 90 <0f> 0b 90 90 90 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f [ 56.240622][ T16] RBP: ffffc90000157880 R08: ffff888021b5a00b R09: 1ffff1100436b401 [ 56.240636][ T16] R10: dffffc0000000000 R11: ffffed100436b402 R12: dffffc0000000000 [ 56.249636][ C0] RSP: 0018:ffffc90000007898 EFLAGS: 00010246 [ 56.256873][ T16] R13: 0000000000000004 R14: ffffc90000157800 R15: 0000000000000201 [ 56.261885][ C0] [ 56.267645][ T16] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 56.272928][ C0] RAX: 57956da7c1d3ec00 RBX: 1ffff92000000f18 RCX: ffffffff8de94680 [ 56.277823][ T16] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.277836][ T16] CR2: 0000000020002680 CR3: 0000000071ff4000 CR4: 00000000003506f0 [ 56.283608][ C0] RDX: 0000000080000103 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.288776][ T16] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.288787][ T16] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.293779][ C0] RBP: ffffc90000007930 R08: ffffffff8157cc12 R09: 1ffff110172851a2 [ 56.299117][ T16] Call Trace: [ 56.299126][ T16] [ 56.299134][ T16] ? __warn+0x163/0x4b0 [ 56.304123][ C0] R10: dffffc0000000000 R11: ffffed10172851a3 R12: dffffc0000000000 [ 56.309461][ T16] ? __local_bh_enable_ip+0x1be/0x200 [ 56.309482][ T16] ? report_bug+0x2b3/0x500 [ 56.314128][ C0] R13: 1ffff92000000f14 R14: ffffc900000078c0 R15: 0000000000000046 [ 56.319468][ T16] ? __local_bh_enable_ip+0x1be/0x200 [ 56.319489][ T16] ? handle_bug+0x3e/0x70 [ 56.324475][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 56.330422][ T16] ? exc_invalid_op+0x1a/0x50 [ 56.330443][ T16] ? asm_exc_invalid_op+0x1a/0x20 [ 56.335864][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.341295][ T16] ? sock_hash_delete_elem+0x1a6/0x300 [ 56.348564][ C0] CR2: 00007fc94ccc30d0 CR3: 0000000079f76000 CR4: 00000000003506f0 [ 56.353545][ T16] ? __local_bh_enable_ip+0x1be/0x200 [ 56.359166][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.365009][ T16] ? sock_hash_delete_elem+0x1a6/0x300 [ 56.370101][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.375515][ T16] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 56.380696][ C0] Call Trace: [ 56.385677][ T16] ? sock_hash_delete_elem+0x1a6/0x300 [ 56.391034][ C0] [ 56.395670][ T16] ? do_raw_spin_unlock+0x13c/0x8b0 [ 56.401023][ C0] ? __warn+0x163/0x4b0 [ 56.406002][ T16] ? sock_hash_delete_elem+0xb0/0x300 [ 56.411966][ C0] ? warn_bogus_irq_restore+0x29/0x40 [ 56.417377][ T16] sock_hash_delete_elem+0x1a6/0x300 [ 56.422818][ C0] ? report_bug+0x2b3/0x500 [ 56.430060][ T16] bpf_prog_2e01b746faa822d9+0x4a/0x4e [ 56.435060][ C0] ? warn_bogus_irq_restore+0x29/0x40 [ 56.440836][ T16] bpf_trace_run2+0x204/0x420 [ 56.440857][ T16] ? bpf_trace_run2+0x114/0x420 [ 56.446023][ C0] ? handle_bug+0x3e/0x70 [ 56.449971][ T16] ? __pfx_bpf_trace_run2+0x10/0x10 [ 56.449990][ T16] ? __pfx_debug_object_activate+0x10/0x10 [ 56.455161][ C0] ? exc_invalid_op+0x1a/0x50 [ 56.460163][ T16] ? lockdep_hardirqs_on+0x99/0x150 [ 56.460184][ T16] enqueue_timer+0x396/0x550 [ 56.465524][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 56.470714][ T16] __mod_timer+0xa0e/0xeb0 [ 56.475462][ C0] ? __warn_printk+0x292/0x360 [ 56.481412][ T16] ? __asan_memset+0x23/0x50 [ 56.481432][ T16] ? __pfx___mod_timer+0x10/0x10 [ 56.486940][ C0] ? warn_bogus_irq_restore+0x29/0x40 [ 56.493146][ T16] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 56.493165][ T16] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 56.499213][ C0] ? warn_bogus_irq_restore+0x28/0x40 [ 56.504286][ T16] schedule_timeout+0x1b9/0x310 [ 56.508859][ C0] _raw_spin_unlock_irqrestore+0x120/0x140 [ 56.513750][ T16] ? __pfx_schedule_timeout+0x10/0x10 [ 56.519015][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 56.526861][ T16] ? __pfx_process_timeout+0x10/0x10 [ 56.532213][ C0] ? rcu_is_watching+0x15/0xb0 [ 56.537543][ T16] ? prepare_to_swait_event+0x32e/0x350 [ 56.542550][ C0] ? enqueue_timer+0x4b8/0x550 [ 56.548312][ T16] rcu_gp_fqs_loop+0x2df/0x1370 [ 56.553144][ C0] __mod_timer+0xb89/0xeb0 [ 56.559353][ T16] ? __pfx_rcu_gp_init+0x10/0x10 [ 56.564364][ C0] ? __pfx___mod_timer+0x10/0x10 [ 56.568833][ T16] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 56.568854][ T16] ? lockdep_hardirqs_on+0x99/0x150 [ 56.573667][ C0] ? _raw_read_unlock_irqrestore+0xdd/0x140 [ 56.578317][ T16] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 56.583324][ C0] ? __pfx__raw_read_unlock_irqrestore+0x10/0x10 [ 56.588662][ T16] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 56.594360][ C0] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 56.600135][ T16] ? finish_swait+0xd4/0x1e0 [ 56.606093][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 56.611356][ T16] rcu_gp_kthread+0xa7/0x3b0 [ 56.611391][ T16] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 56.616488][ C0] ? ktime_get+0x24c/0x280 [ 56.621400][ T16] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 56.621427][ T16] ? __kthread_parkme+0x169/0x1d0 [ 56.626778][ C0] dsp_cmx_send+0x21bf/0x2240 [ 56.632123][ T16] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 56.632148][ T16] kthread+0x2f0/0x390 [ 56.637226][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 56.641783][ T16] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 56.646728][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 56.651984][ T16] ? __pfx_kthread+0x10/0x10 [ 56.652005][ T16] ret_from_fork+0x4b/0x80 [ 56.662224][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 56.674749][ T16] ? __pfx_kthread+0x10/0x10 [ 56.674771][ T16] ret_from_fork_asm+0x1a/0x30 [ 56.682209][ C0] ? call_timer_fn+0xa8/0x600 [ 56.687543][ T16] [ 56.692894][ C0] call_timer_fn+0x17e/0x600 [ 56.696917][ T16] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 56.696926][ T16] CPU: 1 PID: 16 Comm: rcu_preempt Not tainted 6.8.0-syzkaller-05235-g122fdbd2a030 #0 [ 56.696943][ T16] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 56.696952][ T16] Call Trace: [ 56.696959][ T16] [ 56.696964][ T16] dump_stack_lvl+0x1e7/0x2e0 [ 56.696987][ T16] ? __pfx_dump_stack_lvl+0x10/0x10 [ 56.697006][ T16] ? __pfx__printk+0x10/0x10 [ 56.697026][ T16] ? vscnprintf+0x5d/0x90 [ 56.697047][ T16] panic+0x349/0x860 [ 56.697065][ T16] ? __warn+0x172/0x4b0 [ 56.697085][ T16] ? __pfx_panic+0x10/0x10 [ 56.697105][ T16] ? ret_from_fork_asm+0x1a/0x30 [ 56.697128][ T16] __warn+0x31e/0x4b0 [ 56.697147][ T16] ? __local_bh_enable_ip+0x1be/0x200 [ 56.697164][ T16] report_bug+0x2b3/0x500 [ 56.697185][ T16] ? __local_bh_enable_ip+0x1be/0x200 [ 56.697203][ T16] handle_bug+0x3e/0x70 [ 56.697222][ T16] exc_invalid_op+0x1a/0x50 [ 56.697241][ T16] asm_exc_invalid_op+0x1a/0x20 [ 56.697263][ T16] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 56.697280][ T16] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 9c e1 86 8f 80 e1 07 80 c1 03 38 [ 56.697292][ T16] RSP: 0018:ffffc900001577c0 EFLAGS: 00010046 [ 56.697306][ T16] RAX: 0000000000000000 RBX: 1ffff9200002aefc RCX: 0000000000000001 [ 56.697317][ T16] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff895fcb56 [ 56.697327][ T16] RBP: ffffc90000157880 R08: ffff888021b5a00b R09: 1ffff1100436b401 [ 56.697338][ T16] R10: dffffc0000000000 R11: ffffed100436b402 R12: dffffc0000000000 [ 56.697350][ T16] R13: 0000000000000004 R14: ffffc90000157800 R15: 0000000000000201 [ 56.697365][ T16] ? sock_hash_delete_elem+0x1a6/0x300 [ 56.697386][ T16] ? sock_hash_delete_elem+0x1a6/0x300 [ 56.697401][ T16] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 56.697417][ T16] ? sock_hash_delete_elem+0x1a6/0x300 [ 56.697433][ T16] ? do_raw_spin_unlock+0x13c/0x8b0 [ 56.697454][ T16] ? sock_hash_delete_elem+0xb0/0x300 [ 56.697473][ T16] sock_hash_delete_elem+0x1a6/0x300 [ 56.697492][ T16] bpf_prog_2e01b746faa822d9+0x4a/0x4e [ 56.697510][ T16] bpf_trace_run2+0x204/0x420 [ 56.697528][ T16] ? bpf_trace_run2+0x114/0x420 [ 56.697544][ T16] ? __pfx_bpf_trace_run2+0x10/0x10 [ 56.697560][ T16] ? __pfx_debug_object_activate+0x10/0x10 [ 56.697578][ T16] ? lockdep_hardirqs_on+0x99/0x150 [ 56.697596][ T16] enqueue_timer+0x396/0x550 [ 56.697615][ T16] __mod_timer+0xa0e/0xeb0 [ 56.697639][ T16] ? __asan_memset+0x23/0x50 [ 56.697656][ T16] ? __pfx___mod_timer+0x10/0x10 [ 56.697676][ T16] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 56.697692][ T16] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 56.697712][ T16] schedule_timeout+0x1b9/0x310 [ 56.697729][ T16] ? __pfx_schedule_timeout+0x10/0x10 [ 56.697746][ T16] ? __pfx_process_timeout+0x10/0x10 [ 56.697763][ T16] ? prepare_to_swait_event+0x32e/0x350 [ 56.697788][ T16] rcu_gp_fqs_loop+0x2df/0x1370 [ 56.697819][ T16] ? __pfx_rcu_gp_init+0x10/0x10 [ 56.697841][ T16] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 56.697859][ T16] ? lockdep_hardirqs_on+0x99/0x150 [ 56.697877][ T16] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 56.697896][ T16] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 56.697917][ T16] ? finish_swait+0xd4/0x1e0 [ 56.697940][ T16] rcu_gp_kthread+0xa7/0x3b0 [ 56.697962][ T16] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 56.697982][ T16] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 56.698002][ T16] ? __kthread_parkme+0x169/0x1d0 [ 56.698019][ T16] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 56.698041][ T16] kthread+0x2f0/0x390 [ 56.698058][ T16] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 56.698079][ T16] ? __pfx_kthread+0x10/0x10 [ 56.698096][ T16] ret_from_fork+0x4b/0x80 [ 56.698116][ T16] ? __pfx_kthread+0x10/0x10 [ 56.698134][ T16] ret_from_fork_asm+0x1a/0x30 [ 56.698160][ T16] [ 56.703728][ T16] Kernel Offset: disabled