Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 74.194692][ T16] [ 74.197085][ T16] ===================================================== [ 74.204266][ T16] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 74.211918][ T16] 6.8.0-syzkaller-05271-gf99c5f563c17 #0 Not tainted [ 74.218710][ T16] ----------------------------------------------------- [ 74.225652][ T16] rcu_preempt/16 [HC0[0]:SC0[2]:HE0:SE0] is trying to acquire: [ 74.233385][ T16] ffff88807d0bf218 (&htab->buckets[i].lock){+...}-{2:2}, at: sock_hash_delete_elem+0xb0/0x300 [ 74.243795][ T16] [ 74.243795][ T16] and this task is already holding: [ 74.251333][ T16] ffff8880b952a758 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 74.260527][ T16] which would create a new lock dependency: [ 74.266940][ T16] (&base->lock){-.-.}-{2:2} -> (&htab->buckets[i].lock){+...}-{2:2} [ 74.275180][ T16] [ 74.275180][ T16] but this new dependency connects a HARDIRQ-irq-safe lock: [ 74.285332][ T16] (&base->lock){-.-.}-{2:2} [ 74.285364][ T16] [ 74.285364][ T16] ... which became HARDIRQ-irq-safe at: [ 74.297987][ T16] lock_acquire+0x1e4/0x530 [ 74.302766][ T16] _raw_spin_lock_irqsave+0xd5/0x120 [ 74.308300][ T16] lock_timer_base+0x112/0x240 [ 74.313888][ T16] add_timer_on+0x1e5/0x5c0 [ 74.318692][ T16] handle_irq_event+0xad/0x1f0 [ 74.323762][ T16] handle_level_irq+0x3c5/0x6e0 [ 74.328962][ T16] __common_interrupt+0x13a/0x230 [ 74.334479][ T16] common_interrupt+0xa5/0xd0 [ 74.339532][ T16] asm_common_interrupt+0x26/0x40 [ 74.345018][ T16] _raw_spin_unlock_irqrestore+0xd8/0x140 [ 74.351145][ T16] __setup_irq+0x1277/0x1cf0 [ 74.355944][ T16] request_threaded_irq+0x2ab/0x380 [ 74.361410][ T16] setup_default_timer_irq+0x25/0x60 [ 74.366912][ T16] x86_late_time_init+0x66/0xc0 [ 74.372071][ T16] start_kernel+0x3f3/0x500 [ 74.376860][ T16] x86_64_start_reservations+0x2a/0x30 [ 74.382893][ T16] x86_64_start_kernel+0x99/0xa0 [ 74.387954][ T16] common_startup_64+0x13e/0x147 [ 74.393077][ T16] [ 74.393077][ T16] to a HARDIRQ-irq-unsafe lock: [ 74.400703][ T16] (&htab->buckets[i].lock){+...}-{2:2} [ 74.400732][ T16] [ 74.400732][ T16] ... which became HARDIRQ-irq-unsafe at: [ 74.414695][ T16] ... [ 74.414704][ T16] lock_acquire+0x1e4/0x530 [ 74.421973][ T16] _raw_spin_lock_bh+0x35/0x50 [ 74.426833][ T16] sock_hash_free+0x164/0x820 [ 74.431891][ T16] bpf_map_free_deferred+0xe6/0x110 [ 74.437289][ T16] process_scheduled_works+0xa00/0x1770 [ 74.443035][ T16] worker_thread+0x86d/0xd70 [ 74.447727][ T16] kthread+0x2f0/0x390 [ 74.451922][ T16] ret_from_fork+0x4b/0x80 [ 74.456652][ T16] ret_from_fork_asm+0x1a/0x30 [ 74.461541][ T16] [ 74.461541][ T16] other info that might help us debug this: [ 74.461541][ T16] [ 74.472223][ T16] Possible interrupt unsafe locking scenario: [ 74.472223][ T16] [ 74.480717][ T16] CPU0 CPU1 [ 74.486088][ T16] ---- ---- [ 74.491457][ T16] lock(&htab->buckets[i].lock); [ 74.496498][ T16] local_irq_disable(); [ 74.503704][ T16] lock(&base->lock); [ 74.510323][ T16] lock(&htab->buckets[i].lock); [ 74.517920][ T16] [ 74.521384][ T16] lock(&base->lock); [ 74.525634][ T16] [ 74.525634][ T16] *** DEADLOCK *** [ 74.525634][ T16] [ 74.533793][ T16] 2 locks held by rcu_preempt/16: [ 74.539540][ T16] #0: ffff8880b952a758 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 74.549548][ T16] #1: ffffffff8e131920 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x114/0x420 [ 74.559359][ T16] [ 74.559359][ T16] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 74.570658][ T16] -> (&base->lock){-.-.}-{2:2} { [ 74.575635][ T16] IN-HARDIRQ-W at: [ 74.579812][ T16] lock_acquire+0x1e4/0x530 [ 74.586344][ T16] _raw_spin_lock_irqsave+0xd5/0x120 [ 74.593705][ T16] lock_timer_base+0x112/0x240 [ 74.600449][ T16] add_timer_on+0x1e5/0x5c0 [ 74.609122][ T16] handle_irq_event+0xad/0x1f0 [ 74.616175][ T16] handle_level_irq+0x3c5/0x6e0 [ 74.622889][ T16] __common_interrupt+0x13a/0x230 [ 74.630249][ T16] common_interrupt+0xa5/0xd0 [ 74.637593][ T16] asm_common_interrupt+0x26/0x40 [ 74.645053][ T16] _raw_spin_unlock_irqrestore+0xd8/0x140 [ 74.652744][ T16] __setup_irq+0x1277/0x1cf0 [ 74.659718][ T16] request_threaded_irq+0x2ab/0x380 [ 74.667213][ T16] setup_default_timer_irq+0x25/0x60 [ 74.674436][ T16] x86_late_time_init+0x66/0xc0 [ 74.681685][ T16] start_kernel+0x3f3/0x500 [ 74.688071][ T16] x86_64_start_reservations+0x2a/0x30 [ 74.696690][ T16] x86_64_start_kernel+0x99/0xa0 [ 74.703560][ T16] common_startup_64+0x13e/0x147 [ 74.710524][ T16] IN-SOFTIRQ-W at: [ 74.714959][ T16] lock_acquire+0x1e4/0x530 [ 74.721301][ T16] _raw_spin_lock_irq+0xd3/0x120 [ 74.728069][ T16] __run_timer_base+0x103/0x8e0 [ 74.734661][ T16] run_timer_softirq+0x67/0x170 [ 74.741330][ T16] __do_softirq+0x2be/0x943 [ 74.748118][ T16] __irq_exit_rcu+0xf2/0x1c0 [ 74.754710][ T16] irq_exit_rcu+0x9/0x30 [ 74.760621][ T16] common_interrupt+0xaa/0xd0 [ 74.767409][ T16] asm_common_interrupt+0x26/0x40 [ 74.774886][ T16] console_flush_all+0x9cd/0xec0 [ 74.782468][ T16] console_unlock+0x13b/0x4d0 [ 74.789752][ T16] vprintk_emit+0x509/0x720 [ 74.796495][ T16] _printk+0xd5/0x120 [ 74.802842][ T16] calibrate_delay+0x1597/0x16b0 [ 74.810455][ T16] start_kernel+0x3fd/0x500 [ 74.817006][ T16] x86_64_start_reservations+0x2a/0x30 [ 74.824859][ T16] x86_64_start_kernel+0x99/0xa0 [ 74.831593][ T16] common_startup_64+0x13e/0x147 [ 74.838779][ T16] INITIAL USE at: [ 74.842775][ T16] lock_acquire+0x1e4/0x530 [ 74.849233][ T16] _raw_spin_lock_irqsave+0xd5/0x120 [ 74.856557][ T16] lock_timer_base+0x112/0x240 [ 74.863321][ T16] __mod_timer+0x1ca/0xeb0 [ 74.869544][ T16] queue_delayed_work_on+0x15a/0x260 [ 74.877018][ T16] crng_reseed+0xe7/0x220 [ 74.883767][ T16] random_init+0x1a9/0x300 [ 74.890694][ T16] start_kernel+0x253/0x500 [ 74.897470][ T16] x86_64_start_reservations+0x2a/0x30 [ 74.905073][ T16] x86_64_start_kernel+0x99/0xa0 [ 74.912129][ T16] common_startup_64+0x13e/0x147 [ 74.919119][ T16] } [ 74.921827][ T16] ... key at: [] init_timer_cpu.__key+0x0/0x20 [ 74.930223][ T16] [ 74.930223][ T16] the dependencies between the lock to be acquired [ 74.930234][ T16] and HARDIRQ-irq-unsafe lock: [ 74.943884][ T16] -> (&htab->buckets[i].lock){+...}-{2:2} { [ 74.949817][ T16] HARDIRQ-ON-W at: [ 74.953817][ T16] lock_acquire+0x1e4/0x530 [ 74.960094][ T16] _raw_spin_lock_bh+0x35/0x50 [ 74.966550][ T16] sock_hash_free+0x164/0x820 [ 74.973455][ T16] bpf_map_free_deferred+0xe6/0x110 [ 74.980764][ T16] process_scheduled_works+0xa00/0x1770 [ 74.988261][ T16] worker_thread+0x86d/0xd70 [ 74.995475][ T16] kthread+0x2f0/0x390 [ 75.001305][ T16] ret_from_fork+0x4b/0x80 [ 75.007923][ T16] ret_from_fork_asm+0x1a/0x30 [ 75.014647][ T16] INITIAL USE at: [ 75.018736][ T16] lock_acquire+0x1e4/0x530 [ 75.024931][ T16] _raw_spin_lock_bh+0x35/0x50 [ 75.031316][ T16] sock_hash_free+0x164/0x820 [ 75.037586][ T16] bpf_map_free_deferred+0xe6/0x110 [ 75.044363][ T16] process_scheduled_works+0xa00/0x1770 [ 75.051481][ T16] worker_thread+0x86d/0xd70 [ 75.057643][ T16] kthread+0x2f0/0x390 [ 75.063289][ T16] ret_from_fork+0x4b/0x80 [ 75.069367][ T16] ret_from_fork_asm+0x1a/0x30 [ 75.075803][ T16] } [ 75.078310][ T16] ... key at: [] sock_hash_alloc.__key+0x0/0x20 [ 75.087080][ T16] ... acquired at: [ 75.090884][ T16] lock_acquire+0x1e4/0x530 [ 75.095579][ T16] _raw_spin_lock_bh+0x35/0x50 [ 75.100658][ T16] sock_hash_delete_elem+0xb0/0x300 [ 75.106350][ T16] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 75.112367][ T16] bpf_trace_run2+0x204/0x420 [ 75.117239][ T16] enqueue_timer+0x396/0x550 [ 75.122014][ T16] __mod_timer+0xa0e/0xeb0 [ 75.126730][ T16] schedule_timeout+0x1b9/0x310 [ 75.131961][ T16] rcu_gp_fqs_loop+0x2df/0x1370 [ 75.137262][ T16] rcu_gp_kthread+0xa7/0x3b0 [ 75.142062][ T16] kthread+0x2f0/0x390 [ 75.146822][ T16] ret_from_fork+0x4b/0x80 [ 75.151546][ T16] ret_from_fork_asm+0x1a/0x30 [ 75.156629][ T16] [ 75.158965][ T16] [ 75.158965][ T16] stack backtrace: [ 75.164855][ T16] CPU: 1 PID: 16 Comm: rcu_preempt Not tainted 6.8.0-syzkaller-05271-gf99c5f563c17 #0 [ 75.174523][ T16] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 75.184608][ T16] Call Trace: [ 75.188115][ T16] [ 75.191226][ T16] dump_stack_lvl+0x1e7/0x2e0 [ 75.196137][ T16] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.201545][ T16] ? __pfx__printk+0x10/0x10 [ 75.206336][ T16] ? print_shortest_lock_dependencies+0xf2/0x160 [ 75.213068][ T16] validate_chain+0x4dc7/0x58e0 [ 75.218315][ T16] ? __pfx_validate_chain+0x10/0x10 [ 75.223626][ T16] ? __pfx_validate_chain+0x10/0x10 [ 75.228967][ T16] ? register_lock_class+0x102/0x980 [ 75.234316][ T16] ? __pfx_register_lock_class+0x10/0x10 [ 75.239965][ T16] ? mark_lock+0x9a/0x350 [ 75.244307][ T16] __lock_acquire+0x1346/0x1fd0 [ 75.249261][ T16] lock_acquire+0x1e4/0x530 [ 75.253871][ T16] ? sock_hash_delete_elem+0xb0/0x300 [ 75.259887][ T16] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 75.265641][ T16] ? __pfx_lock_acquire+0x10/0x10 [ 75.270869][ T16] ? sock_hash_delete_elem+0xb0/0x300 [ 75.276428][ T16] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 75.282244][ T16] ? __pfx_lock_acquire+0x10/0x10 [ 75.287284][ T16] ? do_raw_spin_unlock+0x13c/0x8b0 [ 75.293023][ T16] ? sock_hash_delete_elem+0xb0/0x300 [ 75.298404][ T16] _raw_spin_lock_bh+0x35/0x50 [ 75.303178][ T16] ? sock_hash_delete_elem+0xb0/0x300 [ 75.309044][ T16] sock_hash_delete_elem+0xb0/0x300 [ 75.314372][ T16] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 75.320654][ T16] bpf_trace_run2+0x204/0x420 [ 75.325655][ T16] ? bpf_trace_run2+0x114/0x420 [ 75.331149][ T16] ? __pfx_bpf_trace_run2+0x10/0x10 [ 75.336724][ T16] ? __pfx_debug_object_activate+0x10/0x10 [ 75.343351][ T16] ? lockdep_hardirqs_on+0x99/0x150 [ 75.349014][ T16] enqueue_timer+0x396/0x550 [ 75.354239][ T16] __mod_timer+0xa0e/0xeb0 [ 75.358996][ T16] ? __asan_memset+0x23/0x50 [ 75.363850][ T16] ? __pfx___mod_timer+0x10/0x10 [ 75.368950][ T16] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 75.375497][ T16] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 75.382014][ T16] schedule_timeout+0x1b9/0x310 [ 75.387604][ T16] ? __pfx_schedule_timeout+0x10/0x10 [ 75.393178][ T16] ? __pfx_process_timeout+0x10/0x10 [ 75.398867][ T16] ? prepare_to_swait_event+0x32e/0x350 [ 75.404613][ T16] rcu_gp_fqs_loop+0x2df/0x1370 [ 75.409722][ T16] ? lockdep_hardirqs_on+0x99/0x150 [ 75.414975][ T16] ? __pfx_rcu_gp_init+0x10/0x10 [ 75.420292][ T16] ? lockdep_hardirqs_on+0x99/0x150 [ 75.425569][ T16] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 75.430915][ T16] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 75.436847][ T16] ? finish_swait+0xd4/0x1e0 [ 75.441516][ T16] rcu_gp_kthread+0xa7/0x3b0 [ 75.446252][ T16] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 75.451506][ T16] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 75.457538][ T16] ? __kthread_parkme+0x169/0x1d0 [ 75.462675][ T16] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 75.468150][ T16] kthread+0x2f0/0x390 [ 75.472608][ T16] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 75.478096][ T16] ? __pfx_kthread+0x10/0x10 [ 75.482849][ T16] ret_from_fork+0x4b/0x80 [ 75.487402][ T16] ? __pfx_kthread+0x10/0x10 [ 75.492265][ T16] ret_from_fork_asm+0x1a/0x30 [ 75.497148][ T16]