./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1637064143 <...> Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts. execve("./syz-executor1637064143", ["./syz-executor1637064143"], 0x7ffcd2aa6350 /* 10 vars */) = 0 brk(NULL) = 0x555561842000 brk(0x555561842d00) = 0x555561842d00 arch_prctl(ARCH_SET_FS, 0x555561842380) = 0 set_tid_address(0x555561842650) = 5066 set_robust_list(0x555561842660, 24) = 0 rseq(0x555561842ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1637064143", 4096) = 28 getrandom("\x82\x9a\x11\x10\xe9\x01\x48\x0d", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555561842d00 brk(0x555561863d00) = 0x555561863d00 brk(0x555561864000) = 0x555561864000 mprotect(0x7f843a9ae000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5067 attached , child_tidptr=0x555561842650) = 5067 [pid 5067] set_robust_list(0x555561842660, 24) = 0 [pid 5067] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5067] setpgid(0, 0) = 0 [pid 5067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5067] write(3, "1000", 4) = 4 [pid 5067] close(3) = 0 [pid 5067] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=8, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5067] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5067] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5067] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_kthread_work_queue_work", prog_fd=4}}, 16) = 5 [pid 5067] exit_group(0) = ? [pid 5067] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5067, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5068 attached , child_tidptr=0x555561842650) = 5068 [pid 5068] set_robust_list(0x555561842660, 24) = 0 [pid 5068] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5068] setpgid(0, 0) = 0 [pid 5068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] write(3, "1000", 4) = 4 [pid 5068] close(3) = 0 [pid 5068] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=8, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5068] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5068] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5068] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_kthread_work_queue_work", prog_fd=4}}, 16) = 5 [pid 5068] exit_group(0) = ? [pid 5068] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5068, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5069 attached , child_tidptr=0x555561842650) = 5069 [pid 5069] set_robust_list(0x555561842660, 24) = 0 [pid 5069] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5069] setpgid(0, 0) = 0 [pid 5069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5069] write(3, "1000", 4) = 4 [pid 5069] close(3) = 0 [pid 5069] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=8, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5069] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5069] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5069] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_kthread_work_queue_work", prog_fd=4}}, 16) = 5 [pid 5069] exit_group(0) = ? [pid 5069] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5069, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5070 attached , child_tidptr=0x555561842650) = 5070 [pid 5070] set_robust_list(0x555561842660, 24) = 0 [pid 5070] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5070] setpgid(0, 0) = 0 [pid 5070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5070] write(3, "1000", 4) = 4 [pid 5070] close(3) = 0 [pid 5070] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=8, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5070] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5070] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5070] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_kthread_work_queue_work", prog_fd=4}}, 16) = 5 [pid 5070] exit_group(0) = ? [pid 5070] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5070, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5071 attached [pid 5071] set_robust_list(0x555561842660, 24) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x555561842650) = 5071 [pid 5071] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5071] setpgid(0, 0) = 0 [pid 5071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "1000", 4) = 4 [pid 5071] close(3) = 0 [pid 5071] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=8, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5071] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5071] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5071] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_kthread_work_queue_work", prog_fd=4}}, 16) = 5 [pid 5071] exit_group(0) = ? [pid 5071] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5071, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5072 attached , child_tidptr=0x555561842650) = 5072 [pid 5072] set_robust_list(0x555561842660, 24) = 0 [pid 5072] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5072] setpgid(0, 0) = 0 [pid 5072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "1000", 4) = 4 [pid 5072] close(3) = 0 [pid 5072] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=8, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5072] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5072] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5072] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_kthread_work_queue_work", prog_fd=4}}, 16) = 5 [pid 5072] exit_group(0) = ? [pid 5072] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5072, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5073 attached , child_tidptr=0x555561842650) = 5073 [pid 5073] set_robust_list(0x555561842660, 24) = 0 [pid 5073] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] setpgid(0, 0) = 0 [pid 5073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "1000", 4) = 4 [pid 5073] close(3) = 0 [pid 5073] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=8, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5073] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5073] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5073] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_kthread_work_queue_work", prog_fd=4}}, 16) = 5 [ 58.111487][ T62] [ 58.113851][ T62] ===================================================== [ 58.120778][ T62] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 58.128221][ T62] 6.8.0-syzkaller-05236-g443574b03387 #0 Not tainted [ 58.135079][ T62] ----------------------------------------------------- [ 58.142256][ T62] kworker/u8:4/62 [HC0[0]:SC0[2]:HE0:SE0] is trying to acquire: [ 58.149884][ T62] ffff88801fbfa218 (&htab->buckets[i].lock){+...}-{2:2}, at: sock_hash_delete_elem+0xb0/0x300 [ 58.160178][ T62] [ 58.160178][ T62] and this task is already holding: [ 58.167525][ T62] ffff888016eb6120 ((worker)->lock){....}-{2:2}, at: kthread_queue_work+0x27/0x180 [ 58.176916][ T62] which would create a new lock dependency: [ 58.182790][ T62] ((worker)->lock){....}-{2:2} -> (&htab->buckets[i].lock){+...}-{2:2} [ 58.191134][ T62] [ 58.191134][ T62] but this new dependency connects a HARDIRQ-irq-safe lock: [ 58.200654][ T62] (&pool->lock){-.-.}-{2:2} [ 58.200674][ T62] [ 58.200674][ T62] ... which became HARDIRQ-irq-safe at: [ 58.213038][ T62] lock_acquire+0x1e4/0x530 [ 58.217614][ T62] _raw_spin_lock+0x2e/0x40 [ 58.222202][ T62] __queue_work+0x6ec/0xec0 [ 58.226787][ T62] queue_work_on+0x14f/0x250 [ 58.231459][ T62] hrtimer_run_queues+0x154/0x460 [ 58.236558][ T62] update_process_times+0x80/0x230 [ 58.241827][ T62] tick_periodic+0x190/0x220 [ 58.246509][ T62] tick_handle_periodic+0x4a/0x160 [ 58.251774][ T62] __sysvec_apic_timer_interrupt+0x107/0x3a0 [ 58.257842][ T62] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 58.263705][ T62] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 58.269761][ T62] kasan_check_range+0x7/0x290 [ 58.274599][ T62] rwsem_spin_on_owner+0x1fb/0x2f0 [ 58.279803][ T62] rwsem_down_write_slowpath+0x272/0x13b0 [ 58.285969][ T62] __down_write_common+0x1af/0x200 [ 58.291206][ T62] early_event_add_tracer+0x4a/0x80 [ 58.296481][ T62] event_trace_init+0xeb/0x170 [ 58.301578][ T62] tracer_init_tracefs_work_func+0x11/0x140 [ 58.307548][ T62] process_scheduled_works+0xa00/0x1770 [ 58.313172][ T62] worker_thread+0x86d/0xd70 [ 58.317833][ T62] kthread+0x2f0/0x390 [ 58.322071][ T62] ret_from_fork+0x4b/0x80 [ 58.326563][ T62] ret_from_fork_asm+0x1a/0x30 [ 58.331402][ T62] [ 58.331402][ T62] to a HARDIRQ-irq-unsafe lock: [ 58.338494][ T62] (&htab->buckets[i].lock){+...}-{2:2} [ 58.338515][ T62] [ 58.338515][ T62] ... which became HARDIRQ-irq-unsafe at: [ 58.352043][ T62] ... [ 58.352053][ T62] lock_acquire+0x1e4/0x530 [ 58.359243][ T62] _raw_spin_lock_bh+0x35/0x50 [ 58.364095][ T62] sock_hash_free+0x164/0x820 [ 58.368850][ T62] bpf_map_free_deferred+0xe6/0x110 [ 58.374230][ T62] process_scheduled_works+0xa00/0x1770 [ 58.380471][ T62] worker_thread+0x86d/0xd70 [ 58.385141][ T62] kthread+0x2f0/0x390 [ 58.389335][ T62] ret_from_fork+0x4b/0x80 [ 58.393830][ T62] ret_from_fork_asm+0x1a/0x30 [ 58.398671][ T62] [ 58.398671][ T62] other info that might help us debug this: [ 58.398671][ T62] [ 58.408887][ T62] Chain exists of: [ 58.408887][ T62] &pool->lock --> (worker)->lock --> &htab->buckets[i].lock [ 58.408887][ T62] [ 58.422171][ T62] Possible interrupt unsafe locking scenario: [ 58.422171][ T62] [ 58.430475][ T62] CPU0 CPU1 [ 58.435826][ T62] ---- ---- [ 58.441174][ T62] lock(&htab->buckets[i].lock); [ 58.446972][ T62] local_irq_disable(); [ 58.453709][ T62] lock(&pool->lock); [ 58.460291][ T62] lock((worker)->lock); [ 58.467131][ T62] [ 58.470654][ T62] lock(&pool->lock); [ 58.474881][ T62] [ 58.474881][ T62] *** DEADLOCK *** [ 58.474881][ T62] [ 58.483013][ T62] 5 locks held by kworker/u8:4/62: [ 58.488104][ T62] #0: ffff888014c81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8e0/0x1770 [ 58.499756][ T62] #1: ffffc900015d7d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x91b/0x1770 [ 58.511410][ T62] #2: ffffffff8e136cb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x39a/0x820 [ 58.522355][ T62] #3: ffff888016eb6120 ((worker)->lock){....}-{2:2}, at: kthread_queue_work+0x27/0x180 [ 58.532084][ T62] #4: ffffffff8e131920 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x114/0x420 [ 58.541828][ T62] [ 58.541828][ T62] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 58.552413][ T62] -> (&pool->lock){-.-.}-{2:2} { [ 58.557527][ T62] IN-HARDIRQ-W at: [ 58.561578][ T62] lock_acquire+0x1e4/0x530 [ 58.568069][ T62] _raw_spin_lock+0x2e/0x40 [ 58.574384][ T62] __queue_work+0x6ec/0xec0 [ 58.580708][ T62] queue_work_on+0x14f/0x250 [ 58.587135][ T62] hrtimer_run_queues+0x154/0x460 [ 58.593974][ T62] update_process_times+0x80/0x230 [ 58.600894][ T62] tick_periodic+0x190/0x220 [ 58.607393][ T62] tick_handle_periodic+0x4a/0x160 [ 58.614320][ T62] __sysvec_apic_timer_interrupt+0x107/0x3a0 [ 58.622202][ T62] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 58.629920][ T62] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 58.637757][ T62] kasan_check_range+0x7/0x290 [ 58.644428][ T62] rwsem_spin_on_owner+0x1fb/0x2f0 [ 58.651351][ T62] rwsem_down_write_slowpath+0x272/0x13b0 [ 58.658884][ T62] __down_write_common+0x1af/0x200 [ 58.665806][ T62] early_event_add_tracer+0x4a/0x80 [ 58.672819][ T62] event_trace_init+0xeb/0x170 [ 58.679392][ T62] tracer_init_tracefs_work_func+0x11/0x140 [ 58.687099][ T62] process_scheduled_works+0xa00/0x1770 [ 58.694540][ T62] worker_thread+0x86d/0xd70 [ 58.700938][ T62] kthread+0x2f0/0x390 [ 58.706815][ T62] ret_from_fork+0x4b/0x80 [ 58.713055][ T62] ret_from_fork_asm+0x1a/0x30 [ 58.719715][ T62] IN-SOFTIRQ-W at: [ 58.723793][ T62] lock_acquire+0x1e4/0x530 [ 58.730197][ T62] _raw_spin_lock+0x2e/0x40 [ 58.736681][ T62] __queue_work+0x6ec/0xec0 [ 58.742993][ T62] call_timer_fn+0x17e/0x600 [ 58.749390][ T62] __run_timer_base+0x695/0x8e0 [ 58.756050][ T62] run_timer_softirq+0xb7/0x170 [ 58.762880][ T62] __do_softirq+0x2bc/0x943 [ 58.769192][ T62] __irq_exit_rcu+0xf2/0x1c0 [ 58.775587][ T62] irq_exit_rcu+0x9/0x30 [ 58.782170][ T62] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 58.789700][ T62] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 58.797581][ T62] default_idle+0x13/0x20 [ 58.803722][ T62] default_idle_call+0x74/0xb0 [ 58.810295][ T62] do_idle+0x22f/0x5d0 [ 58.816179][ T62] cpu_startup_entry+0x42/0x60 [ 58.822749][ T62] rest_init+0x2e0/0x300 [ 58.828803][ T62] arch_call_rest_init+0xe/0x10 [ 58.835550][ T62] start_kernel+0x47a/0x500 [ 58.841954][ T62] x86_64_start_reservations+0x2a/0x30 [ 58.849312][ T62] x86_64_start_kernel+0x99/0xa0 [ 58.857534][ T62] common_startup_64+0x13e/0x147 [ 58.864454][ T62] INITIAL USE at: [ 58.868416][ T62] lock_acquire+0x1e4/0x530 [ 58.874725][ T62] _raw_spin_lock+0x2e/0x40 [ 58.881036][ T62] __queue_work+0x6ec/0xec0 [ 58.887349][ T62] queue_work_on+0x14f/0x250 [ 58.893668][ T62] start_poll_synchronize_rcu_expedited+0xf7/0x150 [ 58.901900][ T62] rcu_init+0xea/0x140 [ 58.907711][ T62] start_kernel+0x1f7/0x500 [ 58.913933][ T62] x86_64_start_reservations+0x2a/0x30 [ 58.921214][ T62] x86_64_start_kernel+0x99/0xa0 [ 58.927874][ T62] common_startup_64+0x13e/0x147 [ 58.934732][ T62] } [ 58.937386][ T62] ... key at: [] init_worker_pool.__key+0x0/0x20 [ 58.946220][ T62] -> ((worker)->lock){....}-{2:2} { [ 58.951423][ T62] INITIAL USE at: [ 58.955307][ T62] lock_acquire+0x1e4/0x530 [ 58.961371][ T62] _raw_spin_lock_irq+0xd3/0x120 [ 58.967864][ T62] kthread_worker_fn+0x236/0xab0 [ 58.974352][ T62] kthread+0x2f0/0x390 [ 58.979968][ T62] ret_from_fork+0x4b/0x80 [ 58.985935][ T62] ret_from_fork_asm+0x1a/0x30 [ 58.992250][ T62] } [ 58.994732][ T62] ... key at: [] __kthread_create_worker.__key+0x0/0x20 [ 59.003741][ T62] ... acquired at: [ 59.007527][ T62] lock_acquire+0x1e4/0x530 [ 59.012187][ T62] _raw_spin_lock_irqsave+0xd5/0x120 [ 59.017634][ T62] kthread_queue_work+0x27/0x180 [ 59.022740][ T62] put_pwq_unlocked+0x12a/0x190 [ 59.027837][ T62] apply_workqueue_attrs_locked+0x132/0x210 [ 59.033891][ T62] apply_workqueue_attrs+0x30/0x50 [ 59.039187][ T62] padata_alloc+0x22b/0x370 [ 59.043854][ T62] pcrypt_init_padata+0x27/0x100 [ 59.048955][ T62] pcrypt_init+0x65/0xe0 [ 59.053363][ T62] do_one_initcall+0x238/0x830 [ 59.058286][ T62] do_initcall_level+0x157/0x210 [ 59.063387][ T62] do_initcalls+0x3f/0x80 [ 59.067873][ T62] kernel_init_freeable+0x435/0x5d0 [ 59.073276][ T62] kernel_init+0x1d/0x2a0 [ 59.077769][ T62] ret_from_fork+0x4b/0x80 [ 59.082348][ T62] ret_from_fork_asm+0x1a/0x30 [ 59.087271][ T62] [ 59.089576][ T62] [ 59.089576][ T62] the dependencies between the lock to be acquired [ 59.089583][ T62] and HARDIRQ-irq-unsafe lock: [ 59.103272][ T62] -> (&htab->buckets[i].lock){+...}-{2:2} { [ 59.109172][ T62] HARDIRQ-ON-W at: [ 59.113222][ T62] lock_acquire+0x1e4/0x530 [ 59.119369][ T62] _raw_spin_lock_bh+0x35/0x50 [ 59.125791][ T62] sock_hash_free+0x164/0x820 [ 59.132102][ T62] bpf_map_free_deferred+0xe6/0x110 [ 59.138935][ T62] process_scheduled_works+0xa00/0x1770 [ 59.146117][ T62] worker_thread+0x86d/0xd70 [ 59.152434][ T62] kthread+0x2f0/0x390 [ 59.158157][ T62] ret_from_fork+0x4b/0x80 [ 59.164386][ T62] ret_from_fork_asm+0x1a/0x30 [ 59.170875][ T62] INITIAL USE at: [ 59.174755][ T62] lock_acquire+0x1e4/0x530 [ 59.180915][ T62] _raw_spin_lock_bh+0x35/0x50 [ 59.187242][ T62] sock_hash_free+0x164/0x820 [ 59.193478][ T62] bpf_map_free_deferred+0xe6/0x110 [ 59.200265][ T62] process_scheduled_works+0xa00/0x1770 [ 59.207448][ T62] worker_thread+0x86d/0xd70 [ 59.213586][ T62] kthread+0x2f0/0x390 [ 59.219203][ T62] ret_from_fork+0x4b/0x80 [ 59.225171][ T62] ret_from_fork_asm+0x1a/0x30 [ 59.231488][ T62] } [ 59.233974][ T62] ... key at: [] sock_hash_alloc.__key+0x0/0x20 [ 59.242411][ T62] ... acquired at: [ 59.246224][ T62] lock_acquire+0x1e4/0x530 [ 59.250920][ T62] _raw_spin_lock_bh+0x35/0x50 [ 59.255869][ T62] sock_hash_delete_elem+0xb0/0x300 [ 59.261246][ T62] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 59.266876][ T62] bpf_trace_run2+0x204/0x420 [ 59.271732][ T62] kthread_insert_work+0x3f4/0x460 [ 59.277029][ T62] kthread_queue_work+0xff/0x180 [ 59.282147][ T62] synchronize_rcu_expedited+0x593/0x820 [ 59.288046][ T62] synchronize_rcu+0x136/0x3e0 [ 59.292991][ T62] sock_hash_free+0xac/0x820 [ 59.297749][ T62] bpf_map_free_deferred+0xe6/0x110 [ 59.303112][ T62] process_scheduled_works+0xa00/0x1770 [ 59.308907][ T62] worker_thread+0x86d/0xd70 [ 59.313840][ T62] kthread+0x2f0/0x390 [ 59.318097][ T62] ret_from_fork+0x4b/0x80 [ 59.322779][ T62] ret_from_fork_asm+0x1a/0x30 [ 59.327711][ T62] [ 59.330080][ T62] [ 59.330080][ T62] stack backtrace: [ 59.336015][ T62] CPU: 1 PID: 62 Comm: kworker/u8:4 Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0 [ 59.345631][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 59.355670][ T62] Workqueue: events_unbound bpf_map_free_deferred [ 59.362077][ T62] Call Trace: [ 59.365350][ T62] [ 59.368352][ T62] dump_stack_lvl+0x1e7/0x2e0 [ 59.373027][ T62] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.378393][ T62] ? __pfx__printk+0x10/0x10 [ 59.382984][ T62] ? print_shortest_lock_dependencies+0xf2/0x160 [ 59.389305][ T62] validate_chain+0x4dc7/0x58e0 [ 59.394161][ T62] ? __pfx_validate_chain+0x10/0x10 [ 59.399349][ T62] ? validate_chain+0x11b/0x58e0 [ 59.404274][ T62] ? __lock_acquire+0x1346/0x1fd0 [ 59.409372][ T62] ? __pfx_validate_chain+0x10/0x10 [ 59.414565][ T62] ? register_lock_class+0x102/0x980 [ 59.419838][ T62] ? __pfx_register_lock_class+0x10/0x10 [ 59.425549][ T62] ? mark_lock+0x9a/0x350 [ 59.429866][ T62] ? __pfx_validate_chain+0x10/0x10 [ 59.435054][ T62] __lock_acquire+0x1346/0x1fd0 [ 59.439927][ T62] lock_acquire+0x1e4/0x530 [ 59.444417][ T62] ? sock_hash_delete_elem+0xb0/0x300 [ 59.449983][ T62] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 59.455697][ T62] ? __pfx_lock_acquire+0x10/0x10 [ 59.460798][ T62] ? sock_hash_delete_elem+0xb0/0x300 [ 59.466158][ T62] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 59.471951][ T62] ? __pfx_lock_acquire+0x10/0x10 [ 59.476962][ T62] ? sock_hash_delete_elem+0xb0/0x300 [ 59.482414][ T62] _raw_spin_lock_bh+0x35/0x50 [ 59.487253][ T62] ? sock_hash_delete_elem+0xb0/0x300 [ 59.492614][ T62] sock_hash_delete_elem+0xb0/0x300 [ 59.497803][ T62] ? do_raw_spin_lock+0x14f/0x370 [ 59.502906][ T62] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 59.508354][ T62] bpf_trace_run2+0x204/0x420 [ 59.513019][ T62] ? bpf_trace_run2+0x114/0x420 [ 59.517858][ T62] ? __pfx_bpf_trace_run2+0x10/0x10 [ 59.523049][ T62] kthread_insert_work+0x3f4/0x460 [ 59.528150][ T62] kthread_queue_work+0xff/0x180 [ 59.533076][ T62] synchronize_rcu_expedited+0x593/0x820 [ 59.538706][ T62] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 59.544935][ T62] ? __pfx_validate_chain+0x10/0x10 [ 59.550224][ T62] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 59.556540][ T62] ? __mod_timer+0xb89/0xeb0 [ 59.561125][ T62] ? __pfx_lock_release+0x10/0x10 [ 59.566144][ T62] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 59.571424][ T62] ? __pfx___might_resched+0x10/0x10 [ 59.576699][ T62] ? look_up_lock_class+0x77/0x160 [ 59.581826][ T62] synchronize_rcu+0x136/0x3e0 [ 59.586581][ T62] ? __pfx_synchronize_rcu+0x10/0x10 [ 59.591860][ T62] ? mark_lock+0x9a/0x350 [ 59.596178][ T62] ? debug_object_deactivate+0x2d5/0x390 [ 59.601802][ T62] ? __lock_acquire+0x1346/0x1fd0 [ 59.607351][ T62] sock_hash_free+0xac/0x820 [ 59.611933][ T62] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 59.618017][ T62] ? __pfx_sock_hash_free+0x10/0x10 [ 59.623214][ T62] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 59.629616][ T62] bpf_map_free_deferred+0xe6/0x110 [ 59.634806][ T62] ? process_scheduled_works+0x91b/0x1770 [ 59.640511][ T62] process_scheduled_works+0xa00/0x1770 [ 59.646146][ T62] ? __pfx_process_scheduled_works+0x10/0x10 [ 59.652114][ T62] ? assign_work+0x364/0x3d0 [ 59.656893][ T62] worker_thread+0x86d/0xd70 [ 59.661492][ T62] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 59.667374][ T62] ? __kthread_parkme+0x169/0x1d0 [ 59.672389][ T62] ? __pfx_worker_thread+0x10/0x10 [ 59.677573][ T62] kthread+0x2f0/0x390 [ 59.681633][ T62] ? __pfx_worker_thread+0x10/0x10 [ 59.686738][ T62] ? __pfx_kthread+0x10/0x10 [ 59.691319][ T62] ret_from_fork+0x4b/0x80 [ 59.695727][ T62] ? __pfx_kthread+0x10/0x10 [ 59.700307][ T62] ret_from_fork_asm+0x1a/0x30 [ 59.705073][ T62] [ 59.708381][ T62] ------------[ cut here ]------------ [pid 5073] exit_group(0) = ? [ 59.713968][ T62] raw_local_irq_restore() called with IRQs enabled [ 59.720603][ T62] WARNING: CPU: 1 PID: 62 at kernel/locking/irqflag-debug.c:10 warn_bogus_irq_restore+0x29/0x40 [ 59.731077][ T62] Modules linked in: [ 59.735034][ T62] CPU: 1 PID: 62 Comm: kworker/u8:4 Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0 [ 59.744727][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 59.755021][ T62] Workqueue: events_unbound bpf_map_free_deferred [ 59.761498][ T62] RIP: 0010:warn_bogus_irq_restore+0x29/0x40 [pid 5073] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5073, si_uid=0, si_status=0, si_utime=0, si_stime=163 /* 1.63 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555561842650) = 5074 [ 59.767491][ T62] Code: 90 f3 0f 1e fa 90 80 3d de 59 01 04 00 74 06 90 c3 cc cc cc cc c6 05 cf 59 01 04 01 90 48 c7 c7 20 ba aa 8b e8 f8 d5 e7 f5 90 <0f> 0b 90 90 90 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f [ 59.787138][ T62] RSP: 0018:ffffc900015d7598 EFLAGS: 00010246 [ 59.793422][ T62] RAX: 8757884f84b05700 RBX: 1ffff920002baeb8 RCX: ffff888017b03c00 [ 59.801953][ T62] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.809940][ T62] RBP: ffffc900015d7630 R08: ffffffff8157cc12 R09: 1ffff920002bae08 ./strace-static-x86_64: Process 5074 attached [pid 5074] set_robust_list(0x555561842660, 24) = 0 [pid 5074] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5074] setpgid(0, 0) = 0 [pid 5074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 59.817955][ T62] R10: dffffc0000000000 R11: fffff520002bae09 R12: dffffc0000000000 [ 59.825954][ T62] R13: 1ffff920002baeb4 R14: ffffc900015d75c0 R15: 0000000000000246 [ 59.834073][ T62] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 59.843032][ T62] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.849642][ T62] CR2: 0000000000000000 CR3: 0000000020aa8000 CR4: 00000000003506f0 [ 59.857742][ T62] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [pid 5074] write(3, "1000", 4) = 4 [pid 5074] close(3) = 0 [pid 5074] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=8, value_size=8, max_entries=8, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5074] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5074] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [ 59.865780][ T62] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.873861][ T62] Call Trace: [ 59.877142][ T62] [ 59.880059][ T62] ? __warn+0x163/0x4b0 [ 59.884236][ T62] ? warn_bogus_irq_restore+0x29/0x40 [ 59.889616][ T62] ? report_bug+0x2b3/0x500 [ 59.894146][ T62] ? warn_bogus_irq_restore+0x29/0x40 [ 59.899711][ T62] ? handle_bug+0x3e/0x70 [ 59.904088][ T62] ? exc_invalid_op+0x1a/0x50 [ 59.908786][ T62] ? asm_exc_invalid_op+0x1a/0x20 [ 59.913884][ T62] ? __warn_printk+0x292/0x360 [ 59.918682][ T62] ? warn_bogus_irq_restore+0x29/0x40 [ 59.924088][ T62] ? warn_bogus_irq_restore+0x28/0x40 [ 59.929468][ T62] _raw_spin_unlock_irqrestore+0x120/0x140 [ 59.935303][ T62] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 59.942048][ T62] kthread_queue_work+0x110/0x180 [ 59.947116][ T62] synchronize_rcu_expedited+0x593/0x820 [ 59.952948][ T62] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 59.959110][ T62] ? __pfx_validate_chain+0x10/0x10 [ 59.964424][ T62] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 59.970768][ T62] ? __mod_timer+0xb89/0xeb0 [ 59.975435][ T62] ? __pfx_lock_release+0x10/0x10 [ 59.980462][ T62] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 59.985782][ T62] ? __pfx___might_resched+0x10/0x10 [ 59.991191][ T62] ? look_up_lock_class+0x77/0x160 [ 59.996393][ T62] synchronize_rcu+0x136/0x3e0 [ 60.001194][ T62] ? __pfx_synchronize_rcu+0x10/0x10 [ 60.006493][ T62] ? mark_lock+0x9a/0x350 [ 60.011003][ T62] ? debug_object_deactivate+0x2d5/0x390 [ 60.016663][ T62] ? __lock_acquire+0x1346/0x1fd0 [ 60.021713][ T62] sock_hash_free+0xac/0x820 [ 60.026296][ T62] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 60.032400][ T62] ? __pfx_sock_hash_free+0x10/0x10 [ 60.037698][ T62] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 60.044176][ T62] bpf_map_free_deferred+0xe6/0x110 [ 60.049460][ T62] ? process_scheduled_works+0x91b/0x1770 [ 60.055230][ T62] process_scheduled_works+0xa00/0x1770 [ 60.060803][ T62] ? __pfx_process_scheduled_works+0x10/0x10 [ 60.066827][ T62] ? assign_work+0x364/0x3d0 [ 60.071450][ T62] worker_thread+0x86d/0xd70 [ 60.076075][ T62] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 60.082011][ T62] ? __kthread_parkme+0x169/0x1d0 [ 60.087040][ T62] ? __pfx_worker_thread+0x10/0x10 [ 60.092297][ T62] kthread+0x2f0/0x390 [ 60.096582][ T62] ? __pfx_worker_thread+0x10/0x10 [ 60.101713][ T62] ? __pfx_kthread+0x10/0x10 [ 60.106332][ T62] ret_from_fork+0x4b/0x80 [ 60.110831][ T62] ? __pfx_kthread+0x10/0x10 [ 60.115445][ T62] ret_from_fork_asm+0x1a/0x30 [ 60.120484][ T62] [ 60.123527][ T62] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 60.130813][ T62] CPU: 1 PID: 62 Comm: kworker/u8:4 Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0 [ 60.140441][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 60.150581][ T62] Workqueue: events_unbound bpf_map_free_deferred [ 60.157613][ T62] Call Trace: [ 60.160882][ T62] [ 60.163799][ T62] dump_stack_lvl+0x1e7/0x2e0 [ 60.168491][ T62] ? __pfx_dump_stack_lvl+0x10/0x10 [ 60.173693][ T62] ? __pfx__printk+0x10/0x10 [ 60.178268][ T62] ? _printk+0xd5/0x120 [ 60.182586][ T62] ? vscnprintf+0x5d/0x90 [ 60.186912][ T62] panic+0x349/0x860 [ 60.190798][ T62] ? __warn+0x172/0x4b0 [ 60.194963][ T62] ? __pfx_panic+0x10/0x10 [ 60.199544][ T62] ? show_trace_log_lvl+0x4e6/0x520 [ 60.204745][ T62] ? ret_from_fork_asm+0x1a/0x30 [ 60.209762][ T62] __warn+0x31e/0x4b0 [ 60.213822][ T62] ? warn_bogus_irq_restore+0x29/0x40 [ 60.219182][ T62] report_bug+0x2b3/0x500 [ 60.223508][ T62] ? warn_bogus_irq_restore+0x29/0x40 [ 60.229042][ T62] handle_bug+0x3e/0x70 [ 60.233189][ T62] exc_invalid_op+0x1a/0x50 [ 60.237692][ T62] asm_exc_invalid_op+0x1a/0x20 [ 60.242537][ T62] RIP: 0010:warn_bogus_irq_restore+0x29/0x40 [ 60.248543][ T62] Code: 90 f3 0f 1e fa 90 80 3d de 59 01 04 00 74 06 90 c3 cc cc cc cc c6 05 cf 59 01 04 01 90 48 c7 c7 20 ba aa 8b e8 f8 d5 e7 f5 90 <0f> 0b 90 90 90 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f [ 60.268184][ T62] RSP: 0018:ffffc900015d7598 EFLAGS: 00010246 [ 60.274250][ T62] RAX: 8757884f84b05700 RBX: 1ffff920002baeb8 RCX: ffff888017b03c00 [ 60.282214][ T62] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.290260][ T62] RBP: ffffc900015d7630 R08: ffffffff8157cc12 R09: 1ffff920002bae08 [ 60.298219][ T62] R10: dffffc0000000000 R11: fffff520002bae09 R12: dffffc0000000000 [ 60.306194][ T62] R13: 1ffff920002baeb4 R14: ffffc900015d75c0 R15: 0000000000000246 [ 60.314161][ T62] ? __warn_printk+0x292/0x360 [ 60.319020][ T62] ? warn_bogus_irq_restore+0x28/0x40 [ 60.324644][ T62] _raw_spin_unlock_irqrestore+0x120/0x140 [ 60.330710][ T62] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 60.337121][ T62] kthread_queue_work+0x110/0x180 [ 60.342143][ T62] synchronize_rcu_expedited+0x593/0x820 [ 60.347868][ T62] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 60.354098][ T62] ? __pfx_validate_chain+0x10/0x10 [ 60.359463][ T62] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 60.365781][ T62] ? __mod_timer+0xb89/0xeb0 [ 60.370361][ T62] ? __pfx_lock_release+0x10/0x10 [ 60.375373][ T62] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 60.380649][ T62] ? __pfx___might_resched+0x10/0x10 [ 60.385920][ T62] ? look_up_lock_class+0x77/0x160 [ 60.391027][ T62] synchronize_rcu+0x136/0x3e0 [ 60.395786][ T62] ? __pfx_synchronize_rcu+0x10/0x10 [ 60.401061][ T62] ? mark_lock+0x9a/0x350 [ 60.405381][ T62] ? debug_object_deactivate+0x2d5/0x390 [ 60.411000][ T62] ? __lock_acquire+0x1346/0x1fd0 [ 60.416107][ T62] sock_hash_free+0xac/0x820 [ 60.420697][ T62] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 60.426678][ T62] ? __pfx_sock_hash_free+0x10/0x10 [ 60.431866][ T62] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 60.438184][ T62] bpf_map_free_deferred+0xe6/0x110 [ 60.444934][ T62] ? process_scheduled_works+0x91b/0x1770 [ 60.450642][ T62] process_scheduled_works+0xa00/0x1770 [ 60.456447][ T62] ? __pfx_process_scheduled_works+0x10/0x10 [ 60.462506][ T62] ? assign_work+0x364/0x3d0 [ 60.467085][ T62] worker_thread+0x86d/0xd70 [ 60.471673][ T62] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 60.477642][ T62] ? __kthread_parkme+0x169/0x1d0 [ 60.482740][ T62] ? __pfx_worker_thread+0x10/0x10 [ 60.488009][ T62] kthread+0x2f0/0x390 [ 60.492074][ T62] ? __pfx_worker_thread+0x10/0x10 [ 60.497189][ T62] ? __pfx_kthread+0x10/0x10 [ 60.501769][ T62] ret_from_fork+0x4b/0x80 [ 60.506179][ T62] ? __pfx_kthread+0x10/0x10 [ 60.510759][ T62] ret_from_fork_asm+0x1a/0x30 [ 60.515521][ T62] [ 60.518848][ T62] Kernel Offset: disabled [ 60.523155][ T62] Rebooting in 86400 seconds..