Warning: Permanently added '10.128.0.187' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 41.785867][ T21] [ 41.788215][ T21] ===================================================== [ 41.795127][ T21] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 41.802562][ T21] 5.15.152-syzkaller #0 Not tainted [ 41.807736][ T21] ----------------------------------------------------- [ 41.814645][ T21] kworker/1:0/21 [HC0[0]:SC0[2]:HE0:SE0] is trying to acquire: [ 41.822167][ T21] ffff8880764928d8 (&htab->buckets[i].lock){+...}-{2:2}, at: sock_hash_delete_elem+0xac/0x2f0 [ 41.824819][ C0] ------------[ cut here ]------------ [ 41.832422][ T21] [ 41.832422][ T21] and this task is already holding: [ 41.832428][ T21] ffff8880b9b28098 [ 41.837889][ C0] raw_local_irq_restore() called with IRQs enabled [ 41.845203][ T21] (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 41.845238][ T21] which would create a new lock dependency: [ 41.845243][ T21] ( [ 41.848967][ C0] WARNING: CPU: 0 PID: 3524 at kernel/locking/irqflag-debug.c:10 warn_bogus_irq_restore+0x1d/0x20 [ 41.855396][ T21] &base->lock){-.-.}-{2:2} -> (&htab->buckets[i].lock){+...}-{2:2} [ 41.862844][ C0] Modules linked in: [ 41.862856][ C0] CPU: 0 PID: 3524 Comm: syz-executor155 Not tainted 5.15.152-syzkaller #0 [ 41.868710][ T21] [ 41.868710][ T21] but this new dependency connects a HARDIRQ-irq-safe lock: [ 41.868718][ T21] (&base->lock){-.-.}-{2:2} [ 41.868733][ T21] [ 41.868733][ T21] ... which became HARDIRQ-irq-safe at: [ 41.871210][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 41.881771][ T21] lock_acquire+0x1db/0x4f0 [ 41.881789][ T21] _raw_spin_lock_irqsave+0xd1/0x120 [ 41.889663][ C0] RIP: 0010:warn_bogus_irq_restore+0x1d/0x20 [ 41.893513][ T21] lock_timer_base+0x120/0x260 [ 41.902080][ C0] Code: 24 48 c7 c7 a0 d1 89 8a e8 6c d1 fe ff 80 3d ae 7f b4 03 00 74 01 c3 c6 05 a4 7f b4 03 01 48 c7 c7 80 0c 8b 8a e8 f3 1b 30 f7 <0f> 0b c3 41 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 [ 41.911485][ T21] add_timer_on+0x1eb/0x580 [ 41.911502][ T21] handle_irq_event+0x124/0x2b0 [ 41.916074][ C0] RSP: 0018:ffffc900000079d8 EFLAGS: 00010246 [ 41.923747][ T21] handle_edge_irq+0x245/0xbf0 [ 41.933789][ C0] [ 41.938334][ T21] __common_interrupt+0xd7/0x1f0 [ 41.938351][ T21] common_interrupt+0x9f/0xc0 [ 41.943694][ C0] RAX: 2f4cb5b546a46c00 RBX: 1ffff92000000f40 RCX: ffff888078ebd940 [ 41.949644][ T21] asm_common_interrupt+0x22/0x40 [ 41.949662][ T21] console_unlock+0xe53/0x12b0 [ 41.954479][ C0] RDX: 0000000000000103 RSI: 0000000000000103 RDI: 0000000000000000 [ 41.974052][ T21] vprintk_emit+0xbf/0x150 [ 41.974067][ T21] _printk+0xd1/0x111 [ 41.978651][ C0] RBP: ffffc90000007a70 R08: ffffffff8166665c R09: fffffbfff1bc71b6 [ 41.983543][ T21] spectre_v2_select_mitigation+0x4b9/0x748 [ 41.989591][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 41.994398][ T21] cpu_select_mitigations+0x3d/0x8f [ 41.996716][ C0] R13: 1ffff92000000f3c R14: ffffc90000007a00 R15: 0000000000000246 [ 42.001700][ T21] arch_cpu_finalize_init+0xf/0x81 [ 42.006450][ C0] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 42.014381][ T21] start_kernel+0x419/0x535 [ 42.019481][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.024289][ T21] secondary_startup_64_no_verify+0xb1/0xbb [ 42.032251][ C0] CR2: 00005555565f2ca8 CR3: 000000000c68e000 CR4: 00000000003506f0 [ 42.036713][ T21] [ 42.036713][ T21] to a HARDIRQ-irq-unsafe lock: [ 42.036721][ T21] (&htab->buckets[i].lock){+...}-{2:2} [ 42.040767][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.048802][ T21] [ 42.048802][ T21] ... which became HARDIRQ-irq-unsafe at: [ 42.048809][ T21] ... [ 42.048813][ T21] lock_acquire+0x1db/0x4f0 [ 42.048828][ T21] _raw_spin_lock_bh+0x31/0x40 [ 42.054770][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.062718][ T21] sock_hash_free+0x14c/0x780 [ 42.067986][ C0] Call Trace: [ 42.075913][ T21] process_one_work+0x8a1/0x10c0 [ 42.075930][ T21] worker_thread+0xaca/0x1280 [ 42.081194][ C0] [ 42.090088][ T21] kthread+0x3f6/0x4f0 [ 42.090103][ T21] ret_from_fork+0x1f/0x30 [ 42.094666][ C0] ? __warn+0x15b/0x300 [ 42.101218][ T21] [ 42.101218][ T21] other info that might help us debug this: [ 42.101218][ T21] [ 42.101225][ T21] Possible interrupt unsafe locking scenario: [ 42.101225][ T21] [ 42.101229][ T21] CPU0 CPU1 [ 42.101233][ T21] ---- ---- [ 42.101237][ T21] lock(&htab->buckets[i].lock [ 42.107196][ C0] ? warn_bogus_irq_restore+0x1d/0x20 [ 42.115130][ T21] ); [ 42.115135][ T21] local_irq_disable(); [ 42.115140][ T21] lock(&base->lock); [ 42.115153][ T21] lock( [ 42.122140][ C0] ? report_bug+0x1b7/0x2e0 [ 42.127659][ T21] &htab->buckets[i].lock); [ 42.127669][ T21] [ 42.127672][ T21] lock(&base->lock); [ 42.127683][ T21] [ 42.127683][ T21] *** DEADLOCK *** [ 42.127683][ T21] [ 42.135641][ C0] ? handle_bug+0x3d/0x70 [ 42.143484][ T21] 4 locks held by kworker/1:0/21: [ 42.146060][ C0] ? exc_invalid_op+0x16/0x40 [ 42.150604][ T21] #0: ffff888011c72138 [ 42.155441][ C0] ? asm_exc_invalid_op+0x16/0x20 [ 42.163370][ T21] ((wq_completion)rcu_gp [ 42.168119][ C0] ? __wake_up_klogd+0xcc/0x100 [ 42.171360][ T21] ){+.+.}-{0:0} [ 42.176366][ C0] ? warn_bogus_irq_restore+0x1d/0x20 [ 42.181086][ T21] , at: process_one_work+0x78a/0x10c0 [ 42.183909][ C0] ? warn_bogus_irq_restore+0x1d/0x20 [ 42.188030][ T21] #1: ffffc90000db7d20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0} [ 42.192516][ C0] _raw_spin_unlock_irqrestore+0x118/0x130 [ 42.196642][ T21] , at: process_one_work+0x7d0/0x10c0 [ 42.196658][ T21] #2: ffff8880b9b28098 [ 42.206876][ C0] ? _raw_spin_unlock+0x40/0x40 [ 42.215151][ T21] (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 42.220511][ C0] ? rcu_is_watching+0x11/0xa0 [ 42.225850][ T21] #3: ffffffff8c91f720 (rcu_read_lock){....}-{1:2} [ 42.230700][ C0] ? enqueue_timer+0x4bc/0x540 [ 42.236038][ T21] , at: rcu_lock_acquire+0x5/0x30 [ 42.236055][ T21] [ 42.236055][ T21] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 42.238535][ C0] __mod_timer+0xa8e/0xeb0 [ 42.245264][ T21] -> (&base->lock){-.-.}-{2:2} { [ 42.251843][ C0] ? mod_timer_pending+0x20/0x20 [ 42.257266][ T21] IN-HARDIRQ-W at: [ 42.257276][ T21] lock_acquire+0x1db/0x4f0 [ 42.261754][ C0] ? rcu_is_watching+0x11/0xa0 [ 42.266141][ T21] _raw_spin_lock_irqsave+0xd1/0x120 [ 42.266159][ T21] lock_timer_base+0x120/0x260 [ 42.269590][ C0] ? cpumask_next+0xc3/0xf0 [ 42.273800][ T21] add_timer_on+0x1eb/0x580 [ 42.281937][ C0] ? tcp_orphan_update+0x149/0x1c0 [ 42.286218][ T21] handle_irq_event+0x124/0x2b0 [ 42.286236][ T21] handle_edge_irq+0x245/0xbf0 [ 42.291226][ C0] call_timer_fn+0x16d/0x560 [ 42.295871][ T21] __common_interrupt+0xd7/0x1f0 [ 42.295888][ T21] common_interrupt+0x9f/0xc0 [ 42.300013][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 42.305003][ T21] asm_common_interrupt+0x22/0x40 [ 42.305021][ T21] console_unlock+0xe53/0x12b0 [ 42.309321][ C0] ? tcp_abort+0x330/0x330 [ 42.314139][ T21] vprintk_emit+0xbf/0x150 [ 42.317586][ C0] ? __run_timers+0x890/0x890 [ 42.322910][ T21] _printk+0xd1/0x111 [ 42.328269][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 42.333595][ T21] spectre_v2_select_mitigation+0x4b9/0x748 [ 42.341818][ C0] ? rcu_is_watching+0x11/0xa0 [ 42.347579][ T21] cpu_select_mitigations+0x3d/0x8f [ 42.347597][ T21] arch_cpu_finalize_init+0xf/0x81 [ 42.352954][ C0] ? tcp_abort+0x330/0x330 [ 42.357077][ T21] start_kernel+0x419/0x535 [ 42.357093][ T21] secondary_startup_64_no_verify+0xb1/0xbb [ 42.361914][ C0] __run_timers+0x67c/0x890 [ 42.369335][ T21] IN-SOFTIRQ-W at: [ 42.369345][ T21] lock_acquire+0x1db/0x4f0 [ 42.374089][ C0] ? detach_timer+0x2f0/0x2f0 [ 42.380638][ T21] _raw_spin_lock_irq+0xcf/0x110 [ 42.380656][ T21] __run_timers+0x111/0x890 [ 42.385404][ C0] __do_softirq+0x3b3/0x93a [ 42.390379][ T21] run_timer_softirq+0x63/0xf0 [ 42.400775][ C0] ? __irq_exit_rcu+0x155/0x240 [ 42.405141][ T21] __do_softirq+0x3b3/0x93a [ 42.405159][ T21] __irq_exit_rcu+0x155/0x240 [ 42.410065][ C0] ? __entry_text_end+0x1feabc/0x1feabc [ 42.414969][ T21] irq_exit_rcu+0x5/0x20 [ 42.414984][ T21] common_interrupt+0xa4/0xc0 [ 42.418935][ C0] ? hrtimer_interrupt+0x76b/0x980 [ 42.425057][ T21] asm_common_interrupt+0x22/0x40 [ 42.425075][ T21] console_unlock+0xe53/0x12b0 [ 42.429811][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 42.436712][ T21] vprintk_emit+0xbf/0x150 [ 42.436728][ T21] _printk+0xd1/0x111 [ 42.443113][ C0] __irq_exit_rcu+0x155/0x240 [ 42.447588][ T21] cpu_select_mitigations+0x56/0x8f [ 42.447606][ T21] arch_cpu_finalize_init+0xf/0x81 [ 42.453725][ C0] ? irq_exit_rcu+0x20/0x20 [ 42.458802][ T21] start_kernel+0x419/0x535 [ 42.458818][ T21] secondary_startup_64_no_verify+0xb1/0xbb [ 42.465308][ C0] irq_exit_rcu+0x5/0x20 [ 42.471671][ T21] INITIAL USE at: [ 42.476244][ C0] sysvec_apic_timer_interrupt+0x91/0xb0 [ 42.482783][ T21] lock_acquire+0x1db/0x4f0 [ 42.489099][ C0] [ 42.494076][ T21] _raw_spin_lock_irqsave+0xd1/0x120 [ 42.500735][ C0] [ 42.507103][ T21] lock_timer_base+0x120/0x260 [ 42.507121][ T21] add_timer_on+0x1eb/0x580 [ 42.511503][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 42.517535][ T21] handle_irq_event+0x124/0x2b0 [ 42.517553][ T21] handle_edge_irq+0x245/0xbf0 [ 42.522201][ C0] RIP: 0010:smp_call_function_many_cond+0xa93/0xd90 [ 42.527799][ T21] __common_interrupt+0xd7/0x1f0 [ 42.527816][ T21] common_interrupt+0x9f/0xc0 [ 42.532982][ C0] Code: 04 03 84 c0 0f 85 84 00 00 00 45 8b 7d 00 44 89 fe 83 e6 01 31 ff e8 ac ce 0b 00 41 83 e7 01 75 07 e8 41 cb 0b 00 eb 41 f3 90 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 45 00 [ 42.540491][ T21] asm_common_interrupt+0x22/0x40 [ 42.540509][ T21] console_unlock+0xe53/0x12b0 [ 42.545254][ C0] RSP: 0018:ffffc90002c277e0 EFLAGS: 00000293 [ 42.552061][ T21] vprintk_emit+0xbf/0x150 [ 42.558816][ C0] [ 42.563186][ T21] _printk+0xd1/0x111 [ 42.569324][ C0] RAX: ffffffff81746eb4 RBX: 1ffff110173680b1 RCX: ffff888078ebd940 [ 42.576821][ T21] spectre_v2_select_mitigation+0x4b9/0x748 [ 42.576841][ T21] cpu_select_mitigations+0x3d/0x8f [ 42.581309][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 42.585276][ T21] arch_cpu_finalize_init+0xf/0x81 [ 42.585293][ T21] start_kernel+0x419/0x535 [ 42.591418][ C0] RBP: ffffc90002c27920 R08: ffffffff81746e84 R09: fffffbfff193c8fb [ 42.596069][ T21] secondary_startup_64_no_verify+0xb1/0xbb [ 42.596097][ T21] } [ 42.596101][ T21] ... key at: [] init_timer_cpu.__key+0x0/0x20 [ 42.602677][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 42.608806][ T21] [ 42.608806][ T21] the dependencies between the lock to be acquired [ 42.608813][ T21] and HARDIRQ-irq-unsafe lock: [ 42.608837][ T21] -> (&htab->buckets[i].lock [ 42.613342][ C0] R13: ffff8880b9b40588 R14: ffff8880b9a3b380 R15: 0000000000000001 [ 42.619724][ T21] ){+...}-{2:2} { [ 42.619738][ T21] HARDIRQ-ON-W at: [ 42.619747][ T21] lock_acquire+0x1db/0x4f0 [ 42.624568][ C0] ? smp_call_function_many_cond+0xa84/0xd90 [ 42.630691][ T21] _raw_spin_lock_bh+0x31/0x40 [ 42.630710][ T21] sock_hash_free+0x14c/0x780 [ 42.637023][ C0] ? smp_call_function_many_cond+0xab4/0xd90 [ 42.642527][ T21] process_one_work+0x8a1/0x10c0 [ 42.648410][ C0] ? native_flush_tlb_multi+0xd0/0xd0 [ 42.654686][ T21] worker_thread+0xaca/0x1280 [ 42.659788][ C0] ? smp_call_function_many+0x30/0x30 [ 42.666412][ T21] kthread+0x3f6/0x4f0 [ 42.666428][ T21] ret_from_fork+0x1f/0x30 [ 42.672823][ C0] ? free_pgd_range+0xd3c/0xdb0 [ 42.677994][ T21] INITIAL USE at: [ 42.678005][ T21] lock_acquire+0x1db/0x4f0 [ 42.684048][ C0] ? rcu_is_watching+0x11/0xa0 [ 42.689645][ T21] _raw_spin_lock_bh+0x31/0x40 [ 42.689661][ T21] sock_hash_free+0x14c/0x780 [ 42.694307][ C0] ? native_flush_tlb_multi+0xd0/0xd0 [ 42.701125][ T21] process_one_work+0x8a1/0x10c0 [ 42.701142][ T21] worker_thread+0xaca/0x1280 [ 42.707887][ C0] on_each_cpu_cond_mask+0x3b/0x80 [ 42.712343][ T21] kthread+0x3f6/0x4f0 [ 42.718484][ C0] flush_tlb_mm_range+0x2a5/0x4a0 [ 42.725982][ T21] ret_from_fork+0x1f/0x30 [ 42.725999][ T21] } [ 42.730209][ C0] ? flush_tlb_multi+0x50/0x50 [ 42.734072][ T21] ... key at: [] sock_hash_alloc.__key+0x0/0x20 [ 42.739688][ C0] ? kmem_cache_free+0x146/0x1f0 [ 42.745707][ T21] ... acquired at: [ 42.745714][ T21] lock_acquire+0x1db/0x4f0 [ 42.745728][ T21] _raw_spin_lock_bh+0x31/0x40 [ 42.748640][ C0] tlb_flush_mmu_tlbonly+0x1ab/0x410 [ 42.755466][ T21] sock_hash_delete_elem+0xac/0x2f0 [ 42.755482][ T21] bpf_prog_2c29ac5cdc6b1842+0x3a/0x678 [ 42.758400][ C0] tlb_finish_mmu+0xd2/0x320 [ 42.764689][ T21] bpf_trace_run3+0x1d1/0x380 [ 42.770742][ C0] exit_mmap+0x3cd/0x670 [ 42.776671][ T21] enqueue_timer+0x3ae/0x540 [ 42.776690][ T21] __mod_timer+0xa60/0xeb0 [ 42.783082][ C0] ? vm_brk+0x20/0x20 [ 42.789374][ T21] schedule_timeout+0x1b4/0x300 [ 42.789390][ T21] rcu_exp_sel_wait_wake+0x7cb/0x1c00 [ 42.795966][ C0] ? uprobe_clear_state+0x304/0x460 [ 42.802419][ T21] process_one_work+0x8a1/0x10c0 [ 42.808646][ C0] __mmput+0x112/0x3b0 [ 42.828204][ T21] worker_thread+0xaca/0x1280 [ 42.828221][ T21] kthread+0x3f6/0x4f0 [ 42.834775][ C0] exit_mm+0x688/0x7f0 [ 42.841071][ T21] ret_from_fork+0x1f/0x30 [ 42.847122][ C0] ? _raw_spin_unlock_irq+0x2a/0x40 [ 42.853173][ T21] [ 42.853181][ T21] [ 42.853181][ T21] stack backtrace: [ 42.853187][ T21] CPU: 1 PID: 21 Comm: kworker/1:0 Not tainted 5.15.152-syzkaller #0 [ 42.855531][ C0] ? do_exit+0x2480/0x2480 [ 42.861014][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 42.861026][ T21] Workqueue: rcu_gp wait_rcu_exp_gp [ 42.869003][ C0] ? rcu_is_watching+0x11/0xa0 [ 42.876402][ T21] [ 42.876410][ T21] Call Trace: [ 42.876419][ T21] [ 42.876425][ T21] dump_stack_lvl+0x1e3/0x2cb [ 42.883154][ C0] ? hrtimer_try_to_cancel+0x3c9/0x410 [ 42.891111][ T21] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 42.891138][ T21] ? panic+0x84d/0x84d [ 42.891155][ T21] ? print_shortest_lock_dependencies+0xee/0x150 [ 42.897814][ C0] ? taskstats_exit+0x491/0xa10 [ 42.903834][ T21] validate_chain+0x4d01/0x5930 [ 42.911807][ C0] ? tty_audit_exit+0x150/0x1f0 [ 42.919226][ T21] ? reacquire_held_locks+0x660/0x660 [ 42.919264][ T21] ? register_lock_class+0x100/0x9a0 [ 42.921740][ C0] do_exit+0x626/0x2480 [ 42.929952][ T21] ? validate_chain+0x112/0x5930 [ 42.929977][ T21] ? is_dynamic_key+0x1f0/0x1f0 [ 42.929992][ T21] ? mark_lock+0x98/0x340 [ 42.937964][ C0] ? rcu_is_watching+0x11/0xa0 [ 42.946584][ T21] __lock_acquire+0x1295/0x1ff0 [ 42.946609][ T21] lock_acquire+0x1db/0x4f0 [ 42.951421][ C0] ? put_task_struct+0x80/0x80 [ 42.955979][ T21] ? sock_hash_delete_elem+0xac/0x2f0 [ 42.955999][ T21] ? lockdep_softirqs_on+0x590/0x590 [ 42.963946][ C0] ? vtime_user_exit+0x2d1/0x400 [ 42.967551][ T21] ? read_lock_is_recursive+0x10/0x10 [ 42.967570][ T21] ? sock_hash_delete_elem+0xac/0x2f0 [ 42.971523][ C0] do_group_exit+0x144/0x310 [ 42.977643][ T21] ? __bpf_trace_softirq+0x10/0x10 [ 42.977663][ T21] ? sock_hash_delete_elem+0xac/0x2f0 [ 42.983613][ C0] __x64_sys_exit_group+0x3b/0x40 [ 42.989999][ T21] _raw_spin_lock_bh+0x31/0x40 [ 42.990019][ T21] ? sock_hash_delete_elem+0xac/0x2f0 [ 42.996331][ C0] do_syscall_64+0x3d/0xb0 [ 43.002268][ T21] sock_hash_delete_elem+0xac/0x2f0 [ 43.008844][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.014166][ T21] bpf_prog_2c29ac5cdc6b1842+0x3a/0x678 [ 43.020480][ C0] RIP: 0033:0x7f4fbd24dec9 [ 43.025803][ T21] bpf_trace_run3+0x1d1/0x380 [ 43.025821][ T21] ? bpf_trace_run2+0x340/0x340 [ 43.031505][ C0] Code: Unable to access opcode bytes at RIP 0x7f4fbd24de9f. [ 43.037559][ T21] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 43.037579][ T21] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 43.042400][ C0] RSP: 002b:00007ffd9b595e48 EFLAGS: 00000246 [ 43.046265][ T21] ? _raw_spin_lock+0x40/0x40 [ 43.046282][ T21] ? __debug_object_init+0x258/0xd30 [ 43.052317][ C0] ORIG_RAX: 00000000000000e7 [ 43.057050][ T21] enqueue_timer+0x3ae/0x540 [ 43.057072][ T21] __mod_timer+0xa60/0xeb0 [ 43.063363][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4fbd24dec9 [ 43.069577][ T21] ? mod_timer_pending+0x20/0x20 [ 43.069596][ T21] ? lockdep_softirqs_off+0x420/0x420 [ 43.074943][ C0] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 43.081399][ T21] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 43.087625][ C0] RBP: 00007f4fbd2c92b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 43.092691][ T21] ? print_irqtrace_events+0x210/0x210 [ 43.098306][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4fbd2c92b0 [ 43.103312][ T21] schedule_timeout+0x1b4/0x300 [ 43.109273][ C0] R13: 0000000000000000 R14: 00007f4fbd2c9d00 R15: 00007f4fbd21f130 [ 43.111736][ T21] ? console_conditional_schedule+0x40/0x40 [ 43.116489][ C0] [ 43.124764][ T21] ? update_process_times+0x200/0x200 [ 43.129689][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 43.133453][ T21] rcu_exp_sel_wait_wake+0x7cb/0x1c00 [ 43.602713][ T21] ? rcu_check_gp_start_stall+0x450/0x450 [ 43.608424][ T21] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 43.614304][ T21] ? do_raw_spin_unlock+0x137/0x8b0 [ 43.619499][ T21] process_one_work+0x8a1/0x10c0 [ 43.624442][ T21] ? worker_detach_from_pool+0x260/0x260 [ 43.630065][ T21] ? _raw_spin_lock_irqsave+0x120/0x120 [ 43.635601][ T21] ? kthread_data+0x4e/0xc0 [ 43.640091][ T21] ? wq_worker_running+0x97/0x170 [ 43.645107][ T21] worker_thread+0xaca/0x1280 [ 43.649781][ T21] kthread+0x3f6/0x4f0 [ 43.653830][ T21] ? rcu_lock_release+0x20/0x20 [ 43.658670][ T21] ? kthread_blkcg+0xd0/0xd0 [ 43.663244][ T21] ret_from_fork+0x1f/0x30 [ 43.667652][ T21] [ 43.670660][ C0] CPU: 0 PID: 3524 Comm: syz-executor155 Not tainted 5.15.152-syzkaller #0 [ 43.679242][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 43.689269][ C0] Call Trace: [ 43.692522][ C0] [ 43.695339][ C0] dump_stack_lvl+0x1e3/0x2cb [ 43.699992][ C0] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 43.705597][ C0] ? panic+0x84d/0x84d [ 43.709635][ C0] ? __stack_chk_fail+0x10/0x10 [ 43.714457][ C0] ? __stack_chk_fail+0x10/0x10 [ 43.719280][ C0] panic+0x318/0x84d [ 43.723144][ C0] ? __warn+0x16a/0x300 [ 43.727289][ C0] ? fb_is_primary_device+0xcc/0xcc [ 43.732458][ C0] ? warn_bogus_irq_restore+0x1d/0x20 [ 43.737799][ C0] __warn+0x2b2/0x300 [ 43.741751][ C0] ? warn_bogus_irq_restore+0x1d/0x20 [ 43.747101][ C0] report_bug+0x1b7/0x2e0 [ 43.751416][ C0] handle_bug+0x3d/0x70 [ 43.755549][ C0] exc_invalid_op+0x16/0x40 [ 43.760033][ C0] asm_exc_invalid_op+0x16/0x20 [ 43.764862][ C0] RIP: 0010:warn_bogus_irq_restore+0x1d/0x20 [ 43.770818][ C0] Code: 24 48 c7 c7 a0 d1 89 8a e8 6c d1 fe ff 80 3d ae 7f b4 03 00 74 01 c3 c6 05 a4 7f b4 03 01 48 c7 c7 80 0c 8b 8a e8 f3 1b 30 f7 <0f> 0b c3 41 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 [ 43.790399][ C0] RSP: 0018:ffffc900000079d8 EFLAGS: 00010246 [ 43.796443][ C0] RAX: 2f4cb5b546a46c00 RBX: 1ffff92000000f40 RCX: ffff888078ebd940 [ 43.804386][ C0] RDX: 0000000000000103 RSI: 0000000000000103 RDI: 0000000000000000 [ 43.812332][ C0] RBP: ffffc90000007a70 R08: ffffffff8166665c R09: fffffbfff1bc71b6 [ 43.820276][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 43.828221][ C0] R13: 1ffff92000000f3c R14: ffffc90000007a00 R15: 0000000000000246 [ 43.836173][ C0] ? __wake_up_klogd+0xcc/0x100 [ 43.840999][ C0] ? warn_bogus_irq_restore+0x1d/0x20 [ 43.846344][ C0] _raw_spin_unlock_irqrestore+0x118/0x130 [ 43.852124][ C0] ? _raw_spin_unlock+0x40/0x40 [ 43.856947][ C0] ? rcu_is_watching+0x11/0xa0 [ 43.861682][ C0] ? enqueue_timer+0x4bc/0x540 [ 43.866419][ C0] __mod_timer+0xa8e/0xeb0 [ 43.870806][ C0] ? mod_timer_pending+0x20/0x20 [ 43.875719][ C0] ? rcu_is_watching+0x11/0xa0 [ 43.880458][ C0] ? cpumask_next+0xc3/0xf0 [ 43.884933][ C0] ? tcp_orphan_update+0x149/0x1c0 [ 43.890016][ C0] call_timer_fn+0x16d/0x560 [ 43.894577][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 43.899570][ C0] ? tcp_abort+0x330/0x330 [ 43.903956][ C0] ? __run_timers+0x890/0x890 [ 43.908607][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 43.913780][ C0] ? rcu_is_watching+0x11/0xa0 [ 43.918513][ C0] ? tcp_abort+0x330/0x330 [ 43.922899][ C0] __run_timers+0x67c/0x890 [ 43.927375][ C0] ? detach_timer+0x2f0/0x2f0 [ 43.932026][ C0] __do_softirq+0x3b3/0x93a [ 43.936501][ C0] ? __irq_exit_rcu+0x155/0x240 [ 43.941324][ C0] ? __entry_text_end+0x1feabc/0x1feabc [ 43.946841][ C0] ? hrtimer_interrupt+0x76b/0x980 [ 43.951922][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 43.957091][ C0] __irq_exit_rcu+0x155/0x240 [ 43.961739][ C0] ? irq_exit_rcu+0x20/0x20 [ 43.966215][ C0] irq_exit_rcu+0x5/0x20 [ 43.970426][ C0] sysvec_apic_timer_interrupt+0x91/0xb0 [ 43.976030][ C0] [ 43.978936][ C0] [ 43.981842][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 43.987796][ C0] RIP: 0010:smp_call_function_many_cond+0xa93/0xd90 [ 43.994352][ C0] Code: 04 03 84 c0 0f 85 84 00 00 00 45 8b 7d 00 44 89 fe 83 e6 01 31 ff e8 ac ce 0b 00 41 83 e7 01 75 07 e8 41 cb 0b 00 eb 41 f3 90 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 45 00 [ 44.013927][ C0] RSP: 0018:ffffc90002c277e0 EFLAGS: 00000293 [ 44.019967][ C0] RAX: ffffffff81746eb4 RBX: 1ffff110173680b1 RCX: ffff888078ebd940 [ 44.027909][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 44.035870][ C0] RBP: ffffc90002c27920 R08: ffffffff81746e84 R09: fffffbfff193c8fb [ 44.043814][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 44.051755][ C0] R13: ffff8880b9b40588 R14: ffff8880b9a3b380 R15: 0000000000000001 [ 44.059701][ C0] ? smp_call_function_many_cond+0xa84/0xd90 [ 44.065652][ C0] ? smp_call_function_many_cond+0xab4/0xd90 [ 44.071605][ C0] ? native_flush_tlb_multi+0xd0/0xd0 [ 44.076950][ C0] ? smp_call_function_many+0x30/0x30 [ 44.082291][ C0] ? free_pgd_range+0xd3c/0xdb0 [ 44.087113][ C0] ? rcu_is_watching+0x11/0xa0 [ 44.091850][ C0] ? native_flush_tlb_multi+0xd0/0xd0 [ 44.097189][ C0] on_each_cpu_cond_mask+0x3b/0x80 [ 44.102270][ C0] flush_tlb_mm_range+0x2a5/0x4a0 [ 44.107270][ C0] ? flush_tlb_multi+0x50/0x50 [ 44.112002][ C0] ? kmem_cache_free+0x146/0x1f0 [ 44.116913][ C0] tlb_flush_mmu_tlbonly+0x1ab/0x410 [ 44.122171][ C0] tlb_finish_mmu+0xd2/0x320 [ 44.126734][ C0] exit_mmap+0x3cd/0x670 [ 44.130952][ C0] ? vm_brk+0x20/0x20 [ 44.134907][ C0] ? uprobe_clear_state+0x304/0x460 [ 44.140077][ C0] __mmput+0x112/0x3b0 [ 44.144117][ C0] exit_mm+0x688/0x7f0 [ 44.148160][ C0] ? _raw_spin_unlock_irq+0x2a/0x40 [ 44.153331][ C0] ? do_exit+0x2480/0x2480 [ 44.157719][ C0] ? rcu_is_watching+0x11/0xa0 [ 44.162452][ C0] ? hrtimer_try_to_cancel+0x3c9/0x410 [ 44.167879][ C0] ? taskstats_exit+0x491/0xa10 [ 44.172714][ C0] ? tty_audit_exit+0x150/0x1f0 [ 44.177536][ C0] do_exit+0x626/0x2480 [ 44.181664][ C0] ? rcu_is_watching+0x11/0xa0 [ 44.186400][ C0] ? put_task_struct+0x80/0x80 [ 44.191139][ C0] ? vtime_user_exit+0x2d1/0x400 [ 44.196050][ C0] do_group_exit+0x144/0x310 [ 44.200611][ C0] __x64_sys_exit_group+0x3b/0x40 [ 44.205621][ C0] do_syscall_64+0x3d/0xb0 [ 44.210015][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.215881][ C0] RIP: 0033:0x7f4fbd24dec9 [ 44.220267][ C0] Code: Unable to access opcode bytes at RIP 0x7f4fbd24de9f. [ 44.227599][ C0] RSP: 002b:00007ffd9b595e48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 44.235997][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4fbd24dec9 [ 44.243940][ C0] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 44.251885][ C0] RBP: 00007f4fbd2c92b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 44.259841][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4fbd2c92b0 [ 44.267785][ C0] R13: 0000000000000000 R14: 00007f4fbd2c9d00 R15: 00007f4fbd21f130 [ 44.275731][ C0] [ 45.368147][ C0] Shutting down cpus with NMI [ 45.373116][ C0] Kernel Offset: disabled [ 45.377432][ C0] Rebooting in 86400 seconds..