Warning: Permanently added '10.128.10.20' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 49.889358][ T14] [ 49.891734][ T14] ===================================================== [ 49.898650][ T14] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 49.906089][ T14] 6.1.82-syzkaller #0 Not tainted [ 49.911093][ T14] ----------------------------------------------------- [ 49.918011][ T14] kworker/0:1/14 [HC0[0]:SC0[2]:HE0:SE0] is trying to acquire: [ 49.925540][ T14] ffff88807d609260 (&htab->buckets[i].lock){+...}-{2:2}, at: sock_hash_delete_elem+0xac/0x2f0 [ 49.935819][ T14] [ 49.935819][ T14] and this task is already holding: [ 49.943168][ T14] ffff8880b9828358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 49.952025][ T14] which would create a new lock dependency: [ 49.957901][ T14] (&base->lock){-.-.}-{2:2} -> (&htab->buckets[i].lock){+...}-{2:2} [ 49.965979][ T14] [ 49.965979][ T14] but this new dependency connects a HARDIRQ-irq-safe lock: [ 49.975412][ T14] (&base->lock){-.-.}-{2:2} [ 49.975431][ T14] [ 49.975431][ T14] ... which became HARDIRQ-irq-safe at: [ 49.987724][ T14] lock_acquire+0x1f8/0x5a0 [ 49.992324][ T14] _raw_spin_lock_irqsave+0xd1/0x120 [ 49.997708][ T14] lock_timer_base+0x120/0x260 [ 50.002553][ T14] add_timer_on+0x1eb/0x580 [ 50.007129][ T14] handle_irq_event+0xa9/0x1e0 [ 50.011966][ T14] handle_edge_irq+0x245/0xbf0 [ 50.016805][ T14] __common_interrupt+0xd7/0x1f0 [ 50.021822][ T14] common_interrupt+0x9f/0xc0 [ 50.026576][ T14] asm_common_interrupt+0x22/0x40 [ 50.031678][ T14] console_emit_next_record+0xc69/0xea0 [ 50.037298][ T14] console_unlock+0x278/0x7c0 [ 50.042072][ T14] vprintk_emit+0x523/0x740 [ 50.046673][ T14] _printk+0xd1/0x111 [ 50.050754][ T14] calibrate_delay+0x158f/0x16a0 [ 50.055780][ T14] start_kernel+0x41e/0x53f [ 50.060385][ T14] secondary_startup_64_no_verify+0xcf/0xdb [ 50.066393][ T14] [ 50.066393][ T14] to a HARDIRQ-irq-unsafe lock: [ 50.073407][ T14] (&htab->buckets[i].lock){+...}-{2:2} [ 50.073431][ T14] [ 50.073431][ T14] ... which became HARDIRQ-irq-unsafe at: [ 50.086849][ T14] ... [ 50.086858][ T14] lock_acquire+0x1f8/0x5a0 [ 50.094013][ T14] _raw_spin_lock_bh+0x31/0x40 [ 50.098871][ T14] sock_hash_free+0x160/0x820 [ 50.103636][ T14] process_one_work+0x8a9/0x11d0 [ 50.108647][ T14] worker_thread+0xa47/0x1200 [ 50.113402][ T14] kthread+0x28d/0x320 [ 50.117585][ T14] ret_from_fork+0x1f/0x30 [ 50.122142][ T14] [ 50.122142][ T14] other info that might help us debug this: [ 50.122142][ T14] [ 50.132367][ T14] Possible interrupt unsafe locking scenario: [ 50.132367][ T14] [ 50.140672][ T14] CPU0 CPU1 [ 50.146018][ T14] ---- ---- [ 50.151376][ T14] lock(&htab->buckets[i].lock); [ 50.156392][ T14] local_irq_disable(); [ 50.163139][ T14] lock(&base->lock); [ 50.169717][ T14] lock(&htab->buckets[i].lock); [ 50.177246][ T14] [ 50.180686][ T14] lock(&base->lock); [ 50.184913][ T14] [ 50.184913][ T14] *** DEADLOCK *** [ 50.184913][ T14] [ 50.193038][ T14] 4 locks held by kworker/0:1/14: [ 50.198044][ T14] #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 50.208389][ T14] #1: ffffc90000137d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 50.219770][ T14] #2: ffff8880b9828358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 50.229065][ T14] #3: ffffffff8d12a940 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0x146/0x440 [ 50.238445][ T14] [ 50.238445][ T14] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 50.248868][ T14] -> (&base->lock){-.-.}-{2:2} { [ 50.253804][ T14] IN-HARDIRQ-W at: [ 50.257771][ T14] lock_acquire+0x1f8/0x5a0 [ 50.263922][ T14] _raw_spin_lock_irqsave+0xd1/0x120 [ 50.270842][ T14] lock_timer_base+0x120/0x260 [ 50.277240][ T14] add_timer_on+0x1eb/0x580 [ 50.283379][ T14] handle_irq_event+0xa9/0x1e0 [ 50.289798][ T14] handle_edge_irq+0x245/0xbf0 [ 50.296233][ T14] __common_interrupt+0xd7/0x1f0 [ 50.302825][ T14] common_interrupt+0x9f/0xc0 [ 50.309149][ T14] asm_common_interrupt+0x22/0x40 [ 50.315815][ T14] console_emit_next_record+0xc69/0xea0 [ 50.323017][ T14] console_unlock+0x278/0x7c0 [ 50.329358][ T14] vprintk_emit+0x523/0x740 [ 50.335513][ T14] _printk+0xd1/0x111 [ 50.341137][ T14] calibrate_delay+0x158f/0x16a0 [ 50.347718][ T14] start_kernel+0x41e/0x53f [ 50.353869][ T14] secondary_startup_64_no_verify+0xcf/0xdb [ 50.361401][ T14] IN-SOFTIRQ-W at: [ 50.365370][ T14] lock_acquire+0x1f8/0x5a0 [ 50.371511][ T14] _raw_spin_lock_irq+0xcf/0x110 [ 50.378087][ T14] __run_timers+0x111/0x890 [ 50.384227][ T14] run_timer_softirq+0x63/0xf0 [ 50.390626][ T14] __do_softirq+0x2e9/0xa4c [ 50.396770][ T14] __irq_exit_rcu+0x155/0x240 [ 50.403086][ T14] irq_exit_rcu+0x5/0x20 [ 50.408971][ T14] common_interrupt+0xa4/0xc0 [ 50.415286][ T14] asm_common_interrupt+0x22/0x40 [ 50.421949][ T14] console_emit_next_record+0xc69/0xea0 [ 50.429131][ T14] console_unlock+0x278/0x7c0 [ 50.435448][ T14] vprintk_emit+0x523/0x740 [ 50.441595][ T14] _printk+0xd1/0x111 [ 50.447218][ T14] spectre_v2_select_mitigation+0x4f7/0x748 [ 50.454764][ T14] cpu_select_mitigations+0x3d/0x8f [ 50.461603][ T14] arch_cpu_finalize_init+0xf/0x81 [ 50.468352][ T14] start_kernel+0x423/0x53f [ 50.474511][ T14] secondary_startup_64_no_verify+0xcf/0xdb [ 50.482077][ T14] INITIAL USE at: [ 50.485969][ T14] lock_acquire+0x1f8/0x5a0 [ 50.492042][ T14] _raw_spin_lock_irqsave+0xd1/0x120 [ 50.498885][ T14] lock_timer_base+0x120/0x260 [ 50.505204][ T14] add_timer_on+0x1eb/0x580 [ 50.511256][ T14] handle_irq_event+0xa9/0x1e0 [ 50.517569][ T14] handle_edge_irq+0x245/0xbf0 [ 50.523886][ T14] __common_interrupt+0xd7/0x1f0 [ 50.530377][ T14] common_interrupt+0x9f/0xc0 [ 50.536608][ T14] asm_common_interrupt+0x22/0x40 [ 50.543187][ T14] console_emit_next_record+0xc69/0xea0 [ 50.550283][ T14] console_unlock+0x278/0x7c0 [ 50.556512][ T14] vprintk_emit+0x523/0x740 [ 50.562569][ T14] _printk+0xd1/0x111 [ 50.568107][ T14] calibrate_delay+0x158f/0x16a0 [ 50.574613][ T14] start_kernel+0x41e/0x53f [ 50.580672][ T14] secondary_startup_64_no_verify+0xcf/0xdb [ 50.588119][ T14] } [ 50.590625][ T14] ... key at: [] init_timer_cpu.__key+0x0/0x20 [ 50.598891][ T14] [ 50.598891][ T14] the dependencies between the lock to be acquired [ 50.598898][ T14] and HARDIRQ-irq-unsafe lock: [ 50.612388][ T14] -> (&htab->buckets[i].lock){+...}-{2:2} { [ 50.618282][ T14] HARDIRQ-ON-W at: [ 50.622247][ T14] lock_acquire+0x1f8/0x5a0 [ 50.628389][ T14] _raw_spin_lock_bh+0x31/0x40 [ 50.634788][ T14] sock_hash_free+0x160/0x820 [ 50.641107][ T14] process_one_work+0x8a9/0x11d0 [ 50.647684][ T14] worker_thread+0xa47/0x1200 [ 50.653999][ T14] kthread+0x28d/0x320 [ 50.659734][ T14] ret_from_fork+0x1f/0x30 [ 50.665789][ T14] INITIAL USE at: [ 50.669670][ T14] lock_acquire+0x1f8/0x5a0 [ 50.675746][ T14] _raw_spin_lock_bh+0x31/0x40 [ 50.682234][ T14] sock_hash_free+0x160/0x820 [ 50.688492][ T14] process_one_work+0x8a9/0x11d0 [ 50.694988][ T14] worker_thread+0xa47/0x1200 [ 50.701218][ T14] kthread+0x28d/0x320 [ 50.706849][ T14] ret_from_fork+0x1f/0x30 [ 50.712840][ T14] } [ 50.715330][ T14] ... key at: [] sock_hash_alloc.__key+0x0/0x20 [ 50.723655][ T14] ... acquired at: [ 50.727444][ T14] lock_acquire+0x1f8/0x5a0 [ 50.732113][ T14] _raw_spin_lock_bh+0x31/0x40 [ 50.737035][ T14] sock_hash_delete_elem+0xac/0x2f0 [ 50.742410][ T14] bpf_prog_6f5f05285f674219+0x3a/0x43 [ 50.748047][ T14] bpf_trace_run3+0x231/0x440 [ 50.752901][ T14] enqueue_timer+0x440/0x600 [ 50.757662][ T14] __mod_timer+0x92b/0xee0 [ 50.762240][ T14] schedule_timeout+0x1b4/0x300 [ 50.767251][ T14] rcu_exp_sel_wait_wake+0x764/0x1d50 [ 50.772782][ T14] process_one_work+0x8a9/0x11d0 [ 50.777882][ T14] worker_thread+0xa47/0x1200 [ 50.782719][ T14] kthread+0x28d/0x320 [ 50.786951][ T14] ret_from_fork+0x1f/0x30 [ 50.791533][ T14] [ 50.793845][ T14] [ 50.793845][ T14] stack backtrace: [ 50.799717][ T14] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted 6.1.82-syzkaller #0 [ 50.807597][ T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 50.817644][ T14] Workqueue: rcu_gp wait_rcu_exp_gp [ 50.822841][ T14] Call Trace: [ 50.826107][ T14] [ 50.829027][ T14] dump_stack_lvl+0x1e3/0x2cb [ 50.833704][ T14] ? nf_tcp_handle_invalid+0x642/0x642 [ 50.839153][ T14] ? panic+0x75d/0x75d [ 50.843218][ T14] ? print_shortest_lock_dependencies+0xee/0x150 [ 50.849536][ T14] validate_chain+0x4d16/0x5950 [ 50.854378][ T14] ? reacquire_held_locks+0x660/0x660 [ 50.859748][ T14] ? reacquire_held_locks+0x660/0x660 [ 50.865115][ T14] ? reacquire_held_locks+0x660/0x660 [ 50.870483][ T14] ? register_lock_class+0x100/0x990 [ 50.875758][ T14] ? validate_chain+0x112/0x5950 [ 50.880697][ T14] ? is_dynamic_key+0x260/0x260 [ 50.885537][ T14] ? mark_lock+0x9a/0x340 [ 50.889862][ T14] __lock_acquire+0x125b/0x1f80 [ 50.894710][ T14] lock_acquire+0x1f8/0x5a0 [ 50.899203][ T14] ? sock_hash_delete_elem+0xac/0x2f0 [ 50.904567][ T14] ? lockdep_softirqs_on+0x590/0x590 [ 50.909846][ T14] ? read_lock_is_recursive+0x10/0x10 [ 50.915213][ T14] ? sock_hash_delete_elem+0xac/0x2f0 [ 50.920578][ T14] ? __bpf_trace_softirq+0x10/0x10 [ 50.925685][ T14] ? read_lock_is_recursive+0x10/0x10 [ 50.931051][ T14] ? sock_hash_delete_elem+0xac/0x2f0 [ 50.936419][ T14] _raw_spin_lock_bh+0x31/0x40 [ 50.941286][ T14] ? sock_hash_delete_elem+0xac/0x2f0 [ 50.946668][ T14] sock_hash_delete_elem+0xac/0x2f0 [ 50.951861][ T14] bpf_prog_6f5f05285f674219+0x3a/0x43 [ 50.957310][ T14] bpf_trace_run3+0x231/0x440 [ 50.961978][ T14] ? bpf_trace_run3+0x146/0x440 [ 50.966816][ T14] ? bpf_trace_run2+0x410/0x410 [ 50.971656][ T14] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 50.977540][ T14] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 50.982987][ T14] ? _raw_spin_lock+0x40/0x40 [ 50.987653][ T14] enqueue_timer+0x440/0x600 [ 50.992239][ T14] __mod_timer+0x92b/0xee0 [ 50.996671][ T14] ? mod_timer_pending+0x20/0x20 [ 51.001751][ T14] ? lockdep_softirqs_off+0x420/0x420 [ 51.007138][ T14] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 51.013035][ T14] ? _raw_spin_unlock+0x40/0x40 [ 51.017884][ T14] schedule_timeout+0x1b4/0x300 [ 51.022729][ T14] ? console_conditional_schedule+0x40/0x40 [ 51.028609][ T14] ? update_process_times+0x1b0/0x1b0 [ 51.033976][ T14] rcu_exp_sel_wait_wake+0x764/0x1d50 [ 51.039342][ T14] ? read_lock_is_recursive+0x10/0x10 [ 51.044710][ T14] ? rcu_check_gp_start_stall+0x450/0x450 [ 51.050424][ T14] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 51.056308][ T14] ? do_raw_spin_unlock+0x137/0x8a0 [ 51.061498][ T14] ? process_one_work+0x7a9/0x11d0 [ 51.066601][ T14] process_one_work+0x8a9/0x11d0 [ 51.071652][ T14] ? worker_detach_from_pool+0x260/0x260 [ 51.077319][ T14] ? _raw_spin_lock_irqsave+0x120/0x120 [ 51.082871][ T14] ? kthread_data+0x4e/0xc0 [ 51.087376][ T14] ? wq_worker_running+0x97/0x190 [ 51.092396][ T14] worker_thread+0xa47/0x1200 [ 51.097065][ T14] ? _raw_spin_unlock+0x40/0x40 [ 51.101904][ T14] ? __sched_text_start+0x8/0x8 [ 51.106754][ T14] ? _raw_spin_unlock+0x40/0x40 [ 51.111595][ T14] kthread+0x28d/0x320 [ 51.115660][ T14] ? worker_clr_flags+0x190/0x190 [ 51.120678][ T14] ? kthread_blkcg+0xd0/0xd0 [ 51.125262][ T14] ret_from_fork+0x1f/0x30 [ 51.129681][ T14]