Warning: Permanently added '10.128.1.42' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program [ 77.650326][ T18] [ 77.652828][ T18] ===================================================== [ 77.660179][ T18] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 77.667937][ T18] 6.8.0-syzkaller-05271-gf99c5f563c17 #0 Not tainted [ 77.674912][ T18] ----------------------------------------------------- [ 77.682618][ T18] rcu_exp_gp_kthr/18 [HC0[0]:SC0[2]:HE0:SE0] is trying to acquire: [ 77.691915][ T18] ffff88802f065020 (&htab->buckets[i].lock){+...}-{2:2}, at: sock_hash_delete_elem+0xb0/0x300 [ 77.703299][ T18] [ 77.703299][ T18] and this task is already holding: [ 77.710965][ T18] ffff8880b942a758 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 77.720593][ T18] which would create a new lock dependency: [ 77.726689][ T18] (&base->lock){-.-.}-{2:2} -> (&htab->buckets[i].lock){+...}-{2:2} [ 77.735264][ T18] [ 77.735264][ T18] but this new dependency connects a HARDIRQ-irq-safe lock: [ 77.745548][ T18] (&base->lock){-.-.}-{2:2} [ 77.745580][ T18] [ 77.745580][ T18] ... which became HARDIRQ-irq-safe at: [ 77.759051][ T18] lock_acquire+0x1e4/0x530 [ 77.763979][ T18] _raw_spin_lock_irqsave+0xd5/0x120 [ 77.770101][ T18] lock_timer_base+0x112/0x240 [ 77.775001][ T18] add_timer_on+0x1e5/0x5c0 [ 77.779861][ T18] handle_irq_event+0xad/0x1f0 [ 77.785631][ T18] handle_level_irq+0x3c5/0x6e0 [ 77.791025][ T18] __common_interrupt+0x13a/0x230 [ 77.796494][ T18] common_interrupt+0xa5/0xd0 [ 77.801564][ T18] asm_common_interrupt+0x26/0x40 [ 77.806856][ T18] _raw_spin_unlock_irqrestore+0xd8/0x140 [ 77.813069][ T18] __setup_irq+0x1277/0x1cf0 [ 77.817900][ T18] request_threaded_irq+0x2ab/0x380 [ 77.823328][ T18] setup_default_timer_irq+0x25/0x60 [ 77.829054][ T18] x86_late_time_init+0x66/0xc0 [ 77.834219][ T18] start_kernel+0x3f3/0x500 [ 77.838991][ T18] x86_64_start_reservations+0x2a/0x30 [ 77.845288][ T18] x86_64_start_kernel+0x99/0xa0 [ 77.851304][ T18] common_startup_64+0x13e/0x147 [ 77.856553][ T18] [ 77.856553][ T18] to a HARDIRQ-irq-unsafe lock: [ 77.863886][ T18] (&htab->buckets[i].lock){+...}-{2:2} [ 77.863917][ T18] [ 77.863917][ T18] ... which became HARDIRQ-irq-unsafe at: [ 77.878463][ T18] ... [ 77.878474][ T18] lock_acquire+0x1e4/0x530 [ 77.885889][ T18] _raw_spin_lock_bh+0x35/0x50 [ 77.891036][ T18] sock_hash_free+0x164/0x820 [ 77.896358][ T18] bpf_map_free_deferred+0xe6/0x110 [ 77.901874][ T18] process_scheduled_works+0xa00/0x1770 [ 77.907977][ T18] worker_thread+0x86d/0xd70 [ 77.913480][ T18] kthread+0x2f0/0x390 [ 77.919356][ T18] ret_from_fork+0x4b/0x80 [ 77.925205][ T18] ret_from_fork_asm+0x1a/0x30 [ 77.930290][ T18] [ 77.930290][ T18] other info that might help us debug this: [ 77.930290][ T18] [ 77.942568][ T18] Possible interrupt unsafe locking scenario: [ 77.942568][ T18] [ 77.952150][ T18] CPU0 CPU1 [ 77.958411][ T18] ---- ---- [ 77.964806][ T18] lock(&htab->buckets[i].lock); [ 77.970399][ T18] local_irq_disable(); [ 77.978511][ T18] lock(&base->lock); [ 77.985814][ T18] lock(&htab->buckets[i].lock); [ 77.993875][ T18] [ 77.997610][ T18] lock(&base->lock); [ 78.002139][ T18] [ 78.002139][ T18] *** DEADLOCK *** [ 78.002139][ T18] [ 78.011174][ T18] 2 locks held by rcu_exp_gp_kthr/18: [ 78.017745][ T18] #0: ffff8880b942a758 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 78.028773][ T18] #1: ffffffff8e131920 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x114/0x420 [ 78.038919][ T18] [ 78.038919][ T18] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 78.050847][ T18] -> (&base->lock){-.-.}-{2:2} { [ 78.056522][ T18] IN-HARDIRQ-W at: [ 78.061004][ T18] lock_acquire+0x1e4/0x530 [ 78.068238][ T18] _raw_spin_lock_irqsave+0xd5/0x120 [ 78.075476][ T18] lock_timer_base+0x112/0x240 [ 78.083088][ T18] add_timer_on+0x1e5/0x5c0 [ 78.089534][ T18] handle_irq_event+0xad/0x1f0 [ 78.096782][ T18] handle_level_irq+0x3c5/0x6e0 [ 78.103874][ T18] __common_interrupt+0x13a/0x230 [ 78.111085][ T18] common_interrupt+0xa5/0xd0 [ 78.117967][ T18] asm_common_interrupt+0x26/0x40 [ 78.124783][ T18] _raw_spin_unlock_irqrestore+0xd8/0x140 [ 78.132940][ T18] __setup_irq+0x1277/0x1cf0 [ 78.139317][ T18] request_threaded_irq+0x2ab/0x380 [ 78.146196][ T18] setup_default_timer_irq+0x25/0x60 [ 78.153445][ T18] x86_late_time_init+0x66/0xc0 [ 78.160438][ T18] start_kernel+0x3f3/0x500 [ 78.167255][ T18] x86_64_start_reservations+0x2a/0x30 [ 78.174780][ T18] x86_64_start_kernel+0x99/0xa0 [ 78.182479][ T18] common_startup_64+0x13e/0x147 [ 78.190749][ T18] IN-SOFTIRQ-W at: [ 78.194942][ T18] lock_acquire+0x1e4/0x530 [ 78.202098][ T18] _raw_spin_lock_irq+0xd3/0x120 [ 78.208994][ T18] __run_timer_base+0x103/0x8e0 [ 78.215633][ T18] run_timer_softirq+0x67/0x170 [ 78.222169][ T18] __do_softirq+0x2be/0x943 [ 78.229166][ T18] __irq_exit_rcu+0xf2/0x1c0 [ 78.235697][ T18] irq_exit_rcu+0x9/0x30 [ 78.242238][ T18] common_interrupt+0xaa/0xd0 [ 78.248878][ T18] asm_common_interrupt+0x26/0x40 [ 78.256085][ T18] console_flush_all+0x9cd/0xec0 [ 78.263365][ T18] console_unlock+0x13b/0x4d0 [ 78.269916][ T18] vprintk_emit+0x509/0x720 [ 78.276812][ T18] _printk+0xd5/0x120 [ 78.282654][ T18] apic_intr_mode_init+0x5a/0xb0 [ 78.289989][ T18] x86_late_time_init+0x8f/0xc0 [ 78.297901][ T18] start_kernel+0x3f3/0x500 [ 78.304124][ T18] x86_64_start_reservations+0x2a/0x30 [ 78.311415][ T18] x86_64_start_kernel+0x99/0xa0 [ 78.318398][ T18] common_startup_64+0x13e/0x147 [ 78.326535][ T18] INITIAL USE at: [ 78.330573][ T18] lock_acquire+0x1e4/0x530 [ 78.338116][ T18] _raw_spin_lock_irqsave+0xd5/0x120 [ 78.346261][ T18] lock_timer_base+0x112/0x240 [ 78.352979][ T18] __mod_timer+0x1ca/0xeb0 [ 78.360418][ T18] queue_delayed_work_on+0x15a/0x260 [ 78.368940][ T18] crng_reseed+0xe7/0x220 [ 78.375452][ T18] random_init+0x1a9/0x300 [ 78.381584][ T18] start_kernel+0x253/0x500 [ 78.387702][ T18] x86_64_start_reservations+0x2a/0x30 [ 78.395724][ T18] x86_64_start_kernel+0x99/0xa0 [ 78.403236][ T18] common_startup_64+0x13e/0x147 [ 78.410582][ T18] } [ 78.413201][ T18] ... key at: [] init_timer_cpu.__key+0x0/0x20 [ 78.422112][ T18] [ 78.422112][ T18] the dependencies between the lock to be acquired [ 78.422125][ T18] and HARDIRQ-irq-unsafe lock: [ 78.436422][ T18] -> (&htab->buckets[i].lock){+...}-{2:2} { [ 78.443352][ T18] HARDIRQ-ON-W at: [ 78.447346][ T18] lock_acquire+0x1e4/0x530 [ 78.454690][ T18] _raw_spin_lock_bh+0x35/0x50 [ 78.463095][ T18] sock_hash_free+0x164/0x820 [ 78.469833][ T18] bpf_map_free_deferred+0xe6/0x110 [ 78.477076][ T18] process_scheduled_works+0xa00/0x1770 [ 78.484857][ T18] worker_thread+0x86d/0xd70 [ 78.491873][ T18] kthread+0x2f0/0x390 [ 78.497951][ T18] ret_from_fork+0x4b/0x80 [ 78.505207][ T18] ret_from_fork_asm+0x1a/0x30 [ 78.515116][ T18] INITIAL USE at: [ 78.519668][ T18] lock_acquire+0x1e4/0x530 [ 78.527066][ T18] _raw_spin_lock_bh+0x35/0x50 [ 78.533624][ T18] sock_hash_free+0x164/0x820 [ 78.541238][ T18] bpf_map_free_deferred+0xe6/0x110 [ 78.549315][ T18] process_scheduled_works+0xa00/0x1770 [ 78.557922][ T18] worker_thread+0x86d/0xd70 [ 78.564878][ T18] kthread+0x2f0/0x390 [ 78.571325][ T18] ret_from_fork+0x4b/0x80 [ 78.577604][ T18] ret_from_fork_asm+0x1a/0x30 [ 78.585023][ T18] } [ 78.587791][ T18] ... key at: [] sock_hash_alloc.__key+0x0/0x20 [ 78.597276][ T18] ... acquired at: [ 78.601459][ T18] lock_acquire+0x1e4/0x530 [ 78.607118][ T18] _raw_spin_lock_bh+0x35/0x50 [ 78.612543][ T18] sock_hash_delete_elem+0xb0/0x300 [ 78.619438][ T18] bpf_prog_05fc780d7a5f93f9+0x4a/0x4e [ 78.625665][ T18] bpf_trace_run2+0x204/0x420 [ 78.631168][ T18] enqueue_timer+0x396/0x550 [ 78.636760][ T18] __mod_timer+0xa0e/0xeb0 [ 78.642630][ T18] schedule_timeout+0x1b9/0x310 [ 78.647968][ T18] rcu_exp_sel_wait_wake+0x77e/0x1df0 [ 78.654415][ T18] kthread_worker_fn+0x4bf/0xab0 [ 78.660455][ T18] kthread+0x2f0/0x390 [ 78.664931][ T18] ret_from_fork+0x4b/0x80 [ 78.669889][ T18] ret_from_fork_asm+0x1a/0x30 [ 78.674969][ T18] [ 78.677596][ T18] [ 78.677596][ T18] stack backtrace: [ 78.683837][ T18] CPU: 0 PID: 18 Comm: rcu_exp_gp_kthr Not tainted 6.8.0-syzkaller-05271-gf99c5f563c17 #0 [ 78.694926][ T18] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 78.706127][ T18] Call Trace: [ 78.709640][ T18] [ 78.712794][ T18] dump_stack_lvl+0x1e7/0x2e0 [ 78.717562][ T18] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.722917][ T18] ? __pfx__printk+0x10/0x10 [ 78.728065][ T18] ? print_shortest_lock_dependencies+0xf2/0x160 [ 78.735769][ T18] validate_chain+0x4dc7/0x58e0 [ 78.742354][ T18] ? __pfx_validate_chain+0x10/0x10 [ 78.747794][ T18] ? __pfx_validate_chain+0x10/0x10 [ 78.753654][ T18] ? register_lock_class+0x102/0x980 [ 78.759298][ T18] ? __pfx_register_lock_class+0x10/0x10 [ 78.765614][ T18] ? mark_lock+0x9a/0x350 [ 78.770181][ T18] __lock_acquire+0x1346/0x1fd0 [ 78.775781][ T18] lock_acquire+0x1e4/0x530 [ 78.781458][ T18] ? sock_hash_delete_elem+0xb0/0x300 [ 78.787748][ T18] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 78.793717][ T18] ? __pfx_lock_acquire+0x10/0x10 [ 78.798977][ T18] ? sock_hash_delete_elem+0xb0/0x300 [ 78.805011][ T18] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 78.811590][ T18] ? __pfx_lock_acquire+0x10/0x10 [ 78.817291][ T18] ? do_raw_spin_unlock+0x13c/0x8b0 [ 78.823929][ T18] ? sock_hash_delete_elem+0xb0/0x300 [ 78.829617][ T18] _raw_spin_lock_bh+0x35/0x50 [ 78.834621][ T18] ? sock_hash_delete_elem+0xb0/0x300 [ 78.840224][ T18] sock_hash_delete_elem+0xb0/0x300 [ 78.845895][ T18] bpf_prog_05fc780d7a5f93f9+0x4a/0x4e [ 78.851519][ T18] bpf_trace_run2+0x204/0x420 [ 78.856777][ T18] ? bpf_trace_run2+0x114/0x420 [ 78.862206][ T18] ? __pfx_bpf_trace_run2+0x10/0x10 [ 78.868189][ T18] ? __pfx_debug_object_activate+0x10/0x10 [ 78.874468][ T18] ? lockdep_hardirqs_on+0x99/0x150 [ 78.880184][ T18] enqueue_timer+0x396/0x550 [ 78.885161][ T18] __mod_timer+0xa0e/0xeb0 [ 78.890164][ T18] ? __asan_memset+0x23/0x50 [ 78.895134][ T18] ? __pfx___mod_timer+0x10/0x10 [ 78.900553][ T18] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 78.906812][ T18] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 78.913439][ T18] schedule_timeout+0x1b9/0x310 [ 78.918509][ T18] ? __pfx_schedule_timeout+0x10/0x10 [ 78.925010][ T18] ? __pfx_process_timeout+0x10/0x10 [ 78.930832][ T18] rcu_exp_sel_wait_wake+0x77e/0x1df0 [ 78.936866][ T18] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 78.943612][ T18] ? __pfx_rcu_exp_sel_wait_wake+0x10/0x10 [ 78.950656][ T18] ? _raw_spin_lock_irq+0xdf/0x120 [ 78.956863][ T18] kthread_worker_fn+0x4bf/0xab0 [ 78.965249][ T18] ? kthread_worker_fn+0xdc/0xab0 [ 78.970969][ T18] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 78.976887][ T18] ? __pfx_kthread_worker_fn+0x10/0x10 [ 78.982803][ T18] kthread+0x2f0/0x390 [ 78.987465][ T18] ? __pfx_kthread_worker_fn+0x10/0x10 [ 78.994048][ T18] ? __pfx_kthread+0x10/0x10 [ 79.000001][ T18] ret_from_fork+0x4b/0x80 [ 79.005087][ T18] ? __pfx_kthread+0x10/0x10 [ 79.010571][ T18] ret_from_fork_asm+0x1a/0x30 [ 79.015862][ T18]