Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program [ 51.364610][ T18] [ 51.366976][ T18] ===================================================== [ 51.373890][ T18] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 51.381324][ T18] 6.8.0-syzkaller-05236-g443574b03387 #0 Not tainted [ 51.387975][ T18] ----------------------------------------------------- [ 51.394890][ T18] rcu_exp_gp_kthr/18 [HC0[0]:SC0[2]:HE0:SE0] is trying to acquire: [ 51.402762][ T18] ffff88801feb48d8 (&htab->buckets[i].lock){+...}-{2:2}, at: sock_hash_delete_elem+0xb0/0x300 [ 51.413033][ T18] [ 51.413033][ T18] and this task is already holding: [ 51.420376][ T18] ffff8880b942a758 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 51.429237][ T18] which would create a new lock dependency: [ 51.435104][ T18] (&base->lock){-.-.}-{2:2} -> (&htab->buckets[i].lock){+...}-{2:2} [ 51.443186][ T18] [ 51.443186][ T18] but this new dependency connects a HARDIRQ-irq-safe lock: [ 51.452612][ T18] (&base->lock){-.-.}-{2:2} [ 51.452632][ T18] [ 51.452632][ T18] ... which became HARDIRQ-irq-safe at: [ 51.464888][ T18] lock_acquire+0x1e4/0x530 [ 51.469462][ T18] _raw_spin_lock_irqsave+0xd5/0x120 [ 51.474831][ T18] lock_timer_base+0x112/0x240 [ 51.479671][ T18] add_timer_on+0x1e5/0x5c0 [ 51.484248][ T18] handle_irq_event+0xad/0x1f0 [ 51.489082][ T18] handle_edge_irq+0x25f/0xc20 [ 51.493915][ T18] __common_interrupt+0x13a/0x230 [ 51.499017][ T18] common_interrupt+0xa5/0xd0 [ 51.503768][ T18] asm_common_interrupt+0x26/0x40 [ 51.508865][ T18] console_flush_all+0x9cd/0xec0 [ 51.513877][ T18] console_unlock+0x13b/0x4d0 [ 51.518624][ T18] vprintk_emit+0x509/0x720 [ 51.523195][ T18] _printk+0xd5/0x120 [ 51.527249][ T18] spectre_v2_select_mitigation+0x68f/0x8f0 [ 51.533220][ T18] cpu_select_mitigations+0x41/0xa0 [ 51.538508][ T18] arch_cpu_finalize_init+0x20/0xa0 [ 51.543795][ T18] start_kernel+0x402/0x500 [ 51.548373][ T18] x86_64_start_reservations+0x2a/0x30 [ 51.553911][ T18] x86_64_start_kernel+0x99/0xa0 [ 51.558924][ T18] common_startup_64+0x13e/0x147 [ 51.563934][ T18] [ 51.563934][ T18] to a HARDIRQ-irq-unsafe lock: [ 51.570937][ T18] (&htab->buckets[i].lock){+...}-{2:2} [ 51.570961][ T18] [ 51.570961][ T18] ... which became HARDIRQ-irq-unsafe at: [ 51.584340][ T18] ... [ 51.584347][ T18] lock_acquire+0x1e4/0x530 [ 51.591482][ T18] _raw_spin_lock_bh+0x35/0x50 [ 51.596322][ T18] sock_hash_free+0x164/0x820 [ 51.601088][ T18] bpf_map_free_deferred+0xe6/0x110 [ 51.606373][ T18] process_scheduled_works+0xa00/0x1770 [ 51.611997][ T18] worker_thread+0x86d/0xd70 [ 51.616675][ T18] kthread+0x2f0/0x390 [ 51.620832][ T18] ret_from_fork+0x4b/0x80 [ 51.625340][ T18] ret_from_fork_asm+0x1a/0x30 [ 51.630193][ T18] [ 51.630193][ T18] other info that might help us debug this: [ 51.630193][ T18] [ 51.640419][ T18] Possible interrupt unsafe locking scenario: [ 51.640419][ T18] [ 51.648728][ T18] CPU0 CPU1 [ 51.654080][ T18] ---- ---- [ 51.659432][ T18] lock(&htab->buckets[i].lock); [ 51.664443][ T18] local_irq_disable(); [ 51.671266][ T18] lock(&base->lock); [ 51.677844][ T18] lock(&htab->buckets[i].lock); [ 51.685373][ T18] [ 51.688810][ T18] lock(&base->lock); [ 51.693036][ T18] [ 51.693036][ T18] *** DEADLOCK *** [ 51.693036][ T18] [ 51.701168][ T18] 2 locks held by rcu_exp_gp_kthr/18: [ 51.706520][ T18] #0: ffff8880b942a758 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 51.715823][ T18] #1: ffffffff8e131920 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x114/0x420 [ 51.725206][ T18] [ 51.725206][ T18] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 51.735594][ T18] -> (&base->lock){-.-.}-{2:2} { [ 51.740528][ T18] IN-HARDIRQ-W at: [ 51.744491][ T18] lock_acquire+0x1e4/0x530 [ 51.750627][ T18] _raw_spin_lock_irqsave+0xd5/0x120 [ 51.757565][ T18] lock_timer_base+0x112/0x240 [ 51.763978][ T18] add_timer_on+0x1e5/0x5c0 [ 51.770134][ T18] handle_irq_event+0xad/0x1f0 [ 51.776582][ T18] handle_edge_irq+0x25f/0xc20 [ 51.783000][ T18] __common_interrupt+0x13a/0x230 [ 51.789675][ T18] common_interrupt+0xa5/0xd0 [ 51.795999][ T18] asm_common_interrupt+0x26/0x40 [ 51.802662][ T18] console_flush_all+0x9cd/0xec0 [ 51.809239][ T18] console_unlock+0x13b/0x4d0 [ 51.815551][ T18] vprintk_emit+0x509/0x720 [ 51.821688][ T18] _printk+0xd5/0x120 [ 51.827306][ T18] spectre_v2_select_mitigation+0x68f/0x8f0 [ 51.834840][ T18] cpu_select_mitigations+0x41/0xa0 [ 51.841675][ T18] arch_cpu_finalize_init+0x20/0xa0 [ 51.848510][ T18] start_kernel+0x402/0x500 [ 51.854644][ T18] x86_64_start_reservations+0x2a/0x30 [ 51.861737][ T18] x86_64_start_kernel+0x99/0xa0 [ 51.868307][ T18] common_startup_64+0x13e/0x147 [ 51.874881][ T18] IN-SOFTIRQ-W at: [ 51.878852][ T18] lock_acquire+0x1e4/0x530 [ 51.884986][ T18] _raw_spin_lock_irq+0xd3/0x120 [ 51.891567][ T18] __run_timer_base+0x103/0x8e0 [ 51.898051][ T18] run_timer_softirq+0x67/0x170 [ 51.904536][ T18] __do_softirq+0x2be/0x943 [ 51.910676][ T18] __irq_exit_rcu+0xf2/0x1c0 [ 51.916898][ T18] irq_exit_rcu+0x9/0x30 [ 51.922771][ T18] common_interrupt+0xaa/0xd0 [ 51.929088][ T18] asm_common_interrupt+0x26/0x40 [ 51.935749][ T18] console_flush_all+0x9cd/0xec0 [ 51.942322][ T18] console_unlock+0x13b/0x4d0 [ 51.948633][ T18] vprintk_emit+0x509/0x720 [ 51.954771][ T18] _printk+0xd5/0x120 [ 51.960391][ T18] print_xstate_feature+0x11c/0x130 [ 51.967226][ T18] print_xstate_features+0xf/0x90 [ 51.973889][ T18] setup_init_fpu_buf+0x66/0xf0 [ 51.980373][ T18] fpu__init_system_xstate+0x507/0x790 [ 51.987465][ T18] fpu__init_system+0x114/0x240 [ 51.993950][ T18] arch_cpu_finalize_init+0x2f/0xa0 [ 52.000783][ T18] start_kernel+0x402/0x500 [ 52.006918][ T18] x86_64_start_reservations+0x2a/0x30 [ 52.014013][ T18] x86_64_start_kernel+0x99/0xa0 [ 52.020583][ T18] common_startup_64+0x13e/0x147 [ 52.027168][ T18] INITIAL USE at: [ 52.031044][ T18] lock_acquire+0x1e4/0x530 [ 52.037093][ T18] _raw_spin_lock_irqsave+0xd5/0x120 [ 52.043932][ T18] lock_timer_base+0x112/0x240 [ 52.050249][ T18] __mod_timer+0x1ca/0xeb0 [ 52.056216][ T18] queue_delayed_work_on+0x15a/0x260 [ 52.063048][ T18] crng_reseed+0xe7/0x220 [ 52.068921][ T18] random_init+0x1a9/0x300 [ 52.075071][ T18] start_kernel+0x253/0x500 [ 52.081120][ T18] x86_64_start_reservations+0x2a/0x30 [ 52.088136][ T18] x86_64_start_kernel+0x99/0xa0 [ 52.094621][ T18] common_startup_64+0x13e/0x147 [ 52.101105][ T18] } [ 52.103591][ T18] ... key at: [] init_timer_cpu.__key+0x0/0x20 [ 52.111819][ T18] [ 52.111819][ T18] the dependencies between the lock to be acquired [ 52.111826][ T18] and HARDIRQ-irq-unsafe lock: [ 52.125306][ T18] -> (&htab->buckets[i].lock){+...}-{2:2} { [ 52.131199][ T18] HARDIRQ-ON-W at: [ 52.135162][ T18] lock_acquire+0x1e4/0x530 [ 52.141299][ T18] _raw_spin_lock_bh+0x35/0x50 [ 52.147697][ T18] sock_hash_free+0x164/0x820 [ 52.154009][ T18] bpf_map_free_deferred+0xe6/0x110 [ 52.160841][ T18] process_scheduled_works+0xa00/0x1770 [ 52.168022][ T18] worker_thread+0x86d/0xd70 [ 52.174243][ T18] kthread+0x2f0/0x390 [ 52.179944][ T18] ret_from_fork+0x4b/0x80 [ 52.185996][ T18] ret_from_fork_asm+0x1a/0x30 [ 52.192395][ T18] INITIAL USE at: [ 52.196269][ T18] lock_acquire+0x1e4/0x530 [ 52.202315][ T18] _raw_spin_lock_bh+0x35/0x50 [ 52.208626][ T18] sock_hash_free+0x164/0x820 [ 52.214848][ T18] bpf_map_free_deferred+0xe6/0x110 [ 52.221592][ T18] process_scheduled_works+0xa00/0x1770 [ 52.228684][ T18] worker_thread+0x86d/0xd70 [ 52.234820][ T18] kthread+0x2f0/0x390 [ 52.240438][ T18] ret_from_fork+0x4b/0x80 [ 52.246406][ T18] ret_from_fork_asm+0x1a/0x30 [ 52.252722][ T18] } [ 52.255202][ T18] ... key at: [] sock_hash_alloc.__key+0x0/0x20 [ 52.263510][ T18] ... acquired at: [ 52.267292][ T18] lock_acquire+0x1e4/0x530 [ 52.271961][ T18] _raw_spin_lock_bh+0x35/0x50 [ 52.276885][ T18] sock_hash_delete_elem+0xb0/0x300 [ 52.282238][ T18] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 52.287854][ T18] bpf_trace_run2+0x204/0x420 [ 52.292690][ T18] enqueue_timer+0x396/0x550 [ 52.297434][ T18] __mod_timer+0xa0e/0xeb0 [ 52.302009][ T18] schedule_timeout+0x1b9/0x310 [ 52.307020][ T18] rcu_exp_sel_wait_wake+0x77e/0x1df0 [ 52.312553][ T18] kthread_worker_fn+0x4bf/0xab0 [ 52.317647][ T18] kthread+0x2f0/0x390 [ 52.321877][ T18] ret_from_fork+0x4b/0x80 [ 52.326456][ T18] ret_from_fork_asm+0x1a/0x30 [ 52.331380][ T18] [ 52.333685][ T18] [ 52.333685][ T18] stack backtrace: [ 52.339561][ T18] CPU: 0 PID: 18 Comm: rcu_exp_gp_kthr Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0 [ 52.349434][ T18] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 52.359470][ T18] Call Trace: [ 52.362734][ T18] [ 52.365655][ T18] dump_stack_lvl+0x1e7/0x2e0 [ 52.370343][ T18] ? __pfx_dump_stack_lvl+0x10/0x10 [ 52.375548][ T18] ? __pfx__printk+0x10/0x10 [ 52.380144][ T18] ? print_shortest_lock_dependencies+0xf2/0x160 [ 52.386474][ T18] validate_chain+0x4dc7/0x58e0 [ 52.391327][ T18] ? __pfx_validate_chain+0x10/0x10 [ 52.396515][ T18] ? __pfx_validate_chain+0x10/0x10 [ 52.401707][ T18] ? register_lock_class+0x102/0x980 [ 52.406981][ T18] ? __pfx_register_lock_class+0x10/0x10 [ 52.412599][ T18] ? mark_lock+0x9a/0x350 [ 52.416915][ T18] __lock_acquire+0x1346/0x1fd0 [ 52.421755][ T18] lock_acquire+0x1e4/0x530 [ 52.426242][ T18] ? sock_hash_delete_elem+0xb0/0x300 [ 52.431599][ T18] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 52.437303][ T18] ? __pfx_lock_acquire+0x10/0x10 [ 52.442312][ T18] ? sock_hash_delete_elem+0xb0/0x300 [ 52.447666][ T18] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 52.453473][ T18] ? __pfx_lock_acquire+0x10/0x10 [ 52.458484][ T18] ? do_raw_spin_unlock+0x13c/0x8b0 [ 52.463682][ T18] ? sock_hash_delete_elem+0xb0/0x300 [ 52.469043][ T18] _raw_spin_lock_bh+0x35/0x50 [ 52.473793][ T18] ? sock_hash_delete_elem+0xb0/0x300 [ 52.479150][ T18] sock_hash_delete_elem+0xb0/0x300 [ 52.484333][ T18] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 52.489778][ T18] bpf_trace_run2+0x204/0x420 [ 52.494445][ T18] ? bpf_trace_run2+0x114/0x420 [ 52.499295][ T18] ? __pfx_bpf_trace_run2+0x10/0x10 [ 52.504500][ T18] ? __pfx_debug_object_activate+0x10/0x10 [ 52.510299][ T18] ? lockdep_hardirqs_on+0x99/0x150 [ 52.515489][ T18] enqueue_timer+0x396/0x550 [ 52.520075][ T18] __mod_timer+0xa0e/0xeb0 [ 52.524481][ T18] ? __asan_memset+0x23/0x50 [ 52.529059][ T18] ? __pfx___mod_timer+0x10/0x10 [ 52.533983][ T18] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 52.539773][ T18] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 52.545740][ T18] schedule_timeout+0x1b9/0x310 [ 52.550576][ T18] ? __pfx_schedule_timeout+0x10/0x10 [ 52.555931][ T18] ? __pfx_process_timeout+0x10/0x10 [ 52.561232][ T18] rcu_exp_sel_wait_wake+0x77e/0x1df0 [ 52.566630][ T18] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 52.572603][ T18] ? __pfx_rcu_exp_sel_wait_wake+0x10/0x10 [ 52.578405][ T18] ? _raw_spin_lock_irq+0xdf/0x120 [ 52.583517][ T18] kthread_worker_fn+0x4bf/0xab0 [ 52.588458][ T18] ? kthread_worker_fn+0xdc/0xab0 [ 52.593475][ T18] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 52.598743][ T18] ? __pfx_kthread_worker_fn+0x10/0x10 [ 52.604186][ T18] kthread+0x2f0/0x390 [ 52.608239][ T18] ? __pfx_kthread_worker_fn+0x10/0x10 [ 52.613686][ T18] ? __pfx_kthread+0x10/0x10 [ 52.618262][ T18] ret_from_fork+0x4b/0x80 [ 52.622666][ T18] ? __pfx_kthread+0x10/0x10 [ 52.627241][ T18] ret_from_fork_asm+0x1a/0x30 [ 52.632000][ T18]