=====================================================
WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected
6.8.0-syzkaller-08951-gfe46a7dd189e #0 Not tainted
-----------------------------------------------------
syz-executor.4/12109 [HC0[0]:SC0[2]:HE0:SE0] is trying to acquire:
ffff88802d8fd200 (&stab->lock){+...}-{2:2}, at: spin_lock_bh include/linux/spinlock.h:356 [inline]
ffff88802d8fd200 (&stab->lock){+...}-{2:2}, at: __sock_map_delete net/core/sock_map.c:414 [inline]
ffff88802d8fd200 (&stab->lock){+...}-{2:2}, at: sock_map_delete_elem+0x97/0x140 net/core/sock_map.c:446

and this task is already holding:
ffff88801ffc03f0 (&dev->event_lock){-.-.}-{2:2}, at: drm_events_release drivers/gpu/drm/drm_file.c:204 [inline]
ffff88801ffc03f0 (&dev->event_lock){-.-.}-{2:2}, at: drm_file_free+0x1e7/0x900 drivers/gpu/drm/drm_file.c:246
which would create a new lock dependency:
 (&dev->event_lock){-.-.}-{2:2} -> (&stab->lock){+...}-{2:2}

but this new dependency connects a HARDIRQ-irq-safe lock:
 (&dev->event_lock){-.-.}-{2:2}

... which became HARDIRQ-irq-safe at:
  lock_acquire+0x1e4/0x530 kernel/locking/lockdep.c:5754
  __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
  _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162
  drm_handle_vblank+0xc8/0x4c0 drivers/gpu/drm/drm_vblank.c:1885
  vkms_vblank_simulate+0xd6/0x360 drivers/gpu/drm/vkms/vkms_crtc.c:29
  __run_hrtimer kernel/time/hrtimer.c:1692 [inline]
  __hrtimer_run_queues+0x597/0xd00 kernel/time/hrtimer.c:1756
  hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1818
  local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
  __sysvec_apic_timer_interrupt+0x109/0x3a0 arch/x86/kernel/apic/apic.c:1049
  instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
  sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1043
  asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
  native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline]
  arch_safe_halt arch/x86/include/asm/irqflags.h:86 [inline]
  acpi_safe_halt+0x21/0x30 drivers/acpi/processor_idle.c:112
  acpi_idle_enter+0xe4/0x140 drivers/acpi/processor_idle.c:707
  cpuidle_enter_state+0x11a/0x490 drivers/cpuidle/cpuidle.c:267
  cpuidle_enter+0x5d/0xa0 drivers/cpuidle/cpuidle.c:388
  call_cpuidle kernel/sched/idle.c:155 [inline]
  cpuidle_idle_call kernel/sched/idle.c:236 [inline]
  do_idle+0x375/0x5d0 kernel/sched/idle.c:332
  cpu_startup_entry+0x42/0x60 kernel/sched/idle.c:430
  rest_init+0x2e0/0x300 init/main.c:730
  arch_call_rest_init+0xe/0x10 init/main.c:831
  start_kernel+0x47a/0x500 init/main.c:1077
  x86_64_start_reservations+0x2a/0x30 arch/x86/kernel/head64.c:509
  x86_64_start_kernel+0x99/0xa0 arch/x86/kernel/head64.c:490
  common_startup_64+0x13e/0x147

to a HARDIRQ-irq-unsafe lock:
 (&stab->lock){+...}-{2:2}

... which became HARDIRQ-irq-unsafe at:
...
  lock_acquire+0x1e4/0x530 kernel/locking/lockdep.c:5754
  __raw_spin_lock_bh include/linux/spinlock_api_smp.h:126 [inline]
  _raw_spin_lock_bh+0x35/0x50 kernel/locking/spinlock.c:178
  spin_lock_bh include/linux/spinlock.h:356 [inline]
  __sock_map_delete net/core/sock_map.c:414 [inline]
  sock_map_delete_elem+0x97/0x140 net/core/sock_map.c:446
  bpf_prog_6dc5185c14555579+0x47/0x4f
  bpf_dispatcher_nop_func include/linux/bpf.h:1234 [inline]
  __bpf_prog_run include/linux/filter.h:657 [inline]
  bpf_prog_run include/linux/filter.h:664 [inline]
  __bpf_trace_run kernel/trace/bpf_trace.c:2381 [inline]
  bpf_trace_run2+0x206/0x420 kernel/trace/bpf_trace.c:2420
  trace_kfree include/trace/events/kmem.h:94 [inline]
  kfree+0x291/0x380 mm/slub.c:4377
  fscrypt_free_filename include/linux/fscrypt.h:403 [inline]
  ext4_fname_free_filename+0x40/0xb0 fs/ext4/crypto.c:67
  ext4_lookup_entry fs/ext4/namei.c:1772 [inline]
  ext4_lookup+0x16a/0x750 fs/ext4/namei.c:1838
  lookup_one_qstr_excl+0x121/0x260 fs/namei.c:1607
  filename_create+0x297/0x540 fs/namei.c:3893
  do_symlinkat+0xf9/0x3a0 fs/namei.c:4503
  __do_sys_symlinkat fs/namei.c:4526 [inline]
  __se_sys_symlinkat fs/namei.c:4523 [inline]
  __x64_sys_symlinkat+0x99/0xb0 fs/namei.c:4523
  do_syscall_64+0xfd/0x240
  entry_SYSCALL_64_after_hwframe+0x6d/0x75

other info that might help us debug this:

 Possible interrupt unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(&stab->lock);
                               local_irq_disable();
                               lock(&dev->event_lock);
                               lock(&stab->lock);
  <Interrupt>
    lock(&dev->event_lock);

 *** DEADLOCK ***

2 locks held by syz-executor.4/12109:
 #0: ffff88801ffc03f0 (&dev->event_lock){-.-.}-{2:2}, at: drm_events_release drivers/gpu/drm/drm_file.c:204 [inline]
 #0: ffff88801ffc03f0 (&dev->event_lock){-.-.}-{2:2}, at: drm_file_free+0x1e7/0x900 drivers/gpu/drm/drm_file.c:246
 #1: ffffffff8e132020 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:298 [inline]
 #1: ffffffff8e132020 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:750 [inline]
 #1: ffffffff8e132020 (rcu_read_lock){....}-{1:2}, at: __bpf_trace_run kernel/trace/bpf_trace.c:2380 [inline]
 #1: ffffffff8e132020 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x114/0x420 kernel/trace/bpf_trace.c:2420

the dependencies between HARDIRQ-irq-safe lock and the holding lock:
-> (&dev->event_lock){-.-.}-{2:2} {
   IN-HARDIRQ-W at:
                    lock_acquire+0x1e4/0x530 kernel/locking/lockdep.c:5754
                    __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
                    _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162
                    drm_handle_vblank+0xc8/0x4c0 drivers/gpu/drm/drm_vblank.c:1885
                    vkms_vblank_simulate+0xd6/0x360 drivers/gpu/drm/vkms/vkms_crtc.c:29
                    __run_hrtimer kernel/time/hrtimer.c:1692 [inline]
                    __hrtimer_run_queues+0x597/0xd00 kernel/time/hrtimer.c:1756
                    hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1818
                    local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
                    __sysvec_apic_timer_interrupt+0x109/0x3a0 arch/x86/kernel/apic/apic.c:1049
                    instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
                    sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1043
                    asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
                    native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline]
                    arch_safe_halt arch/x86/include/asm/irqflags.h:86 [inline]
                    acpi_safe_halt+0x21/0x30 drivers/acpi/processor_idle.c:112
                    acpi_idle_enter+0xe4/0x140 drivers/acpi/processor_idle.c:707
                    cpuidle_enter_state+0x11a/0x490 drivers/cpuidle/cpuidle.c:267
                    cpuidle_enter+0x5d/0xa0 drivers/cpuidle/cpuidle.c:388
                    call_cpuidle kernel/sched/idle.c:155 [inline]
                    cpuidle_idle_call kernel/sched/idle.c:236 [inline]
                    do_idle+0x375/0x5d0 kernel/sched/idle.c:332
                    cpu_startup_entry+0x42/0x60 kernel/sched/idle.c:430
                    rest_init+0x2e0/0x300 init/main.c:730
                    arch_call_rest_init+0xe/0x10 init/main.c:831
                    start_kernel+0x47a/0x500 init/main.c:1077
                    x86_64_start_reservations+0x2a/0x30 arch/x86/kernel/head64.c:509
                    x86_64_start_kernel+0x99/0xa0 arch/x86/kernel/head64.c:490
                    common_startup_64+0x13e/0x147
   IN-SOFTIRQ-W at:
                    lock_acquire+0x1e4/0x530 kernel/locking/lockdep.c:5754
                    __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
                    _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162
                    drm_handle_vblank+0xc8/0x4c0 drivers/gpu/drm/drm_vblank.c:1885
                    vkms_vblank_simulate+0xd6/0x360 drivers/gpu/drm/vkms/vkms_crtc.c:29
                    __run_hrtimer kernel/time/hrtimer.c:1692 [inline]
                    __hrtimer_run_queues+0x597/0xd00 kernel/time/hrtimer.c:1756
                    hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1818
                    local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
                    __sysvec_apic_timer_interrupt+0x109/0x3a0 arch/x86/kernel/apic/apic.c:1049
                    instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
                    sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1043
                    asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
                    __sanitizer_cov_trace_pc+0x8/0x70 kernel/kcov.c:203
                    __orc_find arch/x86/kernel/unwind_orc.c:99 [inline]
                    orc_find arch/x86/kernel/unwind_orc.c:227 [inline]
                    unwind_next_frame+0x54e/0x2a00 arch/x86/kernel/unwind_orc.c:494
                    arch_stack_walk+0x151/0x1b0 arch/x86/kernel/stacktrace.c:25
                    stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122
                    kasan_save_stack mm/kasan/common.c:47 [inline]
                    kasan_save_track+0x3f/0x80 mm/kasan/common.c:68
                    kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579
                    poison_slab_object+0xa6/0xe0 mm/kasan/common.c:240
                    __kasan_slab_free+0x37/0x60 mm/kasan/common.c:256
                    kasan_slab_free include/linux/kasan.h:184 [inline]
                    slab_free_hook mm/slub.c:2106 [inline]
                    slab_free mm/slub.c:4280 [inline]
                    kfree+0x14a/0x380 mm/slub.c:4390
                    security_cred_free+0xbc/0x100 security/security.c:3070
                    put_cred_rcu+0x69/0x2e0 kernel/cred.c:78
                    rcu_do_batch kernel/rcu/tree.c:2196 [inline]
                    rcu_core+0xaff/0x1830 kernel/rcu/tree.c:2471
                    __do_softirq+0x2be/0x943 kernel/softirq.c:554
                    invoke_softirq kernel/softirq.c:428 [inline]
                    __irq_exit_rcu+0xf2/0x1c0 kernel/softirq.c:633
                    irq_exit_rcu+0x9/0x30 kernel/softirq.c:645
                    common_interrupt+0xaa/0xd0 arch/x86/kernel/irq.c:247
                    asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:693
                    unwind_next_frame+0x2b/0x2a00 arch/x86/kernel/unwind_orc.c:470
                    __unwind_start+0x641/0x7c0 arch/x86/kernel/unwind_orc.c:760
                    unwind_start arch/x86/include/asm/unwind.h:64 [inline]
                    arch_stack_walk+0x103/0x1b0 arch/x86/kernel/stacktrace.c:24
                    stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122
                    save_stack+0xfb/0x1f0 mm/page_owner.c:129
                    __set_page_owner+0x29/0x380 mm/page_owner.c:195
                    set_page_owner include/linux/page_owner.h:31 [inline]
                    post_alloc_hook+0x1ea/0x210 mm/page_alloc.c:1533
                    prep_new_page mm/page_alloc.c:1540 [inline]
                    get_page_from_freelist+0x33ea/0x3580 mm/page_alloc.c:3311
                    __alloc_pages+0x256/0x680 mm/page_alloc.c:4569
                    alloc_pages_mpol+0x3de/0x650 mm/mempolicy.c:2133
                    vm_area_alloc_pages mm/vmalloc.c:3135 [inline]
                    __vmalloc_area_node mm/vmalloc.c:3211 [inline]
                    __vmalloc_node_range+0x9a4/0x14a0 mm/vmalloc.c:3392
                    alloc_thread_stack_node kernel/fork.c:309 [inline]
                    dup_task_struct+0x3e9/0x7d0 kernel/fork.c:1114
                    copy_process+0x5d1/0x3df0 kernel/fork.c:2219
                    kernel_clone+0x21e/0x8d0 kernel/fork.c:2796
                    user_mode_thread+0x132/0x1a0 kernel/fork.c:2874
                    call_usermodehelper_exec_work+0x5c/0x230 kernel/umh.c:172
                    process_one_work kernel/workqueue.c:3254 [inline]
                    process_scheduled_works+0xa02/0x1770 kernel/workqueue.c:3335
                    worker_thread+0x86d/0xd70 kernel/workqueue.c:3416
                    kthread+0x2f2/0x390 kernel/kthread.c:388
                    ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147
                    ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:243
   INITIAL USE at:
                   lock_acquire+0x1e4/0x530 kernel/locking/lockdep.c:5754
                   __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline]
                   _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:154
                   spin_lock include/linux/spinlock.h:351 [inline]
                   vkms_crtc_atomic_flush+0x8d/0x1c0 drivers/gpu/drm/vkms/vkms_crtc.c:253
                   drm_atomic_helper_commit_planes+0xaf3/0xe00 drivers/gpu/drm/drm_atomic_helper.c:2820
                   vkms_atomic_commit_tail+0x5d/0x200 drivers/gpu/drm/vkms/vkms_drv.c:73
                   commit_tail+0x2ab/0x3c0 drivers/gpu/drm/drm_atomic_helper.c:1832
                   drm_atomic_helper_commit+0x953/0x9f0 drivers/gpu/drm/drm_atomic_helper.c:2072
                   drm_atomic_commit+0x2ae/0x310 drivers/gpu/drm/drm_atomic.c:1514
                   drm_client_modeset_commit_atomic+0x676/0x7e0 drivers/gpu/drm/drm_client_modeset.c:1051
                   drm_client_modeset_commit_locked+0xe0/0x520 drivers/gpu/drm/drm_client_modeset.c:1154
                   drm_client_modeset_commit+0x4a/0x70 drivers/gpu/drm/drm_client_modeset.c:1180
                   __drm_fb_helper_restore_fbdev_mode_unlocked+0xc3/0x170 drivers/gpu/drm/drm_fb_helper.c:251
                   drm_fb_helper_set_par+0xaf/0x100 drivers/gpu/drm/drm_fb_helper.c:1344
                   fbcon_init+0x112b/0x2190 drivers/video/fbdev/core/fbcon.c:1094
                   visual_init+0x2e8/0x650 drivers/tty/vt/vt.c:1023
                   do_bind_con_driver+0x863/0xf60 drivers/tty/vt/vt.c:3643
                   do_take_over_console+0x5e7/0x750 drivers/tty/vt/vt.c:4222
                   do_fbcon_takeover+0x11a/0x200 drivers/video/fbdev/core/fbcon.c:532
                   do_fb_registered drivers/video/fbdev/core/fbcon.c:3000 [inline]
                   fbcon_fb_registered+0x352/0x600 drivers/video/fbdev/core/fbcon.c:3020
                   do_register_framebuffer drivers/video/fbdev/core/fbmem.c:449 [inline]
                   register_framebuffer+0x6b2/0x8d0 drivers/video/fbdev/core/fbmem.c:515
                   __drm_fb_helper_initial_config_and_unlock+0x172d/0x1e30 drivers/gpu/drm/drm_fb_helper.c:1871
                   drm_fbdev_generic_client_hotplug+0x16e/0x230 drivers/gpu/drm/drm_fbdev_generic.c:279
                   drm_client_register+0x181/0x210 drivers/gpu/drm/drm_client.c:141
                   vkms_create drivers/gpu/drm/vkms/vkms_drv.c:226 [inline]
                   vkms_init+0x5f5/0x730 drivers/gpu/drm/vkms/vkms_drv.c:252
                   do_one_initcall+0x23a/0x830 init/main.c:1241
                   do_initcall_level+0x157/0x210 init/main.c:1303
                   do_initcalls+0x3f/0x80 init/main.c:1319
                   kernel_init_freeable+0x435/0x5d0 init/main.c:1550
                   kernel_init+0x1d/0x2a0 init/main.c:1439
                   ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147
                   ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:243
 }
 ... key      at: [<ffffffff94815400>] drm_dev_init.__key.17+0x0/0x20

the dependencies between the lock to be acquired
 and HARDIRQ-irq-unsafe lock:
-> (&stab->lock){+...}-{2:2} {
   HARDIRQ-ON-W at:
                    lock_acquire+0x1e4/0x530 kernel/locking/lockdep.c:5754
                    __raw_spin_lock_bh include/linux/spinlock_api_smp.h:126 [inline]
                    _raw_spin_lock_bh+0x35/0x50 kernel/locking/spinlock.c:178
                    spin_lock_bh include/linux/spinlock.h:356 [inline]
                    __sock_map_delete net/core/sock_map.c:414 [inline]
                    sock_map_delete_elem+0x97/0x140 net/core/sock_map.c:446
                    bpf_prog_6dc5185c14555579+0x47/0x4f
                    bpf_dispatcher_nop_func include/linux/bpf.h:1234 [inline]
                    __bpf_prog_run include/linux/filter.h:657 [inline]
                    bpf_prog_run include/linux/filter.h:664 [inline]
                    __bpf_trace_run kernel/trace/bpf_trace.c:2381 [inline]
                    bpf_trace_run2+0x206/0x420 kernel/trace/bpf_trace.c:2420
                    trace_kfree include/trace/events/kmem.h:94 [inline]
                    kfree+0x291/0x380 mm/slub.c:4377
                    fscrypt_free_filename include/linux/fscrypt.h:403 [inline]
                    ext4_fname_free_filename+0x40/0xb0 fs/ext4/crypto.c:67
                    ext4_lookup_entry fs/ext4/namei.c:1772 [inline]
                    ext4_lookup+0x16a/0x750 fs/ext4/namei.c:1838
                    lookup_one_qstr_excl+0x121/0x260 fs/namei.c:1607
                    filename_create+0x297/0x540 fs/namei.c:3893
                    do_symlinkat+0xf9/0x3a0 fs/namei.c:4503
                    __do_sys_symlinkat fs/namei.c:4526 [inline]
                    __se_sys_symlinkat fs/namei.c:4523 [inline]
                    __x64_sys_symlinkat+0x99/0xb0 fs/namei.c:4523
                    do_syscall_64+0xfd/0x240
                    entry_SYSCALL_64_after_hwframe+0x6d/0x75
   INITIAL USE at:
                   lock_acquire+0x1e4/0x530 kernel/locking/lockdep.c:5754
                   __raw_spin_lock_bh include/linux/spinlock_api_smp.h:126 [inline]
                   _raw_spin_lock_bh+0x35/0x50 kernel/locking/spinlock.c:178
                   spin_lock_bh include/linux/spinlock.h:356 [inline]
                   __sock_map_delete net/core/sock_map.c:414 [inline]
                   sock_map_delete_elem+0x97/0x140 net/core/sock_map.c:446
                   bpf_prog_6dc5185c14555579+0x47/0x4f
                   bpf_dispatcher_nop_func include/linux/bpf.h:1234 [inline]
                   __bpf_prog_run include/linux/filter.h:657 [inline]
                   bpf_prog_run include/linux/filter.h:664 [inline]
                   __bpf_trace_run kernel/trace/bpf_trace.c:2381 [inline]
                   bpf_trace_run2+0x206/0x420 kernel/trace/bpf_trace.c:2420
                   trace_kfree include/trace/events/kmem.h:94 [inline]
                   kfree+0x291/0x380 mm/slub.c:4377
                   fscrypt_free_filename include/linux/fscrypt.h:403 [inline]
                   ext4_fname_free_filename+0x40/0xb0 fs/ext4/crypto.c:67
                   ext4_lookup_entry fs/ext4/namei.c:1772 [inline]
                   ext4_lookup+0x16a/0x750 fs/ext4/namei.c:1838
                   lookup_one_qstr_excl+0x121/0x260 fs/namei.c:1607
                   filename_create+0x297/0x540 fs/namei.c:3893
                   do_symlinkat+0xf9/0x3a0 fs/namei.c:4503
                   __do_sys_symlinkat fs/namei.c:4526 [inline]
                   __se_sys_symlinkat fs/namei.c:4523 [inline]
                   __x64_sys_symlinkat+0x99/0xb0 fs/namei.c:4523
                   do_syscall_64+0xfd/0x240
                   entry_SYSCALL_64_after_hwframe+0x6d/0x75
 }
 ... key      at: [<ffffffff948a0520>] sock_map_alloc.__key+0x0/0x20
 ... acquired at:
   lock_acquire+0x1e4/0x530 kernel/locking/lockdep.c:5754
   __raw_spin_lock_bh include/linux/spinlock_api_smp.h:126 [inline]
   _raw_spin_lock_bh+0x35/0x50 kernel/locking/spinlock.c:178
   spin_lock_bh include/linux/spinlock.h:356 [inline]
   __sock_map_delete net/core/sock_map.c:414 [inline]
   sock_map_delete_elem+0x97/0x140 net/core/sock_map.c:446
   bpf_prog_6dc5185c14555579+0x47/0x4f
   bpf_dispatcher_nop_func include/linux/bpf.h:1234 [inline]
   __bpf_prog_run include/linux/filter.h:657 [inline]
   bpf_prog_run include/linux/filter.h:664 [inline]
   __bpf_trace_run kernel/trace/bpf_trace.c:2381 [inline]
   bpf_trace_run2+0x206/0x420 kernel/trace/bpf_trace.c:2420
   trace_kfree include/trace/events/kmem.h:94 [inline]
   kfree+0x291/0x380 mm/slub.c:4377
   drm_events_release drivers/gpu/drm/drm_file.c:216 [inline]
   drm_file_free+0x4e2/0x900 drivers/gpu/drm/drm_file.c:246
   drm_close_helper drivers/gpu/drm/drm_file.c:282 [inline]
   drm_release+0x32b/0x560 drivers/gpu/drm/drm_file.c:434
   __fput+0x42b/0x8a0 fs/file_table.c:422
   __do_sys_close fs/open.c:1556 [inline]
   __se_sys_close fs/open.c:1541 [inline]
   __x64_sys_close+0x7f/0x110 fs/open.c:1541
   do_syscall_64+0xfd/0x240
   entry_SYSCALL_64_after_hwframe+0x6d/0x75


stack backtrace:
CPU: 1 PID: 12109 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114
 print_bad_irq_dependency kernel/locking/lockdep.c:2626 [inline]
 check_irq_usage kernel/locking/lockdep.c:2865 [inline]
 check_prev_add kernel/locking/lockdep.c:3138 [inline]
 check_prevs_add kernel/locking/lockdep.c:3253 [inline]
 validate_chain+0x4dc7/0x58e0 kernel/locking/lockdep.c:3869
 __lock_acquire+0x1346/0x1fd0 kernel/locking/lockdep.c:5137
 lock_acquire+0x1e4/0x530 kernel/locking/lockdep.c:5754
 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:126 [inline]
 _raw_spin_lock_bh+0x35/0x50 kernel/locking/spinlock.c:178
 spin_lock_bh include/linux/spinlock.h:356 [inline]
 __sock_map_delete net/core/sock_map.c:414 [inline]
 sock_map_delete_elem+0x97/0x140 net/core/sock_map.c:446
 bpf_prog_6dc5185c14555579+0x47/0x4f
 bpf_dispatcher_nop_func include/linux/bpf.h:1234 [inline]
 __bpf_prog_run include/linux/filter.h:657 [inline]
 bpf_prog_run include/linux/filter.h:664 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:2381 [inline]
 bpf_trace_run2+0x206/0x420 kernel/trace/bpf_trace.c:2420
 trace_kfree include/trace/events/kmem.h:94 [inline]
 kfree+0x291/0x380 mm/slub.c:4377
 drm_events_release drivers/gpu/drm/drm_file.c:216 [inline]
 drm_file_free+0x4e2/0x900 drivers/gpu/drm/drm_file.c:246
 drm_close_helper drivers/gpu/drm/drm_file.c:282 [inline]
 drm_release+0x32b/0x560 drivers/gpu/drm/drm_file.c:434
 __fput+0x42b/0x8a0 fs/file_table.c:422
 __do_sys_close fs/open.c:1556 [inline]
 __se_sys_close fs/open.c:1541 [inline]
 __x64_sys_close+0x7f/0x110 fs/open.c:1541
 do_syscall_64+0xfd/0x240
 entry_SYSCALL_64_after_hwframe+0x6d/0x75
RIP: 0033:0x7fe78e07cc9a
Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24
RSP: 002b:00007fff316875d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fe78e07cc9a
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 0000000000000032 R08: 0000001b31920000 R09: 00000000000002c1
R10: 0000000081360ad3 R11: 0000000000000293 R12: 00007fe78dc007c0
R13: ffffffffffffffff R14: 00007fe78dc00000 R15: 0000000000046e18
 </TASK>