------------[ cut here ]------------ lockdep bfs error:-1 WARNING: CPU: 0 PID: 19699 at kernel/locking/lockdep.c:2071 print_bfs_bug+0x24/0x30 kernel/locking/lockdep.c:2071 Modules linked in: CPU: 0 PID: 19699 Comm: syz-executor.4 Not tainted 6.8.0-rc5-syzkaller-00163-gffd2cb6b718e #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 RIP: 0010:print_bfs_bug+0x24/0x30 kernel/locking/lockdep.c:2071 Code: 90 90 90 90 90 90 55 53 89 fb e8 67 e0 21 03 89 c5 e8 80 1b ff ff 85 ed 74 14 90 48 c7 c7 c0 cd aa 8b 89 de e8 fd c6 e5 ff 90 <0f> 0b 90 90 5b 5d c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffc90009baed08 EFLAGS: 00010046 RAX: 8359c1f125298200 RBX: 00000000ffffffff RCX: ffff88807073bb80 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000001 R08: ffffffff815779c2 R09: 1ffff110172851a2 R10: dffffc0000000000 R11: ffffed10172851a3 R12: dffffc0000000001 R13: ffffffff93f35ba8 R14: ffffffff929cb7e8 R15: ffffffff93f61ab8 FS: 000055555687f480(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f18079b4000 CR3: 000000006eeb2000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: check_irq_usage kernel/locking/lockdep.c:2806 [inline] check_prev_add kernel/locking/lockdep.c:3138 [inline] check_prevs_add kernel/locking/lockdep.c:3253 [inline] validate_chain+0x47dd/0x58e0 kernel/locking/lockdep.c:3869 __lock_acquire+0x1345/0x1fd0 kernel/locking/lockdep.c:5137 lock_acquire+0x1e3/0x530 kernel/locking/lockdep.c:5754 do_write_seqcount_begin_nested include/linux/seqlock.h:469 [inline] do_write_seqcount_begin include/linux/seqlock.h:495 [inline] psi_group_change+0x113/0x12d0 kernel/sched/psi.c:787 psi_task_switch+0x199/0x770 kernel/sched/psi.c:938 psi_sched_switch kernel/sched/stats.h:185 [inline] __schedule+0x2471/0x49a0 kernel/sched/core.c:6722 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7047 irqentry_exit+0x5e/0x90 kernel/entry/common.c:348 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:lock_acquire+0x25a/0x530 kernel/locking/lockdep.c:5758 Code: 2b 00 74 08 4c 89 f7 e8 24 26 81 00 f6 44 24 61 02 0f 85 8e 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 RSP: 0018:ffffc90009baf760 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 1ffff92001375ef8 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfd9a20 RBP: ffffc90009baf8a8 R08: ffffffff93cf561f R09: 1ffffffff279eac3 R10: dffffc0000000000 R11: fffffbfff279eac4 R12: 1ffff92001375ef4 R13: dffffc0000000000 R14: ffffc90009baf7c0 R15: 0000000000000246 __flush_workqueue+0x174/0x1630 kernel/workqueue.c:3146 drain_workqueue+0xc9/0x390 kernel/workqueue.c:3311 destroy_workqueue+0xbe/0xc50 kernel/workqueue.c:4793 btrfs_stop_all_workers+0x24a/0x2a0 fs/btrfs/disk-io.c:1799 close_ctree+0x664/0xd40 fs/btrfs/disk-io.c:4368 generic_shutdown_super+0x136/0x2d0 fs/super.c:646 kill_anon_super+0x3b/0x70 fs/super.c:1230 btrfs_kill_super+0x41/0x50 fs/btrfs/super.c:2093 deactivate_locked_super+0xc4/0x130 fs/super.c:477 cleanup_mnt+0x426/0x4c0 fs/namespace.c:1267 task_work_run+0x24e/0x310 kernel/task_work.c:180 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop kernel/entry/common.c:108 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:201 [inline] syscall_exit_to_user_mode+0x167/0x370 kernel/entry/common.c:212 do_syscall_64+0x108/0x240 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x6f/0x77 RIP: 0033:0x7f307407f0d7 Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 RSP: 002b:00007ffd3bed1618 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f307407f0d7 RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd3bed16d0 RBP: 00007ffd3bed16d0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd3bed2790 R13: 00007f30740c93b9 R14: 0000000000213ac5 R15: 0000000000000006 ---------------- Code disassembly (best guess): 0: 2b 00 sub (%rax),%eax 2: 74 08 je 0xc 4: 4c 89 f7 mov %r14,%rdi 7: e8 24 26 81 00 call 0x812630 c: f6 44 24 61 02 testb $0x2,0x61(%rsp) 11: 0f 85 8e 01 00 00 jne 0x1a5 17: 41 f7 c7 00 02 00 00 test $0x200,%r15d 1e: 74 01 je 0x21 20: fb sti 21: 48 c7 44 24 40 0e 36 movq $0x45e0360e,0x40(%rsp) 28: e0 45 * 2a: 4b c7 44 25 00 00 00 movq $0x0,0x0(%r13,%r12,1) <-- trapping instruction 31: 00 00 33: 43 c7 44 25 09 00 00 movl $0x0,0x9(%r13,%r12,1) 3a: 00 00 3c: 43 rex.XB 3d: c7 .byte 0xc7 3e: 44 rex.R 3f: 25 .byte 0x25