------------[ cut here ]------------
WARNING: CPU: 0 PID: 8 at kernel/workqueue.c:2257 __queue_work+0xcd3/0xf50 kernel/workqueue.c:2256
Modules linked in:
CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
Workqueue: events free_ipc
RIP: 0010:__queue_work+0xcd3/0xf50 kernel/workqueue.c:2256
Code: ff e8 21 ee 37 00 90 0f 0b 90 e9 b2 fe ff ff e8 13 ee 37 00 eb 13 e8 0c ee 37 00 eb 0c e8 05 ee 37 00 eb 05 e8 fe ed 37 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc
RSP: 0018:ffffc90000007b08 EFLAGS: 00010046
RAX: ffffffff816785dd RBX: 0000000000000100 RCX: ffff88801c285a00
RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000
RBP: 0000000000010000 R08: ffffffff81677a08 R09: 1ffffffff203463e
R10: dffffc0000000000 R11: ffffffff81678e10 R12: ffff888059aa5000
R13: ffff888059aa51c0 R14: dffffc0000000000 R15: 0000000000000008
FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fff2aafac40 CR3: 000000000e736000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 call_timer_fn+0x187/0x650 kernel/time/timer.c:1793
 expire_timers kernel/time/timer.c:1839 [inline]
 __run_timers kernel/time/timer.c:2418 [inline]
 __run_timer_base+0x695/0x8e0 kernel/time/timer.c:2430
 run_timer_base kernel/time/timer.c:2439 [inline]
 run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2449
 handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561
 __do_softirq kernel/softirq.c:595 [inline]
 invoke_softirq kernel/softirq.c:435 [inline]
 __irq_exit_rcu+0xf7/0x220 kernel/softirq.c:662
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:678
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1049
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:arch_local_irq_enable arch/x86/include/asm/irqflags.h:97 [inline]
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/irqflags.h:155 [inline]
RIP: 0010:___slab_alloc+0x4d1/0x14a0 mm/slub.c:3721
Code: 00 02 00 00 0f 84 96 fb ff ff fb 44 89 fa e9 8d fb ff ff e8 21 d2 d0 09 f7 c3 00 02 00 00 0f 84 91 fe ff ff fb 44 89 7c 24 10 <eb> 13 48 c7 43 10 00 00 00 00 4c 89 e7 48 89 de e8 ca 15 00 00 49
RSP: 0018:ffffc900000d7480 EFLAGS: 00000206
RAX: 6d22a8c85cc9e500 RBX: 0000000000000246 RCX: ffffffff817b275a
RDX: dffffc0000000000 RSI: ffffffff8c0a9760 RDI: ffffffff8c5faee0
RBP: 0000000000000000 R08: ffffffff942ba8bf R09: 1ffffffff2857517
R10: dffffc0000000000 R11: fffffbfff2857518 R12: ffff88801ac4f8c0
R13: ffffffff81faa626 R14: ffff8880b8643940 R15: 00000000ffffffff
 __slab_alloc+0x58/0xa0 mm/slub.c:3920
 __slab_alloc_node mm/slub.c:3995 [inline]
 slab_alloc_node mm/slub.c:4156 [inline]
 kmem_cache_alloc_noprof+0x268/0x380 mm/slub.c:4175
 kmem_alloc_batch lib/debugobjects.c:371 [inline]
 fill_pool+0x260/0x680 lib/debugobjects.c:403
 debug_objects_fill_pool lib/debugobjects.c:725 [inline]
 debug_object_activate+0x493/0x580 lib/debugobjects.c:814
 debug_rcu_head_queue kernel/rcu/rcu.h:224 [inline]
 kvfree_call_rcu+0x99/0x790 kernel/rcu/tree.c:3811
 drop_sysctl_table+0x3cb/0x570 fs/proc/proc_sysctl.c:1517
 drop_sysctl_table+0x3dd/0x570 fs/proc/proc_sysctl.c:1520
 unregister_sysctl_table+0x41/0x60 fs/proc/proc_sysctl.c:1538
 retire_ipc_sysctls+0x5e/0x80 ipc/ipc_sysctl.c:310
 free_ipc_ns ipc/namespace.c:160 [inline]
 free_ipc+0x13d/0x290 ipc/namespace.c:181
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310
 worker_thread+0x870/0xd30 kernel/workqueue.c:3391
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
----------------
Code disassembly (best guess):
   0:	00 02                	add    %al,(%rdx)
   2:	00 00                	add    %al,(%rax)
   4:	0f 84 96 fb ff ff    	je     0xfffffba0
   a:	fb                   	sti
   b:	44 89 fa             	mov    %r15d,%edx
   e:	e9 8d fb ff ff       	jmp    0xfffffba0
  13:	e8 21 d2 d0 09       	call   0x9d0d239
  18:	f7 c3 00 02 00 00    	test   $0x200,%ebx
  1e:	0f 84 91 fe ff ff    	je     0xfffffeb5
  24:	fb                   	sti
  25:	44 89 7c 24 10       	mov    %r15d,0x10(%rsp)
* 2a:	eb 13                	jmp    0x3f <-- trapping instruction
  2c:	48 c7 43 10 00 00 00 	movq   $0x0,0x10(%rbx)
  33:	00
  34:	4c 89 e7             	mov    %r12,%rdi
  37:	48 89 de             	mov    %rbx,%rsi
  3a:	e8 ca 15 00 00       	call   0x1609
  3f:	49                   	rex.WB