------------[ cut here ]------------ DEBUG_LOCKS_WARN_ON(1) WARNING: CPU: 0 PID: 7628 at kernel/locking/lockdep.c:232 hlock_class kernel/locking/lockdep.c:232 [inline] WARNING: CPU: 0 PID: 7628 at kernel/locking/lockdep.c:232 check_wait_context kernel/locking/lockdep.c:4773 [inline] WARNING: CPU: 0 PID: 7628 at kernel/locking/lockdep.c:232 __lock_acquire+0x573/0x1fd0 kernel/locking/lockdep.c:5087 Modules linked in: CPU: 0 PID: 7628 Comm: syz-executor.3 Not tainted 6.10.0-rc2-syzkaller-00366-g771ed66105de #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 RIP: 0010:hlock_class kernel/locking/lockdep.c:232 [inline] RIP: 0010:check_wait_context kernel/locking/lockdep.c:4773 [inline] RIP: 0010:__lock_acquire+0x573/0x1fd0 kernel/locking/lockdep.c:5087 Code: 00 00 83 3d 2e 0c 3b 0e 00 75 23 90 48 c7 c7 20 ba ca 8b 48 c7 c6 c0 bc ca 8b e8 78 e4 e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f RSP: 0018:ffffc90000007830 EFLAGS: 00010046 RAX: dd6cf241ae9fac00 RBX: 0000000000000e50 RCX: ffff888078529e00 RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 000000000000000a R08: ffffffff81585822 R09: fffffbfff1c39994 R10: dffffc0000000000 R11: fffffbfff1c39994 R12: 0000000000000001 R13: ffff888078529e00 R14: 000000000000000a R15: ffff88807852a950 FS: 000055558e56b480(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2f62d000 CR3: 00000000773ee000 CR4: 0000000000350ef0 Call Trace: lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5754 _raw_spin_lock_nested+0x31/0x40 kernel/locking/spinlock.c:378 raw_spin_rq_lock_nested+0xb0/0x140 kernel/sched/core.c:567 raw_spin_rq_lock kernel/sched/sched.h:1406 [inline] rq_lock kernel/sched/sched.h:1702 [inline] ttwu_queue kernel/sched/core.c:4055 [inline] try_to_wake_up+0x7cc/0x1470 kernel/sched/core.c:4378 signal_wake_up_state+0xb4/0x120 kernel/signal.c:773 signal_wake_up include/linux/sched/signal.h:448 [inline] complete_signal+0x94a/0xcf0 kernel/signal.c:1065 __send_signal_locked+0xb1b/0xdc0 kernel/signal.c:1185 do_send_sig_info kernel/signal.c:1301 [inline] group_send_sig_info+0x292/0x310 kernel/signal.c:1451 do_bpf_send_signal+0x85/0x190 kernel/trace/bpf_trace.c:838 irq_work_single+0xe4/0x240 kernel/irq_work.c:221 irq_work_run_list kernel/irq_work.c:252 [inline] irq_work_run+0x18b/0x350 kernel/irq_work.c:261 __sysvec_irq_work+0xb8/0x430 arch/x86/kernel/irq_work.c:22 instr_sysvec_irq_work arch/x86/kernel/irq_work.c:17 [inline] sysvec_irq_work+0x9e/0xc0 arch/x86/kernel/irq_work.c:17 asm_sysvec_irq_work+0x1a/0x20 arch/x86/include/asm/idtentry.h:738 RIP: 0010:finish_task_switch+0x1ea/0x870 kernel/sched/core.c:5282 Code: c9 50 e8 99 c9 0b 00 48 83 c4 08 4c 89 f7 e8 cd 38 00 00 e9 de 04 00 00 4c 89 f7 e8 20 c7 2a 0a e8 5b f8 36 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc RSP: 0018:ffffc9000b4ef908 EFLAGS: 00000286 RAX: dd6cf241ae9fac00 RBX: ffff888078529e00 RCX: ffffffff947a3603 RDX: dffffc0000000000 RSI: ffffffff8bcabb80 RDI: ffffffff8c1ff280 RBP: ffffc9000b4ef950 R08: ffffffff8fad4aef R09: 1ffffffff1f5a95d R10: dffffc0000000000 R11: fffffbfff1f5a95e R12: 1ffff11017287ea7 R13: dffffc0000000000 R14: ffff8880b943e7c0 R15: ffff8880b943f538 context_switch kernel/sched/core.c:5411 [inline] __schedule+0x17f0/0x4a20 kernel/sched/core.c:6745 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6924 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6948 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:160 [inline] _raw_spin_unlock_irq+0x44/0x50 kernel/locking/spinlock.c:202 spin_unlock_irq include/linux/spinlock.h:401 [inline] get_signal+0x14dd/0x1740 kernel/signal.c:2912 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd4076a8375 Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 RSP: 002b:00007ffd3ac073a0 EFLAGS: 00000293 RAX: 0000000000000000 RBX: 000000000000009c RCX: 00007fd4076a8375 RDX: 00007ffd3ac073e0 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007ffd3ac0745c R08: 0000000000000000 R09: 7fffffffffffffff R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 R13: 0000000000056e01 R14: 0000000000056c1b R15: 0000000000000014 ---------------- Code disassembly (best guess): 0: c9 leave 1: 50 push %rax 2: e8 99 c9 0b 00 call 0xbc9a0 7: 48 83 c4 08 add $0x8,%rsp b: 4c 89 f7 mov %r14,%rdi e: e8 cd 38 00 00 call 0x38e0 13: e9 de 04 00 00 jmp 0x4f6 18: 4c 89 f7 mov %r14,%rdi 1b: e8 20 c7 2a 0a call 0xa2ac740 20: e8 5b f8 36 00 call 0x36f880 25: fb sti 26: 48 8b 5d c0 mov -0x40(%rbp),%rbx * 2a: 48 8d bb f8 15 00 00 lea 0x15f8(%rbx),%rdi <-- trapping instruction 31: 48 89 f8 mov %rdi,%rax 34: 48 c1 e8 03 shr $0x3,%rax 38: 49 rex.WB 39: be 00 00 00 00 mov $0x0,%esi 3e: 00 fc add %bh,%ah