sd 0:0:1:0: [sda] 4194304 512-byte logical blocks: (2.15 GB/2.00 GiB) sd 0:0:1:0: [sda] 4096-byte physical blocks sd 0:0:1:0: [sda] Write Protect is off sd 0:0:1:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA sda: sda1 sd 0:0:1:0: [sda] Attached SCSI disk ============================================ WARNING: possible recursive locking detected 6.11.0-rc3-next-20240816-syzkaller #0 Not tainted -------------------------------------------- kworker/u8:4/63 is trying to acquire lock: ffff8880b912a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 kernel/time/timer.c:1051 but task is already holding lock: ffff8880b902a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 kernel/time/timer.c:1051 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&base->lock); lock(&base->lock); *** DEADLOCK *** May be due to missing lock nesting notation 4 locks held by kworker/u8:4/63: #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 kernel/workqueue.c:3313 #1: ffffc900015f7d00 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3208 [inline] #1: ffffc900015f7d00 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 kernel/workqueue.c:3313 #2: ffff8880b902a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 kernel/time/timer.c:1051 #3: ffffffff8f0589a0 (fill_pool_map-wait-type-override){+.+.}-{3:3}, at: debug_objects_fill_pool+0x80/0x9b0 lib/debugobjects.c:615 stack backtrace: CPU: 0 UID: 0 PID: 63 Comm: kworker/u8:4 Not tainted 6.11.0-rc3-next-20240816-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Workqueue: events_unbound toggle_allocation_gate Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 check_deadlock kernel/locking/lockdep.c:3064 [inline] validate_chain+0x15d3/0x5900 kernel/locking/lockdep.c:3858 __lock_acquire+0x137a/0x2040 kernel/locking/lockdep.c:5145 lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5762 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162 lock_timer_base+0x112/0x240 kernel/time/timer.c:1051 __mod_timer+0x1ca/0xeb0 kernel/time/timer.c:1132 queue_delayed_work_on+0x1ca/0x390 kernel/workqueue.c:2555 queue_delayed_work include/linux/workqueue.h:688 [inline] schedule_delayed_work include/linux/workqueue.h:828 [inline] __debug_check_no_obj_freed lib/debugobjects.c:1013 [inline] debug_check_no_obj_freed+0x14a/0x580 lib/debugobjects.c:1020 free_pages_prepare mm/page_alloc.c:1106 [inline] free_unref_page+0x38c/0xd90 mm/page_alloc.c:2652 stack_depot_save_flags+0x6f6/0x830 lib/stackdepot.c:667 kasan_save_stack mm/kasan/common.c:48 [inline] kasan_save_track+0x51/0x80 mm/kasan/common.c:68 unpoison_slab_object mm/kasan/common.c:319 [inline] __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:345 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4032 [inline] slab_alloc_node mm/slub.c:4081 [inline] kmem_cache_alloc_noprof+0x135/0x2a0 mm/slub.c:4088 fill_pool lib/debugobjects.c:169 [inline] debug_objects_fill_pool+0x52b/0x9b0 lib/debugobjects.c:616 debug_object_activate+0x135/0x510 lib/debugobjects.c:705 debug_timer_activate kernel/time/timer.c:836 [inline] __mod_timer+0x89d/0xeb0 kernel/time/timer.c:1171 queue_delayed_work_on+0x1ca/0x390 kernel/workqueue.c:2555 queue_delayed_work include/linux/workqueue.h:688 [inline] toggle_allocation_gate+0x206/0x260 mm/kfence/core.c:856 process_one_work kernel/workqueue.c:3232 [inline] process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3313 worker_thread+0x86d/0xd10 kernel/workqueue.c:3390 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244