------------[ cut here ]------------ WARNING: CPU: 0 PID: 6822 at kernel/workqueue.c:2257 current_wq_worker kernel/workqueue_internal.h:69 [inline] WARNING: CPU: 0 PID: 6822 at kernel/workqueue.c:2257 is_chained_work kernel/workqueue.c:2199 [inline] WARNING: CPU: 0 PID: 6822 at kernel/workqueue.c:2257 __queue_work+0xe50/0x1308 kernel/workqueue.c:2256 Modules linked in: CPU: 0 UID: 0 PID: 6822 Comm: syz.0.93 Not tainted 6.12.0-syzkaller-g7b1d1d4cfac0 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __queue_work+0xe50/0x1308 kernel/workqueue_internal.h:69 lr : current_wq_worker kernel/workqueue_internal.h:69 [inline] lr : is_chained_work kernel/workqueue.c:2199 [inline] lr : __queue_work+0xe50/0x1308 kernel/workqueue.c:2256 sp : ffff800080007b20 x29: ffff800080007b70 x28: 1fffe0001e7c9001 x27: dfff800000000000 x26: dfff800000000000 x25: ffff0000c2d66000 x24: 0000000000000008 x23: 1fffe0001e7c9001 x22: ffff0000c2d661c0 x21: 0000000000000100 x20: ffff0000f3e48000 x19: ffff0000ec864930 x18: 1fffe000366c3876 x17: ffff800123dfd000 x16: ffff8000831615b0 x15: 0000000000000002 x14: ffff80008f8d05e8 x13: dfff800000000000 x12: 00000000b4b5bd12 x11: 00000000a3ddcc59 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000f3e48000 x7 : ffff800080470ed8 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008decc740 x2 : ffff0000ec864930 x1 : 0000000000000100 x0 : 0000000000000000 Call trace: current_wq_worker kernel/workqueue_internal.h:69 [inline] (P) is_chained_work kernel/workqueue.c:2199 [inline] (P) __queue_work+0xe50/0x1308 kernel/workqueue.c:2256 (P) current_wq_worker kernel/workqueue_internal.h:69 [inline] (L) is_chained_work kernel/workqueue.c:2199 [inline] (L) __queue_work+0xe50/0x1308 kernel/workqueue.c:2256 (L) delayed_work_timer_fn+0x74/0x90 kernel/workqueue.c:2485 call_timer_fn+0x1b4/0x8f0 kernel/time/timer.c:1794 expire_timers kernel/time/timer.c:1840 [inline] __run_timers kernel/time/timer.c:2419 [inline] __run_timer_base+0x59c/0x7b4 kernel/time/timer.c:2430 run_timer_base kernel/time/timer.c:2439 [inline] run_timer_softirq+0xcc/0x194 kernel/time/timer.c:2449 handle_softirqs+0x2e0/0xbf8 kernel/softirq.c:554 __do_softirq+0x14/0x20 kernel/softirq.c:588 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:435 [inline] __irq_exit_rcu+0x1d8/0x544 kernel/softirq.c:655 irq_exit_rcu+0x14/0x84 kernel/softirq.c:671 __el1_irq arch/arm64/kernel/entry-common.c:561 [inline] el1_interrupt+0x38/0x68 arch/arm64/kernel/entry-common.c:575 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:580 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 should_resched arch/arm64/include/asm/preempt.h:80 [inline] (P) rcu_read_unlock_sched include/linux/rcupdate.h:964 [inline] (P) pfn_valid+0x3d8/0x418 include/linux/mmzone.h:2053 (P) rcu_read_unlock_sched include/linux/rcupdate.h:964 [inline] (L) pfn_valid+0x3b4/0x418 include/linux/mmzone.h:2053 (L) page_table_check_clear+0x34/0x3f8 mm/page_table_check.c:70 __page_table_check_pte_clear+0xa0/0xc0 mm/page_table_check.c:169 page_table_check_pte_clear include/linux/page_table_check.h:49 [inline] __ptep_get_and_clear arch/arm64/include/asm/pgtable.h:1284 [inline] __get_and_clear_full_ptes arch/arm64/include/asm/pgtable.h:1307 [inline] get_and_clear_full_ptes arch/arm64/include/asm/pgtable.h:1708 [inline] zap_present_folio_ptes mm/memory.c:1496 [inline] zap_present_ptes mm/memory.c:1579 [inline] zap_pte_range mm/memory.c:1621 [inline] zap_pmd_range mm/memory.c:1739 [inline] zap_pud_range mm/memory.c:1768 [inline] zap_p4d_range mm/memory.c:1789 [inline] unmap_page_range+0x2650/0x2e3c mm/memory.c:1810 unmap_single_vma mm/memory.c:1856 [inline] unmap_vmas+0x378/0x598 mm/memory.c:1900 exit_mmap+0x1dc/0xc00 mm/mmap.c:1923 __mmput+0xec/0x338 kernel/fork.c:1348 mmput+0x70/0xac kernel/fork.c:1370 exit_mm+0x148/0x210 kernel/exit.c:571 do_exit+0x470/0x1ad0 kernel/exit.c:926 do_group_exit+0x194/0x22c kernel/exit.c:1088 get_signal+0x1410/0x152c kernel/signal.c:2918 do_signal+0x23c/0x391c arch/arm64/kernel/signal.c:1645 do_notify_resume+0x74/0x1f4 arch/arm64/kernel/entry-common.c:148 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:169 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:178 [inline] el0_svc+0xac/0x168 arch/arm64/kernel/entry-common.c:745 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 1569 hardirqs last enabled at (1568): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (1568): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (1569): [] __raw_spin_lock_irq include/linux/spinlock_api_smp.h:117 [inline] hardirqs last disabled at (1569): [] _raw_spin_lock_irq+0x28/0x70 kernel/locking/spinlock.c:170 softirqs last enabled at (1416): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (1416): [] release_sock+0x154/0x1b8 net/core/sock.c:3641 softirqs last disabled at (1561): [] __do_softirq+0x14/0x20 kernel/softirq.c:588 ---[ end trace 0000000000000000 ]---