------------[ cut here ]------------ lockdep bfs error:-1 WARNING: CPU: 1 PID: 5088 at kernel/locking/lockdep.c:2071 print_bfs_bug+0x24/0x30 kernel/locking/lockdep.c:2071 Modules linked in: CPU: 1 PID: 5088 Comm: syz-executor.2 Not tainted 6.8.0-rc3-syzkaller-00005-g99bd3cb0d12e #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 RIP: 0010:print_bfs_bug+0x24/0x30 kernel/locking/lockdep.c:2071 Code: 90 90 90 90 90 90 55 53 89 fb e8 27 95 21 03 89 c5 e8 80 1b ff ff 85 ed 74 14 90 48 c7 c7 c0 cc aa 8b 89 de e8 2d cb e5 ff 90 <0f> 0b 90 90 5b 5d c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffc9000432ee88 EFLAGS: 00010046 RAX: 8deb5d5917beeb00 RBX: 00000000ffffffff RCX: ffff888030288000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000001 R08: ffffffff815778a2 R09: 1ffff110172a51a2 R10: dffffc0000000000 R11: ffffed10172a51a3 R12: dffffc0000000001 R13: ffffffff9406deb8 R14: ffffffff92a87ff8 R15: ffffffff94020978 FS: 0000555557162480(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2dd21000 CR3: 00000000247ca000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: check_irq_usage kernel/locking/lockdep.c:2806 [inline] check_prev_add kernel/locking/lockdep.c:3138 [inline] check_prevs_add kernel/locking/lockdep.c:3253 [inline] validate_chain+0x47dd/0x58e0 kernel/locking/lockdep.c:3869 __lock_acquire+0x1345/0x1fd0 kernel/locking/lockdep.c:5137 lock_acquire+0x1e3/0x530 kernel/locking/lockdep.c:5754 do_write_seqcount_begin_nested include/linux/seqlock.h:469 [inline] do_write_seqcount_begin include/linux/seqlock.h:495 [inline] psi_group_change+0x113/0x12d0 kernel/sched/psi.c:787 psi_task_switch+0x199/0x770 kernel/sched/psi.c:938 psi_sched_switch kernel/sched/stats.h:185 [inline] __schedule+0x2471/0x49a0 kernel/sched/core.c:6722 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7047 irqentry_exit+0x5e/0x90 kernel/entry/common.c:348 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:lock_acquire+0x25a/0x530 kernel/locking/lockdep.c:5758 Code: 2b 00 74 08 4c 89 f7 e8 a4 21 81 00 f6 44 24 61 02 0f 85 8e 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 RSP: 0018:ffffc9000432f8e0 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 1ffff92000865f28 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: ffffffff8baac6e0 RDI: ffffffff8bfd93e0 RBP: ffffc9000432fa28 R08: ffffffff93cf2a7f R09: 1ffffffff279e54f R10: dffffc0000000000 R11: fffffbfff279e550 R12: 1ffff92000865f24 R13: dffffc0000000000 R14: ffffc9000432f940 R15: 0000000000000246 __flush_workqueue+0x174/0x1630 kernel/workqueue.c:3146 drain_workqueue+0xc9/0x390 kernel/workqueue.c:3311 destroy_workqueue+0xbe/0xc50 kernel/workqueue.c:4793 xfs_destroy_mount_workqueues+0xd3/0x100 fs/xfs/xfs_super.c:603 xfs_fs_put_super+0x129/0x140 fs/xfs/xfs_super.c:1143 generic_shutdown_super+0x136/0x2d0 fs/super.c:646 kill_block_super+0x44/0x90 fs/super.c:1680 xfs_kill_sb+0x15/0x50 fs/xfs/xfs_super.c:2026 deactivate_locked_super+0xc4/0x130 fs/super.c:477 cleanup_mnt+0x426/0x4c0 fs/namespace.c:1267 task_work_run+0x24e/0x310 kernel/task_work.c:180 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop kernel/entry/common.c:108 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:201 [inline] syscall_exit_to_user_mode+0x167/0x370 kernel/entry/common.c:212 do_syscall_64+0x108/0x240 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x6f/0x77 RIP: 0033:0x7f99b487f0d7 Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 RSP: 002b:00007fffc1c09e98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f99b487f0d7 RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007fffc1c09f50 RBP: 00007fffc1c09f50 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc1c0b010 R13: 00007f99b48c93b9 R14: 00000000002ab55b R15: 0000000000000004 ---------------- Code disassembly (best guess): 0: 2b 00 sub (%rax),%eax 2: 74 08 je 0xc 4: 4c 89 f7 mov %r14,%rdi 7: e8 a4 21 81 00 call 0x8121b0 c: f6 44 24 61 02 testb $0x2,0x61(%rsp) 11: 0f 85 8e 01 00 00 jne 0x1a5 17: 41 f7 c7 00 02 00 00 test $0x200,%r15d 1e: 74 01 je 0x21 20: fb sti 21: 48 c7 44 24 40 0e 36 movq $0x45e0360e,0x40(%rsp) 28: e0 45 * 2a: 4b c7 44 25 00 00 00 movq $0x0,0x0(%r13,%r12,1) <-- trapping instruction 31: 00 00 33: 43 c7 44 25 09 00 00 movl $0x0,0x9(%r13,%r12,1) 3a: 00 00 3c: 43 rex.XB 3d: c7 .byte 0xc7 3e: 44 rex.R 3f: 25 .byte 0x25