------------[ cut here ]------------
raw_local_irq_restore() called with IRQs enabled
WARNING: kernel/locking/irqflag-debug.c:10 at warn_bogus_irq_restore+0xc/0x20 kernel/locking/irqflag-debug.c:10, CPU#1: syz.2.492/7623
Modules linked in:
CPU: 1 UID: 0 PID: 7623 Comm: syz.2.492 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:warn_bogus_irq_restore+0xc/0x20 kernel/locking/irqflag-debug.c:10
Code: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 90 48 8d 3d 74 72 76 06 <67> 48 0f b9 3a 90 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90
RSP: 0018:ffffc90002d87768 EFLAGS: 00010202
RAX: 0000000000000202 RBX: ffffffff92058e40 RCX: ffffffff81e74723
RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff9248de50
RBP: 0000000000000293 R08: 0000000000000001 R09: fffffbfff240b1c8
R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: ffff888022bd1800 R15: ffffffff92060a60
FS:  0000000000000000(0000) GS:ffff88809584a000(0063) knlGS:00000000f53b6b40
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 0000000080000080 CR3: 0000000072958000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline]
 _raw_spin_unlock_irqrestore+0x74/0x80 kernel/locking/spinlock.c:221
 spin_unlock_irqrestore include/linux/spinlock.h:425 [inline]
 __rds_conn_create+0x18f8/0x2650 net/rds/connection.c:364
 rds_conn_create_outgoing+0x44/0x60 net/rds/connection.c:394
 rds_sendmsg+0x10da/0x34d0 net/rds/send.c:1348
 sock_sendmsg_nosec net/socket.c:800 [inline]
 __sock_sendmsg net/socket.c:815 [inline]
 ____sys_sendmsg+0xa4d/0xbe0 net/socket.c:2713
 ___sys_sendmsg+0x190/0x1e0 net/socket.c:2767
 __sys_sendmsg+0x160/0x210 net/socket.c:2799
 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:79 [inline]
 __do_fast_syscall_32+0x13a/0x8b0 arch/x86/entry/syscall_32.c:291
 do_fast_syscall_32+0x32/0x70 arch/x86/entry/syscall_32.c:316
 entry_SYSENTER_compat_after_hwframe+0x84/0x8e
RIP: 0023:0xf739efec
Code: Unable to access opcode bytes at 0xf739efc2.
RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
----------------
Code disassembly (best guess):
   0:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
   7:	00 00 00
   a:	0f 1f 40 00          	nopl   0x0(%rax)
   e:	90                   	nop
   f:	90                   	nop
  10:	90                   	nop
  11:	90                   	nop
  12:	90                   	nop
  13:	90                   	nop
  14:	90                   	nop
  15:	90                   	nop
  16:	90                   	nop
  17:	90                   	nop
  18:	90                   	nop
  19:	90                   	nop
  1a:	90                   	nop
  1b:	90                   	nop
  1c:	90                   	nop
  1d:	90                   	nop
  1e:	f3 0f 1e fa          	endbr64
  22:	90                   	nop
  23:	48 8d 3d 74 72 76 06 	lea    0x6767274(%rip),%rdi        # 0x676729e
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	90                   	nop
  30:	c3                   	ret
  31:	cc                   	int3
  32:	cc                   	int3
  33:	cc                   	int3
  34:	cc                   	int3
  35:	66 0f 1f 84 00 00 00 	nopw   0x0(%rax,%rax,1)
  3c:	00 00
  3e:	90                   	nop
  3f:	90                   	nop