------------[ cut here ]------------ raw_local_irq_restore() called with IRQs enabled WARNING: CPU: 1 PID: 0 at kernel/locking/irqflag-debug.c:10 warn_bogus_irq_restore+0x1d/0x20 kernel/locking/irqflag-debug.c:10 Modules linked in: CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.12.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:warn_bogus_irq_restore+0x1d/0x20 kernel/locking/irqflag-debug.c:10 Code: 24 48 c7 c7 a0 68 89 88 e8 ab 07 c2 ff 80 3d a0 59 e8 03 00 74 01 c3 48 c7 c7 c0 e1 8a 88 c6 05 8f 59 e8 03 01 e8 a0 06 c2 ff <0f> 0b c3 48 39 77 10 0f 84 97 00 00 00 66 f7 47 22 f0 ff 74 4b 48 RSP: 0018:ffffc90000dc0a28 EFLAGS: 00010282 RAX: 0000000000000000 RBX: ffffffff8e825680 RCX: 0000000000000000 RDX: 0000000000000103 RSI: ffffffff888ae7c0 RDI: fffff520001b8137 RBP: 0000000000000200 R08: 0000000000000001 R09: ffffffff8e196907 R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000003 R13: fffffbfff1d04ad0 R14: 0000000000000001 R15: ffff8880ba151ec0 FS: 0000000000000000(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055e83a413710 CR3: 0000000022d0e000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: kvm_wait arch/x86/kernel/kvm.c:860 [inline] kvm_wait+0xc9/0xe0 arch/x86/kernel/kvm.c:837 pv_wait arch/x86/include/asm/paravirt.h:564 [inline] pv_wait_head_or_lock kernel/locking/qspinlock_paravirt.h:470 [inline] __pv_queued_spin_lock_slowpath+0x8b8/0xb40 kernel/locking/qspinlock.c:508 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:554 [inline] queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:51 [inline] queued_spin_lock include/asm-generic/qspinlock.h:85 [inline] do_raw_spin_lock+0x200/0x2b0 kernel/locking/spinlock_debug.c:113 spin_lock include/linux/spinlock.h:354 [inline] mac80211_hwsim_tx_frame_no_nl.isra.0+0x5ac/0x1020 drivers/net/wireless/mac80211_hwsim.c:1514 mac80211_hwsim_tx_frame+0x109/0x1a0 drivers/net/wireless/mac80211_hwsim.c:1775 mac80211_hwsim_beacon_tx+0x3f8/0x7c0 drivers/net/wireless/mac80211_hwsim.c:1829 __iterate_interfaces+0x107/0x360 net/mac80211/util.c:793 ieee80211_iterate_active_interfaces_atomic+0x5c/0xf0 net/mac80211/util.c:829 mac80211_hwsim_beacon+0xb7/0x160 drivers/net/wireless/mac80211_hwsim.c:1852 __run_hrtimer kernel/time/hrtimer.c:1519 [inline] __hrtimer_run_queues+0x4d7/0xb00 kernel/time/hrtimer.c:1583 hrtimer_run_softirq+0x176/0x340 kernel/time/hrtimer.c:1600 __do_softirq+0x29b/0x9f6 kernel/softirq.c:345 invoke_softirq kernel/softirq.c:221 [inline] __irq_exit_rcu kernel/softirq.c:422 [inline] irq_exit_rcu+0x134/0x200 kernel/softirq.c:434 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1100 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632 RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:29 [inline] RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:70 [inline] RIP: 0010:arch_irqs_disabled arch/x86/include/asm/irqflags.h:137 [inline] RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:111 [inline] RIP: 0010:acpi_idle_do_entry+0x161/0x1c0 drivers/acpi/processor_idle.c:516 Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 6d 48 8b 45 00 a8 08 75 c9 e8 3d 1b 33 f9 e9 07 00 00 00 0f 00 2d 11 89 ad 00 fb f4 <9c> 58 fa f6 c4 02 74 ae 5d e9 91 17 33 f9 48 89 ef 5d e9 c8 f9 ff RSP: 0018:ffffc90000d57d30 EFLAGS: 00000202 RAX: 00000000000343ef RBX: ffff888015dc4865 RCX: 1ffffffff1869769 RDX: 0000000000000000 RSI: ffffffff888ae7c0 RDI: ffffffff88de59c0 RBP: ffff88800f9c5400 R08: 0000000000000001 R09: 0000000000000001 R10: ffffed1001f38a80 R11: 0000000000000001 R12: 0000000000000001 R13: ffff888015dc4864 R14: ffffffff8b0b1ec0 R15: ffff888140db5004 acpi_idle_enter+0x2c0/0x4b0 drivers/acpi/processor_idle.c:647 cpuidle_enter_state+0x152/0xb40 drivers/cpuidle/cpuidle.c:237 cpuidle_enter+0x45/0xa0 drivers/cpuidle/cpuidle.c:351 call_cpuidle kernel/sched/idle.c:158 [inline] cpuidle_idle_call kernel/sched/idle.c:239 [inline] do_idle+0x3e1/0x590 kernel/sched/idle.c:300 cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:397 start_secondary+0x274/0x350 arch/x86/kernel/smpboot.c:272 secondary_startup_64_no_verify+0xb0/0xbb ---------------- Code disassembly (best guess), 5 bytes skipped: 0: 48 c1 ea 03 shr $0x3,%rdx 4: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 8: 75 6d jne 0x77 a: 48 8b 45 00 mov 0x0(%rbp),%rax e: a8 08 test $0x8,%al 10: 75 c9 jne 0xffffffdb 12: e8 3d 1b 33 f9 callq 0xf9331b54 17: e9 07 00 00 00 jmpq 0x23 1c: 0f 00 2d 11 89 ad 00 verw 0xad8911(%rip) # 0xad8934 23: fb sti 24: f4 hlt * 25: 9c pushfq <-- trapping instruction 26: 58 pop %rax 27: fa cli 28: f6 c4 02 test $0x2,%ah 2b: 74 ae je 0xffffffdb 2d: 5d pop %rbp 2e: e9 91 17 33 f9 jmpq 0xf93317c4 33: 48 89 ef mov %rbp,%rdi 36: 5d pop %rbp 37: e9 .byte 0xe9 38: c8 .byte 0xc8 39: f9 stc 3a: ff .byte 0xff