BUG: MAX_LOCK_DEPTH too low!
turning off the locking correctness validator.
depth: 48 max: 48!
48 locks held by kworker/0:11/6017:
#0: ffff888061c40d38 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 kernel/workqueue.c:-1
#1: ffffc900041afd00 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 kernel/workqueue.c:2285
#2: ffff888078160178 (&peer->endpoint_lock){++-.}-{2:2}, at: wg_socket_send_skb_to_peer+0x50/0x1c0 drivers/net/wireguard/socket.c:173
#3: ffffffff8c31efc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 include/linux/rcupdate.h:313
#4: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#5: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#6: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#7: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#8: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#9: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#10: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#11: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#12: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#13: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#14: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#15: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#16: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#17: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#18: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#19: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#20: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#21: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#22: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#23: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#24: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#25: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#26: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#27: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#28: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#29: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#30: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#31: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#32: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#33: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#34: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#35: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#36: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#37: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#38: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#39: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#40: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#41: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#42: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
#43: ffff88801e85deb0 (&vkms_out->lock){-.-.}-{2:2}, at: spin_lock include/linux/spinlock.h:364 [inline]
#43: ffff88801e85deb0 (&vkms_out->lock){-.-.}-{2:2}, at: vkms_vblank_simulate+0xb8/0x320 drivers/gpu/drm/vkms/vkms_crtc.c:28
#44: ffff88801e85c3e8 (&dev->event_lock){-.-.}-{2:2}, at: drm_handle_vblank+0xbd/0x5d0 drivers/gpu/drm/drm_vblank.c:1945
#45: ffff88801e85c350 (&dev->vblank_time_lock){-.-.}-{2:2}, at: spin_lock include/linux/spinlock.h:364 [inline]
#45: ffff88801e85c350 (&dev->vblank_time_lock){-.-.}-{2:2}, at: drm_handle_vblank+0xd0/0x5d0 drivers/gpu/drm/drm_vblank.c:1951
#46: ffff8881464be120 (&(&vblank->seqlock)->lock){-.-.}-{2:2}, at: spin_lock include/linux/spinlock.h:364 [inline]
#46: ffff8881464be120 (&(&vblank->seqlock)->lock){-.-.}-{2:2}, at: write_seqlock include/linux/seqlock.h:937 [inline]
#46: ffff8881464be120 (&(&vblank->seqlock)->lock){-.-.}-{2:2}, at: store_vblank+0xe2/0x220 drivers/gpu/drm/drm_vblank.c:179
#47: ffff8881464be0d8 (&____s->seqcount#6){----}-{0:0}, at: drm_update_vblank_count+0x70d/0x930 drivers/gpu/drm/drm_vblank.c:367
INFO: lockdep is turned off.
CPU: 0 PID: 6017 Comm: kworker/0:11 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: wg-crypt-wg0 wg_packet_tx_worker
Call Trace:
dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
__lock_acquire+0x1247/0x7b50 kernel/locking/lockdep.c:-1
lock_acquire+0x19e/0x400 kernel/locking/lockdep.c:5623
do_write_seqcount_begin_nested include/linux/seqlock.h:519 [inline]
do_write_seqcount_begin include/linux/seqlock.h:545 [inline]
write_seqlock include/linux/seqlock.h:938 [inline]
store_vblank+0x106/0x220 drivers/gpu/drm/drm_vblank.c:179
drm_update_vblank_count+0x70d/0x930 drivers/gpu/drm/drm_vblank.c:367
drm_handle_vblank+0x106/0x5d0 drivers/gpu/drm/drm_vblank.c:1960
vkms_vblank_simulate+0xc0/0x320 drivers/gpu/drm/vkms/vkms_crtc.c:29
__run_hrtimer kernel/time/hrtimer.c:1685 [inline]
__hrtimer_run_queues+0x4ea/0xb60 kernel/time/hrtimer.c:1749
hrtimer_interrupt+0x397/0x8b0 kernel/time/hrtimer.c:1811
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1097 [inline]
__sysvec_apic_timer_interrupt+0x137/0x4a0 arch/x86/kernel/apic/apic.c:1114
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
sysvec_apic_timer_interrupt+0x9b/0xc0 arch/x86/kernel/apic/apic.c:1108
asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:seqcount_lockdep_reader_access+0x144/0x190 include/linux/seqlock.h:106
Code: 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 42 41 f7 c5 00 02 00 00 74 01 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 43 c7 44 27 08 00 00 00 00 65 48 8b 04 25
RSP: 0018:ffffc900041ab340 EFLAGS: 00000206
RAX: dffffc0000000004 RBX: ffff88813fffb7c0 RCX: 0d9eaef3062c6f00
RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a4280
RBP: ffffc900041ab400 R08: ffffffff901ef1bf R09: 1ffffffff203de37
R10: dffffc0000000000 R11: fffffbfff203de38 R12: dffffc0000000000
R13: 0000000000000a02 R14: ffffffff81b520f6 R15: 1ffff92000835668
read_seqbegin include/linux/seqlock.h:897 [inline]
zone_span_seqbegin include/linux/memory_hotplug.h:83 [inline]
page_outside_zone_boundaries mm/page_alloc.c:580 [inline]
bad_range+0x76/0x2c0 mm/page_alloc.c:607
rmqueue mm/page_alloc.c:3760 [inline]
get_page_from_freelist+0x24dd/0x2670 mm/page_alloc.c:4189
__alloc_pages+0x1ee/0x480 mm/page_alloc.c:5501
__alloc_pages_node include/linux/gfp.h:570 [inline]
alloc_pages_node include/linux/gfp.h:584 [inline]
kmalloc_large_node+0x7d/0x1a0 mm/slub.c:4426
__kmalloc_node_track_caller+0x219/0x3a0 mm/slub.c:4949
kmalloc_reserve net/core/skbuff.c:356 [inline]
pskb_expand_head+0x128/0x1100 net/core/skbuff.c:1710
__skb_cow include/linux/skbuff.h:3406 [inline]
skb_cow_head include/linux/skbuff.h:3440 [inline]
rpl_do_srh_inline net/ipv6/rpl_iptunnel.c:157 [inline]
rpl_do_srh+0x50a/0xe50 net/ipv6/rpl_iptunnel.c:201
rpl_output+0x178/0x730 net/ipv6/rpl_iptunnel.c:217
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
dst_output include/net/dst.h:452 [inline]
rpl_output+0x31f/0x730 net/ipv6/rpl_iptunnel.c:250
lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
ip6tunnel_xmit include/net/ip6_tunnel.h:160 [inline]
udp_tunnel6_xmit_skb+0x4b7/0x8b0 net/ipv6/ip6_udp_tunnel.c:110
send6+0x5a0/0x8d0 drivers/net/wireguard/socket.c:152
wg_socket_send_skb_to_peer+0x10d/0x1c0 drivers/net/wireguard/socket.c:178
wg_packet_create_data_done drivers/net/wireguard/send.c:251 [inline]
wg_packet_tx_worker+0x1d3/0x7b0 drivers/net/wireguard/send.c:276
process_one_work+0x867/0xff0 kernel/workqueue.c:2310
worker_thread+0xad7/0x12a0 kernel/workqueue.c:2457
kthread+0x42e/0x520 kernel/kthread.c:334
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
vkms_vblank_simulate: vblank timer overrun
----------------
Code disassembly (best guess):
0: 00 00 add %al,(%rax)
2: 00 00 add %al,(%rax)
4: 9c pushf
5: 8f 44 24 20 pop 0x20(%rsp)
9: f7 44 24 20 00 02 00 testl $0x200,0x20(%rsp)
10: 00
11: 41 c6 04 07 f8 movb $0xf8,(%r15,%rax,1)
16: 75 42 jne 0x5a
18: 41 f7 c5 00 02 00 00 test $0x200,%r13d
1f: 74 01 je 0x22
21: fb sti
22: 48 c7 04 24 0e 36 e0 movq $0x45e0360e,(%rsp)
29: 45
* 2a: 4b c7 04 27 00 00 00 movq $0x0,(%r15,%r12,1) <-- trapping instruction
31: 00
32: 43 c7 44 27 08 00 00 movl $0x0,0x8(%r15,%r12,1)
39: 00 00
3b: 65 gs
3c: 48 rex.W
3d: 8b .byte 0x8b
3e: 04 25 add $0x25,%al