------------[ cut here ]------------ DEBUG_LOCKS_WARN_ON(1) WARNING: kernel/locking/lockdep.c:238 at hlock_class kernel/locking/lockdep.c:238 [inline], CPU#1: ktimers/1/29 WARNING: kernel/locking/lockdep.c:238 at check_wait_context kernel/locking/lockdep.c:4854 [inline], CPU#1: ktimers/1/29 WARNING: kernel/locking/lockdep.c:238 at __lock_acquire+0x382/0x2ce0 kernel/locking/lockdep.c:5187, CPU#1: ktimers/1/29 Modules linked in: CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:hlock_class kernel/locking/lockdep.c:238 [inline] RIP: 0010:check_wait_context kernel/locking/lockdep.c:4854 [inline] RIP: 0010:__lock_acquire+0x389/0x2ce0 kernel/locking/lockdep.c:5187 Code: 83 3d fa 84 07 18 00 75 27 90 e8 a2 ae 1d 03 85 c0 74 1c 83 3d eb fd 0d 0e 00 75 13 48 8d 3d 3e 48 11 0e 48 c7 c6 d4 f6 99 8d <67> 48 0f b9 3a 90 31 c0 0f b6 98 c4 00 00 00 41 8b 45 20 25 ff 1f RSP: 0018:ffffc90000a3f6b8 EFLAGS: 00010046 RAX: 0000000000000001 RBX: 0000000000040000 RCX: ffff88801d2b3e00 RDX: 0000000000000100 RSI: ffffffff8d99f6d4 RDI: ffffffff8fb2a8e0 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000100 R10: dffffc0000000000 R11: fffffbfff1f5ebd1 R12: 0000000000000df2 R13: ffff88801d2b4af8 R14: ffff88801d2b3e00 R15: ffff88801d2b4a08 FS: 0000000000000000(0000) GS:ffff888125d46000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b32222ff8 CR3: 0000000077212000 CR4: 00000000003526f0 Call Trace: lock_acquire+0x106/0x350 kernel/locking/lockdep.c:5868 rt_spin_lock+0x83/0x400 kernel/locking/spinlock_rt.c:56 spin_lock include/linux/spinlock_rt.h:45 [inline] tcp_tsq_handler+0x29/0x200 net/ipv4/tcp_output.c:1291 tcp_tsq_workfn+0x384/0x410 net/ipv4/tcp_output.c:1325 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405 bh_worker+0x46a/0x880 kernel/workqueue.c:3708 tasklet_action+0xc/0x70 kernel/softirq.c:965 handle_softirqs+0x1d9/0x6c0 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] run_ktimerd+0x69/0x100 kernel/softirq.c:1151 smpboot_thread_fn+0x57c/0xa80 kernel/smpboot.c:160 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ---------------- Code disassembly (best guess): 0: 83 3d fa 84 07 18 00 cmpl $0x0,0x180784fa(%rip) # 0x18078501 7: 75 27 jne 0x30 9: 90 nop a: e8 a2 ae 1d 03 call 0x31daeb1 f: 85 c0 test %eax,%eax 11: 74 1c je 0x2f 13: 83 3d eb fd 0d 0e 00 cmpl $0x0,0xe0dfdeb(%rip) # 0xe0dfe05 1a: 75 13 jne 0x2f 1c: 48 8d 3d 3e 48 11 0e lea 0xe11483e(%rip),%rdi # 0xe114861 23: 48 c7 c6 d4 f6 99 8d mov $0xffffffff8d99f6d4,%rsi * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: 90 nop 30: 31 c0 xor %eax,%eax 32: 0f b6 98 c4 00 00 00 movzbl 0xc4(%rax),%ebx 39: 41 8b 45 20 mov 0x20(%r13),%eax 3d: 25 .byte 0x25 3e: ff 1f lcall *(%rdi)