------------[ cut here ]------------ DEBUG_LOCKS_WARN_ON(l->owner) WARNING: ./include/linux/local_lock_internal.h:47 at local_lock_acquire include/linux/local_lock_internal.h:47 [inline], CPU#0: napi/gre0-0/8758 WARNING: ./include/linux/local_lock_internal.h:47 at gro_cell_poll+0x5aa/0x6c0 net/core/gro_cells.c:66, CPU#0: napi/gre0-0/8758 Modules linked in: CPU: 0 UID: 0 PID: 8758 Comm: napi/gre0-0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:local_lock_acquire include/linux/local_lock_internal.h:47 [inline] RIP: 0010:gro_cell_poll+0x5b1/0x6c0 net/core/gro_cells.c:66 Code: 8d 3d c3 3a 99 08 48 c7 c6 c0 08 3d 8d 67 48 0f b9 3a e9 59 fe ff ff e8 3d 54 50 f8 48 8d 3d b6 3a 99 08 48 c7 c6 80 08 3d 8d <67> 48 0f b9 3a eb be 31 db e9 88 fd ff ff 48 8b 7c 24 20 e8 f7 9b RSP: 0018:ffffc90002eafb70 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000200 RDX: ffff888027a78000 RSI: ffffffff8d3d0880 RDI: ffffffff925488f0 RBP: ffffe8ffac18a698 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: ffffffff9c9ad5c0 R14: 0000000000000005 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff88809574a000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000080000340 CR3: 00000000530ef000 CR4: 0000000000352ef0 Call Trace: __napi_poll.constprop.0+0xaf/0x450 net/core/dev.c:7830 napi_threaded_poll_loop+0x52f/0x870 net/core/dev.c:7950 napi_threaded_poll+0x3a8/0x4b0 net/core/dev.c:8005 kthread+0x373/0x450 kernel/kthread.c:436 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ---------------- Code disassembly (best guess): 0: 8d 3d c3 3a 99 08 lea 0x8993ac3(%rip),%edi # 0x8993ac9 6: 48 c7 c6 c0 08 3d 8d mov $0xffffffff8d3d08c0,%rsi d: 67 48 0f b9 3a ud1 (%edx),%rdi 12: e9 59 fe ff ff jmp 0xfffffe70 17: e8 3d 54 50 f8 call 0xf8505459 1c: 48 8d 3d b6 3a 99 08 lea 0x8993ab6(%rip),%rdi # 0x8993ad9 23: 48 c7 c6 80 08 3d 8d mov $0xffffffff8d3d0880,%rsi * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: eb be jmp 0xffffffef 31: 31 db xor %ebx,%ebx 33: e9 88 fd ff ff jmp 0xfffffdc0 38: 48 8b 7c 24 20 mov 0x20(%rsp),%rdi 3d: e8 .byte 0xe8 3e: f7 .byte 0xf7 3f: 9b fwait