Warning: Permanently added '10.128.0.174' (ED25519) to the list of known hosts. 2025/01/04 11:50:26 ignoring optional flag "sandboxArg"="0" 2025/01/04 11:50:26 parsed 1 programs [ 59.475956][ T4167] cgroup: Unknown subsys name 'net' [ 59.606749][ T4167] cgroup: Unknown subsys name 'rlimit' [ 61.070886][ T4167] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.935760][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.943938][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.956210][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.971913][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.979808][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.988099][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.006826][ T4218] chnl_net:caif_netlink_parms(): no params data found [ 64.070482][ T4218] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.078373][ T4218] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.086597][ T4218] device bridge_slave_0 entered promiscuous mode [ 64.096459][ T4218] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.103757][ T4218] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.112189][ T4218] device bridge_slave_1 entered promiscuous mode [ 64.137446][ T4218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.149243][ T4218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.180183][ T4218] team0: Port device team_slave_0 added [ 64.188720][ T4218] team0: Port device team_slave_1 added [ 64.212248][ T4218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.219305][ T4218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.245915][ T4218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.258805][ T4218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.265943][ T4218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.292085][ T4218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.330285][ T4218] device hsr_slave_0 entered promiscuous mode [ 64.337350][ T4218] device hsr_slave_1 entered promiscuous mode [ 64.459496][ T4218] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.482025][ T4218] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.555234][ T4218] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.566040][ T4218] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.614645][ T4218] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.621853][ T4218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.629472][ T4218] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.636589][ T4218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.677452][ T4218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.690441][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.699315][ T1474] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.708080][ T1474] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.716593][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 64.729828][ T4218] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.740685][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.749124][ T1474] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.756216][ T1474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.772333][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.781121][ T1474] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.788178][ T1474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.802859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.812365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.825488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.836447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.848198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.858471][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.928953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.936862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.949571][ T4218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.983231][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.992086][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.008117][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.017383][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.046482][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.054999][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.063077][ T4218] device veth0_vlan entered promiscuous mode [ 65.075469][ T4218] device veth1_vlan entered promiscuous mode [ 65.094359][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.103321][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.113372][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.122775][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.132743][ T4218] device veth0_macvtap entered promiscuous mode [ 65.145517][ T4218] device veth1_macvtap entered promiscuous mode [ 65.177029][ T4218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.187052][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.195322][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.203931][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.212663][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.224977][ T4218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.234293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.243980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.273681][ T4218] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.282649][ T4218] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.291465][ T4218] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.300161][ T4218] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.389695][ T4218] syz-executor (4218) used greatest stack depth: 19448 bytes left 2025/01/04 11:50:35 executed programs: 0 [ 66.565530][ T4259] chnl_net:caif_netlink_parms(): no params data found [ 66.631520][ T4259] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.638681][ T4259] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.649612][ T4259] device bridge_slave_0 entered promiscuous mode [ 66.659387][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.669386][ T4259] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.678215][ T4259] device bridge_slave_1 entered promiscuous mode [ 66.709838][ T4259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.724275][ T4259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.757807][ T4259] team0: Port device team_slave_0 added [ 66.765994][ T4259] team0: Port device team_slave_1 added [ 66.793736][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.800679][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.826795][ T4259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.840696][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.847696][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.874731][ T4259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.909709][ T4259] device hsr_slave_0 entered promiscuous mode [ 66.917892][ T4259] device hsr_slave_1 entered promiscuous mode [ 66.924478][ T4259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.932446][ T4259] Cannot create hsr debugfs directory [ 67.020967][ T4259] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.512018][ T4271] Bluetooth: hci0: command 0x0409 tx timeout [ 70.591254][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 70.747439][ T4259] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.784999][ T4259] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.860523][ T4259] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.985797][ T4259] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.995702][ T4259] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.004879][ T4259] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.013879][ T4259] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.074542][ T4259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.099077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.106905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.116913][ T4259] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.125867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.134970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.144067][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.151217][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.160343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.164721][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.174554][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.184467][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.193203][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.202006][ T1474] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.209043][ T1474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.216902][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.228045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.253639][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.262460][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.270773][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.279778][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.300195][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.309633][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.321613][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.333861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.343092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.362264][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.388226][ T144] device hsr_slave_0 left promiscuous mode [ 71.396689][ T144] device hsr_slave_1 left promiscuous mode [ 71.404041][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.411740][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.419771][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.427844][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.435467][ T144] device bridge_slave_1 left promiscuous mode [ 71.442608][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.455739][ T144] device bridge_slave_0 left promiscuous mode [ 71.461939][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.479030][ T144] device veth1_macvtap left promiscuous mode [ 71.485350][ T144] device veth0_macvtap left promiscuous mode [ 71.491778][ T144] device veth1_vlan left promiscuous mode [ 71.497623][ T144] device veth0_vlan left promiscuous mode [ 71.637214][ T144] team0 (unregistering): Port device team_slave_1 removed [ 71.649034][ T144] team0 (unregistering): Port device team_slave_0 removed [ 71.664665][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.678771][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.730793][ T144] bond0 (unregistering): Released all slaves [ 71.825273][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.833574][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.845945][ T4259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.876787][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.885866][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.900389][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.908504][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.916988][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.925260][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.934787][ T4259] device veth0_vlan entered promiscuous mode [ 71.948970][ T4259] device veth1_vlan entered promiscuous mode [ 71.972458][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.980401][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.988635][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.997156][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.007562][ T4259] device veth0_macvtap entered promiscuous mode [ 72.018604][ T4259] device veth1_macvtap entered promiscuous mode [ 72.036629][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.044675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.053068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.060871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.069888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.080897][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.089442][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.098173][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.109178][ T4259] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.119639][ T4259] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.128644][ T4259] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.137655][ T4259] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.194307][ T1466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.210896][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.219697][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.226616][ T1466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.237329][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2025/01/04 11:50:41 executed programs: 2 [ 72.247076][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.671369][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 72.841332][ C1] ------------[ cut here ]------------ [ 72.842321][ C1] [ 72.842327][ C1] ====================================================== [ 72.842333][ C1] WARNING: possible circular locking dependency detected [ 72.842340][ C1] 5.15.175-syzkaller #0 Not tainted [ 72.842350][ C1] ------------------------------------------------------ [ 72.842355][ C1] syz.0.38/4322 is trying to acquire lock: [ 72.842364][ C1] ffffffff8cb148a0 (console_owner){..-.}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60 [ 72.842426][ C1] [ 72.842426][ C1] but task is already holding lock: [ 72.842430][ C1] ffff8880b8f28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 72.842474][ C1] [ 72.842474][ C1] which lock already depends on the new lock. [ 72.842474][ C1] [ 72.842480][ C1] [ 72.842480][ C1] the existing dependency chain (in reverse order) is: [ 72.842485][ C1] [ 72.842485][ C1] -> #5 (&base->lock){-.-.}-{2:2}: [ 72.842508][ C1] lock_acquire+0x1db/0x4f0 [ 72.842524][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 72.842543][ C1] lock_timer_base+0x120/0x260 [ 72.842560][ C1] __mod_timer+0x1d6/0xeb0 [ 72.842578][ C1] queue_delayed_work_on+0x156/0x250 [ 72.842596][ C1] enqueue_task+0x2fe/0x3a0 [ 72.842615][ C1] wake_up_new_task+0x515/0xb60 [ 72.842634][ C1] kernel_clone+0x44e/0x960 [ 72.842651][ C1] kernel_thread+0x168/0x1e0 [ 72.842667][ C1] rest_init+0x21/0x330 [ 72.842685][ C1] start_kernel+0x48c/0x540 [ 72.842703][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 72.842723][ C1] [ 72.842723][ C1] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 72.842746][ C1] lock_acquire+0x1db/0x4f0 [ 72.842761][ C1] _raw_spin_lock_nested+0x2d/0x40 [ 72.842780][ C1] raw_spin_rq_lock_nested+0x26/0x140 [ 72.842799][ C1] task_fork_fair+0x5d/0x350 [ 72.842816][ C1] sched_cgroup_fork+0x2d3/0x330 [ 72.842835][ C1] copy_process+0x224a/0x3ef0 [ 72.842851][ C1] kernel_clone+0x210/0x960 [ 72.842867][ C1] kernel_thread+0x168/0x1e0 [ 72.842883][ C1] rest_init+0x21/0x330 [ 72.842900][ C1] start_kernel+0x48c/0x540 [ 72.842925][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 72.842944][ C1] [ 72.842944][ C1] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 72.842967][ C1] lock_acquire+0x1db/0x4f0 [ 72.842982][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 72.843001][ C1] try_to_wake_up+0xae/0x1300 [ 72.843019][ C1] __wake_up_common+0x2a0/0x4e0 [ 72.843039][ C1] __wake_up+0x112/0x1c0 [ 72.843057][ C1] tty_port_default_wakeup+0xa8/0x100 [ 72.843076][ C1] serial8250_tx_chars+0x60d/0x800 [ 72.843095][ C1] serial8250_handle_irq+0x505/0x600 [ 72.843113][ C1] serial8250_default_handle_irq+0xc8/0x1e0 [ 72.843133][ C1] serial8250_interrupt+0xa1/0x1e0 [ 72.843151][ C1] __handle_irq_event_percpu+0x292/0xa70 [ 72.843171][ C1] handle_irq_event+0xff/0x2b0 [ 72.843188][ C1] handle_edge_irq+0x245/0xbf0 [ 72.843204][ C1] __common_interrupt+0xd7/0x1f0 [ 72.843220][ C1] common_interrupt+0xae/0xd0 [ 72.843237][ C1] asm_common_interrupt+0x22/0x40 [ 72.843257][ C1] kasan_check_range+0x1ac/0x290 [ 72.843274][ C1] lock_release+0xa8/0x9a0 [ 72.843289][ C1] slab_pre_alloc_hook+0x29/0xc0 [ 72.843307][ C1] kmem_cache_alloc+0x3f/0x280 [ 72.843323][ C1] __anon_vma_prepare+0xb9/0x410 [ 72.843342][ C1] handle_mm_fault+0x4f66/0x5960 [ 72.843361][ C1] exc_page_fault+0x271/0x700 [ 72.843379][ C1] asm_exc_page_fault+0x22/0x30 [ 72.843398][ C1] [ 72.843398][ C1] -> #2 (&tty->write_wait){-...}-{2:2}: [ 72.843420][ C1] lock_acquire+0x1db/0x4f0 [ 72.843435][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 72.843454][ C1] __wake_up+0xf5/0x1c0 [ 72.843472][ C1] tty_port_default_wakeup+0xa8/0x100 [ 72.843490][ C1] serial8250_tx_chars+0x60d/0x800 [ 72.843508][ C1] serial8250_handle_irq+0x505/0x600 [ 72.843526][ C1] serial8250_default_handle_irq+0xc8/0x1e0 [ 72.843546][ C1] serial8250_interrupt+0xa1/0x1e0 [ 72.843564][ C1] __handle_irq_event_percpu+0x292/0xa70 [ 72.843583][ C1] handle_irq_event+0xff/0x2b0 [ 72.843601][ C1] handle_edge_irq+0x245/0xbf0 [ 72.843617][ C1] __common_interrupt+0xd7/0x1f0 [ 72.843633][ C1] common_interrupt+0xae/0xd0 [ 72.843649][ C1] asm_common_interrupt+0x22/0x40 [ 72.843668][ C1] acpi_idle_do_entry+0x10f/0x340 [ 72.843686][ C1] acpi_idle_enter+0x352/0x4f0 [ 72.843704][ C1] cpuidle_enter_state+0x521/0xef0 [ 72.843724][ C1] cpuidle_enter+0x59/0x90 [ 72.843742][ C1] do_idle+0x3e4/0x670 [ 72.843760][ C1] cpu_startup_entry+0x14/0x20 [ 72.843779][ C1] start_secondary+0x371/0x500 [ 72.843798][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 72.843817][ C1] [ 72.843817][ C1] -> #1 (&port_lock_key){-...}-{2:2}: [ 72.843840][ C1] lock_acquire+0x1db/0x4f0 [ 72.843855][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 72.843874][ C1] serial8250_console_write+0x19d/0x1180 [ 72.843893][ C1] console_unlock+0xced/0x12b0 [ 72.843916][ C1] vprintk_emit+0xbf/0x150 [ 72.843931][ C1] _printk+0xd1/0x120 [ 72.843948][ C1] register_console+0x65a/0x940 [ 72.843965][ C1] univ8250_console_init+0x41/0x50 [ 72.843984][ C1] console_init+0x18c/0x660 [ 72.844000][ C1] start_kernel+0x301/0x540 [ 72.844017][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 72.844036][ C1] [ 72.844036][ C1] -> #0 (console_owner){..-.}-{0:0}: [ 72.844058][ C1] validate_chain+0x1649/0x5930 [ 72.844074][ C1] __lock_acquire+0x1295/0x1ff0 [ 72.844090][ C1] lock_acquire+0x1db/0x4f0 [ 72.844105][ C1] console_lock_spinning_enable+0x51/0x60 [ 72.844123][ C1] console_unlock+0xa47/0x12b0 [ 72.844139][ C1] vprintk_emit+0xbf/0x150 [ 72.844154][ C1] _printk+0xd1/0x120 [ 72.844171][ C1] report_bug+0x1e5/0x2e0 [ 72.844188][ C1] handle_bug+0x3d/0x70 [ 72.844204][ C1] exc_invalid_op+0x16/0x40 [ 72.844220][ C1] asm_exc_invalid_op+0x16/0x20 [ 72.844238][ C1] copy_from_user_nofault+0x15c/0x1c0 [ 72.844256][ C1] bpf_probe_read_user+0x26/0x70 [ 72.844273][ C1] bpf_prog_02073d59a3c0f06f+0x3d/0x4bc [ 72.844287][ C1] bpf_trace_run3+0x1d1/0x380 [ 72.844315][ C1] enqueue_timer+0x3ae/0x540 [ 72.844329][ C1] __mod_timer+0xa60/0xeb0 [ 72.844363][ C1] dsp_cmx_send+0x21bb/0x2240 [ 72.844378][ C1] call_timer_fn+0x16d/0x560 [ 72.844392][ C1] __run_timers+0x67c/0x890 [ 72.844407][ C1] run_timer_softirq+0x63/0xf0 [ 72.844426][ C1] handle_softirqs+0x3a7/0x930 [ 72.844442][ C1] do_softirq+0x162/0x240 [ 72.844457][ C1] __local_bh_enable_ip+0x1b1/0x1f0 [ 72.844474][ C1] bpf_link_put+0x1cd/0x2c0 [ 72.844492][ C1] bpf_link_release+0x37/0x40 [ 72.844511][ C1] __fput+0x3fe/0x8e0 [ 72.844530][ C1] task_work_run+0x129/0x1a0 [ 72.844549][ C1] exit_to_user_mode_loop+0x106/0x130 [ 72.844566][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 72.844583][ C1] syscall_exit_to_user_mode+0x5d/0x240 [ 72.844600][ C1] do_syscall_64+0x47/0xb0 [ 72.844613][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.844634][ C1] [ 72.844634][ C1] other info that might help us debug this: [ 72.844634][ C1] [ 72.844639][ C1] Chain exists of: [ 72.844639][ C1] console_owner --> &rq->__lock --> &base->lock [ 72.844639][ C1] [ 72.844666][ C1] Possible unsafe locking scenario: [ 72.844666][ C1] [ 72.844670][ C1] CPU0 CPU1 [ 72.844674][ C1] ---- ---- [ 72.844678][ C1] lock(&base->lock); [ 72.844689][ C1] lock(&rq->__lock); [ 72.844700][ C1] lock(&base->lock); [ 72.844712][ C1] lock(console_owner); [ 72.844722][ C1] [ 72.844722][ C1] *** DEADLOCK *** [ 72.844722][ C1] [ 72.844726][ C1] 5 locks held by syz.0.38/4322: [ 72.844736][ C1] #0: ffffc90000dd0ca0 ((&dsp_spl_tl)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x560 [ 72.844795][ C1] #1: ffffffff8d9f04b8 (dsp_lock){..-.}-{2:2}, at: dsp_cmx_send+0x22/0x2240 [ 72.844837][ C1] #2: ffff8880b8f28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 72.844883][ C1] #3: ffffffff8cb1fd20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 72.844949][ C1] #4: ffffffff8c9fc5e0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa6/0x150 [ 72.844993][ C1] [ 72.844993][ C1] stack backtrace: [ 72.845003][ C1] CPU: 1 PID: 4322 Comm: syz.0.38 Not tainted 5.15.175-syzkaller #0 [ 72.845022][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 72.845037][ C1] Call Trace: [ 72.845043][ C1] [ 72.845050][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 72.845071][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 72.845094][ C1] ? print_circular_bug+0x12b/0x1a0 [ 72.845115][ C1] check_noncircular+0x2f8/0x3b0 [ 72.845137][ C1] ? add_chain_block+0x850/0x850 [ 72.845156][ C1] ? lockdep_lock+0x11f/0x2a0 [ 72.845181][ C1] validate_chain+0x1649/0x5930 [ 72.845212][ C1] ? reacquire_held_locks+0x660/0x660 [ 72.845234][ C1] ? format_decode+0x72f/0x1f10 [ 72.845259][ C1] ? lockdep_unlock+0x166/0x300 [ 72.845282][ C1] ? mark_lock+0x98/0x340 [ 72.845302][ C1] __lock_acquire+0x1295/0x1ff0 [ 72.845327][ C1] lock_acquire+0x1db/0x4f0 [ 72.845344][ C1] ? console_lock_spinning_enable+0x2c/0x60 [ 72.845368][ C1] ? read_lock_is_recursive+0x10/0x10 [ 72.845387][ C1] ? console_lock_spinning_enable+0x2c/0x60 [ 72.845407][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 72.845424][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 72.845453][ C1] console_lock_spinning_enable+0x51/0x60 [ 72.845472][ C1] ? console_lock_spinning_enable+0x2c/0x60 [ 72.845492][ C1] console_unlock+0xa47/0x12b0 [ 72.845516][ C1] ? console_trylock_spinning+0x3f0/0x3f0 [ 72.845538][ C1] ? __down_trylock_console_sem+0x1f2/0x250 [ 72.845558][ C1] ? vprintk_emit+0xa6/0x150 [ 72.845576][ C1] ? printk_parse_prefix+0x2c0/0x2c0 [ 72.845594][ C1] ? vprintk_emit+0xa6/0x150 [ 72.845612][ C1] ? console_trylock+0x70/0x70 [ 72.845638][ C1] ? vprintk_emit+0x150/0x150 [ 72.845655][ C1] ? validate_chain+0x112/0x5930 [ 72.845679][ C1] ? validate_chain+0x112/0x5930 [ 72.845699][ C1] vprintk_emit+0xbf/0x150 [ 72.845718][ C1] _printk+0xd1/0x120 [ 72.845739][ C1] ? report_bug+0x16e/0x2e0 [ 72.845759][ C1] ? panic+0x860/0x860 [ 72.845781][ C1] ? find_bug+0x9c/0x350 [ 72.845801][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 72.845820][ C1] report_bug+0x1e5/0x2e0 [ 72.845842][ C1] handle_bug+0x3d/0x70 [ 72.845859][ C1] exc_invalid_op+0x16/0x40 [ 72.845878][ C1] asm_exc_invalid_op+0x16/0x20 [ 72.845899][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 72.845926][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 5b c4 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 44 c4 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 72.845942][ C1] RSP: 0018:ffffc90000dd0840 EFLAGS: 00010046 [ 72.845959][ C1] RAX: ffffffff81aac09c RBX: 0000000000000000 RCX: ffff8880295f1dc0 [ 72.845973][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.845985][ C1] RBP: dffffc0000000000 R08: ffffffff81aabfad R09: fffffbfff2131221 [ 72.845999][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 72.846011][ C1] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000dd08a8 [ 72.846027][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 72.846045][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 72.846069][ C1] bpf_probe_read_user+0x26/0x70 [ 72.846089][ C1] bpf_prog_02073d59a3c0f06f+0x3d/0x4bc [ 72.846106][ C1] bpf_trace_run3+0x1d1/0x380 [ 72.846126][ C1] ? bpf_trace_run2+0x340/0x340 [ 72.846144][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 72.846167][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 72.846188][ C1] ? _raw_spin_lock+0x40/0x40 [ 72.846212][ C1] enqueue_timer+0x3ae/0x540 [ 72.846232][ C1] __mod_timer+0xa60/0xeb0 [ 72.846253][ C1] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 72.846277][ C1] ? mod_timer_pending+0x20/0x20 [ 72.846297][ C1] ? _raw_read_unlock_irqrestore+0xd9/0x130 [ 72.846319][ C1] ? _raw_read_unlock+0x40/0x40 [ 72.846339][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 72.846360][ C1] ? _raw_spin_lock+0x40/0x40 [ 72.846381][ C1] ? ktime_get+0x242/0x270 [ 72.846405][ C1] dsp_cmx_send+0x21bb/0x2240 [ 72.846422][ C1] ? read_lock_is_recursive+0x10/0x10 [ 72.846443][ C1] ? detach_timer+0x24/0x2f0 [ 72.846468][ C1] call_timer_fn+0x16d/0x560 [ 72.846485][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 72.846508][ C1] ? __run_timers+0x890/0x890 [ 72.846528][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 72.846548][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 72.846568][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 72.846590][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 72.846611][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 72.846633][ C1] __run_timers+0x67c/0x890 [ 72.846655][ C1] ? detach_timer+0x2f0/0x2f0 [ 72.846671][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 72.846699][ C1] run_timer_softirq+0x63/0xf0 [ 72.846721][ C1] handle_softirqs+0x3a7/0x930 [ 72.846741][ C1] ? do_softirq+0x162/0x240 [ 72.846761][ C1] ? do_softirq+0x240/0x240 [ 72.846783][ C1] do_softirq+0x162/0x240 [ 72.846800][ C1] [ 72.846805][ C1] [ 72.846811][ C1] ? __local_bh_enable_ip+0x1f0/0x1f0 [ 72.846830][ C1] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 72.846851][ C1] ? __local_bh_enable_ip+0x102/0x1f0 [ 72.846869][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 72.846892][ C1] __local_bh_enable_ip+0x1b1/0x1f0 [ 72.846916][ C1] ? bpf_link_put+0x1cd/0x2c0 [ 72.846937][ C1] ? _local_bh_enable+0xa0/0xa0 [ 72.846954][ C1] ? bpf_link_put+0x1cd/0x2c0 [ 72.846975][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 72.846999][ C1] bpf_link_put+0x1cd/0x2c0 [ 72.847021][ C1] bpf_link_release+0x37/0x40 [ 72.847042][ C1] ? local_lock_release+0x170/0x170 [ 72.847064][ C1] __fput+0x3fe/0x8e0 [ 72.847089][ C1] task_work_run+0x129/0x1a0 [ 72.847112][ C1] exit_to_user_mode_loop+0x106/0x130 [ 72.847132][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 72.847152][ C1] syscall_exit_to_user_mode+0x5d/0x240 [ 72.847174][ C1] do_syscall_64+0x47/0xb0 [ 72.847192][ C1] ? clear_bhb_loop+0x15/0x70 [ 72.847209][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.847232][ C1] RIP: 0033:0x7f5918683d29 [ 72.847247][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.847262][ C1] RSP: 002b:00007ffccda641e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 72.847281][ C1] RAX: 0000000000000000 RBX: 0000000000011c59 RCX: 00007f5918683d29 [ 72.847294][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 72.847305][ C1] RBP: 00007f5918875ba0 R08: 0000000000000001 R09: 00007ffccda644df [ 72.847318][ C1] R10: 00007f59184fe000 R11: 0000000000000246 R12: 0000000000011e8c [ 72.847330][ C1] R13: 00007f5918873fa0 R14: 0000000000000226 R15: ffffffffffffffff [ 72.847351][ C1] [ 74.364904][ C1] WARNING: CPU: 1 PID: 4322 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 74.374189][ C1] Modules linked in: [ 74.378063][ C1] CPU: 1 PID: 4322 Comm: syz.0.38 Not tainted 5.15.175-syzkaller #0 [ 74.386019][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.396051][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 74.402190][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 5b c4 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 44 c4 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 74.421776][ C1] RSP: 0018:ffffc90000dd0840 EFLAGS: 00010046 [ 74.427908][ C1] RAX: ffffffff81aac09c RBX: 0000000000000000 RCX: ffff8880295f1dc0 [ 74.435858][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.443825][ C1] RBP: dffffc0000000000 R08: ffffffff81aabfad R09: fffffbfff2131221 [ 74.451775][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 74.459727][ C1] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000dd08a8 [ 74.467679][ C1] FS: 000055557554f500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 74.476586][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.483150][ C1] CR2: 0000001b2de5ffff CR3: 000000007da02000 CR4: 00000000003506e0 [ 74.491102][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.499053][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.507018][ C1] Call Trace: [ 74.510280][ C1] [ 74.513109][ C1] ? __warn+0x15b/0x300 [ 74.517248][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 74.522793][ C1] ? report_bug+0x1b7/0x2e0 [ 74.527302][ C1] ? handle_bug+0x3d/0x70 [ 74.531611][ C1] ? exc_invalid_op+0x16/0x40 [ 74.536266][ C1] ? asm_exc_invalid_op+0x16/0x20 [ 74.541288][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 74.546731][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 74.552282][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 74.557828][ C1] bpf_probe_read_user+0x26/0x70 [ 74.562870][ C1] bpf_prog_02073d59a3c0f06f+0x3d/0x4bc [ 74.568406][ C1] bpf_trace_run3+0x1d1/0x380 [ 74.573078][ C1] ? bpf_trace_run2+0x340/0x340 [ 74.577919][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 74.583798][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 74.589239][ C1] ? _raw_spin_lock+0x40/0x40 [ 74.593919][ C1] enqueue_timer+0x3ae/0x540 [ 74.598495][ C1] __mod_timer+0xa60/0xeb0 [ 74.602903][ C1] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 74.609131][ C1] ? mod_timer_pending+0x20/0x20 [ 74.614067][ C1] ? _raw_read_unlock_irqrestore+0xd9/0x130 [ 74.619954][ C1] ? _raw_read_unlock+0x40/0x40 [ 74.624803][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 74.630247][ C1] ? _raw_spin_lock+0x40/0x40 [ 74.634913][ C1] ? ktime_get+0x242/0x270 [ 74.639326][ C1] dsp_cmx_send+0x21bb/0x2240 [ 74.643999][ C1] ? read_lock_is_recursive+0x10/0x10 [ 74.649355][ C1] ? detach_timer+0x24/0x2f0 [ 74.653930][ C1] call_timer_fn+0x16d/0x560 [ 74.658500][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 74.663592][ C1] ? __run_timers+0x890/0x890 [ 74.668247][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 74.673437][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 74.678631][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 74.683733][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 74.688919][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 74.694019][ C1] __run_timers+0x67c/0x890 [ 74.698509][ C1] ? detach_timer+0x2f0/0x2f0 [ 74.703163][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 74.709153][ C1] run_timer_softirq+0x63/0xf0 [ 74.713906][ C1] handle_softirqs+0x3a7/0x930 [ 74.718655][ C1] ? do_softirq+0x162/0x240 [ 74.723137][ C1] ? do_softirq+0x240/0x240 [ 74.727620][ C1] do_softirq+0x162/0x240 [ 74.731927][ C1] [ 74.734839][ C1] [ 74.737754][ C1] ? __local_bh_enable_ip+0x1f0/0x1f0 [ 74.743106][ C1] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 74.749078][ C1] ? __local_bh_enable_ip+0x102/0x1f0 [ 74.754429][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 74.759710][ C1] __local_bh_enable_ip+0x1b1/0x1f0 [ 74.764887][ C1] ? bpf_link_put+0x1cd/0x2c0 [ 74.769548][ C1] ? _local_bh_enable+0xa0/0xa0 [ 74.774375][ C1] ? bpf_link_put+0x1cd/0x2c0 [ 74.779033][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 74.784214][ C1] bpf_link_put+0x1cd/0x2c0 [ 74.788697][ C1] bpf_link_release+0x37/0x40 [ 74.793363][ C1] ? local_lock_release+0x170/0x170 [ 74.798557][ C1] __fput+0x3fe/0x8e0 [ 74.802525][ C1] task_work_run+0x129/0x1a0 [ 74.807099][ C1] exit_to_user_mode_loop+0x106/0x130 [ 74.812450][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 74.817977][ C1] syscall_exit_to_user_mode+0x5d/0x240 [ 74.823517][ C1] do_syscall_64+0x47/0xb0 [ 74.827911][ C1] ? clear_bhb_loop+0x15/0x70 [ 74.832567][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.838443][ C1] RIP: 0033:0x7f5918683d29 [ 74.842839][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.862419][ C1] RSP: 002b:00007ffccda641e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 74.870813][ C1] RAX: 0000000000000000 RBX: 0000000000011c59 RCX: 00007f5918683d29 [ 74.878779][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 74.886733][ C1] RBP: 00007f5918875ba0 R08: 0000000000000001 R09: 00007ffccda644df [ 74.894696][ C1] R10: 00007f59184fe000 R11: 0000000000000246 R12: 0000000000011e8c [ 74.902644][ C1] R13: 00007f5918873fa0 R14: 0000000000000226 R15: ffffffffffffffff [ 74.910597][ C1] [ 74.913621][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.920877][ C1] CPU: 1 PID: 4322 Comm: syz.0.38 Not tainted 5.15.175-syzkaller #0 [ 74.928832][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.938863][ C1] Call Trace: [ 74.942123][ C1] [ 74.944945][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 74.949602][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 74.955231][ C1] ? panic+0x860/0x860 [ 74.959283][ C1] ? panic+0x860/0x860 [ 74.963333][ C1] ? copy_from_user_nofault+0xc0/0x1c0 [ 74.968771][ C1] ? copy_from_user_nofault+0xc0/0x1c0 [ 74.974210][ C1] panic+0x318/0x860 [ 74.978085][ C1] ? __warn+0x16a/0x300 [ 74.982221][ C1] ? fb_is_primary_device+0xd0/0xd0 [ 74.987402][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 74.992925][ C1] __warn+0x2b2/0x300 [ 74.996888][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 75.002413][ C1] report_bug+0x1b7/0x2e0 [ 75.006728][ C1] handle_bug+0x3d/0x70 [ 75.010864][ C1] exc_invalid_op+0x16/0x40 [ 75.015346][ C1] asm_exc_invalid_op+0x16/0x20 [ 75.020176][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 75.026309][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 5b c4 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 44 c4 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 75.045892][ C1] RSP: 0018:ffffc90000dd0840 EFLAGS: 00010046 [ 75.051937][ C1] RAX: ffffffff81aac09c RBX: 0000000000000000 RCX: ffff8880295f1dc0 [ 75.059884][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.067832][ C1] RBP: dffffc0000000000 R08: ffffffff81aabfad R09: fffffbfff2131221 [ 75.075784][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 75.083754][ C1] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000dd08a8 [ 75.091737][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 75.097175][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 75.102716][ C1] bpf_probe_read_user+0x26/0x70 [ 75.107629][ C1] bpf_prog_02073d59a3c0f06f+0x3d/0x4bc [ 75.113150][ C1] bpf_trace_run3+0x1d1/0x380 [ 75.117807][ C1] ? bpf_trace_run2+0x340/0x340 [ 75.122654][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 75.128530][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 75.133981][ C1] ? _raw_spin_lock+0x40/0x40 [ 75.138639][ C1] enqueue_timer+0x3ae/0x540 [ 75.143205][ C1] __mod_timer+0xa60/0xeb0 [ 75.147603][ C1] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 75.153838][ C1] ? mod_timer_pending+0x20/0x20 [ 75.158759][ C1] ? _raw_read_unlock_irqrestore+0xd9/0x130 [ 75.164638][ C1] ? _raw_read_unlock+0x40/0x40 [ 75.169467][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 75.174906][ C1] ? _raw_spin_lock+0x40/0x40 [ 75.179566][ C1] ? ktime_get+0x242/0x270 [ 75.183962][ C1] dsp_cmx_send+0x21bb/0x2240 [ 75.188618][ C1] ? read_lock_is_recursive+0x10/0x10 [ 75.193966][ C1] ? detach_timer+0x24/0x2f0 [ 75.198537][ C1] call_timer_fn+0x16d/0x560 [ 75.203102][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 75.208190][ C1] ? __run_timers+0x890/0x890 [ 75.212843][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 75.218027][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 75.223200][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 75.228284][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 75.233459][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 75.238557][ C1] __run_timers+0x67c/0x890 [ 75.243035][ C1] ? detach_timer+0x2f0/0x2f0 [ 75.247685][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 75.253644][ C1] run_timer_softirq+0x63/0xf0 [ 75.258400][ C1] handle_softirqs+0x3a7/0x930 [ 75.263142][ C1] ? do_softirq+0x162/0x240 [ 75.267621][ C1] ? do_softirq+0x240/0x240 [ 75.272116][ C1] do_softirq+0x162/0x240 [ 75.276420][ C1] [ 75.279359][ C1] [ 75.282286][ C1] ? __local_bh_enable_ip+0x1f0/0x1f0 [ 75.287634][ C1] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 75.293602][ C1] ? __local_bh_enable_ip+0x102/0x1f0 [ 75.298947][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 75.304211][ C1] __local_bh_enable_ip+0x1b1/0x1f0 [ 75.309387][ C1] ? bpf_link_put+0x1cd/0x2c0 [ 75.314070][ C1] ? _local_bh_enable+0xa0/0xa0 [ 75.318898][ C1] ? bpf_link_put+0x1cd/0x2c0 [ 75.323563][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 75.328775][ C1] bpf_link_put+0x1cd/0x2c0 [ 75.333272][ C1] bpf_link_release+0x37/0x40 [ 75.337924][ C1] ? local_lock_release+0x170/0x170 [ 75.343101][ C1] __fput+0x3fe/0x8e0 [ 75.347067][ C1] task_work_run+0x129/0x1a0 [ 75.351641][ C1] exit_to_user_mode_loop+0x106/0x130 [ 75.357013][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 75.362537][ C1] syscall_exit_to_user_mode+0x5d/0x240 [ 75.368057][ C1] do_syscall_64+0x47/0xb0 [ 75.372447][ C1] ? clear_bhb_loop+0x15/0x70 [ 75.377120][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.383000][ C1] RIP: 0033:0x7f5918683d29 [ 75.387409][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.406997][ C1] RSP: 002b:00007ffccda641e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 75.415402][ C1] RAX: 0000000000000000 RBX: 0000000000011c59 RCX: 00007f5918683d29 [ 75.423348][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 75.431303][ C1] RBP: 00007f5918875ba0 R08: 0000000000000001 R09: 00007ffccda644df [ 75.439252][ C1] R10: 00007f59184fe000 R11: 0000000000000246 R12: 0000000000011e8c [ 75.447200][ C1] R13: 00007f5918873fa0 R14: 0000000000000226 R15: ffffffffffffffff [ 75.455154][ C1] [ 76.613310][ C1] Shutting down cpus with NMI [ 76.618391][ C1] Kernel Offset: disabled [ 76.622716][ C1] Rebooting in 86400 seconds..