Warning: Permanently added '10.128.0.140' (ED25519) to the list of known hosts. 2025/09/05 19:06:57 parsed 1 programs [ 53.354512][ T4189] cgroup: Unknown subsys name 'net' [ 53.488442][ T4189] cgroup: Unknown subsys name 'rlimit' [ 54.741635][ T4189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.037335][ T4233] chnl_net:caif_netlink_parms(): no params data found [ 57.106822][ T4233] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.120212][ T4233] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.128481][ T4233] device bridge_slave_0 entered promiscuous mode [ 57.139718][ T4233] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.147218][ T4233] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.156423][ T4233] device bridge_slave_1 entered promiscuous mode [ 57.185862][ T4233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.198281][ T4233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.228737][ T4233] team0: Port device team_slave_0 added [ 57.237982][ T4233] team0: Port device team_slave_1 added [ 57.261986][ T4233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.268945][ T4233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.296182][ T4233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.309384][ T4233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.317474][ T4233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.344856][ T4233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.384190][ T4233] device hsr_slave_0 entered promiscuous mode [ 57.391880][ T4233] device hsr_slave_1 entered promiscuous mode [ 57.514311][ T4233] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.529117][ T4233] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.541864][ T4233] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.551853][ T4233] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.581712][ T4233] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.588919][ T4233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.596637][ T4233] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.603704][ T4233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.658451][ T4233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.674712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.686188][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.695238][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.711920][ T4233] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.722097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.731619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.740425][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.747539][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.758253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.767959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.776517][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.783595][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.793526][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.813780][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.822971][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.833059][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.851284][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.859158][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.874185][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.886765][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.896121][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.908461][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.918865][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.929335][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.024111][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.031630][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.043511][ T4233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.059661][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.068645][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.085263][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.093428][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.103846][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.112557][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.122879][ T4233] device veth0_vlan entered promiscuous mode [ 58.133402][ T4233] device veth1_vlan entered promiscuous mode [ 58.148954][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.157022][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.165954][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.174499][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.184969][ T4233] device veth0_macvtap entered promiscuous mode [ 58.193939][ T4233] device veth1_macvtap entered promiscuous mode [ 58.218332][ T4233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.227222][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.235485][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.243563][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.252300][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.264468][ T4233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.285607][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.294326][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.306164][ T4233] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.315304][ T4233] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.324342][ T4233] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.333073][ T4233] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.435453][ T4233] syz-executor (4233) used greatest stack depth: 21120 bytes left [ 58.591173][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.599123][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.618745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.626460][ T366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.634926][ T366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.660216][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/09/05 19:07:05 executed programs: 0 [ 60.186948][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.246619][ T4295] chnl_net:caif_netlink_parms(): no params data found [ 60.281672][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.288971][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.297308][ T4295] device bridge_slave_0 entered promiscuous mode [ 60.305497][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.312663][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.320284][ T4295] device bridge_slave_1 entered promiscuous mode [ 60.338967][ T4295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.350003][ T4295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.370772][ T4295] team0: Port device team_slave_0 added [ 60.378224][ T4295] team0: Port device team_slave_1 added [ 60.394375][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.401451][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.427442][ T4295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.439217][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.446699][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.472716][ T4295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.502229][ T4295] device hsr_slave_0 entered promiscuous mode [ 60.509088][ T4295] device hsr_slave_1 entered promiscuous mode [ 60.516106][ T4295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.524016][ T4295] Cannot create hsr debugfs directory [ 62.201507][ T4248] Bluetooth: hci0: command 0x0409 tx timeout [ 63.486469][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.545990][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.616860][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.281003][ T4257] Bluetooth: hci0: command 0x041b tx timeout [ 64.478743][ T4295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.488476][ T4295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.497563][ T4295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.506704][ T4295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.570421][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.600665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.608409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.618083][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.628560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.637584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.646299][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.653381][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.663820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.671812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.680362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.690046][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.697145][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.708946][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.733538][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.745308][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.754453][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.763326][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.784026][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.792973][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.804251][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.813906][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.842057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.851069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.859935][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.947956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.955687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.966562][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.991371][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.000123][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.014213][ T9] device hsr_slave_0 left promiscuous mode [ 65.020484][ T9] device hsr_slave_1 left promiscuous mode [ 65.028288][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.036002][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.045486][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.053651][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.061715][ T9] device bridge_slave_1 left promiscuous mode [ 65.068521][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.082959][ T9] device bridge_slave_0 left promiscuous mode [ 65.089169][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.105026][ T9] device veth1_macvtap left promiscuous mode [ 65.111718][ T9] device veth0_macvtap left promiscuous mode [ 65.117780][ T9] device veth1_vlan left promiscuous mode [ 65.124305][ T9] device veth0_vlan left promiscuous mode [ 65.255179][ T9] team0 (unregistering): Port device team_slave_1 removed [ 65.267003][ T9] team0 (unregistering): Port device team_slave_0 removed [ 65.279239][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.294731][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.346076][ T9] bond0 (unregistering): Released all slaves [ 65.393880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.404577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.413001][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.421154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.430412][ T4295] device veth0_vlan entered promiscuous mode [ 65.447360][ T4295] device veth1_vlan entered promiscuous mode [ 65.473296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.481956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.489805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.498431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.507726][ T4295] device veth0_macvtap entered promiscuous mode [ 65.518754][ T4295] device veth1_macvtap entered promiscuous mode [ 65.542805][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.550098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.559036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.567358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.575902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.588642][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.596736][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.607491][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.618988][ T4295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.628322][ T4295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.637110][ T4295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.645880][ T4295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.695305][ T1272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.704866][ T1272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.715343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.727705][ T1272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2025/09/05 19:07:11 executed programs: 2 [ 65.742275][ T1272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.752371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.361156][ T4259] Bluetooth: hci0: command 0x040f tx timeout [ 66.780678][ C0] ------------[ cut here ]------------ [ 66.781480][ C0] [ 66.781486][ C0] ====================================================== [ 66.781491][ C0] WARNING: possible circular locking dependency detected [ 66.781504][ C0] syzkaller #0 Not tainted [ 66.781511][ C0] ------------------------------------------------------ [ 66.781515][ C0] syz.0.56/4386 is trying to acquire lock: [ 66.781523][ C0] ffffffff8c110ec0 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60 [ 66.781570][ C0] [ 66.781570][ C0] but task is already holding lock: [ 66.781574][ C0] ffff8880b902a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x5ff/0xc40 [ 66.781608][ C0] [ 66.781608][ C0] which lock already depends on the new lock. [ 66.781608][ C0] [ 66.781612][ C0] [ 66.781612][ C0] the existing dependency chain (in reverse order) is: [ 66.781617][ C0] [ 66.781617][ C0] -> #6 (hrtimer_bases.lock){-.-.}-{2:2}: [ 66.781639][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 66.781655][ C0] hrtimer_start_range_ns+0xff/0xc20 [ 66.781667][ C0] enqueue_task_rt+0x60c/0xc00 [ 66.781678][ C0] enqueue_task+0x182/0x2b0 [ 66.781688][ C0] __sched_setscheduler+0x1379/0x1be0 [ 66.781700][ C0] sched_set_fifo+0xbc/0x120 [ 66.781710][ C0] drm_vblank_worker_init+0x149/0x1a0 [ 66.781720][ C0] drm_vblank_init+0x265/0x330 [ 66.781730][ C0] vkms_init+0x31a/0x700 [ 66.781741][ C0] do_one_initcall+0x1ee/0x680 [ 66.781752][ C0] do_initcall_level+0x137/0x1f0 [ 66.781761][ C0] do_initcalls+0x4b/0x90 [ 66.781768][ C0] kernel_init_freeable+0x3ce/0x560 [ 66.781777][ C0] kernel_init+0x19/0x1b0 [ 66.781788][ C0] ret_from_fork+0x1f/0x30 [ 66.781797][ C0] [ 66.781797][ C0] -> #5 (&rt_b->rt_runtime_lock){-...}-{2:2}: [ 66.781811][ C0] _raw_spin_lock+0x2a/0x40 [ 66.781829][ C0] rq_online_rt+0x125/0x310 [ 66.781837][ C0] sched_cpu_activate+0x4ae/0x650 [ 66.781846][ C0] cpuhp_invoke_callback+0x431/0x830 [ 66.781858][ C0] cpuhp_thread_fun+0x39a/0x7d0 [ 66.781868][ C0] smpboot_thread_fn+0x4f6/0x970 [ 66.781879][ C0] kthread+0x436/0x520 [ 66.781887][ C0] ret_from_fork+0x1f/0x30 [ 66.781897][ C0] [ 66.781897][ C0] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 66.781910][ C0] _raw_spin_lock_nested+0x2e/0x40 [ 66.781919][ C0] raw_spin_rq_lock_nested+0x26/0x140 [ 66.781928][ C0] task_fork_fair+0x5c/0x350 [ 66.781936][ C0] sched_cgroup_fork+0x2c6/0x320 [ 66.781946][ C0] copy_process+0x22d1/0x3e00 [ 66.781955][ C0] kernel_clone+0x219/0x930 [ 66.781964][ C0] kernel_thread+0xc8/0x120 [ 66.781972][ C0] rest_init+0x21/0x330 [ 66.781981][ C0] start_kernel+0x486/0x530 [ 66.781992][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 66.782002][ C0] [ 66.782002][ C0] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 66.782015][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 66.782025][ C0] try_to_wake_up+0x5c/0x1050 [ 66.782035][ C0] __wake_up_common+0x2a4/0x4e0 [ 66.782045][ C0] __wake_up+0x108/0x180 [ 66.782055][ C0] tty_port_default_wakeup+0xa5/0xf0 [ 66.782065][ C0] serial8250_tx_chars+0x629/0x830 [ 66.782076][ C0] serial8250_handle_irq+0x519/0x610 [ 66.782086][ C0] serial8250_default_handle_irq+0xb4/0x1a0 [ 66.782097][ C0] serial8250_interrupt+0x9b/0x1c0 [ 66.782106][ C0] __handle_irq_event_percpu+0x291/0x9b0 [ 66.782116][ C0] handle_irq_event+0xa5/0x220 [ 66.782125][ C0] handle_edge_irq+0x243/0xb20 [ 66.782135][ C0] __common_interrupt+0xd7/0x1e0 [ 66.782145][ C0] common_interrupt+0xb0/0xd0 [ 66.782153][ C0] asm_common_interrupt+0x22/0x40 [ 66.782163][ C0] __sanitizer_cov_trace_const_cmp8+0x32/0x80 [ 66.782174][ C0] next_uptodate_page+0x313/0x8b0 [ 66.782183][ C0] filemap_map_pages+0xebd/0x1390 [ 66.782192][ C0] handle_mm_fault+0x2580/0x43c0 [ 66.782201][ C0] do_user_addr_fault+0x489/0xc80 [ 66.782212][ C0] exc_page_fault+0x60/0x100 [ 66.782221][ C0] asm_exc_page_fault+0x22/0x30 [ 66.782230][ C0] [ 66.782230][ C0] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 66.782243][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 66.782254][ C0] __wake_up+0xed/0x180 [ 66.782263][ C0] tty_port_default_wakeup+0xa5/0xf0 [ 66.782273][ C0] serial8250_tx_chars+0x629/0x830 [ 66.782282][ C0] serial8250_handle_irq+0x519/0x610 [ 66.782292][ C0] serial8250_default_handle_irq+0xb4/0x1a0 [ 66.782303][ C0] serial8250_interrupt+0x9b/0x1c0 [ 66.782312][ C0] __handle_irq_event_percpu+0x291/0x9b0 [ 66.782322][ C0] handle_irq_event+0xa5/0x220 [ 66.782331][ C0] handle_edge_irq+0x243/0xb20 [ 66.782340][ C0] __common_interrupt+0xd7/0x1e0 [ 66.782349][ C0] common_interrupt+0xb0/0xd0 [ 66.782358][ C0] asm_common_interrupt+0x22/0x40 [ 66.782366][ C0] default_idle+0xb/0x10 [ 66.782376][ C0] default_idle_call+0x81/0xc0 [ 66.782387][ C0] do_idle+0x21b/0x5b0 [ 66.782397][ C0] cpu_startup_entry+0x14/0x20 [ 66.782407][ C0] start_kernel+0x486/0x530 [ 66.782417][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 66.782427][ C0] [ 66.782427][ C0] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 66.782440][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 66.782451][ C0] serial8250_console_write+0x170/0xf80 [ 66.782461][ C0] console_unlock+0xc86/0x1200 [ 66.782472][ C0] vprintk_emit+0xc0/0x150 [ 66.782482][ C0] _printk+0xcc/0x110 [ 66.782492][ C0] register_console+0x682/0x960 [ 66.782501][ C0] univ8250_console_init+0x41/0x50 [ 66.782510][ C0] console_init+0x177/0x5d0 [ 66.782520][ C0] start_kernel+0x2f9/0x530 [ 66.782530][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 66.782540][ C0] [ 66.782540][ C0] -> #0 (console_owner){-...}-{0:0}: [ 66.782553][ C0] __lock_acquire+0x2c33/0x7c60 [ 66.782564][ C0] lock_acquire+0x197/0x3f0 [ 66.782573][ C0] console_lock_spinning_enable+0x51/0x60 [ 66.782582][ C0] console_unlock+0x9f8/0x1200 [ 66.782592][ C0] vprintk_emit+0xc0/0x150 [ 66.782602][ C0] _printk+0xcc/0x110 [ 66.782611][ C0] report_bug+0x1e5/0x2e0 [ 66.782623][ C0] handle_bug+0x3a/0x70 [ 66.782631][ C0] exc_invalid_op+0x16/0x40 [ 66.782644][ C0] asm_exc_invalid_op+0x16/0x20 [ 66.782652][ C0] copy_from_user_nofault+0x160/0x1c0 [ 66.782662][ C0] bpf_probe_read_user+0x26/0x70 [ 66.782673][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0xa5c [ 66.782682][ C0] bpf_trace_run2+0x15b/0x2d0 [ 66.782692][ C0] enqueue_hrtimer+0x314/0x370 [ 66.782702][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 66.782712][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 66.782722][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 66.782735][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 66.782744][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 66.782754][ C0] lock_acquire+0x1f2/0x3f0 [ 66.782764][ C0] _raw_spin_lock+0x2a/0x40 [ 66.782774][ C0] pick_file+0x2e/0x220 [ 66.782782][ C0] __close_range+0x1cd/0x4d0 [ 66.782790][ C0] __x64_sys_close_range+0x76/0x80 [ 66.782803][ C0] do_syscall_64+0x4c/0xa0 [ 66.782810][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.782820][ C0] [ 66.782820][ C0] other info that might help us debug this: [ 66.782820][ C0] [ 66.782823][ C0] Chain exists of: [ 66.782823][ C0] console_owner --> &rt_b->rt_runtime_lock --> hrtimer_bases.lock [ 66.782823][ C0] [ 66.782838][ C0] Possible unsafe locking scenario: [ 66.782838][ C0] [ 66.782841][ C0] CPU0 CPU1 [ 66.782843][ C0] ---- ---- [ 66.782846][ C0] lock(hrtimer_bases.lock); [ 66.782852][ C0] lock(&rt_b->rt_runtime_lock); [ 66.782859][ C0] lock(hrtimer_bases.lock); [ 66.782865][ C0] lock(console_owner); [ 66.782871][ C0] [ 66.782871][ C0] *** DEADLOCK *** [ 66.782871][ C0] [ 66.782874][ C0] 4 locks held by syz.0.56/4386: [ 66.782879][ C0] #0: ffff88801e347918 (&newf->file_lock){+.+.}-{2:2}, at: pick_file+0x2e/0x220 [ 66.782902][ C0] #1: ffff8880b902a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x5ff/0xc40 [ 66.782928][ C0] #2: ffffffff8c11c460 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 66.782954][ C0] #3: ffffffff8c110fa0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa7/0x150 [ 66.782979][ C0] [ 66.782979][ C0] stack backtrace: [ 66.782987][ C0] CPU: 0 PID: 4386 Comm: syz.0.56 Not tainted syzkaller #0 [ 66.782997][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.783009][ C0] Call Trace: [ 66.783013][ C0] [ 66.783017][ C0] dump_stack_lvl+0x168/0x230 [ 66.783030][ C0] ? load_image+0x3b0/0x3b0 [ 66.783041][ C0] ? show_regs_print_info+0x20/0x20 [ 66.783055][ C0] ? print_circular_bug+0x12b/0x1a0 [ 66.783065][ C0] check_noncircular+0x274/0x310 [ 66.783076][ C0] ? add_chain_block+0x940/0x940 [ 66.783084][ C0] ? lockdep_lock+0xdc/0x1e0 [ 66.783098][ C0] ? mark_lock+0x94/0x320 [ 66.783109][ C0] __lock_acquire+0x2c33/0x7c60 [ 66.783128][ C0] ? verify_lock_unused+0x140/0x140 [ 66.783144][ C0] ? sprintf+0xd6/0x120 [ 66.783157][ C0] lock_acquire+0x197/0x3f0 [ 66.783167][ C0] ? console_lock_spinning_enable+0x2c/0x60 [ 66.783178][ C0] ? prb_read_valid+0x60/0x60 [ 66.783189][ C0] ? read_lock_is_recursive+0x10/0x10 [ 66.783200][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 66.783210][ C0] ? __rwlock_init+0x140/0x140 [ 66.783220][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 66.783231][ C0] console_lock_spinning_enable+0x51/0x60 [ 66.783241][ C0] ? console_lock_spinning_enable+0x2c/0x60 [ 66.783250][ C0] console_unlock+0x9f8/0x1200 [ 66.783264][ C0] ? console_trylock_spinning+0x350/0x350 [ 66.783277][ C0] ? __down_trylock_console_sem+0x184/0x1e0 [ 66.783287][ C0] ? vprintk_emit+0xa7/0x150 [ 66.783298][ C0] ? printk_parse_prefix+0x330/0x330 [ 66.783309][ C0] ? vprintk_emit+0xa7/0x150 [ 66.783320][ C0] ? console_trylock+0x70/0x70 [ 66.783328][ C0] ? mark_lock+0x94/0x320 [ 66.783340][ C0] ? mark_lock+0x94/0x320 [ 66.783353][ C0] ? vprintk_emit+0x150/0x150 [ 66.783368][ C0] vprintk_emit+0xc0/0x150 [ 66.783380][ C0] _printk+0xcc/0x110 [ 66.783392][ C0] ? verify_lock_unused+0x140/0x140 [ 66.783404][ C0] ? load_image+0x3b0/0x3b0 [ 66.783416][ C0] ? verify_lock_unused+0x140/0x140 [ 66.783427][ C0] ? find_bug+0xa1/0x350 [ 66.783437][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 66.783448][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 66.783459][ C0] report_bug+0x1e5/0x2e0 [ 66.783471][ C0] handle_bug+0x3a/0x70 [ 66.783480][ C0] exc_invalid_op+0x16/0x40 [ 66.783490][ C0] asm_exc_invalid_op+0x16/0x20 [ 66.783502][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 66.783514][ C0] Code: 24 45 31 f6 31 ff 89 de e8 ed f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 70 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 66.783523][ C0] RSP: 0018:ffffc90000007ba0 EFLAGS: 00010006 [ 66.783532][ C0] RAX: ffffffff819ed740 RBX: 0000000000000008 RCX: ffff88807a1f9dc0 [ 66.783540][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.783547][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff7619 [ 66.783554][ C0] R10: fffffbfff1ff7619 R11: 1ffffffff1ff7618 R12: ffff88807a1fb548 [ 66.783561][ C0] R13: dffffc0000000000 R14: ffffc90000007c08 R15: 0000000000000000 [ 66.783571][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 66.783585][ C0] bpf_probe_read_user+0x26/0x70 [ 66.783596][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0xa5c [ 66.783606][ C0] bpf_trace_run2+0x15b/0x2d0 [ 66.783617][ C0] ? posix_cpu_timers_work+0x1120/0x1120 [ 66.783630][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 66.783646][ C0] ? debug_object_activate+0x2d2/0x480 [ 66.783659][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 66.783672][ C0] enqueue_hrtimer+0x314/0x370 [ 66.783684][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 66.783697][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 66.783712][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 66.783723][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 66.783735][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 66.783753][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 66.783766][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 66.783777][ C0] [ 66.783779][ C0] [ 66.783783][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 66.783793][ C0] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 66.783805][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 66.783813][ C0] RSP: 0018:ffffc9000324fca0 EFLAGS: 00000206 [ 66.783821][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: eec4bfe79ef5e000 [ 66.783827][ C0] RDX: 0000000000000000 RSI: ffffffff8a0b28c0 RDI: ffffffff8a59a240 [ 66.783834][ C0] RBP: ffffc9000324fdb8 R08: dffffc0000000000 R09: fffffbfff1ff761c [ 66.783842][ C0] R10: fffffbfff1ff761c R11: 1ffffffff1ff761b R12: ffff88801e347918 [ 66.783849][ C0] R13: 1ffff92000649fa0 R14: 0000000000000246 R15: dffffc0000000000 [ 66.783864][ C0] ? read_lock_is_recursive+0x10/0x10 [ 66.783876][ C0] ? kick_process+0xd4/0x140 [ 66.783887][ C0] ? __might_sleep+0xf0/0xf0 [ 66.783896][ C0] ? task_work_add+0x1a7/0x1d0 [ 66.783909][ C0] _raw_spin_lock+0x2a/0x40 [ 66.783920][ C0] ? pick_file+0x2e/0x220 [ 66.783928][ C0] pick_file+0x2e/0x220 [ 66.783936][ C0] ? __close_range+0x239/0x4d0 [ 66.783946][ C0] __close_range+0x1cd/0x4d0 [ 66.783957][ C0] ? pick_file+0x220/0x220 [ 66.783965][ C0] ? vtime_user_exit+0x2dc/0x400 [ 66.783978][ C0] __x64_sys_close_range+0x76/0x80 [ 66.783990][ C0] do_syscall_64+0x4c/0xa0 [ 66.783999][ C0] ? clear_bhb_loop+0x30/0x80 [ 66.784009][ C0] ? clear_bhb_loop+0x30/0x80 [ 66.784019][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.784029][ C0] RIP: 0033:0x7f748a28fbe9 [ 66.784038][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.784046][ C0] RSP: 002b:00007ffd5c9fe688 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 66.784056][ C0] RAX: ffffffffffffffda RBX: 00000000000104bc RCX: 00007f748a28fbe9 [ 66.784063][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 66.784069][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 000000035c9fe97f [ 66.784076][ C0] R10: 0000001b30620000 R11: 0000000000000246 R12: 00007f748a4c6fac [ 66.784082][ C0] R13: 00007f748a4c6fa0 R14: ffffffffffffffff R15: 0000000000000003 [ 66.784093][ C0] [ 68.258314][ C0] WARNING: CPU: 0 PID: 4386 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 68.267598][ C0] Modules linked in: [ 68.271472][ C0] CPU: 0 PID: 4386 Comm: syz.0.56 Not tainted syzkaller #0 [ 68.278644][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 68.288677][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 68.294823][ C0] Code: 24 45 31 f6 31 ff 89 de e8 ed f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 70 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 68.314408][ C0] RSP: 0018:ffffc90000007ba0 EFLAGS: 00010006 [ 68.320455][ C0] RAX: ffffffff819ed740 RBX: 0000000000000008 RCX: ffff88807a1f9dc0 [ 68.328407][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.336359][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff7619 [ 68.344308][ C0] R10: fffffbfff1ff7619 R11: 1ffffffff1ff7618 R12: ffff88807a1fb548 [ 68.352261][ C0] R13: dffffc0000000000 R14: ffffc90000007c08 R15: 0000000000000000 [ 68.360209][ C0] FS: 0000555565395500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 68.369115][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.375676][ C0] CR2: 0000001b31263fff CR3: 0000000022137000 CR4: 00000000003506f0 [ 68.383625][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.391583][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.399534][ C0] Call Trace: [ 68.402794][ C0] [ 68.405621][ C0] bpf_probe_read_user+0x26/0x70 [ 68.410546][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0xa5c [ 68.416075][ C0] bpf_trace_run2+0x15b/0x2d0 [ 68.420732][ C0] ? posix_cpu_timers_work+0x1120/0x1120 [ 68.426345][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 68.431173][ C0] ? debug_object_activate+0x2d2/0x480 [ 68.436614][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 68.441966][ C0] enqueue_hrtimer+0x314/0x370 [ 68.446712][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 68.451888][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 68.457413][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 68.462501][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 68.468545][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 68.473467][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 68.479428][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 68.485039][ C0] [ 68.487946][ C0] [ 68.490854][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 68.496813][ C0] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 68.502078][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 68.521663][ C0] RSP: 0018:ffffc9000324fca0 EFLAGS: 00000206 [ 68.527709][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: eec4bfe79ef5e000 [ 68.535659][ C0] RDX: 0000000000000000 RSI: ffffffff8a0b28c0 RDI: ffffffff8a59a240 [ 68.543610][ C0] RBP: ffffc9000324fdb8 R08: dffffc0000000000 R09: fffffbfff1ff761c [ 68.551562][ C0] R10: fffffbfff1ff761c R11: 1ffffffff1ff761b R12: ffff88801e347918 [ 68.559511][ C0] R13: 1ffff92000649fa0 R14: 0000000000000246 R15: dffffc0000000000 [ 68.567472][ C0] ? read_lock_is_recursive+0x10/0x10 [ 68.572834][ C0] ? kick_process+0xd4/0x140 [ 68.577411][ C0] ? __might_sleep+0xf0/0xf0 [ 68.581987][ C0] ? task_work_add+0x1a7/0x1d0 [ 68.586747][ C0] _raw_spin_lock+0x2a/0x40 [ 68.591241][ C0] ? pick_file+0x2e/0x220 [ 68.595556][ C0] pick_file+0x2e/0x220 [ 68.599689][ C0] ? __close_range+0x239/0x4d0 [ 68.604432][ C0] __close_range+0x1cd/0x4d0 [ 68.609004][ C0] ? pick_file+0x220/0x220 [ 68.613399][ C0] ? vtime_user_exit+0x2dc/0x400 [ 68.618319][ C0] __x64_sys_close_range+0x76/0x80 [ 68.623413][ C0] do_syscall_64+0x4c/0xa0 [ 68.627810][ C0] ? clear_bhb_loop+0x30/0x80 [ 68.632466][ C0] ? clear_bhb_loop+0x30/0x80 [ 68.637120][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.642991][ C0] RIP: 0033:0x7f748a28fbe9 [ 68.647386][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.667057][ C0] RSP: 002b:00007ffd5c9fe688 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 68.675456][ C0] RAX: ffffffffffffffda RBX: 00000000000104bc RCX: 00007f748a28fbe9 [ 68.683410][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 68.691395][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 000000035c9fe97f [ 68.699492][ C0] R10: 0000001b30620000 R11: 0000000000000246 R12: 00007f748a4c6fac [ 68.707457][ C0] R13: 00007f748a4c6fa0 R14: ffffffffffffffff R15: 0000000000000003 [ 68.715422][ C0] [ 68.718439][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 68.725694][ C0] CPU: 0 PID: 4386 Comm: syz.0.56 Not tainted syzkaller #0 [ 68.732867][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 68.742899][ C0] Call Trace: [ 68.746160][ C0] [ 68.748983][ C0] dump_stack_lvl+0x168/0x230 [ 68.753644][ C0] ? show_regs_print_info+0x20/0x20 [ 68.758823][ C0] ? load_image+0x3b0/0x3b0 [ 68.763309][ C0] panic+0x2c9/0x7f0 [ 68.767183][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 68.771671][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 68.777205][ C0] __warn+0x248/0x2b0 [ 68.781172][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 68.786695][ C0] report_bug+0x1b7/0x2e0 [ 68.791009][ C0] handle_bug+0x3a/0x70 [ 68.795142][ C0] exc_invalid_op+0x16/0x40 [ 68.799619][ C0] asm_exc_invalid_op+0x16/0x20 [ 68.804450][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 68.810584][ C0] Code: 24 45 31 f6 31 ff 89 de e8 ed f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 70 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 68.830175][ C0] RSP: 0018:ffffc90000007ba0 EFLAGS: 00010006 [ 68.836226][ C0] RAX: ffffffff819ed740 RBX: 0000000000000008 RCX: ffff88807a1f9dc0 [ 68.844175][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.852129][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff7619 [ 68.860076][ C0] R10: fffffbfff1ff7619 R11: 1ffffffff1ff7618 R12: ffff88807a1fb548 [ 68.868025][ C0] R13: dffffc0000000000 R14: ffffc90000007c08 R15: 0000000000000000 [ 68.875977][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 68.881509][ C0] bpf_probe_read_user+0x26/0x70 [ 68.886429][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0xa5c [ 68.891952][ C0] bpf_trace_run2+0x15b/0x2d0 [ 68.896610][ C0] ? posix_cpu_timers_work+0x1120/0x1120 [ 68.902223][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 68.907052][ C0] ? debug_object_activate+0x2d2/0x480 [ 68.912510][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 68.917864][ C0] enqueue_hrtimer+0x314/0x370 [ 68.922611][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 68.927790][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 68.933344][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 68.938431][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 68.944477][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 68.949405][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 68.955369][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 68.960982][ C0] [ 68.963894][ C0] [ 68.966803][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 68.972759][ C0] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 68.978029][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 68.997611][ C0] RSP: 0018:ffffc9000324fca0 EFLAGS: 00000206 [ 69.003658][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: eec4bfe79ef5e000 [ 69.011606][ C0] RDX: 0000000000000000 RSI: ffffffff8a0b28c0 RDI: ffffffff8a59a240 [ 69.019560][ C0] RBP: ffffc9000324fdb8 R08: dffffc0000000000 R09: fffffbfff1ff761c [ 69.027517][ C0] R10: fffffbfff1ff761c R11: 1ffffffff1ff761b R12: ffff88801e347918 [ 69.035481][ C0] R13: 1ffff92000649fa0 R14: 0000000000000246 R15: dffffc0000000000 [ 69.043446][ C0] ? read_lock_is_recursive+0x10/0x10 [ 69.048942][ C0] ? kick_process+0xd4/0x140 [ 69.053531][ C0] ? __might_sleep+0xf0/0xf0 [ 69.058115][ C0] ? task_work_add+0x1a7/0x1d0 [ 69.062863][ C0] _raw_spin_lock+0x2a/0x40 [ 69.067354][ C0] ? pick_file+0x2e/0x220 [ 69.071662][ C0] pick_file+0x2e/0x220 [ 69.075795][ C0] ? __close_range+0x239/0x4d0 [ 69.080535][ C0] __close_range+0x1cd/0x4d0 [ 69.085111][ C0] ? pick_file+0x220/0x220 [ 69.089502][ C0] ? vtime_user_exit+0x2dc/0x400 [ 69.094423][ C0] __x64_sys_close_range+0x76/0x80 [ 69.099522][ C0] do_syscall_64+0x4c/0xa0 [ 69.103914][ C0] ? clear_bhb_loop+0x30/0x80 [ 69.108568][ C0] ? clear_bhb_loop+0x30/0x80 [ 69.113220][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.119094][ C0] RIP: 0033:0x7f748a28fbe9 [ 69.123489][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.143076][ C0] RSP: 002b:00007ffd5c9fe688 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 69.151477][ C0] RAX: ffffffffffffffda RBX: 00000000000104bc RCX: 00007f748a28fbe9 [ 69.159427][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 69.167379][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 000000035c9fe97f [ 69.175336][ C0] R10: 0000001b30620000 R11: 0000000000000246 R12: 00007f748a4c6fac [ 69.183285][ C0] R13: 00007f748a4c6fa0 R14: ffffffffffffffff R15: 0000000000000003 [ 69.191247][ C0] [ 69.194331][ C0] Kernel Offset: disabled [ 69.198641][ C0] Rebooting in 86400 seconds..