Warning: Permanently added '10.128.1.114' (ED25519) to the list of known hosts. 2025/09/05 20:24:18 parsed 1 programs [ 61.377969][ T4189] cgroup: Unknown subsys name 'net' [ 61.510523][ T4189] cgroup: Unknown subsys name 'rlimit' [ 63.033666][ T4189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.784436][ T4228] chnl_net:caif_netlink_parms(): no params data found [ 65.866440][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.873746][ T4228] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.882609][ T4228] device bridge_slave_0 entered promiscuous mode [ 65.893805][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.901195][ T4228] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.910857][ T4228] device bridge_slave_1 entered promiscuous mode [ 65.941901][ T4228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.955992][ T4228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.998487][ T4228] team0: Port device team_slave_0 added [ 66.006643][ T4228] team0: Port device team_slave_1 added [ 66.032114][ T4228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.039495][ T4228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.066299][ T4228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.079898][ T4228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.087147][ T4228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.113224][ T4228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.154943][ T4228] device hsr_slave_0 entered promiscuous mode [ 66.161877][ T4228] device hsr_slave_1 entered promiscuous mode [ 66.299981][ T4228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.312461][ T4228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.323980][ T4228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.335853][ T4228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.372565][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.379839][ T4228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.387907][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.395038][ T4228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.457119][ T4228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.473043][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.486007][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.496322][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.505839][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 66.522345][ T4228] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.537100][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.546389][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.553553][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.572525][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.581834][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.589328][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.608002][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.617226][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.627207][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.642454][ T4228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.656400][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.666900][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.675390][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.818839][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.826711][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.838575][ T4228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.855341][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.863971][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.888833][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.897797][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.906832][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.915220][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.925895][ T4228] device veth0_vlan entered promiscuous mode [ 66.937404][ T4228] device veth1_vlan entered promiscuous mode [ 66.956661][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.965541][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.973815][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.982913][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.992772][ T4228] device veth0_macvtap entered promiscuous mode [ 67.002708][ T4228] device veth1_macvtap entered promiscuous mode [ 67.031509][ T4228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.040063][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.049310][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.058468][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.067621][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.090914][ T4228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.098756][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.108445][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.120990][ T4228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.130316][ T4228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.139319][ T4228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.149795][ T4228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.849498][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.870879][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.890237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.903754][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.923549][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.933698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/09/05 20:24:27 executed programs: 0 [ 69.209494][ T4292] chnl_net:caif_netlink_parms(): no params data found [ 69.262014][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.269923][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.278501][ T4292] device bridge_slave_0 entered promiscuous mode [ 69.287282][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.295187][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.303423][ T4292] device bridge_slave_1 entered promiscuous mode [ 69.324055][ T4292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.335577][ T4292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.371553][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.388980][ T4292] team0: Port device team_slave_0 added [ 69.397175][ T4292] team0: Port device team_slave_1 added [ 69.413612][ T4292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.420970][ T4292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.447756][ T4292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.460749][ T4292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.468180][ T4292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.495001][ T4292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.523683][ T4292] device hsr_slave_0 entered promiscuous mode [ 69.530913][ T4292] device hsr_slave_1 entered promiscuous mode [ 69.538270][ T4292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.546723][ T4292] Cannot create hsr debugfs directory [ 71.105361][ T4254] Bluetooth: hci0: command 0x0409 tx timeout [ 71.427490][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.433979][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.381573][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.430341][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.501564][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.194637][ T4306] Bluetooth: hci0: command 0x041b tx timeout [ 73.418440][ T4292] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.428434][ T4292] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.438620][ T4292] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.452586][ T4292] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.517641][ T4292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.529503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.538731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.550231][ T4292] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.579762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.589564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.598745][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.605972][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.615215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.627430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.636003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.644912][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.652073][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.683360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.695283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.706256][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.716558][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.725722][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.756032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.765191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.776891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.786847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.797990][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.807409][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.818746][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.925615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.933185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.946491][ T4292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.977148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.986772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.011692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.020807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.031773][ T4292] device veth0_vlan entered promiscuous mode [ 74.040035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.047941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.064598][ T4292] device veth1_vlan entered promiscuous mode [ 74.077549][ T9] device hsr_slave_0 left promiscuous mode [ 74.083966][ T9] device hsr_slave_1 left promiscuous mode [ 74.092051][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.101346][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.110143][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.118165][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.125970][ T9] device bridge_slave_1 left promiscuous mode [ 74.133040][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.149017][ T9] device bridge_slave_0 left promiscuous mode [ 74.155415][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.170992][ T9] device veth1_macvtap left promiscuous mode [ 74.177437][ T9] device veth0_macvtap left promiscuous mode [ 74.183461][ T9] device veth1_vlan left promiscuous mode [ 74.189646][ T9] device veth0_vlan left promiscuous mode [ 74.337919][ T9] team0 (unregistering): Port device team_slave_1 removed [ 74.351810][ T9] team0 (unregistering): Port device team_slave_0 removed [ 74.363594][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.378134][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.432591][ T9] bond0 (unregistering): Released all slaves [ 74.523288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.531376][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.539933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.548924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.562832][ T4292] device veth0_macvtap entered promiscuous mode [ 74.573865][ T4292] device veth1_macvtap entered promiscuous mode [ 74.593210][ T4292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.601977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.611643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.622875][ T4292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.636564][ T4292] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.645602][ T4292] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.655517][ T4292] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.664501][ T4292] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.674337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.683134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.761861][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.779632][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.791746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.801804][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2025/09/05 20:24:33 executed programs: 2 [ 74.812195][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.821876][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.174456][ C1] ------------[ cut here ]------------ [ 75.174456][ C0] ------------[ cut here ]------------ [ 75.175157][ C1] WARNING: CPU: 1 PID: 3561 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 75.175190][ C1] Modules linked in: [ 75.175203][ C1] CPU: 1 PID: 3561 Comm: udevd Not tainted syzkaller #0 [ 75.175220][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.175229][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 75.175249][ C1] Code: 24 45 31 f6 31 ff 89 de e8 ed f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 70 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 75.175264][ C1] RSP: 0018:ffffc90000dd0ba0 EFLAGS: 00010006 [ 75.175280][ C1] RAX: ffffffff819ed740 RBX: 0000000000000008 RCX: ffff88807cd01dc0 [ 75.175340][ C1] [ 75.175343][ C1] ====================================================== [ 75.175347][ C1] WARNING: possible circular locking dependency detected [ 75.175351][ C1] syzkaller #0 Not tainted [ 75.175358][ C1] ------------------------------------------------------ [ 75.175362][ C1] udevd/3561 is trying to acquire lock: [ 75.175369][ C1] ffffffff8c110ec0 (console_owner){-...}-{0:0}, at: console_trylock_spinning+0x150/0x350 [ 75.175407][ C1] [ 75.175407][ C1] but task is already holding lock: [ 75.175410][ C1] ffff8880b912a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x5ff/0xc40 [ 75.175444][ C1] [ 75.175444][ C1] which lock already depends on the new lock. [ 75.175444][ C1] [ 75.175447][ C1] [ 75.175447][ C1] the existing dependency chain (in reverse order) is: [ 75.175451][ C1] [ 75.175451][ C1] -> #6 (hrtimer_bases.lock){-.-.}-{2:2}: [ 75.175471][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 75.175488][ C1] hrtimer_start_range_ns+0xff/0xc20 [ 75.175501][ C1] enqueue_task_rt+0x60c/0xc00 [ 75.175514][ C1] enqueue_task+0x182/0x2b0 [ 75.175528][ C1] __sched_setscheduler+0x1379/0x1be0 [ 75.175543][ C1] sched_set_fifo+0xbc/0x120 [ 75.175556][ C1] drm_vblank_worker_init+0x149/0x1a0 [ 75.175569][ C1] drm_vblank_init+0x265/0x330 [ 75.175582][ C1] vkms_init+0x31a/0x700 [ 75.175595][ C1] do_one_initcall+0x1ee/0x680 [ 75.175609][ C1] do_initcall_level+0x137/0x1f0 [ 75.175622][ C1] do_initcalls+0x4b/0x90 [ 75.175633][ C1] kernel_init_freeable+0x3ce/0x560 [ 75.175644][ C1] kernel_init+0x19/0x1b0 [ 75.175657][ C1] ret_from_fork+0x1f/0x30 [ 75.175670][ C1] [ 75.175670][ C1] -> #5 (&rt_b->rt_runtime_lock){-...}-{2:2}: [ 75.175688][ C1] _raw_spin_lock+0x2a/0x40 [ 75.175702][ C1] rq_online_rt+0x125/0x310 [ 75.175714][ C1] sched_cpu_activate+0x4ae/0x650 [ 75.175725][ C1] cpuhp_invoke_callback+0x431/0x830 [ 75.175740][ C1] cpuhp_thread_fun+0x39a/0x7d0 [ 75.175753][ C1] smpboot_thread_fn+0x4f6/0x970 [ 75.175767][ C1] kthread+0x436/0x520 [ 75.175778][ C1] ret_from_fork+0x1f/0x30 [ 75.175790][ C1] [ 75.175790][ C1] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 75.175809][ C1] _raw_spin_lock_nested+0x2e/0x40 [ 75.175820][ C1] raw_spin_rq_lock_nested+0x26/0x140 [ 75.175833][ C1] task_fork_fair+0x5c/0x350 [ 75.175845][ C1] sched_cgroup_fork+0x2c6/0x320 [ 75.175858][ C1] copy_process+0x22d1/0x3e00 [ 75.175871][ C1] kernel_clone+0x219/0x930 [ 75.175882][ C1] kernel_thread+0xc8/0x120 [ 75.175894][ C1] rest_init+0x21/0x330 [ 75.175906][ C1] start_kernel+0x486/0x530 [ 75.175919][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 75.175933][ C1] [ 75.175933][ C1] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 75.175951][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 75.175965][ C1] try_to_wake_up+0x5c/0x1050 [ 75.175978][ C1] __wake_up_common+0x2a4/0x4e0 [ 75.175991][ C1] __wake_up+0x108/0x180 [ 75.176004][ C1] tty_port_default_wakeup+0xa5/0xf0 [ 75.176018][ C1] serial8250_tx_chars+0x629/0x830 [ 75.176032][ C1] serial8250_handle_irq+0x519/0x610 [ 75.176046][ C1] serial8250_default_handle_irq+0xb4/0x1a0 [ 75.176070][ C1] serial8250_interrupt+0x9b/0x1c0 [ 75.176082][ C1] __handle_irq_event_percpu+0x291/0x9b0 [ 75.176096][ C1] handle_irq_event+0xa5/0x220 [ 75.176108][ C1] handle_edge_irq+0x243/0xb20 [ 75.176122][ C1] __common_interrupt+0xd7/0x1e0 [ 75.176135][ C1] common_interrupt+0xb0/0xd0 [ 75.176146][ C1] asm_common_interrupt+0x22/0x40 [ 75.176158][ C1] unwind_next_frame+0x11e8/0x1d90 [ 75.176173][ C1] arch_stack_walk+0x10c/0x140 [ 75.176187][ C1] stack_trace_save+0x98/0xe0 [ 75.176199][ C1] kasan_set_track+0x4b/0x70 [ 75.176212][ C1] kasan_set_free_info+0x1f/0x40 [ 75.176225][ C1] ____kasan_slab_free+0xd5/0x110 [ 75.176238][ C1] slab_free_freelist_hook+0xea/0x170 [ 75.176251][ C1] kmem_cache_free+0x8f/0x210 [ 75.176262][ C1] exit_mmap+0x4d8/0x5f0 [ 75.176275][ C1] __mmput+0x115/0x3b0 [ 75.176287][ C1] exec_mmap+0x4d1/0x5c0 [ 75.176301][ C1] begin_new_exec+0x7e8/0x1160 [ 75.176315][ C1] load_elf_binary+0x98e/0x2890 [ 75.176330][ C1] bprm_execve+0xa92/0x17d0 [ 75.176341][ C1] do_execveat_common+0x51e/0x6d0 [ 75.176353][ C1] __x64_sys_execve+0x8e/0xa0 [ 75.176364][ C1] do_syscall_64+0x4c/0xa0 [ 75.176375][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.176388][ C1] [ 75.176388][ C1] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 75.176407][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 75.176421][ C1] __wake_up+0xed/0x180 [ 75.176434][ C1] tty_port_default_wakeup+0xa5/0xf0 [ 75.176447][ C1] serial8250_tx_chars+0x629/0x830 [ 75.176460][ C1] serial8250_handle_irq+0x519/0x610 [ 75.176473][ C1] serial8250_default_handle_irq+0xb4/0x1a0 [ 75.176488][ C1] serial8250_interrupt+0x9b/0x1c0 [ 75.176501][ C1] __handle_irq_event_percpu+0x291/0x9b0 [ 75.176514][ C1] handle_irq_event+0xa5/0x220 [ 75.176526][ C1] handle_edge_irq+0x243/0xb20 [ 75.176539][ C1] __common_interrupt+0xd7/0x1e0 [ 75.176551][ C1] common_interrupt+0xb0/0xd0 [ 75.176563][ C1] asm_common_interrupt+0x22/0x40 [ 75.176575][ C1] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 75.176589][ C1] uart_write+0x62f/0x880 [ 75.176601][ C1] n_tty_write+0xd21/0x1210 [ 75.176612][ C1] file_tty_write+0x557/0x910 [ 75.176626][ C1] vfs_write+0x712/0xd00 [ 75.176637][ C1] ksys_write+0x14d/0x250 [ 75.176648][ C1] do_syscall_64+0x4c/0xa0 [ 75.176659][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.176672][ C1] [ 75.176672][ C1] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 75.176691][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 75.176705][ C1] serial8250_console_write+0x170/0xf80 [ 75.176719][ C1] console_unlock+0xc86/0x1200 [ 75.176732][ C1] vprintk_emit+0xc0/0x150 [ 75.176746][ C1] _printk+0xcc/0x110 [ 75.176759][ C1] register_console+0x682/0x960 [ 75.176771][ C1] univ8250_console_init+0x41/0x50 [ 75.176783][ C1] console_init+0x177/0x5d0 [ 75.176796][ C1] start_kernel+0x2f9/0x530 [ 75.176809][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 75.176823][ C1] [ 75.176823][ C1] -> #0 (console_owner){-...}-{0:0}: [ 75.176841][ C1] __lock_acquire+0x2c33/0x7c60 [ 75.176855][ C1] lock_acquire+0x197/0x3f0 [ 75.176868][ C1] console_trylock_spinning+0x170/0x350 [ 75.176883][ C1] vprintk_emit+0xa7/0x150 [ 75.176896][ C1] _printk+0xcc/0x110 [ 75.176909][ C1] __show_regs+0xcb/0x500 [ 75.176921][ C1] show_regs+0x32/0x60 [ 75.176932][ C1] __warn+0x15e/0x2b0 [ 75.176944][ C1] report_bug+0x1b7/0x2e0 [ 75.176958][ C1] handle_bug+0x3a/0x70 [ 75.176969][ C1] exc_invalid_op+0x16/0x40 [ 75.176980][ C1] asm_exc_invalid_op+0x16/0x20 [ 75.176992][ C1] copy_from_user_nofault+0x160/0x1c0 [ 75.177006][ C1] bpf_probe_read_user+0x26/0x70 [ 75.177020][ C1] bpf_prog_02073d59a3c0f06f+0x3d/0x458 [ 75.177032][ C1] bpf_trace_run2+0x15b/0x2d0 [ 75.177045][ C1] enqueue_hrtimer+0x314/0x370 [ 75.177066][ C1] __hrtimer_run_queues+0x65a/0xc40 [ 75.177080][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 75.177093][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 75.177109][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 75.177122][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 75.177135][ C1] lock_is_held_type+0x13a/0x190 [ 75.177147][ C1] ___might_sleep+0xf2/0x600 [ 75.177159][ C1] slab_pre_alloc_hook+0x42/0xc0 [ 75.177170][ C1] kmem_cache_alloc+0x3d/0x290 [ 75.177184][ C1] getname_flags+0xb5/0x500 [ 75.177195][ C1] do_sys_openat2+0xcf/0x4a0 [ 75.177209][ C1] __x64_sys_openat+0x135/0x160 [ 75.177223][ C1] do_syscall_64+0x4c/0xa0 [ 75.177234][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.177247][ C1] [ 75.177247][ C1] other info that might help us debug this: [ 75.177247][ C1] [ 75.177251][ C1] Chain exists of: [ 75.177251][ C1] console_owner --> &rt_b->rt_runtime_lock --> hrtimer_bases.lock [ 75.177251][ C1] [ 75.177273][ C1] Possible unsafe locking scenario: [ 75.177273][ C1] [ 75.177277][ C1] CPU0 CPU1 [ 75.177280][ C1] ---- ---- [ 75.177283][ C1] lock(hrtimer_bases.lock); [ 75.177292][ C1] lock(&rt_b->rt_runtime_lock); [ 75.177301][ C1] lock(hrtimer_bases.lock); [ 75.177310][ C1] lock(console_owner); [ 75.177319][ C1] [ 75.177319][ C1] *** DEADLOCK *** [ 75.177319][ C1] [ 75.177322][ C1] 2 locks held by udevd/3561: [ 75.177330][ C1] #0: ffff8880b912a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x5ff/0xc40 [ 75.177365][ C1] #1: ffffffff8c11c460 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 75.177397][ C1] [ 75.177397][ C1] stack backtrace: [ 75.177401][ C1] CPU: 1 PID: 3561 Comm: udevd Not tainted syzkaller #0 [ 75.177414][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.177421][ C1] Call Trace: [ 75.177425][ C1] [ 75.177430][ C1] dump_stack_lvl+0x168/0x230 [ 75.177446][ C1] ? load_image+0x3b0/0x3b0 [ 75.177461][ C1] ? show_regs_print_info+0x20/0x20 [ 75.177480][ C1] ? print_circular_bug+0x12b/0x1a0 [ 75.177494][ C1] check_noncircular+0x274/0x310 [ 75.177508][ C1] ? add_chain_block+0x940/0x940 [ 75.177520][ C1] ? lockdep_lock+0x141/0x1e0 [ 75.177536][ C1] ? data_alloc+0x4c6/0x7b0 [ 75.177549][ C1] ? mark_lock+0x94/0x320 [ 75.177564][ C1] ? mark_lock+0x94/0x320 [ 75.177579][ C1] __lock_acquire+0x2c33/0x7c60 [ 75.177602][ C1] ? down_trylock+0x4c/0xa0 [ 75.177616][ C1] ? verify_lock_unused+0x140/0x140 [ 75.177631][ C1] ? verify_lock_unused+0x140/0x140 [ 75.177646][ C1] ? __rwlock_init+0x140/0x140 [ 75.177660][ C1] ? _prb_commit+0x289/0x340 [ 75.177673][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 75.177688][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 75.177703][ C1] ? _raw_spin_unlock+0x40/0x40 [ 75.177721][ C1] lock_acquire+0x197/0x3f0 [ 75.177735][ C1] ? console_trylock_spinning+0x150/0x350 [ 75.177752][ C1] ? console_trylock_spinning+0x150/0x350 [ 75.177778][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 75.177792][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 75.177806][ C1] ? read_lock_is_recursive+0x10/0x10 [ 75.177821][ C1] ? __rwlock_init+0x140/0x140 [ 75.177836][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 75.177851][ C1] console_trylock_spinning+0x170/0x350 [ 75.177866][ C1] ? console_trylock_spinning+0x150/0x350 [ 75.177881][ C1] ? vprintk_emit+0x150/0x150 [ 75.177897][ C1] ? vprintk_emit+0xf9/0x150 [ 75.177914][ C1] ? irq_work_queue+0xbf/0x140 [ 75.177930][ C1] vprintk_emit+0xa7/0x150 [ 75.177947][ C1] _printk+0xcc/0x110 [ 75.177961][ C1] ? copy_from_user_nofault+0x136/0x1c0 [ 75.177975][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 75.177990][ C1] ? load_image+0x3b0/0x3b0 [ 75.178008][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 75.178022][ C1] __show_regs+0xcb/0x500 [ 75.178035][ C1] ? dump_stack_print_info+0xf1/0x150 [ 75.178057][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 75.178072][ C1] show_regs+0x32/0x60 [ 75.178085][ C1] __warn+0x15e/0x2b0 [ 75.178099][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 75.178114][ C1] report_bug+0x1b7/0x2e0 [ 75.178131][ C1] handle_bug+0x3a/0x70 [ 75.178144][ C1] exc_invalid_op+0x16/0x40 [ 75.178157][ C1] asm_exc_invalid_op+0x16/0x20 [ 75.178169][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 75.178184][ C1] Code: 24 45 31 f6 31 ff 89 de e8 ed f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 70 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 75.178195][ C1] RSP: 0018:ffffc90000dd0ba0 EFLAGS: 00010006 [ 75.178207][ C1] RAX: ffffffff819ed740 RBX: 0000000000000008 RCX: ffff88807cd01dc0 [ 75.178217][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.178226][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff7619 [ 75.178236][ C1] R10: fffffbfff1ff7619 R11: 1ffffffff1ff7618 R12: ffff88807cd03548 [ 75.178246][ C1] R13: dffffc0000000000 R14: ffffc90000dd0c08 R15: 0000000000000000 [ 75.178259][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 75.178278][ C1] bpf_probe_read_user+0x26/0x70 [ 75.178294][ C1] bpf_prog_02073d59a3c0f06f+0x3d/0x458 [ 75.178307][ C1] bpf_trace_run2+0x15b/0x2d0 [ 75.178323][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 75.178339][ C1] ? enqueue_hrtimer+0x259/0x370 [ 75.178356][ C1] enqueue_hrtimer+0x314/0x370 [ 75.178372][ C1] __hrtimer_run_queues+0x65a/0xc40 [ 75.178390][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 75.178409][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 75.178424][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 75.178442][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 75.178465][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 75.178482][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 75.178497][ C1] [ 75.178501][ C1] [ 75.178505][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 75.178519][ C1] RIP: 0010:lock_is_held_type+0x13a/0x190 [ 75.178534][ C1] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 75.178544][ C1] RSP: 0018:ffffc900012dfb98 EFLAGS: 00000206 [ 75.178555][ C1] RAX: d3b510027ebaa800 RBX: ffff88807cd01dc0 RCX: d3b510027ebaa800 [ 75.178565][ C1] RDX: 0000000000000000 RSI: ffffffff8a0b28c0 RDI: ffffffff8a59a240 [ 75.178575][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad31be [ 75.178585][ C1] R10: fffffbfff1ad31be R11: 1ffffffff1ad31bd R12: dffffc0000000000 [ 75.178595][ C1] R13: 0000000000000246 R14: ffffffff8c11c520 R15: 00000000ffffffff [ 75.178613][ C1] ___might_sleep+0xf2/0x600 [ 75.178627][ C1] ? slab_pre_alloc_hook+0x27/0xc0 [ 75.178640][ C1] ? __might_sleep+0xf0/0xf0 [ 75.178653][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 75.178672][ C1] slab_pre_alloc_hook+0x42/0xc0 [ 75.178685][ C1] ? getname_flags+0xb5/0x500 [ 75.178698][ C1] kmem_cache_alloc+0x3d/0x290 [ 75.178715][ C1] getname_flags+0xb5/0x500 [ 75.178730][ C1] do_sys_openat2+0xcf/0x4a0 [ 75.178744][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 75.178761][ C1] ? do_sys_open+0xe0/0xe0 [ 75.178776][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 75.178792][ C1] ? lock_chain_count+0x20/0x20 [ 75.178807][ C1] ? vtime_user_exit+0x2dc/0x400 [ 75.178823][ C1] __x64_sys_openat+0x135/0x160 [ 75.178840][ C1] do_syscall_64+0x4c/0xa0 [ 75.178852][ C1] ? clear_bhb_loop+0x30/0x80 [ 75.178864][ C1] ? clear_bhb_loop+0x30/0x80 [ 75.178878][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.178891][ C1] RIP: 0033:0x7f6e4bb60407 [ 75.178903][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 75.178913][ C1] RSP: 002b:00007ffca80c2360 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 75.178927][ C1] RAX: ffffffffffffffda RBX: 00007f6e4ba72880 RCX: 00007f6e4bb60407 [ 75.178937][ C1] RDX: 0000000000080000 RSI: 00007ffca80c24e0 RDI: ffffffffffffff9c [ 75.178947][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 75.178955][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055cb75d837f5 [ 75.178964][ C1] R13: 000055cb75d837f5 R14: 0000000000000001 R15: 00007ffca80c6b30 [ 75.178979][ C1] [ 75.180802][ C0] WARNING: CPU: 0 PID: 4359 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 75.186342][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.195743][ C0] Modules linked in: [ 75.199625][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff7619 [ 75.206629][ C0] CPU: 0 PID: 4359 Comm: syz.0.30 Not tainted syzkaller #0 [ 75.216668][ C1] R10: fffffbfff1ff7619 R11: 1ffffffff1ff7618 R12: ffff88807cd03548 [ 75.222889][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.242653][ C1] R13: dffffc0000000000 R14: ffffc90000dd0c08 R15: 0000000000000000 [ 75.248705][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 75.256664][ C1] FS: 00007f6e4ba72880(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 75.258979][ C0] Code: 24 45 31 f6 31 ff 89 de e8 ed f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 70 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 75.265981][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.273072][ C0] RSP: 0018:ffffc90000007ba0 EFLAGS: 00010006 [ 75.277472][ C1] CR2: 0000555583ba5808 CR3: 00000000185ba000 CR4: 00000000003506e0 [ 75.284578][ C0] [ 75.284584][ C0] RAX: ffffffff819ed740 RBX: 0000000000000008 RCX: ffff88802496bb80 [ 75.290115][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.300129][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.307503][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.317458][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff7619 [ 75.327847][ C1] Call Trace: [ 75.327862][ C1] [ 75.336846][ C0] R10: fffffbfff1ff7619 R11: 1ffffffff1ff7618 R12: ffff88802496d308 [ 75.344829][ C1] bpf_probe_read_user+0x26/0x70 [ 75.350525][ C0] R13: dffffc0000000000 R14: ffffc90000007c08 R15: 0000000000000000 [ 75.356314][ C1] bpf_prog_02073d59a3c0f06f+0x3d/0x458 [ 75.361576][ C0] FS: 0000555583ba5500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 75.366584][ C1] bpf_trace_run2+0x15b/0x2d0 [ 75.372715][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.377813][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 75.383784][ C0] CR2: 0000001b30f63fff CR3: 0000000074b47000 CR4: 00000000003506f0 [ 75.389069][ C1] ? enqueue_hrtimer+0x259/0x370 [ 75.393825][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.399303][ C1] enqueue_hrtimer+0x314/0x370 [ 75.404777][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.409909][ C1] __hrtimer_run_queues+0x65a/0xc40 [ 75.415644][ C0] Call Trace: [ 75.415653][ C0] [ 75.420573][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 75.425491][ C0] bpf_probe_read_user+0x26/0x70 [ 75.433715][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 75.438820][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0x458 [ 75.443998][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 75.449538][ C0] bpf_trace_run2+0x15b/0x2d0 [ 75.455329][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 75.460691][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 75.466143][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 75.470710][ C0] ? enqueue_hrtimer+0x259/0x370 [ 75.475635][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 75.482985][ C0] enqueue_hrtimer+0x314/0x370 [ 75.488860][ C1] [ 75.494735][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 75.499833][ C1] [ 75.499841][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 75.505283][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 75.510461][ C1] RIP: 0010:lock_is_held_type+0x13a/0x190 [ 75.515474][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 75.520480][ C1] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 75.525140][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 75.530144][ C1] RSP: 0018:ffffc900012dfb98 EFLAGS: 00000206 [ 75.536548][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 75.543895][ C1] [ 75.549622][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 75.554797][ C1] RAX: d3b510027ebaa800 RBX: ffff88807cd01dc0 RCX: d3b510027ebaa800 [ 75.560195][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 75.564942][ C1] RDX: 0000000000000000 RSI: ffffffff8a0b28c0 RDI: ffffffff8a59a240 [ 75.570819][ C0] [ 75.576518][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad31be [ 75.582401][ C0] [ 75.582408][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 75.588883][ C1] R10: fffffbfff1ad31be R11: 1ffffffff1ad31bd R12: dffffc0000000000 [ 75.594773][ C0] RIP: 0010:x2apic_send_IPI+0x70/0xd0 [ 75.600905][ C1] R13: 0000000000000246 R14: ffffffff8c11c520 R15: 00000000ffffffff [ 75.606174][ C0] Code: f0 48 c1 e8 03 42 0f b6 04 20 84 c0 75 3b 41 0f b7 16 0f ae f0 0f ae e8 83 fb 02 b8 00 04 00 00 0f 45 c3 b9 30 08 00 00 0f 30 <66> 90 5b 41 5c 41 5e 41 5f 5d c3 89 fe 89 fd 48 c7 c7 60 c0 f8 8b [ 75.611449][ C1] ___might_sleep+0xf2/0x600 [ 75.616882][ C0] RSP: 0018:ffffc9000326f850 EFLAGS: 00000206 [ 75.622071][ C1] ? slab_pre_alloc_hook+0x27/0xc0 [ 75.628117][ C0] [ 75.628123][ C0] RAX: 00000000000000fb RBX: 00000000000000fb RCX: 0000000000000830 [ 75.633730][ C1] ? __might_sleep+0xf0/0xf0 [ 75.638995][ C0] RDX: 0000000000000001 RSI: 00000000000000fb RDI: 0000000000000001 [ 75.644351][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 75.649515][ C0] RBP: ffffc9000326f9c0 R08: dffffc0000000000 R09: ffffed1017207673 [ 75.654959][ C1] slab_pre_alloc_hook+0x42/0xc0 [ 75.660485][ C0] R10: ffffed1017207673 R11: 1ffff11017207672 R12: dffffc0000000000 [ 75.666387][ C1] ? getname_flags+0xb5/0x500 [ 75.671568][ C0] R13: ffff8880b903b380 R14: ffff8880b9121568 R15: ffffffff8bbc1828 [ 75.676316][ C1] kmem_cache_alloc+0x3d/0x290 [ 75.680895][ C0] smp_call_function_many_cond+0x7d9/0xd70 [ 75.685650][ C1] getname_flags+0xb5/0x500 [ 75.691212][ C0] ? text_poke_sync+0x20/0x20 [ 75.696661][ C1] do_sys_openat2+0xcf/0x4a0 [ 75.701767][ C0] ? smp_call_function_many+0x30/0x30 [ 75.707294][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 75.712472][ C0] ? enqueue_hrtimer+0x30/0x370 [ 75.717477][ C1] ? do_sys_open+0xe0/0xe0 [ 75.723868][ C0] ? text_poke+0x90/0x90 [ 75.731568][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 75.737364][ C0] ? arch_jump_label_transform_apply+0xe/0x20 [ 75.742039][ C1] ? lock_chain_count+0x20/0x20 [ 75.747841][ C0] ? text_poke_sync+0x20/0x20 [ 75.753497][ C1] ? vtime_user_exit+0x2dc/0x400 [ 75.759303][ C0] on_each_cpu_cond_mask+0x3b/0x80 [ 75.765702][ C1] __x64_sys_openat+0x135/0x160 [ 75.771327][ C0] ? enqueue_hrtimer+0x30/0x370 [ 75.777466][ C1] do_syscall_64+0x4c/0xa0 [ 75.782731][ C0] text_poke_bp_batch+0x2a9/0x7c0 [ 75.788021][ C1] ? clear_bhb_loop+0x30/0x80 [ 75.793467][ C0] ? mutex_unlock+0x10/0x10 [ 75.798666][ C1] ? clear_bhb_loop+0x30/0x80 [ 75.804209][ C0] ? text_poke_loc_init+0x570/0x570 [ 75.810535][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.815371][ C0] ? arch_jump_label_transform_queue+0x76/0xd0 [ 75.820393][ C1] RIP: 0033:0x7f6e4bb60407 [ 75.825579][ C0] ? __jump_label_update+0x36c/0x390 [ 75.830415][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 75.835249][ C0] text_poke_finish+0x16/0x30 [ 75.840266][ C1] RSP: 002b:00007ffca80c2360 EFLAGS: 00000202 [ 75.846668][ C0] arch_jump_label_transform_apply+0x13/0x20 [ 75.854283][ C1] ORIG_RAX: 0000000000000101 [ 75.859985][ C0] static_key_enable_cpuslocked+0x11f/0x240 [ 75.866039][ C1] RAX: ffffffffffffffda RBX: 00007f6e4ba72880 RCX: 00007f6e4bb60407 [ 75.871320][ C0] ? __bpf_trace_hrtimer_init+0x30/0x30 [ 75.876328][ C1] RDX: 0000000000080000 RSI: 00007ffca80c24e0 RDI: ffffffffffffff9c [ 75.880814][ C0] static_key_enable+0x16/0x20 [ 75.886167][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 75.891789][ C0] tracepoint_add_func+0x83b/0x9a0 [ 75.896793][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055cb75d837f5 [ 75.901807][ C0] ? __bpf_trace_hrtimer_init+0x30/0x30 [ 75.908200][ C1] R13: 000055cb75d837f5 R14: 0000000000000001 R15: 00007ffca80c6b30 [ 75.915637][ C0] tracepoint_probe_register_prio_may_exist+0x5c/0x90 [ 75.921022][ C1] [ 75.926020][ C0] ? __bpf_trace_hrtimer_init+0x30/0x30 [ 75.932302][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.937312][ C0] bpf_raw_tracepoint_open+0x69d/0x780 [ 75.941801][ C1] CPU: 1 PID: 3561 Comm: udevd Not tainted syzkaller #0 [ 75.946648][ C0] ? bpf_obj_get_info_by_fd+0x2a80/0x2a80 [ 75.951218][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.955711][ C0] ? __might_fault+0xb3/0x110 [ 75.960565][ C1] Call Trace: [ 75.965312][ C0] ? bpf_lsm_bpf+0x5/0x10 [ 75.970325][ C1] [ 75.975686][ C0] ? security_bpf+0x7a/0xa0 [ 75.981651][ C1] dump_stack_lvl+0x168/0x230 [ 75.987147][ C0] __sys_bpf+0x48b/0x670 [ 75.993387][ C1] ? show_regs_print_info+0x20/0x20 [ 75.998660][ C0] ? bpf_link_show_fdinfo+0x340/0x340 [ 76.003925][ C1] ? load_image+0x3b0/0x3b0 [ 76.009661][ C0] ? vtime_user_exit+0x2dc/0x400 [ 76.015101][ C1] panic+0x2c9/0x7f0 [ 76.021582][ C0] __x64_sys_bpf+0x78/0x90 [ 76.027721][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 76.034293][ C0] do_syscall_64+0x4c/0xa0 [ 76.039819][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 76.044908][ C0] ? clear_bhb_loop+0x30/0x80 [ 76.050360][ C1] __warn+0x248/0x2b0 [ 76.055625][ C0] ? clear_bhb_loop+0x30/0x80 [ 76.060807][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 76.065991][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.071374][ C1] report_bug+0x1b7/0x2e0 [ 76.076395][ C0] RIP: 0033:0x7f317d76cbe9 [ 76.082791][ C1] handle_bug+0x3a/0x70 [ 76.093008][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.106851][ C1] exc_invalid_op+0x16/0x40 [ 76.114290][ C0] RSP: 002b:00007ffc87c7c148 EFLAGS: 00000246 [ 76.119663][ C1] asm_exc_invalid_op+0x16/0x20 [ 76.125021][ C0] ORIG_RAX: 0000000000000141 [ 76.129907][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 76.137531][ C0] RAX: ffffffffffffffda RBX: 00007f317d9a3fa0 RCX: 00007f317d76cbe9 [ 76.144889][ C1] Code: 24 45 31 f6 31 ff 89 de e8 ed f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 70 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 76.149118][ C0] RDX: 0000000000000010 RSI: 0000200000000bc0 RDI: 0000000000000011 [ 76.157560][ C1] RSP: 0018:ffffc90000dd0ba0 EFLAGS: 00010006 [ 76.162223][ C0] RBP: 00007f317d7efe19 R08: 0000000000000000 R09: 0000000000000000 [ 76.162236][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.172538][ C1] [ 76.172545][ C1] RAX: ffffffff819ed740 RBX: 0000000000000008 RCX: ffff88807cd01dc0 [ 76.181800][ C0] R13: 00007f317d9a3fa0 R14: 00007f317d9a3fa0 R15: 0000000000000003 [ 76.187684][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.194721][ C0] [ 76.204756][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff7619 [ 76.208028][ C0] irq event stamp: 1686 [ 76.210861][ C1] R10: fffffbfff1ff7619 R11: 1ffffffff1ff7618 R12: ffff88807cd03548 [ 76.215529][ C0] hardirqs last enabled at (1685): [] __text_poke+0x616/0x7b0 [ 76.220117][ C1] R13: dffffc0000000000 R14: ffffc90000dd0c08 R15: 0000000000000000 [ 76.225322][ C0] hardirqs last disabled at (1686): [] sysvec_apic_timer_interrupt+0xa/0xc0 [ 76.230513][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 76.235530][ C0] softirqs last enabled at (1640): [] bpf_link_prime+0x75/0x270 [ 76.240547][ C1] bpf_probe_read_user+0x26/0x70 [ 76.245374][ C0] softirqs last disabled at (1638): [] bpf_link_prime+0x48/0x270 [ 76.249866][ C1] bpf_prog_02073d59a3c0f06f+0x3d/0x458 [ 76.254174][ C0] ---[ end trace a6a377ecfb67f3e7 ]--- [ 76.258580][ C1] bpf_trace_run2+0x15b/0x2d0 [ 78.048447][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 78.053316][ C1] ? enqueue_hrtimer+0x259/0x370 [ 78.058260][ C1] enqueue_hrtimer+0x314/0x370 [ 78.063311][ C1] __hrtimer_run_queues+0x65a/0xc40 [ 78.068527][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 78.074071][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 78.079351][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 78.085415][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 78.090452][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 78.096444][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 78.102097][ C1] [ 78.105024][ C1] [ 78.107962][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 78.114172][ C1] RIP: 0010:lock_is_held_type+0x13a/0x190 [ 78.119994][ C1] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 78.139688][ C1] RSP: 0018:ffffc900012dfb98 EFLAGS: 00000206 [ 78.145776][ C1] RAX: d3b510027ebaa800 RBX: ffff88807cd01dc0 RCX: d3b510027ebaa800 [ 78.153750][ C1] RDX: 0000000000000000 RSI: ffffffff8a0b28c0 RDI: ffffffff8a59a240 [ 78.161823][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad31be [ 78.169799][ C1] R10: fffffbfff1ad31be R11: 1ffffffff1ad31bd R12: dffffc0000000000 [ 78.177782][ C1] R13: 0000000000000246 R14: ffffffff8c11c520 R15: 00000000ffffffff [ 78.185873][ C1] ___might_sleep+0xf2/0x600 [ 78.190467][ C1] ? slab_pre_alloc_hook+0x27/0xc0 [ 78.195573][ C1] ? __might_sleep+0xf0/0xf0 [ 78.200157][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 78.205180][ C1] slab_pre_alloc_hook+0x42/0xc0 [ 78.210120][ C1] ? getname_flags+0xb5/0x500 [ 78.214792][ C1] kmem_cache_alloc+0x3d/0x290 [ 78.219550][ C1] getname_flags+0xb5/0x500 [ 78.224068][ C1] do_sys_openat2+0xcf/0x4a0 [ 78.228654][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 78.233846][ C1] ? do_sys_open+0xe0/0xe0 [ 78.238257][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 78.244239][ C1] ? lock_chain_count+0x20/0x20 [ 78.249094][ C1] ? vtime_user_exit+0x2dc/0x400 [ 78.254066][ C1] __x64_sys_openat+0x135/0x160 [ 78.258914][ C1] do_syscall_64+0x4c/0xa0 [ 78.263323][ C1] ? clear_bhb_loop+0x30/0x80 [ 78.268082][ C1] ? clear_bhb_loop+0x30/0x80 [ 78.272968][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.278980][ C1] RIP: 0033:0x7f6e4bb60407 [ 78.283392][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 78.303005][ C1] RSP: 002b:00007ffca80c2360 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 78.311437][ C1] RAX: ffffffffffffffda RBX: 00007f6e4ba72880 RCX: 00007f6e4bb60407 [ 78.319504][ C1] RDX: 0000000000080000 RSI: 00007ffca80c24e0 RDI: ffffffffffffff9c [ 78.327470][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 78.335434][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055cb75d837f5 [ 78.343527][ C1] R13: 000055cb75d837f5 R14: 0000000000000001 R15: 00007ffca80c6b30 [ 78.351508][ C1] [ 78.354706][ C1] Kernel Offset: disabled [ 78.359033][ C1] Rebooting in 86400 seconds..