Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts. 2026/04/10 16:45:45 parsed 1 programs [ 97.238173][ T4594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 98.968838][ T756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.977050][ T756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.988981][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.007943][ T756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.016007][ T756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.024602][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.393025][ T4625] chnl_net:caif_netlink_parms(): no params data found [ 99.460463][ T4625] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.469412][ T4625] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.477821][ T4625] device bridge_slave_0 entered promiscuous mode [ 99.490741][ T4625] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.498218][ T4625] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.512460][ T4625] device bridge_slave_1 entered promiscuous mode [ 99.549097][ T4625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.562828][ T4625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.595840][ T4625] team0: Port device team_slave_0 added [ 99.605095][ T4625] team0: Port device team_slave_1 added [ 99.632728][ T4625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.639792][ T4625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.666349][ T4625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.679049][ T4625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.686121][ T4625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.713137][ T4625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.753745][ T4625] device hsr_slave_0 entered promiscuous mode [ 99.767008][ T4625] device hsr_slave_1 entered promiscuous mode [ 100.432703][ T4625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.461557][ T4625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.482459][ T4625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.499971][ T4625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.641773][ T4625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.670658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.689220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.712158][ T4625] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.724298][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.737142][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.746007][ T756] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.753207][ T756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.786147][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.795532][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.806425][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.817459][ T756] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.824887][ T756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.835903][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.866590][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.888192][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.900604][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.915323][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.929320][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.946405][ T4625] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.959425][ T4625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.973931][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.983055][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.992479][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.003485][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.012852][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.028192][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.220530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.238953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.253078][ T4625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.288971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.300547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.322589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.332447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.343939][ T4625] device veth0_vlan entered promiscuous mode [ 101.352510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.361797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.376016][ T4625] device veth1_vlan entered promiscuous mode [ 101.405277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.416127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.428346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.439469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.466067][ T4625] device veth0_macvtap entered promiscuous mode [ 101.481971][ T4625] device veth1_macvtap entered promiscuous mode [ 101.521927][ T4625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.532178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.542509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.551195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.560507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.572828][ T4625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.582737][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.592297][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.604458][ T4625] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.613793][ T4625] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.623801][ T4625] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.633675][ T4625] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.680818][ T4227] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/04/10 16:45:56 executed programs: 0 [ 105.208149][ T4817] chnl_net:caif_netlink_parms(): no params data found [ 105.275037][ T4817] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.283172][ T4817] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.291928][ T4817] device bridge_slave_0 entered promiscuous mode [ 105.301071][ T4817] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.308713][ T4817] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.317426][ T4817] device bridge_slave_1 entered promiscuous mode [ 105.346562][ T4817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.358937][ T4817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.394343][ T4817] team0: Port device team_slave_0 added [ 105.407359][ T4817] team0: Port device team_slave_1 added [ 105.440708][ T4817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.448285][ T4817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.478499][ T4817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.492347][ T4817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.503177][ T4817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.533205][ T4817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.581383][ T4817] device hsr_slave_0 entered promiscuous mode [ 105.589335][ T4817] device hsr_slave_1 entered promiscuous mode [ 105.596291][ T4817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.607633][ T4817] Cannot create hsr debugfs directory [ 106.854654][ T4227] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.924712][ T4227] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.970062][ T4227] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.107211][ T4254] Bluetooth: hci0: command 0x0409 tx timeout [ 107.890204][ T4817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.901078][ T4817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.913698][ T4817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.961973][ T4817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.094679][ T4817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.115669][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.129485][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.157614][ T4817] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.169177][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.180707][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.191658][ T1461] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.198883][ T1461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.261174][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.270765][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.284847][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.294687][ T1461] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.301982][ T1461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.311142][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.320394][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.329199][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.339832][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.349025][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.358167][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.366908][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.409027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.419854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.428809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.439608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.450828][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.569266][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.578426][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.589532][ T4817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.618870][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.628580][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.646419][ T4227] device hsr_slave_0 left promiscuous mode [ 108.653371][ T4227] device hsr_slave_1 left promiscuous mode [ 108.660526][ T4227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.668478][ T4227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.677991][ T4227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.685655][ T4227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.693742][ T4227] device bridge_slave_1 left promiscuous mode [ 108.701280][ T4227] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.711816][ T4227] device bridge_slave_0 left promiscuous mode [ 108.718419][ T4227] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.730680][ T4227] device veth1_macvtap left promiscuous mode [ 108.737784][ T4227] device veth0_macvtap left promiscuous mode [ 108.744491][ T4227] device veth1_vlan left promiscuous mode [ 108.750532][ T4227] device veth0_vlan left promiscuous mode [ 108.880465][ T4227] team0 (unregistering): Port device team_slave_1 removed [ 108.893714][ T4227] team0 (unregistering): Port device team_slave_0 removed [ 108.905688][ T4227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.919946][ T4227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.974097][ T4227] bond0 (unregistering): Released all slaves [ 109.050241][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.059640][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.068626][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.076429][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.088002][ T4817] device veth0_vlan entered promiscuous mode [ 109.100484][ T4817] device veth1_vlan entered promiscuous mode [ 109.118315][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.129983][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.146362][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.156564][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.168280][ T4817] device veth0_macvtap entered promiscuous mode [ 109.180014][ T4817] device veth1_macvtap entered promiscuous mode [ 109.197935][ T4255] Bluetooth: hci0: command 0x041b tx timeout [ 109.210187][ T4817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.218690][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.228414][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.236285][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.245284][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.256336][ T4817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.264534][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.273622][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.285743][ T4817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.296162][ T4817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.305850][ T4817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.315606][ T4817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.388138][ T1461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.396278][ T1461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.406071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.434366][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.442586][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.450589][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.886742][ C1] ------------[ cut here ]------------ [ 109.886742][ C0] ------------[ cut here ]------------ [ 109.887804][ C0] WARNING: CPU: 0 PID: 4636 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 109.887844][ C0] Modules linked in: [ 109.887860][ C0] CPU: 0 PID: 4636 Comm: udevd Not tainted syzkaller #0 [ 109.887877][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 109.887888][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 109.887910][ C0] Code: 24 45 31 f6 31 ff 89 de e8 fd 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 80 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 109.887925][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010006 [ 109.887940][ C0] RAX: ffffffff81a08f90 RBX: 0000000000000008 RCX: ffff88805b1c3b80 [ 109.887986][ C0] [ 109.887989][ C0] ====================================================== [ 109.887993][ C0] WARNING: possible circular locking dependency detected [ 109.887997][ C0] syzkaller #0 Not tainted [ 109.888003][ C0] ------------------------------------------------------ [ 109.888007][ C0] udevd/4636 is trying to acquire lock: [ 109.888014][ C0] ffffffff8c313500 (console_owner){-...}-{0:0}, at: console_trylock_spinning+0x15c/0x370 [ 109.888060][ C0] [ 109.888060][ C0] but task is already holding lock: [ 109.888064][ C0] ffff8880b902a258 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x5a9/0xb70 [ 109.888099][ C0] [ 109.888099][ C0] which lock already depends on the new lock. [ 109.888099][ C0] [ 109.888103][ C0] [ 109.888103][ C0] the existing dependency chain (in reverse order) is: [ 109.888107][ C0] [ 109.888107][ C0] -> #6 (hrtimer_bases.lock){-.-.}-{2:2}: [ 109.888135][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 109.888149][ C0] hrtimer_start_range_ns+0xff/0xc20 [ 109.888164][ C0] enqueue_task_rt+0x627/0xc80 [ 109.888186][ C0] enqueue_task+0x182/0x2b0 [ 109.888201][ C0] ttwu_do_activate+0x1b7/0x370 [ 109.888214][ C0] sched_ttwu_pending+0x292/0x610 [ 109.888228][ C0] __sysvec_call_function_single+0x98/0x240 [ 109.888244][ C0] sysvec_call_function_single+0x98/0xc0 [ 109.888261][ C0] asm_sysvec_call_function_single+0x16/0x20 [ 109.888282][ C0] default_idle+0xb/0x10 [ 109.888300][ C0] default_idle_call+0x81/0xc0 [ 109.888311][ C0] do_idle+0x21f/0x580 [ 109.888331][ C0] cpu_startup_entry+0x14/0x20 [ 109.888344][ C0] start_secondary+0x330/0x430 [ 109.888358][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 109.888373][ C0] [ 109.888373][ C0] -> #5 (&rt_b->rt_runtime_lock){-.-.}-{2:2}: [ 109.888393][ C0] _raw_spin_lock+0x2a/0x40 [ 109.888404][ C0] rq_online_rt+0x132/0x320 [ 109.888416][ C0] sched_cpu_activate+0x4ca/0x660 [ 109.888428][ C0] cpuhp_invoke_callback+0x431/0x830 [ 109.888445][ C0] cpuhp_thread_fun+0x3b5/0x7e0 [ 109.888458][ C0] smpboot_thread_fn+0x4f6/0x970 [ 109.888474][ C0] kthread+0x436/0x520 [ 109.888485][ C0] ret_from_fork+0x1f/0x30 [ 109.888497][ C0] [ 109.888497][ C0] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 109.888516][ C0] _raw_spin_lock_nested+0x2e/0x40 [ 109.888528][ C0] raw_spin_rq_lock_nested+0x26/0x140 [ 109.888542][ C0] task_fork_fair+0x5c/0x350 [ 109.888553][ C0] sched_cgroup_fork+0x2c6/0x320 [ 109.888566][ C0] copy_process+0x22f6/0x3e20 [ 109.888579][ C0] kernel_clone+0x23f/0x990 [ 109.888597][ C0] kernel_thread+0xfa/0x160 [ 109.888609][ C0] rest_init+0x21/0x330 [ 109.888622][ C0] start_kernel+0x489/0x540 [ 109.888636][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 109.888650][ C0] [ 109.888650][ C0] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 109.888669][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 109.888681][ C0] try_to_wake_up+0x5c/0x1050 [ 109.888694][ C0] __wake_up_common+0x2a4/0x4e0 [ 109.888708][ C0] __wake_up+0x10e/0x180 [ 109.888720][ C0] tty_port_default_wakeup+0xa5/0xf0 [ 109.888737][ C0] serial8250_tx_chars+0x629/0x830 [ 109.888752][ C0] serial8250_handle_irq+0x519/0x610 [ 109.888765][ C0] serial8250_default_handle_irq+0xb4/0x1a0 [ 109.888780][ C0] serial8250_interrupt+0x9b/0x1c0 [ 109.888793][ C0] __handle_irq_event_percpu+0x299/0x9d0 [ 109.888807][ C0] handle_irq_event+0xa5/0x220 [ 109.888820][ C0] handle_edge_irq+0x243/0xb20 [ 109.888834][ C0] __common_interrupt+0xd7/0x1e0 [ 109.888848][ C0] common_interrupt+0xb0/0xd0 [ 109.888861][ C0] asm_common_interrupt+0x22/0x40 [ 109.888873][ C0] __up_read+0x27c/0x6b0 [ 109.888886][ C0] validate_mm+0x120/0x950 [ 109.888900][ C0] mmap_region+0x1405/0x1650 [ 109.888913][ C0] do_mmap+0x819/0xe90 [ 109.888925][ C0] vm_mmap_pgoff+0x1c1/0x2d0 [ 109.888938][ C0] ksys_mmap_pgoff+0x140/0x790 [ 109.888950][ C0] do_syscall_64+0x4c/0xa0 [ 109.888962][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.888975][ C0] [ 109.888975][ C0] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 109.888994][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 109.889006][ C0] __wake_up+0xf4/0x180 [ 109.889018][ C0] tty_port_default_wakeup+0xa5/0xf0 [ 109.889031][ C0] serial8250_tx_chars+0x629/0x830 [ 109.889045][ C0] serial8250_handle_irq+0x519/0x610 [ 109.889059][ C0] serial8250_default_handle_irq+0xb4/0x1a0 [ 109.889073][ C0] serial8250_interrupt+0x9b/0x1c0 [ 109.889087][ C0] __handle_irq_event_percpu+0x299/0x9d0 [ 109.889100][ C0] handle_irq_event+0xa5/0x220 [ 109.889112][ C0] handle_edge_irq+0x243/0xb20 [ 109.889125][ C0] __common_interrupt+0xd7/0x1e0 [ 109.889137][ C0] common_interrupt+0xb0/0xd0 [ 109.889149][ C0] asm_common_interrupt+0x22/0x40 [ 109.889161][ C0] default_idle+0xb/0x10 [ 109.889172][ C0] default_idle_call+0x81/0xc0 [ 109.889183][ C0] do_idle+0x21f/0x580 [ 109.889195][ C0] cpu_startup_entry+0x14/0x20 [ 109.889208][ C0] start_kernel+0x489/0x540 [ 109.889220][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 109.889233][ C0] [ 109.889233][ C0] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 109.889252][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 109.889264][ C0] serial8250_console_write+0x178/0x1000 [ 109.889278][ C0] console_unlock+0xb9a/0x1120 [ 109.889289][ C0] vprintk_emit+0xc0/0x150 [ 109.889300][ C0] _printk+0xda/0x130 [ 109.889311][ C0] register_console+0x699/0x980 [ 109.889323][ C0] univ8250_console_init+0x41/0x50 [ 109.889336][ C0] console_init+0x177/0x5d0 [ 109.889351][ C0] start_kernel+0x2fc/0x540 [ 109.889362][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 109.889375][ C0] [ 109.889375][ C0] -> #0 (console_owner){-...}-{0:0}: [ 109.889393][ C0] __lock_acquire+0x2c42/0x7d10 [ 109.889407][ C0] lock_acquire+0x19e/0x400 [ 109.889421][ C0] console_trylock_spinning+0x17c/0x370 [ 109.889432][ C0] vprintk_emit+0xa7/0x150 [ 109.889443][ C0] _printk+0xda/0x130 [ 109.889453][ C0] __show_regs+0xcb/0x500 [ 109.889466][ C0] show_regs+0x32/0x60 [ 109.889478][ C0] __warn+0x15e/0x2b0 [ 109.889491][ C0] report_bug+0x1b7/0x2e0 [ 109.889505][ C0] handle_bug+0x3a/0x70 [ 109.889517][ C0] exc_invalid_op+0x16/0x40 [ 109.889529][ C0] asm_exc_invalid_op+0x16/0x20 [ 109.889541][ C0] copy_from_user_nofault+0x160/0x1c0 [ 109.889555][ C0] bpf_probe_read_compat+0xdd/0x170 [ 109.889569][ C0] bpf_prog_63d51858d7cca270+0x3d/0xb64 [ 109.889582][ C0] bpf_trace_run2+0x163/0x2e0 [ 109.889600][ C0] enqueue_hrtimer+0x314/0x370 [ 109.889614][ C0] __hrtimer_run_queues+0x5fa/0xb70 [ 109.889628][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 109.889642][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 109.889654][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 109.889668][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 109.889682][ C0] debug_check_no_locks_freed+0x229/0x3e0 [ 109.889694][ C0] slab_free_freelist_hook+0x76/0x170 [ 109.889707][ C0] kmem_cache_free+0x8f/0x210 [ 109.889719][ C0] do_renameat2+0xe38/0xf60 [ 109.889732][ C0] __x64_sys_rename+0x82/0x90 [ 109.889745][ C0] do_syscall_64+0x4c/0xa0 [ 109.889757][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.889770][ C0] [ 109.889770][ C0] other info that might help us debug this: [ 109.889770][ C0] [ 109.889774][ C0] Chain exists of: [ 109.889774][ C0] console_owner --> &rt_b->rt_runtime_lock --> hrtimer_bases.lock [ 109.889774][ C0] [ 109.889796][ C0] Possible unsafe locking scenario: [ 109.889796][ C0] [ 109.889799][ C0] CPU0 CPU1 [ 109.889803][ C0] ---- ---- [ 109.889806][ C0] lock(hrtimer_bases.lock); [ 109.889814][ C0] lock(&rt_b->rt_runtime_lock); [ 109.889824][ C0] lock(hrtimer_bases.lock); [ 109.889833][ C0] lock(console_owner); [ 109.889841][ C0] [ 109.889841][ C0] *** DEADLOCK *** [ 109.889841][ C0] [ 109.889844][ C0] 2 locks held by udevd/4636: [ 109.889853][ C0] #0: ffff8880b902a258 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x5a9/0xb70 [ 109.889888][ C0] #1: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 109.889920][ C0] [ 109.889920][ C0] stack backtrace: [ 109.889924][ C0] CPU: 0 PID: 4636 Comm: udevd Not tainted syzkaller #0 [ 109.889938][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 109.889945][ C0] Call Trace: [ 109.889950][ C0] [ 109.889956][ C0] dump_stack_lvl+0x188/0x250 [ 109.889971][ C0] ? load_image+0x400/0x400 [ 109.889984][ C0] ? show_regs_print_info+0x20/0x20 [ 109.890003][ C0] ? print_circular_bug+0x12b/0x1a0 [ 109.890018][ C0] check_noncircular+0x296/0x330 [ 109.890033][ C0] ? add_chain_block+0x940/0x940 [ 109.890046][ C0] ? lockdep_lock+0x15c/0x1f0 [ 109.890063][ C0] ? mark_lock+0x94/0x320 [ 109.890076][ C0] __lock_acquire+0x2c42/0x7d10 [ 109.890098][ C0] ? down_trylock+0x4c/0xa0 [ 109.890112][ C0] ? verify_lock_unused+0x140/0x140 [ 109.890128][ C0] ? verify_lock_unused+0x140/0x140 [ 109.890144][ C0] ? __rwlock_init+0x140/0x140 [ 109.890158][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 109.890173][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 109.890187][ C0] ? _raw_spin_unlock+0x40/0x40 [ 109.890202][ C0] lock_acquire+0x19e/0x400 [ 109.890217][ C0] ? console_trylock_spinning+0x15c/0x370 [ 109.890230][ C0] ? console_trylock_spinning+0x15c/0x370 [ 109.890245][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 109.890260][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 109.890273][ C0] ? read_lock_is_recursive+0x10/0x10 [ 109.890289][ C0] ? __rwlock_init+0x140/0x140 [ 109.890301][ C0] ? console_trylock_spinning+0x269/0x370 [ 109.890315][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 109.890329][ C0] console_trylock_spinning+0x17c/0x370 [ 109.890342][ C0] ? console_trylock_spinning+0x15c/0x370 [ 109.890355][ C0] ? vprintk_emit+0x150/0x150 [ 109.890369][ C0] ? vprintk_emit+0xf9/0x150 [ 109.890382][ C0] ? irq_work_queue+0xbf/0x140 [ 109.890399][ C0] vprintk_emit+0xa7/0x150 [ 109.890413][ C0] _printk+0xda/0x130 [ 109.890425][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 109.890441][ C0] ? load_image+0x400/0x400 [ 109.890454][ C0] ? show_opcodes+0xf6/0x120 [ 109.890470][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 109.890484][ C0] __show_regs+0xcb/0x500 [ 109.890499][ C0] ? dump_stack_print_info+0xf1/0x150 [ 109.890514][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 109.890529][ C0] show_regs+0x32/0x60 [ 109.890542][ C0] __warn+0x15e/0x2b0 [ 109.890558][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 109.890573][ C0] report_bug+0x1b7/0x2e0 [ 109.890597][ C0] handle_bug+0x3a/0x70 [ 109.890610][ C0] exc_invalid_op+0x16/0x40 [ 109.890624][ C0] asm_exc_invalid_op+0x16/0x20 [ 109.890637][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 109.890653][ C0] Code: 24 45 31 f6 31 ff 89 de e8 fd 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 80 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 109.890664][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010006 [ 109.890676][ C0] RAX: ffffffff81a08f90 RBX: 0000000000000008 RCX: ffff88805b1c3b80 [ 109.890686][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.890695][ C0] RBP: 0000000000000000 R08: ffff88805b1c3b87 R09: 1ffff1100b638770 [ 109.890704][ C0] R10: dffffc0000000000 R11: ffffed100b638771 R12: ffff88805b1c5308 [ 109.890714][ C0] R13: 00007ffffffff000 R14: ffffc90000007c28 R15: 0000000020000000 [ 109.890727][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 109.890745][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 109.890760][ C0] bpf_probe_read_compat+0xdd/0x170 [ 109.890777][ C0] bpf_prog_63d51858d7cca270+0x3d/0xb64 [ 109.890790][ C0] bpf_trace_run2+0x163/0x2e0 [ 109.890802][ C0] ? posix_cpu_timers_work+0x1170/0x1170 [ 109.890819][ C0] ? bpf_trace_run1+0x2e0/0x2e0 [ 109.890835][ C0] enqueue_hrtimer+0x314/0x370 [ 109.890851][ C0] __hrtimer_run_queues+0x5fa/0xb70 [ 109.890872][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 109.890888][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 109.890905][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 109.890927][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 109.890942][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 109.890957][ C0] [ 109.890961][ C0] [ 109.890965][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 109.890980][ C0] RIP: 0010:debug_check_no_locks_freed+0x229/0x3e0 [ 109.890994][ C0] Code: 44 24 60 f7 44 24 60 00 02 00 00 c6 44 13 04 f8 0f 85 fb 00 00 00 f7 44 24 30 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <48> c7 04 13 00 00 00 00 c7 44 13 08 00 00 00 00 65 48 8b 04 25 28 [ 109.891004][ C0] RSP: 0018:ffffc9000320fb80 EFLAGS: 00000206 [ 109.891015][ C0] RAX: 0000000000000000 RBX: 1ffff92000641f78 RCX: ffffc9000320fce4 [ 109.891025][ C0] RDX: dffffc0000000000 RSI: 0000000000001000 RDI: ffff88807a461100 [ 109.891035][ C0] RBP: ffffc9000320fc78 R08: ffffffff8d89e36f R09: 1ffffffff1b13c6d [ 109.891045][ C0] R10: dffffc0000000000 R11: fffffbfff1b13c6e R12: ffff888140007500 [ 109.891055][ C0] R13: 1ffff1100b6388cd R14: ffff88805b1c3b80 R15: ffff88807a461100 [ 109.891072][ C0] ? free_zapped_rcu+0x1f0/0x1f0 [ 109.891089][ C0] slab_free_freelist_hook+0x76/0x170 [ 109.891104][ C0] ? do_renameat2+0xe38/0xf60 [ 109.891119][ C0] kmem_cache_free+0x8f/0x210 [ 109.891134][ C0] do_renameat2+0xe38/0xf60 [ 109.891152][ C0] ? fsnotify_move+0x4e0/0x4e0 [ 109.891167][ C0] ? __phys_addr_symbol+0x2b/0x70 [ 109.891185][ C0] ? getname_flags+0x1fe/0x500 [ 109.891200][ C0] __x64_sys_rename+0x82/0x90 [ 109.891215][ C0] do_syscall_64+0x4c/0xa0 [ 109.891228][ C0] ? clear_bhb_loop+0x30/0x80 [ 109.891242][ C0] ? clear_bhb_loop+0x30/0x80 [ 109.891255][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.891269][ C0] RIP: 0033:0x7f6a87ef0cc7 [ 109.891282][ C0] Code: e8 5e a7 09 00 f7 d8 19 c0 5b c3 0f 1f 84 00 00 00 00 00 b8 ff ff ff ff 5b c3 66 0f 1f 84 00 00 00 00 00 b8 52 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 01 61 17 00 f7 d8 64 89 02 b8 [ 109.891292][ C0] RSP: 002b:00007ffcba3f34e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000052 [ 109.891306][ C0] RAX: ffffffffffffffda RBX: 0000555defc908a0 RCX: 00007f6a87ef0cc7 [ 109.891316][ C0] RDX: 0000555defc69010 RSI: 00007ffcba3f3500 RDI: 00007ffcba3f3900 [ 109.891326][ C0] RBP: 0000555defc7cad0 R08: 00000000000001e0 R09: 0000000000000000 [ 109.891341][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffcba3f3500 [ 109.891350][ C0] R13: 00007ffcba3f3900 R14: 0000000000000000 R15: 0000555dddcb79dd [ 109.891364][ C0] [ 109.893555][ C1] WARNING: CPU: 1 PID: 4227 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 109.899148][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.908937][ C1] Modules linked in: [ 109.912827][ C0] RBP: 0000000000000000 R08: ffff88805b1c3b87 R09: 1ffff1100b638770 [ 109.919851][ C1] CPU: 1 PID: 4227 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 109.930202][ C0] R10: dffffc0000000000 R11: ffffed100b638771 R12: ffff88805b1c5308 [ 109.936506][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 109.956282][ C0] R13: 00007ffffffff000 R14: ffffc90000007c28 R15: 0000000020000000 [ 109.962514][ C1] Workqueue: netns cleanup_net [ 109.970559][ C0] FS: 00007f6a87e2f880(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 109.973000][ C1] [ 109.973007][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 109.980192][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.987628][ C1] Code: 24 45 31 f6 31 ff 89 de e8 fd 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 80 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 109.992154][ C0] CR2: 00007f636d3809e8 CR3: 000000007f139000 CR4: 00000000003506f0 [ 109.999621][ C1] RSP: 0018:ffffc90000dd0bb8 EFLAGS: 00010006 [ 110.005181][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 110.015179][ C1] [ 110.015193][ C1] RAX: ffffffff81a08f90 RBX: 0000000000000008 RCX: ffff88807bddd940 [ 110.022844][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 110.033349][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.043913][ C0] Call Trace: [ 110.043933][ C0] [ 110.053413][ C1] RBP: 0000000000000000 R08: ffff88807bddd947 R09: 1ffff1100f7bbb28 [ 110.061898][ C0] bpf_probe_read_compat+0xdd/0x170 [ 110.067714][ C1] R10: dffffc0000000000 R11: ffffed100f7bbb29 R12: ffff88807bddf0c8 [ 110.073621][ C0] bpf_prog_63d51858d7cca270+0x3d/0xb64 [ 110.079182][ C1] R13: 00007ffffffff000 R14: ffffc90000dd0c28 R15: 0000000020000000 [ 110.084401][ C0] bpf_trace_run2+0x163/0x2e0 [ 110.089759][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 110.095293][ C0] ? posix_cpu_timers_work+0x1170/0x1170 [ 110.101789][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.108055][ C0] ? bpf_trace_run1+0x2e0/0x2e0 [ 110.114645][ C1] CR2: 0000001b30c5ffff CR3: 000000007f3ac000 CR4: 00000000003506e0 [ 110.119534][ C0] enqueue_hrtimer+0x314/0x370 [ 110.124902][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 110.129602][ C0] __hrtimer_run_queues+0x5fa/0xb70 [ 110.135074][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 110.140472][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 110.146969][ C1] Call Trace: [ 110.155363][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 110.160395][ C1] [ 110.165417][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 110.171048][ C1] bpf_probe_read_compat+0xdd/0x170 [ 110.176958][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 110.182467][ C1] bpf_prog_63d51858d7cca270+0x3d/0xb64 [ 110.187927][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 110.192502][ C1] bpf_trace_run2+0x163/0x2e0 [ 110.197461][ C0] [ 110.205000][ C1] ? posix_cpu_timers_work+0x1170/0x1170 [ 110.210881][ C0] [ 110.210889][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 110.217037][ C1] ? bpf_trace_run1+0x2e0/0x2e0 [ 110.222144][ C0] RIP: 0010:debug_check_no_locks_freed+0x229/0x3e0 [ 110.227597][ C1] enqueue_hrtimer+0x314/0x370 [ 110.233059][ C0] Code: 44 24 60 f7 44 24 60 00 02 00 00 c6 44 13 04 f8 0f 85 fb 00 00 00 f7 44 24 30 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <48> c7 04 13 00 00 00 00 c7 44 13 08 00 00 00 00 65 48 8b 04 25 28 [ 110.238363][ C1] __hrtimer_run_queues+0x5fa/0xb70 [ 110.243499][ C0] RSP: 0018:ffffc9000320fb80 EFLAGS: 00000206 [ 110.248274][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 110.253467][ C0] [ 110.260143][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 110.267503][ C0] RAX: 0000000000000000 RBX: 1ffff92000641f78 RCX: ffffc9000320fce4 [ 110.273500][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 110.278854][ C0] RDX: dffffc0000000000 RSI: 0000000000001000 RDI: ffff88807a461100 [ 110.284224][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 110.289068][ C0] RBP: ffffc9000320fc78 R08: ffffffff8d89e36f R09: 1ffffffff1b13c6d [ 110.295215][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 110.300948][ C0] R10: dffffc0000000000 R11: fffffbfff1b13c6e R12: ffff888140007500 [ 110.307126][ C1] [ 110.313911][ C0] R13: 1ffff1100b6388cd R14: ffff88805b1c3b80 R15: ffff88807a461100 [ 110.319790][ C1] [ 110.319809][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 110.326075][ C0] ? free_zapped_rcu+0x1f0/0x1f0 [ 110.331367][ C1] RIP: 0010:lock_acquire+0x208/0x400 [ 110.336662][ C0] slab_free_freelist_hook+0x76/0x170 [ 110.342202][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 110.347482][ C0] ? do_renameat2+0xe38/0xf60 [ 110.353022][ C1] RSP: 0018:ffffc90002f9f900 EFLAGS: 00000206 [ 110.357776][ C0] kmem_cache_free+0x8f/0x210 [ 110.362785][ C1] [ 110.368362][ C0] do_renameat2+0xe38/0xf60 [ 110.372933][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: c84c21992017c800 [ 110.378132][ C0] ? fsnotify_move+0x4e0/0x4e0 [ 110.383408][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b3a20 RDI: ffffffff8a79f980 [ 110.388361][ C0] ? __phys_addr_symbol+0x2b/0x70 [ 110.394914][ C1] RBP: ffffc90002f9fa20 R08: dffffc0000000000 R09: 1ffffffff203a818 [ 110.402823][ C0] ? getname_flags+0x1fe/0x500 [ 110.409102][ C1] R10: dffffc0000000000 R11: fffffbfff203a819 R12: ffffffff8c31eaa0 [ 110.413806][ C0] __x64_sys_rename+0x82/0x90 [ 110.419604][ C1] R13: 1ffff920005f3f2c R14: 0000000000000246 R15: dffffc0000000000 [ 110.425329][ C0] do_syscall_64+0x4c/0xa0 [ 110.431167][ C1] ? rcu_lock_release+0x5/0x20 [ 110.437722][ C0] ? clear_bhb_loop+0x30/0x80 [ 110.443467][ C1] ? read_lock_is_recursive+0x10/0x10 [ 110.449799][ C0] ? clear_bhb_loop+0x30/0x80 [ 110.455085][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 110.460386][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.465951][ C1] rcu_lock_acquire+0x2a/0x30 [ 110.471492][ C0] RIP: 0033:0x7f6a87ef0cc7 [ 110.477140][ C1] ? rcu_lock_acquire+0x5/0x30 [ 110.482932][ C0] Code: e8 5e a7 09 00 f7 d8 19 c0 5b c3 0f 1f 84 00 00 00 00 00 b8 ff ff ff ff 5b c3 66 0f 1f 84 00 00 00 00 00 b8 52 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 01 61 17 00 f7 d8 64 89 02 b8 [ 110.488629][ C1] inet_twsk_purge+0x119/0x840 [ 110.493336][ C0] RSP: 002b:00007ffcba3f34e8 EFLAGS: 00000202 [ 110.498828][ C1] ? __inet_twsk_schedule+0x130/0x130 [ 110.503931][ C0] ORIG_RAX: 0000000000000052 [ 110.510580][ C1] ? iput+0x706/0x8a0 [ 110.518495][ C0] RAX: ffffffffffffffda RBX: 0000555defc908a0 RCX: 00007f6a87ef0cc7 [ 110.524858][ C1] ? dccp_v6_exit_net+0x80/0x80 [ 110.531284][ C0] RDX: 0000555defc69010 RSI: 00007ffcba3f3500 RDI: 00007ffcba3f3900 [ 110.536688][ C1] cleanup_net+0x791/0xba0 [ 110.541812][ C0] RBP: 0000555defc7cad0 R08: 00000000000001e0 R09: 0000000000000000 [ 110.546583][ C1] ? ops_free_list+0x330/0x330 [ 110.552286][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffcba3f3500 [ 110.557992][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 110.563176][ C0] R13: 00007ffcba3f3900 R14: 0000000000000000 R15: 0000555dddcb79dd [ 110.568199][ C1] ? _raw_spin_unlock+0x40/0x40 [ 110.574618][ C0] [ 110.582146][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 110.587512][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 110.587524][ C0] CPU: 0 PID: 4636 Comm: udevd Not tainted syzkaller #0 [ 110.592618][ C1] process_one_work+0x85f/0x1010 [ 110.598674][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 110.603801][ C1] ? worker_detach_from_pool+0x240/0x240 [ 110.608285][ C0] Call Trace: [ 110.613260][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 110.617851][ C0] [ 110.622531][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 110.627384][ C0] dump_stack_lvl+0x188/0x250 [ 110.632073][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 110.637105][ C0] ? show_regs_print_info+0x20/0x20 [ 110.642725][ C1] ? wq_worker_running+0x97/0x170 [ 110.648710][ C0] ? load_image+0x400/0x400 [ 110.654533][ C1] worker_thread+0xaa6/0x1290 [ 110.660692][ C0] panic+0x2e5/0x810 [ 110.665928][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 110.671412][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 110.677133][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 110.682582][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 110.689345][ C1] kthread+0x436/0x520 [ 110.695858][ C0] __warn+0x248/0x2b0 [ 110.703188][ C1] ? rcu_lock_release+0x20/0x20 [ 110.709444][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 110.715461][ C1] ? kthread_blkcg+0xd0/0xd0 [ 110.720739][ C0] report_bug+0x1b7/0x2e0 [ 110.725938][ C1] ret_from_fork+0x1f/0x30 [ 110.732585][ C0] handle_bug+0x3a/0x70 [ 110.738072][ C1] [ 110.745157][ C0] exc_invalid_op+0x16/0x40 [ 110.756684][ C1] irq event stamp: 1258684 [ 110.771053][ C0] asm_exc_invalid_op+0x16/0x20 [ 110.778513][ C1] hardirqs last enabled at (1258683): [] asm_sysvec_reschedule_ipi+0x16/0x20 [ 110.783896][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 110.789252][ C1] hardirqs last disabled at (1258684): [] sysvec_apic_timer_interrupt+0xa/0xc0 [ 110.793921][ C0] Code: 24 45 31 f6 31 ff 89 de e8 fd 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 80 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 110.801899][ C1] softirqs last enabled at (1258676): [] __irq_exit_rcu+0x13b/0x230 [ 110.809441][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010006 [ 110.813698][ C1] softirqs last disabled at (1258667): [] __irq_exit_rcu+0x13b/0x230 [ 110.822022][ C0] [ 110.822030][ C0] RAX: ffffffff81a08f90 RBX: 0000000000000008 RCX: ffff88805b1c3b80 [ 110.826698][ C1] ---[ end trace 72c3e24054f84e48 ]--- [ 110.837179][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.517502][ C0] RBP: 0000000000000000 R08: ffff88805b1c3b87 R09: 1ffff1100b638770 [ 112.526224][ C0] R10: dffffc0000000000 R11: ffffed100b638771 R12: ffff88805b1c5308 [ 112.534855][ C0] R13: 00007ffffffff000 R14: ffffc90000007c28 R15: 0000000020000000 [ 112.543128][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 112.548881][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 112.555211][ C0] bpf_probe_read_compat+0xdd/0x170 [ 112.561057][ C0] bpf_prog_63d51858d7cca270+0x3d/0xb64 [ 112.566829][ C0] bpf_trace_run2+0x163/0x2e0 [ 112.571938][ C0] ? posix_cpu_timers_work+0x1170/0x1170 [ 112.577716][ C0] ? bpf_trace_run1+0x2e0/0x2e0 [ 112.583257][ C0] enqueue_hrtimer+0x314/0x370 [ 112.588193][ C0] __hrtimer_run_queues+0x5fa/0xb70 [ 112.593830][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 112.599322][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 112.605509][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 112.610544][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 112.616706][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 112.622439][ C0] [ 112.625372][ C0] [ 112.628311][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 112.634389][ C0] RIP: 0010:debug_check_no_locks_freed+0x229/0x3e0 [ 112.641355][ C0] Code: 44 24 60 f7 44 24 60 00 02 00 00 c6 44 13 04 f8 0f 85 fb 00 00 00 f7 44 24 30 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <48> c7 04 13 00 00 00 00 c7 44 13 08 00 00 00 00 65 48 8b 04 25 28 [ 112.661966][ C0] RSP: 0018:ffffc9000320fb80 EFLAGS: 00000206 [ 112.668275][ C0] RAX: 0000000000000000 RBX: 1ffff92000641f78 RCX: ffffc9000320fce4 [ 112.676551][ C0] RDX: dffffc0000000000 RSI: 0000000000001000 RDI: ffff88807a461100 [ 112.684731][ C0] RBP: ffffc9000320fc78 R08: ffffffff8d89e36f R09: 1ffffffff1b13c6d [ 112.692895][ C0] R10: dffffc0000000000 R11: fffffbfff1b13c6e R12: ffff888140007500 [ 112.700887][ C0] R13: 1ffff1100b6388cd R14: ffff88805b1c3b80 R15: ffff88807a461100 [ 112.708872][ C0] ? free_zapped_rcu+0x1f0/0x1f0 [ 112.713834][ C0] slab_free_freelist_hook+0x76/0x170 [ 112.719209][ C0] ? do_renameat2+0xe38/0xf60 [ 112.723887][ C0] kmem_cache_free+0x8f/0x210 [ 112.728656][ C0] do_renameat2+0xe38/0xf60 [ 112.734044][ C0] ? fsnotify_move+0x4e0/0x4e0 [ 112.739547][ C0] ? __phys_addr_symbol+0x2b/0x70 [ 112.744895][ C0] ? getname_flags+0x1fe/0x500 [ 112.749862][ C0] __x64_sys_rename+0x82/0x90 [ 112.755015][ C0] do_syscall_64+0x4c/0xa0 [ 112.759728][ C0] ? clear_bhb_loop+0x30/0x80 [ 112.764965][ C0] ? clear_bhb_loop+0x30/0x80 [ 112.770901][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.777396][ C0] RIP: 0033:0x7f6a87ef0cc7 [ 112.783003][ C0] Code: e8 5e a7 09 00 f7 d8 19 c0 5b c3 0f 1f 84 00 00 00 00 00 b8 ff ff ff ff 5b c3 66 0f 1f 84 00 00 00 00 00 b8 52 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 01 61 17 00 f7 d8 64 89 02 b8 [ 112.805872][ C0] RSP: 002b:00007ffcba3f34e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000052 [ 112.815565][ C0] RAX: ffffffffffffffda RBX: 0000555defc908a0 RCX: 00007f6a87ef0cc7 [ 112.823852][ C0] RDX: 0000555defc69010 RSI: 00007ffcba3f3500 RDI: 00007ffcba3f3900 [ 112.831923][ C0] RBP: 0000555defc7cad0 R08: 00000000000001e0 R09: 0000000000000000 [ 112.840020][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffcba3f3500 [ 112.848081][ C0] R13: 00007ffcba3f3900 R14: 0000000000000000 R15: 0000555dddcb79dd [ 112.856055][ C0] [ 112.859729][ C0] Kernel Offset: disabled [ 112.864081][ C0] Rebooting in 86400 seconds..