[ 76.039810][ T23] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.191' (ED25519) to the list of known hosts. 2023/12/25 02:30:11 ignoring optional flag "sandboxArg"="0" 2023/12/25 02:30:12 parsed 1 programs 2023/12/25 02:30:13 executed programs: 0 [ 81.080233][ T5416] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.131524][ T4462] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.139125][ T4462] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.146561][ T4462] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.155242][ T4462] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.163217][ T4462] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.171004][ T4462] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.283016][ T5423] chnl_net:caif_netlink_parms(): no params data found [ 81.334840][ T5423] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.342123][ T5423] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.349563][ T5423] bridge_slave_0: entered allmulticast mode [ 81.356237][ T5423] bridge_slave_0: entered promiscuous mode [ 81.363994][ T5423] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.371172][ T5423] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.378440][ T5423] bridge_slave_1: entered allmulticast mode [ 81.385141][ T5423] bridge_slave_1: entered promiscuous mode [ 81.410931][ T5423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.422281][ T5423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.450626][ T5423] team0: Port device team_slave_0 added [ 81.458856][ T5423] team0: Port device team_slave_1 added [ 81.481087][ T5423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.488170][ T5423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.514061][ T5423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.525790][ T5423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.532777][ T5423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.558680][ T5423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.593157][ T5423] hsr_slave_0: entered promiscuous mode [ 81.599409][ T5423] hsr_slave_1: entered promiscuous mode [ 82.548336][ T5423] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.560307][ T5423] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.571347][ T5423] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.582558][ T5423] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.684609][ T5423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.707770][ T5423] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.724238][ T919] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.731469][ T919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.754972][ T919] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.762188][ T919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.806460][ T5423] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.819892][ T5423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.976887][ T5423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.030005][ T5423] veth0_vlan: entered promiscuous mode [ 83.043923][ T5423] veth1_vlan: entered promiscuous mode [ 83.083064][ T5423] veth0_macvtap: entered promiscuous mode [ 83.093965][ T5423] veth1_macvtap: entered promiscuous mode [ 83.116512][ T5423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.132529][ T5423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.146340][ T5423] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.156409][ T5423] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.167271][ T5423] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.177148][ T5423] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.238839][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 83.260383][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.273417][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.302202][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.313193][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.443495][ T5503] loop0: detected capacity change from 0 to 8192 [ 83.456480][ T5503] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.471312][ T5503] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 83.481489][ T5503] REISERFS (device loop0): using ordered data mode [ 83.489470][ T5503] reiserfs: using flush barriers [ 83.496742][ T5503] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.515739][ T5503] REISERFS (device loop0): checking transaction log (loop0) [ 83.586447][ T5503] REISERFS (device loop0): Using r5 hash to sort names [ 83.595992][ T5503] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 83.619550][ T5514] __vm_enough_memory: pid: 5514, comm: cmp, not enough memory for the allocation [ 83.626733][ T5423] [ 83.631164][ T5423] ================================ [ 83.633656][ T4519] list_del corruption. prev->next should be ffff88807ae62e90, but was 0000000000000000. (prev=ffff888070cde790) [ 83.636251][ T5423] WARNING: inconsistent lock state [ 83.636257][ T5423] 6.7.0-rc5-syzkaller-00042-g88035e5694a8-dirty #0 Not tainted [ 83.648502][ T4519] ------------[ cut here ]------------ [ 83.653094][ T5423] -------------------------------- [ 83.653099][ T5423] inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage. [ 83.653107][ T5423] syz-executor.0/5423 [HC0[0]:SC0[0]:HE1:SE1] takes: [ 83.660709][ T4519] kernel BUG at lib/list_debug.c:62! [ 83.666050][ T5423] ffff888071f79078 [ 83.671209][ T4519] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 83.677948][ T5423] (timekeeper_lock [ 83.684600][ T4519] CPU: 1 PID: 4519 Comm: udevd Not tainted 6.7.0-rc5-syzkaller-00042-g88035e5694a8-dirty #0 [ 83.689852][ T5423] ){?.-.}-{2:2} [ 83.693540][ T4519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 83.699655][ T5423] , at: unlink_file_vma+0x81/0x120 [ 83.703429][ T4519] RIP: 0010:__list_del_entry_valid_or_report+0x128/0x1c0 [ 83.713452][ T5423] {IN-HARDIRQ-W} state was registered at: [ 83.716878][ T4519] Code: e8 cd e1 01 fd 90 0f 0b 48 89 ca 48 c7 c7 20 12 2f 8b e8 bb e1 01 fd 90 0f 0b 48 89 c2 48 c7 c7 80 12 2f 8b e8 a9 e1 01 fd 90 <0f> 0b 48 89 d1 48 c7 c7 00 13 2f 8b 48 89 c2 e8 94 e1 01 fd 90 0f [ 83.726900][ T5423] lock_acquire+0x1ae/0x520 [ 83.731978][ T4519] RSP: 0018:ffffc9000314fb38 EFLAGS: 00010286 [ 83.738966][ T5423] _raw_spin_lock_irqsave+0x3a/0x50 [ 83.744653][ T4519] [ 83.744656][ T4519] RAX: 000000000000006d RBX: 0000000000000000 RCX: ffffffff816a8039 [ 83.764228][ T5423] timekeeping_advance+0x82/0xf10 [ 83.768788][ T4519] RDX: 0000000000000000 RSI: ffffffff816b04e2 RDI: 0000000000000005 [ 83.774818][ T5423] update_wall_time+0x11/0x40 [ 83.780070][ T4519] RBP: ffff88807ae62e90 R08: 0000000000000005 R09: 0000000000000000 [ 83.782372][ T5423] tick_periodic+0x18b/0x230 [ 83.790317][ T4519] R10: 0000000000000001 R11: 205d393135345420 R12: dffffc0000000000 [ 83.795392][ T5423] tick_handle_periodic+0x45/0x120 [ 83.803422][ T4519] R13: ffff88807ae62600 R14: ffff88814124c000 R15: ffffffff8f194d40 [ 83.808148][ T5423] timer_interrupt+0x48/0x70 [ 83.816099][ T4519] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 83.820911][ T5423] __handle_irq_event_percpu+0x22a/0x750 [ 83.828878][ T4519] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.834040][ T5423] handle_irq_event+0xab/0x1e0 [ 83.841985][ T4519] CR2: 00007fcf7bc94000 CR3: 000000006a1b6000 CR4: 0000000000350ef0 [ 83.846626][ T5423] handle_edge_irq+0x261/0xcf0 [ 83.855526][ T4519] Call Trace: [ 83.861207][ T5423] __common_interrupt+0xdb/0x240 [ 83.867761][ T4519] [ 83.872572][ T5423] common_interrupt+0xab/0xd0 [ 83.880517][ T4519] ? show_regs+0x8f/0xa0 [ 83.885330][ T5423] asm_common_interrupt+0x26/0x40 [ 83.888588][ T4519] ? die+0x36/0xa0 [ 83.893578][ T5423] console_flush_all+0xa0e/0xd60 [ 83.896488][ T4519] ? do_trap+0x22b/0x420 [ 83.901216][ T5423] console_unlock+0x10c/0x260 [ 83.905426][ T4519] ? __list_del_entry_valid_or_report+0x128/0x1c0 [ 83.910500][ T5423] vprintk_emit+0x17f/0x5f0 [ 83.914188][ T4519] ? __list_del_entry_valid_or_report+0x128/0x1c0 [ 83.919174][ T5423] vprintk+0x7b/0x90 [ 83.923379][ T4519] ? do_error_trap+0xf4/0x230 [ 83.928111][ T5423] _printk+0xc8/0x100 [ 83.934492][ T4519] ? __list_del_entry_valid_or_report+0x128/0x1c0 [ 83.939046][ T5423] identify_cpu+0xcfe/0x2390 [ 83.945432][ T4519] ? handle_invalid_op+0x34/0x40 [ 83.949382][ T5423] arch_cpu_finalize_init+0x11/0x160 [ 83.954025][ T4519] ? __list_del_entry_valid_or_report+0x128/0x1c0 [ 83.958061][ T5423] start_kernel+0x32c/0x480 [ 83.964444][ T4519] ? exc_invalid_op+0x2e/0x40 [ 83.969097][ T5423] x86_64_start_reservations+0x18/0x30 [ 83.974004][ T4519] ? asm_exc_invalid_op+0x1a/0x20 [ 83.979361][ T5423] x86_64_start_kernel+0xb2/0xc0 [ 83.985745][ T4519] ? __wake_up_klogd.part.0+0x99/0xf0 [ 83.990297][ T5423] secondary_startup_64_no_verify+0x166/0x16b [ 83.994941][ T4519] ? vprintk+0x82/0x90 [ 84.000450][ T5423] irq event stamp: 165397 [ 84.000455][ T5423] hardirqs last enabled at (165397): [] kasan_quarantine_put+0x102/0x230 [ 84.005440][ T4519] ? __list_del_entry_valid_or_report+0x128/0x1c0 [ 84.010428][ T5423] hardirqs last disabled at (165396): [] kasan_quarantine_put+0xaa/0x230 [ 84.015772][ T4519] ? __list_del_entry_valid_or_report+0x127/0x1c0 [ 84.021886][ T5423] softirqs last enabled at (165306): [] fpu__clear_user_states+0xf9/0x1e0 [ 84.025928][ T4519] lru_gen_del_mm+0x230/0x7f0 [ 84.030222][ T5423] softirqs last disabled at (165304): [] fpu__clear_user_states+0x39/0x1e0 [ 84.040253][ T4519] __mmput+0x3a2/0x4d0 [ 84.046623][ T5423] [ 84.046623][ T5423] other info that might help us debug this: [ 84.046628][ T5423] Possible unsafe locking scenario: [ 84.046628][ T5423] [ 84.056564][ T4519] mmput+0x62/0x70 [ 84.062942][ T5423] CPU0 [ 84.062945][ T5423] ---- [ 84.062948][ T5423] lock( [ 84.073056][ T4519] do_exit+0x9ad/0x2ae0 [ 84.077702][ T5423] timekeeper_lock); [ 84.087833][ T4519] ? mm_update_next_owner+0x840/0x840 [ 84.091863][ T5423] [ 84.091867][ T5423] lock(timekeeper_lock [ 84.099899][ T4519] do_group_exit+0xd4/0x2a0 [ 84.107315][ T5423] ); [ 84.107319][ T5423] [ 84.107319][ T5423] *** DEADLOCK *** [ 84.107319][ T5423] [ 84.111011][ T4519] get_signal+0x23be/0x2790 [ 84.114263][ T5423] 1 lock held by syz-executor.0/5423: [ 84.117519][ T4519] ? exit_signals+0x960/0x960 [ 84.120428][ T5423] #0: ffff888016694420 [ 84.124548][ T4519] ? kill_something_info+0x310/0x310 [ 84.128321][ T5423] (&mm->mmap_lock [ 84.133667][ T4519] ? from_kuid+0xc0/0xc0 [ 84.137092][ T5423] ){++++}-{3:3} [ 84.141474][ T4519] arch_do_signal_or_restart+0x90/0x7f0 [ 84.145939][ T5423] , at: exit_mmap+0x1ef/0xa70 [ 84.148414][ T4519] ? get_sigframe_size+0x20/0x20 [ 84.156526][ T5423] [ 84.156526][ T5423] stack backtrace: [ 84.156531][ T5423] CPU: 0 PID: 5423 Comm: syz-executor.0 Not tainted 6.7.0-rc5-syzkaller-00042-g88035e5694a8-dirty #0 [ 84.161003][ T4519] exit_to_user_mode_prepare+0x121/0x240 [ 84.166331][ T5423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 84.170978][ T4519] syscall_exit_to_user_mode+0x1e/0x60 [ 84.175099][ T5423] Call Trace: [ 84.175107][ T5423] [ 84.180349][ T4519] do_syscall_64+0x4d/0x110 [ 84.184034][ T5423] dump_stack_lvl+0xd9/0x1b0 [ 84.188246][ T4519] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 84.191671][ T5423] mark_lock+0x91a/0xc50 [ 84.197184][ T4519] RIP: 0033:0x7fcf7b6be3cd [ 84.201828][ T5423] ? print_usage_bug.part.0+0x550/0x550 [ 84.206729][ T4519] Code: Unable to access opcode bytes at 0x7fcf7b6be3a3. [ 84.212592][ T5423] ? kasan_set_track+0x25/0x30 [ 84.223485][ T4519] RSP: 002b:00007ffebfae7500 EFLAGS: 00000246 [ 84.229081][ T5423] ? kasan_save_free_info+0x2b/0x40 [ 84.239106][ T4519] ORIG_RAX: 00000000000000ea [ 84.244530][ T5423] ? ____kasan_slab_free+0x15b/0x1b0 [ 84.247787][ T4519] RAX: 0000000000000000 RBX: 00007fcf7bb61c80 RCX: 00007fcf7b6be3cd [ 84.250695][ T5423] ? print_usage_bug.part.0+0x550/0x550 [ 84.255163][ T4519] RDX: 0000000000000006 RSI: 00000000000011a7 RDI: 00000000000011a7 [ 84.259716][ T5423] ? free_pgtables+0x309/0x800 [ 84.265576][ T4519] RBP: 00000000000011a7 R08: 0000000000000000 R09: 0000000000000002 [ 84.269782][ T5423] ? exit_mmap+0x383/0xa70 [ 84.274162][ T4519] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000006 [ 84.279675][ T5423] ? __mmput+0x12a/0x4d0 [ 84.286660][ T4519] R13: 00007ffebfae7710 R14: 0000000000001000 R15: 0000000000000000 [ 84.291386][ T5423] ? mmput+0x62/0x70 [ 84.297424][ T4519] [ 84.302579][ T5423] ? do_exit+0x9ad/0x2ae0 [ 84.307221][ T4519] Modules linked in: [ 84.312474][ T5423] ? do_group_exit+0xd4/0x2a0 [ 84.320734][ C1] kernel tried to execute NX-protected page - exploit attempt? (uid: 0) [ 84.325927][ T5423] ? __x64_sys_exit_group+0x3e/0x50 [ 84.333873][ C1] BUG: unable to handle page fault for address: ffffffff8be9bfe0 [ 84.338605][ T5423] ? hlock_class+0x4e/0x130 [ 84.346548][ C1] #PF: supervisor instruction fetch in kernel mode [ 84.350932][ T5423] ? mark_lock+0xb5/0xc50 [ 84.358872][ C1] #PF: error_code(0x0011) - permissions violation [ 84.363087][ T5423] __lock_acquire+0x931/0x3b20 [ 84.371026][ C1] PGD cd7a067 [ 84.374893][ T5423] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 84.377877][ C1] P4D cd7a067 [ 84.382175][ T5423] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 84.386034][ C1] PUD cd7b063 PMD 800000000be001a1 [ 84.390676][ T5423] lock_acquire+0x1ae/0x520 [ 84.398965][ C1] [ 84.398969][ C1] Oops: 0011 [#2] PREEMPT SMP KASAN [ 84.404131][ T5423] ? unlink_file_vma+0x81/0x120 [ 84.411810][ C1] CPU: 1 PID: 4519 Comm: udevd Tainted: G D 6.7.0-rc5-syzkaller-00042-g88035e5694a8-dirty #0 [ 84.416280][ T5423] ? lock_sync+0x190/0x190 [ 84.422742][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 84.427039][ T5423] ? preempt_count_sub+0x160/0x160 [ 84.433413][ C1] RIP: 0010:dst_default_metrics+0xac0/0x1260 [ 84.438148][ T5423] down_write+0x3a/0x50 [ 84.441486][ C1] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <62> 61 73 65 5f 72 65 61 63 68 61 62 6c 65 5f 74 69 6d 65 00 00 00 [ 84.447429][ T5423] ? unlink_file_vma+0x81/0x120 [ 84.450769][ C1] RSP: 0018:ffffc900001f0ca0 EFLAGS: 00010246 [ 84.456711][ T5423] unlink_file_vma+0x81/0x120 [ 84.461880][ C1] [ 84.461886][ C1] RAX: 0000000000000000 RBX: ffffc900001f0ce0 RCX: ffffffff8175e717 [ 84.466364][ T5423] free_pgtables+0x311/0x800 [ 84.468658][ C1] RDX: ffff88807a770000 RSI: ffffffff8175e3cd RDI: ffff888071aa51f0 [ 84.473824][ T5423] exit_mmap+0x383/0xa70 [ 84.478636][ C1] RBP: ffff888071aa51f0 R08: 0000000000000001 R09: 0000000000000000 [ 84.490142][ T5423] ? do_vma_munmap+0x70/0x70 [ 84.494520][ C1] R10: 0000000000000001 R11: ffff8880b993d600 R12: 1ffff9200003e196 [ 84.504554][ T5423] __mmput+0x12a/0x4d0 [ 84.509619][ C1] R13: 0000000000000101 R14: ffffffff8be9bfe0 R15: 0000000000000001 [ 84.515571][ T5423] mmput+0x62/0x70 [ 84.519691][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 84.539264][ T5423] do_exit+0x9ad/0x2ae0 [ 84.544081][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.550112][ T5423] ? do_group_exit+0x1c5/0x2a0 [ 84.554754][ C1] CR2: ffffffff8be9bfe0 CR3: 000000006a1b6000 CR4: 0000000000350ef0 [ 84.557052][ T5423] ? reacquire_held_locks+0x4c0/0x4c0 [ 84.564995][ C1] Call Trace: [ 84.565002][ C1] [ 84.569550][ T5423] ? do_raw_spin_lock+0x12e/0x2b0 [ 84.577490][ C1] ? show_regs+0x8f/0xa0 [ 84.581695][ T5423] ? mm_update_next_owner+0x840/0x840 [ 84.589632][ C1] ? __die+0x2c/0x80 [ 84.594187][ T5423] ? spin_bug+0x1d0/0x1d0 [ 84.602126][ C1] ? page_fault_oops+0x398/0xad0 [ 84.606165][ T5423] do_group_exit+0xd4/0x2a0 [ 84.614106][ C1] ? dump_pagetable+0x530/0x530 [ 84.617796][ T5423] __x64_sys_exit_group+0x3e/0x50 [ 84.626689][ C1] ? is_prefetch.constprop.0+0xb6/0x550 [ 84.630813][ T5423] do_syscall_64+0x40/0x110 [ 84.637366][ C1] ? __module_address+0x55/0x3b0 [ 84.642098][ T5423] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 84.650033][ C1] ? lru_gen_del_mm+0x230/0x7f0 [ 84.655371][ T5423] RIP: 0033:0x7f8e26c7cba9 [ 84.658622][ C1] ? bpf_ksym_find+0x124/0x1b0 [ 84.661438][ T5423] Code: Unable to access opcode bytes at 0x7f8e26c7cb7f. [ 84.666426][ C1] ? pgtable_bad+0x80/0x80 [ 84.670632][ T5423] RSP: 002b:00007ffc0e242a78 EFLAGS: 00000246 [ 84.675968][ C1] ? fixup_exception+0x110/0xc90 [ 84.679823][ T5423] ORIG_RAX: 00000000000000e7 [ 84.684117][ C1] ? kernelmode_fixup_or_oops+0x23c/0x2b0 [ 84.689015][ T5423] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f8e26c7cba9 [ 84.693483][ C1] ? __bad_area_nosemaphore+0x390/0x6a0 [ 84.698295][ T5423] RDX: 00007f8e26ca7fb5 RSI: 0000000000000000 RDI: 000000000000000b [ 84.703285][ C1] ? spurious_kernel_fault+0x2f4/0x3c0 [ 84.708792][ T5423] RBP: 00007ffc0e24314c R08: 0000000000000001 R09: 000000000000000b [ 84.713258][ C1] ? do_kern_addr_fault+0x5b/0x80 [ 84.718155][ T5423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 84.724009][ C1] ? exc_page_fault+0xae/0xc0 [ 84.728823][ T5423] R13: 0000000000014683 R14: 0000000000014581 R15: 0000000000000000 [ 84.733203][ C1] ? asm_exc_page_fault+0x26/0x30 [ 84.737935][ T5423] [ 84.744919][ C1] ? call_timer_fn+0x4d7/0x590 [ 84.749532][ C0] ------------[ cut here ]------------ [ 84.755332][ C1] ? call_timer_fn+0x18d/0x590 [ 84.760238][ C0] WARNING: CPU: 0 PID: 5423 at kernel/time/timer.c:1738 __run_timers+0x8d2/0xb20 [ 84.764885][ C1] ? call_timer_fn+0x193/0x590 [ 84.770572][ C0] Modules linked in: [ 84.778513][ C1] ? timer_fixup_assert_init+0x210/0x210 [ 84.784023][ C0] CPU: 0 PID: 5423 Comm: syz-executor.0 Tainted: G D 6.7.0-rc5-syzkaller-00042-g88035e5694a8-dirty #0 [ 84.791960][ C1] ? reacquire_held_locks+0x4c0/0x4c0 [ 84.797382][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 84.805325][ C1] ? rcu_is_watching+0x12/0xb0 [ 84.810311][ C0] RIP: 0010:__run_timers+0x8d2/0xb20 [ 84.818255][ C1] ? __run_timers+0x764/0xb20 [ 84.822894][ C0] Code: 6f 48 e8 91 9d 11 00 89 de 31 ff 83 eb 01 e8 f5 98 11 00 8b 44 24 18 85 c0 0f 85 50 fc ff ff e9 50 fb ff ff e8 6f 9d 11 00 90 <0f> 0b 90 e9 b3 fc ff ff e8 61 9d 11 00 90 0f 0b 90 e9 37 fd ff ff [ 84.830839][ C1] ? call_timer_fn+0x590/0x590 [ 84.835827][ C0] RSP: 0018:ffffc90000007d88 EFLAGS: 00010046 [ 84.838820][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 84.843547][ C0] [ 84.843550][ C0] RAX: 0000000000000000 RBX: ffff888071877568 RCX: ffffffff8175f042 [ 84.848970][ C1] ? sched_clock_cpu+0x6d/0x4c0 [ 84.853699][ C0] RDX: ffff88801cea1dc0 RSI: ffffffff8175f0a1 RDI: ffff888071877580 [ 84.862772][ C1] ? run_timer_softirq+0x58/0xd0 [ 84.867495][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 84.871354][ C1] ? __do_softirq+0x21a/0x8de [ 84.876947][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90000007e60 [ 84.889229][ C1] ? __lock_text_end+0x3/0x3 [ 84.894562][ C0] R13: ffffc90000007e60 R14: dffffc0000000000 R15: ffff8880b98297c0 [ 84.904586][ C1] ? irq_exit_rcu+0xb7/0x120 [ 84.909315][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 84.914573][ C1] ? sysvec_apic_timer_interrupt+0x95/0xb0 [ 84.919216][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.938788][ C1] [ 84.938793][ C1] [ 84.943517][ C0] CR2: 0000000000000000 CR3: 0000000069fca000 CR4: 0000000000350ef0 [ 84.949548][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 84.954715][ C0] Call Trace: [ 84.954722][ C0] [ 84.957020][ C1] ? oops_end+0xbf/0x1e0 [ 84.964957][ C0] ? show_regs+0x8f/0xa0 [ 84.969774][ C1] ? oops_end+0x14e/0x1e0 [ 84.977714][ C0] ? __warn+0xe6/0x390 [ 84.982619][ C1] ? oops_end+0xc8/0x1e0 [ 84.990560][ C0] ? __run_timers+0x8d2/0xb20 [ 84.995203][ C1] ? do_trap+0x22b/0x420 [ 85.003150][ C0] ? report_bug+0x3bc/0x580 [ 85.007733][ C1] ? __list_del_entry_valid_or_report+0x128/0x1c0 [ 85.015703][ C0] ? handle_bug+0x3d/0x70 [ 85.020268][ C1] ? __list_del_entry_valid_or_report+0x128/0x1c0 [ 85.029167][ C0] ? exc_invalid_op+0x17/0x40 [ 85.034939][ C1] ? do_error_trap+0xf4/0x230 [ 85.041492][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 85.044400][ C1] ? __list_del_entry_valid_or_report+0x128/0x1c0 [ 85.047311][ C0] ? __run_timers+0x872/0xb20 [ 85.055254][ C1] ? handle_invalid_op+0x34/0x40 [ 85.061374][ C0] ? __run_timers+0x8d1/0xb20 [ 85.064630][ C1] ? __list_del_entry_valid_or_report+0x128/0x1c0 [ 85.067448][ C0] ? __run_timers+0x8d2/0xb20 [ 85.071656][ C1] ? exc_invalid_op+0x2e/0x40 [ 85.075868][ C0] ? __run_timers+0x8d1/0xb20 [ 85.080162][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 85.084200][ C0] ? call_timer_fn+0x590/0x590 [ 85.088407][ C1] ? __wake_up_klogd.part.0+0x99/0xf0 [ 85.093050][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 85.097262][ C1] ? vprintk+0x82/0x90 [ 85.101821][ C0] ? sched_clock_cpu+0x6d/0x4c0 [ 85.108202][ C1] ? __list_del_entry_valid_or_report+0x128/0x1c0 [ 85.112507][ C0] run_timer_softirq+0x58/0xd0 [ 85.118883][ C1] ? __list_del_entry_valid_or_report+0x127/0x1c0 [ 85.123525][ C0] __do_softirq+0x21a/0x8de [ 85.128169][ C1] ? lru_gen_del_mm+0x230/0x7f0 [ 85.133163][ C0] ? __lock_text_end+0x3/0x3 [ 85.139543][ C1] ? __mmput+0x3a2/0x4d0 [ 85.144189][ C0] irq_exit_rcu+0xb7/0x120 [ 85.149089][ C1] ? mmput+0x62/0x70 [ 85.153731][ C0] sysvec_apic_timer_interrupt+0x95/0xb0 [ 85.160109][ C1] ? do_exit+0x9ad/0x2ae0 [ 85.164754][ C0] [ 85.169395][ C1] ? mm_update_next_owner+0x840/0x840 [ 85.174038][ C0] [ 85.174043][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 85.179032][ C1] ? do_group_exit+0xd4/0x2a0 [ 85.183761][ C0] RIP: 0010:preempt_schedule_irq+0x4d/0x90 [ 85.189099][ C1] ? get_signal+0x23be/0x2790 [ 85.194265][ C0] Code: 55 65 48 8b 2c 25 c0 bc 03 00 53 48 89 eb 48 c1 eb 03 48 01 c3 bf 01 00 00 00 e8 ee fd d7 f6 e8 f9 b8 0b f7 fb bf 01 00 00 00 1e 96 ff ff 9c 58 fa f6 c4 02 75 1a bf 01 00 00 00 e8 1c b2 d7 [ 85.198303][ C1] ? exit_signals+0x960/0x960 [ 85.203115][ C0] RSP: 0018:ffffc90004cff9d8 EFLAGS: 00000246 [ 85.209493][ C1] ? kill_something_info+0x310/0x310 [ 85.214224][ C0] [ 85.214228][ C0] RAX: 0000000000000003 RBX: ffffed10039d43b8 RCX: 1ffffffff1e32eff [ 85.220606][ C1] ? from_kuid+0xc0/0xc0 [ 85.225073][ C0] RDX: 0000000000000000 RSI: ffffffff8b2f0da0 RDI: 0000000000000001 [ 85.229891][ C1] ? arch_do_signal_or_restart+0x90/0x7f0 [ 85.234451][ C0] RBP: ffff88801cea1dc0 R08: 0000000000000000 R09: 0000000000000000 [ 85.238658][ C1] ? get_sigframe_size+0x20/0x20 [ 85.243040][ C0] R10: ffffffff8f194417 R11: 0000000000000000 R12: 0000000000000000 [ 85.246911][ C1] ? exit_to_user_mode_prepare+0x121/0x240 [ 85.252502][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.256799][ C1] ? syscall_exit_to_user_mode+0x1e/0x60 [ 85.259710][ C0] ? preempt_schedule_irq+0x47/0x90 [ 85.265056][ C1] ? do_syscall_64+0x4d/0x110 [ 85.267984][ C0] irqentry_exit+0x36/0x80 [ 85.273942][ C1] ? entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 85.278590][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 85.284363][ C1] [ 85.289000][ C0] RIP: 0010:lock_acquire+0x1ef/0x520 [ 85.308669][ C1] Modules linked in: [ 85.308683][ C1] CR2: ffffffff8be9bfe0 [ 85.313328][ C0] Code: c1 05 5d 69 9a 7e 83 f8 01 0f 85 b4 02 00 00 9c 58 f6 c4 02 0f 85 9f 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 85.319359][ C1] ---[ end trace 0000000000000000 ]--- [ 85.324607][ C0] RSP: 0018:ffffc90004cffaa0 EFLAGS: 00000206 [ 85.326906][ C1] RIP: 0010:__list_del_entry_valid_or_report+0x128/0x1c0 [ 85.334845][ C0] [ 85.334848][ C0] RAX: dffffc0000000000 RBX: 1ffff9200099ff56 RCX: ffffffff8a6c0b2e [ 85.339054][ C1] Code: e8 cd e1 01 fd 90 0f 0b 48 89 ca 48 c7 c7 20 12 2f 8b e8 bb e1 01 fd 90 0f 0b 48 89 c2 48 c7 c7 80 12 2f 8b e8 a9 e1 01 fd 90 <0f> 0b 48 89 d1 48 c7 c7 00 13 2f 8b 48 89 c2 e8 94 e1 01 fd 90 0f [ 85.346992][ C0] RDX: 0000000000000000 RSI: ffffffff8accb820 RDI: ffffffff8b2f0e20 [ 85.352673][ C1] RSP: 0018:ffffc9000314fb38 EFLAGS: 00010286 [ 85.360611][ C0] RBP: 0000000000000200 R08: 0000000000000007 R09: 0000000000000000 [ 85.365514][ C1] [ 85.365517][ C1] RAX: 000000000000006d RBX: 0000000000000000 RCX: ffffffff816a8039 [ 85.373450][ C0] R10: 0000000000000000 R11: 205d314320202020 R12: 0000000000000001 [ 85.379227][ C1] RDX: 0000000000000000 RSI: ffffffff816b04e2 RDI: 0000000000000005 [ 85.387169][ C0] R13: 0000000000000000 R14: ffff888071f79078 R15: 0000000000000000 [ 85.392763][ C1] RBP: ffff88807ae62e90 R08: 0000000000000005 R09: 0000000000000000 [ 85.397927][ C0] ? dump_stack_lvl+0xfe/0x1b0 [ 85.402562][ C1] R10: 0000000000000001 R11: 205d393135345420 R12: dffffc0000000000 [ 85.406946][ C0] ? lock_sync+0x190/0x190 [ 85.412970][ C1] R13: ffff88807ae62600 R14: ffff88814124c000 R15: ffffffff8f194d40 [ 85.418399][ C0] ? preempt_count_sub+0x160/0x160 [ 85.421391][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 85.426640][ C0] down_write+0x3a/0x50 [ 85.430499][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.434618][ C0] ? unlink_file_vma+0x81/0x120 [ 85.454190][ C1] CR2: ffffffff8be9bfe0 CR3: 000000006a1b6000 CR4: 0000000000350ef0 [ 85.459611][ C0] unlink_file_vma+0x81/0x120 [ 85.465642][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 85.472628][ C0] free_pgtables+0x311/0x800 [ 85.472648][ C0] exit_mmap+0x383/0xa70 [ 85.472663][ C0] ? do_vma_munmap+0x70/0x70 [ 85.472684][ C0] __mmput+0x12a/0x4d0 [ 85.472698][ C0] mmput+0x62/0x70 [ 85.472709][ C0] do_exit+0x9ad/0x2ae0 [ 85.472720][ C0] ? do_group_exit+0x1c5/0x2a0 [ 85.472731][ C0] ? reacquire_held_locks+0x4c0/0x4c0 [ 85.472748][ C0] ? do_raw_spin_lock+0x12e/0x2b0 [ 85.472759][ C0] ? mm_update_next_owner+0x840/0x840 [ 85.472769][ C0] ? spin_bug+0x1d0/0x1d0 [ 85.472781][ C0] do_group_exit+0xd4/0x2a0 [ 85.472793][ C0] __x64_sys_exit_group+0x3e/0x50 [ 85.472804][ C0] do_syscall_64+0x40/0x110 [ 85.472820][ C0] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 85.472839][ C0] RIP: 0033:0x7f8e26c7cba9 [ 85.472848][ C0] Code: Unable to access opcode bytes at 0x7f8e26c7cb7f. [ 85.472853][ C0] RSP: 002b:00007ffc0e242a78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 85.472864][ C0] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f8e26c7cba9 [ 85.472871][ C0] RDX: 00007f8e26ca7fb5 RSI: 0000000000000000 RDI: 000000000000000b [ 85.472878][ C0] RBP: 00007ffc0e24314c R08: 0000000000000001 R09: 000000000000000b [ 85.472884][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 85.472891][ C0] R13: 0000000000014683 R14: 0000000000014581 R15: 0000000000000000 [ 85.472901][ C0] [ 85.472905][ C0] irq event stamp: 165397 [ 85.472908][ C0] hardirqs last enabled at (165397): [] kasan_quarantine_put+0x102/0x230 [ 85.472924][ C0] hardirqs last disabled at (165396): [] kasan_quarantine_put+0xaa/0x230 [ 85.472938][ C0] softirqs last enabled at (165306): [] fpu__clear_user_states+0xf9/0x1e0 [ 85.472957][ C0] softirqs last disabled at (165304): [] fpu__clear_user_states+0x39/0x1e0 [ 85.472975][ C0] ---[ end trace 0000000000000000 ]--- [ 85.473269][ C1] Kernel Offset: disabled [ 85.828667][ C1] Rebooting in 86400 seconds..