Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. 2024/12/15 08:02:42 ignoring optional flag "sandboxArg"="0" 2024/12/15 08:02:42 ignoring optional flag "type"="gce" 2024/12/15 08:02:42 parsed 1 programs [ 96.113096][ T4582] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 96.671340][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.686730][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.702249][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.711648][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.720961][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.733136][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.164669][ T4612] chnl_net:caif_netlink_parms(): no params data found [ 97.230407][ T4612] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.237708][ T4612] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.246111][ T4612] device bridge_slave_0 entered promiscuous mode [ 97.255775][ T4612] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.263454][ T4612] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.272370][ T4612] device bridge_slave_1 entered promiscuous mode [ 97.301391][ T4612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.313433][ T4612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.350169][ T4612] team0: Port device team_slave_0 added [ 97.359421][ T4612] team0: Port device team_slave_1 added [ 97.388725][ T4612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.395712][ T4612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.422419][ T4612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.436395][ T4612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.443881][ T4612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.471263][ T4612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.513561][ T4612] device hsr_slave_0 entered promiscuous mode [ 97.520644][ T4612] device hsr_slave_1 entered promiscuous mode [ 98.214983][ T4612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.228150][ T4612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.238634][ T4612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.256610][ T4612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.444241][ T4612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.461369][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.469953][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.481919][ T4612] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.504798][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.516416][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.527003][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.534245][ T4282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.544359][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.581813][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.593818][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.604489][ T3043] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.611663][ T3043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.623060][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.649138][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.669278][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.679888][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.692315][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.703484][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.712986][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.723434][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.752784][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.762392][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.773026][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.784035][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.936764][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.946688][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.971544][ T4612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.993417][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.002787][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.038770][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.050520][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.061827][ T4612] device veth0_vlan entered promiscuous mode [ 99.071073][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.080502][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.094740][ T4612] device veth1_vlan entered promiscuous mode [ 99.133507][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.144833][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.154615][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.164562][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.178236][ T4612] device veth0_macvtap entered promiscuous mode [ 99.211053][ T4612] device veth1_macvtap entered promiscuous mode [ 99.245932][ T4612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.253595][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.263625][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.273555][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.283105][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.295453][ T4612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.317895][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.344709][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.370622][ T4612] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.381233][ T4612] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.390825][ T4612] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.400009][ T4612] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2024/12/15 08:02:49 executed programs: 0 [ 101.192893][ T4762] chnl_net:caif_netlink_parms(): no params data found [ 101.296869][ T4762] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.305388][ T4762] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.314464][ T4762] device bridge_slave_0 entered promiscuous mode [ 101.340669][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.359025][ T4762] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.366308][ T4762] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.376042][ T4762] device bridge_slave_1 entered promiscuous mode [ 101.413588][ T4762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.426119][ T4762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.463431][ T4762] team0: Port device team_slave_0 added [ 101.475266][ T4762] team0: Port device team_slave_1 added [ 101.504572][ T4762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.511960][ T4762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.541804][ T4762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.557391][ T4762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.564487][ T4762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.594249][ T4762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.637012][ T4762] device hsr_slave_0 entered promiscuous mode [ 101.648097][ T4762] device hsr_slave_1 entered promiscuous mode [ 101.654985][ T4762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.665702][ T4762] Cannot create hsr debugfs directory [ 102.987483][ T4253] Bluetooth: hci0: command 0x0409 tx timeout [ 104.502582][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.574023][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.644796][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.067514][ T4252] Bluetooth: hci0: command 0x041b tx timeout [ 105.418873][ T4762] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.445671][ T4762] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.455695][ T4762] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.466515][ T4762] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.535936][ T4762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.565603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.575749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.587983][ T4762] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.607046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.616022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.624693][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.631920][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.642974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.656108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.665333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.674326][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.681496][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.693396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.709816][ T154] device hsr_slave_0 left promiscuous mode [ 105.717012][ T154] device hsr_slave_1 left promiscuous mode [ 105.724410][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.733614][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.742185][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.750303][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.758970][ T154] device bridge_slave_1 left promiscuous mode [ 105.765294][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.774063][ T154] device bridge_slave_0 left promiscuous mode [ 105.781971][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.793932][ T154] device veth1_macvtap left promiscuous mode [ 105.800097][ T154] device veth0_macvtap left promiscuous mode [ 105.806371][ T154] device veth1_vlan left promiscuous mode [ 105.812451][ T154] device veth0_vlan left promiscuous mode [ 105.983216][ T154] team0 (unregistering): Port device team_slave_1 removed [ 106.001116][ T154] team0 (unregistering): Port device team_slave_0 removed [ 106.016915][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.031980][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.095212][ T154] bond0 (unregistering): Released all slaves [ 106.144785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.159992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.170273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.179487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.204680][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.223530][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.233590][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.243295][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.255752][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.265843][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.280029][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.377565][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.385103][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.405264][ T4762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.425535][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.434723][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.462443][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.471921][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.481480][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.490024][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.502267][ T4762] device veth0_vlan entered promiscuous mode [ 106.515348][ T4762] device veth1_vlan entered promiscuous mode [ 106.542202][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.558656][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 106.577691][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.608019][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.620027][ T4762] device veth0_macvtap entered promiscuous mode [ 106.631242][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.643058][ T4762] device veth1_macvtap entered promiscuous mode [ 106.665579][ T4762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.676462][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.687969][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.703312][ T4762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.715511][ T4762] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.726737][ T4762] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.736960][ T4762] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.747987][ T4762] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.766571][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.788837][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.876793][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.898440][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.929459][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.947778][ T3043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.956432][ T3043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.971658][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2024/12/15 08:02:55 executed programs: 1 [ 107.147612][ T4253] Bluetooth: hci0: command 0x040f tx timeout [ 107.447262][ C0] ------------[ cut here ]------------ [ 107.448445][ C0] [ 107.448459][ C0] ====================================================== [ 107.448464][ C0] WARNING: possible circular locking dependency detected [ 107.448469][ C0] 5.15.174-syzkaller #0 Not tainted [ 107.448477][ C0] ------------------------------------------------------ [ 107.448481][ C0] syz-executor/4762 is trying to acquire lock: [ 107.448489][ C0] ffffffff8cb148a0 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60 [ 107.448548][ C0] [ 107.448548][ C0] but task is already holding lock: [ 107.448552][ C0] ffff8880b8e2a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x662/0xcf0 [ 107.448584][ C0] [ 107.448584][ C0] which lock already depends on the new lock. [ 107.448584][ C0] [ 107.448588][ C0] [ 107.448588][ C0] the existing dependency chain (in reverse order) is: [ 107.448593][ C0] [ 107.448593][ C0] -> #6 (hrtimer_bases.lock){-.-.}-{2:2}: [ 107.448610][ C0] lock_acquire+0x1db/0x4f0 [ 107.448624][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 107.448646][ C0] hrtimer_start_range_ns+0x105/0xc80 [ 107.448659][ C0] enqueue_task_rt+0x5a0/0xbf0 [ 107.448674][ C0] enqueue_task+0x181/0x3a0 [ 107.448690][ C0] ttwu_do_activate+0x1cf/0x430 [ 107.448705][ C0] sched_ttwu_pending+0x34e/0x730 [ 107.448720][ C0] __sysvec_call_function_single+0x9a/0x250 [ 107.448737][ C0] sysvec_call_function_single+0x98/0xc0 [ 107.448754][ C0] asm_sysvec_call_function_single+0x16/0x20 [ 107.448772][ C0] acpi_idle_do_entry+0x10f/0x340 [ 107.448786][ C0] acpi_idle_enter+0x352/0x4f0 [ 107.448799][ C0] cpuidle_enter_state+0x521/0xef0 [ 107.448816][ C0] cpuidle_enter+0x59/0x90 [ 107.448832][ C0] do_idle+0x3e4/0x670 [ 107.448849][ C0] cpu_startup_entry+0x14/0x20 [ 107.448865][ C0] start_secondary+0x371/0x500 [ 107.448883][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 107.448902][ C0] [ 107.448902][ C0] -> #5 (&rt_b->rt_runtime_lock){-...}-{2:2}: [ 107.448925][ C0] lock_acquire+0x1db/0x4f0 [ 107.448939][ C0] _raw_spin_lock+0x2a/0x40 [ 107.448956][ C0] rq_online_rt+0x123/0x300 [ 107.448972][ C0] sched_cpu_activate+0x508/0x6b0 [ 107.448987][ C0] cpuhp_invoke_callback+0x49f/0x820 [ 107.449006][ C0] cpuhp_thread_fun+0x3ee/0x790 [ 107.449022][ C0] smpboot_thread_fn+0x51b/0x9d0 [ 107.449036][ C0] kthread+0x3f6/0x4f0 [ 107.449050][ C0] ret_from_fork+0x1f/0x30 [ 107.449086][ C0] [ 107.449086][ C0] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 107.449104][ C0] lock_acquire+0x1db/0x4f0 [ 107.449116][ C0] _raw_spin_lock_nested+0x2d/0x40 [ 107.449130][ C0] raw_spin_rq_lock_nested+0x26/0x140 [ 107.449146][ C0] task_fork_fair+0x5d/0x350 [ 107.449161][ C0] sched_cgroup_fork+0x2d3/0x330 [ 107.449181][ C0] copy_process+0x224a/0x3ef0 [ 107.449196][ C0] kernel_clone+0x210/0x960 [ 107.449212][ C0] kernel_thread+0x168/0x1e0 [ 107.449228][ C0] rest_init+0x21/0x330 [ 107.449245][ C0] start_kernel+0x48c/0x540 [ 107.449264][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 107.449281][ C0] [ 107.449281][ C0] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 107.449299][ C0] lock_acquire+0x1db/0x4f0 [ 107.449310][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 107.449325][ C0] try_to_wake_up+0xae/0x1300 [ 107.449339][ C0] __wake_up_common+0x2a0/0x4e0 [ 107.449355][ C0] __wake_up+0x112/0x1c0 [ 107.449369][ C0] tty_port_default_wakeup+0xa8/0x100 [ 107.449385][ C0] serial8250_tx_chars+0x60d/0x800 [ 107.449402][ C0] serial8250_handle_irq+0x505/0x600 [ 107.449416][ C0] serial8250_default_handle_irq+0xc8/0x1e0 [ 107.449432][ C0] serial8250_interrupt+0xa1/0x1e0 [ 107.449452][ C0] __handle_irq_event_percpu+0x292/0xa70 [ 107.449468][ C0] handle_irq_event+0xff/0x2b0 [ 107.449482][ C0] handle_edge_irq+0x245/0xbf0 [ 107.449494][ C0] __common_interrupt+0xd7/0x1f0 [ 107.449509][ C0] common_interrupt+0xae/0xd0 [ 107.449521][ C0] asm_common_interrupt+0x22/0x40 [ 107.449536][ C0] lock_acquire+0x252/0x4f0 [ 107.449548][ C0] _raw_spin_lock+0x2a/0x40 [ 107.449561][ C0] validate_mm+0x36e/0x990 [ 107.449574][ C0] __vma_adjust+0x2cde/0x3150 [ 107.449586][ C0] vma_merge+0xa44/0xc10 [ 107.449597][ C0] mmap_region+0xb9b/0x1870 [ 107.449608][ C0] do_mmap+0x78d/0xe00 [ 107.449619][ C0] vm_mmap_pgoff+0x1ca/0x2d0 [ 107.449634][ C0] ksys_mmap_pgoff+0x559/0x780 [ 107.449646][ C0] do_syscall_64+0x3b/0xb0 [ 107.449658][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.449673][ C0] [ 107.449673][ C0] -> #2 (&tty->write_wait){-...}-{2:2}: [ 107.449691][ C0] lock_acquire+0x1db/0x4f0 [ 107.449702][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 107.449717][ C0] __wake_up+0xf5/0x1c0 [ 107.449731][ C0] tty_port_default_wakeup+0xa8/0x100 [ 107.449744][ C0] serial8250_tx_chars+0x60d/0x800 [ 107.449758][ C0] serial8250_handle_irq+0x505/0x600 [ 107.449772][ C0] serial8250_default_handle_irq+0xc8/0x1e0 [ 107.449788][ C0] serial8250_interrupt+0xa1/0x1e0 [ 107.449801][ C0] __handle_irq_event_percpu+0x292/0xa70 [ 107.449816][ C0] handle_irq_event+0xff/0x2b0 [ 107.449830][ C0] handle_edge_irq+0x245/0xbf0 [ 107.449841][ C0] __common_interrupt+0xd7/0x1f0 [ 107.449854][ C0] common_interrupt+0xae/0xd0 [ 107.449866][ C0] asm_common_interrupt+0x22/0x40 [ 107.449881][ C0] acpi_idle_do_entry+0x10f/0x340 [ 107.449895][ C0] acpi_idle_enter+0x352/0x4f0 [ 107.449908][ C0] cpuidle_enter_state+0x521/0xef0 [ 107.449923][ C0] cpuidle_enter+0x59/0x90 [ 107.449937][ C0] do_idle+0x3e4/0x670 [ 107.449951][ C0] cpu_startup_entry+0x14/0x20 [ 107.449965][ C0] start_kernel+0x48c/0x540 [ 107.449978][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 107.449993][ C0] [ 107.449993][ C0] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 107.450010][ C0] lock_acquire+0x1db/0x4f0 [ 107.450022][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 107.450036][ C0] serial8250_console_write+0x19d/0x1180 [ 107.450051][ C0] console_unlock+0xced/0x12b0 [ 107.450064][ C0] vprintk_emit+0xbf/0x150 [ 107.450076][ C0] _printk+0xd1/0x120 [ 107.450089][ C0] register_console+0x65a/0x940 [ 107.450102][ C0] univ8250_console_init+0x41/0x50 [ 107.450117][ C0] console_init+0x18c/0x660 [ 107.450130][ C0] start_kernel+0x301/0x540 [ 107.450142][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 107.450157][ C0] [ 107.450157][ C0] -> #0 (console_owner){-...}-{0:0}: [ 107.450174][ C0] validate_chain+0x1649/0x5930 [ 107.450188][ C0] __lock_acquire+0x1295/0x1ff0 [ 107.450201][ C0] lock_acquire+0x1db/0x4f0 [ 107.450212][ C0] console_lock_spinning_enable+0x51/0x60 [ 107.450226][ C0] console_unlock+0xa47/0x12b0 [ 107.450238][ C0] vprintk_emit+0xbf/0x150 [ 107.450250][ C0] _printk+0xd1/0x120 [ 107.450263][ C0] report_bug+0x1e5/0x2e0 [ 107.450279][ C0] handle_bug+0x3d/0x70 [ 107.450291][ C0] exc_invalid_op+0x16/0x40 [ 107.450303][ C0] asm_exc_invalid_op+0x16/0x20 [ 107.450317][ C0] copy_from_user_nofault+0x15c/0x1c0 [ 107.450332][ C0] bpf_probe_read_user+0x26/0x70 [ 107.450345][ C0] bpf_prog_5f6df167d0cc17e3+0x3d/0x7d4 [ 107.450357][ C0] bpf_trace_run2+0x19e/0x340 [ 107.450370][ C0] enqueue_hrtimer+0x324/0x390 [ 107.450382][ C0] __hrtimer_run_queues+0x6b6/0xcf0 [ 107.450395][ C0] hrtimer_interrupt+0x392/0x980 [ 107.450407][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 107.450424][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 107.450438][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 107.450459][ C0] finish_lock_switch+0x91/0x100 [ 107.450473][ C0] finish_task_switch+0x134/0x630 [ 107.450488][ C0] __schedule+0x12cc/0x45b0 [ 107.450501][ C0] schedule+0x11b/0x1f0 [ 107.450512][ C0] do_nanosleep+0x1bc/0x7b0 [ 107.450524][ C0] hrtimer_nanosleep+0x24d/0x490 [ 107.450537][ C0] __se_sys_clock_nanosleep+0x323/0x3b0 [ 107.450554][ C0] do_syscall_64+0x3b/0xb0 [ 107.450566][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.450582][ C0] [ 107.450582][ C0] other info that might help us debug this: [ 107.450582][ C0] [ 107.450586][ C0] Chain exists of: [ 107.450586][ C0] console_owner --> &rt_b->rt_runtime_lock --> hrtimer_bases.lock [ 107.450586][ C0] [ 107.450606][ C0] Possible unsafe locking scenario: [ 107.450606][ C0] [ 107.450610][ C0] CPU0 CPU1 [ 107.450613][ C0] ---- ---- [ 107.450616][ C0] lock(hrtimer_bases.lock); [ 107.450624][ C0] lock(&rt_b->rt_runtime_lock); [ 107.450634][ C0] lock(hrtimer_bases.lock); [ 107.450643][ C0] lock(console_owner); [ 107.450650][ C0] [ 107.450650][ C0] *** DEADLOCK *** [ 107.450650][ C0] [ 107.450653][ C0] 3 locks held by syz-executor/4762: [ 107.450662][ C0] #0: ffff8880b8e2a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x662/0xcf0 [ 107.450695][ C0] #1: ffffffff8cb1fd20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 107.450727][ C0] #2: ffffffff8c9fc5e0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa6/0x150 [ 107.450759][ C0] [ 107.450759][ C0] stack backtrace: [ 107.450772][ C0] CPU: 0 PID: 4762 Comm: syz-executor Not tainted 5.15.174-syzkaller #0 [ 107.450787][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.450800][ C0] Call Trace: [ 107.450805][ C0] [ 107.450810][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 107.450827][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 107.450845][ C0] ? print_circular_bug+0x12b/0x1a0 [ 107.450860][ C0] check_noncircular+0x2f8/0x3b0 [ 107.450878][ C0] ? add_chain_block+0x850/0x850 [ 107.450892][ C0] ? lockdep_lock+0x11f/0x2a0 [ 107.450911][ C0] validate_chain+0x1649/0x5930 [ 107.450935][ C0] ? reacquire_held_locks+0x660/0x660 [ 107.450951][ C0] ? format_decode+0x72f/0x1f10 [ 107.450972][ C0] ? lockdep_unlock+0x166/0x300 [ 107.450989][ C0] ? mark_lock+0x98/0x340 [ 107.451003][ C0] __lock_acquire+0x1295/0x1ff0 [ 107.451023][ C0] lock_acquire+0x1db/0x4f0 [ 107.451035][ C0] ? console_lock_spinning_enable+0x2c/0x60 [ 107.451054][ C0] ? read_lock_is_recursive+0x10/0x10 [ 107.451068][ C0] ? console_lock_spinning_enable+0x2c/0x60 [ 107.451083][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 107.451096][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 107.451117][ C0] console_lock_spinning_enable+0x51/0x60 [ 107.451132][ C0] ? console_lock_spinning_enable+0x2c/0x60 [ 107.451146][ C0] console_unlock+0xa47/0x12b0 [ 107.451164][ C0] ? console_trylock_spinning+0x3f0/0x3f0 [ 107.451180][ C0] ? __down_trylock_console_sem+0x1f2/0x250 [ 107.451195][ C0] ? vprintk_emit+0xa6/0x150 [ 107.451210][ C0] ? printk_parse_prefix+0x2c0/0x2c0 [ 107.451223][ C0] ? vprintk_emit+0xa6/0x150 [ 107.451236][ C0] ? console_trylock+0x70/0x70 [ 107.451256][ C0] ? vprintk_emit+0x150/0x150 [ 107.451275][ C0] vprintk_emit+0xbf/0x150 [ 107.451290][ C0] _printk+0xd1/0x120 [ 107.451306][ C0] ? report_bug+0x16e/0x2e0 [ 107.451320][ C0] ? panic+0x860/0x860 [ 107.451337][ C0] ? find_bug+0x9c/0x350 [ 107.451352][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 107.451366][ C0] report_bug+0x1e5/0x2e0 [ 107.451383][ C0] handle_bug+0x3d/0x70 [ 107.451396][ C0] exc_invalid_op+0x16/0x40 [ 107.451410][ C0] asm_exc_invalid_op+0x16/0x20 [ 107.451426][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 107.451443][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 7b c5 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 64 c5 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 107.451462][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010006 [ 107.451473][ C0] RAX: ffffffff81aabf7c RBX: 0000000000000000 RCX: ffff88801df63b80 [ 107.451484][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.451493][ C0] RBP: dffffc0000000000 R08: ffffffff81aabe8d R09: fffffbfff2131221 [ 107.451504][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 107.451514][ C0] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000007c48 [ 107.451526][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 107.451539][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 107.451556][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 107.451571][ C0] bpf_probe_read_user+0x26/0x70 [ 107.451585][ C0] bpf_prog_5f6df167d0cc17e3+0x3d/0x7d4 [ 107.451598][ C0] bpf_trace_run2+0x19e/0x340 [ 107.451612][ C0] ? posix_cpu_timers_work+0x1300/0x1300 [ 107.451627][ C0] ? bpf_trace_run1+0x2f0/0x2f0 [ 107.451645][ C0] enqueue_hrtimer+0x324/0x390 [ 107.451659][ C0] __hrtimer_run_queues+0x6b6/0xcf0 [ 107.451680][ C0] ? hrtimer_interrupt+0x980/0x980 [ 107.451693][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 107.451712][ C0] hrtimer_interrupt+0x392/0x980 [ 107.451734][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 107.451753][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 107.451769][ C0] [ 107.451772][ C0] [ 107.451777][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 107.451794][ C0] RIP: 0010:finish_lock_switch+0x91/0x100 [ 107.451809][ C0] Code: 45 31 c9 68 c7 ba 59 81 e8 1c 12 09 00 48 83 c4 08 4c 89 ff e8 90 db fe ff 66 90 4c 89 ff e8 36 d1 ee 08 e8 31 48 2d 00 fb 5b <41> 5c 41 5d 41 5e 41 5f c3 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 87 [ 107.451820][ C0] RSP: 0018:ffffc90002eef998 EFLAGS: 00000286 [ 107.451831][ C0] RAX: 5755a29a35e87b00 RBX: ffffffff8c8bd6b4 RCX: ffffffff96a8ff03 [ 107.451842][ C0] RDX: dffffc0000000000 RSI: ffffffff8aab2b80 RDI: ffffffff8af9f000 [ 107.451853][ C0] RBP: ffffc90002eefa10 R08: ffffffff81870360 R09: ffffed10171c7461 [ 107.451863][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 107.451873][ C0] R13: 1ffff110171c760b R14: ffff8880b8e3b058 R15: ffff8880b8e3a300 [ 107.451886][ C0] ? trace_hardirqs_on+0x30/0x80 [ 107.451907][ C0] finish_task_switch+0x134/0x630 [ 107.451925][ C0] ? __switch_to_asm+0x34/0x60 [ 107.451940][ C0] __schedule+0x12cc/0x45b0 [ 107.451961][ C0] ? print_irqtrace_events+0x210/0x210 [ 107.451977][ C0] ? release_firmware_map_entry+0x190/0x190 [ 107.451992][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 107.452008][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 107.452024][ C0] ? _raw_spin_unlock+0x40/0x40 [ 107.452041][ C0] schedule+0x11b/0x1f0 [ 107.452055][ C0] do_nanosleep+0x1bc/0x7b0 [ 107.452073][ C0] ? usleep_range_state+0x1a0/0x1a0 [ 107.452088][ C0] ? memset+0x1f/0x40 [ 107.452104][ C0] ? __hrtimer_init+0x181/0x260 [ 107.452118][ C0] hrtimer_nanosleep+0x24d/0x490 [ 107.452133][ C0] ? nanosleep_copyout+0x120/0x120 [ 107.452147][ C0] ? __remove_hrtimer+0x4b0/0x4b0 [ 107.452162][ C0] ? timespec64_add_safe+0x220/0x220 [ 107.452183][ C0] __se_sys_clock_nanosleep+0x323/0x3b0 [ 107.452204][ C0] ? __x64_sys_clock_nanosleep+0xa0/0xa0 [ 107.452221][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 107.452237][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 107.452253][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 107.452270][ C0] do_syscall_64+0x3b/0xb0 [ 107.452283][ C0] ? clear_bhb_loop+0x15/0x70 [ 107.452297][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.452313][ C0] RIP: 0033:0x7fac6f4db2f5 [ 107.452327][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 107.452338][ C0] RSP: 002b:00007ffc7d0e1c40 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 107.452352][ C0] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00007fac6f4db2f5 [ 107.452362][ C0] RDX: 00007ffc7d0e1c80 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.452371][ C0] RBP: 00007ffc7d0e1d0c R08: 0000000000000000 R09: 0000000000000010 [ 107.452380][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 107.452388][ C0] R13: 000000000001a389 R14: 000000000001a37a R15: 0000000000000001 [ 107.452403][ C0] [ 109.071621][ C0] WARNING: CPU: 0 PID: 4762 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 109.081543][ C0] Modules linked in: [ 109.086043][ C0] CPU: 0 PID: 4762 Comm: syz-executor Not tainted 5.15.174-syzkaller #0 [ 109.094714][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.104774][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 109.110942][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 7b c5 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 64 c5 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 109.130546][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010006 [ 109.136798][ C0] RAX: ffffffff81aabf7c RBX: 0000000000000000 RCX: ffff88801df63b80 [ 109.144854][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.152816][ C0] RBP: dffffc0000000000 R08: ffffffff81aabe8d R09: fffffbfff2131221 [ 109.160958][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 109.169211][ C0] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000007c48 [ 109.177816][ C0] FS: 000055559346c480(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 109.187155][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.193921][ C0] CR2: 0000000000000000 CR3: 0000000066fd1000 CR4: 00000000003506f0 [ 109.202285][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.210647][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 109.218985][ C0] Call Trace: [ 109.222544][ C0] [ 109.225667][ C0] ? __warn+0x15b/0x300 [ 109.229853][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 109.236683][ C0] ? report_bug+0x1b7/0x2e0 [ 109.241227][ C0] ? handle_bug+0x3d/0x70 [ 109.245558][ C0] ? exc_invalid_op+0x16/0x40 [ 109.250229][ C0] ? asm_exc_invalid_op+0x16/0x20 [ 109.255607][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 109.261141][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 109.266679][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 109.272334][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 109.277879][ C0] bpf_probe_read_user+0x26/0x70 [ 109.282823][ C0] bpf_prog_5f6df167d0cc17e3+0x3d/0x7d4 [ 109.288545][ C0] bpf_trace_run2+0x19e/0x340 [ 109.293218][ C0] ? posix_cpu_timers_work+0x1300/0x1300 [ 109.298933][ C0] ? bpf_trace_run1+0x2f0/0x2f0 [ 109.303782][ C0] enqueue_hrtimer+0x324/0x390 [ 109.308540][ C0] __hrtimer_run_queues+0x6b6/0xcf0 [ 109.313736][ C0] ? hrtimer_interrupt+0x980/0x980 [ 109.318857][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 109.324921][ C0] hrtimer_interrupt+0x392/0x980 [ 109.329860][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 109.335875][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 109.341504][ C0] [ 109.344431][ C0] [ 109.347352][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 109.353346][ C0] RIP: 0010:finish_lock_switch+0x91/0x100 [ 109.359061][ C0] Code: 45 31 c9 68 c7 ba 59 81 e8 1c 12 09 00 48 83 c4 08 4c 89 ff e8 90 db fe ff 66 90 4c 89 ff e8 36 d1 ee 08 e8 31 48 2d 00 fb 5b <41> 5c 41 5d 41 5e 41 5f c3 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 87 [ 109.379202][ C0] RSP: 0018:ffffc90002eef998 EFLAGS: 00000286 [ 109.385376][ C0] RAX: 5755a29a35e87b00 RBX: ffffffff8c8bd6b4 RCX: ffffffff96a8ff03 [ 109.393351][ C0] RDX: dffffc0000000000 RSI: ffffffff8aab2b80 RDI: ffffffff8af9f000 [ 109.401404][ C0] RBP: ffffc90002eefa10 R08: ffffffff81870360 R09: ffffed10171c7461 [ 109.409649][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 109.417613][ C0] R13: 1ffff110171c760b R14: ffff8880b8e3b058 R15: ffff8880b8e3a300 [ 109.425761][ C0] ? trace_hardirqs_on+0x30/0x80 [ 109.430888][ C0] finish_task_switch+0x134/0x630 [ 109.435916][ C0] ? __switch_to_asm+0x34/0x60 [ 109.440674][ C0] __schedule+0x12cc/0x45b0 [ 109.445187][ C0] ? print_irqtrace_events+0x210/0x210 [ 109.450652][ C0] ? release_firmware_map_entry+0x190/0x190 [ 109.456553][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 109.461788][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 109.467790][ C0] ? _raw_spin_unlock+0x40/0x40 [ 109.472726][ C0] schedule+0x11b/0x1f0 [ 109.477086][ C0] do_nanosleep+0x1bc/0x7b0 [ 109.481624][ C0] ? usleep_range_state+0x1a0/0x1a0 [ 109.486832][ C0] ? memset+0x1f/0x40 [ 109.490828][ C0] ? __hrtimer_init+0x181/0x260 [ 109.495717][ C0] hrtimer_nanosleep+0x24d/0x490 [ 109.500762][ C0] ? nanosleep_copyout+0x120/0x120 [ 109.505888][ C0] ? __remove_hrtimer+0x4b0/0x4b0 [ 109.511001][ C0] ? timespec64_add_safe+0x220/0x220 [ 109.516299][ C0] __se_sys_clock_nanosleep+0x323/0x3b0 [ 109.521850][ C0] ? __x64_sys_clock_nanosleep+0xa0/0xa0 [ 109.527508][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 109.533591][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 109.538881][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 109.544860][ C0] do_syscall_64+0x3b/0xb0 [ 109.549606][ C0] ? clear_bhb_loop+0x15/0x70 [ 109.554533][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.560538][ C0] RIP: 0033:0x7fac6f4db2f5 [ 109.564967][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 109.585127][ C0] RSP: 002b:00007ffc7d0e1c40 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 109.593744][ C0] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00007fac6f4db2f5 [ 109.601715][ C0] RDX: 00007ffc7d0e1c80 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.609684][ C0] RBP: 00007ffc7d0e1d0c R08: 0000000000000000 R09: 0000000000000010 [ 109.617750][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 109.626075][ C0] R13: 000000000001a389 R14: 000000000001a37a R15: 0000000000000001 [ 109.634049][ C0] [ 109.637128][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 109.644574][ C0] CPU: 0 PID: 4762 Comm: syz-executor Not tainted 5.15.174-syzkaller #0 [ 109.653155][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.663319][ C0] Call Trace: [ 109.666863][ C0] [ 109.669791][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 109.674576][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 109.680466][ C0] ? panic+0x860/0x860 [ 109.684558][ C0] ? panic+0x860/0x860 [ 109.688746][ C0] ? copy_from_user_nofault+0xe0/0x1c0 [ 109.694228][ C0] ? copy_from_user_nofault+0xe0/0x1c0 [ 109.699872][ C0] panic+0x318/0x860 [ 109.703780][ C0] ? __warn+0x16a/0x300 [ 109.707936][ C0] ? fb_is_primary_device+0xd0/0xd0 [ 109.713137][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 109.718711][ C0] __warn+0x2b2/0x300 [ 109.723001][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 109.728836][ C0] report_bug+0x1b7/0x2e0 [ 109.733264][ C0] handle_bug+0x3d/0x70 [ 109.737419][ C0] exc_invalid_op+0x16/0x40 [ 109.742306][ C0] asm_exc_invalid_op+0x16/0x20 [ 109.747253][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 109.753557][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 7b c5 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 64 c5 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 109.773385][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010006 [ 109.779751][ C0] RAX: ffffffff81aabf7c RBX: 0000000000000000 RCX: ffff88801df63b80 [ 109.787911][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.796063][ C0] RBP: dffffc0000000000 R08: ffffffff81aabe8d R09: fffffbfff2131221 [ 109.804144][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 109.812761][ C0] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000007c48 [ 109.820767][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 109.826239][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 109.831789][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 109.837580][ C0] bpf_probe_read_user+0x26/0x70 [ 109.842645][ C0] bpf_prog_5f6df167d0cc17e3+0x3d/0x7d4 [ 109.848333][ C0] bpf_trace_run2+0x19e/0x340 [ 109.853019][ C0] ? posix_cpu_timers_work+0x1300/0x1300 [ 109.858747][ C0] ? bpf_trace_run1+0x2f0/0x2f0 [ 109.863602][ C0] enqueue_hrtimer+0x324/0x390 [ 109.868559][ C0] __hrtimer_run_queues+0x6b6/0xcf0 [ 109.874611][ C0] ? hrtimer_interrupt+0x980/0x980 [ 109.879994][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 109.886650][ C0] hrtimer_interrupt+0x392/0x980 [ 109.891892][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 109.898383][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 109.904659][ C0] [ 109.907608][ C0] [ 109.910541][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 109.916986][ C0] RIP: 0010:finish_lock_switch+0x91/0x100 [ 109.922713][ C0] Code: 45 31 c9 68 c7 ba 59 81 e8 1c 12 09 00 48 83 c4 08 4c 89 ff e8 90 db fe ff 66 90 4c 89 ff e8 36 d1 ee 08 e8 31 48 2d 00 fb 5b <41> 5c 41 5d 41 5e 41 5f c3 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 87 [ 109.942497][ C0] RSP: 0018:ffffc90002eef998 EFLAGS: 00000286 [ 109.949136][ C0] RAX: 5755a29a35e87b00 RBX: ffffffff8c8bd6b4 RCX: ffffffff96a8ff03 [ 109.957301][ C0] RDX: dffffc0000000000 RSI: ffffffff8aab2b80 RDI: ffffffff8af9f000 [ 109.965481][ C0] RBP: ffffc90002eefa10 R08: ffffffff81870360 R09: ffffed10171c7461 [ 109.973538][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 109.981696][ C0] R13: 1ffff110171c760b R14: ffff8880b8e3b058 R15: ffff8880b8e3a300 [ 109.990486][ C0] ? trace_hardirqs_on+0x30/0x80 [ 109.995530][ C0] finish_task_switch+0x134/0x630 [ 110.000586][ C0] ? __switch_to_asm+0x34/0x60 [ 110.005628][ C0] __schedule+0x12cc/0x45b0 [ 110.010312][ C0] ? print_irqtrace_events+0x210/0x210 [ 110.015876][ C0] ? release_firmware_map_entry+0x190/0x190 [ 110.021930][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 110.027608][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 110.033669][ C0] ? _raw_spin_unlock+0x40/0x40 [ 110.038534][ C0] schedule+0x11b/0x1f0 [ 110.042894][ C0] do_nanosleep+0x1bc/0x7b0 [ 110.047429][ C0] ? usleep_range_state+0x1a0/0x1a0 [ 110.052656][ C0] ? memset+0x1f/0x40 [ 110.056679][ C0] ? __hrtimer_init+0x181/0x260 [ 110.061729][ C0] hrtimer_nanosleep+0x24d/0x490 [ 110.066687][ C0] ? nanosleep_copyout+0x120/0x120 [ 110.071806][ C0] ? __remove_hrtimer+0x4b0/0x4b0 [ 110.076848][ C0] ? timespec64_add_safe+0x220/0x220 [ 110.082206][ C0] __se_sys_clock_nanosleep+0x323/0x3b0 [ 110.087865][ C0] ? __x64_sys_clock_nanosleep+0xa0/0xa0 [ 110.093600][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 110.099592][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 110.104795][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 110.110797][ C0] do_syscall_64+0x3b/0xb0 [ 110.115223][ C0] ? clear_bhb_loop+0x15/0x70 [ 110.120175][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.126079][ C0] RIP: 0033:0x7fac6f4db2f5 [ 110.130491][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 110.150122][ C0] RSP: 002b:00007ffc7d0e1c40 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 110.158716][ C0] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00007fac6f4db2f5 [ 110.166696][ C0] RDX: 00007ffc7d0e1c80 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.174669][ C0] RBP: 00007ffc7d0e1d0c R08: 0000000000000000 R09: 0000000000000010 [ 110.182643][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 110.190698][ C0] R13: 000000000001a389 R14: 000000000001a37a R15: 0000000000000001 [ 110.198683][ C0] [ 110.202195][ C0] Kernel Offset: disabled [ 110.206853][ C0] Rebooting in 86400 seconds..