invalid opcode: 0000 [#1] PREEMPT SMP CPU: 0 PID: 5009 Comm: syz-executor.0 Not tainted 5.14.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 RIP: 0010:add_timer kernel/time/timer.c:1141 [inline] RIP: 0010:add_timer+0x2f/0x40 kernel/time/timer.c:1139 Code: 97 4a 07 00 48 8b 45 08 48 85 c0 75 17 e8 89 4a 07 00 48 8b 75 10 48 89 ef ba 04 00 00 00 5d e9 47 f8 ff ff e8 72 4a 07 00 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 55 89 fd 53 e8 RSP: 0018:ffffc90000003da8 EFLAGS: 00010046 RAX: 0000000080010003 RBX: 0000000000000046 RCX: 0000000000000000 RDX: ffff888107110400 RSI: ffffffff8123aaae RDI: ffff888114ca1698 RBP: ffff888114ca1698 R08: 0000000000000008 R09: 0000000014ca1000 R10: ffffffff811ad481 R11: 0000000000000000 R12: ffff888114ca1650 R13: 0000000000000001 R14: 0000000000000008 R15: ffff888114ca1000 FS: 00007ffba65bf6c0(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffba6b58000 CR3: 000000010d67f000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __queue_delayed_work kernel/workqueue.c:1656 [inline] queue_delayed_work_on+0x10a/0x160 kernel/workqueue.c:1681 psi_task_change+0x91/0x110 kernel/sched/psi.c:818 psi_enqueue kernel/sched/stats.h:82 [inline] enqueue_task+0xdc/0x120 kernel/sched/core.c:1943 activate_task kernel/sched/core.c:1972 [inline] ttwu_do_activate+0x6a/0xe0 kernel/sched/core.c:3365 ttwu_queue kernel/sched/core.c:3562 [inline] try_to_wake_up+0x24e/0x720 kernel/sched/core.c:3840 hrtimer_wakeup+0x28/0x40 kernel/time/hrtimer.c:1791 __run_hrtimer kernel/time/hrtimer.c:1537 [inline] __hrtimer_run_queues+0x235/0x5c0 kernel/time/hrtimer.c:1601 hrtimer_interrupt+0x12b/0x360 kernel/time/hrtimer.c:1663 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline] __sysvec_apic_timer_interrupt+0x85/0x1d0 arch/x86/kernel/apic/apic.c:1106 sysvec_apic_timer_interrupt+0x9f/0xc0 arch/x86/kernel/apic/apic.c:1100 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0010:__memmove+0x24/0x1a0 arch/x86/lib/memmove_64.S:42 Code: cc cc cc cc cc cc 48 89 f8 48 39 fe 7d 0f 49 89 f0 49 01 d0 49 39 f8 0f 8f a9 00 00 00 48 83 fa 20 0f 82 f5 00 00 00 48 89 d1 a4 c3 48 81 fa a8 02 00 00 72 05 40 38 fe 74 3b 48 83 ea 20 48 RSP: 0018:ffffc9000134b590 EFLAGS: 00010286 RAX: ffff8881143f2030 RBX: 0000000000000000 RCX: ffffffffff5edfc8 RDX: fffffffffffffec9 RSI: ffff888114e04f01 RDI: ffff888114e03f31 RBP: ffff8881143f20d8 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff81678dc9 R11: 0000000000000000 R12: 0000000000000001 R13: 0000000000000008 R14: 0000000000000009 R15: 0000000000000fd0 Modules linked in: ---[ end trace 6a267dd142d466d1 ]--- RIP: 0010:add_timer kernel/time/timer.c:1141 [inline] RIP: 0010:add_timer+0x2f/0x40 kernel/time/timer.c:1139 Code: 97 4a 07 00 48 8b 45 08 48 85 c0 75 17 e8 89 4a 07 00 48 8b 75 10 48 89 ef ba 04 00 00 00 5d e9 47 f8 ff ff e8 72 4a 07 00 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 55 89 fd 53 e8 RSP: 0018:ffffc90000003da8 EFLAGS: 00010046 RAX: 0000000080010003 RBX: 0000000000000046 RCX: 0000000000000000 RDX: ffff888107110400 RSI: ffffffff8123aaae RDI: ffff888114ca1698 RBP: ffff888114ca1698 R08: 0000000000000008 R09: 0000000014ca1000 R10: ffffffff811ad481 R11: 0000000000000000 R12: ffff888114ca1650 R13: 0000000000000001 R14: 0000000000000008 R15: ffff888114ca1000 FS: 00007ffba65bf6c0(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffba6b58000 CR3: 000000010d67f000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: cc int3 1: cc int3 2: cc int3 3: cc int3 4: cc int3 5: cc int3 6: 48 89 f8 mov %rdi,%rax 9: 48 39 fe cmp %rdi,%rsi c: 7d 0f jge 0x1d e: 49 89 f0 mov %rsi,%r8 11: 49 01 d0 add %rdx,%r8 14: 49 39 f8 cmp %rdi,%r8 17: 0f 8f a9 00 00 00 jg 0xc6 1d: 48 83 fa 20 cmp $0x20,%rdx 21: 0f 82 f5 00 00 00 jb 0x11c 27: 48 89 d1 mov %rdx,%rcx * 2a: f3 a4 rep movsb %ds:(%rsi),%es:(%rdi) <-- trapping instruction 2c: c3 ret 2d: 48 81 fa a8 02 00 00 cmp $0x2a8,%rdx 34: 72 05 jb 0x3b 36: 40 38 fe cmp %dil,%sil 39: 74 3b je 0x76 3b: 48 83 ea 20 sub $0x20,%rdx 3f: 48 rex.W