------------[ cut here ]------------ WARNING: CPU: 1 PID: 6679 at kernel/workqueue.c:2257 current_wq_worker kernel/workqueue_internal.h:69 [inline] WARNING: CPU: 1 PID: 6679 at kernel/workqueue.c:2257 is_chained_work kernel/workqueue.c:2199 [inline] WARNING: CPU: 1 PID: 6679 at kernel/workqueue.c:2257 __queue_work+0xe50/0x1308 kernel/workqueue.c:2256 Modules linked in: CPU: 1 UID: 0 PID: 6679 Comm: syz.2.38 Not tainted 6.14.0-rc3-syzkaller-ga1c24ab82279 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __queue_work+0xe50/0x1308 kernel/workqueue_internal.h:69 lr : current_wq_worker kernel/workqueue_internal.h:69 [inline] lr : is_chained_work kernel/workqueue.c:2199 [inline] lr : __queue_work+0xe50/0x1308 kernel/workqueue.c:2256 sp : ffff800080017b40 x29: ffff800080017b90 x28: dfff800000000000 x27: ffff700010002f88 x26: dfff800000000000 x25: ffff0000c2f52800 x24: 0000000000000008 x23: 1fffe000189a6001 x22: ffff0000c2f529c0 x21: 0000000000000100 x20: ffff0000c4d30000 x19: ffff0000ed390930 x18: ffff8000a0d7783c x17: ffff800123ca8000 x16: ffff8000832b5a70 x15: 0000000000000002 x14: 1ffff00011f780cb x13: dfff800000000000 x12: 0000000014151c32 x11: 000000000a784a7c x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000c4d30000 x7 : ffff800080588454 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008e14e3a0 x2 : ffff0000ed390930 x1 : 0000000000000100 x0 : 0000000000000000 Call trace: current_wq_worker kernel/workqueue_internal.h:69 [inline] (P) is_chained_work kernel/workqueue.c:2199 [inline] (P) __queue_work+0xe50/0x1308 kernel/workqueue.c:2256 (P) delayed_work_timer_fn+0x74/0x90 kernel/workqueue.c:2485 call_timer_fn+0x1b4/0x8b8 kernel/time/timer.c:1789 expire_timers kernel/time/timer.c:1835 [inline] __run_timers kernel/time/timer.c:2414 [inline] __run_timer_base+0x59c/0x7b4 kernel/time/timer.c:2426 run_timer_base kernel/time/timer.c:2435 [inline] run_timer_softirq+0xcc/0x194 kernel/time/timer.c:2445 handle_softirqs+0x320/0xd34 kernel/softirq.c:561 __do_softirq+0x14/0x20 kernel/softirq.c:595 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:442 [inline] __irq_exit_rcu+0x1d8/0x544 kernel/softirq.c:662 irq_exit_rcu+0x14/0x84 kernel/softirq.c:678 __el1_irq arch/arm64/kernel/entry-common.c:561 [inline] el1_interrupt+0x38/0x68 arch/arm64/kernel/entry-common.c:575 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:580 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 page_ext_next include/linux/page_ext.h:92 [inline] (P) page_table_check_clear+0x24c/0x3f8 mm/page_table_check.c:92 (P) __page_table_check_pte_clear+0xa0/0xc0 mm/page_table_check.c:169 page_table_check_pte_clear include/linux/page_table_check.h:49 [inline] __ptep_get_and_clear arch/arm64/include/asm/pgtable.h:1284 [inline] __get_and_clear_full_ptes arch/arm64/include/asm/pgtable.h:1307 [inline] get_and_clear_full_ptes arch/arm64/include/asm/pgtable.h:1708 [inline] zap_present_folio_ptes mm/memory.c:1511 [inline] zap_present_ptes mm/memory.c:1596 [inline] do_zap_pte_range mm/memory.c:1698 [inline] zap_pte_range mm/memory.c:1740 [inline] zap_pmd_range mm/memory.c:1823 [inline] zap_pud_range mm/memory.c:1852 [inline] zap_p4d_range mm/memory.c:1873 [inline] unmap_page_range+0x2994/0x31d4 mm/memory.c:1894 unmap_single_vma mm/memory.c:1940 [inline] unmap_vmas+0x378/0x598 mm/memory.c:1984 exit_mmap+0x1f0/0xda0 mm/mmap.c:1284 __mmput+0xec/0x3dc kernel/fork.c:1356 mmput+0x70/0xac kernel/fork.c:1378 exit_mm+0x148/0x210 kernel/exit.c:570 do_exit+0x46c/0x1acc kernel/exit.c:925 do_group_exit+0x194/0x22c kernel/exit.c:1087 __do_sys_exit_group kernel/exit.c:1098 [inline] __se_sys_exit_group kernel/exit.c:1096 [inline] pid_child_should_wake+0x0/0x1dc kernel/exit.c:1096 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 9287 hardirqs last enabled at (9286): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (9286): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (9287): [] __raw_spin_lock_irq include/linux/spinlock_api_smp.h:117 [inline] hardirqs last disabled at (9287): [] _raw_spin_lock_irq+0x28/0x70 kernel/locking/spinlock.c:170 softirqs last enabled at (8158): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (8158): [] remove_user_radios drivers/net/wireless/virtual/mac80211_hwsim.c:6460 [inline] softirqs last enabled at (8158): [] mac80211_hwsim_netlink_notify+0x380/0x7c4 drivers/net/wireless/virtual/mac80211_hwsim.c:6478 softirqs last disabled at (9275): [] __do_softirq+0x14/0x20 kernel/softirq.c:595 ---[ end trace 0000000000000000 ]--- vkms_vblank_simulate: vblank timer overrun