Ubuntu 26.10 Snapshot 4 has the same issue out of the box if I enable "App permissions".
Linux 7.2.0-5-generic, Lenovo 21VV004MGE (X9-15p is "Ubuntu certified" generally) Firefox snap 155.0.1-1, revision 8863, kernel.timer_migration=1 Reproducer: 1. Use the Firefox snap. 2. Download a file into ~/Downloads. 3. Open it using Firefox’s built-in Open action, which hands the file through xdg-document-portal/FUSE. 4. The system begins emitting timer/workqueue warnings and suddenly screen can go black and system becomes unresponsive. Repeated warnings begin: WARNING: kernel/workqueue.c:2385 at __queue_work+0x330/0x430 Stack includes delayed_work_timer_fn, __run_timers, timer_expire_remote, tmigr_handle_remote_cpu, tmigr_handle_remote_up, and tmigr_handle_remote. Timer/list corruption includes 0xdead000000000122 and 0xdead00000000012a. Fatal kernel GPF occurs approximately after a minute minutes. nohz=off nor timer_migration=0 are not acceptable resolution and it seems to be related to AppArmor but I think its actually triggering some more general bug in current kernel with timers. The crash appears in core kernel code: __run_timers() / timer migration, with LIST_POISON2. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2156855 Title: linux 7.0.0-22: timer-wheel use-after-free — NULL write in __run_timers (RAX=LIST_POISON2) from timer softirq, panics in idle task To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2156855/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
