Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. 2025/05/31 16:19:48 ignoring optional flag "sandboxArg"="0" 2025/05/31 16:19:49 parsed 1 programs syzkaller login: [ 53.424299][ T4174] cgroup: Unknown subsys name 'net' [ 53.551686][ T4174] cgroup: Unknown subsys name 'rlimit' [ 54.749577][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 56.853122][ T4205] chnl_net:caif_netlink_parms(): no params data found [ 57.027269][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.062786][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.150220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.303521][ T4205] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.337105][ T4205] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.345599][ T4205] device bridge_slave_0 entered promiscuous mode [ 57.370693][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.385604][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.422876][ T4205] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.438340][ T4205] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.471335][ T4205] device bridge_slave_1 entered promiscuous mode [ 57.499459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.600689][ T4205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.638875][ T4205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.753284][ T4205] team0: Port device team_slave_0 added [ 57.795282][ T4205] team0: Port device team_slave_1 added [ 57.867389][ T4205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.874371][ T4205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.901938][ T4205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.931453][ T4205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.938520][ T4205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.964940][ T4205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.041569][ T4205] device hsr_slave_0 entered promiscuous mode [ 58.068342][ T4205] device hsr_slave_1 entered promiscuous mode [ 58.339297][ T4205] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.360912][ T4205] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.390897][ T4205] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.416012][ T4205] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.521865][ T4205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.551885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.561769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.576558][ T4205] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.589608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.603177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.613787][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.621190][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.641184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.651016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.660519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.674037][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.681306][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.693187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.714821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.724212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.736914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.746051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.757482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.769207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.777280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.785927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.801783][ T4205] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.813786][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.826843][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.837969][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.947657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.955218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.973805][ T4205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.997844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.007807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.042226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.051839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.061623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.069439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.078585][ T4205] device veth0_vlan entered promiscuous mode [ 59.095654][ T4205] device veth1_vlan entered promiscuous mode [ 59.129236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.139474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.148804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.157822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.168438][ T4205] device veth0_macvtap entered promiscuous mode [ 59.179967][ T4205] device veth1_macvtap entered promiscuous mode [ 59.218829][ T4205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.230688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.239100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.248760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.258060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.271573][ T4205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.287907][ T4205] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.296878][ T4205] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.305866][ T4205] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.316267][ T4205] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.328845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.337894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.352547][ T1108] Bluetooth: hci0: command 0x0409 tx timeout 2025/05/31 16:19:56 executed programs: 0 [ 59.458256][ T4205] syz-executor (4205) used greatest stack depth: 20640 bytes left [ 60.034318][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 60.051150][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 60.219473][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.226676][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.235374][ T4278] device bridge_slave_0 entered promiscuous mode [ 60.273342][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 60.304840][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.312242][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.320850][ T4278] device bridge_slave_1 entered promiscuous mode [ 60.328388][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.335449][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.343277][ T4270] device bridge_slave_0 entered promiscuous mode [ 60.394321][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.402116][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.411136][ T4270] device bridge_slave_1 entered promiscuous mode [ 60.434541][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 60.501487][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.513544][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.525440][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.539162][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 60.577250][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.609438][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.616495][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.625049][ T4279] device bridge_slave_0 entered promiscuous mode [ 60.634071][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.641518][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.649900][ T4279] device bridge_slave_1 entered promiscuous mode [ 60.695784][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.703013][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.711578][ T4275] device bridge_slave_0 entered promiscuous mode [ 60.721492][ T4278] team0: Port device team_slave_0 added [ 60.730193][ T4270] team0: Port device team_slave_0 added [ 60.737508][ T4278] team0: Port device team_slave_1 added [ 60.768967][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.776042][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.783870][ T4275] device bridge_slave_1 entered promiscuous mode [ 60.792585][ T4270] team0: Port device team_slave_1 added [ 60.816381][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.823455][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.850218][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.864198][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.876306][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.904584][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.912427][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.921027][ T4276] device bridge_slave_0 entered promiscuous mode [ 60.928859][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.935821][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.962588][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.017488][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.024463][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.050997][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.062514][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.070445][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.080948][ T4276] device bridge_slave_1 entered promiscuous mode [ 61.108077][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.120513][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.128038][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.154544][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.186695][ T4279] team0: Port device team_slave_0 added [ 61.195829][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.228381][ T4278] device hsr_slave_0 entered promiscuous mode [ 61.234993][ T4278] device hsr_slave_1 entered promiscuous mode [ 61.241604][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.249842][ T4278] Cannot create hsr debugfs directory [ 61.257581][ T4279] team0: Port device team_slave_1 added [ 61.296248][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.308943][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.328090][ T4275] team0: Port device team_slave_0 added [ 61.337249][ T4270] device hsr_slave_0 entered promiscuous mode [ 61.343825][ T4270] device hsr_slave_1 entered promiscuous mode [ 61.350937][ T4270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.359086][ T4270] Cannot create hsr debugfs directory [ 61.381194][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.388274][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.414530][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.429572][ T4275] team0: Port device team_slave_1 added [ 61.460041][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.468086][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.494404][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.516407][ T4276] team0: Port device team_slave_0 added [ 61.555054][ T4276] team0: Port device team_slave_1 added [ 61.584695][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.592594][ T4265] Bluetooth: hci1: command 0x0409 tx timeout [ 61.595410][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.626428][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.682942][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.690212][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.717874][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.736257][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.743474][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.770875][ T4265] Bluetooth: hci0: command 0x0409 tx timeout [ 61.772975][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.787814][ T4263] Bluetooth: hci4: command 0x0409 tx timeout [ 61.797619][ T4263] Bluetooth: hci3: command 0x0409 tx timeout [ 61.803762][ T4263] Bluetooth: hci2: command 0x0409 tx timeout [ 61.814157][ T4279] device hsr_slave_0 entered promiscuous mode [ 61.820853][ T4279] device hsr_slave_1 entered promiscuous mode [ 61.828401][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.835963][ T4279] Cannot create hsr debugfs directory [ 61.848488][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.855458][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.881690][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.958218][ T4275] device hsr_slave_0 entered promiscuous mode [ 61.964734][ T4275] device hsr_slave_1 entered promiscuous mode [ 61.972724][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.980463][ T4275] Cannot create hsr debugfs directory [ 62.027912][ T4276] device hsr_slave_0 entered promiscuous mode [ 62.034875][ T4276] device hsr_slave_1 entered promiscuous mode [ 62.042714][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.050410][ T4276] Cannot create hsr debugfs directory [ 62.257689][ T4278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.292742][ T4278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.311184][ T4270] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.330615][ T4278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.340347][ T4278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.418428][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.446017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.455456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.465225][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.485968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.495624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.504424][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.511527][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.522688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.539483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.551480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.560660][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.567777][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.598890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.608044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.616569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.626192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.635098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.651434][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.660397][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.671692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.680656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.699456][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.708758][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.721601][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.875060][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.882709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.897238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.920455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.936595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.959068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.973331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.986323][ T4278] device veth0_vlan entered promiscuous mode [ 62.999975][ T4278] device veth1_vlan entered promiscuous mode [ 63.017924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.030164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.043216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.078077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.086819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.104496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.119661][ T4278] device veth0_macvtap entered promiscuous mode [ 63.131788][ T4278] device veth1_macvtap entered promiscuous mode [ 63.154924][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.166813][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.180159][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.188622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.197844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.206073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.215482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.228009][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.239430][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.251759][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.265628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.276115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.289350][ T4278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.299312][ T4278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.308273][ T4278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.317258][ T4278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.388416][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.396420][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.415570][ T1417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.419624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.431539][ T1417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.443783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.671397][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 63.837669][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 63.847791][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 63.855185][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 63.861689][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 63.897027][ C1] ------------[ cut here ]------------ [ 63.897813][ C1] [ 63.897819][ C1] ====================================================== [ 63.897824][ C1] WARNING: possible circular locking dependency detected [ 63.897829][ C1] 5.15.184-syzkaller #0 Not tainted [ 63.897838][ C1] ------------------------------------------------------ [ 63.897842][ C1] kworker/1:13/4259 is trying to acquire lock: [ 63.897850][ C1] ffffffff8c110aa0 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60 [ 63.897894][ C1] [ 63.897894][ C1] but task is already holding lock: [ 63.897898][ C1] ffff8880b912a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x5ff/0xc40 [ 63.897936][ C1] [ 63.897936][ C1] which lock already depends on the new lock. [ 63.897936][ C1] [ 63.897941][ C1] [ 63.897941][ C1] the existing dependency chain (in reverse order) is: [ 63.897945][ C1] [ 63.897945][ C1] -> #6 (hrtimer_bases.lock){-.-.}-{2:2}: [ 63.897966][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 63.897985][ C1] hrtimer_start_range_ns+0xff/0xc20 [ 63.898000][ C1] enqueue_task_rt+0x60c/0xc00 [ 63.898014][ C1] enqueue_task+0x182/0x2b0 [ 63.898028][ C1] __sched_setscheduler+0x1379/0x1be0 [ 63.898044][ C1] sched_set_fifo+0xbc/0x120 [ 63.898060][ C1] drm_vblank_worker_init+0x149/0x1a0 [ 63.898075][ C1] drm_vblank_init+0x265/0x330 [ 63.898091][ C1] vkms_init+0x31a/0x700 [ 63.898139][ C1] do_one_initcall+0x1ee/0x680 [ 63.898154][ C1] do_initcall_level+0x137/0x1f0 [ 63.898167][ C1] do_initcalls+0x4b/0x90 [ 63.898179][ C1] kernel_init_freeable+0x3ce/0x560 [ 63.898192][ C1] kernel_init+0x19/0x1b0 [ 63.898207][ C1] ret_from_fork+0x1f/0x30 [ 63.898222][ C1] [ 63.898222][ C1] -> #5 (&rt_b->rt_runtime_lock){-...}-{2:2}: [ 63.898243][ C1] _raw_spin_lock+0x2a/0x40 [ 63.898258][ C1] rq_online_rt+0x125/0x310 [ 63.898271][ C1] sched_cpu_activate+0x4ae/0x650 [ 63.898284][ C1] cpuhp_invoke_callback+0x431/0x830 [ 63.898301][ C1] cpuhp_thread_fun+0x39a/0x7d0 [ 63.898316][ C1] smpboot_thread_fn+0x4f6/0x970 [ 63.898332][ C1] kthread+0x436/0x520 [ 63.898344][ C1] ret_from_fork+0x1f/0x30 [ 63.898358][ C1] [ 63.898358][ C1] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 63.898378][ C1] _raw_spin_lock_nested+0x2e/0x40 [ 63.898394][ C1] raw_spin_rq_lock_nested+0x26/0x140 [ 63.898408][ C1] task_fork_fair+0x5c/0x350 [ 63.898420][ C1] sched_cgroup_fork+0x2c6/0x320 [ 63.898435][ C1] copy_process+0x22bd/0x3e60 [ 63.898448][ C1] kernel_clone+0x219/0x930 [ 63.898461][ C1] kernel_thread+0xc8/0x120 [ 63.898473][ C1] rest_init+0x21/0x330 [ 63.898488][ C1] start_kernel+0x486/0x530 [ 63.898504][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 63.898520][ C1] [ 63.898520][ C1] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 63.898540][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 63.898556][ C1] try_to_wake_up+0x5c/0x1050 [ 63.898570][ C1] __wake_up_common+0x2a4/0x4e0 [ 63.898586][ C1] __wake_up+0x108/0x180 [ 63.898600][ C1] tty_port_default_wakeup+0xa5/0xf0 [ 63.898616][ C1] serial8250_tx_chars+0x629/0x830 [ 63.898632][ C1] serial8250_handle_irq+0x519/0x610 [ 63.898648][ C1] serial8250_default_handle_irq+0xb4/0x1a0 [ 63.898666][ C1] serial8250_interrupt+0x9b/0x1c0 [ 63.898681][ C1] __handle_irq_event_percpu+0x291/0x9b0 [ 63.898696][ C1] handle_irq_event+0xa5/0x220 [ 63.898710][ C1] handle_edge_irq+0x243/0xb20 [ 63.898725][ C1] __common_interrupt+0xd7/0x1e0 [ 63.898738][ C1] common_interrupt+0xb0/0xd0 [ 63.898752][ C1] asm_common_interrupt+0x22/0x40 [ 63.898765][ C1] __kernel_text_address+0xd0/0x100 [ 63.898781][ C1] unwind_get_return_address+0x49/0x80 [ 63.898796][ C1] arch_stack_walk+0xf2/0x140 [ 63.898811][ C1] stack_trace_save+0x98/0xe0 [ 63.898824][ C1] save_stack+0xf3/0x1e0 [ 63.898840][ C1] __reset_page_owner+0x51/0x180 [ 63.898854][ C1] free_unref_page_prepare+0x637/0x6c0 [ 63.898867][ C1] free_unref_page+0x94/0x280 [ 63.898879][ C1] __unfreeze_partials+0x1a5/0x200 [ 63.898892][ C1] put_cpu_partial+0x12d/0x190 [ 63.898903][ C1] qlist_free_all+0x35/0x90 [ 63.898914][ C1] kasan_quarantine_reduce+0x150/0x160 [ 63.898924][ C1] __kasan_slab_alloc+0x2f/0xd0 [ 63.898937][ C1] slab_post_alloc_hook+0x4c/0x380 [ 63.898950][ C1] __kmalloc+0x127/0x330 [ 63.898963][ C1] tomoyo_realpath_from_path+0x118/0x610 [ 63.898978][ C1] tomoyo_path_perm+0x1cd/0x510 [ 63.898994][ C1] security_inode_getattr+0xcf/0x120 [ 63.899011][ C1] vfs_getattr+0x26/0x3a0 [ 63.899023][ C1] __x64_sys_newfstat+0x104/0x1d0 [ 63.899036][ C1] do_syscall_64+0x4c/0xa0 [ 63.899049][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.899067][ C1] [ 63.899067][ C1] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 63.899088][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 63.899111][ C1] __wake_up+0xed/0x180 [ 63.899125][ C1] tty_port_default_wakeup+0xa5/0xf0 [ 63.899140][ C1] serial8250_tx_chars+0x629/0x830 [ 63.899156][ C1] serial8250_handle_irq+0x519/0x610 [ 63.899172][ C1] serial8250_default_handle_irq+0xb4/0x1a0 [ 63.899189][ C1] serial8250_interrupt+0x9b/0x1c0 [ 63.899204][ C1] __handle_irq_event_percpu+0x291/0x9b0 [ 63.899218][ C1] handle_irq_event+0xa5/0x220 [ 63.899231][ C1] handle_edge_irq+0x243/0xb20 [ 63.899246][ C1] __common_interrupt+0xd7/0x1e0 [ 63.899259][ C1] common_interrupt+0xb0/0xd0 [ 63.899273][ C1] asm_common_interrupt+0x22/0x40 [ 63.899286][ C1] default_idle+0xb/0x10 [ 63.899300][ C1] default_idle_call+0x81/0xc0 [ 63.899315][ C1] do_idle+0x21b/0x5b0 [ 63.899329][ C1] cpu_startup_entry+0x14/0x20 [ 63.899344][ C1] start_kernel+0x486/0x530 [ 63.899359][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 63.899374][ C1] [ 63.899374][ C1] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 63.899394][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 63.899410][ C1] serial8250_console_write+0x170/0xf80 [ 63.899426][ C1] console_unlock+0xc86/0x1200 [ 63.899442][ C1] vprintk_emit+0xc0/0x150 [ 63.899458][ C1] _printk+0xcc/0x110 [ 63.899469][ C1] register_console+0x682/0x960 [ 63.899482][ C1] univ8250_console_init+0x41/0x50 [ 63.899495][ C1] console_init+0x177/0x5d0 [ 63.899509][ C1] start_kernel+0x2f9/0x530 [ 63.899524][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 63.899540][ C1] [ 63.899540][ C1] -> #0 (console_owner){-...}-{0:0}: [ 63.899559][ C1] __lock_acquire+0x2c33/0x7c60 [ 63.899575][ C1] lock_acquire+0x197/0x3f0 [ 63.899590][ C1] console_lock_spinning_enable+0x51/0x60 [ 63.899604][ C1] console_unlock+0x9f8/0x1200 [ 63.899619][ C1] vprintk_emit+0xc0/0x150 [ 63.899635][ C1] _printk+0xcc/0x110 [ 63.899646][ C1] report_bug+0x1e5/0x2e0 [ 63.899659][ C1] handle_bug+0x3a/0x70 [ 63.899672][ C1] exc_invalid_op+0x16/0x40 [ 63.899685][ C1] asm_exc_invalid_op+0x16/0x20 [ 63.899697][ C1] copy_from_user_nofault+0x160/0x1c0 [ 63.899714][ C1] bpf_probe_read_compat+0xdd/0x170 [ 63.899730][ C1] bpf_prog_4595f2d530cd9aa3+0x35/0x5c0 [ 63.899743][ C1] bpf_trace_run2+0x15b/0x2d0 [ 63.899759][ C1] enqueue_hrtimer+0x314/0x370 [ 63.899774][ C1] __hrtimer_run_queues+0x65a/0xc40 [ 63.899790][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 63.899805][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 63.899823][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 63.899839][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 63.899852][ C1] _raw_spin_unlock_irq+0x25/0x40 [ 63.899867][ C1] process_one_work+0x758/0x1000 [ 63.899881][ C1] worker_thread+0xaa8/0x12a0 [ 63.899895][ C1] kthread+0x436/0x520 [ 63.899907][ C1] ret_from_fork+0x1f/0x30 [ 63.899921][ C1] [ 63.899921][ C1] other info that might help us debug this: [ 63.899921][ C1] [ 63.899926][ C1] Chain exists of: [ 63.899926][ C1] console_owner --> &rt_b->rt_runtime_lock --> hrtimer_bases.lock [ 63.899926][ C1] [ 63.899951][ C1] Possible unsafe locking scenario: [ 63.899951][ C1] [ 63.899955][ C1] CPU0 CPU1 [ 63.899958][ C1] ---- ---- [ 63.899962][ C1] lock(hrtimer_bases.lock); [ 63.899972][ C1] lock(&rt_b->rt_runtime_lock); [ 63.899983][ C1] lock(hrtimer_bases.lock); [ 63.899993][ C1] lock(console_owner); [ 63.900003][ C1] [ 63.900003][ C1] *** DEADLOCK *** [ 63.900003][ C1] [ 63.900006][ C1] 3 locks held by kworker/1:13/4259: [ 63.900016][ C1] #0: ffff8880b912a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x5ff/0xc40 [ 63.900056][ C1] #1: ffffffff8c11c060 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 63.900091][ C1] #2: ffffffff8c110b80 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa7/0x150 [ 63.900145][ C1] [ 63.900145][ C1] stack backtrace: [ 63.900151][ C1] CPU: 1 PID: 4259 Comm: kworker/1:13 Not tainted 5.15.184-syzkaller #0 [ 63.900166][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.900176][ C1] Workqueue: rcu_gp process_srcu [ 63.900193][ C1] Call Trace: [ 63.900199][ C1] [ 63.900205][ C1] dump_stack_lvl+0x168/0x230 [ 63.900220][ C1] ? load_image+0x3b0/0x3b0 [ 63.900234][ C1] ? show_regs_print_info+0x20/0x20 [ 63.900253][ C1] ? print_circular_bug+0x12b/0x1a0 [ 63.900269][ C1] check_noncircular+0x274/0x310 [ 63.900285][ C1] ? add_chain_block+0x940/0x940 [ 63.900298][ C1] ? lockdep_lock+0xdc/0x1e0 [ 63.900318][ C1] ? mark_lock+0x94/0x320 [ 63.900335][ C1] __lock_acquire+0x2c33/0x7c60 [ 63.900363][ C1] ? verify_lock_unused+0x140/0x140 [ 63.900386][ C1] ? sprintf+0xd6/0x120 [ 63.900402][ C1] lock_acquire+0x197/0x3f0 [ 63.900419][ C1] ? console_lock_spinning_enable+0x2c/0x60 [ 63.900434][ C1] ? prb_read_valid+0x60/0x60 [ 63.900451][ C1] ? read_lock_is_recursive+0x10/0x10 [ 63.900468][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 63.900484][ C1] ? __rwlock_init+0x140/0x140 [ 63.900499][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 63.900516][ C1] console_lock_spinning_enable+0x51/0x60 [ 63.900530][ C1] ? console_lock_spinning_enable+0x2c/0x60 [ 63.900544][ C1] console_unlock+0x9f8/0x1200 [ 63.900565][ C1] ? console_trylock_spinning+0x350/0x350 [ 63.900585][ C1] ? __down_trylock_console_sem+0x184/0x1e0 [ 63.900600][ C1] ? vprintk_emit+0xa7/0x150 [ 63.900616][ C1] ? printk_parse_prefix+0x330/0x330 [ 63.900633][ C1] ? vprintk_emit+0xa7/0x150 [ 63.900650][ C1] ? console_trylock+0x70/0x70 [ 63.900664][ C1] ? rcu_read_lock_sched_held+0x86/0xf0 [ 63.900685][ C1] ? vprintk_emit+0x150/0x150 [ 63.900701][ C1] ? __lock_acquire+0x12d9/0x7c60 [ 63.900720][ C1] ? mark_lock+0x94/0x320 [ 63.900740][ C1] vprintk_emit+0xc0/0x150 [ 63.900758][ C1] _printk+0xcc/0x110 [ 63.900773][ C1] ? load_image+0x3b0/0x3b0 [ 63.900788][ C1] ? trace_pelt_se_tp+0x39/0x100 [ 63.900802][ C1] ? verify_lock_unused+0x140/0x140 [ 63.900819][ C1] ? find_bug+0xa1/0x350 [ 63.900831][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 63.900848][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 63.900865][ C1] report_bug+0x1e5/0x2e0 [ 63.900881][ C1] handle_bug+0x3a/0x70 [ 63.900896][ C1] exc_invalid_op+0x16/0x40 [ 63.900911][ C1] asm_exc_invalid_op+0x16/0x20 [ 63.900924][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 63.900943][ C1] Code: 24 45 31 f6 31 ff 89 de e8 dd e3 d7 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 e0 d7 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 63.900956][ C1] RSP: 0018:ffffc90000dd0b98 EFLAGS: 00010006 [ 63.900969][ C1] RAX: ffffffff819fe0e0 RBX: 0000000000000000 RCX: ffff888029663b80 [ 63.900981][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.900990][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10052cc771 [ 63.901001][ C1] R10: ffffed10052cc771 R11: 1ffff110052cc770 R12: ffff888029665308 [ 63.901013][ C1] R13: 00007ffffffff000 R14: ffffc90000dd0c08 R15: 000000007fffffe8 [ 63.901027][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 63.901047][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 63.901065][ C1] bpf_probe_read_compat+0xdd/0x170 [ 63.901083][ C1] bpf_prog_4595f2d530cd9aa3+0x35/0x5c0 [ 63.901103][ C1] bpf_trace_run2+0x15b/0x2d0 [ 63.901121][ C1] ? posix_cpu_timers_work+0x1120/0x1120 [ 63.901139][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 63.901157][ C1] ? debug_object_activate+0x2d2/0x480 [ 63.901171][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 63.901191][ C1] enqueue_hrtimer+0x314/0x370 [ 63.901209][ C1] __hrtimer_run_queues+0x65a/0xc40 [ 63.901228][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 63.901248][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 63.901265][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 63.901283][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 63.901309][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 63.901329][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 63.901346][ C1] [ 63.901351][ C1] [ 63.901356][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 63.901371][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 63.901388][ C1] Code: f6 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ce d9 b1 f7 48 89 df e8 96 ae b2 f7 e8 d1 52 d3 f7 fb bf 01 00 00 00 c6 d2 a6 f7 65 8b 05 37 e3 57 76 85 c0 74 02 5b c3 e8 e4 ed 55 [ 63.901400][ C1] RSP: 0018:ffffc9000318fc30 EFLAGS: 00000286 [ 63.901413][ C1] RAX: 05414fee15709e00 RBX: ffff8880b9139b00 RCX: 05414fee15709e00 [ 63.901424][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b11c0 RDI: 0000000000000001 [ 63.901435][ C1] RBP: ffffc9000318fdb8 R08: dffffc0000000000 R09: ffffed1017227361 [ 63.901445][ C1] R10: ffffed1017227361 R11: 1ffff11017227360 R12: dffffc0000000000 [ 63.901456][ C1] R13: ffffffff9610ca90 R14: 0000000000000080 R15: ffff8880b9139b00 [ 63.901473][ C1] process_one_work+0x758/0x1000 [ 63.901495][ C1] ? worker_detach_from_pool+0x240/0x240 [ 63.901510][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 63.901528][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 63.901545][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 63.901563][ C1] ? wq_worker_running+0x97/0x170 [ 63.901578][ C1] worker_thread+0xaa8/0x12a0 [ 63.901604][ C1] kthread+0x436/0x520 [ 63.901617][ C1] ? rcu_lock_release+0x20/0x20 [ 63.901632][ C1] ? kthread_blkcg+0xd0/0xd0 [ 63.901646][ C1] ret_from_fork+0x1f/0x30 [ 63.901667][ C1] [ 65.376773][ C1] WARNING: CPU: 1 PID: 4259 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 65.386062][ C1] Modules linked in: [ 65.390906][ C1] CPU: 1 PID: 4259 Comm: kworker/1:13 Not tainted 5.15.184-syzkaller #0 [ 65.399220][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.409267][ C1] Workqueue: rcu_gp process_srcu [ 65.414206][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 65.420365][ C1] Code: 24 45 31 f6 31 ff 89 de e8 dd e3 d7 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 e0 d7 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 65.440589][ C1] RSP: 0018:ffffc90000dd0b98 EFLAGS: 00010006 [ 65.446664][ C1] RAX: ffffffff819fe0e0 RBX: 0000000000000000 RCX: ffff888029663b80 [ 65.454627][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.462594][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10052cc771 [ 65.470624][ C1] R10: ffffed10052cc771 R11: 1ffff110052cc770 R12: ffff888029665308 [ 65.478691][ C1] R13: 00007ffffffff000 R14: ffffc90000dd0c08 R15: 000000007fffffe8 [ 65.486656][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 65.495703][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.502299][ C1] CR2: 0000001b2ec5ffff CR3: 0000000072546000 CR4: 00000000003506e0 [ 65.510283][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.518263][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.526236][ C1] Call Trace: [ 65.529516][ C1] [ 65.532369][ C1] bpf_probe_read_compat+0xdd/0x170 [ 65.537676][ C1] bpf_prog_4595f2d530cd9aa3+0x35/0x5c0 [ 65.543308][ C1] bpf_trace_run2+0x15b/0x2d0 [ 65.547977][ C1] ? posix_cpu_timers_work+0x1120/0x1120 [ 65.553602][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 65.558442][ C1] ? debug_object_activate+0x2d2/0x480 [ 65.563894][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 65.569257][ C1] enqueue_hrtimer+0x314/0x370 [ 65.574014][ C1] __hrtimer_run_queues+0x65a/0xc40 [ 65.579308][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 65.584970][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 65.590095][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 65.596278][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 65.601263][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 65.607275][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 65.613031][ C1] [ 65.615966][ C1] [ 65.618941][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 65.625020][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 65.631001][ C1] Code: f6 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ce d9 b1 f7 48 89 df e8 96 ae b2 f7 e8 d1 52 d3 f7 fb bf 01 00 00 00 c6 d2 a6 f7 65 8b 05 37 e3 57 76 85 c0 74 02 5b c3 e8 e4 ed 55 [ 65.650868][ C1] RSP: 0018:ffffc9000318fc30 EFLAGS: 00000286 [ 65.656938][ C1] RAX: 05414fee15709e00 RBX: ffff8880b9139b00 RCX: 05414fee15709e00 [ 65.664907][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b11c0 RDI: 0000000000000001 [ 65.672884][ C1] RBP: ffffc9000318fdb8 R08: dffffc0000000000 R09: ffffed1017227361 [ 65.680991][ C1] R10: ffffed1017227361 R11: 1ffff11017227360 R12: dffffc0000000000 [ 65.688962][ C1] R13: ffffffff9610ca90 R14: 0000000000000080 R15: ffff8880b9139b00 [ 65.696947][ C1] process_one_work+0x758/0x1000 [ 65.701987][ C1] ? worker_detach_from_pool+0x240/0x240 [ 65.707611][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 65.712931][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 65.717967][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 65.723344][ C1] ? wq_worker_running+0x97/0x170 [ 65.728364][ C1] worker_thread+0xaa8/0x12a0 [ 65.733224][ C1] kthread+0x436/0x520 [ 65.737300][ C1] ? rcu_lock_release+0x20/0x20 [ 65.742142][ C1] ? kthread_blkcg+0xd0/0xd0 [ 65.746820][ C1] ret_from_fork+0x1f/0x30 [ 65.751256][ C1] [ 65.754279][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 65.761551][ C1] CPU: 1 PID: 4259 Comm: kworker/1:13 Not tainted 5.15.184-syzkaller #0 [ 65.769881][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.779937][ C1] Workqueue: rcu_gp process_srcu [ 65.784879][ C1] Call Trace: [ 65.788165][ C1] [ 65.791002][ C1] dump_stack_lvl+0x168/0x230 [ 65.795678][ C1] ? show_regs_print_info+0x20/0x20 [ 65.800867][ C1] ? load_image+0x3b0/0x3b0 [ 65.805455][ C1] panic+0x2c9/0x7f0 [ 65.809435][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 65.813937][ C1] ? ret_from_fork+0x1f/0x30 [ 65.818536][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 65.824084][ C1] __warn+0x248/0x2b0 [ 65.828071][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 65.833628][ C1] report_bug+0x1b7/0x2e0 [ 65.838303][ C1] handle_bug+0x3a/0x70 [ 65.842628][ C1] exc_invalid_op+0x16/0x40 [ 65.847149][ C1] asm_exc_invalid_op+0x16/0x20 [ 65.852084][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 65.858320][ C1] Code: 24 45 31 f6 31 ff 89 de e8 dd e3 d7 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 e0 d7 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 65.878182][ C1] RSP: 0018:ffffc90000dd0b98 EFLAGS: 00010006 [ 65.884249][ C1] RAX: ffffffff819fe0e0 RBX: 0000000000000000 RCX: ffff888029663b80 [ 65.892212][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.900174][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10052cc771 [ 65.908137][ C1] R10: ffffed10052cc771 R11: 1ffff110052cc770 R12: ffff888029665308 [ 65.916104][ C1] R13: 00007ffffffff000 R14: ffffc90000dd0c08 R15: 000000007fffffe8 [ 65.924164][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 65.929739][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 65.935280][ C1] bpf_probe_read_compat+0xdd/0x170 [ 65.940563][ C1] bpf_prog_4595f2d530cd9aa3+0x35/0x5c0 [ 65.946110][ C1] bpf_trace_run2+0x15b/0x2d0 [ 65.950782][ C1] ? posix_cpu_timers_work+0x1120/0x1120 [ 65.956404][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 65.961244][ C1] ? debug_object_activate+0x2d2/0x480 [ 65.966698][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 65.972062][ C1] enqueue_hrtimer+0x314/0x370 [ 65.976918][ C1] __hrtimer_run_queues+0x65a/0xc40 [ 65.982117][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 65.987660][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 65.992782][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 65.998927][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 66.003862][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 66.009849][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 66.015564][ C1] [ 66.018488][ C1] [ 66.021501][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 66.027778][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 66.033579][ C1] Code: f6 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ce d9 b1 f7 48 89 df e8 96 ae b2 f7 e8 d1 52 d3 f7 fb bf 01 00 00 00 c6 d2 a6 f7 65 8b 05 37 e3 57 76 85 c0 74 02 5b c3 e8 e4 ed 55 [ 66.053192][ C1] RSP: 0018:ffffc9000318fc30 EFLAGS: 00000286 [ 66.059255][ C1] RAX: 05414fee15709e00 RBX: ffff8880b9139b00 RCX: 05414fee15709e00 [ 66.067306][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b11c0 RDI: 0000000000000001 [ 66.075290][ C1] RBP: ffffc9000318fdb8 R08: dffffc0000000000 R09: ffffed1017227361 [ 66.083254][ C1] R10: ffffed1017227361 R11: 1ffff11017227360 R12: dffffc0000000000 [ 66.091230][ C1] R13: ffffffff9610ca90 R14: 0000000000000080 R15: ffff8880b9139b00 [ 66.099203][ C1] process_one_work+0x758/0x1000 [ 66.104146][ C1] ? worker_detach_from_pool+0x240/0x240 [ 66.109776][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 66.115193][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 66.120308][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 66.125886][ C1] ? wq_worker_running+0x97/0x170 [ 66.130908][ C1] worker_thread+0xaa8/0x12a0 [ 66.135587][ C1] kthread+0x436/0x520 [ 66.139645][ C1] ? rcu_lock_release+0x20/0x20 [ 66.144485][ C1] ? kthread_blkcg+0xd0/0xd0 [ 66.149092][ C1] ret_from_fork+0x1f/0x30 [ 66.153510][ C1] [ 66.156737][ C1] Kernel Offset: disabled [ 66.161169][ C1] Rebooting in 86400 seconds..