Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. 2025/09/11 10:30:47 parsed 1 programs [ 65.766295][ T4188] cgroup: Unknown subsys name 'net' [ 65.926310][ T4188] cgroup: Unknown subsys name 'rlimit' [ 67.463604][ T4188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.433967][ T4200] syz-executor (4200) used greatest stack depth: 21152 bytes left [ 69.961565][ T4214] chnl_net:caif_netlink_parms(): no params data found [ 70.313263][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.342837][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.473298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.515235][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.530098][ T4214] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.538400][ T4214] device bridge_slave_0 entered promiscuous mode [ 70.575459][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.582875][ T4214] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.591506][ T4214] device bridge_slave_1 entered promiscuous mode [ 70.614901][ T4254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.630042][ T4254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.666641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.685648][ T4214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.765586][ T4214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.955646][ T4214] team0: Port device team_slave_0 added [ 70.995932][ T4214] team0: Port device team_slave_1 added [ 71.093035][ T4214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.113506][ T4214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.147624][ T4214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.177918][ T4214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.195275][ T4214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.250074][ T4214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.273668][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.280245][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.352289][ T4214] device hsr_slave_0 entered promiscuous mode [ 71.371582][ T4214] device hsr_slave_1 entered promiscuous mode [ 71.686888][ T4214] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.709216][ T4214] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.733206][ T4214] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.768559][ T4214] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.906103][ T4214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.919797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.931806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.942566][ T4214] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.963247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.972141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.983019][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.990318][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.999665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.012852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.022689][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.029757][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.037884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.061974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.069931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.078834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.087918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.096504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.105785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.114798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.123237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.131980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.143233][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.152575][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.163958][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.307394][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.316852][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.333457][ T4214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.494862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.503848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.522894][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.531759][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.540712][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.548621][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.559618][ T4214] device veth0_vlan entered promiscuous mode [ 72.571732][ T4214] device veth1_vlan entered promiscuous mode [ 72.589061][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.597239][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.605897][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.614511][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.626485][ T4214] device veth0_macvtap entered promiscuous mode [ 72.635985][ T4214] device veth1_macvtap entered promiscuous mode [ 72.651617][ T4214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.659090][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.667368][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.675641][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.684628][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.696271][ T4214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.705774][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.714495][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.725479][ T4214] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.735240][ T4214] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.744158][ T4214] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.753138][ T4214] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/09/11 10:30:57 executed programs: 0 [ 72.971713][ T4214] syz-executor (4214) used greatest stack depth: 21088 bytes left [ 73.582211][ T4322] chnl_net:caif_netlink_parms(): no params data found [ 73.623169][ T4313] chnl_net:caif_netlink_parms(): no params data found [ 73.636298][ T4315] chnl_net:caif_netlink_parms(): no params data found [ 73.657362][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 73.793536][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.800836][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.808768][ T4322] device bridge_slave_0 entered promiscuous mode [ 73.819745][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.827012][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.835831][ T4322] device bridge_slave_1 entered promiscuous mode [ 73.849452][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.856871][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.865124][ T4313] device bridge_slave_0 entered promiscuous mode [ 73.895634][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.903281][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.911275][ T4313] device bridge_slave_1 entered promiscuous mode [ 73.943944][ T4322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.954374][ T4314] chnl_net:caif_netlink_parms(): no params data found [ 74.008976][ T4322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.034944][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.042417][ T4315] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.051398][ T4315] device bridge_slave_0 entered promiscuous mode [ 74.061074][ T4313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.070423][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.077481][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.085784][ T4319] device bridge_slave_0 entered promiscuous mode [ 74.113484][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.120802][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.128656][ T4315] device bridge_slave_1 entered promiscuous mode [ 74.138909][ T4313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.148315][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.155749][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.164460][ T4319] device bridge_slave_1 entered promiscuous mode [ 74.188156][ T4322] team0: Port device team_slave_0 added [ 74.196240][ T4322] team0: Port device team_slave_1 added [ 74.275475][ T4315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.294722][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.304578][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.312236][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.338469][ T4322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.351689][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.358769][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.384871][ T4322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.396555][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.403849][ T4314] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.412017][ T4314] device bridge_slave_0 entered promiscuous mode [ 74.421724][ T4315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.441666][ T4313] team0: Port device team_slave_0 added [ 74.458338][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.473924][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.481099][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.488989][ T4314] device bridge_slave_1 entered promiscuous mode [ 74.508987][ T4313] team0: Port device team_slave_1 added [ 74.533623][ T4315] team0: Port device team_slave_0 added [ 74.579388][ T4315] team0: Port device team_slave_1 added [ 74.587835][ T4319] team0: Port device team_slave_0 added [ 74.612609][ T4314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.625250][ T4322] device hsr_slave_0 entered promiscuous mode [ 74.633158][ T4322] device hsr_slave_1 entered promiscuous mode [ 74.640214][ T4322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.648053][ T4322] Cannot create hsr debugfs directory [ 74.654145][ T4313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.661221][ T4313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.687474][ T4313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.706839][ T4319] team0: Port device team_slave_1 added [ 74.732283][ T4314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.750676][ T4313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.757637][ T4313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.784104][ T4313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.827427][ T4315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.834437][ T4315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.862140][ T4315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.874292][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.881609][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.907773][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.938888][ T4315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.945986][ T4315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.972046][ T4315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.987821][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.995176][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.021465][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.035124][ T4314] team0: Port device team_slave_0 added [ 75.064146][ T4314] team0: Port device team_slave_1 added [ 75.101785][ T4295] Bluetooth: hci0: command 0x0409 tx timeout [ 75.108335][ T4295] Bluetooth: hci2: command 0x0409 tx timeout [ 75.115080][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 75.126400][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 75.145068][ T4313] device hsr_slave_0 entered promiscuous mode [ 75.151953][ T4313] device hsr_slave_1 entered promiscuous mode [ 75.158477][ T4313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.166124][ T4313] Cannot create hsr debugfs directory [ 75.180258][ T4295] Bluetooth: hci4: command 0x0409 tx timeout [ 75.222533][ T4319] device hsr_slave_0 entered promiscuous mode [ 75.229327][ T4319] device hsr_slave_1 entered promiscuous mode [ 75.236306][ T4319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.244412][ T4319] Cannot create hsr debugfs directory [ 75.258897][ T4314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.265993][ T4314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.292633][ T4314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.315710][ T4315] device hsr_slave_0 entered promiscuous mode [ 75.322590][ T4315] device hsr_slave_1 entered promiscuous mode [ 75.329149][ T4315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.337072][ T4315] Cannot create hsr debugfs directory [ 75.358744][ T4314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.365903][ T4314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.391932][ T4314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.575723][ T4314] device hsr_slave_0 entered promiscuous mode [ 75.583043][ T4314] device hsr_slave_1 entered promiscuous mode [ 75.589755][ T4314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.597797][ T4314] Cannot create hsr debugfs directory [ 75.794847][ T4322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.818885][ T4319] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.847596][ T4322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.868108][ T4322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.888346][ T4322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.974832][ T4322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.996591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.011711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.022114][ T4322] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.039259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.048370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.057146][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.064259][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.090199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.098281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.108522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.117314][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.124552][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.135981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.150514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.172163][ T4322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.184642][ T4322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.198282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.208411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.217313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.227064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.236772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.245837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.254816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.263825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.277970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.302695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.441614][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.449154][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.459674][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.489818][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.499521][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.522222][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.531714][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.542238][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.551368][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.561634][ T4322] device veth0_vlan entered promiscuous mode [ 76.581180][ T4322] device veth1_vlan entered promiscuous mode [ 76.621179][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.629801][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.646717][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.657877][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.674711][ T4322] device veth0_macvtap entered promiscuous mode [ 76.688444][ T4322] device veth1_macvtap entered promiscuous mode [ 76.713412][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.724254][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.735598][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.746636][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.755439][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.763860][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.772832][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.784959][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.804245][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.819240][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.829386][ T4322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.838284][ T4322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.847181][ T4322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.855958][ T4322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.878730][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.887546][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.992559][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.028383][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.045773][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.059627][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.070333][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.080280][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.181963][ T4297] Bluetooth: hci1: command 0x041b tx timeout [ 77.189407][ T4203] Bluetooth: hci0: command 0x041b tx timeout [ 77.198626][ T4297] Bluetooth: hci3: command 0x041b tx timeout [ 77.205161][ T4297] Bluetooth: hci2: command 0x041b tx timeout [ 77.270787][ T4297] Bluetooth: hci4: command 0x041b tx timeout [ 77.403606][ T4319] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.504941][ T4319] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.657025][ T4319] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.660109][ C1] ------------[ cut here ]------------ [ 77.660629][ C1] [ 77.660636][ C1] ====================================================== [ 77.660641][ C1] WARNING: possible circular locking dependency detected [ 77.660656][ C1] syzkaller #0 Not tainted [ 77.660666][ C1] ------------------------------------------------------ [ 77.660670][ C1] kworker/u4:6/4339 is trying to acquire lock: [ 77.660680][ C1] ffffffff8c110ec0 (console_owner){-...}-{0:0}, at: console_trylock_spinning+0x150/0x350 [ 77.660748][ C1] [ 77.660748][ C1] but task is already holding lock: [ 77.660752][ C1] ffff8880b912a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x5ff/0xc40 [ 77.660798][ C1] [ 77.660798][ C1] which lock already depends on the new lock. [ 77.660798][ C1] [ 77.660802][ C1] [ 77.660802][ C1] the existing dependency chain (in reverse order) is: [ 77.660808][ C1] [ 77.660808][ C1] -> #6 (hrtimer_bases.lock){-.-.}-{2:2}: [ 77.660832][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 77.660854][ C1] hrtimer_start_range_ns+0xff/0xc20 [ 77.660876][ C1] enqueue_task_rt+0x60c/0xc00 [ 77.660893][ C1] enqueue_task+0x182/0x2b0 [ 77.660921][ C1] __sched_setscheduler+0x1379/0x1be0 [ 77.660943][ C1] sched_set_fifo+0xbc/0x120 [ 77.660962][ C1] drm_vblank_worker_init+0x149/0x1a0 [ 77.660980][ C1] drm_vblank_init+0x265/0x330 [ 77.660999][ C1] vkms_init+0x31a/0x700 [ 77.661019][ C1] do_one_initcall+0x1ee/0x680 [ 77.661038][ C1] do_initcall_level+0x137/0x1f0 [ 77.661055][ C1] do_initcalls+0x4b/0x90 [ 77.661071][ C1] kernel_init_freeable+0x3ce/0x560 [ 77.661088][ C1] kernel_init+0x19/0x1b0 [ 77.661106][ C1] ret_from_fork+0x1f/0x30 [ 77.661124][ C1] [ 77.661124][ C1] -> #5 (&rt_b->rt_runtime_lock){-...}-{2:2}: [ 77.661148][ C1] _raw_spin_lock+0x2a/0x40 [ 77.661167][ C1] rq_online_rt+0x125/0x310 [ 77.661194][ C1] sched_cpu_activate+0x4ae/0x650 [ 77.661209][ C1] cpuhp_invoke_callback+0x431/0x830 [ 77.661230][ C1] cpuhp_thread_fun+0x39a/0x7d0 [ 77.661247][ C1] smpboot_thread_fn+0x4f6/0x970 [ 77.661266][ C1] kthread+0x436/0x520 [ 77.661280][ C1] ret_from_fork+0x1f/0x30 [ 77.661297][ C1] [ 77.661297][ C1] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 77.661319][ C1] _raw_spin_lock_nested+0x2e/0x40 [ 77.661334][ C1] raw_spin_rq_lock_nested+0x26/0x140 [ 77.661352][ C1] task_fork_fair+0x5c/0x350 [ 77.661366][ C1] sched_cgroup_fork+0x2c6/0x320 [ 77.661384][ C1] copy_process+0x22d1/0x3e00 [ 77.661399][ C1] kernel_clone+0x219/0x930 [ 77.661415][ C1] kernel_thread+0xc8/0x120 [ 77.661430][ C1] rest_init+0x21/0x330 [ 77.661446][ C1] start_kernel+0x486/0x530 [ 77.661460][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 77.661479][ C1] [ 77.661479][ C1] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 77.661501][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 77.661519][ C1] try_to_wake_up+0x5c/0x1050 [ 77.661537][ C1] __wake_up_common+0x2a4/0x4e0 [ 77.661556][ C1] __wake_up+0x108/0x180 [ 77.661572][ C1] tty_port_default_wakeup+0xa5/0xf0 [ 77.661590][ C1] serial8250_tx_chars+0x629/0x830 [ 77.661608][ C1] serial8250_handle_irq+0x519/0x610 [ 77.661627][ C1] serial8250_default_handle_irq+0xb4/0x1a0 [ 77.661646][ C1] serial8250_interrupt+0x9b/0x1c0 [ 77.661663][ C1] __handle_irq_event_percpu+0x291/0x9b0 [ 77.661680][ C1] handle_irq_event+0xa5/0x220 [ 77.661696][ C1] handle_edge_irq+0x243/0xb20 [ 77.661714][ C1] __common_interrupt+0xd7/0x1e0 [ 77.661731][ C1] common_interrupt+0xb0/0xd0 [ 77.661746][ C1] asm_common_interrupt+0x22/0x40 [ 77.661762][ C1] filemap_map_pages+0xe8d/0x1390 [ 77.661777][ C1] handle_mm_fault+0x2580/0x43c0 [ 77.661793][ C1] do_user_addr_fault+0x489/0xc80 [ 77.661812][ C1] exc_page_fault+0x60/0x100 [ 77.661828][ C1] asm_exc_page_fault+0x22/0x30 [ 77.661843][ C1] [ 77.661843][ C1] -> #2 (&tty->write_wait){-...}-{2:2}: [ 77.661864][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 77.661884][ C1] __wake_up+0xed/0x180 [ 77.661900][ C1] tty_port_default_wakeup+0xa5/0xf0 [ 77.661923][ C1] serial8250_tx_chars+0x629/0x830 [ 77.661940][ C1] serial8250_handle_irq+0x519/0x610 [ 77.661958][ C1] serial8250_default_handle_irq+0xb4/0x1a0 [ 77.661978][ C1] serial8250_interrupt+0x9b/0x1c0 [ 77.661996][ C1] __handle_irq_event_percpu+0x291/0x9b0 [ 77.662013][ C1] handle_irq_event+0xa5/0x220 [ 77.662039][ C1] handle_edge_irq+0x243/0xb20 [ 77.662055][ C1] __common_interrupt+0xd7/0x1e0 [ 77.662070][ C1] common_interrupt+0xb0/0xd0 [ 77.662084][ C1] asm_common_interrupt+0x22/0x40 [ 77.662099][ C1] default_idle+0xb/0x10 [ 77.662115][ C1] default_idle_call+0x81/0xc0 [ 77.662133][ C1] do_idle+0x21b/0x5b0 [ 77.662166][ C1] cpu_startup_entry+0x14/0x20 [ 77.662183][ C1] start_secondary+0x31f/0x430 [ 77.662202][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 77.662222][ C1] [ 77.662222][ C1] -> #1 (&port_lock_key){-...}-{2:2}: [ 77.662242][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 77.662263][ C1] serial8250_console_write+0x170/0xf80 [ 77.662281][ C1] console_unlock+0xc86/0x1200 [ 77.662301][ C1] vprintk_emit+0xc0/0x150 [ 77.662319][ C1] _printk+0xcc/0x110 [ 77.662334][ C1] register_console+0x682/0x960 [ 77.662350][ C1] univ8250_console_init+0x41/0x50 [ 77.662365][ C1] console_init+0x177/0x5d0 [ 77.662380][ C1] start_kernel+0x2f9/0x530 [ 77.662398][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 77.662416][ C1] [ 77.662416][ C1] -> #0 (console_owner){-...}-{0:0}: [ 77.662438][ C1] __lock_acquire+0x2c33/0x7c60 [ 77.662456][ C1] lock_acquire+0x197/0x3f0 [ 77.662474][ C1] console_trylock_spinning+0x170/0x350 [ 77.662512][ C1] vprintk_emit+0xa7/0x150 [ 77.662531][ C1] _printk+0xcc/0x110 [ 77.662557][ C1] report_bug+0x1e5/0x2e0 [ 77.662576][ C1] handle_bug+0x3a/0x70 [ 77.662592][ C1] exc_invalid_op+0x16/0x40 [ 77.662606][ C1] asm_exc_invalid_op+0x16/0x20 [ 77.662624][ C1] copy_from_user_nofault+0x160/0x1c0 [ 77.662644][ C1] bpf_probe_read_compat+0xdd/0x170 [ 77.662664][ C1] bpf_prog_8fc34fd13f997abc+0x3d/0xbc4 [ 77.662679][ C1] bpf_trace_run2+0x15b/0x2d0 [ 77.662699][ C1] enqueue_hrtimer+0x314/0x370 [ 77.662719][ C1] __hrtimer_run_queues+0x65a/0xc40 [ 77.662740][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 77.662759][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 77.662777][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 77.662795][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 77.662813][ C1] lock_acquire+0x1f2/0x3f0 [ 77.662833][ C1] _raw_spin_lock_bh+0x32/0x50 [ 77.662853][ C1] batadv_nc_purge_paths+0xe7/0x3b0 [ 77.662870][ C1] batadv_nc_worker+0x327/0x5c0 [ 77.662892][ C1] process_one_work+0x863/0x1000 [ 77.662911][ C1] worker_thread+0xaa8/0x12a0 [ 77.662936][ C1] kthread+0x436/0x520 [ 77.662950][ C1] ret_from_fork+0x1f/0x30 [ 77.662969][ C1] [ 77.662969][ C1] other info that might help us debug this: [ 77.662969][ C1] [ 77.662973][ C1] Chain exists of: [ 77.662973][ C1] console_owner --> &rt_b->rt_runtime_lock --> hrtimer_bases.lock [ 77.662973][ C1] [ 77.663002][ C1] Possible unsafe locking scenario: [ 77.663002][ C1] [ 77.663006][ C1] CPU0 CPU1 [ 77.663011][ C1] ---- ---- [ 77.663014][ C1] lock(hrtimer_bases.lock); [ 77.663024][ C1] lock(&rt_b->rt_runtime_lock); [ 77.663038][ C1] lock(hrtimer_bases.lock); [ 77.663049][ C1] lock(console_owner); [ 77.663061][ C1] [ 77.663061][ C1] *** DEADLOCK *** [ 77.663061][ C1] [ 77.663064][ C1] 5 locks held by kworker/u4:6/4339: [ 77.663074][ C1] #0: ffff88802b491938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 77.663120][ C1] #1: ffffc9000334fd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 77.663168][ C1] #2: ffff888075458018 (key#18){+...}-{2:2}, at: batadv_nc_purge_paths+0xe7/0x3b0 [ 77.663214][ C1] #3: ffff8880b912a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x5ff/0xc40 [ 77.663260][ C1] #4: ffffffff8c11c460 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 77.663302][ C1] [ 77.663302][ C1] stack backtrace: [ 77.663313][ C1] CPU: 1 PID: 4339 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 77.663331][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.663342][ C1] Workqueue: bat_events batadv_nc_worker [ 77.663373][ C1] Call Trace: [ 77.663378][ C1] [ 77.663385][ C1] dump_stack_lvl+0x168/0x230 [ 77.663408][ C1] ? load_image+0x3b0/0x3b0 [ 77.663428][ C1] ? show_regs_print_info+0x20/0x20 [ 77.663454][ C1] ? print_circular_bug+0x12b/0x1a0 [ 77.663475][ C1] check_noncircular+0x274/0x310 [ 77.663495][ C1] ? add_chain_block+0x940/0x940 [ 77.663511][ C1] ? lockdep_lock+0xdc/0x1e0 [ 77.663537][ C1] ? mark_lock+0x94/0x320 [ 77.663560][ C1] __lock_acquire+0x2c33/0x7c60 [ 77.663594][ C1] ? verify_lock_unused+0x140/0x140 [ 77.663626][ C1] ? verify_lock_unused+0x140/0x140 [ 77.663648][ C1] ? _prb_commit+0x289/0x340 [ 77.663668][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 77.663690][ C1] ? _raw_spin_unlock+0x40/0x40 [ 77.663714][ C1] lock_acquire+0x197/0x3f0 [ 77.663733][ C1] ? console_trylock_spinning+0x150/0x350 [ 77.663755][ C1] ? console_trylock_spinning+0x150/0x350 [ 77.663779][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 77.663799][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 77.663816][ C1] ? read_lock_is_recursive+0x10/0x10 [ 77.663837][ C1] ? __rwlock_init+0x140/0x140 [ 77.663853][ C1] ? mark_lock+0x94/0x320 [ 77.663874][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 77.663892][ C1] console_trylock_spinning+0x170/0x350 [ 77.663919][ C1] ? console_trylock_spinning+0x150/0x350 [ 77.663941][ C1] ? vprintk_emit+0x150/0x150 [ 77.663960][ C1] ? __lock_acquire+0x12d9/0x7c60 [ 77.663982][ C1] ? mark_lock+0x94/0x320 [ 77.664006][ C1] vprintk_emit+0xa7/0x150 [ 77.664028][ C1] _printk+0xcc/0x110 [ 77.664050][ C1] ? load_image+0x3b0/0x3b0 [ 77.664068][ C1] ? rcu_read_lock_sched_held+0x86/0xf0 [ 77.664092][ C1] ? rcu_is_watching+0x11/0xa0 [ 77.664110][ C1] ? verify_lock_unused+0x140/0x140 [ 77.664129][ C1] ? find_bug+0xa1/0x350 [ 77.664146][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 77.664166][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 77.664186][ C1] report_bug+0x1e5/0x2e0 [ 77.664209][ C1] handle_bug+0x3a/0x70 [ 77.664225][ C1] exc_invalid_op+0x16/0x40 [ 77.664241][ C1] asm_exc_invalid_op+0x16/0x20 [ 77.664262][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 77.664285][ C1] Code: 24 45 31 f6 31 ff 89 de e8 3d f7 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 77.664299][ C1] RSP: 0018:ffffc90000dd0b90 EFLAGS: 00010006 [ 77.664314][ C1] RAX: ffffffff819ed720 RBX: 0000000000000000 RCX: ffff888029a65940 [ 77.664328][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.664338][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100534cb29 [ 77.664352][ C1] R10: ffffed100534cb29 R11: 1ffff1100534cb28 R12: ffff888029a670c8 [ 77.664366][ C1] R13: 00007ffffffff000 R14: ffffc90000dd0bc8 R15: 0000000020000000 [ 77.664383][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 77.664407][ C1] bpf_probe_read_compat+0xdd/0x170 [ 77.664429][ C1] bpf_prog_8fc34fd13f997abc+0x3d/0xbc4 [ 77.664445][ C1] bpf_trace_run2+0x15b/0x2d0 [ 77.664465][ C1] ? posix_cpu_timers_work+0x1120/0x1120 [ 77.664487][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 77.664509][ C1] ? debug_object_activate+0x2d2/0x480 [ 77.664529][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 77.664553][ C1] enqueue_hrtimer+0x314/0x370 [ 77.664575][ C1] __hrtimer_run_queues+0x65a/0xc40 [ 77.664599][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 77.664623][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 77.664643][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 77.664664][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 77.664705][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 77.664725][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 77.664743][ C1] [ 77.664749][ C1] [ 77.664753][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 77.664771][ C1] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 77.664792][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 77.664807][ C1] RSP: 0018:ffffc9000334fa00 EFLAGS: 00000206 [ 77.664821][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 7b13d1df46d4ad00 [ 77.664832][ C1] RDX: 0000000000000000 RSI: ffffffff8a0b28c0 RDI: ffffffff8a59a240 [ 77.664845][ C1] RBP: ffffc9000334fb18 R08: dffffc0000000000 R09: fffffbfff1ff7639 [ 77.664858][ C1] R10: fffffbfff1ff7639 R11: 1ffffffff1ff7638 R12: ffff888075458018 [ 77.664872][ C1] R13: 1ffff92000669f4c R14: 0000000000000246 R15: dffffc0000000000 [ 77.664894][ C1] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 77.664926][ C1] ? read_lock_is_recursive+0x10/0x10 [ 77.664946][ C1] ? __local_bh_disable_ip+0xfb/0x190 [ 77.664964][ C1] ? __bpf_trace_softirq+0x10/0x10 [ 77.664980][ C1] ? __local_bh_enable_ip+0x12a/0x1b0 [ 77.664997][ C1] ? _local_bh_enable+0xa0/0xa0 [ 77.665016][ C1] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 77.665033][ C1] _raw_spin_lock_bh+0x32/0x50 [ 77.665053][ C1] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 77.665070][ C1] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 77.665088][ C1] batadv_nc_purge_paths+0xe7/0x3b0 [ 77.665111][ C1] batadv_nc_worker+0x327/0x5c0 [ 77.665135][ C1] process_one_work+0x863/0x1000 [ 77.665161][ C1] ? worker_detach_from_pool+0x240/0x240 [ 77.665180][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 77.665199][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 77.665220][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 77.665243][ C1] ? wq_worker_running+0x97/0x170 [ 77.665262][ C1] worker_thread+0xaa8/0x12a0 [ 77.665297][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 77.665321][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 77.665344][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 77.665364][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 77.665394][ C1] kthread+0x436/0x520 [ 77.665410][ C1] ? rcu_lock_release+0x20/0x20 [ 77.665428][ C1] ? kthread_blkcg+0xd0/0xd0 [ 77.665447][ C1] ret_from_fork+0x1f/0x30 [ 77.665473][ C1] [ 79.142841][ C1] WARNING: CPU: 1 PID: 4339 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 79.152145][ C1] Modules linked in: [ 79.156027][ C1] CPU: 1 PID: 4339 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 79.163556][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.173601][ C1] Workqueue: bat_events batadv_nc_worker [ 79.179227][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 79.185371][ C1] Code: 24 45 31 f6 31 ff 89 de e8 3d f7 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 79.204965][ C1] RSP: 0018:ffffc90000dd0b90 EFLAGS: 00010006 [ 79.211019][ C1] RAX: ffffffff819ed720 RBX: 0000000000000000 RCX: ffff888029a65940 [ 79.218995][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.226954][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100534cb29 [ 79.234914][ C1] R10: ffffed100534cb29 R11: 1ffff1100534cb28 R12: ffff888029a670c8 [ 79.242875][ C1] R13: 00007ffffffff000 R14: ffffc90000dd0bc8 R15: 0000000020000000 [ 79.250834][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 79.259748][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.266316][ C1] CR2: 0000000000000000 CR3: 0000000077dcd000 CR4: 00000000003506e0 [ 79.274275][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.282244][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.290202][ C1] Call Trace: [ 79.293471][ C1] [ 79.296306][ C1] bpf_probe_read_compat+0xdd/0x170 [ 79.301517][ C1] bpf_prog_8fc34fd13f997abc+0x3d/0xbc4 [ 79.307052][ C1] bpf_trace_run2+0x15b/0x2d0 [ 79.311735][ C1] ? posix_cpu_timers_work+0x1120/0x1120 [ 79.317378][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 79.322322][ C1] ? debug_object_activate+0x2d2/0x480 [ 79.327768][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 79.333133][ C1] enqueue_hrtimer+0x314/0x370 [ 79.337905][ C1] __hrtimer_run_queues+0x65a/0xc40 [ 79.343097][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 79.348636][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 79.353745][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 79.359801][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 79.364739][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 79.370709][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 79.376330][ C1] [ 79.379250][ C1] [ 79.382170][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 79.388138][ C1] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 79.393412][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 79.413007][ C1] RSP: 0018:ffffc9000334fa00 EFLAGS: 00000206 [ 79.419061][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 7b13d1df46d4ad00 [ 79.427023][ C1] RDX: 0000000000000000 RSI: ffffffff8a0b28c0 RDI: ffffffff8a59a240 [ 79.435162][ C1] RBP: ffffc9000334fb18 R08: dffffc0000000000 R09: fffffbfff1ff7639 [ 79.443135][ C1] R10: fffffbfff1ff7639 R11: 1ffffffff1ff7638 R12: ffff888075458018 [ 79.451100][ C1] R13: 1ffff92000669f4c R14: 0000000000000246 R15: dffffc0000000000 [ 79.459069][ C1] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 79.465139][ C1] ? read_lock_is_recursive+0x10/0x10 [ 79.470509][ C1] ? __local_bh_disable_ip+0xfb/0x190 [ 79.475868][ C1] ? __bpf_trace_softirq+0x10/0x10 [ 79.480966][ C1] ? __local_bh_enable_ip+0x12a/0x1b0 [ 79.486325][ C1] ? _local_bh_enable+0xa0/0xa0 [ 79.491169][ C1] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 79.496673][ C1] _raw_spin_lock_bh+0x32/0x50 [ 79.501448][ C1] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 79.506900][ C1] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 79.513401][ C1] batadv_nc_purge_paths+0xe7/0x3b0 [ 79.518598][ C1] batadv_nc_worker+0x327/0x5c0 [ 79.523568][ C1] process_one_work+0x863/0x1000 [ 79.528515][ C1] ? worker_detach_from_pool+0x240/0x240 [ 79.534152][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 79.539432][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 79.544480][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 79.549926][ C1] ? wq_worker_running+0x97/0x170 [ 79.555126][ C1] worker_thread+0xaa8/0x12a0 [ 79.559840][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 79.565744][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 79.570949][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 79.576152][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 79.582047][ C1] kthread+0x436/0x520 [ 79.586123][ C1] ? rcu_lock_release+0x20/0x20 [ 79.590965][ C1] ? kthread_blkcg+0xd0/0xd0 [ 79.595547][ C1] ret_from_fork+0x1f/0x30 [ 79.599964][ C1] [ 79.602986][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 79.610273][ C1] CPU: 1 PID: 4339 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 79.617810][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.627856][ C1] Workqueue: bat_events batadv_nc_worker [ 79.633513][ C1] Call Trace: [ 79.636896][ C1] [ 79.639746][ C1] dump_stack_lvl+0x168/0x230 [ 79.644432][ C1] ? show_regs_print_info+0x20/0x20 [ 79.649625][ C1] ? load_image+0x3b0/0x3b0 [ 79.654130][ C1] panic+0x2c9/0x7f0 [ 79.658024][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 79.662528][ C1] ? ret_from_fork+0x1f/0x30 [ 79.667144][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 79.672692][ C1] __warn+0x248/0x2b0 [ 79.676675][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 79.682216][ C1] report_bug+0x1b7/0x2e0 [ 79.686545][ C1] handle_bug+0x3a/0x70 [ 79.690696][ C1] exc_invalid_op+0x16/0x40 [ 79.695194][ C1] asm_exc_invalid_op+0x16/0x20 [ 79.700056][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 79.706206][ C1] Code: 24 45 31 f6 31 ff 89 de e8 3d f7 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 79.725921][ C1] RSP: 0018:ffffc90000dd0b90 EFLAGS: 00010006 [ 79.731982][ C1] RAX: ffffffff819ed720 RBX: 0000000000000000 RCX: ffff888029a65940 [ 79.739947][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.747908][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100534cb29 [ 79.755870][ C1] R10: ffffed100534cb29 R11: 1ffff1100534cb28 R12: ffff888029a670c8 [ 79.763837][ C1] R13: 00007ffffffff000 R14: ffffc90000dd0bc8 R15: 0000000020000000 [ 79.771808][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 79.777376][ C1] bpf_probe_read_compat+0xdd/0x170 [ 79.782568][ C1] bpf_prog_8fc34fd13f997abc+0x3d/0xbc4 [ 79.788107][ C1] bpf_trace_run2+0x15b/0x2d0 [ 79.792784][ C1] ? posix_cpu_timers_work+0x1120/0x1120 [ 79.798414][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 79.803260][ C1] ? debug_object_activate+0x2d2/0x480 [ 79.808713][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 79.814077][ C1] enqueue_hrtimer+0x314/0x370 [ 79.818840][ C1] __hrtimer_run_queues+0x65a/0xc40 [ 79.824044][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 79.829587][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 79.834689][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 79.840746][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 79.845689][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 79.851681][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 79.857306][ C1] [ 79.860229][ C1] [ 79.863153][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 79.869144][ C1] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 79.874541][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 79.894147][ C1] RSP: 0018:ffffc9000334fa00 EFLAGS: 00000206 [ 79.900208][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 7b13d1df46d4ad00 [ 79.908172][ C1] RDX: 0000000000000000 RSI: ffffffff8a0b28c0 RDI: ffffffff8a59a240 [ 79.916135][ C1] RBP: ffffc9000334fb18 R08: dffffc0000000000 R09: fffffbfff1ff7639 [ 79.924098][ C1] R10: fffffbfff1ff7639 R11: 1ffffffff1ff7638 R12: ffff888075458018 [ 79.932065][ C1] R13: 1ffff92000669f4c R14: 0000000000000246 R15: dffffc0000000000 [ 79.940039][ C1] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 79.946037][ C1] ? read_lock_is_recursive+0x10/0x10 [ 79.951398][ C1] ? __local_bh_disable_ip+0xfb/0x190 [ 79.956777][ C1] ? __bpf_trace_softirq+0x10/0x10 [ 79.961876][ C1] ? __local_bh_enable_ip+0x12a/0x1b0 [ 79.967233][ C1] ? _local_bh_enable+0xa0/0xa0 [ 79.972075][ C1] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 79.977437][ C1] _raw_spin_lock_bh+0x32/0x50 [ 79.982193][ C1] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 79.987557][ C1] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 79.994054][ C1] batadv_nc_purge_paths+0xe7/0x3b0 [ 79.999255][ C1] batadv_nc_worker+0x327/0x5c0 [ 80.004113][ C1] process_one_work+0x863/0x1000 [ 80.009059][ C1] ? worker_detach_from_pool+0x240/0x240 [ 80.014689][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 80.020096][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 80.025240][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 80.030608][ C1] ? wq_worker_running+0x97/0x170 [ 80.035624][ C1] worker_thread+0xaa8/0x12a0 [ 80.040295][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 80.046199][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 80.051391][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 80.056581][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 80.062475][ C1] kthread+0x436/0x520 [ 80.066537][ C1] ? rcu_lock_release+0x20/0x20 [ 80.071377][ C1] ? kthread_blkcg+0xd0/0xd0 [ 80.075958][ C1] ret_from_fork+0x1f/0x30 [ 80.080464][ C1] [ 81.230167][ C1] Shutting down cpus with NMI [ 81.235264][ C1] Kernel Offset: disabled [ 81.239796][ C1] Rebooting in 86400 seconds..