last executing test programs: 86.226882ms ago: executing program 0 (id=1): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_macvtap\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00'}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 0s ago: executing program 0 (id=6): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f00000008c0)='timer_start\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'nr0\x00', 0x2}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.156' (ED25519) to the list of known hosts. syzkaller login: [ 37.078372][ T3494] cgroup: Unknown subsys name 'net' [ 37.203888][ T3494] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 38.382937][ T3494] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 39.108514][ T3510] chnl_net:caif_netlink_parms(): no params data found [ 39.139027][ T3503] chnl_net:caif_netlink_parms(): no params data found [ 39.197618][ T3509] chnl_net:caif_netlink_parms(): no params data found [ 39.207213][ T3504] chnl_net:caif_netlink_parms(): no params data found [ 39.247135][ T3508] chnl_net:caif_netlink_parms(): no params data found [ 39.309880][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.317446][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.325351][ T3503] device bridge_slave_0 entered promiscuous mode [ 39.355712][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.362842][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.370556][ T3503] device bridge_slave_1 entered promiscuous mode [ 39.381377][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.388418][ T3510] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.396270][ T3510] device bridge_slave_0 entered promiscuous mode [ 39.424906][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.432056][ T3510] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.440255][ T3510] device bridge_slave_1 entered promiscuous mode [ 39.481095][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.488153][ T3509] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.496201][ T3509] device bridge_slave_0 entered promiscuous mode [ 39.505168][ T3503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.514438][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.522324][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.530415][ T3504] device bridge_slave_0 entered promiscuous mode [ 39.551347][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.558384][ T3509] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.566710][ T3509] device bridge_slave_1 entered promiscuous mode [ 39.574814][ T3503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.584119][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.591490][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.599429][ T3504] device bridge_slave_1 entered promiscuous mode [ 39.607510][ T3510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.645824][ T3510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.655013][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.662166][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.670231][ T3508] device bridge_slave_0 entered promiscuous mode [ 39.704873][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.712011][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.720308][ T3508] device bridge_slave_1 entered promiscuous mode [ 39.728760][ T3509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.739799][ T3503] team0: Port device team_slave_0 added [ 39.747037][ T3509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.757654][ T3504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.781308][ T3503] team0: Port device team_slave_1 added [ 39.799421][ T3504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.817539][ T3510] team0: Port device team_slave_0 added [ 39.830258][ T3508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.846556][ T3509] team0: Port device team_slave_0 added [ 39.853917][ T3510] team0: Port device team_slave_1 added [ 39.868168][ T3508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.885401][ T3509] team0: Port device team_slave_1 added [ 39.897306][ T3503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.904338][ T3503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.930400][ T3503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.950107][ T3504] team0: Port device team_slave_0 added [ 39.970901][ T3503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.977835][ T3503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.003810][ T3503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.027598][ T3504] team0: Port device team_slave_1 added [ 40.041127][ T3510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.048181][ T3510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.074344][ T3510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.091292][ T3508] team0: Port device team_slave_0 added [ 40.104767][ T3509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.111882][ T3509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.138167][ T3509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.149635][ T3510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.156569][ T3510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.183047][ T3510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.199428][ T3508] team0: Port device team_slave_1 added [ 40.211625][ T3509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.218937][ T3509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.245297][ T3509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.276824][ T3504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.283985][ T3504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.310105][ T3504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.343035][ T3508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.350055][ T3508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.376445][ T3508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.388367][ T3508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.395529][ T3508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.421468][ T3508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.433296][ T3504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.440311][ T3504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.466289][ T3504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.489384][ T3503] device hsr_slave_0 entered promiscuous mode [ 40.496011][ T3503] device hsr_slave_1 entered promiscuous mode [ 40.519205][ T3510] device hsr_slave_0 entered promiscuous mode [ 40.525785][ T3510] device hsr_slave_1 entered promiscuous mode [ 40.532572][ T3510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.540472][ T3510] Cannot create hsr debugfs directory [ 40.557586][ T3509] device hsr_slave_0 entered promiscuous mode [ 40.564167][ T3509] device hsr_slave_1 entered promiscuous mode [ 40.571021][ T3509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.578754][ T3509] Cannot create hsr debugfs directory [ 40.653411][ T3504] device hsr_slave_0 entered promiscuous mode [ 40.660015][ T3504] device hsr_slave_1 entered promiscuous mode [ 40.666431][ T3504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.674207][ T3504] Cannot create hsr debugfs directory [ 40.689777][ T3508] device hsr_slave_0 entered promiscuous mode [ 40.696862][ T3508] device hsr_slave_1 entered promiscuous mode [ 40.703577][ T3508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.711857][ T3508] Cannot create hsr debugfs directory [ 40.819632][ T3517] Bluetooth: hci3: command 0x0409 tx timeout [ 40.826241][ T3517] Bluetooth: hci2: command 0x0409 tx timeout [ 40.832815][ T3517] Bluetooth: hci1: command 0x0409 tx timeout [ 40.839683][ T3517] Bluetooth: hci4: command 0x0409 tx timeout [ 40.845744][ T3517] Bluetooth: hci0: command 0x0409 tx timeout [ 40.997321][ T3510] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 41.009329][ T3510] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 41.017926][ T3510] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 41.026978][ T3510] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 41.064196][ T3509] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 41.073589][ T3509] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 41.082569][ T3509] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 41.092549][ T3509] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 41.170690][ T3503] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 41.181543][ T3503] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 41.191689][ T3503] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 41.201720][ T3503] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 41.271936][ T3509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.287802][ T3504] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 41.321186][ T3510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.329979][ T3509] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.338000][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.347532][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.361629][ T3504] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 41.371893][ T3504] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 41.381979][ T3504] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 41.396324][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.407693][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.416285][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.423596][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.439282][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.466262][ T3510] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.493207][ T3508] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 41.507892][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.517227][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.526034][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.533106][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.541037][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.550586][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.560772][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.568314][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.577499][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.586690][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.593757][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.601572][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.610263][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.618556][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.625594][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.633239][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.641950][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.659778][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.667615][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.676709][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.685567][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.694893][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.703606][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.712122][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.720399][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.728468][ T3508] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 41.740553][ T3508] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 41.749609][ T3508] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 41.767443][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.775280][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.784216][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.793053][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.801712][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.811231][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.841171][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.851199][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.862198][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.871323][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.880400][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.906027][ T3510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.917158][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.936115][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.944703][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.011308][ T3503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.027825][ T3504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.046800][ T3503] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.057907][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.066358][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.093260][ T3504] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.116403][ T3508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.134754][ T3509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.142419][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.151022][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.158930][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.167396][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.175875][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.182954][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.190740][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.199389][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.207653][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.214706][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.222422][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.229971][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.237768][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.260980][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.270011][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.279464][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.289455][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.297653][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.306271][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.315032][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.330372][ T3508] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.339739][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.348260][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.357985][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.365073][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.372876][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.381396][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.389248][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.397736][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.406146][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.413183][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.421162][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.429587][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.452201][ T3510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.472753][ T3503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.484692][ T3503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.503029][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.517536][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.525541][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.539318][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.547813][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.557013][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.565814][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.574442][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.583141][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.591417][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.600435][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.608734][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.616877][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.649792][ T3504] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.669478][ T3504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.692992][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.703131][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.712713][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.721549][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.730711][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.739613][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.746645][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.754280][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.762988][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.771601][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.778662][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.786139][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.794714][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.803334][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.811482][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.841867][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.860672][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.875878][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.885865][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.894789][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.903434][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.919850][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.927627][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.939285][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.946778][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.956078][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.964813][ T3552] Bluetooth: hci0: command 0x041b tx timeout [ 42.976429][ T3552] Bluetooth: hci4: command 0x041b tx timeout [ 42.978179][ T3503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.984739][ T3552] Bluetooth: hci1: command 0x041b tx timeout [ 42.999983][ T3552] Bluetooth: hci2: command 0x041b tx timeout [ 43.006069][ T3552] Bluetooth: hci3: command 0x041b tx timeout [ 43.021268][ T3508] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.034693][ T3508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.048506][ T3509] device veth0_vlan entered promiscuous mode [ 43.067452][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.077516][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.087620][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.096238][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.104153][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.112525][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.120776][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.129961][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.138354][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.146100][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.153902][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.180996][ T3509] device veth1_vlan entered promiscuous mode [ 43.192659][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.201254][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.211146][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.219658][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.232020][ T3510] device veth0_vlan entered promiscuous mode [ 43.239766][ T3504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.265037][ T3510] device veth1_vlan entered promiscuous mode [ 43.276609][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.286603][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.295519][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.316292][ T3509] device veth0_macvtap entered promiscuous mode [ 43.351948][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.360753][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.369914][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.378129][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.387610][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.397569][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.409364][ T3509] device veth1_macvtap entered promiscuous mode [ 43.428010][ T3503] device veth0_vlan entered promiscuous mode [ 43.443204][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.452010][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.460540][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.469374][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.477613][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.494667][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.502396][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.510602][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.519054][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.529470][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.537106][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.547661][ T3510] device veth0_macvtap entered promiscuous mode [ 43.556796][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.567176][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.574975][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.587552][ T3503] device veth1_vlan entered promiscuous mode [ 43.596044][ T3509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.607966][ T3508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.616970][ T3504] device veth0_vlan entered promiscuous mode [ 43.626494][ T3510] device veth1_macvtap entered promiscuous mode [ 43.642594][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.650707][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.658421][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.670714][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.683351][ T3509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.703964][ T3509] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.713093][ T3509] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.722136][ T3509] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.731147][ T3509] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.743032][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.751301][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.760409][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.772030][ T3504] device veth1_vlan entered promiscuous mode [ 43.817052][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.825274][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.834081][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.843016][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.852568][ T3510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.864612][ T3510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.875709][ T3510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.891607][ T3503] device veth0_macvtap entered promiscuous mode [ 43.914126][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.922528][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.931050][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.939828][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.948262][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.965810][ T3504] device veth0_macvtap entered promiscuous mode [ 43.975172][ T3510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.986415][ T3510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.997203][ T3510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.006512][ T3503] device veth1_macvtap entered promiscuous mode [ 44.017226][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.025108][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.033690][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.042160][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.050759][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.061593][ T3504] device veth1_macvtap entered promiscuous mode [ 44.072998][ T3510] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.085567][ T3510] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.095317][ T3510] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.105030][ T3510] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.119649][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.127554][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.168366][ T447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.179082][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.187270][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.192163][ T447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.199821][ T3508] device veth0_vlan entered promiscuous mode [ 44.211564][ T3503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.223430][ T3503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.235908][ T3503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.246527][ T3503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.258487][ T3503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.284167][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.291908][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.300475][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.308053][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.317087][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.340519][ T3503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.351653][ T3503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.362663][ T3503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.373102][ T3503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.383967][ T3503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.393435][ T3508] device veth1_vlan entered promiscuous mode [ 44.403938][ T3504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.414898][ T3504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.428432][ T3504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.438882][ T3504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.448872][ T3504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.459308][ T3504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.470647][ T3504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.482052][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.490717][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.499770][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.508209][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.517175][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.529521][ T3503] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.538210][ T3503] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.553270][ T3503] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.562044][ T3503] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.591951][ T3504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.602534][ T3504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.612664][ T3504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.623319][ T3504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.633355][ T3504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.643805][ T3504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.656312][ T3504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.666685][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.675403][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.695866][ T3508] device veth0_macvtap entered promiscuous mode [ 44.723395][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.731725][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.740762][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.749314][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.756857][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.765390][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.775874][ T3504] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.788448][ T3504] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.797332][ T3504] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.806043][ T3504] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.824181][ T3508] device veth1_macvtap entered promiscuous mode [ 44.836273][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.845558][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.898749][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.906673][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.945029][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.970590][ T3508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.988236][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.004983][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.005202][ T3508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.023507][ T3508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.025506][ T3581] xt_hashlimit: overflow, try lower: 0/0 [ 45.034424][ T3508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.050933][ T3508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.059149][ T3575] Bluetooth: hci3: command 0x040f tx timeout [ 45.075218][ T3508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.077343][ T3575] Bluetooth: hci2: command 0x040f tx timeout [ 45.093390][ T3508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.096291][ T3575] Bluetooth: hci1: command 0x040f tx timeout [ 45.113358][ T3508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.115398][ T3575] Bluetooth: hci4: command 0x040f tx timeout [ 45.123269][ C1] ------------[ cut here ]------------ [ 45.123731][ C1] [ 45.123735][ C1] ====================================================== [ 45.123740][ C1] WARNING: possible circular locking dependency detected [ 45.123745][ C1] 5.15.161-syzkaller #0 Not tainted [ 45.123753][ C1] ------------------------------------------------------ [ 45.123758][ C1] syz-executor/3508 is trying to acquire lock: [ 45.123765][ C1] ffffffff8c914660 (console_owner){..-.}-{0:0}, at: console_trylock_spinning+0x185/0x3f0 [ 45.123817][ C1] [ 45.123817][ C1] but task is already holding lock: [ 45.123821][ C1] ffff8880b9b28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 45.123855][ C1] [ 45.123855][ C1] which lock already depends on the new lock. [ 45.123855][ C1] [ 45.123859][ C1] [ 45.123859][ C1] the existing dependency chain (in reverse order) is: [ 45.123864][ C1] [ 45.123864][ C1] -> #5 (&base->lock){-.-.}-{2:2}: [ 45.123882][ C1] lock_acquire+0x1db/0x4f0 [ 45.123894][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 45.123911][ C1] lock_timer_base+0x120/0x260 [ 45.123925][ C1] __mod_timer+0x1d6/0xeb0 [ 45.123938][ C1] queue_delayed_work_on+0x156/0x250 [ 45.123952][ C1] enqueue_task+0x2fe/0x3a0 [ 45.123966][ C1] wake_up_new_task+0x515/0xb60 [ 45.123980][ C1] kernel_clone+0x44e/0x960 [ 45.123999][ C1] kernel_thread+0x168/0x1e0 [ 45.124012][ C1] rest_init+0x21/0x330 [ 45.124026][ C1] start_kernel+0x48c/0x540 [ 45.124041][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 45.124056][ C1] [ 45.124056][ C1] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 45.124075][ C1] lock_acquire+0x1db/0x4f0 [ 45.124087][ C1] _raw_spin_lock_nested+0x2d/0x40 [ 45.124099][ C1] raw_spin_rq_lock_nested+0x26/0x140 [ 45.124113][ C1] task_fork_fair+0x5d/0x350 [ 45.124126][ C1] sched_cgroup_fork+0x2d3/0x330 [ 45.124139][ C1] copy_process+0x224a/0x3ef0 [ 45.124152][ C1] kernel_clone+0x210/0x960 [ 45.124164][ C1] kernel_thread+0x168/0x1e0 [ 45.124176][ C1] rest_init+0x21/0x330 [ 45.124190][ C1] start_kernel+0x48c/0x540 [ 45.124203][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 45.124217][ C1] [ 45.124217][ C1] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 45.124235][ C1] lock_acquire+0x1db/0x4f0 [ 45.124246][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 45.124261][ C1] try_to_wake_up+0xae/0x1300 [ 45.124275][ C1] __wake_up_common+0x2a0/0x4e0 [ 45.124290][ C1] __wake_up+0x112/0x1c0 [ 45.124304][ C1] tty_port_default_wakeup+0xa8/0x100 [ 45.124317][ C1] serial8250_tx_chars+0x60d/0x800 [ 45.124332][ C1] serial8250_handle_irq+0x505/0x600 [ 45.124346][ C1] serial8250_default_handle_irq+0xc8/0x1e0 [ 45.124361][ C1] serial8250_interrupt+0xa1/0x1e0 [ 45.124375][ C1] __handle_irq_event_percpu+0x292/0xa70 [ 45.124390][ C1] handle_irq_event+0xff/0x2b0 [ 45.124403][ C1] handle_edge_irq+0x245/0xbf0 [ 45.124415][ C1] __common_interrupt+0xd7/0x1f0 [ 45.124428][ C1] common_interrupt+0x9f/0xc0 [ 45.124441][ C1] asm_common_interrupt+0x22/0x40 [ 45.124454][ C1] acpi_idle_do_entry+0x10f/0x340 [ 45.124469][ C1] acpi_idle_enter+0x352/0x4f0 [ 45.124482][ C1] cpuidle_enter_state+0x521/0xef0 [ 45.124495][ C1] cpuidle_enter+0x59/0x90 [ 45.124507][ C1] do_idle+0x3e4/0x670 [ 45.124521][ C1] cpu_startup_entry+0x14/0x20 [ 45.124535][ C1] start_secondary+0x371/0x500 [ 45.124549][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 45.124564][ C1] [ 45.124564][ C1] -> #2 (&tty->write_wait){-...}-{2:2}: [ 45.124582][ C1] lock_acquire+0x1db/0x4f0 [ 45.124593][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 45.124609][ C1] __wake_up+0xf5/0x1c0 [ 45.124622][ C1] tty_port_default_wakeup+0xa8/0x100 [ 45.124636][ C1] serial8250_tx_chars+0x60d/0x800 [ 45.124650][ C1] serial8250_handle_irq+0x505/0x600 [ 45.124664][ C1] serial8250_default_handle_irq+0xc8/0x1e0 [ 45.124679][ C1] serial8250_interrupt+0xa1/0x1e0 [ 45.124692][ C1] __handle_irq_event_percpu+0x292/0xa70 [ 45.124707][ C1] handle_irq_event+0xff/0x2b0 [ 45.124721][ C1] handle_edge_irq+0x245/0xbf0 [ 45.124733][ C1] __common_interrupt+0xd7/0x1f0 [ 45.124744][ C1] common_interrupt+0x9f/0xc0 [ 45.124758][ C1] asm_common_interrupt+0x22/0x40 [ 45.124770][ C1] acpi_idle_do_entry+0x10f/0x340 [ 45.124785][ C1] acpi_idle_enter+0x352/0x4f0 [ 45.124799][ C1] cpuidle_enter_state+0x521/0xef0 [ 45.124811][ C1] cpuidle_enter+0x59/0x90 [ 45.124823][ C1] do_idle+0x3e4/0x670 [ 45.124835][ C1] cpu_startup_entry+0x14/0x20 [ 45.124849][ C1] start_secondary+0x371/0x500 [ 45.124863][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 45.124878][ C1] [ 45.124878][ C1] -> #1 (&port_lock_key){-...}-{2:2}: [ 45.124896][ C1] lock_acquire+0x1db/0x4f0 [ 45.124908][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 45.124922][ C1] serial8250_console_write+0x19d/0x1180 [ 45.124937][ C1] console_unlock+0xced/0x12b0 [ 45.124950][ C1] vprintk_emit+0xbf/0x150 [ 45.124961][ C1] _printk+0xd1/0x120 [ 45.124976][ C1] register_console+0x65a/0x940 [ 45.124994][ C1] univ8250_console_init+0x41/0x50 [ 45.125009][ C1] console_init+0x18c/0x660 [ 45.125021][ C1] start_kernel+0x301/0x540 [ 45.125034][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 45.125049][ C1] [ 45.125049][ C1] -> #0 (console_owner){..-.}-{0:0}: [ 45.125067][ C1] validate_chain+0x1649/0x5930 [ 45.125080][ C1] __lock_acquire+0x1295/0x1ff0 [ 45.125091][ C1] lock_acquire+0x1db/0x4f0 [ 45.125103][ C1] console_trylock_spinning+0x1a5/0x3f0 [ 45.125116][ C1] vprintk_emit+0xa6/0x150 [ 45.125128][ C1] _printk+0xd1/0x120 [ 45.125141][ C1] report_bug+0x1e5/0x2e0 [ 45.125156][ C1] handle_bug+0x3d/0x70 [ 45.125168][ C1] exc_invalid_op+0x16/0x40 [ 45.125181][ C1] asm_exc_invalid_op+0x16/0x20 [ 45.125193][ C1] copy_from_user_nofault+0x15c/0x1c0 [ 45.125207][ C1] bpf_probe_read_user+0x26/0x70 [ 45.125220][ C1] bpf_prog_078a3568a35342ea+0x38/0xb44 [ 45.125232][ C1] bpf_trace_run3+0x1d1/0x380 [ 45.125244][ C1] enqueue_timer+0x3ae/0x540 [ 45.125258][ C1] __mod_timer+0xa60/0xeb0 [ 45.125271][ C1] dsp_cmx_send+0x21bb/0x2240 [ 45.125284][ C1] call_timer_fn+0x16d/0x560 [ 45.125296][ C1] __run_timers+0x67c/0x890 [ 45.125307][ C1] run_timer_softirq+0x63/0xf0 [ 45.125322][ C1] handle_softirqs+0x3a7/0x930 [ 45.125334][ C1] __irq_exit_rcu+0x157/0x240 [ 45.125346][ C1] irq_exit_rcu+0x5/0x20 [ 45.125357][ C1] sysvec_apic_timer_interrupt+0x91/0xb0 [ 45.125371][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 45.125385][ C1] console_unlock+0xe53/0x12b0 [ 45.125397][ C1] vprintk_emit+0xbf/0x150 [ 45.125409][ C1] _printk+0xd1/0x120 [ 45.125423][ C1] batadv_check_known_mac_addr+0x296/0x3d0 [ 45.125437][ C1] batadv_hard_if_event+0x300/0x17a0 [ 45.125450][ C1] raw_notifier_call_chain+0xd0/0x170 [ 45.125464][ C1] dev_set_mac_address+0x325/0x470 [ 45.125478][ C1] dev_set_mac_address_user+0x2d/0x50 [ 45.125492][ C1] do_setlink+0x897/0x3b00 [ 45.125506][ C1] rtnl_newlink+0x17a4/0x2070 [ 45.125520][ C1] rtnetlink_rcv_msg+0x993/0xee0 [ 45.125533][ C1] netlink_rcv_skb+0x1cf/0x410 [ 45.125545][ C1] netlink_unicast+0x7b6/0x980 [ 45.125560][ C1] netlink_sendmsg+0xa30/0xd60 [ 45.125572][ C1] __sys_sendto+0x564/0x720 [ 45.125586][ C1] __x64_sys_sendto+0xda/0xf0 [ 45.125600][ C1] do_syscall_64+0x3b/0xb0 [ 45.125612][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 45.125625][ C1] [ 45.125625][ C1] other info that might help us debug this: [ 45.125625][ C1] [ 45.125629][ C1] Chain exists of: [ 45.125629][ C1] console_owner --> &rq->__lock --> &base->lock [ 45.125629][ C1] [ 45.125650][ C1] Possible unsafe locking scenario: [ 45.125650][ C1] [ 45.125653][ C1] CPU0 CPU1 [ 45.125656][ C1] ---- ---- [ 45.125660][ C1] lock(&base->lock); [ 45.125668][ C1] lock(&rq->__lock); [ 45.125677][ C1] lock(&base->lock); [ 45.125686][ C1] lock(console_owner); [ 45.125694][ C1] [ 45.125694][ C1] *** DEADLOCK *** [ 45.125694][ C1] [ 45.125697][ C1] 7 locks held by syz-executor/3508: [ 45.125705][ C1] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 45.125741][ C1] #1: ffffffff8d9e07b0 (dev_addr_sem){++++}-{3:3}, at: dev_set_mac_address_user+0x1f/0x50 [ 45.125775][ C1] #2: ffffffff8c91fae0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 45.125808][ C1] #3: ffffc90000dd0be0 ((&dsp_spl_tl)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x560 [ 45.125840][ C1] #4: ffffffff8d7a5318 (dsp_lock){..-.}-{2:2}, at: dsp_cmx_send+0x22/0x2240 [ 45.125872][ C1] #5: ffff8880b9b28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 45.125907][ C1] #6: ffffffff8c91fae0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 45.125940][ C1] [ 45.125940][ C1] stack backtrace: [ 45.125948][ C1] CPU: 1 PID: 3508 Comm: syz-executor Not tainted 5.15.161-syzkaller #0 [ 45.125963][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 45.125974][ C1] Call Trace: [ 45.125979][ C1] [ 45.125997][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 45.126013][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 45.126031][ C1] ? print_circular_bug+0x12b/0x1a0 [ 45.126046][ C1] check_noncircular+0x2f8/0x3b0 [ 45.126062][ C1] ? add_chain_block+0x850/0x850 [ 45.126076][ C1] ? lockdep_lock+0x11f/0x2a0 [ 45.126093][ C1] validate_chain+0x1649/0x5930 [ 45.126109][ C1] ? unwind_get_return_address+0x49/0x80 [ 45.126131][ C1] ? reacquire_held_locks+0x660/0x660 [ 45.126148][ C1] ? lockdep_lock+0x11f/0x2a0 [ 45.126161][ C1] ? lockdep_unlock+0x166/0x300 [ 45.126174][ C1] ? lockdep_lock+0x2a0/0x2a0 [ 45.126189][ C1] ? mark_lock+0x98/0x340 [ 45.126203][ C1] __lock_acquire+0x1295/0x1ff0 [ 45.126221][ C1] lock_acquire+0x1db/0x4f0 [ 45.126233][ C1] ? console_trylock_spinning+0x185/0x3f0 [ 45.126250][ C1] ? read_lock_is_recursive+0x10/0x10 [ 45.126264][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 45.126276][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 45.126293][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 45.126310][ C1] console_trylock_spinning+0x1a5/0x3f0 [ 45.126324][ C1] ? console_trylock_spinning+0x185/0x3f0 [ 45.126337][ C1] ? vprintk_emit+0x150/0x150 [ 45.126350][ C1] ? validate_chain+0x112/0x5930 [ 45.126364][ C1] ? reacquire_held_locks+0x660/0x660 [ 45.126377][ C1] ? validate_chain+0x112/0x5930 [ 45.126393][ C1] ? validate_chain+0x112/0x5930 [ 45.126407][ C1] vprintk_emit+0xa6/0x150 [ 45.126422][ C1] _printk+0xd1/0x120 [ 45.126438][ C1] ? report_bug+0x16e/0x2e0 [ 45.126453][ C1] ? panic+0x860/0x860 [ 45.126469][ C1] ? find_bug+0x9c/0x350 [ 45.126485][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 45.126498][ C1] report_bug+0x1e5/0x2e0 [ 45.126515][ C1] handle_bug+0x3d/0x70 [ 45.126528][ C1] exc_invalid_op+0x16/0x40 [ 45.126543][ C1] asm_exc_invalid_op+0x16/0x20 [ 45.126562][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 45.126577][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 3b ce d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 24 ce d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 45.126588][ C1] RSP: 0018:ffffc90000dd0788 EFLAGS: 00010046 [ 45.126600][ C1] RAX: ffffffff81aa8cac RBX: 0000000000000000 RCX: ffff888078609dc0 [ 45.126611][ C1] RDX: 0000000000000104 RSI: 0000000000000000 RDI: 0000000000000000 [ 45.126620][ C1] RBP: dffffc0000000000 R08: ffffffff81aa8bbd R09: fffffbfff1f7f219 [ 45.126631][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000020000000 [ 45.126641][ C1] R13: 0000000000000008 R14: 0000000020000000 R15: ffffc90000dd07e8 [ 45.126653][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 45.126666][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 45.126682][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 45.126697][ C1] bpf_probe_read_user+0x26/0x70 [ 45.126711][ C1] bpf_prog_078a3568a35342ea+0x38/0xb44 [ 45.126724][ C1] bpf_trace_run3+0x1d1/0x380 [ 45.126739][ C1] ? bpf_trace_run2+0x340/0x340 [ 45.126752][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 45.126768][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 45.126785][ C1] ? _raw_spin_lock+0x40/0x40 [ 45.126803][ C1] enqueue_timer+0x3ae/0x540 [ 45.126820][ C1] __mod_timer+0xa60/0xeb0 [ 45.126835][ C1] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 45.126852][ C1] ? mod_timer_pending+0x20/0x20 [ 45.126867][ C1] ? _raw_read_unlock_irqrestore+0xd9/0x130 [ 45.126881][ C1] ? _raw_read_unlock+0x40/0x40 [ 45.126895][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 45.126911][ C1] ? _raw_spin_lock+0x40/0x40 [ 45.126927][ C1] ? ktime_get+0x242/0x270 [ 45.126942][ C1] dsp_cmx_send+0x21bb/0x2240 [ 45.126956][ C1] ? read_lock_is_recursive+0x10/0x10 [ 45.126971][ C1] ? detach_timer+0x24/0x2f0 [ 45.126992][ C1] call_timer_fn+0x16d/0x560 [ 45.127005][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 45.127019][ C1] ? __run_timers+0x890/0x890 [ 45.127033][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 45.127048][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 45.127064][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 45.127077][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 45.127093][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 45.127106][ C1] __run_timers+0x67c/0x890 [ 45.127122][ C1] ? detach_timer+0x2f0/0x2f0 [ 45.127134][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 45.127154][ C1] run_timer_softirq+0x63/0xf0 [ 45.127170][ C1] handle_softirqs+0x3a7/0x930 [ 45.127185][ C1] ? __irq_exit_rcu+0x157/0x240 [ 45.127199][ C1] ? do_softirq+0x240/0x240 [ 45.127212][ C1] ? hrtimer_interrupt+0x76b/0x980 [ 45.127226][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 45.127243][ C1] __irq_exit_rcu+0x157/0x240 [ 45.127256][ C1] ? irq_exit_rcu+0x20/0x20 [ 45.127272][ C1] irq_exit_rcu+0x5/0x20 [ 45.127284][ C1] sysvec_apic_timer_interrupt+0x91/0xb0 [ 45.127300][ C1] [ 45.127304][ C1] [ 45.127309][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 45.127323][ C1] RIP: 0010:console_unlock+0xe53/0x12b0 [ 45.127338][ C1] Code: 00 48 83 7c 24 18 00 75 19 e8 39 04 1a 00 eb 18 e8 32 04 1a 00 e8 cd e6 b7 08 48 83 7c 24 18 00 74 e7 e8 20 04 1a 00 fb 31 ff <44> 89 f6 e8 75 07 1a 00 31 db 45 85 f6 0f 95 c0 89 c1 0a 4c 24 17 [ 45.127349][ C1] RSP: 0018:ffffc90002e16660 EFLAGS: 00000246 [ 45.127360][ C1] RAX: ffffffff816656b0 RBX: 0000000000000000 RCX: ffff888078609dc0 [ 45.127370][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 45.127379][ C1] RBP: ffffc90002e168f0 R08: ffffffff8166567b R09: fffffbfff1f7f230 [ 45.127389][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff1a4b202 [ 45.127399][ C1] R13: ffffffff8d259048 R14: 0000000000000001 R15: dffffc0000000000 [ 45.127412][ C1] ? console_unlock+0xe1b/0x12b0 [ 45.127425][ C1] ? console_unlock+0xe50/0x12b0 [ 45.127444][ C1] ? console_trylock_spinning+0x3f0/0x3f0 [ 45.127459][ C1] ? __down_trylock_console_sem+0x1f2/0x250 [ 45.127474][ C1] ? vprintk_emit+0xa6/0x150 [ 45.127487][ C1] ? printk_parse_prefix+0x2c0/0x2c0 [ 45.127500][ C1] ? vprintk_emit+0xa6/0x150 [ 45.127513][ C1] ? console_trylock+0x70/0x70 [ 45.127531][ C1] ? vprintk_emit+0x150/0x150 [ 45.127545][ C1] ? __irq_work_queue_local+0x122/0x180 [ 45.127560][ C1] ? irq_work_queue+0xc6/0x150 [ 45.127575][ C1] vprintk_emit+0xbf/0x150 [ 45.127589][ C1] _printk+0xd1/0x120 [ 45.127605][ C1] ? __wake_up_klogd+0xcc/0x100 [ 45.127619][ C1] ? panic+0x860/0x860 [ 45.127634][ C1] ? batadv_hardif_get_by_netdev+0x484/0x4d0 [ 45.127652][ C1] batadv_check_known_mac_addr+0x296/0x3d0 [ 45.127669][ C1] batadv_hard_if_event+0x300/0x17a0 [ 45.127683][ C1] ? addrconf_ifid_802154_6lowpan+0x380/0x380 [ 45.127700][ C1] ? dcbnl_netdevice_event+0x266/0x2a0 [ 45.127715][ C1] ? tipc_l2_device_event+0x18b/0x6b0 [ 45.127730][ C1] raw_notifier_call_chain+0xd0/0x170 [ 45.127747][ C1] dev_set_mac_address+0x325/0x470 [ 45.127763][ C1] ? dev_pre_changeaddr_notify+0x220/0x220 [ 45.127781][ C1] dev_set_mac_address_user+0x2d/0x50 [ 45.127796][ C1] do_setlink+0x897/0x3b00 [ 45.127814][ C1] ? stack_trace_save+0x113/0x1c0 [ 45.127829][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 45.127844][ C1] ? kasan_unpoison+0x42/0x60 [ 45.127859][ C1] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 45.127878][ C1] ? ____kasan_kmalloc+0xd1/0xf0 [ 45.127890][ C1] ? ____kasan_kmalloc+0xba/0xf0 [ 45.127902][ C1] ? kmem_cache_alloc_trace+0x143/0x290 [ 45.127917][ C1] ? rtnl_newlink+0x10d/0x2070 [ 45.127931][ C1] ? rtnetlink_rcv_msg+0x993/0xee0 [ 45.127946][ C1] ? netlink_rcv_skb+0x1cf/0x410 [ 45.127960][ C1] ? __nla_validate_parse+0x1e6b/0x27f0 [ 45.127982][ C1] ? __nla_validate+0x50/0x50 [ 45.128008][ C1] ? validate_linkmsg+0x3db/0x4c0 [ 45.128024][ C1] rtnl_newlink+0x17a4/0x2070 [ 45.128047][ C1] ? rtnl_setlink+0x540/0x540 [ 45.128090][ C1] ? rtnetlink_rcv_msg+0x94c/0xee0 [ 45.128112][ C1] ? rtnl_setlink+0x540/0x540 [ 45.128127][ C1] rtnetlink_rcv_msg+0x993/0xee0 [ 45.128145][ C1] ? rtnetlink_bind+0x80/0x80 [ 45.128160][ C1] ? __local_bh_enable_ip+0x164/0x1f0 [ 45.128174][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 45.128190][ C1] ? __local_bh_enable_ip+0x164/0x1f0 [ 45.128204][ C1] ? local_bh_enable+0x5/0x20 [ 45.128217][ C1] ? _local_bh_enable+0xa0/0xa0 [ 45.128233][ C1] ? __dev_queue_xmit+0x1c56/0x3230 [ 45.128252][ C1] ? __copy_skb_header+0x47b/0x600 [ 45.128267][ C1] ? dev_queue_xmit+0x20/0x20 [ 45.128280][ C1] ? memcpy+0x3c/0x60 [ 45.128293][ C1] ? __copy_skb_header+0x47b/0x600 [ 45.128312][ C1] netlink_rcv_skb+0x1cf/0x410 [ 45.128325][ C1] ? rtnetlink_bind+0x80/0x80 [ 45.128341][ C1] ? netlink_ack+0xb10/0xb10 [ 45.128359][ C1] netlink_unicast+0x7b6/0x980 [ 45.128377][ C1] ? netlink_detachskb+0x90/0x90 [ 45.128393][ C1] ? __virt_addr_valid+0x39e/0x450 [ 45.128406][ C1] ? 0xffffffff81000000 [ 45.128415][ C1] ? __check_object_size+0x300/0x410 [ 45.128431][ C1] ? bpf_lsm_netlink_send+0x5/0x10 [ 45.128446][ C1] netlink_sendmsg+0xa30/0xd60 [ 45.128463][ C1] ? netlink_getsockopt+0x5b0/0x5b0 [ 45.128477][ C1] ? aa_sock_msg_perm+0x91/0x150 [ 45.128492][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 45.128505][ C1] ? security_socket_sendmsg+0x7d/0xa0 [ 45.128519][ C1] ? netlink_getsockopt+0x5b0/0x5b0 [ 45.128536][ C1] __sys_sendto+0x564/0x720 [ 45.128553][ C1] ? __ia32_sys_getpeername+0x80/0x80 [ 45.128572][ C1] ? __fput+0x683/0x890 [ 45.128590][ C1] ? print_irqtrace_events+0x210/0x210 [ 45.128604][ C1] ? vtime_user_exit+0x2d1/0x400 [ 45.128622][ C1] __x64_sys_sendto+0xda/0xf0 [ 45.128638][ C1] do_syscall_64+0x3b/0xb0 [ 45.128651][ C1] ? clear_bhb_loop+0x15/0x70 [ 45.128665][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 45.128679][ C1] RIP: 0033:0x7f09058c7cac [ 45.128691][ C1] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 45.128701][ C1] RSP: 002b:00007ffefc1466d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 45.128715][ C1] RAX: ffffffffffffffda RBX: 00007f0906584620 RCX: 00007f09058c7cac [ 45.128726][ C1] RDX: 000000000000002c RSI: 00007f0906584670 RDI: 0000000000000003 [ 45.128735][ C1] RBP: 0000000000000000 R08: 00007ffefc146724 R09: 000000000000000c [ 45.128744][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 45.128753][ C1] R13: 0000000000000000 R14: 00007f0906584670 R15: 0000000000000000 [ 45.128767][ C1] [ 45.129711][ T3575] Bluetooth: hci0: command 0x040f tx timeout [ 45.134603][ C1] WARNING: CPU: 1 PID: 3508 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 45.134629][ C1] Modules linked in: [ 45.134637][ C1] CPU: 1 PID: 3508 Comm: syz-executor Not tainted 5.15.161-syzkaller #0 [ 45.134655][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 45.134663][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 45.134681][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 3b ce d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 24 ce d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 45.134694][ C1] RSP: 0018:ffffc90000dd0788 EFLAGS: 00010046 [ 45.134708][ C1] RAX: ffffffff81aa8cac RBX: 0000000000000000 RCX: ffff888078609dc0 [ 45.134720][ C1] RDX: 0000000000000104 RSI: 0000000000000000 RDI: 0000000000000000 [ 45.134730][ C1] RBP: dffffc0000000000 R08: ffffffff81aa8bbd R09: fffffbfff1f7f219 [ 45.134742][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000020000000 [ 45.134753][ C1] R13: 0000000000000008 R14: 0000000020000000 R15: ffffc90000dd07e8 [ 45.134763][ C1] FS: 0000555555a6a500(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 45.134774][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.134784][ C1] CR2: 000000110c3ae029 CR3: 00000000687d7000 CR4: 00000000003506e0 [ 45.134798][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.241826][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.249773][ C1] Call Trace: [ 47.253031][ C1] [ 47.255847][ C1] ? __warn+0x15b/0x300 [ 47.259979][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 47.265496][ C1] ? report_bug+0x1b7/0x2e0 [ 47.269988][ C1] ? handle_bug+0x3d/0x70 [ 47.274284][ C1] ? exc_invalid_op+0x16/0x40 [ 47.278930][ C1] ? asm_exc_invalid_op+0x16/0x20 [ 47.283921][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 47.289345][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 47.294857][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 47.300374][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 47.305887][ C1] bpf_probe_read_user+0x26/0x70 [ 47.310792][ C1] bpf_prog_078a3568a35342ea+0x38/0xb44 [ 47.316304][ C1] bpf_trace_run3+0x1d1/0x380 [ 47.320950][ C1] ? bpf_trace_run2+0x340/0x340 [ 47.325770][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 47.331632][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 47.337058][ C1] ? _raw_spin_lock+0x40/0x40 [ 47.341704][ C1] enqueue_timer+0x3ae/0x540 [ 47.346264][ C1] __mod_timer+0xa60/0xeb0 [ 47.350646][ C1] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 47.356853][ C1] ? mod_timer_pending+0x20/0x20 [ 47.361755][ C1] ? _raw_read_unlock_irqrestore+0xd9/0x130 [ 47.367618][ C1] ? _raw_read_unlock+0x40/0x40 [ 47.372432][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 47.377858][ C1] ? _raw_spin_lock+0x40/0x40 [ 47.382502][ C1] ? ktime_get+0x242/0x270 [ 47.386884][ C1] dsp_cmx_send+0x21bb/0x2240 [ 47.391530][ C1] ? read_lock_is_recursive+0x10/0x10 [ 47.396868][ C1] ? detach_timer+0x24/0x2f0 [ 47.401424][ C1] call_timer_fn+0x16d/0x560 [ 47.406414][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 47.411494][ C1] ? __run_timers+0x890/0x890 [ 47.416138][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 47.421304][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 47.426466][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 47.431542][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 47.436708][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 47.441782][ C1] __run_timers+0x67c/0x890 [ 47.446252][ C1] ? detach_timer+0x2f0/0x2f0 [ 47.450894][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 47.456495][ C1] run_timer_softirq+0x63/0xf0 [ 47.461225][ C1] handle_softirqs+0x3a7/0x930 [ 47.465959][ C1] ? __irq_exit_rcu+0x157/0x240 [ 47.470783][ C1] ? do_softirq+0x240/0x240 [ 47.475250][ C1] ? hrtimer_interrupt+0x76b/0x980 [ 47.480327][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 47.485492][ C1] __irq_exit_rcu+0x157/0x240 [ 47.490136][ C1] ? irq_exit_rcu+0x20/0x20 [ 47.494605][ C1] irq_exit_rcu+0x5/0x20 [ 47.498812][ C1] sysvec_apic_timer_interrupt+0x91/0xb0 [ 47.504412][ C1] [ 47.507324][ C1] [ 47.510225][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 47.516175][ C1] RIP: 0010:console_unlock+0xe53/0x12b0 [ 47.521686][ C1] Code: 00 48 83 7c 24 18 00 75 19 e8 39 04 1a 00 eb 18 e8 32 04 1a 00 e8 cd e6 b7 08 48 83 7c 24 18 00 74 e7 e8 20 04 1a 00 fb 31 ff <44> 89 f6 e8 75 07 1a 00 31 db 45 85 f6 0f 95 c0 89 c1 0a 4c 24 17 [ 47.541343][ C1] RSP: 0018:ffffc90002e16660 EFLAGS: 00000246 [ 47.547376][ C1] RAX: ffffffff816656b0 RBX: 0000000000000000 RCX: ffff888078609dc0 [ 47.555315][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 47.563252][ C1] RBP: ffffc90002e168f0 R08: ffffffff8166567b R09: fffffbfff1f7f230 [ 47.571189][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff1a4b202 [ 47.579126][ C1] R13: ffffffff8d259048 R14: 0000000000000001 R15: dffffc0000000000 [ 47.587065][ C1] ? console_unlock+0xe1b/0x12b0 [ 47.591969][ C1] ? console_unlock+0xe50/0x12b0 [ 47.596873][ C1] ? console_trylock_spinning+0x3f0/0x3f0 [ 47.602558][ C1] ? __down_trylock_console_sem+0x1f2/0x250 [ 47.608415][ C1] ? vprintk_emit+0xa6/0x150 [ 47.612976][ C1] ? printk_parse_prefix+0x2c0/0x2c0 [ 47.618224][ C1] ? vprintk_emit+0xa6/0x150 [ 47.622778][ C1] ? console_trylock+0x70/0x70 [ 47.627511][ C1] ? vprintk_emit+0x150/0x150 [ 47.632154][ C1] ? __irq_work_queue_local+0x122/0x180 [ 47.637666][ C1] ? irq_work_queue+0xc6/0x150 [ 47.642397][ C1] vprintk_emit+0xbf/0x150 [ 47.646778][ C1] _printk+0xd1/0x120 [ 47.650741][ C1] ? __wake_up_klogd+0xcc/0x100 [ 47.655560][ C1] ? panic+0x860/0x860 [ 47.659594][ C1] ? batadv_hardif_get_by_netdev+0x484/0x4d0 [ 47.665542][ C1] batadv_check_known_mac_addr+0x296/0x3d0 [ 47.671315][ C1] batadv_hard_if_event+0x300/0x17a0 [ 47.676566][ C1] ? addrconf_ifid_802154_6lowpan+0x380/0x380 [ 47.682602][ C1] ? dcbnl_netdevice_event+0x266/0x2a0 [ 47.688028][ C1] ? tipc_l2_device_event+0x18b/0x6b0 [ 47.693367][ C1] raw_notifier_call_chain+0xd0/0x170 [ 47.698710][ C1] dev_set_mac_address+0x325/0x470 [ 47.703799][ C1] ? dev_pre_changeaddr_notify+0x220/0x220 [ 47.709575][ C1] dev_set_mac_address_user+0x2d/0x50 [ 47.714915][ C1] do_setlink+0x897/0x3b00 [ 47.719300][ C1] ? stack_trace_save+0x113/0x1c0 [ 47.724293][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 47.729371][ C1] ? kasan_unpoison+0x42/0x60 [ 47.734015][ C1] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 47.740137][ C1] ? ____kasan_kmalloc+0xd1/0xf0 [ 47.745040][ C1] ? ____kasan_kmalloc+0xba/0xf0 [ 47.749943][ C1] ? kmem_cache_alloc_trace+0x143/0x290 [ 47.755453][ C1] ? rtnl_newlink+0x10d/0x2070 [ 47.760183][ C1] ? rtnetlink_rcv_msg+0x993/0xee0 [ 47.765262][ C1] ? netlink_rcv_skb+0x1cf/0x410 [ 47.770167][ C1] ? __nla_validate_parse+0x1e6b/0x27f0 [ 47.775682][ C1] ? __nla_validate+0x50/0x50 [ 47.780328][ C1] ? validate_linkmsg+0x3db/0x4c0 [ 47.785320][ C1] rtnl_newlink+0x17a4/0x2070 [ 47.789967][ C1] ? rtnl_setlink+0x540/0x540 [ 47.794627][ C1] ? rtnetlink_rcv_msg+0x94c/0xee0 [ 47.799708][ C1] ? rtnl_setlink+0x540/0x540 [ 47.804355][ C1] rtnetlink_rcv_msg+0x993/0xee0 [ 47.809261][ C1] ? rtnetlink_bind+0x80/0x80 [ 47.813906][ C1] ? __local_bh_enable_ip+0x164/0x1f0 [ 47.819244][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 47.824408][ C1] ? __local_bh_enable_ip+0x164/0x1f0 [ 47.829747][ C1] ? local_bh_enable+0x5/0x20 [ 47.834389][ C1] ? _local_bh_enable+0xa0/0xa0 [ 47.839205][ C1] ? __dev_queue_xmit+0x1c56/0x3230 [ 47.844370][ C1] ? __copy_skb_header+0x47b/0x600 [ 47.849454][ C1] ? dev_queue_xmit+0x20/0x20 [ 47.854096][ C1] ? memcpy+0x3c/0x60 [ 47.858043][ C1] ? __copy_skb_header+0x47b/0x600 [ 47.863124][ C1] netlink_rcv_skb+0x1cf/0x410 [ 47.867857][ C1] ? rtnetlink_bind+0x80/0x80 [ 47.872502][ C1] ? netlink_ack+0xb10/0xb10 [ 47.877059][ C1] netlink_unicast+0x7b6/0x980 [ 47.881793][ C1] ? netlink_detachskb+0x90/0x90 [ 47.886696][ C1] ? __virt_addr_valid+0x39e/0x450 [ 47.891776][ C1] ? 0xffffffff81000000 [ 47.895896][ C1] ? __check_object_size+0x300/0x410 [ 47.901148][ C1] ? bpf_lsm_netlink_send+0x5/0x10 [ 47.906228][ C1] netlink_sendmsg+0xa30/0xd60 [ 47.910961][ C1] ? netlink_getsockopt+0x5b0/0x5b0 [ 47.916124][ C1] ? aa_sock_msg_perm+0x91/0x150 [ 47.921030][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 47.926280][ C1] ? security_socket_sendmsg+0x7d/0xa0 [ 47.931706][ C1] ? netlink_getsockopt+0x5b0/0x5b0 [ 47.936870][ C1] __sys_sendto+0x564/0x720 [ 47.941356][ C1] ? __ia32_sys_getpeername+0x80/0x80 [ 47.946700][ C1] ? __fput+0x683/0x890 [ 47.950842][ C1] ? print_irqtrace_events+0x210/0x210 [ 47.956268][ C1] ? vtime_user_exit+0x2d1/0x400 [ 47.961176][ C1] __x64_sys_sendto+0xda/0xf0 [ 47.965821][ C1] do_syscall_64+0x3b/0xb0 [ 47.970204][ C1] ? clear_bhb_loop+0x15/0x70 [ 47.974865][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.980723][ C1] RIP: 0033:0x7f09058c7cac [ 47.985106][ C1] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 48.004676][ C1] RSP: 002b:00007ffefc1466d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 48.013056][ C1] RAX: ffffffffffffffda RBX: 00007f0906584620 RCX: 00007f09058c7cac [ 48.020994][ C1] RDX: 000000000000002c RSI: 00007f0906584670 RDI: 0000000000000003 [ 48.028943][ C1] RBP: 0000000000000000 R08: 00007ffefc146724 R09: 000000000000000c [ 48.036882][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 48.044832][ C1] R13: 0000000000000000 R14: 00007f0906584670 R15: 0000000000000000 [ 48.052777][ C1] [ 48.055783][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 48.063039][ C1] CPU: 1 PID: 3508 Comm: syz-executor Not tainted 5.15.161-syzkaller #0 [ 48.071328][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 48.081350][ C1] Call Trace: [ 48.084607][ C1] [ 48.087420][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 48.092066][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 48.097664][ C1] ? panic+0x860/0x860 [ 48.101707][ C1] ? panic+0x860/0x860 [ 48.105746][ C1] ? copy_from_user_nofault+0xb0/0x1c0 [ 48.111170][ C1] ? copy_from_user_nofault+0xb0/0x1c0 [ 48.116595][ C1] panic+0x318/0x860 [ 48.120460][ C1] ? __warn+0x16a/0x300 [ 48.124582][ C1] ? fb_is_primary_device+0xd0/0xd0 [ 48.129752][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 48.135273][ C1] __warn+0x2b2/0x300 [ 48.139238][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 48.144751][ C1] report_bug+0x1b7/0x2e0 [ 48.149108][ C1] handle_bug+0x3d/0x70 [ 48.153247][ C1] exc_invalid_op+0x16/0x40 [ 48.157720][ C1] asm_exc_invalid_op+0x16/0x20 [ 48.162539][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 48.168661][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 3b ce d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 24 ce d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 48.188243][ C1] RSP: 0018:ffffc90000dd0788 EFLAGS: 00010046 [ 48.194284][ C1] RAX: ffffffff81aa8cac RBX: 0000000000000000 RCX: ffff888078609dc0 [ 48.202222][ C1] RDX: 0000000000000104 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.210160][ C1] RBP: dffffc0000000000 R08: ffffffff81aa8bbd R09: fffffbfff1f7f219 [ 48.218098][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000020000000 [ 48.226036][ C1] R13: 0000000000000008 R14: 0000000020000000 R15: ffffc90000dd07e8 [ 48.233995][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 48.239425][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 48.244938][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 48.250450][ C1] bpf_probe_read_user+0x26/0x70 [ 48.255360][ C1] bpf_prog_078a3568a35342ea+0x38/0xb44 [ 48.260873][ C1] bpf_trace_run3+0x1d1/0x380 [ 48.265520][ C1] ? bpf_trace_run2+0x340/0x340 [ 48.270339][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 48.276202][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 48.281626][ C1] ? _raw_spin_lock+0x40/0x40 [ 48.286270][ C1] enqueue_timer+0x3ae/0x540 [ 48.290830][ C1] __mod_timer+0xa60/0xeb0 [ 48.295216][ C1] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 48.301422][ C1] ? mod_timer_pending+0x20/0x20 [ 48.306327][ C1] ? _raw_read_unlock_irqrestore+0xd9/0x130 [ 48.312183][ C1] ? _raw_read_unlock+0x40/0x40 [ 48.316998][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 48.322424][ C1] ? _raw_spin_lock+0x40/0x40 [ 48.327066][ C1] ? ktime_get+0x242/0x270 [ 48.331448][ C1] dsp_cmx_send+0x21bb/0x2240 [ 48.336091][ C1] ? read_lock_is_recursive+0x10/0x10 [ 48.341427][ C1] ? detach_timer+0x24/0x2f0 [ 48.345984][ C1] call_timer_fn+0x16d/0x560 [ 48.350541][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 48.355617][ C1] ? __run_timers+0x890/0x890 [ 48.360258][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 48.365421][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 48.370586][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 48.375664][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 48.380828][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 48.385903][ C1] __run_timers+0x67c/0x890 [ 48.390374][ C1] ? detach_timer+0x2f0/0x2f0 [ 48.395012][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 48.400611][ C1] run_timer_softirq+0x63/0xf0 [ 48.405343][ C1] handle_softirqs+0x3a7/0x930 [ 48.410073][ C1] ? __irq_exit_rcu+0x157/0x240 [ 48.414889][ C1] ? do_softirq+0x240/0x240 [ 48.419356][ C1] ? hrtimer_interrupt+0x76b/0x980 [ 48.424431][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 48.429599][ C1] __irq_exit_rcu+0x157/0x240 [ 48.434240][ C1] ? irq_exit_rcu+0x20/0x20 [ 48.438709][ C1] irq_exit_rcu+0x5/0x20 [ 48.442917][ C1] sysvec_apic_timer_interrupt+0x91/0xb0 [ 48.448518][ C1] [ 48.451417][ C1] [ 48.454318][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 48.460267][ C1] RIP: 0010:console_unlock+0xe53/0x12b0 [ 48.465780][ C1] Code: 00 48 83 7c 24 18 00 75 19 e8 39 04 1a 00 eb 18 e8 32 04 1a 00 e8 cd e6 b7 08 48 83 7c 24 18 00 74 e7 e8 20 04 1a 00 fb 31 ff <44> 89 f6 e8 75 07 1a 00 31 db 45 85 f6 0f 95 c0 89 c1 0a 4c 24 17 [ 48.485348][ C1] RSP: 0018:ffffc90002e16660 EFLAGS: 00000246 [ 48.491381][ C1] RAX: ffffffff816656b0 RBX: 0000000000000000 RCX: ffff888078609dc0 [ 48.499317][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.507688][ C1] RBP: ffffc90002e168f0 R08: ffffffff8166567b R09: fffffbfff1f7f230 [ 48.515628][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff1a4b202 [ 48.523566][ C1] R13: ffffffff8d259048 R14: 0000000000000001 R15: dffffc0000000000 [ 48.531504][ C1] ? console_unlock+0xe1b/0x12b0 [ 48.536407][ C1] ? console_unlock+0xe50/0x12b0 [ 48.541312][ C1] ? console_trylock_spinning+0x3f0/0x3f0 [ 48.546997][ C1] ? __down_trylock_console_sem+0x1f2/0x250 [ 48.552856][ C1] ? vprintk_emit+0xa6/0x150 [ 48.557409][ C1] ? printk_parse_prefix+0x2c0/0x2c0 [ 48.562658][ C1] ? vprintk_emit+0xa6/0x150 [ 48.567213][ C1] ? console_trylock+0x70/0x70 [ 48.571946][ C1] ? vprintk_emit+0x150/0x150 [ 48.576586][ C1] ? __irq_work_queue_local+0x122/0x180 [ 48.582097][ C1] ? irq_work_queue+0xc6/0x150 [ 48.586826][ C1] vprintk_emit+0xbf/0x150 [ 48.591208][ C1] _printk+0xd1/0x120 [ 48.595161][ C1] ? __wake_up_klogd+0xcc/0x100 [ 48.599977][ C1] ? panic+0x860/0x860 [ 48.604011][ C1] ? batadv_hardif_get_by_netdev+0x484/0x4d0 [ 48.609959][ C1] batadv_check_known_mac_addr+0x296/0x3d0 [ 48.615733][ C1] batadv_hard_if_event+0x300/0x17a0 [ 48.620984][ C1] ? addrconf_ifid_802154_6lowpan+0x380/0x380 [ 48.627018][ C1] ? dcbnl_netdevice_event+0x266/0x2a0 [ 48.632444][ C1] ? tipc_l2_device_event+0x18b/0x6b0 [ 48.637779][ C1] raw_notifier_call_chain+0xd0/0x170 [ 48.643122][ C1] dev_set_mac_address+0x325/0x470 [ 48.648200][ C1] ? dev_pre_changeaddr_notify+0x220/0x220 [ 48.653974][ C1] dev_set_mac_address_user+0x2d/0x50 [ 48.659311][ C1] do_setlink+0x897/0x3b00 [ 48.663697][ C1] ? stack_trace_save+0x113/0x1c0 [ 48.668686][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 48.673763][ C1] ? kasan_unpoison+0x42/0x60 [ 48.678409][ C1] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 48.684529][ C1] ? ____kasan_kmalloc+0xd1/0xf0 [ 48.689432][ C1] ? ____kasan_kmalloc+0xba/0xf0 [ 48.694333][ C1] ? kmem_cache_alloc_trace+0x143/0x290 [ 48.699843][ C1] ? rtnl_newlink+0x10d/0x2070 [ 48.704570][ C1] ? rtnetlink_rcv_msg+0x993/0xee0 [ 48.709647][ C1] ? netlink_rcv_skb+0x1cf/0x410 [ 48.714549][ C1] ? __nla_validate_parse+0x1e6b/0x27f0 [ 48.720067][ C1] ? __nla_validate+0x50/0x50 [ 48.724717][ C1] ? validate_linkmsg+0x3db/0x4c0 [ 48.729708][ C1] rtnl_newlink+0x17a4/0x2070 [ 48.734355][ C1] ? rtnl_setlink+0x540/0x540 [ 48.739014][ C1] ? rtnetlink_rcv_msg+0x94c/0xee0 [ 48.744097][ C1] ? rtnl_setlink+0x540/0x540 [ 48.748740][ C1] rtnetlink_rcv_msg+0x993/0xee0 [ 48.753645][ C1] ? rtnetlink_bind+0x80/0x80 [ 48.758293][ C1] ? __local_bh_enable_ip+0x164/0x1f0 [ 48.763631][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 48.768795][ C1] ? __local_bh_enable_ip+0x164/0x1f0 [ 48.774129][ C1] ? local_bh_enable+0x5/0x20 [ 48.778786][ C1] ? _local_bh_enable+0xa0/0xa0 [ 48.783602][ C1] ? __dev_queue_xmit+0x1c56/0x3230 [ 48.788769][ C1] ? __copy_skb_header+0x47b/0x600 [ 48.793846][ C1] ? dev_queue_xmit+0x20/0x20 [ 48.798487][ C1] ? memcpy+0x3c/0x60 [ 48.802436][ C1] ? __copy_skb_header+0x47b/0x600 [ 48.807775][ C1] netlink_rcv_skb+0x1cf/0x410 [ 48.812505][ C1] ? rtnetlink_bind+0x80/0x80 [ 48.817150][ C1] ? netlink_ack+0xb10/0xb10 [ 48.821710][ C1] netlink_unicast+0x7b6/0x980 [ 48.826444][ C1] ? netlink_detachskb+0x90/0x90 [ 48.831364][ C1] ? __virt_addr_valid+0x39e/0x450 [ 48.836442][ C1] ? 0xffffffff81000000 [ 48.840563][ C1] ? __check_object_size+0x300/0x410 [ 48.845815][ C1] ? bpf_lsm_netlink_send+0x5/0x10 [ 48.850895][ C1] netlink_sendmsg+0xa30/0xd60 [ 48.855645][ C1] ? netlink_getsockopt+0x5b0/0x5b0 [ 48.860810][ C1] ? aa_sock_msg_perm+0x91/0x150 [ 48.865715][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 48.870963][ C1] ? security_socket_sendmsg+0x7d/0xa0 [ 48.876386][ C1] ? netlink_getsockopt+0x5b0/0x5b0 [ 48.881547][ C1] __sys_sendto+0x564/0x720 [ 48.886104][ C1] ? __ia32_sys_getpeername+0x80/0x80 [ 48.891445][ C1] ? __fput+0x683/0x890 [ 48.895573][ C1] ? print_irqtrace_events+0x210/0x210 [ 48.900996][ C1] ? vtime_user_exit+0x2d1/0x400 [ 48.905914][ C1] __x64_sys_sendto+0xda/0xf0 [ 48.910557][ C1] do_syscall_64+0x3b/0xb0 [ 48.914941][ C1] ? clear_bhb_loop+0x15/0x70 [ 48.919586][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.925446][ C1] RIP: 0033:0x7f09058c7cac [ 48.929828][ C1] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 48.949396][ C1] RSP: 002b:00007ffefc1466d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 48.957775][ C1] RAX: ffffffffffffffda RBX: 00007f0906584620 RCX: 00007f09058c7cac [ 48.965714][ C1] RDX: 000000000000002c RSI: 00007f0906584670 RDI: 0000000000000003 [ 48.973652][ C1] RBP: 0000000000000000 R08: 00007ffefc146724 R09: 000000000000000c [ 48.981589][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 48.989529][ C1] R13: 0000000000000000 R14: 00007f0906584670 R15: 0000000000000000 [ 48.997469][ C1] [ 50.083534][ C1] Shutting down cpus with NMI [ 50.088424][ C1] Kernel Offset: disabled [ 50.092741][ C1] Rebooting in 86400 seconds..