Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts. 2025/09/06 00:34:14 parsed 1 programs [ 55.459509][ T4189] cgroup: Unknown subsys name 'net' [ 55.600496][ T4189] cgroup: Unknown subsys name 'rlimit' [ 56.795237][ T4189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.366586][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.374532][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.402086][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.421497][ T3085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.430632][ T3085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.440798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.822174][ T154] ODEBUG: Out of memory. ODEBUG disabled [ 60.351061][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 60.388188][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.396070][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.403720][ T4272] device bridge_slave_0 entered promiscuous mode [ 60.412530][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.419756][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.427672][ T4272] device bridge_slave_1 entered promiscuous mode [ 60.466342][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.476872][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.497151][ T4272] team0: Port device team_slave_0 added [ 60.504138][ T4272] team0: Port device team_slave_1 added [ 60.533361][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.540388][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.566598][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.579649][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.586666][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.612721][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.651313][ T4272] device hsr_slave_0 entered promiscuous mode [ 60.658987][ T4272] device hsr_slave_1 entered promiscuous mode [ 60.759878][ T4272] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.769913][ T4272] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.778603][ T4272] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.788324][ T4272] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.821710][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.828909][ T4272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.836542][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.843635][ T4272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.897357][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.922233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.931454][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.939264][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.947688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 60.959943][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.972035][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.980667][ T3085] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.987739][ T3085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.006697][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.015364][ T3085] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.022517][ T3085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.030670][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.039598][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.064758][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.076537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.088086][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.099918][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.194681][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.202715][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.216234][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.230756][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.272891][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.282068][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.290227][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.304859][ T4272] device veth0_vlan entered promiscuous mode [ 61.317343][ T4272] device veth1_vlan entered promiscuous mode [ 61.340792][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.350581][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.360949][ T4272] device veth0_macvtap entered promiscuous mode [ 61.372440][ T4272] device veth1_macvtap entered promiscuous mode [ 61.388708][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.397728][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.407197][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.416492][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.425431][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.438502][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.457097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.466590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.478778][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.488559][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.498040][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.507264][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.601338][ T4272] syz-executor (4272) used greatest stack depth: 20448 bytes left 2025/09/06 00:34:22 executed programs: 0 [ 62.096944][ T4296] chnl_net:caif_netlink_parms(): no params data found [ 62.154147][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.161386][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.169437][ T4296] device bridge_slave_0 entered promiscuous mode [ 62.177867][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.185490][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.193474][ T4296] device bridge_slave_1 entered promiscuous mode [ 62.218579][ T4296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.230688][ T4296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.259096][ T4296] team0: Port device team_slave_0 added [ 62.267080][ T4296] team0: Port device team_slave_1 added [ 62.289918][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.297482][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.323917][ T4296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.341768][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.348779][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.374815][ T4296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.411113][ T4296] device hsr_slave_0 entered promiscuous mode [ 62.417991][ T4296] device hsr_slave_1 entered promiscuous mode [ 62.424484][ T4296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.432395][ T4296] Cannot create hsr debugfs directory [ 62.508290][ T4296] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.985930][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 65.119969][ T4296] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.065291][ T1106] Bluetooth: hci0: command 0x041b tx timeout [ 66.868532][ T4296] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.919597][ T4296] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.160755][ T4296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.169184][ T4296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.177758][ T4296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.186851][ T4296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.238504][ T4296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.260963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.268827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.279323][ T4296] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.288460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.297438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.306209][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.313281][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.324012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.332126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.341078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.349737][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.356952][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.369105][ T154] device hsr_slave_0 left promiscuous mode [ 67.375802][ T154] device hsr_slave_1 left promiscuous mode [ 67.382045][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.389541][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.398303][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.406323][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.413837][ T154] device bridge_slave_1 left promiscuous mode [ 67.420231][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.431543][ T154] device bridge_slave_0 left promiscuous mode [ 67.438954][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.454042][ T154] device veth1_macvtap left promiscuous mode [ 67.460749][ T154] device veth0_macvtap left promiscuous mode [ 67.466840][ T154] device veth1_vlan left promiscuous mode [ 67.472696][ T154] device veth0_vlan left promiscuous mode [ 67.579932][ T154] team0 (unregistering): Port device team_slave_1 removed [ 67.591660][ T154] team0 (unregistering): Port device team_slave_0 removed [ 67.602763][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.615621][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.656528][ T154] bond0 (unregistering): Released all slaves [ 67.703747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.716524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.727799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.736556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.744860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.756966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.766556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.779105][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.788389][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.802495][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.811080][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.821048][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.907285][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.914730][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.925966][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.940623][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.949241][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.968679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.977100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.986958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.994624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.003909][ T4296] device veth0_vlan entered promiscuous mode [ 68.014072][ T4296] device veth1_vlan entered promiscuous mode [ 68.033085][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.041802][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.051310][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.061059][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.073179][ T4296] device veth0_macvtap entered promiscuous mode [ 68.082898][ T4296] device veth1_macvtap entered promiscuous mode [ 68.098721][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.109385][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.117922][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.127309][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.135673][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.144303][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.154798][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.163204][ T1109] Bluetooth: hci0: command 0x040f tx timeout [ 68.164052][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.182756][ T4296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.192065][ T4296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.202195][ T4296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.213163][ T4296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.273234][ T3085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.286974][ T3085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.309296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2025/09/06 00:34:28 executed programs: 2 [ 68.322297][ T3085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.331298][ T3085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.343037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.235277][ T1109] Bluetooth: hci0: command 0x0419 tx timeout [ 71.268766][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.276130][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 2025/09/06 00:34:33 executed programs: 230 [ 76.387527][ T1324] cfg80211: failed to load regulatory.db 2025/09/06 00:34:38 executed programs: 452 [ 81.751321][ T4918] chnl_net:caif_netlink_parms(): no params data found [ 81.784810][ T4918] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.791947][ T4918] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.799745][ T4918] device bridge_slave_0 entered promiscuous mode [ 81.808015][ T4918] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.815200][ T4918] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.822819][ T4918] device bridge_slave_1 entered promiscuous mode [ 81.840123][ T4918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.850676][ T4918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.872746][ T4918] team0: Port device team_slave_0 added [ 81.881465][ T4918] team0: Port device team_slave_1 added [ 81.904681][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.919084][ T4918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.926560][ T4918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.953045][ T4918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.965243][ T4918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.972194][ T4918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.998238][ T4918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.016866][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.040478][ T4918] device hsr_slave_0 entered promiscuous mode [ 82.047238][ T4918] device hsr_slave_1 entered promiscuous mode [ 82.073282][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.131118][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.126232][ T144] device hsr_slave_0 left promiscuous mode [ 83.132519][ T144] device hsr_slave_1 left promiscuous mode [ 83.139178][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.146707][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.154232][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.161898][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.169517][ T144] device bridge_slave_1 left promiscuous mode [ 83.176294][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.184343][ T144] device bridge_slave_0 left promiscuous mode [ 83.190859][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.200906][ T144] device veth1_macvtap left promiscuous mode [ 83.207220][ T144] device veth0_macvtap left promiscuous mode [ 83.213245][ T144] device veth1_vlan left promiscuous mode [ 83.219062][ T144] device veth0_vlan left promiscuous mode [ 83.317594][ T144] team0 (unregistering): Port device team_slave_1 removed [ 83.329981][ T144] team0 (unregistering): Port device team_slave_0 removed [ 83.341123][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.353459][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.393922][ T144] bond0 (unregistering): Released all slaves [ 83.502285][ T4918] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.510999][ T4918] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.521028][ T4918] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.530232][ T4918] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.582718][ T4918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.593548][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.601528][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.618350][ T4918] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.628944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.637818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.646694][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.653739][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.661487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.672253][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.681323][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.690013][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.697071][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.708167][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.729535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.740921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.749170][ T1109] Bluetooth: hci0: command 0x0409 tx timeout [ 83.756842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.766156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.774652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.783683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.792034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.800399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.808793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.817850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.829068][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.913666][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.921850][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.935487][ T4918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.955454][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.964654][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.986922][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.995905][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.005654][ T4918] device veth0_vlan entered promiscuous mode [ 84.017148][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.028032][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.038020][ T4918] device veth1_vlan entered promiscuous mode [ 84.060151][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.070199][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.080955][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.089888][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.102363][ T4918] device veth0_macvtap entered promiscuous mode [ 84.113486][ T4918] device veth1_macvtap entered promiscuous mode [ 84.130535][ T4918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.140199][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.149455][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.158829][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.168532][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.182337][ T4918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.191399][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.201869][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.213607][ T4918] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.222919][ T4918] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.232329][ T4918] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.242160][ T4918] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.297724][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.321564][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.331388][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2025/09/06 00:34:44 executed programs: 602 [ 84.341950][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.351546][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.362779][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.825847][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 87.905066][ T4261] Bluetooth: hci0: command 0x040f tx timeout 2025/09/06 00:34:49 executed programs: 834 [ 89.715602][ C0] ------------[ cut here ]------------ [ 89.716380][ C0] [ 89.716384][ C0] ====================================================== [ 89.716387][ C0] WARNING: possible circular locking dependency detected [ 89.716397][ C0] syzkaller #0 Not tainted [ 89.716402][ C0] ------------------------------------------------------ [ 89.716404][ C0] syz.0.866/5216 is trying to acquire lock: [ 89.716409][ C0] ffffffff8c110ec0 (console_owner){..-.}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60 [ 89.716439][ C0] [ 89.716439][ C0] but task is already holding lock: [ 89.716442][ C0] ffff8880b902a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x5ff/0xc40 [ 89.716462][ C0] [ 89.716462][ C0] which lock already depends on the new lock. [ 89.716462][ C0] [ 89.716464][ C0] [ 89.716464][ C0] the existing dependency chain (in reverse order) is: [ 89.716467][ C0] [ 89.716467][ C0] -> #6 (hrtimer_bases.lock){-.-.}-{2:2}: [ 89.716477][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 89.716488][ C0] hrtimer_start_range_ns+0xff/0xc20 [ 89.716496][ C0] enqueue_task_rt+0x60c/0xc00 [ 89.716504][ C0] enqueue_task+0x182/0x2b0 [ 89.716513][ C0] ttwu_do_activate+0x1b7/0x370 [ 89.716521][ C0] sched_ttwu_pending+0x272/0x5d0 [ 89.716529][ C0] __sysvec_call_function_single+0x98/0x240 [ 89.716538][ C0] sysvec_call_function_single+0x98/0xc0 [ 89.716546][ C0] asm_sysvec_call_function_single+0x16/0x20 [ 89.716554][ C0] default_idle+0xb/0x10 [ 89.716563][ C0] default_idle_call+0x81/0xc0 [ 89.716572][ C0] do_idle+0x21b/0x5b0 [ 89.716580][ C0] cpu_startup_entry+0x14/0x20 [ 89.716587][ C0] start_secondary+0x31f/0x430 [ 89.716595][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 89.716605][ C0] [ 89.716605][ C0] -> #5 (&rt_b->rt_runtime_lock){-...}-{2:2}: [ 89.716615][ C0] _raw_spin_lock+0x2a/0x40 [ 89.716623][ C0] rq_online_rt+0x125/0x310 [ 89.716630][ C0] sched_cpu_activate+0x4ae/0x650 [ 89.716637][ C0] cpuhp_invoke_callback+0x431/0x830 [ 89.716646][ C0] cpuhp_thread_fun+0x39a/0x7d0 [ 89.716654][ C0] smpboot_thread_fn+0x4f6/0x970 [ 89.716663][ C0] kthread+0x436/0x520 [ 89.716670][ C0] ret_from_fork+0x1f/0x30 [ 89.716677][ C0] [ 89.716677][ C0] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 89.716687][ C0] _raw_spin_lock_nested+0x2e/0x40 [ 89.716694][ C0] raw_spin_rq_lock_nested+0x26/0x140 [ 89.716702][ C0] task_fork_fair+0x5c/0x350 [ 89.716708][ C0] sched_cgroup_fork+0x2c6/0x320 [ 89.716716][ C0] copy_process+0x22d1/0x3e00 [ 89.716738][ C0] kernel_clone+0x219/0x930 [ 89.716745][ C0] kernel_thread+0xc8/0x120 [ 89.716752][ C0] rest_init+0x21/0x330 [ 89.716759][ C0] start_kernel+0x486/0x530 [ 89.716768][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 89.716776][ C0] [ 89.716776][ C0] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 89.716786][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 89.716795][ C0] try_to_wake_up+0x5c/0x1050 [ 89.716802][ C0] __wake_up_common+0x2a4/0x4e0 [ 89.716811][ C0] __wake_up+0x108/0x180 [ 89.716818][ C0] tty_port_default_wakeup+0xa5/0xf0 [ 89.716827][ C0] serial8250_tx_chars+0x629/0x830 [ 89.716836][ C0] serial8250_handle_irq+0x519/0x610 [ 89.716843][ C0] serial8250_default_handle_irq+0xb4/0x1a0 [ 89.716852][ C0] serial8250_interrupt+0x9b/0x1c0 [ 89.716859][ C0] __handle_irq_event_percpu+0x291/0x9b0 [ 89.716868][ C0] handle_irq_event+0xa5/0x220 [ 89.716875][ C0] handle_edge_irq+0x243/0xb20 [ 89.716883][ C0] __common_interrupt+0xd7/0x1e0 [ 89.716891][ C0] common_interrupt+0xb0/0xd0 [ 89.716898][ C0] asm_common_interrupt+0x22/0x40 [ 89.716904][ C0] __rcu_read_lock+0x1/0x50 [ 89.716912][ C0] __virt_addr_valid+0x17a/0x470 [ 89.716919][ C0] __check_object_size+0xa8/0x410 [ 89.716928][ C0] simple_copy_to_iter+0x3e/0x60 [ 89.716936][ C0] __skb_datagram_iter+0xde/0x740 [ 89.716943][ C0] skb_copy_datagram_iter+0xad/0x1f0 [ 89.716950][ C0] __unix_dgram_recvmsg+0x671/0xd50 [ 89.716959][ C0] sock_read_iter+0x2a2/0x340 [ 89.716967][ C0] vfs_read+0x725/0xcf0 [ 89.716974][ C0] ksys_read+0x14d/0x250 [ 89.716980][ C0] do_syscall_64+0x4c/0xa0 [ 89.716987][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.716994][ C0] [ 89.716994][ C0] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 89.717004][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 89.717013][ C0] __wake_up+0xed/0x180 [ 89.717025][ C0] tty_port_default_wakeup+0xa5/0xf0 [ 89.717033][ C0] serial8250_tx_chars+0x629/0x830 [ 89.717040][ C0] serial8250_handle_irq+0x519/0x610 [ 89.717048][ C0] serial8250_default_handle_irq+0xb4/0x1a0 [ 89.717056][ C0] serial8250_interrupt+0x9b/0x1c0 [ 89.717063][ C0] __handle_irq_event_percpu+0x291/0x9b0 [ 89.717071][ C0] handle_irq_event+0xa5/0x220 [ 89.717078][ C0] handle_edge_irq+0x243/0xb20 [ 89.717086][ C0] __common_interrupt+0xd7/0x1e0 [ 89.717093][ C0] common_interrupt+0xb0/0xd0 [ 89.717099][ C0] asm_common_interrupt+0x22/0x40 [ 89.717106][ C0] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 89.717115][ C0] uart_write+0x62f/0x880 [ 89.717121][ C0] n_tty_write+0xd21/0x1210 [ 89.717128][ C0] file_tty_write+0x557/0x910 [ 89.717137][ C0] vfs_write+0x712/0xd00 [ 89.717143][ C0] ksys_write+0x14d/0x250 [ 89.717149][ C0] do_syscall_64+0x4c/0xa0 [ 89.717156][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.717163][ C0] [ 89.717163][ C0] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 89.717173][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 89.717181][ C0] serial8250_console_write+0x170/0xf80 [ 89.717189][ C0] console_unlock+0xc86/0x1200 [ 89.717199][ C0] vprintk_emit+0xc0/0x150 [ 89.717206][ C0] _printk+0xcc/0x110 [ 89.717214][ C0] register_console+0x682/0x960 [ 89.717221][ C0] univ8250_console_init+0x41/0x50 [ 89.717229][ C0] console_init+0x177/0x5d0 [ 89.717237][ C0] start_kernel+0x2f9/0x530 [ 89.717245][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 89.717253][ C0] [ 89.717253][ C0] -> #0 (console_owner){..-.}-{0:0}: [ 89.717263][ C0] __lock_acquire+0x2c33/0x7c60 [ 89.717271][ C0] lock_acquire+0x197/0x3f0 [ 89.717279][ C0] console_lock_spinning_enable+0x51/0x60 [ 89.717286][ C0] console_unlock+0x9f8/0x1200 [ 89.717294][ C0] vprintk_emit+0xc0/0x150 [ 89.717302][ C0] _printk+0xcc/0x110 [ 89.717309][ C0] report_bug+0x1e5/0x2e0 [ 89.717317][ C0] handle_bug+0x3a/0x70 [ 89.717323][ C0] exc_invalid_op+0x16/0x40 [ 89.717330][ C0] asm_exc_invalid_op+0x16/0x20 [ 89.717336][ C0] copy_from_user_nofault+0x160/0x1c0 [ 89.717344][ C0] bpf_probe_read_user+0x26/0x70 [ 89.717352][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0x4d8 [ 89.717360][ C0] bpf_trace_run2+0x15b/0x2d0 [ 89.717368][ C0] enqueue_hrtimer+0x314/0x370 [ 89.717376][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 89.717384][ C0] hrtimer_run_softirq+0x176/0x240 [ 89.717392][ C0] handle_softirqs+0x328/0x820 [ 89.717398][ C0] __irq_exit_rcu+0x12f/0x220 [ 89.717405][ C0] irq_exit_rcu+0x5/0x20 [ 89.717411][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 89.717419][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 89.717426][ C0] kasan_check_range+0x1ab/0x290 [ 89.717435][ C0] lock_release+0xa9/0x870 [ 89.717442][ C0] _raw_spin_unlock+0x12/0x40 [ 89.717450][ C0] pick_file+0x18c/0x220 [ 89.717457][ C0] __close_range+0x1cd/0x4d0 [ 89.717463][ C0] __x64_sys_close_range+0x76/0x80 [ 89.717472][ C0] do_syscall_64+0x4c/0xa0 [ 89.717478][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.717486][ C0] [ 89.717486][ C0] other info that might help us debug this: [ 89.717486][ C0] [ 89.717488][ C0] Chain exists of: [ 89.717488][ C0] console_owner --> &rt_b->rt_runtime_lock --> hrtimer_bases.lock [ 89.717488][ C0] [ 89.717500][ C0] Possible unsafe locking scenario: [ 89.717500][ C0] [ 89.717502][ C0] CPU0 CPU1 [ 89.717504][ C0] ---- ---- [ 89.717505][ C0] lock(hrtimer_bases.lock); [ 89.717510][ C0] lock(&rt_b->rt_runtime_lock); [ 89.717515][ C0] lock(hrtimer_bases.lock); [ 89.717520][ C0] lock(console_owner); [ 89.717524][ C0] [ 89.717524][ C0] *** DEADLOCK *** [ 89.717524][ C0] [ 89.717526][ C0] 4 locks held by syz.0.866/5216: [ 89.717531][ C0] #0: ffff88802b59d758 (&newf->file_lock){+.+.}-{2:2}, at: pick_file+0x2e/0x220 [ 89.717549][ C0] #1: ffff8880b902a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x5ff/0xc40 [ 89.717568][ C0] #2: ffffffff8c11c460 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 89.717586][ C0] #3: ffffffff8c110fa0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa7/0x150 [ 89.717605][ C0] [ 89.717605][ C0] stack backtrace: [ 89.717608][ C0] CPU: 0 PID: 5216 Comm: syz.0.866 Not tainted syzkaller #0 [ 89.717616][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.717627][ C0] Call Trace: [ 89.717630][ C0] [ 89.717634][ C0] dump_stack_lvl+0x168/0x230 [ 89.717644][ C0] ? load_image+0x3b0/0x3b0 [ 89.717653][ C0] ? show_regs_print_info+0x20/0x20 [ 89.717663][ C0] ? print_circular_bug+0x12b/0x1a0 [ 89.717671][ C0] check_noncircular+0x274/0x310 [ 89.717680][ C0] ? add_chain_block+0x940/0x940 [ 89.717687][ C0] ? lockdep_lock+0xdc/0x1e0 [ 89.717697][ C0] ? mark_lock+0x94/0x320 [ 89.717705][ C0] __lock_acquire+0x2c33/0x7c60 [ 89.717719][ C0] ? verify_lock_unused+0x140/0x140 [ 89.717730][ C0] ? sprintf+0xd6/0x120 [ 89.717741][ C0] lock_acquire+0x197/0x3f0 [ 89.717749][ C0] ? console_lock_spinning_enable+0x2c/0x60 [ 89.717757][ C0] ? prb_read_valid+0x60/0x60 [ 89.717765][ C0] ? read_lock_is_recursive+0x10/0x10 [ 89.717774][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 89.717782][ C0] ? __rwlock_init+0x140/0x140 [ 89.717790][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 89.717798][ C0] console_lock_spinning_enable+0x51/0x60 [ 89.717806][ C0] ? console_lock_spinning_enable+0x2c/0x60 [ 89.717813][ C0] console_unlock+0x9f8/0x1200 [ 89.717823][ C0] ? console_trylock_spinning+0x350/0x350 [ 89.717833][ C0] ? __down_trylock_console_sem+0x184/0x1e0 [ 89.717841][ C0] ? vprintk_emit+0xa7/0x150 [ 89.717849][ C0] ? printk_parse_prefix+0x330/0x330 [ 89.717858][ C0] ? vprintk_emit+0xa7/0x150 [ 89.717866][ C0] ? console_trylock+0x70/0x70 [ 89.717873][ C0] ? verify_lock_unused+0x140/0x140 [ 89.717882][ C0] ? mark_lock+0x94/0x320 [ 89.717892][ C0] ? vprintk_emit+0x150/0x150 [ 89.717904][ C0] vprintk_emit+0xc0/0x150 [ 89.717913][ C0] _printk+0xcc/0x110 [ 89.717921][ C0] ? verify_lock_unused+0x140/0x140 [ 89.717930][ C0] ? load_image+0x3b0/0x3b0 [ 89.717939][ C0] ? verify_lock_unused+0x140/0x140 [ 89.717948][ C0] ? find_bug+0xa1/0x350 [ 89.717955][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 89.717964][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 89.717972][ C0] report_bug+0x1e5/0x2e0 [ 89.717982][ C0] handle_bug+0x3a/0x70 [ 89.717989][ C0] exc_invalid_op+0x16/0x40 [ 89.717996][ C0] asm_exc_invalid_op+0x16/0x20 [ 89.718006][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 89.718020][ C0] Code: 24 45 31 f6 31 ff 89 de e8 ed f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 70 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 89.718028][ C0] RSP: 0018:ffffc90000007ae0 EFLAGS: 00010046 [ 89.718035][ C0] RAX: ffffffff819ed740 RBX: 0000000000000008 RCX: ffff888029e03b80 [ 89.718041][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.718046][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff7619 [ 89.718052][ C0] R10: fffffbfff1ff7619 R11: 1ffffffff1ff7618 R12: ffff888029e05308 [ 89.718057][ C0] R13: dffffc0000000000 R14: ffffc90000007b48 R15: 0000000000000000 [ 89.718065][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 89.718075][ C0] bpf_probe_read_user+0x26/0x70 [ 89.718085][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0x4d8 [ 89.718092][ C0] bpf_trace_run2+0x15b/0x2d0 [ 89.718101][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 89.718109][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 89.718118][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 89.718127][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 89.718137][ C0] enqueue_hrtimer+0x314/0x370 [ 89.718146][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 89.718155][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 89.718163][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 89.718171][ C0] ? hw_scan_work+0xeb0/0xeb0 [ 89.718182][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 89.718192][ C0] hrtimer_run_softirq+0x176/0x240 [ 89.718202][ C0] handle_softirqs+0x328/0x820 [ 89.718210][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 89.718219][ C0] ? do_softirq+0x200/0x200 [ 89.718227][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 89.718235][ C0] __irq_exit_rcu+0x12f/0x220 [ 89.718243][ C0] ? irq_exit_rcu+0x20/0x20 [ 89.718252][ C0] irq_exit_rcu+0x5/0x20 [ 89.718259][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 89.718267][ C0] [ 89.718269][ C0] [ 89.718272][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 89.718280][ C0] RIP: 0010:kasan_check_range+0x1ab/0x290 [ 89.718290][ C0] Code: 4d 89 d6 4d 8d 56 07 4d 85 f6 4d 0f 49 d6 49 83 e2 f8 4d 29 d6 74 12 41 80 39 00 0f 85 a0 00 00 00 49 ff c1 49 ff ce 75 ee 5b <41> 5e 41 5f c3 84 db 75 61 f7 c3 00 ff 00 00 75 5e f7 c3 00 00 ff [ 89.718296][ C0] RSP: 0018:ffffc90002edfc88 EFLAGS: 00000256 [ 89.718303][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff815c7a39 [ 89.718308][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8d698de8 [ 89.718313][ C0] RBP: ffffc90002edfdc0 R08: dffffc0000000000 R09: fffffbfff1ad31be [ 89.718319][ C0] R10: fffffbfff1ad31be R11: 1ffffffff1ad31bd R12: 0000000000000006 [ 89.718324][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: dffffc0000000001 [ 89.718331][ C0] ? lock_release+0xa9/0x870 [ 89.718342][ C0] lock_release+0xa9/0x870 [ 89.718351][ C0] ? pick_file+0x18c/0x220 [ 89.718358][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 89.718367][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 89.718375][ C0] ? __rwlock_init+0x140/0x140 [ 89.718384][ C0] _raw_spin_unlock+0x12/0x40 [ 89.718392][ C0] pick_file+0x18c/0x220 [ 89.718400][ C0] __close_range+0x1cd/0x4d0 [ 89.718408][ C0] ? pick_file+0x220/0x220 [ 89.718415][ C0] ? vtime_user_exit+0x2dc/0x400 [ 89.718424][ C0] __x64_sys_close_range+0x76/0x80 [ 89.718434][ C0] do_syscall_64+0x4c/0xa0 [ 89.718441][ C0] ? clear_bhb_loop+0x30/0x80 [ 89.718448][ C0] ? clear_bhb_loop+0x30/0x80 [ 89.718456][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.718464][ C0] RIP: 0033:0x7fdecd2d6be9 [ 89.718472][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.718478][ C0] RSP: 002b:00007ffe8be5dcc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 89.718486][ C0] RAX: ffffffffffffffda RBX: 0000000000015e45 RCX: 00007fdecd2d6be9 [ 89.718492][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 89.718497][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 000000038be5dfbf [ 89.718502][ C0] R10: 0000001b2f420000 R11: 0000000000000246 R12: 00007fdecd50dfac [ 89.718507][ C0] R13: 00007fdecd50dfa0 R14: ffffffffffffffff R15: 0000000000000003 [ 89.718515][ C0] [ 89.985144][ T4261] Bluetooth: hci0: command 0x0419 tx timeout [ 89.989168][ C0] WARNING: CPU: 0 PID: 5216 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 91.296719][ C0] Modules linked in: [ 91.300614][ C0] CPU: 0 PID: 5216 Comm: syz.0.866 Not tainted syzkaller #0 [ 91.307876][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.317910][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 91.324053][ C0] Code: 24 45 31 f6 31 ff 89 de e8 ed f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 70 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 91.343641][ C0] RSP: 0018:ffffc90000007ae0 EFLAGS: 00010046 [ 91.349704][ C0] RAX: ffffffff819ed740 RBX: 0000000000000008 RCX: ffff888029e03b80 [ 91.357676][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.365639][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff7619 [ 91.373597][ C0] R10: fffffbfff1ff7619 R11: 1ffffffff1ff7618 R12: ffff888029e05308 [ 91.381560][ C0] R13: dffffc0000000000 R14: ffffc90000007b48 R15: 0000000000000000 [ 91.389516][ C0] FS: 000055555c18e500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 91.398427][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.404996][ C0] CR2: 00007fdecd1b0600 CR3: 0000000073966000 CR4: 00000000003506f0 [ 91.412958][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.420913][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.428881][ C0] Call Trace: [ 91.432146][ C0] [ 91.434979][ C0] bpf_probe_read_user+0x26/0x70 [ 91.439909][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0x4d8 [ 91.445437][ C0] bpf_trace_run2+0x15b/0x2d0 [ 91.450117][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 91.455384][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 91.460222][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 91.465234][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 91.470599][ C0] enqueue_hrtimer+0x314/0x370 [ 91.475346][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 91.480527][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 91.486485][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 91.492446][ C0] ? hw_scan_work+0xeb0/0xeb0 [ 91.497109][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 91.502205][ C0] hrtimer_run_softirq+0x176/0x240 [ 91.507307][ C0] handle_softirqs+0x328/0x820 [ 91.512057][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 91.516891][ C0] ? do_softirq+0x200/0x200 [ 91.521378][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 91.526559][ C0] __irq_exit_rcu+0x12f/0x220 [ 91.531220][ C0] ? irq_exit_rcu+0x20/0x20 [ 91.535706][ C0] irq_exit_rcu+0x5/0x20 [ 91.539925][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 91.545541][ C0] [ 91.548460][ C0] [ 91.551371][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 91.557334][ C0] RIP: 0010:kasan_check_range+0x1ab/0x290 [ 91.563036][ C0] Code: 4d 89 d6 4d 8d 56 07 4d 85 f6 4d 0f 49 d6 49 83 e2 f8 4d 29 d6 74 12 41 80 39 00 0f 85 a0 00 00 00 49 ff c1 49 ff ce 75 ee 5b <41> 5e 41 5f c3 84 db 75 61 f7 c3 00 ff 00 00 75 5e f7 c3 00 00 ff [ 91.582627][ C0] RSP: 0018:ffffc90002edfc88 EFLAGS: 00000256 [ 91.588684][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff815c7a39 [ 91.596635][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8d698de8 [ 91.604864][ C0] RBP: ffffc90002edfdc0 R08: dffffc0000000000 R09: fffffbfff1ad31be [ 91.612822][ C0] R10: fffffbfff1ad31be R11: 1ffffffff1ad31bd R12: 0000000000000006 [ 91.620777][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: dffffc0000000001 [ 91.628738][ C0] ? lock_release+0xa9/0x870 [ 91.633320][ C0] lock_release+0xa9/0x870 [ 91.637724][ C0] ? pick_file+0x18c/0x220 [ 91.642121][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 91.647126][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 91.652133][ C0] ? __rwlock_init+0x140/0x140 [ 91.656882][ C0] _raw_spin_unlock+0x12/0x40 [ 91.661546][ C0] pick_file+0x18c/0x220 [ 91.665773][ C0] __close_range+0x1cd/0x4d0 [ 91.670362][ C0] ? pick_file+0x220/0x220 [ 91.674757][ C0] ? vtime_user_exit+0x2dc/0x400 [ 91.679934][ C0] __x64_sys_close_range+0x76/0x80 [ 91.685043][ C0] do_syscall_64+0x4c/0xa0 [ 91.689442][ C0] ? clear_bhb_loop+0x30/0x80 [ 91.694102][ C0] ? clear_bhb_loop+0x30/0x80 [ 91.698762][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.704640][ C0] RIP: 0033:0x7fdecd2d6be9 [ 91.709037][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.728629][ C0] RSP: 002b:00007ffe8be5dcc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 91.737033][ C0] RAX: ffffffffffffffda RBX: 0000000000015e45 RCX: 00007fdecd2d6be9 [ 91.744991][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 91.752949][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 000000038be5dfbf [ 91.760901][ C0] R10: 0000001b2f420000 R11: 0000000000000246 R12: 00007fdecd50dfac [ 91.768855][ C0] R13: 00007fdecd50dfa0 R14: ffffffffffffffff R15: 0000000000000003 [ 91.776820][ C0] [ 91.779927][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 91.787185][ C0] CPU: 0 PID: 5216 Comm: syz.0.866 Not tainted syzkaller #0 [ 91.794455][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.804492][ C0] Call Trace: [ 91.807759][ C0] [ 91.810586][ C0] dump_stack_lvl+0x168/0x230 [ 91.815262][ C0] ? show_regs_print_info+0x20/0x20 [ 91.820443][ C0] ? load_image+0x3b0/0x3b0 [ 91.824932][ C0] panic+0x2c9/