last executing test programs: 700.102774ms ago: executing program 4 (id=5): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0db2b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec08647566b1bdd75d6a9a1e600aaf0f42ce94b4725d4c2da80150dc34e5975d6904f061ed9a7608959f2d24ee6ec4f2395d16e02f53c746f74b12013f738d76456c3407188eff97f31ca36e5d79e1f1c7c3b688ee21d37ba5ebf4afc2a61f16"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 586.112318ms ago: executing program 4 (id=6): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8}, {}, {0x14, 0x0, 0x0, 0xffffff85}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 468.891502ms ago: executing program 4 (id=7): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r5}, 0x10) close(r3) sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) 441.302403ms ago: executing program 0 (id=1): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 411.727795ms ago: executing program 0 (id=8): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 363.727256ms ago: executing program 2 (id=3): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xe8, 0x0, &(0x7f0000000280)="dd"}, 0x48) 298.151059ms ago: executing program 0 (id=9): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='9p_client_req\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) setsockopt$sock_attach_bpf(r0, 0x1, 0x6, &(0x7f0000000040)=r3, 0x3b) 295.336349ms ago: executing program 4 (id=10): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r0, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 215.180072ms ago: executing program 2 (id=11): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 214.998812ms ago: executing program 0 (id=12): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x5, 0x7fe2, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r3, r2}, 0xc) 128.886255ms ago: executing program 4 (id=13): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 128.732255ms ago: executing program 3 (id=4): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unlink(0x0) 110.958876ms ago: executing program 0 (id=14): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f00000008c0)='timer_start\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'nr0\x00', 0x2}) 0s ago: executing program 3 (id=15): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts. [ 40.073625][ T3494] cgroup: Unknown subsys name 'net' [ 40.178066][ T3494] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 41.383120][ T3494] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 41.963304][ T3503] chnl_net:caif_netlink_parms(): no params data found [ 41.990845][ T3511] chnl_net:caif_netlink_parms(): no params data found [ 42.078840][ T3505] chnl_net:caif_netlink_parms(): no params data found [ 42.121012][ T3509] chnl_net:caif_netlink_parms(): no params data found [ 42.143115][ T3504] chnl_net:caif_netlink_parms(): no params data found [ 42.174084][ T3511] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.181290][ T3511] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.189995][ T3511] device bridge_slave_0 entered promiscuous mode [ 42.200925][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.208250][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.218673][ T3503] device bridge_slave_0 entered promiscuous mode [ 42.246287][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.253499][ T3511] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.261179][ T3511] device bridge_slave_1 entered promiscuous mode [ 42.269090][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.276412][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.284549][ T3503] device bridge_slave_1 entered promiscuous mode [ 42.368100][ T3511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.379193][ T3503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.404201][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.411542][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.419665][ T3504] device bridge_slave_0 entered promiscuous mode [ 42.428617][ T3511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.447174][ T3503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.465057][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.472136][ T3505] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.480027][ T3505] device bridge_slave_0 entered promiscuous mode [ 42.487951][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.495194][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.503016][ T3504] device bridge_slave_1 entered promiscuous mode [ 42.523398][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.530475][ T3509] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.538309][ T3509] device bridge_slave_0 entered promiscuous mode [ 42.546076][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.554069][ T3505] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.561804][ T3505] device bridge_slave_1 entered promiscuous mode [ 42.579866][ T3511] team0: Port device team_slave_0 added [ 42.593635][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.600745][ T3509] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.608856][ T3509] device bridge_slave_1 entered promiscuous mode [ 42.631830][ T3511] team0: Port device team_slave_1 added [ 42.640147][ T3504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.652125][ T3503] team0: Port device team_slave_0 added [ 42.681023][ T3504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.691785][ T3503] team0: Port device team_slave_1 added [ 42.707078][ T3505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.718498][ T3505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.746924][ T3509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.763603][ T3511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.770637][ T3511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.797267][ T3511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.824969][ T3509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.849638][ T3511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.856812][ T3511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.883267][ T3511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.896392][ T3504] team0: Port device team_slave_0 added [ 42.906926][ T3503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.913984][ T3503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.940111][ T3503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.959596][ T3505] team0: Port device team_slave_0 added [ 42.976851][ T3504] team0: Port device team_slave_1 added [ 42.996441][ T3503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.003909][ T3503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.030985][ T3503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.044230][ T3509] team0: Port device team_slave_0 added [ 43.054920][ T3505] team0: Port device team_slave_1 added [ 43.069006][ T3511] device hsr_slave_0 entered promiscuous mode [ 43.075907][ T3511] device hsr_slave_1 entered promiscuous mode [ 43.084211][ T3509] team0: Port device team_slave_1 added [ 43.137743][ T3505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.144941][ T3505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.171191][ T3505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.190598][ T3504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.197734][ T3504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.224708][ T3504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.243746][ T3503] device hsr_slave_0 entered promiscuous mode [ 43.250546][ T3503] device hsr_slave_1 entered promiscuous mode [ 43.257195][ T3503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.265422][ T3503] Cannot create hsr debugfs directory [ 43.271476][ T3505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.278508][ T3505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.304586][ T3505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.316232][ T3509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.323534][ T3509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.349477][ T3509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.361108][ T3504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.368455][ T3504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.394643][ T3504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.425107][ T3509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.432067][ T3509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.458437][ T3509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.502252][ T3504] device hsr_slave_0 entered promiscuous mode [ 43.509737][ T3504] device hsr_slave_1 entered promiscuous mode [ 43.516556][ T3504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.524340][ T3504] Cannot create hsr debugfs directory [ 43.610828][ T3505] device hsr_slave_0 entered promiscuous mode [ 43.617852][ T3505] device hsr_slave_1 entered promiscuous mode [ 43.624410][ T3505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.632127][ T3505] Cannot create hsr debugfs directory [ 43.651068][ T3509] device hsr_slave_0 entered promiscuous mode [ 43.653788][ T1066] Bluetooth: hci0: command 0x0409 tx timeout [ 43.657409][ T3513] Bluetooth: hci2: command 0x0409 tx timeout [ 43.669437][ T3513] Bluetooth: hci3: command 0x0409 tx timeout [ 43.676061][ T3513] Bluetooth: hci1: command 0x0409 tx timeout [ 43.682398][ T3509] device hsr_slave_1 entered promiscuous mode [ 43.689304][ T3509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.696934][ T3509] Cannot create hsr debugfs directory [ 43.733098][ T1066] Bluetooth: hci4: command 0x0409 tx timeout [ 43.932237][ T3504] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 43.946242][ T3504] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 43.955847][ T3504] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 43.966377][ T3504] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 44.015393][ T3503] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.025081][ T3503] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.041954][ T3503] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.051230][ T3503] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.119502][ T3505] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 44.129092][ T3505] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 44.154143][ T3505] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 44.178744][ T3505] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 44.190314][ T3509] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 44.223956][ T3509] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 44.249594][ T3509] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 44.265818][ T3509] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 44.292630][ T3504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.330170][ T3511] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 44.349324][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.360149][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.370306][ T3511] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 44.395225][ T3504] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.413253][ T3511] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 44.428039][ T3505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.436285][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.446047][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.455942][ T3551] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.463457][ T3551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.471819][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.480788][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.489183][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.496249][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.504356][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.530299][ T3511] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 44.543845][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.551748][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.568781][ T3503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.586172][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.595279][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.621528][ T3503] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.631762][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.642504][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.651707][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.660811][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.669258][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.677872][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.685780][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.693568][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.701866][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.712314][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.735929][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.744299][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.752158][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.761564][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.770132][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.777390][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.785407][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.794145][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.802592][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.809687][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.817979][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.837745][ T3505] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.849463][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.900090][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.909662][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.919260][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.928680][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.935783][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.944066][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.952599][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.961222][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.968518][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.976722][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.985310][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.994725][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.015177][ T3503] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.026226][ T3503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.040353][ T3509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.051223][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.060990][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.069576][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.078156][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.086765][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.095498][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.104164][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.112611][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.121212][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.130159][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.140809][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.148998][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.156713][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.196308][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.209445][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.218207][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.227487][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.236576][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.245724][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.254267][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.261963][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.269715][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.278125][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.290493][ T3509] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.305090][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.316217][ T3504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.350754][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.361790][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.370658][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.377783][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.385694][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.395326][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.403977][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.411224][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.419975][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.453705][ T3511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.461264][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.470230][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.489407][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.501997][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.512363][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.522582][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.531452][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.540368][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.549485][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.561604][ T3503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.589388][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.598420][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.631809][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.640733][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.654480][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.664222][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.677192][ T3511] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.703101][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.711949][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.721348][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.728444][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.736801][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.744244][ T3553] Bluetooth: hci1: command 0x041b tx timeout [ 45.746508][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.751344][ T3553] Bluetooth: hci3: command 0x041b tx timeout [ 45.765729][ T3553] Bluetooth: hci2: command 0x041b tx timeout [ 45.766304][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.781421][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.802365][ T3505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.809302][ T3560] Bluetooth: hci0: command 0x041b tx timeout [ 45.830144][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.832915][ T3553] Bluetooth: hci4: command 0x041b tx timeout [ 45.838417][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.857038][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.865558][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.872602][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.883442][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.890872][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.900954][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.909837][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.928102][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.946698][ T3503] device veth0_vlan entered promiscuous mode [ 45.973602][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.982641][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.991536][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.001015][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.010229][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.019162][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.027944][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.036729][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.045672][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.054753][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.063752][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.071664][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.079829][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.087737][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.096193][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.106382][ T3504] device veth0_vlan entered promiscuous mode [ 46.126077][ T3503] device veth1_vlan entered promiscuous mode [ 46.146717][ T3511] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.158999][ T3511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.176775][ T3504] device veth1_vlan entered promiscuous mode [ 46.189549][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.199205][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.207762][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.216902][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.225940][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.234822][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.243410][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.251547][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.261241][ T3505] device veth0_vlan entered promiscuous mode [ 46.281268][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.289224][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.297771][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.306326][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.314430][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.337045][ T3505] device veth1_vlan entered promiscuous mode [ 46.363175][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.372547][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.391361][ T3504] device veth0_macvtap entered promiscuous mode [ 46.407230][ T3509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.421464][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.431100][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.442539][ T3504] device veth1_macvtap entered promiscuous mode [ 46.453690][ T3503] device veth0_macvtap entered promiscuous mode [ 46.465032][ T3503] device veth1_macvtap entered promiscuous mode [ 46.485101][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.493703][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.501620][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.509965][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.518336][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.526537][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.534332][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.543522][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.566976][ T3505] device veth0_macvtap entered promiscuous mode [ 46.581294][ T3504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.589343][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.598181][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.607334][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.616578][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.627576][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.647076][ T3511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.655129][ T3505] device veth1_macvtap entered promiscuous mode [ 46.673703][ T3503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.685055][ T3503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.697143][ T3503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.710992][ T3504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.722224][ T3504] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.731586][ T3504] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.740763][ T3504] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.749810][ T3504] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.765152][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.776603][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.785362][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.794542][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.803478][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.832081][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.843136][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.854558][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.865414][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.876847][ T3505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.891863][ T3509] device veth0_vlan entered promiscuous mode [ 46.901302][ T3503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.913399][ T3503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.924899][ T3503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.932282][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.941391][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.950051][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.959387][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.968257][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.976656][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.985260][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.994000][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.003972][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.011772][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.026933][ T3509] device veth1_vlan entered promiscuous mode [ 47.046905][ T3503] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.057765][ T3503] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.067310][ T3503] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.076969][ T3503] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.088656][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.099849][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.110570][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.121127][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.132619][ T3505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.161091][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.169495][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.178869][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.196972][ T3505] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.207226][ T3505] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.216465][ T3505] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.225869][ T3505] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.238101][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.246920][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.255428][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.265905][ T3511] device veth0_vlan entered promiscuous mode [ 47.304702][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.312454][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.323490][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.331918][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.379948][ T3509] device veth0_macvtap entered promiscuous mode [ 47.394665][ T3511] device veth1_vlan entered promiscuous mode [ 47.403624][ T3509] device veth1_macvtap entered promiscuous mode [ 47.457653][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.474400][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.474941][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.494523][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.504416][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.515039][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.525948][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.536506][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.547439][ T3509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.583261][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.591482][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.601093][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.609144][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.617902][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.628727][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.639771][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.650885][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.662283][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.672133][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.682731][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.694019][ T3509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.713204][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.717258][ T3511] device veth0_macvtap entered promiscuous mode [ 47.722092][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.738372][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.749354][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.759259][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.769054][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.778910][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.790840][ T3509] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.801883][ T3509] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.810715][ T3509] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.819851][ T3553] Bluetooth: hci2: command 0x040f tx timeout [ 47.824101][ T3509] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.826138][ T3553] Bluetooth: hci3: command 0x040f tx timeout [ 47.840855][ T3553] Bluetooth: hci1: command 0x040f tx timeout [ 47.850466][ T3511] device veth1_macvtap entered promiscuous mode [ 47.854822][ T417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.874509][ T417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.886764][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.895402][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.904749][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.913573][ T3554] Bluetooth: hci4: command 0x040f tx timeout [ 47.919708][ T3554] Bluetooth: hci0: command 0x040f tx timeout [ 47.970152][ T2598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.980596][ T1233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.991845][ T1233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.002486][ T2598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.017357][ T3511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.042692][ T3511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.060544][ T3511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.072874][ T3511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.084361][ T3511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.095362][ T3511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.106010][ T3511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.116596][ T3511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.128268][ T3511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.152338][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.161417][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.169597][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.178400][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.190097][ T3511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.201707][ T3511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.212391][ T3511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.225722][ T3511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.235865][ T3511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.247075][ T3511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.257463][ T3511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.278569][ T3511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.290468][ T3511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.316348][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.328936][ T1233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.336226][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.338013][ T1233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.364455][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.407308][ T3511] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.420128][ T2598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.435621][ T2598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.443103][ T3511] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.451810][ T3511] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.474244][ T3587] syz.4.7[3587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.474385][ T3587] syz.4.7[3587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.475054][ T3511] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.528937][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.643245][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.685273][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.736348][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.777232][ T2598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.814542][ T2598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.886182][ T3601] device syzkaller0 entered promiscuous mode [ 48.921373][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.950166][ T2598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.952880][ C1] ------------[ cut here ]------------ [ 48.953626][ C1] [ 48.953632][ C1] ====================================================== [ 48.953636][ C1] WARNING: possible circular locking dependency detected [ 48.953641][ C1] 5.15.161-syzkaller #0 Not tainted [ 48.953649][ C1] ------------------------------------------------------ [ 48.953654][ C1] syz-executor/3509 is trying to acquire lock: [ 48.953662][ C1] ffffffff8c914660 (console_owner){..-.}-{0:0}, at: console_trylock_spinning+0x185/0x3f0 [ 48.953720][ C1] [ 48.953720][ C1] but task is already holding lock: [ 48.953724][ C1] ffff8880b9b28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 48.953757][ C1] [ 48.953757][ C1] which lock already depends on the new lock. [ 48.953757][ C1] [ 48.953761][ C1] [ 48.953761][ C1] the existing dependency chain (in reverse order) is: [ 48.953766][ C1] [ 48.953766][ C1] -> #3 (&base->lock){-.-.}-{2:2}: [ 48.953784][ C1] lock_acquire+0x1db/0x4f0 [ 48.953796][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 48.953813][ C1] lock_timer_base+0x120/0x260 [ 48.953826][ C1] __mod_timer+0x1d6/0xeb0 [ 48.953840][ C1] queue_delayed_work_on+0x156/0x250 [ 48.953854][ C1] kvfree_call_rcu+0x50e/0x8a0 [ 48.953868][ C1] rtnl_register_internal+0x443/0x530 [ 48.953884][ C1] rtnl_register+0x32/0x70 [ 48.953897][ C1] ip_rt_init+0x2e6/0x390 [ 48.953912][ C1] ip_init+0xa/0x20 [ 48.953925][ C1] inet_init+0x27c/0x390 [ 48.953935][ C1] do_one_initcall+0x22b/0x7a0 [ 48.953951][ C1] do_initcall_level+0x157/0x210 [ 48.953967][ C1] do_initcalls+0x49/0x90 [ 48.953980][ C1] kernel_init_freeable+0x425/0x5c0 [ 48.953994][ C1] kernel_init+0x19/0x290 [ 48.954008][ C1] ret_from_fork+0x1f/0x30 [ 48.954021][ C1] [ 48.954021][ C1] -> #2 (krc.lock){....}-{2:2}: [ 48.954040][ C1] lock_acquire+0x1db/0x4f0 [ 48.954051][ C1] _raw_spin_lock+0x2a/0x40 [ 48.954066][ C1] kvfree_call_rcu+0x1b5/0x8a0 [ 48.954078][ C1] trie_update_elem+0x808/0xc00 [ 48.954093][ C1] bpf_map_update_value+0x5d7/0x6c0 [ 48.954107][ C1] generic_map_update_batch+0x54d/0x8b0 [ 48.954122][ C1] bpf_map_do_batch+0x4d0/0x620 [ 48.954134][ C1] __sys_bpf+0x55c/0x670 [ 48.954148][ C1] __x64_sys_bpf+0x78/0x90 [ 48.954161][ C1] do_syscall_64+0x3b/0xb0 [ 48.954174][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.954187][ C1] [ 48.954187][ C1] -> #1 (&trie->lock){....}-{2:2}: [ 48.954205][ C1] lock_acquire+0x1db/0x4f0 [ 48.954217][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 48.954232][ C1] trie_delete_elem+0x90/0x690 [ 48.954246][ C1] 0xffffffffa002a1ae [ 48.954255][ C1] bpf_trace_run2+0x19e/0x340 [ 48.954267][ C1] __traceiter_console+0x6c/0xc0 [ 48.954280][ C1] console_unlock+0x10a2/0x12b0 [ 48.954292][ C1] vprintk_emit+0xbf/0x150 [ 48.954304][ C1] _printk+0xd1/0x120 [ 48.954318][ C1] ieee80211_sta_create_ibss+0x2d1/0x610 [ 48.954335][ C1] ieee80211_ibss_work+0xdd0/0x1480 [ 48.954349][ C1] process_one_work+0x8a1/0x10c0 [ 48.954362][ C1] worker_thread+0xaca/0x1280 [ 48.954375][ C1] kthread+0x3f6/0x4f0 [ 48.954386][ C1] ret_from_fork+0x1f/0x30 [ 48.954399][ C1] [ 48.954399][ C1] -> #0 (console_owner){..-.}-{0:0}: [ 48.954417][ C1] validate_chain+0x1649/0x5930 [ 48.954430][ C1] __lock_acquire+0x1295/0x1ff0 [ 48.954441][ C1] lock_acquire+0x1db/0x4f0 [ 48.954453][ C1] console_trylock_spinning+0x1a5/0x3f0 [ 48.954466][ C1] vprintk_emit+0xa6/0x150 [ 48.954478][ C1] _printk+0xd1/0x120 [ 48.954491][ C1] report_bug+0x1e5/0x2e0 [ 48.954505][ C1] handle_bug+0x3d/0x70 [ 48.954517][ C1] exc_invalid_op+0x16/0x40 [ 48.954530][ C1] asm_exc_invalid_op+0x16/0x20 [ 48.954552][ C1] copy_from_user_nofault+0x15c/0x1c0 [ 48.954566][ C1] bpf_probe_read_user+0x26/0x70 [ 48.954578][ C1] bpf_prog_078a3568a35342ea+0x38/0x380 [ 48.954589][ C1] bpf_trace_run3+0x1d1/0x380 [ 48.954602][ C1] __traceiter_timer_start+0x79/0xd0 [ 48.954615][ C1] enqueue_timer+0x3ae/0x540 [ 48.954629][ C1] __mod_timer+0xa60/0xeb0 [ 48.954643][ C1] dsp_cmx_send+0x21bb/0x2240 [ 48.954656][ C1] call_timer_fn+0x16d/0x560 [ 48.954667][ C1] __run_timers+0x67c/0x890 [ 48.954679][ C1] run_timer_softirq+0x63/0xf0 [ 48.954692][ C1] handle_softirqs+0x3a7/0x930 [ 48.954704][ C1] __irq_exit_rcu+0x157/0x240 [ 48.954716][ C1] irq_exit_rcu+0x5/0x20 [ 48.954727][ C1] sysvec_apic_timer_interrupt+0x91/0xb0 [ 48.954741][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 48.954755][ C1] lock_acquire+0x252/0x4f0 [ 48.954766][ C1] fs_reclaim_acquire+0xa7/0x120 [ 48.954779][ C1] slab_pre_alloc_hook+0x22/0xc0 [ 48.954792][ C1] kmem_cache_alloc+0x3f/0x280 [ 48.954805][ C1] anon_vma_fork+0xed/0x580 [ 48.954819][ C1] copy_mm+0x9f2/0x1370 [ 48.954832][ C1] copy_process+0x1816/0x3ef0 [ 48.954844][ C1] kernel_clone+0x210/0x960 [ 48.954856][ C1] __x64_sys_clone+0x23f/0x290 [ 48.954869][ C1] do_syscall_64+0x3b/0xb0 [ 48.954881][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.954894][ C1] [ 48.954894][ C1] other info that might help us debug this: [ 48.954894][ C1] [ 48.954898][ C1] Chain exists of: [ 48.954898][ C1] console_owner --> krc.lock --> &base->lock [ 48.954898][ C1] [ 48.954919][ C1] Possible unsafe locking scenario: [ 48.954919][ C1] [ 48.954922][ C1] CPU0 CPU1 [ 48.954926][ C1] ---- ---- [ 48.954929][ C1] lock(&base->lock); [ 48.954937][ C1] lock(krc.lock); [ 48.954946][ C1] lock(&base->lock); [ 48.954956][ C1] lock(console_owner); [ 48.954964][ C1] [ 48.954964][ C1] *** DEADLOCK *** [ 48.954964][ C1] [ 48.954966][ C1] 9 locks held by syz-executor/3509: [ 48.954975][ C1] #0: ffffffff8c9aaf70 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x223/0x1370 [ 48.955009][ C1] #1: ffff88807a0cb228 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x242/0x1370 [ 48.955041][ C1] #2: ffff888022e4a428 (&mm->mmap_lock/1){+.+.}-{3:3}, at: copy_mm+0x35c/0x1370 [ 48.955077][ C1] #3: ffffffff8c9e0a40 (fs_reclaim){+.+.}-{0:0}, at: slab_pre_alloc_hook+0x22/0xc0 [ 48.955110][ C1] #4: ffffffff8c9f1c80 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: fs_reclaim_acquire+0x87/0x120 [ 48.955144][ C1] #5: ffffc90000dd0be0 ((&dsp_spl_tl)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x560 [ 48.955175][ C1] #6: ffffffff8d7a5318 (dsp_lock){..-.}-{2:2}, at: dsp_cmx_send+0x22/0x2240 [ 48.955208][ C1] #7: ffff8880b9b28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 48.955242][ C1] #8: ffffffff8c91fae0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 48.955275][ C1] [ 48.955275][ C1] stack backtrace: [ 48.955285][ C1] CPU: 1 PID: 3509 Comm: syz-executor Not tainted 5.15.161-syzkaller #0 [ 48.955300][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 48.955311][ C1] Call Trace: [ 48.955316][ C1] [ 48.955321][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 48.955337][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 48.955355][ C1] ? print_circular_bug+0x12b/0x1a0 [ 48.955371][ C1] check_noncircular+0x2f8/0x3b0 [ 48.955386][ C1] ? add_chain_block+0x850/0x850 [ 48.955400][ C1] ? lockdep_lock+0x11f/0x2a0 [ 48.955418][ C1] validate_chain+0x1649/0x5930 [ 48.955433][ C1] ? unwind_get_return_address+0x49/0x80 [ 48.955456][ C1] ? reacquire_held_locks+0x660/0x660 [ 48.955474][ C1] ? lockdep_lock+0x11f/0x2a0 [ 48.955487][ C1] ? lockdep_unlock+0x166/0x300 [ 48.955499][ C1] ? lockdep_lock+0x2a0/0x2a0 [ 48.955515][ C1] ? mark_lock+0x98/0x340 [ 48.955529][ C1] __lock_acquire+0x1295/0x1ff0 [ 48.955553][ C1] lock_acquire+0x1db/0x4f0 [ 48.955565][ C1] ? console_trylock_spinning+0x185/0x3f0 [ 48.955582][ C1] ? read_lock_is_recursive+0x10/0x10 [ 48.955595][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 48.955608][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 48.955625][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 48.955642][ C1] console_trylock_spinning+0x1a5/0x3f0 [ 48.955656][ C1] ? console_trylock_spinning+0x185/0x3f0 [ 48.955670][ C1] ? vprintk_emit+0x150/0x150 [ 48.955685][ C1] ? validate_chain+0x112/0x5930 [ 48.955698][ C1] ? reacquire_held_locks+0x660/0x660 [ 48.955715][ C1] vprintk_emit+0xa6/0x150 [ 48.955729][ C1] _printk+0xd1/0x120 [ 48.955745][ C1] ? report_bug+0x16e/0x2e0 [ 48.955760][ C1] ? panic+0x860/0x860 [ 48.955776][ C1] ? find_bug+0x9c/0x350 [ 48.955791][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 48.955805][ C1] report_bug+0x1e5/0x2e0 [ 48.955822][ C1] handle_bug+0x3d/0x70 [ 48.955836][ C1] exc_invalid_op+0x16/0x40 [ 48.955850][ C1] asm_exc_invalid_op+0x16/0x20 [ 48.955870][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 48.955885][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 3b ce d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 24 ce d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 48.955897][ C1] RSP: 0018:ffffc90000dd0748 EFLAGS: 00010046 [ 48.955909][ C1] RAX: ffffffff81aa8cac RBX: 0000000000000000 RCX: ffff8880153ed940 [ 48.955920][ C1] RDX: 0000000080000103 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.955929][ C1] RBP: dffffc0000000000 R08: ffffffff81aa8bbd R09: fffffbfff1f7f219 [ 48.955940][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000020000000 [ 48.955949][ C1] R13: 0000000000000008 R14: 0000000020000000 R15: ffffc90000dd07a8 [ 48.955961][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 48.955975][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 48.955991][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 48.956005][ C1] bpf_probe_read_user+0x26/0x70 [ 48.956020][ C1] bpf_prog_078a3568a35342ea+0x38/0x380 [ 48.956032][ C1] bpf_trace_run3+0x1d1/0x380 [ 48.956047][ C1] ? bpf_trace_run2+0x340/0x340 [ 48.956062][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 48.956079][ C1] ? _raw_spin_unlock+0x40/0x40 [ 48.956094][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 48.956110][ C1] ? _raw_spin_lock+0x40/0x40 [ 48.956125][ C1] ? __bpf_trace_timer_class+0x20/0x20 [ 48.956140][ C1] __traceiter_timer_start+0x79/0xd0 [ 48.956157][ C1] enqueue_timer+0x3ae/0x540 [ 48.956175][ C1] __mod_timer+0xa60/0xeb0 [ 48.956190][ C1] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 48.956206][ C1] ? mod_timer_pending+0x20/0x20 [ 48.956221][ C1] ? _raw_read_unlock_irqrestore+0xd9/0x130 [ 48.956235][ C1] ? _raw_read_unlock+0x40/0x40 [ 48.956250][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 48.956266][ C1] ? _raw_spin_lock+0x40/0x40 [ 48.956282][ C1] ? ktime_get+0x242/0x270 [ 48.956297][ C1] dsp_cmx_send+0x21bb/0x2240 [ 48.956311][ C1] ? read_lock_is_recursive+0x10/0x10 [ 48.956325][ C1] ? detach_timer+0x24/0x2f0 [ 48.956343][ C1] call_timer_fn+0x16d/0x560 [ 48.956356][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 48.956370][ C1] ? __run_timers+0x890/0x890 [ 48.956385][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 48.956399][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 48.956415][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 48.956428][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 48.956444][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 48.956457][ C1] __run_timers+0x67c/0x890 [ 48.956474][ C1] ? detach_timer+0x2f0/0x2f0 [ 48.956486][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 48.956502][ C1] ? ktime_get_real_ts64+0x460/0x460 [ 48.956518][ C1] run_timer_softirq+0x63/0xf0 [ 48.956534][ C1] handle_softirqs+0x3a7/0x930 [ 48.956553][ C1] ? __irq_exit_rcu+0x157/0x240 [ 48.956568][ C1] ? do_softirq+0x240/0x240 [ 48.956580][ C1] ? hrtimer_interrupt+0x76b/0x980 [ 48.956595][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 48.956611][ C1] __irq_exit_rcu+0x157/0x240 [ 48.956625][ C1] ? irq_exit_rcu+0x20/0x20 [ 48.956641][ C1] irq_exit_rcu+0x5/0x20 [ 48.956653][ C1] sysvec_apic_timer_interrupt+0x91/0xb0 [ 48.956669][ C1] [ 48.956673][ C1] [ 48.956678][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 48.956693][ C1] RIP: 0010:lock_acquire+0x252/0x4f0 [ 48.956706][ C1] Code: 2b 00 74 08 4c 89 f7 e8 0c 7e 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 48.956717][ C1] RSP: 0018:ffffc90002e276e0 EFLAGS: 00000206 [ 48.956728][ C1] RAX: 0000000000000001 RBX: 1ffff920005c4ee8 RCX: ffffffff81636252 [ 48.956738][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8b3ca0 RDI: ffffffff8ad8f740 [ 48.956748][ C1] RBP: ffffc90002e27838 R08: dffffc0000000000 R09: fffffbfff1f7f21b [ 48.956759][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920005c4ee4 [ 48.956769][ C1] R13: dffffc0000000000 R14: ffffc90002e27740 R15: 0000000000000246 [ 48.956782][ C1] ? validate_chain+0x112/0x5930 [ 48.956800][ C1] ? read_lock_is_recursive+0x10/0x10 [ 48.956814][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 48.956828][ C1] ? up_write+0x19d/0x580 [ 48.956846][ C1] ? __up_read+0x690/0x690 [ 48.956862][ C1] fs_reclaim_acquire+0xa7/0x120 [ 48.956875][ C1] ? fs_reclaim_acquire+0x87/0x120 [ 48.956889][ C1] slab_pre_alloc_hook+0x22/0xc0 [ 48.956904][ C1] ? anon_vma_fork+0xed/0x580 [ 48.956917][ C1] kmem_cache_alloc+0x3f/0x280 [ 48.956934][ C1] anon_vma_fork+0xed/0x580 [ 48.956947][ C1] ? dup_userfaultfd+0x9f/0x5f0 [ 48.956963][ C1] ? kmem_cache_alloc+0x128/0x280 [ 48.956977][ C1] ? copy_mm+0x8ef/0x1370 [ 48.956992][ C1] copy_mm+0x9f2/0x1370 [ 48.957010][ C1] ? copy_signal+0x630/0x630 [ 48.957024][ C1] ? __init_rwsem+0x11e/0x160 [ 48.957040][ C1] ? copy_signal+0x529/0x630 [ 48.957054][ C1] copy_process+0x1816/0x3ef0 [ 48.957078][ C1] ? pidfd_show_fdinfo+0x2e0/0x2e0 [ 48.957092][ C1] ? __lock_acquire+0x1295/0x1ff0 [ 48.957109][ C1] kernel_clone+0x210/0x960 [ 48.957125][ C1] ? create_io_thread+0x1e0/0x1e0 [ 48.957141][ C1] ? __context_tracking_enter+0x5f/0x90 [ 48.957158][ C1] ? __context_tracking_exit+0x4c/0x80 [ 48.957175][ C1] __x64_sys_clone+0x23f/0x290 [ 48.957189][ C1] ? __do_sys_vfork+0x130/0x130 [ 48.957203][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 48.957221][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 48.957237][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 48.957253][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 48.957270][ C1] do_syscall_64+0x3b/0xb0 [ 48.957284][ C1] ? clear_bhb_loop+0x15/0x70 [ 48.957297][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.957311][ C1] RIP: 0033:0x7f6779de8813 [ 48.957324][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 48.957335][ C1] RSP: 002b:00007fff47a225b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 48.957348][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6779de8813 [ 48.957358][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 48.957367][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 48.957376][ C1] R10: 0000555555f937d0 R11: 0000000000000246 R12: 0000000000000000 [ 48.957385][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 48.957399][ C1] [ 48.967752][ T2598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.972938][ C1] WARNING: CPU: 1 PID: 3509 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 48.972968][ C1] Modules linked in: [ 50.513449][ C1] CPU: 1 PID: 3509 Comm: syz-executor Not tainted 5.15.161-syzkaller #0 [ 50.521852][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 50.531892][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 50.538048][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 3b ce d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 24 ce d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 50.557744][ C1] RSP: 0018:ffffc90000dd0748 EFLAGS: 00010046 [ 50.563820][ C1] RAX: ffffffff81aa8cac RBX: 0000000000000000 RCX: ffff8880153ed940 [ 50.571807][ C1] RDX: 0000000080000103 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.579785][ C1] RBP: dffffc0000000000 R08: ffffffff81aa8bbd R09: fffffbfff1f7f219 [ 50.587854][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000020000000 [ 50.595827][ C1] R13: 0000000000000008 R14: 0000000020000000 R15: ffffc90000dd07a8 [ 50.603797][ C1] FS: 0000555555f93500(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 50.612819][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.619411][ C1] CR2: 000000110c36a937 CR3: 0000000069f52000 CR4: 00000000003506e0 [ 50.627537][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.635571][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.643612][ C1] Call Trace: [ 50.646865][ C1] [ 50.649683][ C1] ? __warn+0x15b/0x300 [ 50.653813][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 50.659327][ C1] ? report_bug+0x1b7/0x2e0 [ 50.663807][ C1] ? handle_bug+0x3d/0x70 [ 50.668105][ C1] ? exc_invalid_op+0x16/0x40 [ 50.672754][ C1] ? asm_exc_invalid_op+0x16/0x20 [ 50.677780][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 50.683235][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 50.688909][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 50.694446][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 50.699970][ C1] bpf_probe_read_user+0x26/0x70 [ 50.704892][ C1] bpf_prog_078a3568a35342ea+0x38/0x380 [ 50.710671][ C1] bpf_trace_run3+0x1d1/0x380 [ 50.715322][ C1] ? bpf_trace_run2+0x340/0x340 [ 50.720145][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 50.726007][ C1] ? _raw_spin_unlock+0x40/0x40 [ 50.730840][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 50.736330][ C1] ? _raw_spin_lock+0x40/0x40 [ 50.740990][ C1] ? __bpf_trace_timer_class+0x20/0x20 [ 50.746428][ C1] __traceiter_timer_start+0x79/0xd0 [ 50.751837][ C1] enqueue_timer+0x3ae/0x540 [ 50.756419][ C1] __mod_timer+0xa60/0xeb0 [ 50.760829][ C1] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 50.767053][ C1] ? mod_timer_pending+0x20/0x20 [ 50.771979][ C1] ? _raw_read_unlock_irqrestore+0xd9/0x130 [ 50.777896][ C1] ? _raw_read_unlock+0x40/0x40 [ 50.782755][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 50.788212][ C1] ? _raw_spin_lock+0x40/0x40 [ 50.792865][ C1] ? ktime_get+0x242/0x270 [ 50.797277][ C1] dsp_cmx_send+0x21bb/0x2240 [ 50.801948][ C1] ? read_lock_is_recursive+0x10/0x10 [ 50.807308][ C1] ? detach_timer+0x24/0x2f0 [ 50.811971][ C1] call_timer_fn+0x16d/0x560 [ 50.816568][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 50.821781][ C1] ? __run_timers+0x890/0x890 [ 50.826452][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 50.831667][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 50.836843][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 50.841926][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 50.847117][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 50.852205][ C1] __run_timers+0x67c/0x890 [ 50.856683][ C1] ? detach_timer+0x2f0/0x2f0 [ 50.861364][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 50.867365][ C1] ? ktime_get_real_ts64+0x460/0x460 [ 50.872630][ C1] run_timer_softirq+0x63/0xf0 [ 50.877384][ C1] handle_softirqs+0x3a7/0x930 [ 50.882155][ C1] ? __irq_exit_rcu+0x157/0x240 [ 50.887073][ C1] ? do_softirq+0x240/0x240 [ 50.891551][ C1] ? hrtimer_interrupt+0x76b/0x980 [ 50.896726][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 50.901901][ C1] __irq_exit_rcu+0x157/0x240 [ 50.906639][ C1] ? irq_exit_rcu+0x20/0x20 [ 50.911124][ C1] irq_exit_rcu+0x5/0x20 [ 50.915339][ C1] sysvec_apic_timer_interrupt+0x91/0xb0 [ 50.920945][ C1] [ 50.923870][ C1] [ 50.926777][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 50.932731][ C1] RIP: 0010:lock_acquire+0x252/0x4f0 [ 50.938000][ C1] Code: 2b 00 74 08 4c 89 f7 e8 0c 7e 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 50.957600][ C1] RSP: 0018:ffffc90002e276e0 EFLAGS: 00000206 [ 50.963745][ C1] RAX: 0000000000000001 RBX: 1ffff920005c4ee8 RCX: ffffffff81636252 [ 50.971707][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8b3ca0 RDI: ffffffff8ad8f740 [ 50.979794][ C1] RBP: ffffc90002e27838 R08: dffffc0000000000 R09: fffffbfff1f7f21b [ 50.987768][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920005c4ee4 [ 50.995717][ C1] R13: dffffc0000000000 R14: ffffc90002e27740 R15: 0000000000000246 [ 51.003771][ C1] ? validate_chain+0x112/0x5930 [ 51.008716][ C1] ? read_lock_is_recursive+0x10/0x10 [ 51.014061][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 51.019151][ C1] ? up_write+0x19d/0x580 [ 51.023456][ C1] ? __up_read+0x690/0x690 [ 51.027908][ C1] fs_reclaim_acquire+0xa7/0x120 [ 51.032948][ C1] ? fs_reclaim_acquire+0x87/0x120 [ 51.038065][ C1] slab_pre_alloc_hook+0x22/0xc0 [ 51.043095][ C1] ? anon_vma_fork+0xed/0x580 [ 51.047763][ C1] kmem_cache_alloc+0x3f/0x280 [ 51.052510][ C1] anon_vma_fork+0xed/0x580 [ 51.056992][ C1] ? dup_userfaultfd+0x9f/0x5f0 [ 51.061831][ C1] ? kmem_cache_alloc+0x128/0x280 [ 51.066938][ C1] ? copy_mm+0x8ef/0x1370 [ 51.071267][ C1] copy_mm+0x9f2/0x1370 [ 51.075416][ C1] ? copy_signal+0x630/0x630 [ 51.080007][ C1] ? __init_rwsem+0x11e/0x160 [ 51.084681][ C1] ? copy_signal+0x529/0x630 [ 51.089269][ C1] copy_process+0x1816/0x3ef0 [ 51.093937][ C1] ? pidfd_show_fdinfo+0x2e0/0x2e0 [ 51.099203][ C1] ? __lock_acquire+0x1295/0x1ff0 [ 51.104220][ C1] kernel_clone+0x210/0x960 [ 51.108747][ C1] ? create_io_thread+0x1e0/0x1e0 [ 51.113913][ C1] ? __context_tracking_enter+0x5f/0x90 [ 51.119468][ C1] ? __context_tracking_exit+0x4c/0x80 [ 51.125000][ C1] __x64_sys_clone+0x23f/0x290 [ 51.129740][ C1] ? __do_sys_vfork+0x130/0x130 [ 51.134561][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 51.140533][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 51.146485][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 51.151652][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 51.157600][ C1] do_syscall_64+0x3b/0xb0 [ 51.161988][ C1] ? clear_bhb_loop+0x15/0x70 [ 51.166636][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.172587][ C1] RIP: 0033:0x7f6779de8813 [ 51.176973][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 51.196819][ C1] RSP: 002b:00007fff47a225b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 51.205227][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6779de8813 [ 51.213191][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 51.221230][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 51.229174][ C1] R10: 0000555555f937d0 R11: 0000000000000246 R12: 0000000000000000 [ 51.237120][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.245204][ C1] [ 51.248219][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 51.255495][ C1] CPU: 1 PID: 3509 Comm: syz-executor Not tainted 5.15.161-syzkaller #0 [ 51.263819][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 51.273960][ C1] Call Trace: [ 51.277241][ C1] [ 51.280192][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 51.285029][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 51.290686][ C1] ? panic+0x860/0x860 [ 51.294744][ C1] ? panic+0x860/0x860 [ 51.298804][ C1] ? copy_from_user_nofault+0xb0/0x1c0 [ 51.304271][ C1] ? copy_from_user_nofault+0xb0/0x1c0 [ 51.309719][ C1] panic+0x318/0x860 [ 51.313589][ C1] ? __warn+0x16a/0x300 [ 51.317717][ C1] ? fb_is_primary_device+0xd0/0xd0 [ 51.322912][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 51.328427][ C1] __warn+0x2b2/0x300 [ 51.332380][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 51.337895][ C1] report_bug+0x1b7/0x2e0 [ 51.342201][ C1] handle_bug+0x3d/0x70 [ 51.346328][ C1] exc_invalid_op+0x16/0x40 [ 51.350802][ C1] asm_exc_invalid_op+0x16/0x20 [ 51.355624][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 51.361747][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 3b ce d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 24 ce d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 51.381503][ C1] RSP: 0018:ffffc90000dd0748 EFLAGS: 00010046 [ 51.387629][ C1] RAX: ffffffff81aa8cac RBX: 0000000000000000 RCX: ffff8880153ed940 [ 51.395589][ C1] RDX: 0000000080000103 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.403654][ C1] RBP: dffffc0000000000 R08: ffffffff81aa8bbd R09: fffffbfff1f7f219 [ 51.411720][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000020000000 [ 51.419676][ C1] R13: 0000000000000008 R14: 0000000020000000 R15: ffffc90000dd07a8 [ 51.427629][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 51.433079][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 51.438611][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 51.444243][ C1] bpf_probe_read_user+0x26/0x70 [ 51.449390][ C1] bpf_prog_078a3568a35342ea+0x38/0x380 [ 51.454915][ C1] bpf_trace_run3+0x1d1/0x380 [ 51.459657][ C1] ? bpf_trace_run2+0x340/0x340 [ 51.464517][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 51.470385][ C1] ? _raw_spin_unlock+0x40/0x40 [ 51.475300][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 51.480845][ C1] ? _raw_spin_lock+0x40/0x40 [ 51.485495][ C1] ? __bpf_trace_timer_class+0x20/0x20 [ 51.490928][ C1] __traceiter_timer_start+0x79/0xd0 [ 51.496185][ C1] enqueue_timer+0x3ae/0x540 [ 51.500752][ C1] __mod_timer+0xa60/0xeb0 [ 51.505256][ C1] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 51.511514][ C1] ? mod_timer_pending+0x20/0x20 [ 51.516437][ C1] ? _raw_read_unlock_irqrestore+0xd9/0x130 [ 51.522313][ C1] ? _raw_read_unlock+0x40/0x40 [ 51.527137][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 51.532655][ C1] ? _raw_spin_lock+0x40/0x40 [ 51.537392][ C1] ? ktime_get+0x242/0x270 [ 51.541872][ C1] dsp_cmx_send+0x21bb/0x2240 [ 51.546520][ C1] ? read_lock_is_recursive+0x10/0x10 [ 51.551881][ C1] ? detach_timer+0x24/0x2f0 [ 51.556444][ C1] call_timer_fn+0x16d/0x560 [ 51.561015][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 51.566114][ C1] ? __run_timers+0x890/0x890 [ 51.570860][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 51.576038][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 51.581215][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 51.586305][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 51.591504][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 51.596604][ C1] __run_timers+0x67c/0x890 [ 51.601171][ C1] ? detach_timer+0x2f0/0x2f0 [ 51.605850][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 51.611827][ C1] ? ktime_get_real_ts64+0x460/0x460 [ 51.617092][ C1] run_timer_softirq+0x63/0xf0 [ 51.621833][ C1] handle_softirqs+0x3a7/0x930 [ 51.626570][ C1] ? __irq_exit_rcu+0x157/0x240 [ 51.631393][ C1] ? do_softirq+0x240/0x240 [ 51.635869][ C1] ? hrtimer_interrupt+0x76b/0x980 [ 51.640959][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 51.646267][ C1] __irq_exit_rcu+0x157/0x240 [ 51.650917][ C1] ? irq_exit_rcu+0x20/0x20 [ 51.655389][ C1] irq_exit_rcu+0x5/0x20 [ 51.659619][ C1] sysvec_apic_timer_interrupt+0x91/0xb0 [ 51.665227][ C1] [ 51.668172][ C1] [ 51.671080][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 51.677118][ C1] RIP: 0010:lock_acquire+0x252/0x4f0 [ 51.682373][ C1] Code: 2b 00 74 08 4c 89 f7 e8 0c 7e 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 51.702213][ C1] RSP: 0018:ffffc90002e276e0 EFLAGS: 00000206 [ 51.708257][ C1] RAX: 0000000000000001 RBX: 1ffff920005c4ee8 RCX: ffffffff81636252 [ 51.716262][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8b3ca0 RDI: ffffffff8ad8f740 [ 51.724216][ C1] RBP: ffffc90002e27838 R08: dffffc0000000000 R09: fffffbfff1f7f21b [ 51.732169][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920005c4ee4 [ 51.740150][ C1] R13: dffffc0000000000 R14: ffffc90002e27740 R15: 0000000000000246 [ 51.748639][ C1] ? validate_chain+0x112/0x5930 [ 51.753588][ C1] ? read_lock_is_recursive+0x10/0x10 [ 51.758946][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 51.763945][ C1] ? up_write+0x19d/0x580 [ 51.768265][ C1] ? __up_read+0x690/0x690 [ 51.772694][ C1] fs_reclaim_acquire+0xa7/0x120 [ 51.777909][ C1] ? fs_reclaim_acquire+0x87/0x120 [ 51.783009][ C1] slab_pre_alloc_hook+0x22/0xc0 [ 51.788055][ C1] ? anon_vma_fork+0xed/0x580 [ 51.792733][ C1] kmem_cache_alloc+0x3f/0x280 [ 51.797492][ C1] anon_vma_fork+0xed/0x580 [ 51.802023][ C1] ? dup_userfaultfd+0x9f/0x5f0 [ 51.806868][ C1] ? kmem_cache_alloc+0x128/0x280 [ 51.811938][ C1] ? copy_mm+0x8ef/0x1370 [ 51.816332][ C1] copy_mm+0x9f2/0x1370 [ 51.820466][ C1] ? copy_signal+0x630/0x630 [ 51.825070][ C1] ? __init_rwsem+0x11e/0x160 [ 51.830003][ C1] ? copy_signal+0x529/0x630 [ 51.834722][ C1] copy_process+0x1816/0x3ef0 [ 51.839410][ C1] ? pidfd_show_fdinfo+0x2e0/0x2e0 [ 51.844566][ C1] ? __lock_acquire+0x1295/0x1ff0 [ 51.849597][ C1] kernel_clone+0x210/0x960 [ 51.854099][ C1] ? create_io_thread+0x1e0/0x1e0 [ 51.859101][ C1] ? __context_tracking_enter+0x5f/0x90 [ 51.864707][ C1] ? __context_tracking_exit+0x4c/0x80 [ 51.870152][ C1] __x64_sys_clone+0x23f/0x290 [ 51.874914][ C1] ? __do_sys_vfork+0x130/0x130 [ 51.879828][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 51.885788][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 51.891758][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 51.896960][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 51.902936][ C1] do_syscall_64+0x3b/0xb0 [ 51.907371][ C1] ? clear_bhb_loop+0x15/0x70 [ 51.912056][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.917938][ C1] RIP: 0033:0x7f6779de8813 [ 51.922344][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 51.942030][ C1] RSP: 002b:00007fff47a225b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 51.950440][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6779de8813 [ 51.958493][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 51.966442][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 51.974399][ C1] R10: 0000555555f937d0 R11: 0000000000000246 R12: 0000000000000000 [ 51.982365][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.990323][ C1] [ 53.082040][ C1] Shutting down cpus with NMI [ 53.086981][ C1] Kernel Offset: disabled [ 53.091390][ C1] Rebooting in 86400 seconds..