last executing test programs: 548.660173ms ago: executing program 2 (id=3): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r0, 0x0, 0x578410e9) sendfile(r3, r0, 0x0, 0x100000000) 547.797013ms ago: executing program 4 (id=5): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="757466383d302c757466383d302c757466383d302c636865636b3d7374726963742c696f636861727365743d6b6f69382d752c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d30f76e6f6e756d7461696c3d302c696f636861727365743d6d61636963656c616e642c73686f72746e616d653d6d697865642c73686f13b3688c6d653d77696e6e742c757466383d302c756e695f786c6174653d312c0038a235a900fb22f2dd5f911e140f8bd41e25bcfd9c6296e39eeba66eddbfca4e8f186eb0d062decd7a4abf867735a367b238088b00969e3509e5"], 0x26, 0x336, &(0x7f00000001c0)="$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") pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r4 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0x78) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 130.837328ms ago: executing program 4 (id=6): r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\\\x9c\x10&\xceem\\\xab\\\xd2{sgidt\x1b#:a\boZT\xa4\xd1S\x1a\xf9\x82\xc9}\x19\x92\xa0$\xcb/\x9b\xa7\xe4n|\xe6\xbb\x95\xed\x96\x93\x02\xef\xa3\xeb\xb7\xa5\xe7\xb6#.\xed8\xf94X\xd1hO\xb4z\x8d]5ab\xeax\x00\x00\x05- \x80\xa4\xb3>\xcb>\xbb\xd3\v\xb4\x0e=r\x1d3\fI\xa0\xe6\xf3\xabq\x93\tuk\xf9\xe6\xb6\x8c\x85`\x90\x1bA\x97A`\xca+z\x040\x8aQ\x8e6\x9e\a\xba\x0e\x9b\x19\x8c\xc5A\xb2\xefq\x11\xedq\xde\xf8\xf1\x01\x15D\xafeg\xd7n\xbf\xfb@\xd3\x8d\xbc\x01\x1c7\xb0i\xa3\xe0\x86\xb4-6\x88\v\xb34gQW\xe4\xd23\x88\x0e\x0f\xb4\xfa\xa2E\x98\xa9C\vE\xd2\xdb\xacW\xcf\t\x1dY\xeb\xfb\x13\xcb\xa9^\f\xd6i\xeb=\x9e\xe1\xb2V\xbb\xb7a\x17\xda\x00]\xf2*', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfe\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\xf0\xfb\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)=')\\!V\x00', &(0x7f0000000180)='^+*\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=7): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x3, 0x0, &(0x7f0000044000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.115' (ED25519) to the list of known hosts. [ 51.127246][ T4155] cgroup: Unknown subsys name 'net' [ 51.269644][ T4155] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.613163][ T4155] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.387406][ T4179] chnl_net:caif_netlink_parms(): no params data found [ 54.496873][ T4175] chnl_net:caif_netlink_parms(): no params data found [ 54.506000][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 54.538521][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 54.547887][ T4179] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.555642][ T4179] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.563512][ T4179] device bridge_slave_0 entered promiscuous mode [ 54.595253][ T4179] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.602311][ T4179] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.610551][ T4179] device bridge_slave_1 entered promiscuous mode [ 54.674773][ T4179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.683880][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 54.714968][ T4179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.729622][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.737340][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.745579][ T4175] device bridge_slave_0 entered promiscuous mode [ 54.784646][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.791738][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.799849][ T4175] device bridge_slave_1 entered promiscuous mode [ 54.817830][ T4179] team0: Port device team_slave_0 added [ 54.829805][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.836934][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.845442][ T4167] device bridge_slave_0 entered promiscuous mode [ 54.864997][ T4179] team0: Port device team_slave_1 added [ 54.870929][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.878027][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.886165][ T4166] device bridge_slave_0 entered promiscuous mode [ 54.898896][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.906055][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.913662][ T4167] device bridge_slave_1 entered promiscuous mode [ 54.941062][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.948233][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.956143][ T4166] device bridge_slave_1 entered promiscuous mode [ 54.985278][ T4175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.996823][ T4175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.012104][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.019434][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.027186][ T4168] device bridge_slave_0 entered promiscuous mode [ 55.036194][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.046067][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.053087][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.079022][ T4179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.102466][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.109758][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.117953][ T4168] device bridge_slave_1 entered promiscuous mode [ 55.126385][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.142774][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.149914][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.175856][ T4179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.195057][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.222278][ T4167] team0: Port device team_slave_0 added [ 55.230945][ T4175] team0: Port device team_slave_0 added [ 55.238210][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.254294][ T4167] team0: Port device team_slave_1 added [ 55.268374][ T4175] team0: Port device team_slave_1 added [ 55.281577][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.292628][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.341947][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.348906][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.375312][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.394761][ T4166] team0: Port device team_slave_0 added [ 55.400906][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.408033][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.434077][ T4175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.447498][ T4168] team0: Port device team_slave_0 added [ 55.453682][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.460689][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.486650][ T4175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.512240][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.519373][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.545562][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.558463][ T4166] team0: Port device team_slave_1 added [ 55.565680][ T4168] team0: Port device team_slave_1 added [ 55.582796][ T4179] device hsr_slave_0 entered promiscuous mode [ 55.589476][ T4179] device hsr_slave_1 entered promiscuous mode [ 55.628460][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.635715][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.661716][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.685278][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.692214][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.718229][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.730085][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.737142][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.763051][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.789936][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.797125][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.823131][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.851025][ T4175] device hsr_slave_0 entered promiscuous mode [ 55.857973][ T4175] device hsr_slave_1 entered promiscuous mode [ 55.864690][ T4175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.872488][ T4175] Cannot create hsr debugfs directory [ 55.883512][ T4167] device hsr_slave_0 entered promiscuous mode [ 55.890395][ T4167] device hsr_slave_1 entered promiscuous mode [ 55.897145][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.904881][ T4167] Cannot create hsr debugfs directory [ 55.952185][ T4166] device hsr_slave_0 entered promiscuous mode [ 55.958971][ T4166] device hsr_slave_1 entered promiscuous mode [ 55.965598][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.973133][ T4166] Cannot create hsr debugfs directory [ 56.060368][ T4168] device hsr_slave_0 entered promiscuous mode [ 56.067299][ T4168] device hsr_slave_1 entered promiscuous mode [ 56.073766][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.081522][ T4168] Cannot create hsr debugfs directory [ 56.087715][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 56.165295][ T4157] Bluetooth: hci3: command 0x0409 tx timeout [ 56.166637][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 56.171637][ T4157] Bluetooth: hci4: command 0x0409 tx timeout [ 56.183655][ T4157] Bluetooth: hci1: command 0x0409 tx timeout [ 56.316772][ T4179] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.328506][ T4179] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.338470][ T4179] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.350237][ T4179] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.385062][ T4175] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.399283][ T4175] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.408361][ T4175] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.418226][ T4175] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.480599][ T4168] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.498062][ T4168] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.509358][ T4168] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.518650][ T4168] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.588104][ T4166] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.596887][ T4166] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.607947][ T4166] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.617490][ T4166] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.642537][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.668724][ T4179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.696212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.706122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.720762][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.729043][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.743885][ T4179] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.752245][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.759492][ T4167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.777350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.786218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.796279][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.803404][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.828383][ T4167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.838468][ T4167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.847967][ T4167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.859655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.867651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.877393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.886047][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.893088][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.901495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.911296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.920000][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.927072][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.935500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.945865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.954548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.963012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.971808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.980339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.988857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.997444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.019776][ T4175] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.030188][ T4175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.064346][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.072568][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.089481][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.100856][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.112573][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.121526][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.130060][ T3079] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.137135][ T3079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.144966][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.155149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.180800][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.192967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.223596][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.238634][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.275927][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.283624][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.293675][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.315851][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.326672][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.335504][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.343833][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.352286][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.363314][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.371152][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.380563][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.391225][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.406286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.413703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.421853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.430779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.439799][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.446859][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.460856][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.477961][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.500292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.513096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.528882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.539626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.552036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.560913][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.567974][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.576081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.587994][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.600619][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.611930][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.623006][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.635564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.644616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.653215][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.660322][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.688446][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.710613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.732510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.742627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.753538][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.760633][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.770449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.779911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.788664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.797806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.806695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.819595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.827636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.836518][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.846734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.872082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.880156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.889049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.897738][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.904826][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.912800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.921585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.930992][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.938068][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.945843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.954782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.963210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.971550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.979749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.988434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.997149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.006585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.015772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.023650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.039476][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.049987][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.077759][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.090653][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.098280][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.109095][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.117980][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.126430][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.134904][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.143021][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.151562][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.159931][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.169141][ T4211] Bluetooth: hci2: command 0x041b tx timeout [ 58.173390][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.183506][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.191983][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.201418][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.210898][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.225412][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.235831][ T4179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.244707][ T4215] Bluetooth: hci0: command 0x041b tx timeout [ 58.244745][ T4211] Bluetooth: hci1: command 0x041b tx timeout [ 58.262612][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.291537][ T4211] Bluetooth: hci4: command 0x041b tx timeout [ 58.299493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.309791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.318168][ T4211] Bluetooth: hci3: command 0x041b tx timeout [ 58.323532][ T4175] device veth0_vlan entered promiscuous mode [ 58.343167][ T4179] device veth0_vlan entered promiscuous mode [ 58.352405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.379846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.389495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.402734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.412082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.420326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.428194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.436178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.451514][ T4179] device veth1_vlan entered promiscuous mode [ 58.469895][ T4175] device veth1_vlan entered promiscuous mode [ 58.538405][ T4179] device veth0_macvtap entered promiscuous mode [ 58.552816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.561855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.570868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.580510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.588709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.597584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.611197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.624482][ T4179] device veth1_macvtap entered promiscuous mode [ 58.641189][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.651612][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.670853][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.681925][ T4175] device veth0_macvtap entered promiscuous mode [ 58.694604][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.702511][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.710647][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.718257][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.726358][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.733736][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.741904][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.752175][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.762883][ T4175] device veth1_macvtap entered promiscuous mode [ 58.777310][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.785902][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.794688][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.805661][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.816813][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.825831][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.852270][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.863088][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.875457][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.883594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.893549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.903473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.912470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.921656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.930651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.950666][ T4179] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.959754][ T4179] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.969350][ T4179] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.978306][ T4179] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.989393][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.000702][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.012194][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.029777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.039116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.048414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.058233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.084522][ T4175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.093220][ T4175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.102289][ T4175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.111872][ T4175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.130057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.138280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.146465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.155924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.175128][ T4168] device veth0_vlan entered promiscuous mode [ 59.193342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.202370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.220584][ T4166] device veth0_vlan entered promiscuous mode [ 59.230199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.238891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.247221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.255951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.264196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.271967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.280485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.292300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.301912][ T4168] device veth1_vlan entered promiscuous mode [ 59.319909][ T4166] device veth1_vlan entered promiscuous mode [ 59.328564][ T4167] device veth0_vlan entered promiscuous mode [ 59.420005][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.428963][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.433454][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.444487][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.456037][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.464546][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.472461][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.481126][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.489727][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.498744][ T4167] device veth1_vlan entered promiscuous mode [ 59.513404][ T4168] device veth0_macvtap entered promiscuous mode [ 59.526672][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.538694][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.546888][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.555453][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.565420][ T4166] device veth0_macvtap entered promiscuous mode [ 59.576114][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.590866][ T4168] device veth1_macvtap entered promiscuous mode [ 59.601548][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.603293][ T4166] device veth1_macvtap entered promiscuous mode [ 59.642050][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.646679][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.661038][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.661399][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.678825][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.689124][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.697453][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.705401][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.721685][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.732316][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.743003][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.753651][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.766797][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.785069][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.796051][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.806649][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.817145][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.827204][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.837760][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.850908][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.860397][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.864966][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.879532][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.880203][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.897024][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.907471][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.918714][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.926284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.934592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.943304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.952357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.961673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.970673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.979643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.000569][ T4167] device veth0_macvtap entered promiscuous mode [ 60.011544][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.022195][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.033849][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.045415][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.055634][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.066637][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.078652][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.092380][ T4166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.107776][ T4166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.120356][ T4166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.133051][ T4166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.145978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.156540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.165807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.174959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.183526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.193745][ T4167] device veth1_macvtap entered promiscuous mode [ 60.255629][ T4217] Bluetooth: hci2: command 0x040f tx timeout [ 60.265340][ T4168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.287090][ T4168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.303690][ T4168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.312665][ T4168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.324606][ T4247] Bluetooth: hci4: command 0x040f tx timeout [ 60.331655][ T4247] Bluetooth: hci1: command 0x040f tx timeout [ 60.341574][ T4247] Bluetooth: hci0: command 0x040f tx timeout [ 60.345995][ T4251] loop4: detected capacity change from 0 to 256 [ 60.397016][ T3079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.406193][ T1108] Bluetooth: hci3: command 0x040f tx timeout [ 60.421801][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.441868][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.443609][ T3079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.463232][ T4251] FAT-fs (loop4): Unrecognized mount option "uni_xlate=0÷nonumtail=0" or missing value [ 60.480544][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.492611][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.503333][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.519006][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.529125][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.545715][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.561020][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.584054][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.613344][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.660685][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.682876][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.720754][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.745091][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.772580][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.823439][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.836004][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.846797][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.856855][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.868055][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.879681][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.904469][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.920899][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.924118][ C1] ------------[ cut here ]------------ [ 60.924770][ C1] [ 60.924776][ C1] ====================================================== [ 60.924783][ C1] WARNING: possible circular locking dependency detected [ 60.924797][ C1] 5.15.180-syzkaller #0 Not tainted [ 60.924807][ C1] ------------------------------------------------------ [ 60.924813][ C1] syz.2.3/4253 is trying to acquire lock: [ 60.924824][ C1] ffffffff8c112420 (console_owner){..-.}-{0:0}, at: console_trylock_spinning+0x150/0x350 [ 60.924890][ C1] [ 60.924890][ C1] but task is already holding lock: [ 60.924895][ C1] ffff8880b9128098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 60.924940][ C1] [ 60.924940][ C1] which lock already depends on the new lock. [ 60.924940][ C1] [ 60.924945][ C1] [ 60.924945][ C1] the existing dependency chain (in reverse order) is: [ 60.924951][ C1] [ 60.924951][ C1] -> #5 (&base->lock){-.-.}-{2:2}: [ 60.924976][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 60.924999][ C1] lock_timer_base+0x123/0x270 [ 60.925018][ C1] __mod_timer+0x117/0xd20 [ 60.925036][ C1] queue_delayed_work_on+0x126/0x1e0 [ 60.925055][ C1] enqueue_task+0x26d/0x2b0 [ 60.925073][ C1] wake_up_new_task+0x442/0x9a0 [ 60.925093][ C1] kernel_clone+0x421/0x930 [ 60.925111][ C1] kernel_thread+0xc8/0x120 [ 60.925128][ C1] rest_init+0x21/0x330 [ 60.925148][ C1] start_kernel+0x486/0x530 [ 60.925168][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 60.925190][ C1] [ 60.925190][ C1] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 60.925215][ C1] _raw_spin_lock_nested+0x2e/0x40 [ 60.925235][ C1] raw_spin_rq_lock_nested+0x26/0x140 [ 60.925254][ C1] task_fork_fair+0x5c/0x350 [ 60.925276][ C1] sched_cgroup_fork+0x2c6/0x320 [ 60.925296][ C1] copy_process+0x22bd/0x3e60 [ 60.925313][ C1] kernel_clone+0x219/0x930 [ 60.925331][ C1] kernel_thread+0xc8/0x120 [ 60.925348][ C1] rest_init+0x21/0x330 [ 60.925366][ C1] start_kernel+0x486/0x530 [ 60.925385][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 60.925405][ C1] [ 60.925405][ C1] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 60.925442][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 60.925460][ C1] try_to_wake_up+0x5c/0x1050 [ 60.925477][ C1] __wake_up_common+0x2a4/0x4e0 [ 60.925506][ C1] __wake_up+0x108/0x180 [ 60.925522][ C1] tty_port_default_wakeup+0xa5/0xf0 [ 60.925540][ C1] serial8250_tx_chars+0x629/0x830 [ 60.925557][ C1] serial8250_handle_irq+0x519/0x610 [ 60.925575][ C1] serial8250_default_handle_irq+0xb4/0x1a0 [ 60.925594][ C1] serial8250_interrupt+0x9b/0x1c0 [ 60.925611][ C1] __handle_irq_event_percpu+0x291/0x9b0 [ 60.925628][ C1] handle_irq_event+0xa5/0x220 [ 60.925643][ C1] handle_edge_irq+0x243/0xb20 [ 60.925660][ C1] __common_interrupt+0xd7/0x1e0 [ 60.925675][ C1] common_interrupt+0xb0/0xd0 [ 60.925690][ C1] asm_common_interrupt+0x22/0x40 [ 60.925707][ C1] lock_is_held_type+0x64/0x190 [ 60.925730][ C1] ___might_sleep+0xa3/0x600 [ 60.925743][ C1] down_read+0x20/0x2e0 [ 60.925758][ C1] validate_mm+0x95/0x950 [ 60.925777][ C1] __do_munmap+0xcc4/0xdc0 [ 60.925793][ C1] mmap_region+0x762/0x15e0 [ 60.925809][ C1] do_mmap+0x77a/0xdf0 [ 60.925825][ C1] vm_mmap_pgoff+0x1b2/0x2b0 [ 60.925840][ C1] ksys_mmap_pgoff+0x542/0x780 [ 60.925857][ C1] do_syscall_64+0x4c/0xa0 [ 60.925872][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 60.925891][ C1] [ 60.925891][ C1] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 60.925912][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 60.925929][ C1] __wake_up+0xed/0x180 [ 60.925945][ C1] tty_port_default_wakeup+0xa5/0xf0 [ 60.925961][ C1] serial8250_tx_chars+0x629/0x830 [ 60.925979][ C1] serial8250_handle_irq+0x519/0x610 [ 60.925997][ C1] serial8250_default_handle_irq+0xb4/0x1a0 [ 60.926014][ C1] serial8250_interrupt+0x9b/0x1c0 [ 60.926031][ C1] __handle_irq_event_percpu+0x291/0x9b0 [ 60.926047][ C1] handle_irq_event+0xa5/0x220 [ 60.926063][ C1] handle_edge_irq+0x243/0xb20 [ 60.926079][ C1] __common_interrupt+0xd7/0x1e0 [ 60.926094][ C1] common_interrupt+0xb0/0xd0 [ 60.926109][ C1] asm_common_interrupt+0x22/0x40 [ 60.926127][ C1] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 60.926145][ C1] uart_write+0x62f/0x880 [ 60.926159][ C1] n_tty_write+0xd21/0x1210 [ 60.926174][ C1] file_tty_write+0x557/0x910 [ 60.926191][ C1] vfs_write+0x712/0xd00 [ 60.926207][ C1] ksys_write+0x14d/0x250 [ 60.926221][ C1] do_syscall_64+0x4c/0xa0 [ 60.926235][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 60.926254][ C1] [ 60.926254][ C1] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 60.926275][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 60.926293][ C1] serial8250_console_write+0x170/0xf80 [ 60.926311][ C1] console_unlock+0xc86/0x1200 [ 60.926328][ C1] vprintk_emit+0xc0/0x150 [ 60.926345][ C1] _printk+0xcc/0x110 [ 60.926361][ C1] register_console+0x682/0x960 [ 60.926376][ C1] univ8250_console_init+0x41/0x50 [ 60.926393][ C1] console_init+0x177/0x5d0 [ 60.926408][ C1] start_kernel+0x2f9/0x530 [ 60.926423][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 60.926441][ C1] [ 60.926441][ C1] -> #0 (console_owner){..-.}-{0:0}: [ 60.926461][ C1] __lock_acquire+0x2c33/0x7c60 [ 60.926478][ C1] lock_acquire+0x197/0x3f0 [ 60.926494][ C1] console_trylock_spinning+0x170/0x350 [ 60.926513][ C1] vprintk_emit+0xa7/0x150 [ 60.926530][ C1] _printk+0xcc/0x110 [ 60.926546][ C1] report_bug+0x1e5/0x2e0 [ 60.926560][ C1] handle_bug+0x3a/0x70 [ 60.926574][ C1] exc_invalid_op+0x16/0x40 [ 60.926588][ C1] asm_exc_invalid_op+0x16/0x20 [ 60.926606][ C1] copy_from_user_nofault+0x160/0x1c0 [ 60.926624][ C1] bpf_probe_read_user+0x26/0x70 [ 60.926641][ C1] bpf_prog_02073d59a3c0f06f+0x3d/0x3d8 [ 60.926655][ C1] bpf_trace_run3+0x17e/0x320 [ 60.926672][ C1] enqueue_timer+0x394/0x520 [ 60.926688][ C1] __mod_timer+0x8e1/0xd20 [ 60.926703][ C1] mrp_join_timer+0x142/0x180 [ 60.926724][ C1] call_timer_fn+0x16c/0x530 [ 60.926740][ C1] __run_timers+0x525/0x7c0 [ 60.926756][ C1] run_timer_softirq+0x63/0xf0 [ 60.926772][ C1] handle_softirqs+0x328/0x820 [ 60.926786][ C1] __irq_exit_rcu+0x12f/0x220 [ 60.926800][ C1] irq_exit_rcu+0x5/0x20 [ 60.926814][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 60.926831][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 60.926850][ C1] sanity+0x0/0x510 [ 60.926867][ C1] copy_page_to_iter_pipe+0x117/0x640 [ 60.926886][ C1] copy_page_to_iter+0x7aa/0x910 [ 60.926903][ C1] shmem_file_read_iter+0x401/0xa80 [ 60.926922][ C1] generic_file_splice_read+0x3a2/0x590 [ 60.926939][ C1] splice_direct_to_actor+0x413/0xb50 [ 60.926955][ C1] do_splice_direct+0x1b9/0x2c0 [ 60.926970][ C1] do_sendfile+0x5d5/0xec0 [ 60.926985][ C1] __se_sys_sendfile64+0x13b/0x190 [ 60.927001][ C1] do_syscall_64+0x4c/0xa0 [ 60.927016][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 60.927035][ C1] [ 60.927035][ C1] other info that might help us debug this: [ 60.927035][ C1] [ 60.927039][ C1] Chain exists of: [ 60.927039][ C1] console_owner --> &rq->__lock --> &base->lock [ 60.927039][ C1] [ 60.927063][ C1] Possible unsafe locking scenario: [ 60.927063][ C1] [ 60.927067][ C1] CPU0 CPU1 [ 60.927070][ C1] ---- ---- [ 60.927074][ C1] lock(&base->lock); [ 60.927083][ C1] lock(&rq->__lock); [ 60.927093][ C1] lock(&base->lock); [ 60.927103][ C1] lock(console_owner); [ 60.927113][ C1] [ 60.927113][ C1] *** DEADLOCK *** [ 60.927113][ C1] [ 60.927116][ C1] 4 locks held by syz.2.3/4253: [ 60.927125][ C1] #0: ffffc90000dd0be0 ((&app->join_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbb/0x530 [ 60.927165][ C1] #1: ffff8880608124c8 (&app->lock){+.-.}-{2:2}, at: mrp_join_timer+0xd2/0x180 [ 60.927204][ C1] #2: ffff8880b9128098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 60.927244][ C1] #3: ffffffff8c11d9e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 60.927280][ C1] [ 60.927280][ C1] stack backtrace: [ 60.927296][ C1] CPU: 1 PID: 4253 Comm: syz.2.3 Not tainted 5.15.180-syzkaller #0 [ 60.927312][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 60.927327][ C1] Call Trace: [ 60.927332][ C1] [ 60.927338][ C1] dump_stack_lvl+0x168/0x230 [ 60.927361][ C1] ? load_image+0x3b0/0x3b0 [ 60.927380][ C1] ? show_regs_print_info+0x20/0x20 [ 60.927403][ C1] ? print_circular_bug+0x12b/0x1a0 [ 60.927421][ C1] check_noncircular+0x274/0x310 [ 60.927438][ C1] ? add_chain_block+0x940/0x940 [ 60.927452][ C1] ? lockdep_lock+0xdc/0x1e0 [ 60.927477][ C1] ? mark_lock+0x94/0x320 [ 60.927497][ C1] __lock_acquire+0x2c33/0x7c60 [ 60.927526][ C1] ? verify_lock_unused+0x140/0x140 [ 60.927545][ C1] ? verify_lock_unused+0x140/0x140 [ 60.927566][ C1] ? _prb_commit+0x289/0x340 [ 60.927584][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 60.927604][ C1] ? _raw_spin_unlock+0x40/0x40 [ 60.927625][ C1] lock_acquire+0x197/0x3f0 [ 60.927643][ C1] ? console_trylock_spinning+0x150/0x350 [ 60.927664][ C1] ? console_trylock_spinning+0x150/0x350 [ 60.927685][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 60.927703][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 60.927725][ C1] ? read_lock_is_recursive+0x10/0x10 [ 60.927744][ C1] ? __rwlock_init+0x140/0x140 [ 60.927759][ C1] ? __lock_acquire+0x13ad/0x7c60 [ 60.927779][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 60.927797][ C1] console_trylock_spinning+0x170/0x350 [ 60.927816][ C1] ? console_trylock_spinning+0x150/0x350 [ 60.927835][ C1] ? vprintk_emit+0x150/0x150 [ 60.927855][ C1] ? __lock_acquire+0x13ad/0x7c60 [ 60.927879][ C1] vprintk_emit+0xa7/0x150 [ 60.927899][ C1] _printk+0xcc/0x110 [ 60.927917][ C1] ? verify_lock_unused+0x140/0x140 [ 60.927937][ C1] ? load_image+0x3b0/0x3b0 [ 60.927955][ C1] ? mark_lock+0x94/0x320 [ 60.927974][ C1] ? __lock_acquire+0x13ad/0x7c60 [ 60.927992][ C1] ? find_bug+0xa1/0x350 [ 60.928006][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 60.928025][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 60.928045][ C1] report_bug+0x1e5/0x2e0 [ 60.928062][ C1] handle_bug+0x3a/0x70 [ 60.928078][ C1] exc_invalid_op+0x16/0x40 [ 60.928094][ C1] asm_exc_invalid_op+0x16/0x20 [ 60.928116][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 60.928137][ C1] Code: 24 45 31 f6 31 ff 89 de e8 bd ea d7 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 40 e7 d7 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 60.928152][ C1] RSP: 0018:ffffc90000dd0940 EFLAGS: 00010046 [ 60.928166][ C1] RAX: ffffffff819fd630 RBX: 0000000000000008 RCX: ffff88802092d940 [ 60.928179][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.928189][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff3419 [ 60.928201][ C1] R10: fffffbfff1ff3419 R11: 1ffffffff1ff3418 R12: ffff88802092f0c8 [ 60.928214][ C1] R13: 1ffff920001ba138 R14: ffffc90000dd09a8 R15: 0000000000000000 [ 60.928229][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 60.928253][ C1] bpf_probe_read_user+0x26/0x70 [ 60.928273][ C1] bpf_prog_02073d59a3c0f06f+0x3d/0x3d8 [ 60.928287][ C1] bpf_trace_run3+0x17e/0x320 [ 60.928306][ C1] ? bpf_trace_run2+0x2d0/0x2d0 [ 60.928324][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 60.928344][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 60.928363][ C1] ? _raw_spin_lock+0x40/0x40 [ 60.928385][ C1] enqueue_timer+0x394/0x520 [ 60.928405][ C1] __mod_timer+0x8e1/0xd20 [ 60.928426][ C1] mrp_join_timer+0x142/0x180 [ 60.928443][ C1] ? mrp_init_applicant+0x4e0/0x4e0 [ 60.928461][ C1] call_timer_fn+0x16c/0x530 [ 60.928478][ C1] ? mrp_init_applicant+0x4e0/0x4e0 [ 60.928495][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 60.928515][ C1] ? __run_timers+0x7c0/0x7c0 [ 60.928534][ C1] ? rcu_is_watching+0x11/0xa0 [ 60.928551][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 60.928569][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 60.928586][ C1] ? mrp_init_applicant+0x4e0/0x4e0 [ 60.928604][ C1] __run_timers+0x525/0x7c0 [ 60.928627][ C1] ? detach_timer+0x2b0/0x2b0 [ 60.928643][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 60.928665][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 60.928681][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 60.928704][ C1] run_timer_softirq+0x63/0xf0 [ 60.928730][ C1] handle_softirqs+0x328/0x820 [ 60.928747][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 60.928765][ C1] ? do_softirq+0x200/0x200 [ 60.928784][ C1] __irq_exit_rcu+0x12f/0x220 [ 60.928800][ C1] ? irq_exit_rcu+0x20/0x20 [ 60.928820][ C1] irq_exit_rcu+0x5/0x20 [ 60.928834][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 60.928853][ C1] [ 60.928858][ C1] [ 60.928864][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 60.928884][ C1] RIP: 0010:sanity+0x0/0x510 [ 60.928902][ C1] Code: e9 7d fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 91 fe ff ff 4c 89 ff e8 9c 04 e3 fd e9 84 fe ff ff 0f 1f 80 00 00 00 00 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 fd 49 be 00 00 00 [ 60.928916][ C1] RSP: 0018:ffffc90002faf738 EFLAGS: 00000206 [ 60.928929][ C1] RAX: ffffffff83da41d6 RBX: 0000000000001000 RCX: ffff88802092d940 [ 60.928941][ C1] RDX: 0000000000000002 RSI: 0000000000001000 RDI: ffffc90002faf9a0 [ 60.928953][ C1] RBP: 0000000000000000 R08: ffff88802092d940 R09: 0000000000000006 [ 60.928964][ C1] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 60.928974][ C1] R13: 0000000000000010 R14: ffffc90002faf9a0 R15: 000000000000e000 [ 60.928988][ C1] ? copy_page_to_iter_pipe+0x106/0x640 [ 60.929009][ C1] ? rcu_lock_release+0x5/0x20 [ 60.929027][ C1] copy_page_to_iter_pipe+0x117/0x640 [ 60.929047][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 60.929067][ C1] copy_page_to_iter+0x7aa/0x910 [ 60.929091][ C1] shmem_file_read_iter+0x401/0xa80 [ 60.929114][ C1] generic_file_splice_read+0x3a2/0x590 [ 60.929134][ C1] ? splice_shrink_spd+0xc0/0xc0 [ 60.929154][ C1] ? common_file_perm+0x171/0x1c0 [ 60.929173][ C1] ? fsnotify_perm+0x254/0x560 [ 60.929192][ C1] splice_direct_to_actor+0x413/0xb50 [ 60.929212][ C1] ? do_splice_direct+0x2c0/0x2c0 [ 60.929230][ C1] ? pipe_to_sendpage+0x310/0x310 [ 60.929246][ C1] ? common_file_perm+0x171/0x1c0 [ 60.929264][ C1] ? fsnotify_perm+0x5d/0x560 [ 60.929280][ C1] ? security_file_permission+0x75/0xa0 [ 60.929300][ C1] do_splice_direct+0x1b9/0x2c0 [ 60.929318][ C1] ? splice_direct_to_actor+0xb50/0xb50 [ 60.929334][ C1] ? __fget_files+0x40f/0x480 [ 60.929354][ C1] ? common_file_perm+0x171/0x1c0 [ 60.929373][ C1] ? fsnotify_perm+0x5d/0x560 [ 60.929391][ C1] ? security_file_permission+0x75/0xa0 [ 60.929411][ C1] do_sendfile+0x5d5/0xec0 [ 60.929432][ C1] ? do_pwritev+0x340/0x340 [ 60.929448][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 60.929469][ C1] __se_sys_sendfile64+0x13b/0x190 [ 60.929486][ C1] ? lock_chain_count+0x20/0x20 [ 60.929503][ C1] ? __x64_sys_sendfile64+0xa0/0xa0 [ 60.929522][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 60.929540][ C1] do_syscall_64+0x4c/0xa0 [ 60.929554][ C1] ? clear_bhb_loop+0x15/0x70 [ 60.929569][ C1] ? clear_bhb_loop+0x15/0x70 [ 60.929584][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 60.929604][ C1] RIP: 0033:0x7ff2adc76969 [ 60.929618][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.929631][ C1] RSP: 002b:00007ff2aba9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 60.929648][ C1] RAX: ffffffffffffffda RBX: 00007ff2ade9e160 RCX: 00007ff2adc76969 [ 60.929661][ C1] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000007 [ 60.929670][ C1] RBP: 00007ff2adcf8ab1 R08: 0000000000000000 R09: 0000000000000000 [ 60.929681][ C1] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.929691][ C1] R13: 0000000000000001 R14: 00007ff2ade9e160 R15: 00007ffd4a9bb158 [ 60.929709][ C1] [ 62.557348][ C1] WARNING: CPU: 1 PID: 4253 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 62.566634][ C1] Modules linked in: [ 62.570509][ C1] CPU: 1 PID: 4253 Comm: syz.2.3 Not tainted 5.15.180-syzkaller #0 [ 62.578384][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 62.588422][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 62.594573][ C1] Code: 24 45 31 f6 31 ff 89 de e8 bd ea d7 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 40 e7 d7 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 62.614166][ C1] RSP: 0018:ffffc90000dd0940 EFLAGS: 00010046 [ 62.620215][ C1] RAX: ffffffff819fd630 RBX: 0000000000000008 RCX: ffff88802092d940 [ 62.628165][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.636126][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff3419 [ 62.644081][ C1] R10: fffffbfff1ff3419 R11: 1ffffffff1ff3418 R12: ffff88802092f0c8 [ 62.652032][ C1] R13: 1ffff920001ba138 R14: ffffc90000dd09a8 R15: 0000000000000000 [ 62.659981][ C1] FS: 00007ff2aba9c6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 62.668893][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.675463][ C1] CR2: 0000200000e24000 CR3: 000000005fb46000 CR4: 00000000003506e0 [ 62.683430][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.691380][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.699332][ C1] Call Trace: [ 62.702595][ C1] [ 62.705432][ C1] bpf_probe_read_user+0x26/0x70 [ 62.710374][ C1] bpf_prog_02073d59a3c0f06f+0x3d/0x3d8 [ 62.715903][ C1] bpf_trace_run3+0x17e/0x320 [ 62.720647][ C1] ? bpf_trace_run2+0x2d0/0x2d0 [ 62.725477][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 62.731350][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 62.736703][ C1] ? _raw_spin_lock+0x40/0x40 [ 62.741362][ C1] enqueue_timer+0x394/0x520 [ 62.745935][ C1] __mod_timer+0x8e1/0xd20 [ 62.750334][ C1] mrp_join_timer+0x142/0x180 [ 62.754995][ C1] ? mrp_init_applicant+0x4e0/0x4e0 [ 62.760176][ C1] call_timer_fn+0x16c/0x530 [ 62.764748][ C1] ? mrp_init_applicant+0x4e0/0x4e0 [ 62.769931][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 62.775892][ C1] ? __run_timers+0x7c0/0x7c0 [ 62.780552][ C1] ? rcu_is_watching+0x11/0xa0 [ 62.785301][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 62.790490][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 62.795669][ C1] ? mrp_init_applicant+0x4e0/0x4e0 [ 62.800848][ C1] __run_timers+0x525/0x7c0 [ 62.805342][ C1] ? detach_timer+0x2b0/0x2b0 [ 62.810006][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 62.815970][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 62.820810][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 62.826080][ C1] run_timer_softirq+0x63/0xf0 [ 62.830844][ C1] handle_softirqs+0x328/0x820 [ 62.835592][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 62.840429][ C1] ? do_softirq+0x200/0x200 [ 62.845182][ C1] __irq_exit_rcu+0x12f/0x220 [ 62.849842][ C1] ? irq_exit_rcu+0x20/0x20 [ 62.854331][ C1] irq_exit_rcu+0x5/0x20 [ 62.858561][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 62.864178][ C1] [ 62.867091][ C1] [ 62.870005][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 62.875981][ C1] RIP: 0010:sanity+0x0/0x510 [ 62.880561][ C1] Code: e9 7d fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 91 fe ff ff 4c 89 ff e8 9c 04 e3 fd e9 84 fe ff ff 0f 1f 80 00 00 00 00 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 fd 49 be 00 00 00 [ 62.900147][ C1] RSP: 0018:ffffc90002faf738 EFLAGS: 00000206 [ 62.906193][ C1] RAX: ffffffff83da41d6 RBX: 0000000000001000 RCX: ffff88802092d940 [ 62.914149][ C1] RDX: 0000000000000002 RSI: 0000000000001000 RDI: ffffc90002faf9a0 [ 62.922191][ C1] RBP: 0000000000000000 R08: ffff88802092d940 R09: 0000000000000006 [ 62.930147][ C1] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 62.938101][ C1] R13: 0000000000000010 R14: ffffc90002faf9a0 R15: 000000000000e000 [ 62.946058][ C1] ? copy_page_to_iter_pipe+0x106/0x640 [ 62.951599][ C1] ? rcu_lock_release+0x5/0x20 [ 62.956346][ C1] copy_page_to_iter_pipe+0x117/0x640 [ 62.961703][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 62.966710][ C1] copy_page_to_iter+0x7aa/0x910 [ 62.971633][ C1] shmem_file_read_iter+0x401/0xa80 [ 62.976819][ C1] generic_file_splice_read+0x3a2/0x590 [ 62.982349][ C1] ? splice_shrink_spd+0xc0/0xc0 [ 62.987280][ C1] ? common_file_perm+0x171/0x1c0 [ 62.992289][ C1] ? fsnotify_perm+0x254/0x560 [ 62.997039][ C1] splice_direct_to_actor+0x413/0xb50 [ 63.002397][ C1] ? do_splice_direct+0x2c0/0x2c0 [ 63.007409][ C1] ? pipe_to_sendpage+0x310/0x310 [ 63.012417][ C1] ? common_file_perm+0x171/0x1c0 [ 63.017428][ C1] ? fsnotify_perm+0x5d/0x560 [ 63.022092][ C1] ? security_file_permission+0x75/0xa0 [ 63.027629][ C1] do_splice_direct+0x1b9/0x2c0 [ 63.032465][ C1] ? splice_direct_to_actor+0xb50/0xb50 [ 63.037991][ C1] ? __fget_files+0x40f/0x480 [ 63.042656][ C1] ? common_file_perm+0x171/0x1c0 [ 63.047665][ C1] ? fsnotify_perm+0x5d/0x560 [ 63.052321][ C1] ? security_file_permission+0x75/0xa0 [ 63.057850][ C1] do_sendfile+0x5d5/0xec0 [ 63.062252][ C1] ? do_pwritev+0x340/0x340 [ 63.066748][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 63.071763][ C1] __se_sys_sendfile64+0x13b/0x190 [ 63.076869][ C1] ? lock_chain_count+0x20/0x20 [ 63.081705][ C1] ? __x64_sys_sendfile64+0xa0/0xa0 [ 63.086889][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 63.092082][ C1] do_syscall_64+0x4c/0xa0 [ 63.096477][ C1] ? clear_bhb_loop+0x15/0x70 [ 63.101131][ C1] ? clear_bhb_loop+0x15/0x70 [ 63.105786][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.111660][ C1] RIP: 0033:0x7ff2adc76969 [ 63.116073][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.135657][ C1] RSP: 002b:00007ff2aba9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 63.144049][ C1] RAX: ffffffffffffffda RBX: 00007ff2ade9e160 RCX: 00007ff2adc76969 [ 63.151999][ C1] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000007 [ 63.159948][ C1] RBP: 00007ff2adcf8ab1 R08: 0000000000000000 R09: 0000000000000000 [ 63.167898][ C1] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.175939][ C1] R13: 0000000000000001 R14: 00007ff2ade9e160 R15: 00007ffd4a9bb158 [ 63.183906][ C1] [ 63.186932][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 63.194197][ C1] CPU: 1 PID: 4253 Comm: syz.2.3 Not tainted 5.15.180-syzkaller #0 [ 63.202088][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 63.212128][ C1] Call Trace: [ 63.215394][ C1] [ 63.218226][ C1] dump_stack_lvl+0x168/0x230 [ 63.222899][ C1] ? show_regs_print_info+0x20/0x20 [ 63.228086][ C1] ? load_image+0x3b0/0x3b0 [ 63.232582][ C1] panic+0x2c9/0x7f0 [ 63.236464][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 63.240965][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 63.246926][ C1] __warn+0x248/0x2b0 [ 63.250902][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 63.256433][ C1] report_bug+0x1b7/0x2e0 [ 63.260753][ C1] handle_bug+0x3a/0x70 [ 63.264899][ C1] exc_invalid_op+0x16/0x40 [ 63.269396][ C1] asm_exc_invalid_op+0x16/0x20 [ 63.274262][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 63.280409][ C1] Code: 24 45 31 f6 31 ff 89 de e8 bd ea d7 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 40 e7 d7 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 63.299996][ C1] RSP: 0018:ffffc90000dd0940 EFLAGS: 00010046 [ 63.306050][ C1] RAX: ffffffff819fd630 RBX: 0000000000000008 RCX: ffff88802092d940 [ 63.314008][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.321961][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff3419 [ 63.329919][ C1] R10: fffffbfff1ff3419 R11: 1ffffffff1ff3418 R12: ffff88802092f0c8 [ 63.337871][ C1] R13: 1ffff920001ba138 R14: ffffc90000dd09a8 R15: 0000000000000000 [ 63.346176][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 63.351990][ C1] bpf_probe_read_user+0x26/0x70 [ 63.358187][ C1] bpf_prog_02073d59a3c0f06f+0x3d/0x3d8 [ 63.363734][ C1] bpf_trace_run3+0x17e/0x320 [ 63.368406][ C1] ? bpf_trace_run2+0x2d0/0x2d0 [ 63.373249][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 63.379139][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 63.384502][ C1] ? _raw_spin_lock+0x40/0x40 [ 63.389178][ C1] enqueue_timer+0x394/0x520 [ 63.393764][ C1] __mod_timer+0x8e1/0xd20 [ 63.398179][ C1] mrp_join_timer+0x142/0x180 [ 63.402846][ C1] ? mrp_init_applicant+0x4e0/0x4e0 [ 63.408034][ C1] call_timer_fn+0x16c/0x530 [ 63.412617][ C1] ? mrp_init_applicant+0x4e0/0x4e0 [ 63.417807][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 63.423782][ C1] ? __run_timers+0x7c0/0x7c0 [ 63.428449][ C1] ? rcu_is_watching+0x11/0xa0 [ 63.433201][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 63.438487][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 63.443713][ C1] ? mrp_init_applicant+0x4e0/0x4e0 [ 63.448904][ C1] __run_timers+0x525/0x7c0 [ 63.453403][ C1] ? detach_timer+0x2b0/0x2b0 [ 63.458065][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 63.464035][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 63.468867][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 63.474135][ C1] run_timer_softirq+0x63/0xf0 [ 63.478881][ C1] handle_softirqs+0x328/0x820 [ 63.483624][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 63.488455][ C1] ? do_softirq+0x200/0x200 [ 63.492943][ C1] __irq_exit_rcu+0x12f/0x220 [ 63.497602][ C1] ? irq_exit_rcu+0x20/0x20 [ 63.502091][ C1] irq_exit_rcu+0x5/0x20 [ 63.506313][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 63.511927][ C1] [ 63.514843][ C1] [ 63.517760][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 63.523721][ C1] RIP: 0010:sanity+0x0/0x510 [ 63.528293][ C1] Code: e9 7d fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 91 fe ff ff 4c 89 ff e8 9c 04 e3 fd e9 84 fe ff ff 0f 1f 80 00 00 00 00 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 fd 49 be 00 00 00 [ 63.547876][ C1] RSP: 0018:ffffc90002faf738 EFLAGS: 00000206 [ 63.553924][ C1] RAX: ffffffff83da41d6 RBX: 0000000000001000 RCX: ffff88802092d940 [ 63.561878][ C1] RDX: 0000000000000002 RSI: 0000000000001000 RDI: ffffc90002faf9a0 [ 63.569829][ C1] RBP: 0000000000000000 R08: ffff88802092d940 R09: 0000000000000006 [ 63.577778][ C1] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 63.585730][ C1] R13: 0000000000000010 R14: ffffc90002faf9a0 R15: 000000000000e000 [ 63.593687][ C1] ? copy_page_to_iter_pipe+0x106/0x640 [ 63.599225][ C1] ? rcu_lock_release+0x5/0x20 [ 63.603972][ C1] copy_page_to_iter_pipe+0x117/0x640 [ 63.609329][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 63.614340][ C1] copy_page_to_iter+0x7aa/0x910 [ 63.619273][ C1] shmem_file_read_iter+0x401/0xa80 [ 63.624461][ C1] generic_file_splice_read+0x3a2/0x590 [ 63.630002][ C1] ? splice_shrink_spd+0xc0/0xc0 [ 63.634926][ C1] ? common_file_perm+0x171/0x1c0 [ 63.639937][ C1] ? fsnotify_perm+0x254/0x560 [ 63.644687][ C1] splice_direct_to_actor+0x413/0xb50 [ 63.650045][ C1] ? do_splice_direct+0x2c0/0x2c0 [ 63.655157][ C1] ? pipe_to_sendpage+0x310/0x310 [ 63.660180][ C1] ? common_file_perm+0x171/0x1c0 [ 63.665193][ C1] ? fsnotify_perm+0x5d/0x560 [ 63.669867][ C1] ? security_file_permission+0x75/0xa0 [ 63.675414][ C1] do_splice_direct+0x1b9/0x2c0 [ 63.680264][ C1] ? splice_direct_to_actor+0xb50/0xb50 [ 63.685787][ C1] ? __fget_files+0x40f/0x480 [ 63.690451][ C1] ? common_file_perm+0x171/0x1c0 [ 63.695464][ C1] ? fsnotify_perm+0x5d/0x560 [ 63.700123][ C1] ? security_file_permission+0x75/0xa0 [ 63.705650][ C1] do_sendfile+0x5d5/0xec0 [ 63.710057][ C1] ? do_pwritev+0x340/0x340 [ 63.714551][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 63.719568][ C1] __se_sys_sendfile64+0x13b/0x190 [ 63.724664][ C1] ? lock_chain_count+0x20/0x20 [ 63.729502][ C1] ? __x64_sys_sendfile64+0xa0/0xa0 [ 63.734683][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 63.739878][ C1] do_syscall_64+0x4c/0xa0 [ 63.744286][ C1] ? clear_bhb_loop+0x15/0x70 [ 63.748952][ C1] ? clear_bhb_loop+0x15/0x70 [ 63.753610][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.759486][ C1] RIP: 0033:0x7ff2adc76969 [ 63.763883][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.783469][ C1] RSP: 002b:00007ff2aba9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 63.791868][ C1] RAX: ffffffffffffffda RBX: 00007ff2ade9e160 RCX: 00007ff2adc76969 [ 63.799822][ C1] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000007 [ 63.807775][ C1] RBP: 00007ff2adcf8ab1 R08: 0000000000000000 R09: 0000000000000000 [ 63.815749][ C1] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.823703][ C1] R13: 0000000000000001 R14: 00007ff2ade9e160 R15: 00007ffd4a9bb158 [ 63.831662][ C1] [ 63.834847][ C1] Kernel Offset: disabled [ 63.839163][ C1] Rebooting in 86400 seconds..