last executing test programs: 1.795783704s ago: executing program 2 (id=3): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x4c}}, 0x40001) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000001c0), &(0x7f0000000300)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000300)=ANY=[], 0x0) 1.618688s ago: executing program 2 (id=6): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) lseek(r3, 0x4, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0x41, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\"\x00\x00', @ANYRES16=r4, @ANYBLOB="00002cbd7000fbdbdf253500000008000300", @ANYRES32=r5, @ANYBLOB="0c009900ffffff7f6900000014005500d9440195ea55c13c7e7ecb39e0714f40"], 0x3c}, 0x1, 0x0, 0x0, 0x40810}, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500ecffffffffffffff0000000000b7080000000000007b8af8ff00000000b7080400000010007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r8, 0x5, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x44c, &(0x7f0000000c00)="$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") r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000020003000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[], 0x6c}}, 0x880) setxattr$system_posix_acl(0x0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x24, 0x3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 1.40646427s ago: executing program 0 (id=7): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.016280506s ago: executing program 0 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r2, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa01fdff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000ac0)="6cb76def2c36dab0f366cf47ad785ed2fb5e1fa5fb56d566acdc377060c4ba50a58104620df72c3004bfbc77173110e163f7d8ad60c34cdb064852353438fea809e390e392afbf35311690cd8286a6c49668aee29b7537078dba77963d15c085d7343c1012135d361ac15c082b7ac8db87cc10fe3ffc374c8be18fc53437100a11dddb9981072ec036d513870a5bbf62ce9e39f790f61ef997af390b9f5fc8a699e001c59077c459eb40ee80a3ffeb35737da668ef974592faf129325cd9ad0dc5663950a329804c9f5d261f71165b05dac212cc2afc40f980ddef8773f1045e75de4ec606aef87052e9ac784bb0f5a43f9cac5e44ae1a6dd575ce17a4749dc7cd4d7f76a40676e792e5b31a25703b1f35b48a89ed84582ef8f4ac046695f402c25da1fa6bc732a7016edf093b4c31193130b3bc143702e2b1d23743ca797b24495dc4979b81413701c0597dcd5e3bcc9c2050c18cfe03814d358e0f795e990dc44d2c1b9890514bd5ea94a3f3a1e25a8cdc67133e9176d76dc54c31274cff0101d8a42c103bad1b8b57362446f2c2ed8a69daf3d7306ef3fa2015e4ee1ef3392120b82671d73b07f3082ea69ffa0ebc7b53c78862a3e1ece518c1f0abbe4053b4dfafe815c1fe4b0d079446e80d13af972e00644a0188605d7309812e24cd1158677f94a16a5eb0c5d48b60329fc522026efa596ac913540f2a9b0345f279329bfba29a7dfc8894e6a08eeee3dd974c3de9e0602cfd1e3e584b10dd26cd13f7fb432e72ea85fd1d3a872061bc967d7a67a3a7f09f34cc825db5d9ef3ce0ff9873f8eff342eb30fa970007e2f591f07dc9bc5141a9679a2f7c69aa50894353a7830a0f7cf766aff6e81d7c3b88d730946ce3f327716ef6fd270d5bf467aef288db903f740b6ac27b962a3c6462372e63f8da8505f05d17b364dd8c6b5d449accd01b4c6da297669f098bee986b95e389a2d003539ca9dec8c26b9f6bbb5f7fe6f0b764d99bc0dafcad4121ed6a749ac71fc5deeee54d0e8a2d9dccc87df818258d73c8816b78c1be3670fb14dded879caf925e0f8abf63f55ffee02bbffb465f0303338bd12e22fe94fdaa3f033127ecaf41649232c38e83850fd3ebc890ea5db2763a8389ac49bd9b7f6b81f381d3eeb90d0f596e2b7f7dfa2a0e9453c1f5f359b56aae9e97a51f6c092d25a031843e351f5733a25c5905706618ab569359bdca4932f6471f4f2d152f84cfc0c563885b0d93fd015095a8eb9422e3d17ddaf3f20dde5eeea415f76c0617964198c824b98f4d53ab0d4d734dcd6d07dddd5b77c1bd71208632941973bd5b5aca981137ec21dcd86ba518b3d4979b68f704a2a7d7cfeb9be3edf4b4b3560e930d9dba0bc358cba36a129748c1fa73483a69759ba0c4f2ee2a936899e163c213bb3fe5a28e68669fb2da6bbcdf4c55e933d127a8bc68b8d0e6c6c757fe8ea47f26ceb7c1b3ca8b962eb31a081756ed56fe4385dccc5e2a7a53300e9c8a1a55bcf8db3f828cb3db8485110da631a50199a5c1932b5538a2b1c3cddb4451868a413418e3f761530fd477b2ebb449070c73171964203ad7bad4302af13fa6fe55fb88ede096a7aba95ef3665da778250daa9dd4bd5ecb8a807d83fe6dcf2f0cf5de7a4ef742979afd7d93bb2672ad45f6537640313b1ca8838f3fdc08e57455af6398ce5b253312fe1a88206210831e0de59d1e3f9442fb9dd43f1b9c00d151d3234028990f8bcaf65c0ad9ea1bc20e4b7641ff26969b02ccd60d2d8d2d72fe5fd58068cd6d7525c9e24c4246cd776ecf1f57550bb6bddad5093618797547cde5c07e165bc979bfbb5479c58e89c29efa5fdfa5b4a87917a4275609afc849384458ca980ba5a2aa4d10c761bb3b3a57e3d3b41001cdf6", 0x541}], 0x1}}], 0x2, 0x0) 890.067188ms ago: executing program 0 (id=9): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af144ca5418ad9fa255600"}, 0x48, 0xffffffffffffffff) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x81) vmsplice(r2, &(0x7f0000000040), 0x100000000000000c, 0x6) 804.881856ms ago: executing program 0 (id=10): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 628.341252ms ago: executing program 0 (id=11): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, 0x0}, 0x20) 613.712933ms ago: executing program 0 (id=12): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0x158, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x33, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {0x0, 0x0, 0x994}, 0x70bd2c, 0x3501, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @etimer_thresh={0x8, 0xc, 0x2}]}, 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 278.838684ms ago: executing program 3 (id=4): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x332b, &(0x7f0000000400)={0x0, 0x6854, 0x800, 0x5, 0x39}, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, 0x0, 0x1) 92.818131ms ago: executing program 2 (id=13): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) bind$can_raw(r0, &(0x7f0000000080)={0x1d, 0x0, 0x16000000}, 0x10) 92.616401ms ago: executing program 3 (id=14): timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e028008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) timer_settime(r0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 4 (id=5): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) unshare(0x2a000600) unshare(0x62040200) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180), 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x449395e6eaaab2a1, 0x12, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 56.597602][ T4170] cgroup: Unknown subsys name 'net' [ 56.731686][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.229728][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.796436][ T4180] chnl_net:caif_netlink_parms(): no params data found [ 59.937946][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 59.963949][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.971964][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.980334][ T4180] device bridge_slave_0 entered promiscuous mode [ 60.019756][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 60.029848][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.037424][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.046139][ T4180] device bridge_slave_1 entered promiscuous mode [ 60.094624][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 60.139622][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.179161][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.204795][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.212482][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.221149][ T4189] device bridge_slave_0 entered promiscuous mode [ 60.242710][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 60.251741][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.259414][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.267860][ T4189] device bridge_slave_1 entered promiscuous mode [ 60.286065][ T4180] team0: Port device team_slave_0 added [ 60.315391][ T4180] team0: Port device team_slave_1 added [ 60.332296][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.339862][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.348926][ T4181] device bridge_slave_0 entered promiscuous mode [ 60.379078][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.389617][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.397510][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.405301][ T4181] device bridge_slave_1 entered promiscuous mode [ 60.431845][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.448009][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.455211][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.464252][ T4183] device bridge_slave_0 entered promiscuous mode [ 60.472609][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.480097][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.506799][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.536375][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.551912][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.560686][ T4183] device bridge_slave_1 entered promiscuous mode [ 60.568377][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.575347][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.603340][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.627325][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.638888][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.674983][ T4189] team0: Port device team_slave_0 added [ 60.713677][ T4189] team0: Port device team_slave_1 added [ 60.730426][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.744227][ T4180] device hsr_slave_0 entered promiscuous mode [ 60.751849][ T4180] device hsr_slave_1 entered promiscuous mode [ 60.759392][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.766805][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.774864][ T4182] device bridge_slave_0 entered promiscuous mode [ 60.791616][ T4181] team0: Port device team_slave_0 added [ 60.799809][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.823062][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.830849][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.839366][ T4182] device bridge_slave_1 entered promiscuous mode [ 60.856327][ T4181] team0: Port device team_slave_1 added [ 60.884555][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.891986][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.918937][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.932302][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.939661][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.967023][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.994517][ T4183] team0: Port device team_slave_0 added [ 61.002948][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.016934][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.037938][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.045027][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.071958][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.093339][ T4183] team0: Port device team_slave_1 added [ 61.115521][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.122978][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.149869][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.197114][ T4182] team0: Port device team_slave_0 added [ 61.212839][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.219914][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.248797][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.269680][ T4182] team0: Port device team_slave_1 added [ 61.282998][ T4189] device hsr_slave_0 entered promiscuous mode [ 61.290136][ T4189] device hsr_slave_1 entered promiscuous mode [ 61.296855][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.304650][ T4189] Cannot create hsr debugfs directory [ 61.311740][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.319049][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.345915][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.397671][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.404912][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.432524][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.470034][ T4181] device hsr_slave_0 entered promiscuous mode [ 61.477380][ T4181] device hsr_slave_1 entered promiscuous mode [ 61.484240][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.492340][ T4181] Cannot create hsr debugfs directory [ 61.498551][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.506059][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.533003][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.549798][ T4184] Bluetooth: hci3: command 0x0409 tx timeout [ 61.555820][ T4187] Bluetooth: hci2: command 0x0409 tx timeout [ 61.562525][ T4187] Bluetooth: hci0: command 0x0409 tx timeout [ 61.568912][ T4187] Bluetooth: hci1: command 0x0409 tx timeout [ 61.578892][ T4183] device hsr_slave_0 entered promiscuous mode [ 61.586198][ T4183] device hsr_slave_1 entered promiscuous mode [ 61.592951][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.601018][ T4183] Cannot create hsr debugfs directory [ 61.629796][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 61.703779][ T4182] device hsr_slave_0 entered promiscuous mode [ 61.711181][ T4182] device hsr_slave_1 entered promiscuous mode [ 61.718423][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.726231][ T4182] Cannot create hsr debugfs directory [ 61.934742][ T4180] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.947094][ T4180] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.957407][ T4180] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.969459][ T4180] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.034176][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.044482][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.060709][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.070062][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.115490][ T4181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.137426][ T4181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.147136][ T4181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.170255][ T4181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.240678][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.250908][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.262275][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.294597][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.308219][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.338682][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.361039][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.378937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.390238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.399352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.408236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.429818][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.442524][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.455407][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.465295][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.474731][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.482173][ T4228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.491593][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.501679][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.513032][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.521259][ T4228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.530319][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.540258][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.551400][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.570386][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.580543][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.590168][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.597386][ T4228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.616314][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.626043][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.634483][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.662621][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.673927][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.685250][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.694417][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.718311][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.728108][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.737993][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.748813][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.757002][ T4228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.765191][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.775233][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.802383][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.812354][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.822043][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.832964][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.845265][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.854728][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.877064][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.893715][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.906716][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.919315][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.928003][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.937529][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.947343][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.956362][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.964100][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.973267][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.983440][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.992670][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.001996][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.011287][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.021035][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.056956][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.068997][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.078741][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.086140][ T4228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.096651][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.105421][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.115227][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.122538][ T4228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.130679][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.140349][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.150076][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.164592][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.189925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.207692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.223398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.247607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.258065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.275390][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.303620][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.319122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.332812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.344372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.357458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.383912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.393666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.405641][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.413024][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.422347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.431688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.440942][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.448065][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.456478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.464167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.484448][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.497174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.507680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.520519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.531484][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.547541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.572136][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.590671][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.614369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.629829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.636160][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 63.666758][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 63.673079][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 63.674765][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.680756][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 63.696463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.704609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.713719][ T4262] Bluetooth: hci4: command 0x041b tx timeout [ 63.720844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.729088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.738387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.747665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.757064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.766333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.774690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.783737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.791946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.802694][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.832922][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.850859][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.863152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.879718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.906271][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.920320][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.937185][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.950777][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.959427][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.969050][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.977990][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.985600][ T4228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.006723][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.015556][ T4189] device veth0_vlan entered promiscuous mode [ 64.025111][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.041815][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.052778][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.067830][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.075398][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.103866][ T4180] device veth0_vlan entered promiscuous mode [ 64.139648][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.151858][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.163261][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.173416][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.184364][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.191715][ T4228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.201678][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.210633][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.219931][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.228854][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.240259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.250479][ T4189] device veth1_vlan entered promiscuous mode [ 64.263426][ T4180] device veth1_vlan entered promiscuous mode [ 64.301161][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.310537][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.320268][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.328741][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.338387][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.347869][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.357228][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.364838][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.376320][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.384676][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.402047][ T4181] device veth0_vlan entered promiscuous mode [ 64.413557][ T4189] device veth0_macvtap entered promiscuous mode [ 64.424000][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.439510][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.448344][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.458893][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.468793][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.480393][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.489641][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.499288][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.518885][ T4189] device veth1_macvtap entered promiscuous mode [ 64.539001][ T4181] device veth1_vlan entered promiscuous mode [ 64.550079][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.559888][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.571698][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.581235][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.600419][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.612435][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.639609][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.650743][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.664034][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.673970][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.685208][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.698484][ T4180] device veth0_macvtap entered promiscuous mode [ 64.713564][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.737136][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.747378][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.764616][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.780187][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.790196][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.802300][ T4180] device veth1_macvtap entered promiscuous mode [ 64.815825][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.854438][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.864027][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.879301][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.889306][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.898774][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.908487][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.933804][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.948623][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.960326][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.969603][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.979468][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.990668][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.999745][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.020867][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.030786][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.042536][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.053576][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.068050][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.093448][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.105609][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.115096][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.124240][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.141166][ T4180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.150868][ T4180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.160839][ T4180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.170066][ T4180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.196191][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.204719][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.214933][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.223789][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.233849][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.242444][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.253053][ T4181] device veth0_macvtap entered promiscuous mode [ 65.261870][ T4183] device veth0_vlan entered promiscuous mode [ 65.288087][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.311505][ T4181] device veth1_macvtap entered promiscuous mode [ 65.355639][ T4183] device veth1_vlan entered promiscuous mode [ 65.388847][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.398741][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.409158][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.421085][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.430294][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.441778][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.452111][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.463326][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.474989][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.487262][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.499034][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.546184][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.555063][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.576653][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.588689][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.599341][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.611260][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.622750][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.642644][ T4182] device veth0_vlan entered promiscuous mode [ 65.646491][ T418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.660702][ T418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.660910][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.682342][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.686230][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.698960][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.707841][ T4248] Bluetooth: hci3: command 0x040f tx timeout [ 65.714533][ T4248] Bluetooth: hci2: command 0x040f tx timeout [ 65.721071][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.725755][ T4248] Bluetooth: hci0: command 0x040f tx timeout [ 65.736823][ T4248] Bluetooth: hci1: command 0x040f tx timeout [ 65.739774][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.754654][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.763933][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.772627][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.781783][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.791538][ T4248] Bluetooth: hci4: command 0x040f tx timeout [ 65.810893][ T4181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.820936][ T4181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.830517][ T4181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.840989][ T4181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.855436][ T4182] device veth1_vlan entered promiscuous mode [ 65.870771][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.880491][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.888995][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.903966][ T4183] device veth0_macvtap entered promiscuous mode [ 65.924593][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.932837][ T4228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.932937][ T4228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.935082][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.961191][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.975031][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.983512][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.995207][ T4183] device veth1_macvtap entered promiscuous mode [ 66.010469][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.065389][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.085472][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.096422][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.107884][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.118256][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.129170][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.142650][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.156430][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.165109][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.175221][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.200287][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.219914][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.237640][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.249428][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.260713][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.273693][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.285619][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.315209][ T4182] device veth0_macvtap entered promiscuous mode [ 66.342119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.366869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.388154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.399531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.419203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.433029][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.452857][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.463838][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.479927][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.507846][ T4182] device veth1_macvtap entered promiscuous mode [ 66.534843][ T26] audit: type=1326 audit(1767342901.126:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd025cf6749 code=0x7ffc0000 [ 66.561435][ T26] audit: type=1326 audit(1767342901.136:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd025cf6749 code=0x7ffc0000 [ 66.574099][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.624992][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.646023][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.664472][ T26] audit: type=1326 audit(1767342901.156:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd025cf6749 code=0x7ffc0000 [ 66.689297][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.702810][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.714022][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.720202][ T4306] loop2: detected capacity change from 0 to 512 [ 66.726375][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.738328][ T26] audit: type=1326 audit(1767342901.156:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd025cf6749 code=0x7ffc0000 [ 66.742576][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.768216][ T26] audit: type=1326 audit(1767342901.156:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd025cf6749 code=0x7ffc0000 [ 66.797695][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.826418][ T4228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.834719][ T4228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.849393][ T26] audit: type=1326 audit(1767342901.156:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd025cf6749 code=0x7ffc0000 [ 66.850738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.909490][ T26] audit: type=1326 audit(1767342901.156:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd025cf6749 code=0x7ffc0000 [ 66.925132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.939556][ T4306] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 66.963282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.988472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.006139][ T26] audit: type=1326 audit(1767342901.156:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd025cf6749 code=0x7ffc0000 [ 67.038619][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.060135][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.076918][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.087969][ T4306] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.099014][ T26] audit: type=1326 audit(1767342901.156:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd025cf6749 code=0x7ffc0000 [ 67.129865][ T26] audit: type=1326 audit(1767342901.156:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd025cf6749 code=0x7ffc0000 [ 67.147039][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.168854][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.194283][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.214729][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.234113][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.246401][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.276307][ T4306] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 67.288107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.304032][ T4306] EXT4-fs (loop2): 1 truncate cleaned up [ 67.315917][ T4306] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 67.325268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.395146][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.418898][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.431864][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.444457][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.512773][ T418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.576562][ T418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.620922][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.634085][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.643008][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.689053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.723582][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.774129][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.784131][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.794732][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 67.804534][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 67.825624][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.838638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.838756][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.846415][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.865423][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 67.888223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.896440][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 67.917284][ T4248] Bluetooth: hci4: command 0x0419 tx timeout [ 67.931825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.025766][ C0] ------------[ cut here ]------------ [ 68.026595][ C0] [ 68.026601][ C0] ====================================================== [ 68.026606][ C0] WARNING: possible circular locking dependency detected [ 68.026611][ C0] syzkaller #0 Not tainted [ 68.026619][ C0] ------------------------------------------------------ [ 68.026624][ C0] syz-executor/4183 is trying to acquire lock: [ 68.026632][ C0] ffffffff8c111180 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60 [ 68.026676][ C0] [ 68.026676][ C0] but task is already holding lock: [ 68.026680][ C0] ffff8880b902a258 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x5ff/0xc40 [ 68.026718][ C0] [ 68.026718][ C0] which lock already depends on the new lock. [ 68.026718][ C0] [ 68.026722][ C0] [ 68.026722][ C0] the existing dependency chain (in reverse order) is: [ 68.026727][ C0] [ 68.026727][ C0] -> #6 (hrtimer_bases.lock){-.-.}-{2:2}: [ 68.026748][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 68.026764][ C0] hrtimer_start_range_ns+0xff/0xc20 [ 68.026779][ C0] enqueue_task_rt+0x60c/0xc00 [ 68.026793][ C0] enqueue_task+0x182/0x2b0 [ 68.026808][ C0] __sched_setscheduler+0x1379/0x1be0 [ 68.026824][ C0] sched_set_fifo+0xbc/0x120 [ 68.026839][ C0] drm_vblank_worker_init+0x149/0x1a0 [ 68.026855][ C0] drm_vblank_init+0x265/0x330 [ 68.026871][ C0] vkms_init+0x31a/0x700 [ 68.026886][ C0] do_one_initcall+0x1ee/0x680 [ 68.026901][ C0] do_initcall_level+0x137/0x1f0 [ 68.026915][ C0] do_initcalls+0x4b/0x90 [ 68.026927][ C0] kernel_init_freeable+0x3ce/0x560 [ 68.026939][ C0] kernel_init+0x19/0x1b0 [ 68.026951][ C0] ret_from_fork+0x1f/0x30 [ 68.026965][ C0] [ 68.026965][ C0] -> #5 (&rt_b->rt_runtime_lock){-...}-{2:2}: [ 68.026986][ C0] _raw_spin_lock+0x2a/0x40 [ 68.026999][ C0] rq_online_rt+0x125/0x310 [ 68.027010][ C0] sched_cpu_activate+0x4ae/0x650 [ 68.027023][ C0] cpuhp_invoke_callback+0x431/0x830 [ 68.027039][ C0] cpuhp_thread_fun+0x39a/0x7d0 [ 68.027052][ C0] smpboot_thread_fn+0x4f6/0x970 [ 68.027066][ C0] kthread+0x436/0x520 [ 68.027077][ C0] ret_from_fork+0x1f/0x30 [ 68.027089][ C0] [ 68.027089][ C0] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 68.027108][ C0] _raw_spin_lock_nested+0x2e/0x40 [ 68.027121][ C0] raw_spin_rq_lock_nested+0x26/0x140 [ 68.027134][ C0] task_fork_fair+0x5c/0x350 [ 68.027144][ C0] sched_cgroup_fork+0x2c6/0x320 [ 68.027157][ C0] copy_process+0x22d1/0x3e00 [ 68.027168][ C0] kernel_clone+0x219/0x930 [ 68.027178][ C0] kernel_thread+0xc8/0x120 [ 68.027188][ C0] rest_init+0x21/0x330 [ 68.027196][ C0] start_kernel+0x486/0x530 [ 68.027207][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 68.027222][ C0] [ 68.027222][ C0] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 68.027243][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 68.027257][ C0] try_to_wake_up+0x5c/0x1050 [ 68.027271][ C0] __wake_up_common+0x2a4/0x4e0 [ 68.027286][ C0] __wake_up+0x108/0x180 [ 68.027298][ C0] tty_port_default_wakeup+0xa5/0xf0 [ 68.027309][ C0] serial8250_tx_chars+0x629/0x830 [ 68.027321][ C0] serial8250_handle_irq+0x519/0x610 [ 68.027335][ C0] serial8250_default_handle_irq+0xb4/0x1a0 [ 68.027350][ C0] serial8250_interrupt+0x9b/0x1c0 [ 68.027364][ C0] __handle_irq_event_percpu+0x291/0x9b0 [ 68.027379][ C0] handle_irq_event+0xa5/0x220 [ 68.027393][ C0] handle_edge_irq+0x243/0xb20 [ 68.027408][ C0] __common_interrupt+0xd7/0x1e0 [ 68.027422][ C0] common_interrupt+0xb0/0xd0 [ 68.027437][ C0] asm_common_interrupt+0x22/0x40 [ 68.027452][ C0] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 68.027466][ C0] __wake_up_sync_key+0x11b/0x180 [ 68.027482][ C0] sock_def_readable+0x136/0x250 [ 68.027497][ C0] netlink_sendskb+0x97/0x130 [ 68.027523][ C0] netlink_sendmsg+0x8ab/0xbc0 [ 68.027537][ C0] ____sys_sendmsg+0x5a2/0x8c0 [ 68.027550][ C0] ___sys_sendmsg+0x1f0/0x260 [ 68.027563][ C0] __se_sys_sendmsg+0x190/0x250 [ 68.027576][ C0] do_syscall_64+0x4c/0xa0 [ 68.027591][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.027606][ C0] [ 68.027606][ C0] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 68.027629][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 68.027642][ C0] __wake_up+0xed/0x180 [ 68.027656][ C0] tty_port_default_wakeup+0xa5/0xf0 [ 68.027671][ C0] serial8250_tx_chars+0x629/0x830 [ 68.027686][ C0] serial8250_handle_irq+0x519/0x610 [ 68.027701][ C0] serial8250_default_handle_irq+0xb4/0x1a0 [ 68.027717][ C0] serial8250_interrupt+0x9b/0x1c0 [ 68.027732][ C0] __handle_irq_event_percpu+0x291/0x9b0 [ 68.027746][ C0] handle_irq_event+0xa5/0x220 [ 68.027758][ C0] handle_edge_irq+0x243/0xb20 [ 68.027773][ C0] __common_interrupt+0xd7/0x1e0 [ 68.027787][ C0] common_interrupt+0xb0/0xd0 [ 68.027801][ C0] asm_common_interrupt+0x22/0x40 [ 68.027816][ C0] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 68.027830][ C0] uart_write+0x62f/0x880 [ 68.027843][ C0] n_tty_write+0xd21/0x1210 [ 68.027856][ C0] file_tty_write+0x557/0x910 [ 68.027872][ C0] vfs_write+0x712/0xd00 [ 68.027885][ C0] ksys_write+0x14d/0x250 [ 68.027897][ C0] do_syscall_64+0x4c/0xa0 [ 68.027912][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.027926][ C0] [ 68.027926][ C0] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 68.027948][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 68.027962][ C0] serial8250_console_write+0x170/0xf80 [ 68.027978][ C0] console_unlock+0xc86/0x1200 [ 68.027991][ C0] vprintk_emit+0xc0/0x150 [ 68.028007][ C0] _printk+0xcc/0x110 [ 68.028020][ C0] register_console+0x682/0x960 [ 68.028033][ C0] univ8250_console_init+0x41/0x50 [ 68.028047][ C0] console_init+0x177/0x5d0 [ 68.028062][ C0] start_kernel+0x2f9/0x530 [ 68.028074][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 68.028090][ C0] [ 68.028090][ C0] -> #0 (console_owner){-...}-{0:0}: [ 68.028111][ C0] __lock_acquire+0x2c33/0x7c60 [ 68.028127][ C0] lock_acquire+0x197/0x3f0 [ 68.028142][ C0] console_lock_spinning_enable+0x51/0x60 [ 68.028156][ C0] console_unlock+0x9f8/0x1200 [ 68.028167][ C0] vprintk_emit+0xc0/0x150 [ 68.028181][ C0] _printk+0xcc/0x110 [ 68.028192][ C0] report_bug+0x1e5/0x2e0 [ 68.028208][ C0] handle_bug+0x3a/0x70 [ 68.028220][ C0] exc_invalid_op+0x16/0x40 [ 68.028234][ C0] asm_exc_invalid_op+0x16/0x20 [ 68.028248][ C0] copy_from_user_nofault+0x160/0x1c0 [ 68.028264][ C0] bpf_probe_read_user+0x26/0x70 [ 68.028280][ C0] bpf_prog_26fc836ad493b19c+0x3d/0xdc4 [ 68.028313][ C0] bpf_trace_run2+0x15b/0x2d0 [ 68.028326][ C0] enqueue_hrtimer+0x314/0x370 [ 68.028342][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 68.028358][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 68.028374][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 68.028388][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 68.028405][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 68.028421][ C0] lock_release+0x584/0x870 [ 68.028436][ C0] uprobe_end_dup_mmap+0x17/0x130 [ 68.028448][ C0] copy_mm+0xf65/0x1380 [ 68.028460][ C0] copy_process+0x17c6/0x3e00 [ 68.028474][ C0] kernel_clone+0x219/0x930 [ 68.028487][ C0] __x64_sys_clone+0x170/0x1c0 [ 68.028509][ C0] do_syscall_64+0x4c/0xa0 [ 68.028522][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.028537][ C0] [ 68.028537][ C0] other info that might help us debug this: [ 68.028537][ C0] [ 68.028542][ C0] Chain exists of: [ 68.028542][ C0] console_owner --> &rt_b->rt_runtime_lock --> hrtimer_bases.lock [ 68.028542][ C0] [ 68.028568][ C0] Possible unsafe locking scenario: [ 68.028568][ C0] [ 68.028572][ C0] CPU0 CPU1 [ 68.028576][ C0] ---- ---- [ 68.028580][ C0] lock(hrtimer_bases.lock); [ 68.028590][ C0] lock(&rt_b->rt_runtime_lock); [ 68.028601][ C0] lock(hrtimer_bases.lock); [ 68.028612][ C0] lock(console_owner); [ 68.028622][ C0] [ 68.028622][ C0] *** DEADLOCK *** [ 68.028622][ C0] [ 68.028625][ C0] 3 locks held by syz-executor/4183: [ 68.028635][ C0] #0: ffff8880b902a258 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x5ff/0xc40 [ 68.028677][ C0] #1: ffffffff8c11c720 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 68.028714][ C0] #2: ffffffff8c111260 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa7/0x150 [ 68.028752][ C0] [ 68.028752][ C0] stack backtrace: [ 68.028756][ C0] CPU: 0 PID: 4183 Comm: syz-executor Not tainted syzkaller #0 [ 68.028772][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.028780][ C0] Call Trace: [ 68.028786][ C0] [ 68.028792][ C0] dump_stack_lvl+0x168/0x230 [ 68.028808][ C0] ? load_image+0x3b0/0x3b0 [ 68.028823][ C0] ? show_regs_print_info+0x20/0x20 [ 68.028843][ C0] ? print_circular_bug+0x12b/0x1a0 [ 68.028859][ C0] check_noncircular+0x274/0x310 [ 68.028876][ C0] ? add_chain_block+0x940/0x940 [ 68.028889][ C0] ? lockdep_lock+0xdc/0x1e0 [ 68.028910][ C0] ? mark_lock+0x94/0x320 [ 68.028928][ C0] __lock_acquire+0x2c33/0x7c60 [ 68.028956][ C0] ? verify_lock_unused+0x140/0x140 [ 68.028981][ C0] ? sprintf+0xd6/0x120 [ 68.029001][ C0] lock_acquire+0x197/0x3f0 [ 68.029018][ C0] ? console_lock_spinning_enable+0x2c/0x60 [ 68.029034][ C0] ? prb_read_valid+0x60/0x60 [ 68.029051][ C0] ? read_lock_is_recursive+0x10/0x10 [ 68.029068][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 68.029084][ C0] ? __rwlock_init+0x140/0x140 [ 68.029100][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 68.029116][ C0] console_lock_spinning_enable+0x51/0x60 [ 68.029131][ C0] ? console_lock_spinning_enable+0x2c/0x60 [ 68.029145][ C0] console_unlock+0x9f8/0x1200 [ 68.029163][ C0] ? console_trylock_spinning+0x350/0x350 [ 68.029183][ C0] ? __down_trylock_console_sem+0x184/0x1e0 [ 68.029198][ C0] ? vprintk_emit+0xa7/0x150 [ 68.029215][ C0] ? printk_parse_prefix+0x330/0x330 [ 68.029232][ C0] ? vprintk_emit+0xa7/0x150 [ 68.029249][ C0] ? console_trylock+0x70/0x70 [ 68.029261][ C0] ? free_old_xmit_skbs+0x111/0x2a0 [ 68.029278][ C0] ? __napi_poll+0xc0/0x430 [ 68.029291][ C0] ? net_rx_action+0x4a8/0x9c0 [ 68.029305][ C0] ? handle_softirqs+0x328/0x820 [ 68.029320][ C0] ? mark_lock+0x94/0x320 [ 68.029340][ C0] ? vprintk_emit+0x150/0x150 [ 68.029364][ C0] vprintk_emit+0xc0/0x150 [ 68.029383][ C0] _printk+0xcc/0x110 [ 68.029397][ C0] ? verify_lock_unused+0x140/0x140 [ 68.029417][ C0] ? load_image+0x3b0/0x3b0 [ 68.029432][ C0] ? verify_lock_unused+0x140/0x140 [ 68.029450][ C0] ? find_bug+0xa1/0x350 [ 68.029465][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 68.029482][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 68.029508][ C0] report_bug+0x1e5/0x2e0 [ 68.029528][ C0] handle_bug+0x3a/0x70 [ 68.029544][ C0] exc_invalid_op+0x16/0x40 [ 68.029560][ C0] asm_exc_invalid_op+0x16/0x20 [ 68.029575][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 68.029594][ C0] Code: 24 45 31 f6 31 ff 89 de e8 0d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 90 f2 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 68.029607][ C0] RSP: 0018:ffffc90000007ba0 EFLAGS: 00010006 [ 68.029621][ C0] RAX: ffffffff819ed980 RBX: 0000000000000000 RCX: ffff88807a04bb80 [ 68.029632][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.029643][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff5419 [ 68.029653][ C0] R10: fffffbfff1ff5419 R11: 1ffffffff1ff5418 R12: ffff88807a04d308 [ 68.029665][ C0] R13: dffffc0000000000 R14: ffffc90000007c08 R15: 000000000028e000 [ 68.029679][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 68.029701][ C0] bpf_probe_read_user+0x26/0x70 [ 68.029719][ C0] bpf_prog_26fc836ad493b19c+0x3d/0xdc4 [ 68.029734][ C0] bpf_trace_run2+0x15b/0x2d0 [ 68.029748][ C0] ? posix_cpu_timers_work+0x1120/0x1120 [ 68.029766][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 68.029781][ C0] ? debug_object_activate+0x2d2/0x480 [ 68.029799][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 68.029817][ C0] enqueue_hrtimer+0x314/0x370 [ 68.029836][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 68.029856][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 68.029878][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 68.029895][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 68.029914][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 68.029942][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 68.029958][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 68.029976][ C0] [ 68.029981][ C0] [ 68.029986][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 68.030003][ C0] RIP: 0010:lock_release+0x584/0x870 [ 68.030021][ C0] Code: 00 00 00 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 75 75 f7 44 24 50 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 66 43 c7 44 2f 09 00 00 43 c6 44 2f 0b 00 [ 68.030033][ C0] RSP: 0018:ffffc90002f0f820 EFLAGS: 00000206 [ 68.030045][ C0] RAX: 0000000000000001 RBX: ffffffffffffffff RCX: 0ebb1b2904ec4c00 [ 68.030056][ C0] RDX: 0000000000000000 RSI: ffffffff8a0b2e80 RDI: ffffffff8a59e800 [ 68.030067][ C0] RBP: ffffc90002f0f940 R08: dffffc0000000000 R09: fffffbfff1ad26b6 [ 68.030078][ C0] R10: fffffbfff1ad26b6 R11: 1ffffffff1ad26b5 R12: ffff88807a04c670 [ 68.030090][ C0] R13: dffffc0000000000 R14: ffff88807a04c660 R15: 1ffff920005e1f10 [ 68.030109][ C0] ? copy_mm+0xf65/0x1380 [ 68.030126][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 68.030145][ C0] ? flush_tlb_multi+0x50/0x50 [ 68.030160][ C0] ? preempt_count_add+0x8d/0x190 [ 68.030176][ C0] ? up_write+0x1bb/0x420 [ 68.030194][ C0] uprobe_end_dup_mmap+0x17/0x130 [ 68.030209][ C0] copy_mm+0xf65/0x1380 [ 68.030230][ C0] ? copy_signal+0x640/0x640 [ 68.030246][ C0] ? __init_rwsem+0x11e/0x160 [ 68.030263][ C0] ? copy_signal+0x537/0x640 [ 68.030279][ C0] copy_process+0x17c6/0x3e00 [ 68.030306][ C0] ? __pidfd_prepare+0x140/0x140 [ 68.030323][ C0] ? verify_lock_unused+0x140/0x140 [ 68.030341][ C0] ? _raw_spin_unlock+0x24/0x40 [ 68.030354][ C0] ? finish_fault+0x54b/0x8d0 [ 68.030370][ C0] kernel_clone+0x219/0x930 [ 68.030386][ C0] ? create_io_thread+0x130/0x130 [ 68.030406][ C0] ? __context_tracking_exit+0x4c/0x80 [ 68.030426][ C0] __x64_sys_clone+0x170/0x1c0 [ 68.030443][ C0] ? __ia32_sys_vfork+0xf0/0xf0 [ 68.030465][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 68.030484][ C0] do_syscall_64+0x4c/0xa0 [ 68.030507][ C0] ? clear_bhb_loop+0x30/0x80 [ 68.030522][ C0] ? clear_bhb_loop+0x30/0x80 [ 68.030543][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.030560][ C0] RIP: 0033:0x7f63c4988e93 [ 68.030574][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 68.030586][ C0] RSP: 002b:00007ffcd3229088 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 68.030602][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f63c4988e93 [ 68.030613][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 68.030622][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 68.030631][ C0] R10: 000055556b2b07d0 R11: 0000000000000246 R12: 0000000000000000 [ 68.030642][ C0] R13: 00007f63c4bb7280 R14: 0000000000000003 R15: 00007ffcd3229220 [ 68.030659][ C0] [ 69.639844][ C0] WARNING: CPU: 0 PID: 4183 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 69.649164][ C0] Modules linked in: [ 69.653444][ C0] CPU: 0 PID: 4183 Comm: syz-executor Not tainted syzkaller #0 [ 69.661069][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.671768][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 69.678025][ C0] Code: 24 45 31 f6 31 ff 89 de e8 0d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 90 f2 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 69.698774][ C0] RSP: 0018:ffffc90000007ba0 EFLAGS: 00010006 [ 69.705017][ C0] RAX: ffffffff819ed980 RBX: 0000000000000000 RCX: ffff88807a04bb80 [ 69.713433][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.721770][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff5419 [ 69.730086][ C0] R10: fffffbfff1ff5419 R11: 1ffffffff1ff5418 R12: ffff88807a04d308 [ 69.738451][ C0] R13: dffffc0000000000 R14: ffffc90000007c08 R15: 000000000028e000 [ 69.746774][ C0] FS: 000055556b2b0500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 69.757014][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.763687][ C0] CR2: 00007ffcd329f910 CR3: 0000000062d18000 CR4: 00000000003506f0 [ 69.771753][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.779896][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.788123][ C0] Call Trace: [ 69.791400][ C0] [ 69.794337][ C0] bpf_probe_read_user+0x26/0x70 [ 69.799543][ C0] bpf_prog_26fc836ad493b19c+0x3d/0xdc4 [ 69.805268][ C0] bpf_trace_run2+0x15b/0x2d0 [ 69.809938][ C0] ? posix_cpu_timers_work+0x1120/0x1120 [ 69.815570][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 69.820503][ C0] ? debug_object_activate+0x2d2/0x480 [ 69.825962][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 69.831420][ C0] enqueue_hrtimer+0x314/0x370 [ 69.836347][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 69.841574][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 69.847206][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 69.852590][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 69.858792][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 69.864140][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 69.870429][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 69.876161][ C0] [ 69.879089][ C0] [ 69.882098][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 69.888160][ C0] RIP: 0010:lock_release+0x584/0x870 [ 69.893446][ C0] Code: 00 00 00 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 75 75 f7 44 24 50 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 66 43 c7 44 2f 09 00 00 43 c6 44 2f 0b 00 [ 69.913491][ C0] RSP: 0018:ffffc90002f0f820 EFLAGS: 00000206 [ 69.919647][ C0] RAX: 0000000000000001 RBX: ffffffffffffffff RCX: 0ebb1b2904ec4c00 [ 69.927994][ C0] RDX: 0000000000000000 RSI: ffffffff8a0b2e80 RDI: ffffffff8a59e800 [ 69.935990][ C0] RBP: ffffc90002f0f940 R08: dffffc0000000000 R09: fffffbfff1ad26b6 [ 69.944216][ C0] R10: fffffbfff1ad26b6 R11: 1ffffffff1ad26b5 R12: ffff88807a04c670 [ 69.952562][ C0] R13: dffffc0000000000 R14: ffff88807a04c660 R15: 1ffff920005e1f10 [ 69.960915][ C0] ? copy_mm+0xf65/0x1380 [ 69.965460][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 69.970661][ C0] ? flush_tlb_multi+0x50/0x50 [ 69.975601][ C0] ? preempt_count_add+0x8d/0x190 [ 69.980748][ C0] ? up_write+0x1bb/0x420 [ 69.985254][ C0] uprobe_end_dup_mmap+0x17/0x130 [ 69.990273][ C0] copy_mm+0xf65/0x1380 [ 69.994510][ C0] ? copy_signal+0x640/0x640 [ 69.999144][ C0] ? __init_rwsem+0x11e/0x160 [ 70.004001][ C0] ? copy_signal+0x537/0x640 [ 70.008607][ C0] copy_process+0x17c6/0x3e00 [ 70.013485][ C0] ? __pidfd_prepare+0x140/0x140 [ 70.018617][ C0] ? verify_lock_unused+0x140/0x140 [ 70.023999][ C0] ? _raw_spin_unlock+0x24/0x40 [ 70.028957][ C0] ? finish_fault+0x54b/0x8d0 [ 70.033978][ C0] kernel_clone+0x219/0x930 [ 70.038575][ C0] ? create_io_thread+0x130/0x130 [ 70.043691][ C0] ? __context_tracking_exit+0x4c/0x80 [ 70.049322][ C0] __x64_sys_clone+0x170/0x1c0 [ 70.054263][ C0] ? __ia32_sys_vfork+0xf0/0xf0 [ 70.059209][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 70.064623][ C0] do_syscall_64+0x4c/0xa0 [ 70.069322][ C0] ? clear_bhb_loop+0x30/0x80 [ 70.074098][ C0] ? clear_bhb_loop+0x30/0x80 [ 70.078855][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.084843][ C0] RIP: 0033:0x7f63c4988e93 [ 70.089263][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 70.109307][ C0] RSP: 002b:00007ffcd3229088 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 70.117933][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f63c4988e93 [ 70.126000][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 70.134430][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 70.142514][ C0] R10: 000055556b2b07d0 R11: 0000000000000246 R12: 0000000000000000 [ 70.150923][ C0] R13: 00007f63c4bb7280 R14: 0000000000000003 R15: 00007ffcd3229220 [ 70.158900][ C0] [ 70.161915][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 70.169409][ C0] CPU: 0 PID: 4183 Comm: syz-executor Not tainted syzkaller #0 [ 70.177456][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.187876][ C0] Call Trace: [ 70.191172][ C0] [ 70.194374][ C0] dump_stack_lvl+0x168/0x230 [ 70.199050][ C0] ? show_regs_print_info+0x20/0x20 [ 70.204417][ C0] ? load_image+0x3b0/0x3b0 [ 70.209045][ C0] panic+0x2c9/0x7f0 [ 70.213038][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 70.217625][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 70.223449][ C0] __warn+0x248/0x2b0 [ 70.227424][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 70.233058][ C0] report_bug+0x1b7/0x2e0 [ 70.237529][ C0] handle_bug+0x3a/0x70 [ 70.241689][ C0] exc_invalid_op+0x16/0x40 [ 70.246194][ C0] asm_exc_invalid_op+0x16/0x20 [ 70.251128][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 70.257388][ C0] Code: 24 45 31 f6 31 ff 89 de e8 0d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 90 f2 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 70.277533][ C0] RSP: 0018:ffffc90000007ba0 EFLAGS: 00010006 [ 70.283684][ C0] RAX: ffffffff819ed980 RBX: 0000000000000000 RCX: ffff88807a04bb80 [ 70.291736][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.299961][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff5419 [ 70.308101][ C0] R10: fffffbfff1ff5419 R11: 1ffffffff1ff5418 R12: ffff88807a04d308 [ 70.316240][ C0] R13: dffffc0000000000 R14: ffffc90000007c08 R15: 000000000028e000 [ 70.324407][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 70.329956][ C0] bpf_probe_read_user+0x26/0x70 [ 70.334903][ C0] bpf_prog_26fc836ad493b19c+0x3d/0xdc4 [ 70.340443][ C0] bpf_trace_run2+0x15b/0x2d0 [ 70.345115][ C0] ? posix_cpu_timers_work+0x1120/0x1120 [ 70.350830][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 70.355877][ C0] ? debug_object_activate+0x2d2/0x480 [ 70.361525][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 70.366977][ C0] enqueue_hrtimer+0x314/0x370 [ 70.371742][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 70.376938][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 70.382663][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 70.387866][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 70.393930][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 70.398981][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 70.404970][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 70.410692][ C0] [ 70.413620][ C0] [ 70.416547][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 70.422620][ C0] RIP: 0010:lock_release+0x584/0x870 [ 70.428207][ C0] Code: 00 00 00 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 75 75 f7 44 24 50 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 66 43 c7 44 2f 09 00 00 43 c6 44 2f 0b 00 [ 70.448725][ C0] RSP: 0018:ffffc90002f0f820 EFLAGS: 00000206 [ 70.454858][ C0] RAX: 0000000000000001 RBX: ffffffffffffffff RCX: 0ebb1b2904ec4c00 [ 70.463037][ C0] RDX: 0000000000000000 RSI: ffffffff8a0b2e80 RDI: ffffffff8a59e800 [ 70.471280][ C0] RBP: ffffc90002f0f940 R08: dffffc0000000000 R09: fffffbfff1ad26b6 [ 70.479701][ C0] R10: fffffbfff1ad26b6 R11: 1ffffffff1ad26b5 R12: ffff88807a04c670 [ 70.487966][ C0] R13: dffffc0000000000 R14: ffff88807a04c660 R15: 1ffff920005e1f10 [ 70.496215][ C0] ? copy_mm+0xf65/0x1380 [ 70.500824][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 70.506088][ C0] ? flush_tlb_multi+0x50/0x50 [ 70.511213][ C0] ? preempt_count_add+0x8d/0x190 [ 70.516440][ C0] ? up_write+0x1bb/0x420 [ 70.520859][ C0] uprobe_end_dup_mmap+0x17/0x130 [ 70.525976][ C0] copy_mm+0xf65/0x1380 [ 70.530233][ C0] ? copy_signal+0x640/0x640 [ 70.535164][ C0] ? __init_rwsem+0x11e/0x160 [ 70.539920][ C0] ? copy_signal+0x537/0x640 [ 70.544503][ C0] copy_process+0x17c6/0x3e00 [ 70.549186][ C0] ? __pidfd_prepare+0x140/0x140 [ 70.554121][ C0] ? verify_lock_unused+0x140/0x140 [ 70.559315][ C0] ? _raw_spin_unlock+0x24/0x40 [ 70.564336][ C0] ? finish_fault+0x54b/0x8d0 [ 70.569517][ C0] kernel_clone+0x219/0x930 [ 70.574189][ C0] ? create_io_thread+0x130/0x130 [ 70.579209][ C0] ? __context_tracking_exit+0x4c/0x80 [ 70.584850][ C0] __x64_sys_clone+0x170/0x1c0 [ 70.589695][ C0] ? __ia32_sys_vfork+0xf0/0xf0 [ 70.594545][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 70.599827][ C0] do_syscall_64+0x4c/0xa0 [ 70.604241][ C0] ? clear_bhb_loop+0x30/0x80 [ 70.609035][ C0] ? clear_bhb_loop+0x30/0x80 [ 70.613741][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.619745][ C0] RIP: 0033:0x7f63c4988e93 [ 70.624160][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 70.644220][ C0] RSP: 002b:00007ffcd3229088 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 70.652920][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f63c4988e93 [ 70.661552][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 70.669793][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 70.677795][ C0] R10: 000055556b2b07d0 R11: 0000000000000246 R12: 0000000000000000 [ 70.686091][ C0] R13: 00007f63c4bb7280 R14: 0000000000000003 R15: 00007ffcd3229220 [ 70.694242][ C0] [ 70.697610][ C0] Kernel Offset: disabled [ 70.702048][ C0] Rebooting in 86400 seconds..