last executing test programs: 507.810363ms ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) 395.906681ms ago: executing program 1 (id=6): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x500, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000300)=""/221, 0x2a, 0xdd, 0x1, 0x0, 0x0, @void, @value}, 0x28) 322.707346ms ago: executing program 1 (id=7): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 132.51345ms ago: executing program 1 (id=8): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 0s ago: executing program 1 (id=9): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. syzkaller login: [ 53.309835][ T4152] cgroup: Unknown subsys name 'net' [ 53.418186][ T4152] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.017911][ T4152] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 56.368404][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 56.511081][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 56.540584][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.548849][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.557425][ T4168] device bridge_slave_0 entered promiscuous mode [ 56.578218][ T4178] chnl_net:caif_netlink_parms(): no params data found [ 56.606950][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.614537][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.622552][ T4168] device bridge_slave_1 entered promiscuous mode [ 56.676646][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.689062][ T4174] chnl_net:caif_netlink_parms(): no params data found [ 56.714841][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.763770][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.770859][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.778903][ T4169] device bridge_slave_0 entered promiscuous mode [ 56.807755][ T4168] team0: Port device team_slave_0 added [ 56.822091][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.829154][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.837732][ T4169] device bridge_slave_1 entered promiscuous mode [ 56.849344][ T4168] team0: Port device team_slave_1 added [ 56.855618][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 56.893592][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.900750][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.909151][ T4178] device bridge_slave_0 entered promiscuous mode [ 56.932803][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.954451][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.961706][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.969469][ T4178] device bridge_slave_1 entered promiscuous mode [ 57.000571][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.019638][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.027008][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.053030][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.081088][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.088369][ T4174] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.096512][ T4174] device bridge_slave_0 entered promiscuous mode [ 57.112250][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.119203][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.146269][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.163146][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.172540][ T4174] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.179613][ T4174] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.187706][ T4174] device bridge_slave_1 entered promiscuous mode [ 57.197775][ T4169] team0: Port device team_slave_0 added [ 57.213537][ T4169] team0: Port device team_slave_1 added [ 57.224859][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.282042][ T4174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.324615][ T4174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.334382][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.341533][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.367808][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.379121][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.386602][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.395210][ T4167] device bridge_slave_0 entered promiscuous mode [ 57.411660][ T4178] team0: Port device team_slave_0 added [ 57.427810][ T4168] device hsr_slave_0 entered promiscuous mode [ 57.434784][ T4168] device hsr_slave_1 entered promiscuous mode [ 57.442481][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.449441][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.477121][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.494037][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.501092][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.509590][ T4167] device bridge_slave_1 entered promiscuous mode [ 57.518145][ T4178] team0: Port device team_slave_1 added [ 57.569232][ T4174] team0: Port device team_slave_0 added [ 57.611596][ T4174] team0: Port device team_slave_1 added [ 57.617719][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.625082][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.651310][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.666248][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.674111][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.700068][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.715081][ T4169] device hsr_slave_0 entered promiscuous mode [ 57.721985][ T4169] device hsr_slave_1 entered promiscuous mode [ 57.728574][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.736692][ T4169] Cannot create hsr debugfs directory [ 57.743994][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.779403][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.830655][ T4167] team0: Port device team_slave_0 added [ 57.838286][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.845364][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.871502][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.905479][ T4167] team0: Port device team_slave_1 added [ 57.915278][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.922653][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.948727][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.963355][ T4178] device hsr_slave_0 entered promiscuous mode [ 57.970132][ T4178] device hsr_slave_1 entered promiscuous mode [ 57.976881][ T4178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.984482][ T4178] Cannot create hsr debugfs directory [ 58.042744][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.049721][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.075809][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.089219][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.096229][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.112773][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 58.129220][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 58.129288][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 58.136274][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.142461][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 58.158024][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 58.239245][ T4174] device hsr_slave_0 entered promiscuous mode [ 58.246269][ T4174] device hsr_slave_1 entered promiscuous mode [ 58.253232][ T4174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.260793][ T4174] Cannot create hsr debugfs directory [ 58.322243][ T4167] device hsr_slave_0 entered promiscuous mode [ 58.329076][ T4167] device hsr_slave_1 entered promiscuous mode [ 58.336084][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.343707][ T4167] Cannot create hsr debugfs directory [ 58.487406][ T4168] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.506708][ T4168] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.532392][ T4168] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.542270][ T4168] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.595784][ T4169] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.605110][ T4169] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.619386][ T4169] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.633560][ T4169] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.713445][ T4178] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.727931][ T4178] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.747564][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.755570][ T4178] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.766693][ T4178] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.814137][ T4174] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.823845][ T4174] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.843591][ T4174] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.854692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.864969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.884770][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.892026][ T4174] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.918541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.930374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.940241][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.949791][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.959203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.995875][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.005794][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.014467][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.021548][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.045092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.069498][ T4167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.080384][ T4167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.095477][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.114306][ T4167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.125908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.144218][ T4167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.160198][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.175400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.184669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.193556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.203938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.212692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.223025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.232450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.244623][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.282448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.290875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.299998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.309506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.319765][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.326901][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.335359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.344100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.352767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.363033][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.383140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.391774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.400008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.410706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.419494][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.426591][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.437265][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.448255][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.482073][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.489428][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.499350][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.509782][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.516921][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.527281][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.536703][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.545957][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.556247][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.563360][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.573402][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.582613][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.591075][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.623068][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.633883][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.643548][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.653748][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.663351][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.673318][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.682437][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.691091][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.701095][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.711964][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.720626][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.730370][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.739165][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.748336][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.765494][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.780595][ T4178] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.794580][ T4178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.810678][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.820097][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.835086][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.847982][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.857762][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.867024][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.875729][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.886569][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.897816][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.906819][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.916281][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.923398][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.952561][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.000377][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.012659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.030510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.040791][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.047944][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.056912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.066395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.076110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.084127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.100857][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.112897][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.122229][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.180526][ T4174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.191988][ T4210] Bluetooth: hci0: command 0x041b tx timeout [ 60.198650][ T4210] Bluetooth: hci1: command 0x041b tx timeout [ 60.200008][ T1325] Bluetooth: hci2: command 0x041b tx timeout [ 60.206083][ T4210] Bluetooth: hci4: command 0x041b tx timeout [ 60.218218][ T4210] Bluetooth: hci3: command 0x041b tx timeout [ 60.219255][ T4174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.236487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.245555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.255281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.264191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.274811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.283445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.292273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.300590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.309016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.343107][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.350606][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.369361][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.398648][ T4168] device veth0_vlan entered promiscuous mode [ 60.417819][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.430529][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.440283][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.455387][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.468122][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.477647][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.485765][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.495841][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.510489][ T4168] device veth1_vlan entered promiscuous mode [ 60.545421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.558891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.573167][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.610148][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.631857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.639371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.648591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.657888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.667402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.677555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.686745][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.693869][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.712472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.756405][ T4168] device veth0_macvtap entered promiscuous mode [ 60.767004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.777111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.786103][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.793200][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.802535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.811212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.821155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.829863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.838732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.850344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.859108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.867839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.876714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.885890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.894726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.903210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.911133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.919766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.941983][ T4169] device veth0_vlan entered promiscuous mode [ 60.968351][ T4168] device veth1_macvtap entered promiscuous mode [ 60.977592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.986333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.995934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.006031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.015208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.024267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.033347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.042740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.051104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.079385][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.093496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.103138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.113348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.121115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.129338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.137806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.148492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.157524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.170285][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.181027][ T4174] device veth0_vlan entered promiscuous mode [ 61.201206][ T4178] device veth0_vlan entered promiscuous mode [ 61.212118][ T4169] device veth1_vlan entered promiscuous mode [ 61.218967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.229196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.239020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.250972][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.265425][ T4174] device veth1_vlan entered promiscuous mode [ 61.282139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.291008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.299368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.312168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.323633][ T4168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.338222][ T4168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.347622][ T4168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.356609][ T4168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.373165][ T4178] device veth1_vlan entered promiscuous mode [ 61.398739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.408866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.417716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.429127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.444625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.453804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.461253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.477817][ T4169] device veth0_macvtap entered promiscuous mode [ 61.494360][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.523694][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.534103][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.543984][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.552892][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.566288][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.584188][ T4178] device veth0_macvtap entered promiscuous mode [ 61.599194][ T4169] device veth1_macvtap entered promiscuous mode [ 61.627445][ T4178] device veth1_macvtap entered promiscuous mode [ 61.637270][ T4174] device veth0_macvtap entered promiscuous mode [ 61.658098][ T4174] device veth1_macvtap entered promiscuous mode [ 61.689728][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.701164][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.718039][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.733766][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.745023][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.755277][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.769730][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.782816][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.799146][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.808611][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.817146][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.825476][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.833723][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.842699][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.851767][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.860333][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.877262][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.888392][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.898588][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.909708][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.919782][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.930257][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.941306][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.952610][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.963229][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.975293][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.994454][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.006246][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.017160][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.027967][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.040455][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.048339][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.057738][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.066839][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.075689][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.084670][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.093727][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.103094][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.115034][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.131069][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.141919][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.152581][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.163058][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.173276][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.183960][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.195840][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.207219][ T4178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.216191][ T4178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.227863][ T4178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.236935][ T4178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.255683][ T4174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.264894][ T4174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.274422][ T4213] Bluetooth: hci3: command 0x040f tx timeout [ 62.276425][ T4174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.280528][ T4213] Bluetooth: hci4: command 0x040f tx timeout [ 62.295521][ T4174] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.295816][ T4213] Bluetooth: hci2: command 0x040f tx timeout [ 62.310366][ T4213] Bluetooth: hci1: command 0x040f tx timeout [ 62.315907][ T4167] device veth0_vlan entered promiscuous mode [ 62.317250][ T4213] Bluetooth: hci0: command 0x040f tx timeout [ 62.329890][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.338636][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.347805][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.357316][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.367032][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.375347][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.385977][ T4169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.394856][ T4169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.403711][ T4169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.412601][ T4169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.428939][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.438967][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.450727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.481958][ T4167] device veth1_vlan entered promiscuous mode [ 62.529786][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.540990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.542450][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.594547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.633699][ T4167] device veth0_macvtap entered promiscuous mode [ 62.674790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.708238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.717068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.786793][ T4167] device veth1_macvtap entered promiscuous mode [ 62.820498][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.821780][ T4225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.857887][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.860800][ T4225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.875136][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.889427][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.918027][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.938842][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.950053][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.961260][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.972891][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.989689][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.000964][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.016813][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.027834][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.042551][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.060674][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.069840][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.101955][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.113891][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.124506][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.136983][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.154452][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.166421][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.176777][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.187499][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.199255][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.217120][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.230392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.236436][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.247866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.261068][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.296232][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.318910][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.336063][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.345701][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.361490][ C0] ------------[ cut here ]------------ [ 63.361490][ C1] ------------[ cut here ]------------ [ 63.362100][ C0] [ 63.362106][ C0] ====================================================== [ 63.362110][ C0] WARNING: possible circular locking dependency detected [ 63.362117][ C0] 5.15.178-syzkaller #0 Not tainted [ 63.362126][ C0] ------------------------------------------------------ [ 63.362131][ C0] syz-executor/4178 is trying to acquire lock: [ 63.362141][ C0] ffffffff8cb14860 (console_owner){-...}-{0:0}, at: console_trylock_spinning+0x185/0x3f0 [ 63.362216][ C0] [ 63.362216][ C0] but task is already holding lock: [ 63.362221][ C0] ffff8880b8e2a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x662/0xcf0 [ 63.362264][ C0] [ 63.362264][ C0] which lock already depends on the new lock. [ 63.362264][ C0] [ 63.362269][ C0] [ 63.362269][ C0] the existing dependency chain (in reverse order) is: [ 63.362274][ C0] [ 63.362274][ C0] -> #6 (hrtimer_bases.lock){-.-.}-{2:2}: [ 63.362300][ C0] lock_acquire+0x1db/0x4f0 [ 63.362318][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 63.362355][ C0] hrtimer_start_range_ns+0x105/0xc80 [ 63.362372][ C0] enqueue_task_rt+0x5a0/0xbf0 [ 63.362392][ C0] enqueue_task+0x181/0x3a0 [ 63.362412][ C0] __sched_setscheduler+0x1396/0x1db0 [ 63.362430][ C0] sched_set_fifo+0x10e/0x1e0 [ 63.362447][ C0] drm_vblank_worker_init+0x149/0x190 [ 63.362466][ C0] drm_vblank_init+0x274/0x330 [ 63.362485][ C0] vkms_init+0x330/0x6d0 [ 63.362503][ C0] do_one_initcall+0x22b/0x7a0 [ 63.362522][ C0] do_initcall_level+0x157/0x210 [ 63.362543][ C0] do_initcalls+0x49/0x90 [ 63.362561][ C0] kernel_init_freeable+0x425/0x5c0 [ 63.362582][ C0] kernel_init+0x19/0x290 [ 63.362602][ C0] ret_from_fork+0x1f/0x30 [ 63.362620][ C0] [ 63.362620][ C0] -> #5 (&rt_b->rt_runtime_lock){-.-.}-{2:2}: [ 63.362646][ C0] lock_acquire+0x1db/0x4f0 [ 63.362662][ C0] _raw_spin_lock+0x2a/0x40 [ 63.362682][ C0] rq_online_rt+0x123/0x300 [ 63.362700][ C0] sched_cpu_activate+0x508/0x6b0 [ 63.362718][ C0] cpuhp_invoke_callback+0x49f/0x820 [ 63.362740][ C0] cpuhp_thread_fun+0x3ee/0x790 [ 63.362759][ C0] smpboot_thread_fn+0x51b/0x9d0 [ 63.362776][ C0] kthread+0x3f6/0x4f0 [ 63.362793][ C0] ret_from_fork+0x1f/0x30 [ 63.362812][ C0] [ 63.362812][ C0] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 63.362836][ C0] lock_acquire+0x1db/0x4f0 [ 63.362852][ C0] _raw_spin_lock_nested+0x2d/0x40 [ 63.362873][ C0] raw_spin_rq_lock_nested+0x26/0x140 [ 63.362893][ C0] task_fork_fair+0x5d/0x350 [ 63.362911][ C0] sched_cgroup_fork+0x2d3/0x330 [ 63.362931][ C0] copy_process+0x224a/0x3ef0 [ 63.362949][ C0] kernel_clone+0x210/0x960 [ 63.362965][ C0] kernel_thread+0x168/0x1e0 [ 63.362983][ C0] rest_init+0x21/0x330 [ 63.363001][ C0] start_kernel+0x48c/0x540 [ 63.363020][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 63.363041][ C0] [ 63.363041][ C0] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 63.363065][ C0] lock_acquire+0x1db/0x4f0 [ 63.363081][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 63.363101][ C0] try_to_wake_up+0xae/0x1300 [ 63.363121][ C0] __wake_up_common+0x2a0/0x4e0 [ 63.363141][ C0] __wake_up+0x112/0x1c0 [ 63.363160][ C0] tty_port_default_wakeup+0xa8/0x100 [ 63.363180][ C0] serial8250_tx_chars+0x60d/0x800 [ 63.363200][ C0] serial8250_handle_irq+0x505/0x600 [ 63.363220][ C0] serial8250_default_handle_irq+0xc8/0x1e0 [ 63.363242][ C0] serial8250_interrupt+0xa1/0x1e0 [ 63.363260][ C0] __handle_irq_event_percpu+0x292/0xa70 [ 63.363281][ C0] handle_irq_event+0xff/0x2b0 [ 63.363301][ C0] handle_edge_irq+0x245/0xbf0 [ 63.363317][ C0] __common_interrupt+0xd7/0x1f0 [ 63.363336][ C0] common_interrupt+0xae/0xd0 [ 63.363361][ C0] asm_common_interrupt+0x22/0x40 [ 63.363382][ C0] unmap_page_range+0xa64/0x2630 [ 63.363402][ C0] unmap_vmas+0x1f8/0x390 [ 63.363419][ C0] exit_mmap+0x3b6/0x620 [ 63.363436][ C0] __mmput+0x112/0x3b0 [ 63.363452][ C0] exit_mm+0x688/0x7f0 [ 63.363471][ C0] do_exit+0x626/0x2480 [ 63.363490][ C0] do_group_exit+0x144/0x310 [ 63.363511][ C0] __x64_sys_exit_group+0x3b/0x40 [ 63.363532][ C0] do_syscall_64+0x3b/0xb0 [ 63.363549][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.363571][ C0] [ 63.363571][ C0] -> #2 (&tty->write_wait){-...}-{2:2}: [ 63.363597][ C0] lock_acquire+0x1db/0x4f0 [ 63.363613][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 63.363634][ C0] __wake_up+0xf5/0x1c0 [ 63.363653][ C0] tty_port_default_wakeup+0xa8/0x100 [ 63.363672][ C0] serial8250_tx_chars+0x60d/0x800 [ 63.363691][ C0] serial8250_handle_irq+0x505/0x600 [ 63.363711][ C0] serial8250_default_handle_irq+0xc8/0x1e0 [ 63.363733][ C0] serial8250_interrupt+0xa1/0x1e0 [ 63.363752][ C0] __handle_irq_event_percpu+0x292/0xa70 [ 63.363772][ C0] handle_irq_event+0xff/0x2b0 [ 63.363792][ C0] handle_edge_irq+0x245/0xbf0 [ 63.363808][ C0] __common_interrupt+0xd7/0x1f0 [ 63.363826][ C0] common_interrupt+0xae/0xd0 [ 63.363844][ C0] asm_common_interrupt+0x22/0x40 [ 63.363865][ C0] _raw_spin_unlock_irqrestore+0xd4/0x130 [ 63.363886][ C0] uart_write+0x6af/0x930 [ 63.363903][ C0] n_tty_write+0xd7e/0x1280 [ 63.363919][ C0] file_tty_write+0x561/0x920 [ 63.363938][ C0] vfs_write+0xacd/0xe50 [ 63.363958][ C0] ksys_write+0x1a2/0x2c0 [ 63.363976][ C0] do_syscall_64+0x3b/0xb0 [ 63.363993][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.364016][ C0] [ 63.364016][ C0] -> #1 (&port_lock_key){-...}-{2:2}: [ 63.364041][ C0] lock_acquire+0x1db/0x4f0 [ 63.364057][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 63.364078][ C0] serial8250_console_write+0x19d/0x1180 [ 63.364098][ C0] console_unlock+0xced/0x12b0 [ 63.364115][ C0] vprintk_emit+0xbf/0x150 [ 63.364133][ C0] _printk+0xd1/0x120 [ 63.364151][ C0] register_console+0x65a/0x940 [ 63.364170][ C0] univ8250_console_init+0x41/0x50 [ 63.364191][ C0] console_init+0x18c/0x660 [ 63.364209][ C0] start_kernel+0x301/0x540 [ 63.364228][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 63.364249][ C0] [ 63.364249][ C0] -> #0 (console_owner){-...}-{0:0}: [ 63.364273][ C0] validate_chain+0x1649/0x5930 [ 63.364291][ C0] __lock_acquire+0x1295/0x1ff0 [ 63.364308][ C0] lock_acquire+0x1db/0x4f0 [ 63.364324][ C0] console_trylock_spinning+0x1a5/0x3f0 [ 63.364349][ C0] vprintk_emit+0xa6/0x150 [ 63.364366][ C0] _printk+0xd1/0x120 [ 63.364384][ C0] report_bug+0x1e5/0x2e0 [ 63.364403][ C0] handle_bug+0x3d/0x70 [ 63.364420][ C0] exc_invalid_op+0x16/0x40 [ 63.364438][ C0] asm_exc_invalid_op+0x16/0x20 [ 63.364458][ C0] copy_from_user_nofault+0x15c/0x1c0 [ 63.364476][ C0] bpf_probe_read_user+0x26/0x70 [ 63.364494][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0x85c [ 63.364512][ C0] bpf_trace_run2+0x19e/0x340 [ 63.364530][ C0] enqueue_hrtimer+0x324/0x390 [ 63.364546][ C0] __hrtimer_run_queues+0x6b6/0xcf0 [ 63.364564][ C0] hrtimer_interrupt+0x392/0x980 [ 63.364581][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 63.364606][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 63.364625][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 63.364644][ C0] lock_acquire+0x252/0x4f0 [ 63.364661][ C0] _raw_spin_lock+0x2a/0x40 [ 63.364680][ C0] evict+0x72d/0x930 [ 63.364697][ C0] __dentry_kill+0x436/0x650 [ 63.364718][ C0] dentry_kill+0xbb/0x290 [ 63.364738][ C0] dput+0xd8/0x1a0 [ 63.364756][ C0] debugfs_remove+0x45/0x60 [ 63.364776][ C0] ieee80211_debugfs_remove_netdev+0x4d/0xa0 [ 63.364798][ C0] ieee80211_if_change_type+0x162/0x9f0 [ 63.364820][ C0] ieee80211_change_iface+0x57/0x430 [ 63.364839][ C0] cfg80211_change_iface+0x789/0xf20 [ 63.364857][ C0] nl80211_set_interface+0x5f7/0x890 [ 63.364875][ C0] genl_rcv_msg+0xfbd/0x14a0 [ 63.364891][ C0] netlink_rcv_skb+0x1cf/0x410 [ 63.364911][ C0] genl_rcv+0x24/0x40 [ 63.364930][ C0] netlink_unicast+0x7b6/0x980 [ 63.364949][ C0] netlink_sendmsg+0xa30/0xd60 [ 63.364969][ C0] __sys_sendto+0x564/0x720 [ 63.364987][ C0] __x64_sys_sendto+0xda/0xf0 [ 63.365005][ C0] do_syscall_64+0x3b/0xb0 [ 63.365022][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.365045][ C0] [ 63.365045][ C0] other info that might help us debug this: [ 63.365045][ C0] [ 63.365050][ C0] Chain exists of: [ 63.365050][ C0] console_owner --> &rt_b->rt_runtime_lock --> hrtimer_bases.lock [ 63.365050][ C0] [ 63.365079][ C0] Possible unsafe locking scenario: [ 63.365079][ C0] [ 63.365084][ C0] CPU0 CPU1 [ 63.365088][ C0] ---- ---- [ 63.365093][ C0] lock(hrtimer_bases.lock); [ 63.365104][ C0] lock(&rt_b->rt_runtime_lock); [ 63.365117][ C0] lock(hrtimer_bases.lock); [ 63.365130][ C0] lock(console_owner); [ 63.365140][ C0] [ 63.365140][ C0] *** DEADLOCK *** [ 63.365140][ C0] [ 63.365144][ C0] 6 locks held by syz-executor/4178: [ 63.365155][ C0] #0: ffffffff8dca0290 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 63.365203][ C0] #1: ffffffff8dc42788 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x28/0x540 [ 63.365248][ C0] #2: ffff888078838628 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_pre_doit+0x1aa/0x540 [ 63.365293][ C0] #3: ffff888060e2c0a0 (&sb->s_type->i_lock_key#7){+.+.}-{2:2}, at: evict+0x72d/0x930 [ 63.365349][ C0] #4: ffff8880b8e2a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x662/0xcf0 [ 63.365395][ C0] #5: ffffffff8cb1fce0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 63.365441][ C0] [ 63.365441][ C0] stack backtrace: [ 63.365458][ C0] CPU: 0 PID: 4178 Comm: syz-executor Not tainted 5.15.178-syzkaller #0 [ 63.365479][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 63.365497][ C0] Call Trace: [ 63.365504][ C0] [ 63.365511][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 63.365532][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 63.365558][ C0] ? print_circular_bug+0x12b/0x1a0 [ 63.365579][ C0] check_noncircular+0x2f8/0x3b0 [ 63.365603][ C0] ? add_chain_block+0x850/0x850 [ 63.365622][ C0] ? queued_spin_lock_slowpath+0x42/0x50 [ 63.365642][ C0] ? lockdep_lock+0x1a7/0x2a0 [ 63.365668][ C0] validate_chain+0x1649/0x5930 [ 63.365698][ C0] ? reacquire_held_locks+0x660/0x660 [ 63.365718][ C0] ? reacquire_held_locks+0x660/0x660 [ 63.365745][ C0] ? lockdep_unlock+0x166/0x300 [ 63.365771][ C0] ? mark_lock+0x98/0x340 [ 63.365791][ C0] __lock_acquire+0x1295/0x1ff0 [ 63.365818][ C0] lock_acquire+0x1db/0x4f0 [ 63.365836][ C0] ? console_trylock_spinning+0x185/0x3f0 [ 63.365861][ C0] ? read_lock_is_recursive+0x10/0x10 [ 63.365881][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 63.365899][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 63.365924][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 63.365948][ C0] console_trylock_spinning+0x1a5/0x3f0 [ 63.365968][ C0] ? console_trylock_spinning+0x185/0x3f0 [ 63.365989][ C0] ? vprintk_emit+0x150/0x150 [ 63.366008][ C0] ? reacquire_held_locks+0x660/0x660 [ 63.366035][ C0] vprintk_emit+0xa6/0x150 [ 63.366056][ C0] _printk+0xd1/0x120 [ 63.366078][ C0] ? report_bug+0x16e/0x2e0 [ 63.366098][ C0] ? panic+0x860/0x860 [ 63.366121][ C0] ? find_bug+0x9c/0x350 [ 63.366142][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 63.366162][ C0] report_bug+0x1e5/0x2e0 [ 63.366186][ C0] handle_bug+0x3d/0x70 [ 63.366205][ C0] exc_invalid_op+0x16/0x40 [ 63.366223][ C0] asm_exc_invalid_op+0x16/0x20 [ 63.366247][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 63.366269][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 ab ba d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 94 ba d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 63.366285][ C0] RSP: 0018:ffffc90000007be0 EFLAGS: 00010006 [ 63.366301][ C0] RAX: ffffffff81aacafc RBX: 0000000000000000 RCX: ffff888074ba8000 [ 63.366316][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.366327][ C0] RBP: dffffc0000000000 R08: ffffffff81aaca0d R09: fffffbfff2131821 [ 63.366351][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 63.366365][ C0] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000007c48 [ 63.366381][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 63.366400][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 63.366425][ C0] bpf_probe_read_user+0x26/0x70 [ 63.366446][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0x85c [ 63.366463][ C0] bpf_trace_run2+0x19e/0x340 [ 63.366483][ C0] ? posix_cpu_timers_work+0x1300/0x1300 [ 63.366505][ C0] ? bpf_trace_run1+0x2f0/0x2f0 [ 63.366531][ C0] enqueue_hrtimer+0x324/0x390 [ 63.366552][ C0] __hrtimer_run_queues+0x6b6/0xcf0 [ 63.366580][ C0] ? hrtimer_interrupt+0x980/0x980 [ 63.366599][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 63.366625][ C0] hrtimer_interrupt+0x392/0x980 [ 63.366655][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 63.366682][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 63.366704][ C0] [ 63.366710][ C0] [ 63.366715][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 63.366735][ C0] RIP: 0010:lock_acquire+0x252/0x4f0 [ 63.366755][ C0] Code: 2b 00 74 08 4c 89 f7 e8 9c 9e 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 63.366770][ C0] RSP: 0018:ffffc90002f1f0c0 EFLAGS: 00000206 [ 63.366786][ C0] RAX: 0000000000000001 RBX: 1ffff920005e3e24 RCX: ffffffff816389a2 [ 63.366800][ C0] RDX: dffffc0000000000 RSI: ffffffff8aab3e20 RDI: ffffffff8af9f2c0 [ 63.366815][ C0] RBP: ffffc90002f1f218 R08: dffffc0000000000 R09: fffffbfff2131825 [ 63.366830][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920005e3e20 [ 63.366844][ C0] R13: dffffc0000000000 R14: ffffc90002f1f120 R15: 0000000000000246 [ 63.366863][ C0] ? validate_chain+0x112/0x5930 [ 63.366885][ C0] ? mark_lock+0x98/0x340 [ 63.366905][ C0] ? read_lock_is_recursive+0x10/0x10 [ 63.366924][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 63.366946][ C0] ? print_irqtrace_events+0x210/0x210 [ 63.366964][ C0] ? _raw_spin_lock_irq+0xdb/0x110 [ 63.366988][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 63.367009][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 63.367034][ C0] _raw_spin_lock+0x2a/0x40 [ 63.367054][ C0] ? evict+0x72d/0x930 [ 63.367072][ C0] evict+0x72d/0x930 [ 63.367095][ C0] ? mode_strip_sgid+0x210/0x210 [ 63.367118][ C0] ? _raw_spin_unlock+0x24/0x40 [ 63.367139][ C0] ? iput+0x6f5/0x8b0 [ 63.367160][ C0] __dentry_kill+0x436/0x650 [ 63.367185][ C0] dentry_kill+0xbb/0x290 [ 63.367208][ C0] dput+0xd8/0x1a0 [ 63.367228][ C0] debugfs_remove+0x45/0x60 [ 63.367249][ C0] ieee80211_debugfs_remove_netdev+0x4d/0xa0 [ 63.367273][ C0] ieee80211_if_change_type+0x162/0x9f0 [ 63.367298][ C0] ? cfg80211_mlme_purge_registrations+0x4d/0x220 [ 63.367325][ C0] ieee80211_change_iface+0x57/0x430 [ 63.367351][ C0] ? cfg80211_mlme_purge_registrations+0x1f3/0x220 [ 63.367380][ C0] cfg80211_change_iface+0x789/0xf20 [ 63.367404][ C0] nl80211_set_interface+0x5f7/0x890 [ 63.367429][ C0] ? nl80211_dump_interface+0x6a0/0x6a0 [ 63.367450][ C0] ? mutex_lock_nested+0x17/0x20 [ 63.367474][ C0] genl_rcv_msg+0xfbd/0x14a0 [ 63.367497][ C0] ? genl_bind+0x420/0x420 [ 63.367513][ C0] ? local_bh_enable+0x5/0x20 [ 63.367539][ C0] ? mark_lock+0x98/0x340 [ 63.367549][ C1] WARNING: CPU: 1 PID: 4255 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 63.367558][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 63.367580][ C1] Modules linked in: [ 63.367583][ C0] ? nl80211_dump_interface+0x6a0/0x6a0 [ 63.367590][ C1] CPU: 1 PID: 4255 Comm: syz.1.9 Not tainted 5.15.178-syzkaller #0 [ 63.367611][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 63.367610][ C0] netlink_rcv_skb+0x1cf/0x410 [ 63.367621][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 63.367632][ C0] ? genl_bind+0x420/0x420 [ 63.367644][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 ab ba d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 94 ba d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 63.367650][ C0] ? netlink_ack+0xb10/0xb10 [ 63.367660][ C1] RSP: 0018:ffffc90000dd0be0 EFLAGS: 00010006 [ 63.367678][ C1] RAX: ffffffff81aacafc RBX: 0000000000000000 RCX: ffff88807d63bb80 [ 63.367676][ C0] ? down_read+0x1b3/0x2e0 [ 63.367693][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.367695][ C0] ? genl_rcv+0x9/0x40 [ 63.367706][ C1] RBP: dffffc0000000000 R08: ffffffff81aaca0d R09: fffffbfff2131821 [ 63.367717][ C0] genl_rcv+0x24/0x40 [ 63.367722][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 63.367735][ C1] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000dd0c48 [ 63.367738][ C0] netlink_unicast+0x7b6/0x980 [ 63.367748][ C1] FS: 00007f115062f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 63.367766][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.367764][ C0] ? netlink_detachskb+0x90/0x90 [ 63.367781][ C1] CR2: 0000000000000000 CR3: 000000002283c000 CR4: 00000000003506e0 [ 63.367785][ C0] ? __virt_addr_valid+0x3bb/0x460 [ 63.367797][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.367803][ C0] ? 0xffffffff81000000 [ 63.367809][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.367822][ C1] Call Trace: [ 63.367817][ C0] ? __check_object_size+0x300/0x410 [ 63.367828][ C1] [ 63.367835][ C1] ? __warn+0x15b/0x300 [ 63.367840][ C0] ? bpf_lsm_netlink_send+0x5/0x10 [ 63.367857][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 63.367861][ C0] netlink_sendmsg+0xa30/0xd60 [ 63.367877][ C1] ? report_bug+0x1b7/0x2e0 [ 63.367888][ C0] ? netlink_getsockopt+0x5b0/0x5b0 [ 63.367901][ C1] ? handle_bug+0x3d/0x70 [ 63.367912][ C0] ? aa_sock_msg_perm+0x91/0x150 [ 63.367920][ C1] ? exc_invalid_op+0x16/0x40 [ 63.367934][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 63.367940][ C1] ? asm_exc_invalid_op+0x16/0x20 [ 63.367952][ C0] ? security_socket_sendmsg+0x7d/0xa0 [ 63.367966][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 63.367975][ C0] ? netlink_getsockopt+0x5b0/0x5b0 [ 63.367986][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 63.367998][ C0] __sys_sendto+0x564/0x720 [ 63.368008][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 63.368021][ C0] ? __ia32_sys_getpeername+0x80/0x80 [ 63.368031][ C1] bpf_probe_read_user+0x26/0x70 [ 63.368053][ C1] bpf_prog_02073d59a3c0f06f+0x3d/0x85c [ 63.368054][ C0] ? print_irqtrace_events+0x210/0x210 [ 63.368071][ C1] bpf_trace_run2+0x19e/0x340 [ 63.368074][ C0] ? vtime_user_exit+0x2d1/0x400 [ 63.368098][ C1] ? posix_cpu_timers_work+0x1300/0x1300 [ 63.368100][ C0] __x64_sys_sendto+0xda/0xf0 [ 63.368120][ C1] ? bpf_trace_run1+0x2f0/0x2f0 [ 63.368123][ C0] do_syscall_64+0x3b/0xb0 [ 63.368141][ C0] ? clear_bhb_loop+0x15/0x70 [ 63.368146][ C1] enqueue_hrtimer+0x324/0x390 [ 63.368160][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.368168][ C1] __hrtimer_run_queues+0x6b6/0xcf0 [ 63.368183][ C0] RIP: 0033:0x7f27b32eac7c [ 63.368197][ C1] ? hrtimer_interrupt+0x980/0x980 [ 63.368200][ C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 63.368215][ C0] RSP: 002b:00007ffd3d1de4c0 EFLAGS: 00000293 [ 63.368216][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 63.368227][ C0] ORIG_RAX: 000000000000002c [ 63.368234][ C0] RAX: ffffffffffffffda RBX: 00007f27b4030620 RCX: 00007f27b32eac7c [ 63.368242][ C1] hrtimer_interrupt+0x392/0x980 [ 63.368249][ C0] RDX: 0000000000000024 RSI: 00007f27b4030670 RDI: 0000000000000003 [ 63.368262][ C0] RBP: 0000000000000000 R08: 00007ffd3d1de514 R09: 000000000000000c [ 63.368275][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 63.368273][ C1] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 63.368286][ C0] R13: 0000000000000000 R14: 00007f27b4030670 R15: 0000000000000000 [ 63.368307][ C0] [ 63.368300][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 63.368323][ C1] [ 63.373760][ C0] WARNING: CPU: 0 PID: 4178 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 63.376073][ C1] [ 63.376082][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 63.383085][ C0] Modules linked in: [ 63.383095][ C0] CPU: 0 PID: 4178 Comm: syz-executor Not tainted 5.15.178-syzkaller #0 [ 63.390095][ C1] RIP: 0010:lock_acquire+0x252/0x4f0 [ 63.395269][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 63.402441][ C1] Code: 2b 00 74 08 4c 89 f7 e8 9c 9e 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 63.408571][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 63.418349][ C1] RSP: 0018:ffffc90002f0f9e0 EFLAGS: 00000206 [ 63.425697][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 ab ba d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 94 ba d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 63.435558][ C1] [ 63.435564][ C1] RAX: 0000000000000001 RBX: 1ffff920005e1f48 RCX: ffffffff96a92f03 [ 63.445945][ C0] RSP: 0018:ffffc90000007be0 EFLAGS: 00010006 [ 63.454938][ C1] RDX: dffffc0000000000 RSI: ffffffff8aab3e20 RDI: ffffffff8af9f2c0 [ 63.462807][ C0] [ 63.462812][ C0] RAX: ffffffff81aacafc RBX: 0000000000000000 RCX: ffff888074ba8000 [ 63.467809][ C1] RBP: ffffc90002f0fb30 R08: dffffc0000000000 R09: fffffbfff2131823 [ 63.473591][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.479550][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920005e1f44 [ 63.484812][ C0] RBP: dffffc0000000000 R08: ffffffff81aaca0d R09: fffffbfff2131821 [ 63.489818][ C1] R13: dffffc0000000000 R14: ffffc90002f0fa40 R15: 0000000000000246 [ 63.495687][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 63.500895][ C1] ? read_lock_is_recursive+0x10/0x10 [ 63.506754][ C0] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000007c48 [ 63.512017][ C1] ? __mutex_lock_common+0x444/0x25a0 [ 63.516755][ C0] FS: 000055557fe16500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 63.522026][ C1] fs_reclaim_acquire+0xa7/0x120 [ 63.527460][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.532288][ C1] ? fs_reclaim_acquire+0x87/0x120 [ 63.537982][ C0] CR2: 0000555579deb808 CR3: 0000000063d26000 CR4: 00000000003506f0 [ 63.542811][ C1] slab_pre_alloc_hook+0x22/0xc0 [ 63.547729][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.555944][ C1] __kmalloc+0x6e/0x300 [ 63.560942][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.565946][ C1] ? get_callchain_buffers+0xce/0x350 [ 63.570982][ C0] Call Trace: [ 63.570990][ C0] [ 63.576508][ C1] get_callchain_buffers+0xce/0x350 [ 63.582287][ C0] ? __warn+0x15b/0x300 [ 63.587639][ C1] perf_event_alloc+0x1cf4/0x2180 [ 63.593076][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 63.597654][ C1] __se_sys_perf_event_open+0xb27/0x4510 [ 63.602559][ C0] ? report_bug+0x1b7/0x2e0 [ 63.609825][ C1] ? __context_tracking_exit+0x4c/0x80 [ 63.614823][ C0] ? handle_bug+0x3d/0x70 [ 63.620461][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 63.626333][ C0] ? exc_invalid_op+0x16/0x40 [ 63.631420][ C1] ? __sys_bpf+0x468/0x670 [ 63.636856][ C0] ? asm_exc_invalid_op+0x16/0x20 [ 63.642031][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 63.647038][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 63.652137][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 63.656785][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 63.661787][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 63.668178][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 63.675524][ C1] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 63.680528][ C0] bpf_probe_read_user+0x26/0x70 [ 63.686322][ C1] do_syscall_64+0x3b/0xb0 [ 63.691499][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0x85c [ 63.696944][ C1] ? clear_bhb_loop+0x15/0x70 [ 63.701688][ C0] bpf_trace_run2+0x19e/0x340 [ 63.707562][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.713173][ C0] ? posix_cpu_timers_work+0x1300/0x1300 [ 63.718958][ C1] RIP: 0033:0x7f11527c5de9 [ 63.725351][ C0] ? bpf_trace_run1+0x2f0/0x2f0 [ 63.730964][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.737094][ C0] enqueue_hrtimer+0x324/0x390 [ 63.742351][ C1] RSP: 002b:00007f115062f038 EFLAGS: 00000246 [ 63.747633][ C0] __hrtimer_run_queues+0x6b6/0xcf0 [ 63.753070][ C1] ORIG_RAX: 000000000000012a [ 63.758252][ C0] ? hrtimer_interrupt+0x980/0x980 [ 63.763763][ C1] RAX: ffffffffffffffda RBX: 00007f11529defa0 RCX: 00007f11527c5de9 [ 63.769199][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 63.774128][ C1] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000400000000180 [ 63.778874][ C0] hrtimer_interrupt+0x392/0x980 [ 63.783435][ C1] RBP: 00007f11528472a0 R08: 0000000000000000 R09: 0000000000000000 [ 63.788013][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 63.792656][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 63.797745][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 63.803264][ C1] R13: 0000000000000000 R14: 00007f11529defa0 R15: 00007ffcc6a263b8 [ 63.808185][ C0] [ 63.814579][ C1] [ 63.822261][ C0] [ 63.822269][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 63.827379][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 63.833169][ C0] RIP: 0010:lock_acquire+0x252/0x4f0 [ 63.837824][ C1] CPU: 1 PID: 4255 Comm: syz.1.9 Not tainted 5.15.178-syzkaller #0 [ 63.843692][ C0] Code: 2b 00 74 08 4c 89 f7 e8 9c 9e 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 63.849299][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 63.855083][ C0] RSP: 0018:ffffc90002f1f0c0 EFLAGS: 00000206 [ 63.861472][ C1] Call Trace: [ 63.861480][ C1] [ 63.867080][ C0] [ 63.867086][ C0] RAX: 0000000000000001 RBX: 1ffff920005e3e24 RCX: ffffffff816389a2 [ 63.873211][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 63.878472][ C0] RDX: dffffc0000000000 RSI: ffffffff8aab3e20 RDI: ffffffff8af9f2c0 [ 63.883822][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 63.889256][ C0] RBP: ffffc90002f1f218 R08: dffffc0000000000 R09: fffffbfff2131825 [ 63.894434][ C1] ? panic+0x860/0x860 [ 63.899955][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920005e3e20 [ 63.906191][ C1] ? panic+0x860/0x860 [ 63.911024][ C0] R13: dffffc0000000000 R14: ffffc90002f1f120 R15: 0000000000000246 [ 63.916029][ C1] ? copy_from_user_nofault+0x60/0x1c0 [ 63.921393][ C0] ? validate_chain+0x112/0x5930 [ 63.926141][ C1] ? copy_from_user_nofault+0x60/0x1c0 [ 63.930976][ C0] ? mark_lock+0x98/0x340 [ 63.935886][ C1] panic+0x318/0x860 [ 63.942281][ C0] ? read_lock_is_recursive+0x10/0x10 [ 63.949805][ C1] ? __warn+0x16a/0x300 [ 63.954807][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 63.960594][ C1] ? fb_is_primary_device+0xd0/0xd0 [ 63.966728][ C0] ? print_irqtrace_events+0x210/0x210 [ 63.972004][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 63.976932][ C0] ? _raw_spin_lock_irq+0xdb/0x110 [ 63.981422][ C1] __warn+0x2b2/0x300 [ 63.986774][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 63.992385][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 63.997608][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 64.002624][ C1] report_bug+0x1b7/0x2e0 [ 64.009027][ C0] _raw_spin_lock+0x2a/0x40 [ 64.016465][ C1] handle_bug+0x3d/0x70 [ 64.021813][ C0] ? evict+0x72d/0x930 [ 64.027164][ C1] exc_invalid_op+0x16/0x40 [ 64.032169][ C0] evict+0x72d/0x930 [ 64.038217][ C1] asm_exc_invalid_op+0x16/0x20 [ 64.043138][ C0] ? mode_strip_sgid+0x210/0x210 [ 64.047616][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 64.052445][ C0] ? _raw_spin_unlock+0x24/0x40 [ 64.057099][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 ab ba d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 94 ba d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 64.062101][ C0] ? iput+0x6f5/0x8b0 [ 64.067450][ C1] RSP: 0018:ffffc90000dd0be0 EFLAGS: 00010006 [ 64.073323][ C0] __dentry_kill+0x436/0x650 [ 64.078758][ C1] [ 64.078764][ C1] RAX: ffffffff81aacafc RBX: 0000000000000000 RCX: ffff88807d63bb80 [ 64.084814][ C0] dentry_kill+0xbb/0x290 [ 64.089993][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.095262][ C0] dput+0xd8/0x1a0 [ 64.100963][ C1] RBP: dffffc0000000000 R08: ffffffff81aaca0d R09: fffffbfff2131821 [ 64.106420][ C0] debugfs_remove+0x45/0x60 [ 64.112900][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 64.119039][ C0] ieee80211_debugfs_remove_netdev+0x4d/0xa0 [ 64.125520][ C1] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000dd0c48 [ 64.130524][ C0] ieee80211_if_change_type+0x162/0x9f0 [ 64.135532][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 64.139933][ C0] ? cfg80211_mlme_purge_registrations+0x4d/0x220 [ 64.145020][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 64.149852][ C0] ieee80211_change_iface+0x57/0x430 [ 64.154078][ C1] bpf_probe_read_user+0x26/0x70 [ 64.159077][ C0] ? cfg80211_mlme_purge_registrations+0x1f3/0x220 [ 64.165559][ C1] bpf_prog_02073d59a3c0f06f+0x3d/0x85c [ 64.171607][ C0] cfg80211_change_iface+0x789/0xf20 [ 64.177495][ C1] bpf_trace_run2+0x19e/0x340 [ 64.183288][ C0] nl80211_set_interface+0x5f7/0x890 [ 64.189070][ C1] ? posix_cpu_timers_work+0x1300/0x1300 [ 64.194176][ C0] ? nl80211_dump_interface+0x6a0/0x6a0 [ 64.199434][ C1] ? bpf_trace_run1+0x2f0/0x2f0 [ 64.203915][ C0] ? mutex_lock_nested+0x17/0x20 [ 64.209184][ C1] enqueue_hrtimer+0x324/0x390 [ 64.214644][ C0] genl_rcv_msg+0xfbd/0x14a0 [ 64.219647][ C1] __hrtimer_run_queues+0x6b6/0xcf0 [ 64.224829][ C0] ? genl_bind+0x420/0x420 [ 64.229750][ C1] ? hrtimer_interrupt+0x980/0x980 [ 64.236131][ C0] ? local_bh_enable+0x5/0x20 [ 64.246341][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 64.260026][ C0] ? mark_lock+0x98/0x340 [ 64.267461][ C1] hrtimer_interrupt+0x392/0x980 [ 64.272895][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 64.278261][ C1] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 64.283000][ C0] ? nl80211_dump_interface+0x6a0/0x6a0 [ 64.290516][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 64.297697][ C0] netlink_rcv_skb+0x1cf/0x410 [ 64.301916][ C1] [ 64.310040][ C0] ? genl_bind+0x420/0x420 [ 64.315301][ C1] [ 64.315310][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 64.323432][ C0] ? netlink_ack+0xb10/0xb10 [ 64.332600][ C1] RIP: 0010:lock_acquire+0x252/0x4f0 [ 64.342384][ C0] ? down_read+0x1b3/0x2e0 [ 64.351986][ C1] Code: 2b 00 74 08 4c 89 f7 e8 9c 9e 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 64.362292][ C0] ? genl_rcv+0x9/0x40 [ 64.371562][ C1] RSP: 0018:ffffc90002f0f9e0 EFLAGS: 00000206 [ 64.377432][ C0] genl_rcv+0x24/0x40 [ 64.385748][ C1] [ 64.385757][ C1] RAX: 0000000000000001 RBX: 1ffff920005e1f48 RCX: ffffffff96a92f03 [ 64.395801][ C0] netlink_unicast+0x7b6/0x980 [ 64.399068][ C1] RDX: dffffc0000000000 RSI: ffffffff8aab3e20 RDI: ffffffff8af9f2c0 [ 64.401905][ C0] ? netlink_detachskb+0x90/0x90 [ 64.406553][ C1] RBP: ffffc90002f0fb30 R08: dffffc0000000000 R09: fffffbfff2131823 [ 64.412164][ C0] ? __virt_addr_valid+0x3bb/0x460 [ 64.417336][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920005e1f44 [ 64.422248][ C0] ? 0xffffffff81000000 [ 64.427159][ C1] R13: dffffc0000000000 R14: ffffc90002f0fa40 R15: 0000000000000246 [ 64.432767][ C0] ? __check_object_size+0x300/0x410 [ 64.437431][ C1] ? read_lock_is_recursive+0x10/0x10 [ 64.442245][ C0] ? bpf_lsm_netlink_send+0x5/0x10 [ 64.447593][ C1] ? __mutex_lock_common+0x444/0x25a0 [ 64.452963][ C0] netlink_sendmsg+0xa30/0xd60 [ 64.457798][ C1] fs_reclaim_acquire+0xa7/0x120 [ 64.462102][ C0] ? netlink_getsockopt+0x5b0/0x5b0 [ 64.466923][ C1] ? fs_reclaim_acquire+0x87/0x120 [ 64.471406][ C0] ? aa_sock_msg_perm+0x91/0x150 [ 64.477099][ C1] slab_pre_alloc_hook+0x22/0xc0 [ 64.482450][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 64.487451][ C1] __kmalloc+0x6e/0x300 [ 64.492451][ C0] ? security_socket_sendmsg+0x7d/0xa0 [ 64.497626][ C1] ? get_callchain_buffers+0xce/0x350 [ 64.503147][ C0] ? netlink_getsockopt+0x5b0/0x5b0 [ 64.508848][ C1] get_callchain_buffers+0xce/0x350 [ 64.513498][ C0] __sys_sendto+0x564/0x720 [ 64.518845][ C1] perf_event_alloc+0x1cf4/0x2180 [ 64.523238][ C0] ? __ia32_sys_getpeername+0x80/0x80 [ 64.527202][ C1] __se_sys_perf_event_open+0xb27/0x4510 [ 64.531684][ C0] ? print_irqtrace_events+0x210/0x210 [ 64.535724][ C1] ? __context_tracking_exit+0x4c/0x80 [ 64.539942][ C0] ? vtime_user_exit+0x2d1/0x400 [ 64.545463][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 64.549773][ C0] __x64_sys_sendto+0xda/0xf0 [ 64.553899][ C1] ? __sys_bpf+0x468/0x670 [ 64.558381][ C0] do_syscall_64+0x3b/0xb0 [ 64.563208][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 64.569334][ C0] ? clear_bhb_loop+0x15/0x70 [ 64.588932][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 64.594981][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.602937][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 64.610903][ C0] RIP: 0033:0x7f27b32eac7c [ 64.618855][ C1] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 64.626815][ C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 64.634763][ C1] do_syscall_64+0x3b/0xb0 [ 64.640200][ C0] RSP: 002b:00007ffd3d1de4c0 EFLAGS: 00000293 [ 64.645721][ C1] ? clear_bhb_loop+0x15/0x70 [ 64.650634][ C0] ORIG_RAX: 000000000000002c [ 64.656154][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.660807][ C0] RAX: ffffffffffffffda RBX: 00007f27b4030620 RCX: 00007f27b32eac7c [ 64.666414][ C1] RIP: 0033:0x7f11527c5de9 [ 64.671238][ C0] RDX: 0000000000000024 RSI: 00007f27b4030670 RDI: 0000000000000003 [ 64.675978][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.681149][ C0] RBP: 0000000000000000 R08: 00007ffd3d1de514 R09: 000000000000000c [ 64.686239][ C1] RSP: 002b:00007f115062f038 EFLAGS: 00000246 [ 64.692278][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 64.697192][ C1] ORIG_RAX: 000000000000012a [ 64.703143][ C0] R13: 0000000000000000 R14: 00007f27b4030670 R15: 0000000000000000 [ 64.708750][ C1] RAX: ffffffffffffffda RBX: 00007f11529defa0 RCX: 00007f11527c5de9 [ 64.711678][ C0] [ 64.714584][ C1] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000400000000180 [ 64.720538][ C0] irq event stamp: 127664 [ 64.720546][ C0] hardirqs last enabled at (127663): [] _raw_spin_unlock_irq+0x1f/0x40 [ 64.725805][ C1] RBP: 00007f11528472a0 R08: 0000000000000000 R09: 0000000000000000 [ 64.745397][ C0] hardirqs last disabled at (127664): [] sysvec_apic_timer_interrupt+0xa/0xc0 [ 64.751455][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 64.759408][ C0] softirqs last enabled at (127060): [] cfg80211_mgmt_registrations_update+0x621/0x960 [ 64.767364][ C1] R13: 0000000000000000 R14: 00007f11529defa0 R15: 00007ffcc6a263b8 [ 64.775319][ C0] softirqs last disabled at (127058): [] cfg80211_mgmt_registrations_update+0x122/0x960 [ 64.783283][ C1] [ 64.791227][ C0] ---[ end trace 45fc9752cd5aa501 ]--- [ 65.987481][ C1] Shutting down cpus with NMI [ 66.966561][ C1] Kernel Offset: disabled [ 66.970892][ C1] Rebooting in 86400 seconds..