last executing test programs: 1.479805627s ago: executing program 0 (id=60): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)='%pI4 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000ff0100005c00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000170000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fe"], 0x48) 1.40451844s ago: executing program 4 (id=71): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) syz_open_procfs$namespace(0x0, 0x0) 1.301896264s ago: executing program 0 (id=64): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.253220156s ago: executing program 4 (id=65): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r2}, 0x10) 1.253089156s ago: executing program 2 (id=66): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0xd}]}]}}, &(0x7f00000005c0)=""/251, 0x32, 0xfb, 0x1}, 0x20) 1.208819988s ago: executing program 0 (id=68): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711401000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) 1.153328271s ago: executing program 4 (id=69): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@const={0x4, 0x0, 0x0, 0xd}]}, {0x0, [0x5f, 0x2e, 0x0]}}, &(0x7f0000000000)=""/144, 0x29, 0x90, 0x1}, 0x28) 1.153181601s ago: executing program 2 (id=70): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=@framed={{0xad, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x15}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 1.114881962s ago: executing program 4 (id=72): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x2000000, 0x2}]}]}}, 0x0, 0x32}, 0x28) 1.071488874s ago: executing program 1 (id=74): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1900000004000000040000000100020000000000", @ANYRES32=0x1, @ANYBLOB="0000000005"], 0x1d) 1.021302226s ago: executing program 0 (id=75): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) 1.021171066s ago: executing program 2 (id=76): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f00000002c0), &(0x7f0000000840)=r1}, 0x20) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.021034336s ago: executing program 4 (id=77): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 746.075528ms ago: executing program 1 (id=79): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r2}, 0x38) 583.817865ms ago: executing program 3 (id=82): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000800000000000000000001801000020bd342100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 481.317719ms ago: executing program 2 (id=83): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8995, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 481.180829ms ago: executing program 1 (id=84): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1fe, 0x12) 471.36264ms ago: executing program 3 (id=85): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe40, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100f5df86dd", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 410.670152ms ago: executing program 0 (id=86): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 357.337045ms ago: executing program 2 (id=87): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x800730) 357.177645ms ago: executing program 1 (id=88): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 317.494126ms ago: executing program 4 (id=89): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r1}, 0x38) 308.972447ms ago: executing program 3 (id=90): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000020000000000000c00000000020000000100000f010000000400000003000000000000000c000000000000000f030000000eeb3100612e5f"], &(0x7f00000000c0)=""/136, 0x51, 0x88, 0x1}, 0x20) 221.30963ms ago: executing program 3 (id=91): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147}, 0x90) 148.235764ms ago: executing program 3 (id=92): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002080)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23, r1}, 0x38) 116.031165ms ago: executing program 1 (id=93): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x0, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x20) 37.233479ms ago: executing program 2 (id=94): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 37.037289ms ago: executing program 0 (id=95): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 7.059399ms ago: executing program 3 (id=96): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffffffb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 0s ago: executing program 1 (id=97): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.152' (ED25519) to the list of known hosts. [ 49.701110][ T4173] cgroup: Unknown subsys name 'net' [ 49.827188][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.044981][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.638454][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 52.676405][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 52.696694][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 52.769534][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 52.820041][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 52.880359][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.888178][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.896121][ T4195] device bridge_slave_0 entered promiscuous mode [ 52.912248][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.919304][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.927705][ T4185] device bridge_slave_0 entered promiscuous mode [ 52.952353][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.959417][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.967204][ T4195] device bridge_slave_1 entered promiscuous mode [ 52.974949][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.982182][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.989861][ T4184] device bridge_slave_0 entered promiscuous mode [ 52.997265][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.004531][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.012406][ T4185] device bridge_slave_1 entered promiscuous mode [ 53.030277][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.037399][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.045687][ T4193] device bridge_slave_0 entered promiscuous mode [ 53.059294][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.066553][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.074369][ T4184] device bridge_slave_1 entered promiscuous mode [ 53.090469][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.097800][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.106020][ T4193] device bridge_slave_1 entered promiscuous mode [ 53.148289][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.166844][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.189578][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.207913][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.221148][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.230471][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.238390][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.246436][ T4197] device bridge_slave_0 entered promiscuous mode [ 53.255757][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.266915][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.282313][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.305831][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.313163][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.320757][ T4197] device bridge_slave_1 entered promiscuous mode [ 53.337213][ T4195] team0: Port device team_slave_0 added [ 53.350456][ T4185] team0: Port device team_slave_0 added [ 53.358552][ T4185] team0: Port device team_slave_1 added [ 53.386035][ T4195] team0: Port device team_slave_1 added [ 53.417194][ T4193] team0: Port device team_slave_0 added [ 53.432584][ T4184] team0: Port device team_slave_0 added [ 53.439070][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.446477][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.472627][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.486422][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.496738][ T4193] team0: Port device team_slave_1 added [ 53.503220][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.510245][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.536477][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.549568][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.556783][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.583161][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.595680][ T4184] team0: Port device team_slave_1 added [ 53.601887][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.609325][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.635486][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.647808][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.695924][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.702998][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.729002][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.742041][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.748977][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.780532][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.819284][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.826302][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.852380][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.866548][ T4197] team0: Port device team_slave_0 added [ 53.888216][ T4195] device hsr_slave_0 entered promiscuous mode [ 53.894864][ T4195] device hsr_slave_1 entered promiscuous mode [ 53.902304][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.909244][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.935319][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.948167][ T4197] team0: Port device team_slave_1 added [ 53.962340][ T4185] device hsr_slave_0 entered promiscuous mode [ 53.968869][ T4185] device hsr_slave_1 entered promiscuous mode [ 53.975528][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.984017][ T4185] Cannot create hsr debugfs directory [ 54.040487][ T4193] device hsr_slave_0 entered promiscuous mode [ 54.047306][ T4193] device hsr_slave_1 entered promiscuous mode [ 54.053911][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.061514][ T4193] Cannot create hsr debugfs directory [ 54.077924][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.085084][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.111170][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.125952][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.132985][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.159245][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.194819][ T4184] device hsr_slave_0 entered promiscuous mode [ 54.201388][ T4184] device hsr_slave_1 entered promiscuous mode [ 54.208025][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.216134][ T4184] Cannot create hsr debugfs directory [ 54.277537][ T4197] device hsr_slave_0 entered promiscuous mode [ 54.284727][ T4197] device hsr_slave_1 entered promiscuous mode [ 54.291144][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.298853][ T4197] Cannot create hsr debugfs directory [ 54.316746][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 54.321619][ T2239] Bluetooth: hci1: command 0x0409 tx timeout [ 54.391678][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 54.401662][ T2239] Bluetooth: hci4: command 0x0409 tx timeout [ 54.407707][ T2239] Bluetooth: hci3: command 0x0409 tx timeout [ 54.549299][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.561185][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.571210][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.583509][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.616709][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.627498][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.637355][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.651194][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.744861][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.755323][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.786783][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.809510][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.817207][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.849707][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.868935][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.883679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.895803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.904057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.913151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.923462][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.943522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.953963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.963778][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.971012][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.980154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.990183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.998925][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.006008][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.016498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.024521][ T4193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.039058][ T4193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.050782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.060267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.069861][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.076930][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.098672][ T4193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.109321][ T4193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.117802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.127263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.137636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.162456][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.171180][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.180024][ T1272] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.187105][ T1272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.197083][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.207249][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.216210][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.225479][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.234807][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.249238][ T4197] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.259023][ T4197] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.269746][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.277985][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.300113][ T4197] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.319321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.328281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.337220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.346518][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.366215][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.377350][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.385843][ T4197] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.397479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.405430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.414124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.422801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.434655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.463100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.476704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.505260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.516806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.570844][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.585645][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.600548][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.638376][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.647295][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.666683][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.676628][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.690898][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.702131][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.709634][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.732943][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.742122][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.750499][ T1272] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.757660][ T1272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.771407][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.785840][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.795068][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.806533][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.822212][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.833084][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.842112][ T1272] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.849176][ T1272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.866547][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.878149][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.887068][ T1272] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.894166][ T1272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.910275][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.930278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.939864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.949859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.958526][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.965790][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.974793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.984000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.992093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.000520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.008179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.019334][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.046361][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.054031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.064085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.074225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.083230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.091855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.100375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.110495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.119071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.127705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.136243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.144852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.153683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.173438][ T4185] device veth0_vlan entered promiscuous mode [ 56.184919][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.194677][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.203581][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.214146][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.222978][ T1272] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.230022][ T1272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.239244][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.247674][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.255997][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.264480][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.272227][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.280973][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.289993][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.298773][ T1272] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.305896][ T1272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.325412][ T4185] device veth1_vlan entered promiscuous mode [ 56.351934][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.359994][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.377911][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.389622][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.398071][ T4245] Bluetooth: hci1: command 0x041b tx timeout [ 56.410043][ T4245] Bluetooth: hci0: command 0x041b tx timeout [ 56.413893][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.425057][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.433566][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.442123][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.450604][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.460588][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.469569][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.477975][ T4175] Bluetooth: hci3: command 0x041b tx timeout [ 56.484256][ T4175] Bluetooth: hci4: command 0x041b tx timeout [ 56.489935][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.490362][ T4175] Bluetooth: hci2: command 0x041b tx timeout [ 56.506863][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.540568][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.549982][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.574746][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.603915][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.612537][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.623229][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.632851][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.641425][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.650183][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.665697][ T4184] device veth0_vlan entered promiscuous mode [ 56.681245][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.694520][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.706933][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.716143][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.727148][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.735916][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.745388][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.754349][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.776160][ T4185] device veth0_macvtap entered promiscuous mode [ 56.792119][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.800287][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.813061][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.820933][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.837132][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.846296][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.856792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.865017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.878472][ T4184] device veth1_vlan entered promiscuous mode [ 56.893113][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.900611][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.916245][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.927632][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.940023][ T4185] device veth1_macvtap entered promiscuous mode [ 57.017562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.029671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.044004][ T4184] device veth0_macvtap entered promiscuous mode [ 57.063767][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.080133][ T4193] device veth0_vlan entered promiscuous mode [ 57.093721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.107419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.117170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.125925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.135580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.144397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.158783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.167399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.175937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.186003][ T4184] device veth1_macvtap entered promiscuous mode [ 57.200972][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.215770][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.236409][ T4193] device veth1_vlan entered promiscuous mode [ 57.258326][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.270600][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.282919][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.290288][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.298333][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.306816][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.315892][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.324674][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.332465][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.339849][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.348553][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.359088][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.368964][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.377882][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.386816][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.417787][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.426760][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.436427][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.446813][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.457825][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.469054][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.490177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.499785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.508961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.519053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.535784][ T4193] device veth0_macvtap entered promiscuous mode [ 57.548039][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.556906][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.566137][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.575121][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.595021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.603754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.620764][ T4193] device veth1_macvtap entered promiscuous mode [ 57.643847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.655717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.664354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.673695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.688089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.696919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.712072][ T4197] device veth0_vlan entered promiscuous mode [ 57.728314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.736721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.767428][ T4197] device veth1_vlan entered promiscuous mode [ 57.781057][ T4195] device veth0_vlan entered promiscuous mode [ 57.788766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.798727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.807540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.840636][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.852790][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.862850][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.873340][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.884576][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.907025][ T4195] device veth1_vlan entered promiscuous mode [ 57.931862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.940465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.966770][ T1272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.976991][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.987699][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.989533][ T1272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.004920][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.015017][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.016228][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.035230][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.046109][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.066655][ T4195] device veth0_macvtap entered promiscuous mode [ 58.076703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.085000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.093607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.102613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.111296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.120174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.128844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.146762][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.155915][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.170339][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.179333][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.197166][ T4195] device veth1_macvtap entered promiscuous mode [ 58.206481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.215122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.224449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.259713][ T4197] device veth0_macvtap entered promiscuous mode [ 58.262352][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.275909][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.302949][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.303264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.311041][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.330054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.338458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.376572][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.388654][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.399666][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.410384][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.420883][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.432009][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.443991][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.454876][ T4197] device veth1_macvtap entered promiscuous mode [ 58.477106][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.485647][ T4175] Bluetooth: hci1: command 0x040f tx timeout [ 58.487498][ T24] Bluetooth: hci0: command 0x040f tx timeout [ 58.494005][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.512804][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.530815][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.542161][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.552782][ T24] Bluetooth: hci4: command 0x040f tx timeout [ 58.553108][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.558810][ T24] Bluetooth: hci3: command 0x040f tx timeout [ 58.570134][ T4250] Bluetooth: hci2: command 0x040f tx timeout [ 58.575519][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.591016][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.602344][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.614477][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.633109][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.641334][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.657308][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.668674][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.679323][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.689857][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.700099][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.710755][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.721562][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.734955][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.746427][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.784244][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.797106][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.810057][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.824941][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.836912][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.856854][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.886996][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.897805][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.913862][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.921504][ C1] hrtimer: interrupt took 45604 ns [ 58.926894][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.945356][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.958826][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.975300][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.989865][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.000498][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.026948][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.040511][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.057026][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.090936][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.107969][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.122455][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.130752][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.147955][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.164114][ T4197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.186489][ T4197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.199348][ T4197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.212531][ T4197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.412796][ T1272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.420805][ T1272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.497296][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.512559][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.534172][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.541780][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.568206][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.597268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.616399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.679897][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.722687][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.755059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.009593][ T4311] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5'. [ 60.109704][ T4316] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8'. [ 60.553133][ T4300] Bluetooth: hci0: command 0x0419 tx timeout [ 60.560233][ T4300] Bluetooth: hci1: command 0x0419 tx timeout [ 60.633330][ T4230] Bluetooth: hci2: command 0x0419 tx timeout [ 60.643010][ T4230] Bluetooth: hci3: command 0x0419 tx timeout [ 60.660556][ T4230] Bluetooth: hci4: command 0x0419 tx timeout [ 60.881181][ T4334] device veth1_macvtap left promiscuous mode [ 61.317621][ T4359] syz.2.25[4359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.317715][ T4359] syz.2.25[4359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.851585][ C1] ------------[ cut here ]------------ [ 63.852412][ C1] [ 63.852418][ C1] ====================================================== [ 63.852424][ C1] WARNING: possible circular locking dependency detected [ 63.852437][ C1] syzkaller #0 Not tainted [ 63.852445][ C1] ------------------------------------------------------ [ 63.852450][ C1] udevd/4399 is trying to acquire lock: [ 63.852459][ C1] ffffffff8c1111c0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60 [ 63.852509][ C1] [ 63.852509][ C1] but task is already holding lock: [ 63.852513][ C1] ffff8880b91280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 63.852549][ C1] [ 63.852549][ C1] which lock already depends on the new lock. [ 63.852549][ C1] [ 63.852553][ C1] [ 63.852553][ C1] the existing dependency chain (in reverse order) is: [ 63.852558][ C1] [ 63.852558][ C1] -> #5 (&base->lock){-.-.}-{2:2}: [ 63.852578][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 63.852594][ C1] lock_timer_base+0x123/0x270 [ 63.852609][ C1] __mod_timer+0x117/0xd20 [ 63.852623][ C1] queue_delayed_work_on+0x126/0x1e0 [ 63.852638][ C1] enqueue_task+0x26d/0x2b0 [ 63.852653][ C1] wake_up_new_task+0x442/0x9a0 [ 63.852669][ C1] kernel_clone+0x421/0x930 [ 63.852683][ C1] kernel_thread+0xc8/0x120 [ 63.852696][ C1] rest_init+0x21/0x330 [ 63.852711][ C1] start_kernel+0x486/0x530 [ 63.852726][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 63.852743][ C1] [ 63.852743][ C1] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 63.852763][ C1] _raw_spin_lock_nested+0x2e/0x40 [ 63.852777][ C1] raw_spin_rq_lock_nested+0x26/0x140 [ 63.852792][ C1] task_fork_fair+0x5c/0x350 [ 63.852805][ C1] sched_cgroup_fork+0x2c6/0x320 [ 63.852827][ C1] copy_process+0x22d1/0x3e00 [ 63.852841][ C1] kernel_clone+0x219/0x930 [ 63.852854][ C1] kernel_thread+0xc8/0x120 [ 63.852867][ C1] rest_init+0x21/0x330 [ 63.852880][ C1] start_kernel+0x486/0x530 [ 63.852892][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 63.852905][ C1] [ 63.852905][ C1] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 63.852923][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 63.852937][ C1] try_to_wake_up+0x5c/0x1050 [ 63.852951][ C1] __wake_up_common+0x2a4/0x4e0 [ 63.852967][ C1] __wake_up+0x108/0x180 [ 63.852981][ C1] tty_port_default_wakeup+0xa5/0xf0 [ 63.852998][ C1] serial8250_tx_chars+0x629/0x830 [ 63.853014][ C1] serial8250_handle_irq+0x519/0x610 [ 63.853030][ C1] serial8250_default_handle_irq+0xb4/0x1a0 [ 63.853047][ C1] serial8250_interrupt+0x9b/0x1c0 [ 63.853061][ C1] __handle_irq_event_percpu+0x291/0x9b0 [ 63.853076][ C1] handle_irq_event+0xa5/0x220 [ 63.853090][ C1] handle_edge_irq+0x243/0xb20 [ 63.853105][ C1] __common_interrupt+0xd7/0x1e0 [ 63.853120][ C1] common_interrupt+0xb0/0xd0 [ 63.853133][ C1] asm_common_interrupt+0x22/0x40 [ 63.853148][ C1] lock_page_memcg+0x20c/0x410 [ 63.853165][ C1] page_add_file_rmap+0x185/0x940 [ 63.853179][ C1] do_set_pte+0x3c9/0x530 [ 63.853193][ C1] filemap_map_pages+0xe7e/0x1390 [ 63.853206][ C1] handle_mm_fault+0x257d/0x43b0 [ 63.853219][ C1] do_user_addr_fault+0x489/0xc80 [ 63.853236][ C1] exc_page_fault+0x60/0x100 [ 63.853251][ C1] asm_exc_page_fault+0x22/0x30 [ 63.853264][ C1] [ 63.853264][ C1] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 63.853285][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 63.853298][ C1] __wake_up+0xed/0x180 [ 63.853312][ C1] tty_port_default_wakeup+0xa5/0xf0 [ 63.853327][ C1] serial8250_tx_chars+0x629/0x830 [ 63.853342][ C1] serial8250_handle_irq+0x519/0x610 [ 63.853358][ C1] serial8250_default_handle_irq+0xb4/0x1a0 [ 63.853374][ C1] serial8250_interrupt+0x9b/0x1c0 [ 63.853389][ C1] __handle_irq_event_percpu+0x291/0x9b0 [ 63.853403][ C1] handle_irq_event+0xa5/0x220 [ 63.853417][ C1] handle_edge_irq+0x243/0xb20 [ 63.853433][ C1] __common_interrupt+0xd7/0x1e0 [ 63.853446][ C1] common_interrupt+0xb0/0xd0 [ 63.853459][ C1] asm_common_interrupt+0x22/0x40 [ 63.853473][ C1] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 63.853487][ C1] uart_write+0x62f/0x880 [ 63.853500][ C1] n_tty_write+0xd21/0x1210 [ 63.853513][ C1] file_tty_write+0x557/0x910 [ 63.853529][ C1] vfs_write+0x712/0xd00 [ 63.853542][ C1] ksys_write+0x14d/0x250 [ 63.853555][ C1] do_syscall_64+0x4c/0xa0 [ 63.853568][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.853582][ C1] [ 63.853582][ C1] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 63.853603][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 63.853616][ C1] serial8250_console_write+0x170/0xf80 [ 63.853632][ C1] console_unlock+0xc86/0x1200 [ 63.853644][ C1] vprintk_emit+0xc0/0x150 [ 63.853661][ C1] _printk+0xcc/0x110 [ 63.853676][ C1] register_console+0x682/0x960 [ 63.853689][ C1] univ8250_console_init+0x41/0x50 [ 63.853705][ C1] console_init+0x177/0x5d0 [ 63.853718][ C1] start_kernel+0x2f9/0x530 [ 63.853731][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 63.853747][ C1] [ 63.853747][ C1] -> #0 (console_owner){-.-.}-{0:0}: [ 63.853766][ C1] __lock_acquire+0x2c33/0x7c60 [ 63.853782][ C1] lock_acquire+0x197/0x3f0 [ 63.853797][ C1] console_lock_spinning_enable+0x51/0x60 [ 63.853811][ C1] console_unlock+0x9f8/0x1200 [ 63.853829][ C1] vprintk_emit+0xc0/0x150 [ 63.853844][ C1] _printk+0xcc/0x110 [ 63.853858][ C1] report_bug+0x1e5/0x2e0 [ 63.853874][ C1] handle_bug+0x3a/0x70 [ 63.853887][ C1] exc_invalid_op+0x16/0x40 [ 63.853900][ C1] asm_exc_invalid_op+0x16/0x20 [ 63.853913][ C1] copy_from_user_nofault+0x160/0x1c0 [ 63.853929][ C1] bpf_probe_read_compat+0xdd/0x170 [ 63.853945][ C1] bpf_prog_63d51858d7cca270+0x3d/0xdfc [ 63.853959][ C1] bpf_trace_run3+0x17e/0x320 [ 63.853970][ C1] enqueue_timer+0x394/0x520 [ 63.853984][ C1] __mod_timer+0x8e1/0xd20 [ 63.853996][ C1] call_timer_fn+0x16c/0x530 [ 63.854010][ C1] __run_timers+0x525/0x7c0 [ 63.854025][ C1] run_timer_softirq+0x63/0xf0 [ 63.854039][ C1] handle_softirqs+0x328/0x820 [ 63.854053][ C1] __irq_exit_rcu+0x12f/0x220 [ 63.854066][ C1] irq_exit_rcu+0x5/0x20 [ 63.854076][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 63.854091][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 63.854110][ C1] unwind_get_return_address+0x4/0x80 [ 63.854126][ C1] arch_stack_walk+0xf2/0x140 [ 63.854142][ C1] stack_trace_save+0x98/0xe0 [ 63.854155][ C1] kasan_set_track+0x4b/0x70 [ 63.854169][ C1] kasan_set_free_info+0x1f/0x40 [ 63.854185][ C1] ____kasan_slab_free+0xd5/0x110 [ 63.854199][ C1] slab_free_freelist_hook+0xea/0x170 [ 63.854213][ C1] kfree+0xef/0x2a0 [ 63.854225][ C1] tomoyo_realpath_from_path+0x5d8/0x610 [ 63.854243][ C1] tomoyo_check_open_permission+0x183/0x360 [ 63.854259][ C1] security_file_open+0x5e/0xa0 [ 63.854275][ C1] do_dentry_open+0x322/0xf80 [ 63.854291][ C1] path_openat+0x2682/0x2f30 [ 63.854306][ C1] do_filp_open+0x1b3/0x3e0 [ 63.854320][ C1] do_sys_openat2+0x142/0x4a0 [ 63.854335][ C1] __x64_sys_openat+0x135/0x160 [ 63.854351][ C1] do_syscall_64+0x4c/0xa0 [ 63.854364][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.854379][ C1] [ 63.854379][ C1] other info that might help us debug this: [ 63.854379][ C1] [ 63.854383][ C1] Chain exists of: [ 63.854383][ C1] console_owner --> &rq->__lock --> &base->lock [ 63.854383][ C1] [ 63.854406][ C1] Possible unsafe locking scenario: [ 63.854406][ C1] [ 63.854410][ C1] CPU0 CPU1 [ 63.854414][ C1] ---- ---- [ 63.854417][ C1] lock(&base->lock); [ 63.854426][ C1] lock(&rq->__lock); [ 63.854436][ C1] lock(&base->lock); [ 63.854446][ C1] lock(console_owner); [ 63.854455][ C1] [ 63.854455][ C1] *** DEADLOCK *** [ 63.854455][ C1] [ 63.854458][ C1] 5 locks held by udevd/4399: [ 63.854467][ C1] #0: ffffffff8c6ad298 (tomoyo_ss){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 63.854505][ C1] #1: ffffc90000dd0be0 ((&app->join_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbb/0x530 [ 63.854543][ C1] #2: ffff8880b91280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 63.854580][ C1] #3: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 63.854615][ C1] #4: ffffffff8c1112a0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa7/0x150 [ 63.854653][ C1] [ 63.854653][ C1] stack backtrace: [ 63.854666][ C1] CPU: 1 PID: 4399 Comm: udevd Not tainted syzkaller #0 [ 63.854683][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 63.854698][ C1] Call Trace: [ 63.854703][ C1] [ 63.854710][ C1] dump_stack_lvl+0x168/0x230 [ 63.854729][ C1] ? load_image+0x3b0/0x3b0 [ 63.854746][ C1] ? show_regs_print_info+0x20/0x20 [ 63.854768][ C1] ? print_circular_bug+0x12b/0x1a0 [ 63.854784][ C1] check_noncircular+0x274/0x310 [ 63.854800][ C1] ? add_chain_block+0x940/0x940 [ 63.854814][ C1] ? lockdep_lock+0xdc/0x1e0 [ 63.854840][ C1] ? mark_lock+0x94/0x320 [ 63.854858][ C1] __lock_acquire+0x2c33/0x7c60 [ 63.854875][ C1] ? put_dec_trunc8+0x1fd/0x340 [ 63.854904][ C1] ? verify_lock_unused+0x140/0x140 [ 63.854929][ C1] ? sprintf+0xd6/0x120 [ 63.854948][ C1] lock_acquire+0x197/0x3f0 [ 63.854964][ C1] ? console_lock_spinning_enable+0x2c/0x60 [ 63.854980][ C1] ? prb_read_valid+0x60/0x60 [ 63.854998][ C1] ? read_lock_is_recursive+0x10/0x10 [ 63.855015][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 63.855031][ C1] ? __rwlock_init+0x140/0x140 [ 63.855046][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 63.855061][ C1] console_lock_spinning_enable+0x51/0x60 [ 63.855075][ C1] ? console_lock_spinning_enable+0x2c/0x60 [ 63.855087][ C1] console_unlock+0x9f8/0x1200 [ 63.855105][ C1] ? console_trylock_spinning+0x350/0x350 [ 63.855125][ C1] ? __down_trylock_console_sem+0x184/0x1e0 [ 63.855139][ C1] ? vprintk_emit+0xa7/0x150 [ 63.855156][ C1] ? printk_parse_prefix+0x330/0x330 [ 63.855173][ C1] ? vprintk_emit+0xa7/0x150 [ 63.855190][ C1] ? console_trylock+0x70/0x70 [ 63.855205][ C1] ? mark_lock+0x94/0x320 [ 63.855225][ C1] ? vprintk_emit+0x150/0x150 [ 63.855242][ C1] ? __lock_acquire+0x12d9/0x7c60 [ 63.855260][ C1] ? __lock_acquire+0x13ad/0x7c60 [ 63.855281][ C1] vprintk_emit+0xc0/0x150 [ 63.855299][ C1] _printk+0xcc/0x110 [ 63.855318][ C1] ? load_image+0x3b0/0x3b0 [ 63.855335][ C1] ? __lock_acquire+0x13ad/0x7c60 [ 63.855353][ C1] ? find_bug+0xa1/0x350 [ 63.855369][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 63.855387][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 63.855404][ C1] report_bug+0x1e5/0x2e0 [ 63.855423][ C1] handle_bug+0x3a/0x70 [ 63.855438][ C1] exc_invalid_op+0x16/0x40 [ 63.855452][ C1] asm_exc_invalid_op+0x16/0x20 [ 63.855472][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 63.855491][ C1] Code: 24 45 31 f6 31 ff 89 de e8 8d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 63.855504][ C1] RSP: 0018:ffffc90000dd0978 EFLAGS: 00010046 [ 63.855518][ C1] RAX: ffffffff819ed900 RBX: 0000000000000008 RCX: ffff88802bee3b80 [ 63.855530][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.855540][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10057dc771 [ 63.855551][ C1] R10: ffffed10057dc771 R11: 1ffff110057dc770 R12: ffff88802bee5308 [ 63.855563][ C1] R13: 00007ffffffff000 R14: ffffc90000dd09e8 R15: 0000000020000000 [ 63.855578][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 63.855597][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 63.855615][ C1] bpf_probe_read_compat+0xdd/0x170 [ 63.855634][ C1] bpf_prog_63d51858d7cca270+0x3d/0xdfc [ 63.855648][ C1] bpf_trace_run3+0x17e/0x320 [ 63.855662][ C1] ? bpf_trace_run2+0x2d0/0x2d0 [ 63.855675][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 63.855691][ C1] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 63.855706][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 63.855722][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 63.855740][ C1] enqueue_timer+0x394/0x520 [ 63.855758][ C1] __mod_timer+0x8e1/0xd20 [ 63.855777][ C1] ? garp_init_applicant+0x450/0x450 [ 63.855794][ C1] call_timer_fn+0x16c/0x530 [ 63.855811][ C1] ? garp_init_applicant+0x450/0x450 [ 63.855848][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 63.855866][ C1] ? __run_timers+0x7c0/0x7c0 [ 63.855886][ C1] ? rcu_is_watching+0x11/0xa0 [ 63.855900][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 63.855915][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 63.855930][ C1] ? garp_init_applicant+0x450/0x450 [ 63.855946][ C1] __run_timers+0x525/0x7c0 [ 63.855968][ C1] ? detach_timer+0x2b0/0x2b0 [ 63.855983][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 63.856003][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 63.856019][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 63.856040][ C1] run_timer_softirq+0x63/0xf0 [ 63.856057][ C1] handle_softirqs+0x328/0x820 [ 63.856074][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 63.856091][ C1] ? do_softirq+0x200/0x200 [ 63.856110][ C1] __irq_exit_rcu+0x12f/0x220 [ 63.856124][ C1] ? irq_exit_rcu+0x20/0x20 [ 63.856142][ C1] irq_exit_rcu+0x5/0x20 [ 63.856154][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 63.856168][ C1] [ 63.856172][ C1] [ 63.856177][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 63.856191][ C1] RIP: 0010:unwind_get_return_address+0x4/0x80 [ 63.856207][ C1] Code: 49 89 fe 48 89 f7 49 89 f7 e8 b8 bc 87 00 4c 89 f7 4c 89 fe e9 2d ff ff ff e8 58 f6 74 08 0f 1f 84 00 00 00 00 00 41 57 41 56 <53> 48 89 fb 49 be 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 42 [ 63.856217][ C1] RSP: 0018:ffffc900034a7170 EFLAGS: 00000202 [ 63.856229][ C1] RAX: 0000000080000001 RBX: ffffc900034a7240 RCX: 0000000080000000 [ 63.856238][ C1] RDX: ffffc900034a7101 RSI: ffffc900034a72b0 RDI: ffffc900034a7188 [ 63.856249][ C1] RBP: ffffc900034a7210 R08: dffffc0000000000 R09: ffffc900034a71d8 [ 63.856260][ C1] R10: fffff52000694e3d R11: 1ffff92000694e3b R12: ffff88802bee3b80 [ 63.856272][ C1] R13: ffff888027dc0000 R14: ffffffff81667ac0 R15: ffffc900034a7188 [ 63.856283][ C1] ? stack_trace_save+0xe0/0xe0 [ 63.856303][ C1] ? stack_trace_save+0xe0/0xe0 [ 63.856316][ C1] arch_stack_walk+0xf2/0x140 [ 63.856334][ C1] ? kasan_set_track+0x4b/0x70 [ 63.856348][ C1] ? kfree+0xef/0x2a0 [ 63.856359][ C1] stack_trace_save+0x98/0xe0 [ 63.856371][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 63.856389][ C1] kasan_set_track+0x4b/0x70 [ 63.856422][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 63.856436][ C1] kasan_set_free_info+0x1f/0x40 [ 63.856453][ C1] ____kasan_slab_free+0xd5/0x110 [ 63.856469][ C1] slab_free_freelist_hook+0xea/0x170 [ 63.856485][ C1] ? tomoyo_realpath_from_path+0x5d8/0x610 [ 63.856504][ C1] kfree+0xef/0x2a0 [ 63.856520][ C1] tomoyo_realpath_from_path+0x5d8/0x610 [ 63.856542][ C1] tomoyo_check_open_permission+0x183/0x360 [ 63.856559][ C1] ? tomoyo_check_path_number_acl+0x280/0x280 [ 63.856584][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 63.856600][ C1] ? __rwlock_init+0x140/0x140 [ 63.856613][ C1] ? hook_file_open+0xf1/0x230 [ 63.856626][ C1] ? tomoyo_file_open+0xe9/0x170 [ 63.856641][ C1] security_file_open+0x5e/0xa0 [ 63.856656][ C1] do_dentry_open+0x322/0xf80 [ 63.856699][ C1] path_openat+0x2682/0x2f30 [ 63.856722][ C1] ? __kasan_slab_alloc+0xb3/0xd0 [ 63.856736][ C1] ? __kasan_slab_alloc+0x9c/0xd0 [ 63.856749][ C1] ? slab_post_alloc_hook+0x4c/0x380 [ 63.856763][ C1] ? verify_lock_unused+0x140/0x140 [ 63.856777][ C1] ? __x64_sys_openat+0x135/0x160 [ 63.856794][ C1] ? do_filp_open+0x3e0/0x3e0 [ 63.856816][ C1] do_filp_open+0x1b3/0x3e0 [ 63.856839][ C1] ? vfs_tmpfile+0x300/0x300 [ 63.856859][ C1] ? _raw_spin_unlock+0x24/0x40 [ 63.856872][ C1] ? alloc_fd+0x598/0x630 [ 63.856890][ C1] do_sys_openat2+0x142/0x4a0 [ 63.856907][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 63.856925][ C1] ? do_sys_open+0xe0/0xe0 [ 63.856942][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 63.856960][ C1] ? lock_chain_count+0x20/0x20 [ 63.856977][ C1] ? vtime_user_exit+0x2dc/0x400 [ 63.856993][ C1] __x64_sys_openat+0x135/0x160 [ 63.857011][ C1] do_syscall_64+0x4c/0xa0 [ 63.857025][ C1] ? clear_bhb_loop+0x30/0x80 [ 63.857038][ C1] ? clear_bhb_loop+0x30/0x80 [ 63.857052][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.857067][ C1] RIP: 0033:0x7fe4f4f8e407 [ 63.857079][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 63.857091][ C1] RSP: 002b:00007ffd96ddc370 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 63.857108][ C1] RAX: ffffffffffffffda RBX: 00007fe4f4ea0880 RCX: 00007fe4f4f8e407 [ 63.857119][ C1] RDX: 0000000000080000 RSI: 00005572048a8c20 RDI: ffffffffffffff9c [ 63.857129][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 63.857138][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00005571dfc5695f [ 63.857148][ C1] R13: 00005571dfc67660 R14: 0000000000000000 R15: 00000000ffffffff [ 63.857163][ C1] [ 65.613373][ C1] WARNING: CPU: 1 PID: 4399 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 65.622656][ C1] Modules linked in: [ 65.626531][ C1] CPU: 1 PID: 4399 Comm: udevd Not tainted syzkaller #0 [ 65.633443][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 65.643474][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 65.649612][ C1] Code: 24 45 31 f6 31 ff 89 de e8 8d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 65.669656][ C1] RSP: 0018:ffffc90000dd0978 EFLAGS: 00010046 [ 65.675704][ C1] RAX: ffffffff819ed900 RBX: 0000000000000008 RCX: ffff88802bee3b80 [ 65.683856][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.691835][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10057dc771 [ 65.699801][ C1] R10: ffffed10057dc771 R11: 1ffff110057dc770 R12: ffff88802bee5308 [ 65.707759][ C1] R13: 00007ffffffff000 R14: ffffc90000dd09e8 R15: 0000000020000000 [ 65.715715][ C1] FS: 00007fe4f4ea0880(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 65.724631][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.731197][ C1] CR2: 0000000020000000 CR3: 00000000631d8000 CR4: 00000000003506e0 [ 65.739191][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.747143][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.755096][ C1] Call Trace: [ 65.758358][ C1] [ 65.761198][ C1] bpf_probe_read_compat+0xdd/0x170 [ 65.766384][ C1] bpf_prog_63d51858d7cca270+0x3d/0xdfc [ 65.771910][ C1] bpf_trace_run3+0x17e/0x320 [ 65.776567][ C1] ? bpf_trace_run2+0x2d0/0x2d0 [ 65.781397][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 65.787271][ C1] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 65.792713][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 65.798589][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 65.803779][ C1] enqueue_timer+0x394/0x520 [ 65.808363][ C1] __mod_timer+0x8e1/0xd20 [ 65.812765][ C1] ? garp_init_applicant+0x450/0x450 [ 65.818316][ C1] call_timer_fn+0x16c/0x530 [ 65.822913][ C1] ? garp_init_applicant+0x450/0x450 [ 65.828303][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 65.834373][ C1] ? __run_timers+0x7c0/0x7c0 [ 65.839266][ C1] ? rcu_is_watching+0x11/0xa0 [ 65.844187][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 65.849367][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 65.854547][ C1] ? garp_init_applicant+0x450/0x450 [ 65.859829][ C1] __run_timers+0x525/0x7c0 [ 65.864512][ C1] ? detach_timer+0x2b0/0x2b0 [ 65.869205][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 65.875221][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 65.880058][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 65.885335][ C1] run_timer_softirq+0x63/0xf0 [ 65.890086][ C1] handle_softirqs+0x328/0x820 [ 65.894832][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 65.899788][ C1] ? do_softirq+0x200/0x200 [ 65.904273][ C1] __irq_exit_rcu+0x12f/0x220 [ 65.908928][ C1] ? irq_exit_rcu+0x20/0x20 [ 65.913413][ C1] irq_exit_rcu+0x5/0x20 [ 65.917636][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 65.923253][ C1] [ 65.926164][ C1] [ 65.929075][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 65.935034][ C1] RIP: 0010:unwind_get_return_address+0x4/0x80 [ 65.941169][ C1] Code: 49 89 fe 48 89 f7 49 89 f7 e8 b8 bc 87 00 4c 89 f7 4c 89 fe e9 2d ff ff ff e8 58 f6 74 08 0f 1f 84 00 00 00 00 00 41 57 41 56 <53> 48 89 fb 49 be 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 42 [ 65.960755][ C1] RSP: 0018:ffffc900034a7170 EFLAGS: 00000202 [ 65.966805][ C1] RAX: 0000000080000001 RBX: ffffc900034a7240 RCX: 0000000080000000 [ 65.974767][ C1] RDX: ffffc900034a7101 RSI: ffffc900034a72b0 RDI: ffffc900034a7188 [ 65.982718][ C1] RBP: ffffc900034a7210 R08: dffffc0000000000 R09: ffffc900034a71d8 [ 65.990672][ C1] R10: fffff52000694e3d R11: 1ffff92000694e3b R12: ffff88802bee3b80 [ 65.998623][ C1] R13: ffff888027dc0000 R14: ffffffff81667ac0 R15: ffffc900034a7188 [ 66.006575][ C1] ? stack_trace_save+0xe0/0xe0 [ 66.011424][ C1] ? stack_trace_save+0xe0/0xe0 [ 66.016262][ C1] arch_stack_walk+0xf2/0x140 [ 66.020938][ C1] ? kasan_set_track+0x4b/0x70 [ 66.025689][ C1] ? kfree+0xef/0x2a0 [ 66.029664][ C1] stack_trace_save+0x98/0xe0 [ 66.034425][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 66.039521][ C1] kasan_set_track+0x4b/0x70 [ 66.044115][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 66.048946][ C1] kasan_set_free_info+0x1f/0x40 [ 66.053863][ C1] ____kasan_slab_free+0xd5/0x110 [ 66.058868][ C1] slab_free_freelist_hook+0xea/0x170 [ 66.064218][ C1] ? tomoyo_realpath_from_path+0x5d8/0x610 [ 66.070007][ C1] kfree+0xef/0x2a0 [ 66.073795][ C1] tomoyo_realpath_from_path+0x5d8/0x610 [ 66.079848][ C1] tomoyo_check_open_permission+0x183/0x360 [ 66.085958][ C1] ? tomoyo_check_path_number_acl+0x280/0x280 [ 66.092044][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 66.097064][ C1] ? __rwlock_init+0x140/0x140 [ 66.101811][ C1] ? hook_file_open+0xf1/0x230 [ 66.106659][ C1] ? tomoyo_file_open+0xe9/0x170 [ 66.111578][ C1] security_file_open+0x5e/0xa0 [ 66.116409][ C1] do_dentry_open+0x322/0xf80 [ 66.121070][ C1] path_openat+0x2682/0x2f30 [ 66.125649][ C1] ? __kasan_slab_alloc+0xb3/0xd0 [ 66.130658][ C1] ? __kasan_slab_alloc+0x9c/0xd0 [ 66.135670][ C1] ? slab_post_alloc_hook+0x4c/0x380 [ 66.140950][ C1] ? verify_lock_unused+0x140/0x140 [ 66.146139][ C1] ? __x64_sys_openat+0x135/0x160 [ 66.151244][ C1] ? do_filp_open+0x3e0/0x3e0 [ 66.156179][ C1] do_filp_open+0x1b3/0x3e0 [ 66.160686][ C1] ? vfs_tmpfile+0x300/0x300 [ 66.165279][ C1] ? _raw_spin_unlock+0x24/0x40 [ 66.170114][ C1] ? alloc_fd+0x598/0x630 [ 66.174430][ C1] do_sys_openat2+0x142/0x4a0 [ 66.179088][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 66.184203][ C1] ? do_sys_open+0xe0/0xe0 [ 66.188628][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 66.194593][ C1] ? lock_chain_count+0x20/0x20 [ 66.199426][ C1] ? vtime_user_exit+0x2dc/0x400 [ 66.204348][ C1] __x64_sys_openat+0x135/0x160 [ 66.209184][ C1] do_syscall_64+0x4c/0xa0 [ 66.213586][ C1] ? clear_bhb_loop+0x30/0x80 [ 66.218245][ C1] ? clear_bhb_loop+0x30/0x80 [ 66.222993][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.228869][ C1] RIP: 0033:0x7fe4f4f8e407 [ 66.233280][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 66.252957][ C1] RSP: 002b:00007ffd96ddc370 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 66.261367][ C1] RAX: ffffffffffffffda RBX: 00007fe4f4ea0880 RCX: 00007fe4f4f8e407 [ 66.269334][ C1] RDX: 0000000000080000 RSI: 00005572048a8c20 RDI: ffffffffffffff9c [ 66.277378][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 66.285327][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00005571dfc5695f [ 66.293275][ C1] R13: 00005571dfc67660 R14: 0000000000000000 R15: 00000000ffffffff [ 66.301233][ C1] [ 66.304253][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 66.311526][ C1] CPU: 1 PID: 4399 Comm: udevd Not tainted syzkaller #0 [ 66.318447][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 66.328484][ C1] Call Trace: [ 66.331752][ C1] [ 66.334707][ C1] dump_stack_lvl+0x168/0x230 [ 66.339386][ C1] ? show_regs_print_info+0x20/0x20 [ 66.344593][ C1] ? load_image+0x3b0/0x3b0 [ 66.349093][ C1] panic+0x2c9/0x7f0 [ 66.352972][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 66.357461][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 66.363082][ C1] __warn+0x248/0x2b0 [ 66.367044][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 66.372575][ C1] report_bug+0x1b7/0x2e0 [ 66.376890][ C1] handle_bug+0x3a/0x70 [ 66.381026][ C1] exc_invalid_op+0x16/0x40 [ 66.385510][ C1] asm_exc_invalid_op+0x16/0x20 [ 66.390340][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 66.396472][ C1] Code: 24 45 31 f6 31 ff 89 de e8 8d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 66.416143][ C1] RSP: 0018:ffffc90000dd0978 EFLAGS: 00010046 [ 66.422213][ C1] RAX: ffffffff819ed900 RBX: 0000000000000008 RCX: ffff88802bee3b80 [ 66.430261][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.438215][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10057dc771 [ 66.446173][ C1] R10: ffffed10057dc771 R11: 1ffff110057dc770 R12: ffff88802bee5308 [ 66.454137][ C1] R13: 00007ffffffff000 R14: ffffc90000dd09e8 R15: 0000000020000000 [ 66.462216][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 66.467760][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 66.473300][ C1] bpf_probe_read_compat+0xdd/0x170 [ 66.478496][ C1] bpf_prog_63d51858d7cca270+0x3d/0xdfc [ 66.484031][ C1] bpf_trace_run3+0x17e/0x320 [ 66.488692][ C1] ? bpf_trace_run2+0x2d0/0x2d0 [ 66.493524][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 66.499406][ C1] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 66.504760][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 66.510657][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 66.515837][ C1] enqueue_timer+0x394/0x520 [ 66.520414][ C1] __mod_timer+0x8e1/0xd20 [ 66.524816][ C1] ? garp_init_applicant+0x450/0x450 [ 66.530112][ C1] call_timer_fn+0x16c/0x530 [ 66.534708][ C1] ? garp_init_applicant+0x450/0x450 [ 66.539976][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 66.546033][ C1] ? __run_timers+0x7c0/0x7c0 [ 66.550695][ C1] ? rcu_is_watching+0x11/0xa0 [ 66.555526][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 66.560711][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 66.565910][ C1] ? garp_init_applicant+0x450/0x450 [ 66.571191][ C1] __run_timers+0x525/0x7c0 [ 66.575698][ C1] ? detach_timer+0x2b0/0x2b0 [ 66.580353][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 66.586492][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 66.591337][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 66.596626][ C1] run_timer_softirq+0x63/0xf0 [ 66.601393][ C1] handle_softirqs+0x328/0x820 [ 66.606140][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 66.611090][ C1] ? do_softirq+0x200/0x200 [ 66.616120][ C1] __irq_exit_rcu+0x12f/0x220 [ 66.620909][ C1] ? irq_exit_rcu+0x20/0x20 [ 66.625413][ C1] irq_exit_rcu+0x5/0x20 [ 66.629756][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 66.635390][ C1] [ 66.638307][ C1] [ 66.641221][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 66.647226][ C1] RIP: 0010:unwind_get_return_address+0x4/0x80 [ 66.653382][ C1] Code: 49 89 fe 48 89 f7 49 89 f7 e8 b8 bc 87 00 4c 89 f7 4c 89 fe e9 2d ff ff ff e8 58 f6 74 08 0f 1f 84 00 00 00 00 00 41 57 41 56 <53> 48 89 fb 49 be 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 42 [ 66.673164][ C1] RSP: 0018:ffffc900034a7170 EFLAGS: 00000202 [ 66.679248][ C1] RAX: 0000000080000001 RBX: ffffc900034a7240 RCX: 0000000080000000 [ 66.687206][ C1] RDX: ffffc900034a7101 RSI: ffffc900034a72b0 RDI: ffffc900034a7188 [ 66.695351][ C1] RBP: ffffc900034a7210 R08: dffffc0000000000 R09: ffffc900034a71d8 [ 66.703306][ C1] R10: fffff52000694e3d R11: 1ffff92000694e3b R12: ffff88802bee3b80 [ 66.711281][ C1] R13: ffff888027dc0000 R14: ffffffff81667ac0 R15: ffffc900034a7188 [ 66.719242][ C1] ? stack_trace_save+0xe0/0xe0 [ 66.724111][ C1] ? stack_trace_save+0xe0/0xe0 [ 66.728961][ C1] arch_stack_walk+0xf2/0x140 [ 66.733650][ C1] ? kasan_set_track+0x4b/0x70 [ 66.738430][ C1] ? kfree+0xef/0x2a0 [ 66.742408][ C1] stack_trace_save+0x98/0xe0 [ 66.747069][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 66.752173][ C1] kasan_set_track+0x4b/0x70 [ 66.756760][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 66.761591][ C1] kasan_set_free_info+0x1f/0x40 [ 66.766509][ C1] ____kasan_slab_free+0xd5/0x110 [ 66.771517][ C1] slab_free_freelist_hook+0xea/0x170 [ 66.776968][ C1] ? tomoyo_realpath_from_path+0x5d8/0x610 [ 66.782775][ C1] kfree+0xef/0x2a0 [ 66.786580][ C1] tomoyo_realpath_from_path+0x5d8/0x610 [ 66.792210][ C1] tomoyo_check_open_permission+0x183/0x360 [ 66.798128][ C1] ? tomoyo_check_path_number_acl+0x280/0x280 [ 66.804187][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 66.809201][ C1] ? __rwlock_init+0x140/0x140 [ 66.813947][ C1] ? hook_file_open+0xf1/0x230 [ 66.818699][ C1] ? tomoyo_file_open+0xe9/0x170 [ 66.823621][ C1] security_file_open+0x5e/0xa0 [ 66.828454][ C1] do_dentry_open+0x322/0xf80 [ 66.833116][ C1] path_openat+0x2682/0x2f30 [ 66.837691][ C1] ? __kasan_slab_alloc+0xb3/0xd0 [ 66.842694][ C1] ? __kasan_slab_alloc+0x9c/0xd0 [ 66.847697][ C1] ? slab_post_alloc_hook+0x4c/0x380 [ 66.852975][ C1] ? verify_lock_unused+0x140/0x140 [ 66.858150][ C1] ? __x64_sys_openat+0x135/0x160 [ 66.863256][ C1] ? do_filp_open+0x3e0/0x3e0 [ 66.867920][ C1] do_filp_open+0x1b3/0x3e0 [ 66.873047][ C1] ? vfs_tmpfile+0x300/0x300 [ 66.877640][ C1] ? _raw_spin_unlock+0x24/0x40 [ 66.882743][ C1] ? alloc_fd+0x598/0x630 [ 66.887084][ C1] do_sys_openat2+0x142/0x4a0 [ 66.891855][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 66.896888][ C1] ? do_sys_open+0xe0/0xe0 [ 66.901423][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 66.907399][ C1] ? lock_chain_count+0x20/0x20 [ 66.912247][ C1] ? vtime_user_exit+0x2dc/0x400 [ 66.917257][ C1] __x64_sys_openat+0x135/0x160 [ 66.922107][ C1] do_syscall_64+0x4c/0xa0 [ 66.926622][ C1] ? clear_bhb_loop+0x30/0x80 [ 66.931376][ C1] ? clear_bhb_loop+0x30/0x80 [ 66.936138][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.942194][ C1] RIP: 0033:0x7fe4f4f8e407 [ 66.946616][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 66.966210][ C1] RSP: 002b:00007ffd96ddc370 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 66.974730][ C1] RAX: ffffffffffffffda RBX: 00007fe4f4ea0880 RCX: 00007fe4f4f8e407 [ 66.982705][ C1] RDX: 0000000000080000 RSI: 00005572048a8c20 RDI: ffffffffffffff9c [ 66.990665][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 66.998644][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00005571dfc5695f [ 67.006599][ C1] R13: 00005571dfc67660 R14: 0000000000000000 R15: 00000000ffffffff [ 67.014659][ C1] [ 67.017919][ C1] Kernel Offset: disabled [ 67.022284][ C1] Rebooting in 86400 seconds..