last executing test programs: 2.744132637s ago: executing program 4 (id=268): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x3, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61, 0x61, 0x5f]}}, 0x0, 0x2e, 0x0, 0x1, 0xd}, 0x28) 2.708935809s ago: executing program 4 (id=270): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'geneve0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x15, r2, 0x1, 0x5e, 0x6, @multicast}, 0x14) 2.572217834s ago: executing program 4 (id=273): waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x20000000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x10, 0x8}, {0x4, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002"], 0x190}}, 0x0) 2.456680379s ago: executing program 4 (id=275): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 2.396597521s ago: executing program 4 (id=278): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100006b6c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 2.063931495s ago: executing program 1 (id=283): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.059543915s ago: executing program 4 (id=284): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.738016479s ago: executing program 32 (id=284): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.516334018s ago: executing program 1 (id=291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) 1.440573241s ago: executing program 1 (id=293): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r1, @ANYBLOB="010600000000000014001280090001005866726d00000000040002"], 0x34}}, 0x40040) 1.272139918s ago: executing program 1 (id=294): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x1, r3, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c40)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1.255675009s ago: executing program 3 (id=295): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000080)=0x400) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 1.2142806s ago: executing program 0 (id=296): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x5292, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x6, 0xd, 0x4, "c16090a076cb4e02b907be607f6c770423f9b3f2278fc2895593fbfd8e3228925921a5601cee6404602f5bc3cffc2de5b82fa2431e42cb7a14383eceec233716", "a57c561189a6f4b1a7ebc46ea9575bc786aa73920097eb7e466a3d5eb1501ad6341bc7b271fe77332b3d8396649d3fe153b8074985e85c8b0ff7afc1e3d8fbec", "cd8d4cd2a1a60623c5a27953e96f61f7cb3742fd9cfd392daacf4ae2d10a4a34", [0x25, 0x5]}) 1.084356926s ago: executing program 3 (id=297): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 1.084142786s ago: executing program 2 (id=298): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r0, &(0x7f0000000080)="ac", 0xfffd, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0xc5f}, 0x1c) 1.084043536s ago: executing program 0 (id=299): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x7, 0x2, 0x8, 0x8, 0x6, 0x92, 0x6, 0x3, 0x7, 0xc, 0x3, 0xa, 0x6, 0x6}, 0xe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 985.38058ms ago: executing program 3 (id=300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="030000"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 919.877593ms ago: executing program 2 (id=301): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x83, 0x0, 0x6}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) 744.21525ms ago: executing program 1 (id=302): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}}, 0x24}}, 0x0) 744.0123ms ago: executing program 2 (id=303): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) recvmsg$kcm(r0, &(0x7f0000000700)={0x0, 0xfffffffffffffe60, &(0x7f0000000580), 0xb1}, 0x2020) 728.07033ms ago: executing program 0 (id=304): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0) 688.032702ms ago: executing program 2 (id=305): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) 535.318778ms ago: executing program 1 (id=306): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 464.302661ms ago: executing program 2 (id=307): r0 = socket$key(0xf, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="ab4998dda4c788d496281d54e8", 0xd}, {&(0x7f0000000580)="f5bfa9", 0x3}], 0x2}}], 0x1, 0x8000) 464.000312ms ago: executing program 3 (id=308): mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16}) 422.133453ms ago: executing program 0 (id=309): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) chroot(&(0x7f0000000400)='./file0\x00') 352.623256ms ago: executing program 3 (id=310): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) dup(0xffffffffffffffff) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r1 = shmat(r0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r2, 0x0) shmdt(r1) 308.222928ms ago: executing program 2 (id=311): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf9100000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) writev(r1, &(0x7f0000001000)=[{&(0x7f0000000880)="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", 0x107}, {&(0x7f0000000300)="f720545dd3b03efebdc5e0fccd4ebd5a12deb78fb2c5b13465656b6d7bbd6359c662bc2d12228e8af99d9f1012e0d43912798e5d1291ed84aeef6e", 0x3b}, {&(0x7f0000000cc0)="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", 0x2be}], 0x3) sendfile(r1, r0, 0x0, 0x7fffeff9) 297.989618ms ago: executing program 0 (id=312): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mq_open(&(0x7f0000000180)=',@&{,\x00', 0x40, 0xa, 0x0) 146.897185ms ago: executing program 3 (id=313): syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@nouid32}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 0s ago: executing program 0 (id=314): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x9d}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000003001000030102000400000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r3, &(0x7f0000000040), 0x0}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) syz_clone3(&(0x7f00000008c0)={0x100100, &(0x7f0000000340), &(0x7f0000000540), &(0x7f0000000580), {0xc}, &(0x7f00000005c0)=""/207, 0xcf, &(0x7f00000006c0)=""/251, &(0x7f0000000800)=[0x0], 0x1}, 0x58) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x20, 0x8000, 0x7, 0x10, {{0x11, 0x4, 0x1, 0x19, 0x44, 0x67, 0x0, 0x2, 0x0, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x30, 0x0, [{0x1, 0xe, "d2424e0f481ef5938d0d601b"}, {0x0, 0x12, "7a519800d712e5d57e826514482b7a3d"}, {0x2, 0xa, "d94608ccd52bd269"}]}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0xd) close(r4) socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts. syzkaller login: [ 56.306287][ T4171] cgroup: Unknown subsys name 'net' [ 56.441259][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.792614][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.207879][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 59.300588][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 59.395938][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 59.405746][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.413492][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.421660][ T4194] device bridge_slave_0 entered promiscuous mode [ 59.430546][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 59.463409][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.470615][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.478554][ T4194] device bridge_slave_1 entered promiscuous mode [ 59.497188][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 59.514896][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.522245][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.530263][ T4185] device bridge_slave_0 entered promiscuous mode [ 59.542600][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.549887][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.558219][ T4185] device bridge_slave_1 entered promiscuous mode [ 59.605687][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.632266][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.655345][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.687562][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.703611][ T4194] team0: Port device team_slave_0 added [ 59.740068][ T4194] team0: Port device team_slave_1 added [ 59.746037][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.753151][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.761017][ T4188] device bridge_slave_0 entered promiscuous mode [ 59.789671][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.797031][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.804747][ T4182] device bridge_slave_0 entered promiscuous mode [ 59.823390][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.830533][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.838814][ T4188] device bridge_slave_1 entered promiscuous mode [ 59.845744][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.852817][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.861030][ T4191] device bridge_slave_0 entered promiscuous mode [ 59.870930][ T4185] team0: Port device team_slave_0 added [ 59.879497][ T4185] team0: Port device team_slave_1 added [ 59.890926][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.898151][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.906227][ T4182] device bridge_slave_1 entered promiscuous mode [ 59.928211][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.935464][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.943146][ T4191] device bridge_slave_1 entered promiscuous mode [ 59.978482][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.985630][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.012228][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.032962][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.044331][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.054085][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.061228][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.087259][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.105749][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.112900][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.138889][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.151288][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.162124][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.172059][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.179260][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.205336][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.218198][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.262344][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.297080][ T4191] team0: Port device team_slave_0 added [ 60.304618][ T4188] team0: Port device team_slave_0 added [ 60.326614][ T4182] team0: Port device team_slave_0 added [ 60.333763][ T4188] team0: Port device team_slave_1 added [ 60.341016][ T4191] team0: Port device team_slave_1 added [ 60.361652][ T4182] team0: Port device team_slave_1 added [ 60.389484][ T4194] device hsr_slave_0 entered promiscuous mode [ 60.396349][ T4194] device hsr_slave_1 entered promiscuous mode [ 60.430942][ T4185] device hsr_slave_0 entered promiscuous mode [ 60.437854][ T4185] device hsr_slave_1 entered promiscuous mode [ 60.444411][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.452917][ T4185] Cannot create hsr debugfs directory [ 60.475023][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.482256][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.508323][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.519955][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.526988][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.553163][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.576352][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.583323][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.609546][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.621189][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.628400][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.654366][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.665804][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.672749][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.698752][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.727227][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.734180][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.760353][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.836667][ T4182] device hsr_slave_0 entered promiscuous mode [ 60.843472][ T4182] device hsr_slave_1 entered promiscuous mode [ 60.850389][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.858710][ T4182] Cannot create hsr debugfs directory [ 60.879423][ T4188] device hsr_slave_0 entered promiscuous mode [ 60.886434][ T4188] device hsr_slave_1 entered promiscuous mode [ 60.892935][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.900530][ T4188] Cannot create hsr debugfs directory [ 60.953723][ T4191] device hsr_slave_0 entered promiscuous mode [ 60.960583][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 60.965339][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 60.967430][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 60.979255][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 60.985506][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 60.985809][ T4191] device hsr_slave_1 entered promiscuous mode [ 60.999037][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.006711][ T4191] Cannot create hsr debugfs directory [ 61.212341][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.223119][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.233062][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.242174][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.298760][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.312754][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.333967][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.342934][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.388955][ T4182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.410467][ T4182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.425937][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.440692][ T4182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.449728][ T4182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.472739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.481872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.502498][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.514175][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.535869][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.561206][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.578189][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.587274][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.600412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.609468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.619529][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.626735][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.636252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.645061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.653533][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.660584][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.669111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.677939][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.700690][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.723078][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.737984][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.769764][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.809358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.819216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.848085][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.854916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.875902][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.882760][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.891713][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.921505][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.932086][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.944962][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.953824][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.963558][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.972300][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.980889][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.998146][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.014529][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.023055][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.031367][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.040687][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.054476][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.068574][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.086202][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.094331][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.107817][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.133130][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.142097][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.151845][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.160763][ T3034] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.167857][ T3034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.178590][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.187971][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.196626][ T3034] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.203667][ T3034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.211560][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.225074][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.234102][ T3034] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.241173][ T3034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.250663][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.259393][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.267533][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.288427][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.300544][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.314276][ T3034] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.321398][ T3034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.338242][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.348032][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.356784][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.372410][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.388158][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.397338][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.408969][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.417702][ T3034] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.424744][ T3034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.432873][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.441570][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.451474][ T3034] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.458574][ T3034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.466959][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.481728][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.490345][ T3034] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.497682][ T3034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.506228][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.515007][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.523700][ T3034] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.531084][ T3034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.546452][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.555107][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.565749][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.604801][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.613152][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.623153][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.634141][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.644019][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.653143][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.662378][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.671304][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.680092][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.688440][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.697221][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.706135][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.714395][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.723924][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.732721][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.741468][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.749092][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.756832][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.766138][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.775522][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.783287][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.791179][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.802300][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.816223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.826779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.836216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.846064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.870100][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.881995][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.896691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.904532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.916981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.930261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.940009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.953115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.962127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.970462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.996377][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.013282][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.033828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.035604][ T4246] Bluetooth: hci2: command 0x041b tx timeout [ 63.043102][ T4245] Bluetooth: hci0: command 0x041b tx timeout [ 63.056195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.066595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.075756][ T4246] Bluetooth: hci3: command 0x041b tx timeout [ 63.081815][ T4246] Bluetooth: hci1: command 0x041b tx timeout [ 63.086190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.101586][ T4246] Bluetooth: hci4: command 0x041b tx timeout [ 63.116513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.125689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.163031][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.173927][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.188011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.197016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.206400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.216933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.226655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.241379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.250016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.258940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.271965][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.280288][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.293818][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.306488][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.323119][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.339590][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.361379][ T4194] device veth0_vlan entered promiscuous mode [ 63.411028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.424889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.442388][ T4194] device veth1_vlan entered promiscuous mode [ 63.460581][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.493770][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.548923][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.566149][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.596409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.606109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.614725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.624611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.635086][ T4194] device veth0_macvtap entered promiscuous mode [ 63.652126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.661241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.669124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.686620][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.703982][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.712616][ T4194] device veth1_macvtap entered promiscuous mode [ 63.730344][ T4182] device veth0_vlan entered promiscuous mode [ 63.744935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.754490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.769808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.778995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.789457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.798121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.806063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.815046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.824413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.842011][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.854990][ T4182] device veth1_vlan entered promiscuous mode [ 63.876264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.884879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.900402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.909253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.917971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.926634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.938626][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.956084][ T4191] device veth0_vlan entered promiscuous mode [ 63.963627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.976758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.026419][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.037516][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.046697][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.055643][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.067365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.077803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.088039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.096910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.106132][ T4191] device veth1_vlan entered promiscuous mode [ 64.134803][ T4182] device veth0_macvtap entered promiscuous mode [ 64.167833][ T4182] device veth1_macvtap entered promiscuous mode [ 64.179590][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.188009][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.196406][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.204354][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.212697][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.222146][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.231286][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.239847][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.250153][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.261357][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.282770][ T4191] device veth0_macvtap entered promiscuous mode [ 64.294798][ T4188] device veth0_vlan entered promiscuous mode [ 64.320012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.330098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.338924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.352883][ T4191] device veth1_macvtap entered promiscuous mode [ 64.373275][ T4188] device veth1_vlan entered promiscuous mode [ 64.403657][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.414502][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.427955][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.453064][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.463661][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.473987][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.486548][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.497620][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.505805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.514389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.524706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.533361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.544164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.554504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.571190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.579034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.596126][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.604090][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.610210][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.622482][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.634021][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.644748][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.656686][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.666959][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.677476][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.689147][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.698646][ T4185] device veth0_vlan entered promiscuous mode [ 64.714553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.723506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.732976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.741836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.751313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.767153][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.777242][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.787747][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.797056][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.813931][ T4188] device veth0_macvtap entered promiscuous mode [ 64.831287][ T4185] device veth1_vlan entered promiscuous mode [ 64.840384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.848627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.858880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.867676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.888751][ T4188] device veth1_macvtap entered promiscuous mode [ 64.897346][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.906702][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.915761][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.924459][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.948875][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.960100][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.989107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.003952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.012075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.022608][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.033658][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.045341][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.055844][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.069500][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.080552][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.092791][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.111486][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.122801][ T4238] Bluetooth: hci4: command 0x040f tx timeout [ 65.125485][ T4245] Bluetooth: hci1: command 0x040f tx timeout [ 65.130587][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.134831][ T4245] Bluetooth: hci3: command 0x040f tx timeout [ 65.147882][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.160061][ T4245] Bluetooth: hci0: command 0x040f tx timeout [ 65.161484][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.175459][ T4245] Bluetooth: hci2: command 0x040f tx timeout [ 65.177830][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.193799][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.207670][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.246451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.262269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.271880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.282093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.297331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.307350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.320958][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.330054][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.339109][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.348072][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.371221][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.382159][ T4185] device veth0_macvtap entered promiscuous mode [ 65.385936][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.399917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.409553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.445819][ T4295] ======================================================= [ 65.445819][ T4295] WARNING: The mand mount option has been deprecated and [ 65.445819][ T4295] and is ignored by this kernel. Remove the mand [ 65.445819][ T4295] option from the mount to silence this warning. [ 65.445819][ T4295] ======================================================= [ 65.488743][ T4185] device veth1_macvtap entered promiscuous mode [ 65.509400][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.523496][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.552179][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.565034][ T4295] device bridge1 entered promiscuous mode [ 65.573886][ T4295] team0: Port device bridge1 added [ 65.620249][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.622393][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.639182][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.641861][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.657887][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.668579][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.682984][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.694141][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.704857][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.715619][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.727403][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.746379][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.760511][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.770653][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.781676][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.791704][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.802235][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.812388][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.823168][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.834365][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.844058][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.854100][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.855405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.869935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.879002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.889094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.897765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.907148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.931575][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.944951][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.954151][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.963197][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.003038][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.014769][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.027055][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.041013][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.048394][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.064621][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.126757][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.134847][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.147671][ T4300] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.193279][ T4301] netlink: 'syz.3.4': attribute type 16 has an invalid length. [ 66.207627][ T4301] netlink: 'syz.3.4': attribute type 17 has an invalid length. [ 66.244186][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.251676][ T4301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.259780][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.266936][ T4301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.344901][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.363301][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.379612][ T4301] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.490157][ T4301] syz.3.4 (4301) used greatest stack depth: 20832 bytes left [ 66.509199][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.538844][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.572647][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.581095][ T3034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.599762][ T3034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.745503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.195914][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 67.214977][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 67.243323][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 67.287488][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 67.595137][ C0] sched: RT throttling activated [ 67.603533][ T4303] Bluetooth: hci2: command 0x0419 tx timeout [ 68.580953][ T4367] "syz.3.24" (4367) uses obsolete ecb(arc4) skcipher [ 68.594342][ T4358] team0: Port device team_slave_0 removed [ 68.617895][ T4367] loop3: detected capacity change from 0 to 256 [ 68.919748][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 68.979948][ T26] audit: type=1326 audit(1765174162.860:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47bafeb749 code=0x7ffc0000 [ 69.057416][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.064985][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.124863][ T26] audit: type=1326 audit(1765174162.890:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f47bafeb749 code=0x7ffc0000 [ 69.152280][ T4380] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 69.223505][ T26] audit: type=1326 audit(1765174162.890:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47bafeb749 code=0x7ffc0000 [ 69.489394][ T4388] loop3: detected capacity change from 0 to 196608 [ 70.582343][ T4422] kvm [4420]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc1 data 0x0 [ 70.603928][ T4422] kvm [4420]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc2 data 0x0 [ 70.627989][ T4422] kvm [4420]: vcpu0, guest rIP: 0x9134 ignored wrmsr: 0x11e data 0xbe702111 [ 71.067944][ T4433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'. [ 71.118874][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.125466][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.192889][ T4437] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 71.259714][ T4443] loop2: detected capacity change from 0 to 7 [ 71.279680][ T4176] loop2: [ 71.282839][ T4176] loop2: partition table partially beyond EOD, truncated [ 71.300571][ T4443] loop2: [ 71.304773][ T4443] loop2: partition table partially beyond EOD, truncated [ 71.370303][ T4442] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 71.405297][ T4442] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 71.532966][ T26] audit: type=1326 audit(1765174165.410:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47bafeb749 code=0x7ffc0000 [ 71.598529][ T26] audit: type=1326 audit(1765174165.440:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47bafeb749 code=0x7ffc0000 [ 71.695617][ T26] audit: type=1326 audit(1765174165.440:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47bafeb749 code=0x7ffc0000 [ 71.741685][ T4459] netlink: 'syz.1.60': attribute type 1 has an invalid length. [ 71.778499][ T26] audit: type=1326 audit(1765174165.440:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47bafeb749 code=0x7ffc0000 [ 71.811632][ T4459] device macvlan2 entered promiscuous mode [ 71.845244][ T26] audit: type=1326 audit(1765174165.450:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47bafeb749 code=0x7ffc0000 [ 71.904750][ T26] audit: type=1326 audit(1765174165.450:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47bafeb749 code=0x7ffc0000 [ 71.949199][ T4459] device macvlan2 entered promiscuous mode [ 71.975369][ T26] audit: type=1326 audit(1765174165.450:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47bafeb749 code=0x7ffc0000 [ 72.153042][ T4480] netlink: 32 bytes leftover after parsing attributes in process `syz.2.68'. [ 72.210798][ T4480] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.314234][ T4489] team0: Port device team_slave_0 removed [ 72.428678][ T4500] process 'syz.1.76' launched '/dev/fd/4' with NULL argv: empty string added [ 72.612680][ T4506] kvm: pic: level sensitive irq not supported [ 72.613639][ T4506] kvm: pic: single mode not supported [ 72.636777][ T4506] kvm: pic: single mode not supported [ 72.763308][ T4498] loop4: detected capacity change from 0 to 8192 [ 72.952752][ T4526] netlink: 'syz.3.85': attribute type 16 has an invalid length. [ 72.975823][ T4526] netlink: 'syz.3.85': attribute type 17 has an invalid length. [ 73.036026][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.074079][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.110606][ T4526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.164757][ T4528] loop2: detected capacity change from 0 to 8192 [ 73.319951][ T4528] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 73.358976][ T4528] FAT-fs (loop2): Filesystem has been set read-only [ 73.586129][ T4548] loop2: detected capacity change from 0 to 256 [ 74.117418][ T4561] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 74.145262][ T4561] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 74.491216][ T4593] loop0: detected capacity change from 0 to 128 [ 75.422714][ T4658] fuse: Bad value for 'fd' [ 75.663474][ T4670] netlink: 80 bytes leftover after parsing attributes in process `syz.4.144'. [ 75.707657][ T4670] netlink: 80 bytes leftover after parsing attributes in process `syz.4.144'. [ 75.726034][ T4675] netlink: 80 bytes leftover after parsing attributes in process `syz.4.144'. [ 76.263920][ T4704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'. [ 76.440187][ T4709] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.552753][ T26] kauditd_printk_skb: 81 callbacks suppressed [ 76.552767][ T26] audit: type=1326 audit(28528.270:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c59ad749 code=0x7ffc0000 [ 76.592332][ T26] audit: type=1326 audit(28528.270:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c59ad749 code=0x7ffc0000 [ 76.627192][ T26] audit: type=1326 audit(28528.310:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c59ad749 code=0x7ffc0000 [ 76.682624][ T26] audit: type=1326 audit(28528.310:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c59ad749 code=0x7ffc0000 [ 76.750763][ T26] audit: type=1326 audit(28528.310:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f16c59ad749 code=0x7ffc0000 [ 76.830254][ T26] audit: type=1326 audit(28528.310:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c59ad749 code=0x7ffc0000 [ 76.977409][ T26] audit: type=1326 audit(28528.310:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c59ad749 code=0x7ffc0000 [ 77.063406][ T4738] 9pnet: Insufficient options for proto=fd [ 77.090391][ T26] audit: type=1326 audit(28528.310:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f16c59ad749 code=0x7ffc0000 [ 77.194978][ T26] audit: type=1326 audit(28528.310:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f16c59ad749 code=0x7ffc0000 [ 77.650203][ T4772] loop4: detected capacity change from 0 to 256 [ 77.673091][ T4772] FAT-fs (loop4): Directory bread(block 1285) failed [ 77.673248][ T4772] FAT-fs (loop4): Directory bread(block 1286) failed [ 77.673289][ T4772] FAT-fs (loop4): Directory bread(block 1287) failed [ 77.673457][ T4772] FAT-fs (loop4): Directory bread(block 1288) failed [ 77.682233][ T4772] FAT-fs (loop4): Directory bread(block 1285) failed [ 77.747313][ T4774] 9pnet: Insufficient options for proto=fd [ 77.747416][ T4772] FAT-fs (loop4): Directory bread(block 1286) failed [ 77.747511][ T4772] FAT-fs (loop4): Directory bread(block 1287) failed [ 77.747547][ T4772] FAT-fs (loop4): Directory bread(block 1288) failed [ 77.747748][ T4772] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 77.748068][ T4775] FAT-fs (loop4): Directory bread(block 1285) failed [ 78.437299][ T4792] mmap: syz.0.188 (4792) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 79.158802][ T4808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 79.215273][ T4808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 79.233343][ T4804] capability: warning: `syz.4.192' uses 32-bit capabilities (legacy support in use) [ 79.272987][ T4812] 9pnet: Insufficient options for proto=fd [ 79.352539][ T4814] loop4: detected capacity change from 0 to 256 [ 79.867386][ T4828] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.911569][ T4826] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 79.926390][ T4826] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 80.143179][ T4846] fuse: Bad value for 'fd' [ 80.310841][ T4856] sctp: [Deprecated]: syz.1.210 (pid 4856) Use of struct sctp_assoc_value in delayed_ack socket option. [ 80.310841][ T4856] Use struct sctp_sack_info instead [ 80.768547][ T4865] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 80.798440][ T4865] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 81.358407][ T1110] cfg80211: failed to load regulatory.db [ 82.353482][ T4919] loop4: detected capacity change from 0 to 1764 [ 82.391900][ T4920] kvm: pic: single mode not supported [ 82.395473][ T4920] kvm: pic: single mode not supported [ 82.420920][ T4920] kvm: pic: single mode not supported [ 82.444872][ T4920] kvm: pic: level sensitive irq not supported [ 82.452121][ T4919] ISOFS: Unable to identify CD-ROM format. [ 82.706462][ T4934] netlink: 308 bytes leftover after parsing attributes in process `syz.4.243'. [ 84.258214][ T5023] loop1: detected capacity change from 0 to 2048 [ 84.401845][ T5023] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nouid32,,errors=continue. Quota mode: none. [ 84.470477][ T5023] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 84.664883][ T26] audit: type=1326 audit(28536.380:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dbb05749 code=0x7ffc0000 [ 84.731930][ T1167] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.743083][ T26] audit: type=1326 audit(28536.430:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fd0dbb05749 code=0x7ffc0000 [ 84.809332][ T26] audit: type=1326 audit(28536.430:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dbb05749 code=0x7ffc0000 [ 84.836273][ T5043] netlink: 'syz.1.283': attribute type 2 has an invalid length. [ 84.942514][ T1167] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.998379][ T5043] Zero length message leads to an empty skb [ 85.049568][ T1167] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.137076][ T5052] loop2: detected capacity change from 0 to 1024 [ 85.173177][ T1167] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.229868][ T26] audit: type=1326 audit(28536.950:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73478df749 code=0x7ffc0000 [ 85.231406][ T5052] EXT4-fs (loop2): test_dummy_encryption requires encrypt feature [ 85.335485][ T26] audit: type=1326 audit(28536.990:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73478df749 code=0x7ffc0000 [ 85.420439][ T5064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 85.455478][ T26] audit: type=1326 audit(28537.000:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73478df749 code=0x7ffc0000 [ 85.535702][ T26] audit: type=1326 audit(28537.000:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73478df749 code=0x7ffc0000 [ 85.607607][ T26] audit: type=1326 audit(28537.000:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73478df749 code=0x7ffc0000 [ 85.675008][ T26] audit: type=1326 audit(28537.000:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73478df749 code=0x7ffc0000 [ 85.783230][ T26] audit: type=1326 audit(28537.010:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73478df749 code=0x7ffc0000 [ 85.949700][ T5084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'. [ 85.969803][ T5091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.302'. [ 86.165058][ T5057] chnl_net:caif_netlink_parms(): no params data found [ 86.237168][ T5101] loop1: detected capacity change from 0 to 512 [ 86.357717][ T5114] loop2: detected capacity change from 0 to 256 [ 86.368902][ T5101] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 86.402116][ T5101] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.538703][ T5101] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 86.580166][ T5101] EXT4-fs (loop1): 1 truncate cleaned up [ 86.620725][ T5101] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 86.685243][ C0] ------------[ cut here ]------------ [ 86.685243][ C1] ------------[ cut here ]------------ [ 86.685959][ C0] WARNING: CPU: 0 PID: 5133 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 86.685995][ C0] Modules linked in: [ 86.686010][ C0] CPU: 0 PID: 5133 Comm: syz.3.313 Not tainted syzkaller #0 [ 86.686027][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.686043][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 86.686063][ C0] Code: 24 45 31 f6 31 ff 89 de e8 0d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 90 f2 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 86.686077][ C0] RSP: 0018:ffffc90000007980 EFLAGS: 00010046 [ 86.686093][ C0] RAX: ffffffff819ed980 RBX: 0000000000000000 RCX: ffff888025840000 [ 86.686106][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.686118][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff5419 [ 86.686130][ C0] R10: fffffbfff1ff5419 R11: 1ffffffff1ff5418 R12: ffff888025841788 [ 86.686142][ C0] R13: 1ffff92000000f40 R14: ffffc900000079e8 R15: 000000000028e000 [ 86.686155][ C0] FS: 00007f7345b046c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 86.686241][ C0] [ 86.686244][ C0] ====================================================== [ 86.686249][ C0] WARNING: possible circular locking dependency detected [ 86.686257][ C0] syzkaller #0 Not tainted [ 86.686266][ C0] ------------------------------------------------------ [ 86.686271][ C0] syz.3.313/5133 is trying to acquire lock: [ 86.686280][ C0] ffffffff8c111180 (console_owner){..-.}-{0:0}, at: console_trylock_spinning+0x150/0x350 [ 86.686335][ C0] [ 86.686335][ C0] but task is already holding lock: [ 86.686339][ C0] ffff8880b90280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 86.686384][ C0] [ 86.686384][ C0] which lock already depends on the new lock. [ 86.686384][ C0] [ 86.686389][ C0] [ 86.686389][ C0] the existing dependency chain (in reverse order) is: [ 86.686396][ C0] [ 86.686396][ C0] -> #5 (&base->lock){-.-.}-{2:2}: [ 86.686421][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 86.686441][ C0] lock_timer_base+0x123/0x270 [ 86.686466][ C0] __mod_timer+0x117/0xd20 [ 86.686481][ C0] queue_delayed_work_on+0x126/0x1e0 [ 86.686498][ C0] enqueue_task+0x26d/0x2b0 [ 86.686519][ C0] wake_up_new_task+0x442/0x9a0 [ 86.686538][ C0] kernel_clone+0x421/0x930 [ 86.686558][ C0] kernel_thread+0xc8/0x120 [ 86.686575][ C0] rest_init+0x21/0x330 [ 86.686590][ C0] start_kernel+0x486/0x530 [ 86.686608][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 86.686630][ C0] [ 86.686630][ C0] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 86.686655][ C0] _raw_spin_lock_nested+0x2e/0x40 [ 86.686684][ C0] raw_spin_rq_lock_nested+0x26/0x140 [ 86.686702][ C0] task_fork_fair+0x5c/0x350 [ 86.686718][ C0] sched_cgroup_fork+0x2c6/0x320 [ 86.686736][ C0] copy_process+0x22d1/0x3e00 [ 86.686753][ C0] kernel_clone+0x219/0x930 [ 86.686769][ C0] kernel_thread+0xc8/0x120 [ 86.686785][ C0] rest_init+0x21/0x330 [ 86.686800][ C0] start_kernel+0x486/0x530 [ 86.686815][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 86.686834][ C0] [ 86.686834][ C0] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 86.686858][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 86.686875][ C0] try_to_wake_up+0x5c/0x1050 [ 86.686894][ C0] __wake_up_common+0x2a4/0x4e0 [ 86.686913][ C0] __wake_up+0x108/0x180 [ 86.686931][ C0] pty_close+0x265/0x440 [ 86.686949][ C0] tty_release+0x400/0x16c0 [ 86.686969][ C0] __fput+0x234/0x930 [ 86.686986][ C0] task_work_run+0x125/0x1a0 [ 86.687004][ C0] exit_to_user_mode_loop+0x10f/0x130 [ 86.687026][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 86.687047][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 86.687066][ C0] do_syscall_64+0x58/0xa0 [ 86.687084][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.687104][ C0] [ 86.687104][ C0] -> #2 (&tty->write_wait){-...}-{2:2}: [ 86.687128][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 86.687146][ C0] __wake_up+0xed/0x180 [ 86.687163][ C0] tty_port_default_wakeup+0xa5/0xf0 [ 86.687180][ C0] serial8250_tx_chars+0x629/0x830 [ 86.687200][ C0] serial8250_handle_irq+0x519/0x610 [ 86.687219][ C0] serial8250_default_handle_irq+0xb4/0x1a0 [ 86.687240][ C0] serial8250_interrupt+0x9b/0x1c0 [ 86.687259][ C0] __handle_irq_event_percpu+0x291/0x9b0 [ 86.687276][ C0] handle_irq_event+0xa5/0x220 [ 86.687293][ C0] handle_edge_irq+0x243/0xb20 [ 86.687313][ C0] __common_interrupt+0xd7/0x1e0 [ 86.687330][ C0] common_interrupt+0xb0/0xd0 [ 86.687348][ C0] asm_common_interrupt+0x22/0x40 [ 86.687365][ C0] default_idle+0xb/0x10 [ 86.687381][ C0] default_idle_call+0x81/0xc0 [ 86.687397][ C0] do_idle+0x21b/0x5b0 [ 86.687416][ C0] cpu_startup_entry+0x14/0x20 [ 86.687434][ C0] start_kernel+0x486/0x530 [ 86.687455][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 86.687475][ C0] [ 86.687475][ C0] -> #1 (&port_lock_key){-...}-{2:2}: [ 86.687499][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 86.687516][ C0] serial8250_console_write+0x170/0xf80 [ 86.687536][ C0] console_unlock+0xc86/0x1200 [ 86.687551][ C0] vprintk_emit+0xc0/0x150 [ 86.687571][ C0] _printk+0xcc/0x110 [ 86.687587][ C0] register_console+0x682/0x960 [ 86.687603][ C0] univ8250_console_init+0x41/0x50 [ 86.687620][ C0] console_init+0x177/0x5d0 [ 86.687638][ C0] start_kernel+0x2f9/0x530 [ 86.687653][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 86.687672][ C0] [ 86.687672][ C0] -> #0 (console_owner){..-.}-{0:0}: [ 86.687695][ C0] __lock_acquire+0x2c33/0x7c60 [ 86.687714][ C0] lock_acquire+0x197/0x3f0 [ 86.687732][ C0] console_trylock_spinning+0x170/0x350 [ 86.687754][ C0] vprintk_emit+0xa7/0x150 [ 86.687772][ C0] _printk+0xcc/0x110 [ 86.687788][ C0] __show_regs+0x352/0x500 [ 86.687806][ C0] show_regs+0x32/0x60 [ 86.687824][ C0] __warn+0x15e/0x2b0 [ 86.687837][ C0] report_bug+0x1b7/0x2e0 [ 86.687857][ C0] handle_bug+0x3a/0x70 [ 86.687874][ C0] exc_invalid_op+0x16/0x40 [ 86.687891][ C0] asm_exc_invalid_op+0x16/0x20 [ 86.687908][ C0] copy_from_user_nofault+0x160/0x1c0 [ 86.687928][ C0] bpf_probe_read_user+0x26/0x70 [ 86.687966][ C0] bpf_prog_26fc836ad493b19c+0x3d/0x8d8 [ 86.687983][ C0] bpf_trace_run3+0x17e/0x320 [ 86.687999][ C0] enqueue_timer+0x394/0x520 [ 86.688019][ C0] __mod_timer+0x8e1/0xd20 [ 86.688038][ C0] call_timer_fn+0x16c/0x530 [ 86.688057][ C0] __run_timers+0x525/0x7c0 [ 86.688077][ C0] run_timer_softirq+0x63/0xf0 [ 86.688096][ C0] handle_softirqs+0x328/0x820 [ 86.688114][ C0] __irq_exit_rcu+0x12f/0x220 [ 86.688130][ C0] irq_exit_rcu+0x5/0x20 [ 86.688147][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 86.688170][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 86.688191][ C0] lock_release+0x584/0x870 [ 86.688211][ C0] _raw_spin_unlock+0x12/0x40 [ 86.688228][ C0] follow_page_pte+0xada/0xc20 [ 86.688248][ C0] follow_page_mask+0xa6e/0x12d0 [ 86.688269][ C0] __get_user_pages+0x3de/0x11c0 [ 86.688289][ C0] populate_vma_page_range+0x213/0x290 [ 86.688309][ C0] __mm_populate+0x26f/0x3a0 [ 86.688328][ C0] vm_mmap_pgoff+0x203/0x2b0 [ 86.688350][ C0] ksys_mmap_pgoff+0x542/0x780 [ 86.688369][ C0] do_syscall_64+0x4c/0xa0 [ 86.688387][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.688408][ C0] [ 86.688408][ C0] other info that might help us debug this: [ 86.688408][ C0] [ 86.688413][ C0] Chain exists of: [ 86.688413][ C0] console_owner --> &rq->__lock --> &base->lock [ 86.688413][ C0] [ 86.688449][ C0] Possible unsafe locking scenario: [ 86.688449][ C0] [ 86.688453][ C0] CPU0 CPU1 [ 86.688459][ C0] ---- ---- [ 86.688462][ C0] lock(&base->lock); [ 86.688473][ C0] lock(&rq->__lock); [ 86.688486][ C0] lock(&base->lock); [ 86.688498][ C0] lock(console_owner); [ 86.688509][ C0] [ 86.688509][ C0] *** DEADLOCK *** [ 86.688509][ C0] [ 86.688514][ C0] 4 locks held by syz.3.313/5133: [ 86.688525][ C0] #0: ffff888079a74028 (&mm->mmap_lock){++++}-{3:3}, at: __mm_populate+0x15e/0x3a0 [ 86.688575][ C0] #1: ffffc90000007be0 ((&app->join_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbb/0x530 [ 86.688624][ C0] #2: ffff8880b90280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 86.688671][ C0] #3: ffffffff8c11c720 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 86.688715][ C0] [ 86.688715][ C0] stack backtrace: [ 86.688719][ C0] CPU: 0 PID: 5133 Comm: syz.3.313 Not tainted syzkaller #0 [ 86.688738][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.688749][ C0] Call Trace: [ 86.688755][ C0] [ 86.688763][ C0] dump_stack_lvl+0x168/0x230 [ 86.688785][ C0] ? load_image+0x3b0/0x3b0 [ 86.688804][ C0] ? show_regs_print_info+0x20/0x20 [ 86.688830][ C0] ? print_circular_bug+0x12b/0x1a0 [ 86.688850][ C0] check_noncircular+0x274/0x310 [ 86.688872][ C0] ? add_chain_block+0x940/0x940 [ 86.688890][ C0] ? lockdep_lock+0x141/0x1e0 [ 86.688914][ C0] ? data_alloc+0x4c6/0x7b0 [ 86.688933][ C0] ? mark_lock+0x94/0x320 [ 86.688956][ C0] ? mark_lock+0x94/0x320 [ 86.688980][ C0] __lock_acquire+0x2c33/0x7c60 [ 86.689014][ C0] ? down_trylock+0x4c/0xa0 [ 86.689035][ C0] ? verify_lock_unused+0x140/0x140 [ 86.689059][ C0] ? verify_lock_unused+0x140/0x140 [ 86.689083][ C0] ? __rwlock_init+0x140/0x140 [ 86.689102][ C0] ? _prb_commit+0x289/0x340 [ 86.689121][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 86.689144][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 86.689164][ C0] ? _raw_spin_unlock+0x40/0x40 [ 86.689189][ C0] lock_acquire+0x197/0x3f0 [ 86.689211][ C0] ? console_trylock_spinning+0x150/0x350 [ 86.689236][ C0] ? console_trylock_spinning+0x150/0x350 [ 86.689262][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 86.689283][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 86.689304][ C0] ? read_lock_is_recursive+0x10/0x10 [ 86.689327][ C0] ? __rwlock_init+0x140/0x140 [ 86.689348][ C0] ? __rwlock_init+0x140/0x140 [ 86.689367][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 86.689389][ C0] console_trylock_spinning+0x170/0x350 [ 86.689411][ C0] ? console_trylock_spinning+0x150/0x350 [ 86.689436][ C0] ? vprintk_emit+0x150/0x150 [ 86.689464][ C0] ? console_trylock_spinning+0x249/0x350 [ 86.689489][ C0] ? vprintk_emit+0x150/0x150 [ 86.689513][ C0] ? vprintk_emit+0xf9/0x150 [ 86.689540][ C0] vprintk_emit+0xa7/0x150 [ 86.689564][ C0] _printk+0xcc/0x110 [ 86.689587][ C0] ? load_image+0x3b0/0x3b0 [ 86.689613][ C0] __show_regs+0x352/0x500 [ 86.689636][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 86.689660][ C0] show_regs+0x32/0x60 [ 86.689680][ C0] __warn+0x15e/0x2b0 [ 86.689697][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 86.689721][ C0] report_bug+0x1b7/0x2e0 [ 86.689746][ C0] handle_bug+0x3a/0x70 [ 86.689766][ C0] exc_invalid_op+0x16/0x40 [ 86.689788][ C0] asm_exc_invalid_op+0x16/0x20 [ 86.689807][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 86.689832][ C0] Code: 24 45 31 f6 31 ff 89 de e8 0d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 90 f2 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 86.689848][ C0] RSP: 0018:ffffc90000007980 EFLAGS: 00010046 [ 86.689865][ C0] RAX: ffffffff819ed980 RBX: 0000000000000000 RCX: ffff888025840000 [ 86.689881][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.689893][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff5419 [ 86.689908][ C0] R10: fffffbfff1ff5419 R11: 1ffffffff1ff5418 R12: ffff888025841788 [ 86.689924][ C0] R13: 1ffff92000000f40 R14: ffffc900000079e8 R15: 000000000028e000 [ 86.689943][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 86.689971][ C0] bpf_probe_read_user+0x26/0x70 [ 86.689995][ C0] bpf_prog_26fc836ad493b19c+0x3d/0x8d8 [ 86.690013][ C0] bpf_trace_run3+0x17e/0x320 [ 86.690031][ C0] ? bpf_trace_run2+0x2d0/0x2d0 [ 86.690049][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 86.690071][ C0] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 86.690093][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 86.690113][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 86.690138][ C0] enqueue_timer+0x394/0x520 [ 86.690163][ C0] __mod_timer+0x8e1/0xd20 [ 86.690189][ C0] ? garp_init_applicant+0x450/0x450 [ 86.690211][ C0] call_timer_fn+0x16c/0x530 [ 86.690233][ C0] ? garp_init_applicant+0x450/0x450 [ 86.690253][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 86.690278][ C0] ? __run_timers+0x7c0/0x7c0 [ 86.690303][ C0] ? rcu_is_watching+0x11/0xa0 [ 86.690321][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 86.690342][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 86.690363][ C0] ? garp_init_applicant+0x450/0x450 [ 86.690387][ C0] __run_timers+0x525/0x7c0 [ 86.690414][ C0] ? detach_timer+0x2b0/0x2b0 [ 86.690435][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 86.690468][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 86.690488][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 86.690516][ C0] run_timer_softirq+0x63/0xf0 [ 86.690537][ C0] handle_softirqs+0x328/0x820 [ 86.690559][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 86.690581][ C0] ? do_softirq+0x200/0x200 [ 86.690603][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 86.690624][ C0] __irq_exit_rcu+0x12f/0x220 [ 86.690645][ C0] ? irq_exit_rcu+0x20/0x20 [ 86.690668][ C0] irq_exit_rcu+0x5/0x20 [ 86.690687][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 86.690710][ C0] [ 86.690714][ C0] [ 86.690721][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 86.690744][ C0] RIP: 0010:lock_release+0x584/0x870 [ 86.690768][ C0] Code: 00 00 00 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 75 75 f7 44 24 50 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 66 43 c7 44 2f 09 00 00 43 c6 44 2f 0b 00 [ 86.690784][ C0] RSP: 0018:ffffc9000343f840 EFLAGS: 00000206 [ 86.690799][ C0] RAX: 0000000000000001 RBX: c43e8954cd7f2d9e RCX: 7d57b9903aa0d500 [ 86.690814][ C0] RDX: 0000000000000001 RSI: ffffffff8a0b2e80 RDI: ffffffff8a59e800 [ 86.690833][ C0] RBP: ffffc9000343f950 R08: dffffc0000000000 R09: fffffbfff1ad26b6 [ 86.690849][ C0] R10: fffffbfff1ad26b6 R11: 1ffffffff1ad26b5 R12: ffff888025840b18 [ 86.690866][ C0] R13: dffffc0000000000 R14: ffff888025840ae0 R15: 1ffff92000687f14 [ 86.690911][ C0] ? follow_page_pte+0xada/0xc20 [ 86.690936][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 86.690961][ C0] ? workingset_activation+0x606/0x760 [ 86.690987][ C0] ? mark_page_accessed+0xce5/0x12b0 [ 86.691014][ C0] _raw_spin_unlock+0x12/0x40 [ 86.691033][ C0] follow_page_pte+0xada/0xc20 [ 86.691060][ C0] ? __might_sleep+0xf0/0xf0 [ 86.691082][ C0] follow_page_mask+0xa6e/0x12d0 [ 86.691111][ C0] __get_user_pages+0x3de/0x11c0 [ 86.691142][ C0] ? populate_vma_page_range+0x290/0x290 [ 86.691165][ C0] ? read_lock_is_recursive+0x10/0x10 [ 86.691198][ C0] populate_vma_page_range+0x213/0x290 [ 86.691224][ C0] __mm_populate+0x26f/0x3a0 [ 86.691250][ C0] ? check_vma_flags+0x480/0x480 [ 86.691274][ C0] ? preempt_count_add+0x8d/0x190 [ 86.691295][ C0] ? up_write+0x1bb/0x420 [ 86.691319][ C0] vm_mmap_pgoff+0x203/0x2b0 [ 86.691347][ C0] ? account_locked_vm+0xe0/0xe0 [ 86.691372][ C0] ? __fget_files+0x40f/0x480 [ 86.691397][ C0] ksys_mmap_pgoff+0x542/0x780 [ 86.691423][ C0] ? mmap_region+0x1660/0x1660 [ 86.691453][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 86.691479][ C0] do_syscall_64+0x4c/0xa0 [ 86.691501][ C0] ? clear_bhb_loop+0x30/0x80 [ 86.691521][ C0] ? clear_bhb_loop+0x30/0x80 [ 86.691544][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.691566][ C0] RIP: 0033:0x7f73478df749 [ 86.691584][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.691600][ C0] RSP: 002b:00007f7345b04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 86.691620][ C0] RAX: ffffffffffffffda RBX: 00007f7347b36180 RCX: 00007f73478df749 [ 86.691637][ C0] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 86.691652][ C0] RBP: 00007f7347963f91 R08: 0000000000000003 R09: 0000000000000000 [ 86.691666][ C0] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 86.691678][ C0] R13: 00007f7347b36218 R14: 00007f7347b36180 R15: 00007ffd3711ac38 [ 86.691702][ C0] [ 86.691814][ C1] WARNING: CPU: 1 PID: 5131 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 86.697267][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.706526][ C1] Modules linked in: [ 86.710407][ C0] CR2: 0000200000386000 CR3: 0000000068126000 CR4: 00000000003506f0 [ 86.717677][ C1] CPU: 1 PID: 5131 Comm: cmp Not tainted syzkaller #0 [ 86.727724][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.733851][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.753461][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.759515][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 86.767470][ C0] Call Trace: [ 86.767478][ C0] [ 86.775427][ C1] Code: 24 45 31 f6 31 ff 89 de e8 0d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 90 f2 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 86.783390][ C0] bpf_probe_read_user+0x26/0x70 [ 86.791346][ C1] RSP: 0018:ffffc90000dd0860 EFLAGS: 00010046 [ 86.799305][ C0] bpf_prog_26fc836ad493b19c+0x3d/0x8d8 [ 86.808211][ C1] [ 86.808216][ C1] RAX: ffffffff819ed980 RBX: 0000000000000000 RCX: ffff88802959d940 [ 86.810525][ C0] bpf_trace_run3+0x17e/0x320 [ 86.817522][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.824517][ C0] ? bpf_trace_run2+0x2d0/0x2d0 [ 86.828907][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff5419 [ 86.835912][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 86.841796][ C1] R10: fffffbfff1ff5419 R11: 1ffffffff1ff5418 R12: ffff88802959f0c8 [ 86.851611][ C0] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 86.858992][ C1] R13: 1ffff920001ba11c R14: ffffc90000dd08c8 R15: 000000000028e000 [ 86.867815][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 86.878197][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 86.887545][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 86.894813][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.900525][ C0] enqueue_timer+0x394/0x520 [ 86.905788][ C1] CR2: 00007f1ad0539440 CR3: 0000000065d41000 CR4: 00000000003506e0 [ 86.910718][ C0] __mod_timer+0x8e1/0xd20 [ 86.916510][ C1] Call Trace: [ 86.921513][ C0] ? garp_init_applicant+0x450/0x450 [ 86.926864][ C1] [ 86.931868][ C0] call_timer_fn+0x16c/0x530 [ 86.936873][ C1] bpf_probe_read_user+0x26/0x70 [ 86.941526][ C0] ? garp_init_applicant+0x450/0x450 [ 86.946539][ C1] bpf_prog_26fc836ad493b19c+0x3d/0x8d8 [ 86.952933][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 86.960199][ C1] bpf_trace_run3+0x17e/0x320 [ 86.965810][ C0] ? __run_timers+0x7c0/0x7c0 [ 86.971694][ C1] ? bpf_trace_run2+0x2d0/0x2d0 [ 86.976789][ C0] ? rcu_is_watching+0x11/0xa0 [ 86.982219][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 86.987401][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 86.992408][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 86.997508][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 87.002165][ C1] ? dsp_cmx_receive+0x13c0/0x13c0 [ 87.007255][ C0] ? garp_init_applicant+0x450/0x450 [ 87.013649][ C1] enqueue_timer+0x394/0x520 [ 87.020918][ C0] __run_timers+0x525/0x7c0 [ 87.026709][ C1] __mod_timer+0x8e1/0xd20 [ 87.031893][ C0] ? detach_timer+0x2b0/0x2b0 [ 87.037248][ C1] dsp_cmx_send+0x1ab4/0x1b30 [ 87.041996][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 87.046768][ C1] ? detach_timer+0x33/0x2b0 [ 87.051774][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 87.056263][ C1] ? read_lock_is_recursive+0x10/0x10 [ 87.061359][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 87.067331][ C1] ? dsp_cmx_receive+0x13c0/0x13c0 [ 87.073467][ C0] run_timer_softirq+0x63/0xf0 [ 87.079461][ C1] call_timer_fn+0x16c/0x530 [ 87.084383][ C0] handle_softirqs+0x328/0x820 [ 87.090780][ C1] ? dsp_cmx_receive+0x13c0/0x13c0 [ 87.098477][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 87.104190][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 87.108856][ C0] ? do_softirq+0x200/0x200 [ 87.114638][ C1] ? __run_timers+0x7c0/0x7c0 [ 87.120253][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 87.126040][ C1] ? rcu_is_watching+0x11/0xa0 [ 87.132434][ C0] __irq_exit_rcu+0x12f/0x220 [ 87.138051][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 87.144214][ C0] ? irq_exit_rcu+0x20/0x20 [ 87.149510][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 87.154783][ C0] irq_exit_rcu+0x5/0x20 [ 87.160223][ C1] ? dsp_cmx_receive+0x13c0/0x13c0 [ 87.165413][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 87.170943][ C1] __run_timers+0x525/0x7c0 [ 87.175695][ C0] [ 87.180970][ C1] ? detach_timer+0x2b0/0x2b0 [ 87.185543][ C0] [ 87.185551][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 87.190816][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 87.195831][ C0] RIP: 0010:lock_release+0x584/0x870 [ 87.202326][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 87.209878][ C0] Code: 00 00 00 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 75 75 f7 44 24 50 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 66 43 c7 44 2f 09 00 00 43 c6 44 2f 0b 00 [ 87.215587][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 87.221649][ C0] RSP: 0018:ffffc9000343f840 EFLAGS: 00000206 [ 87.226924][ C1] run_timer_softirq+0x63/0xf0 [ 87.231842][ C0] [ 87.231849][ C0] RAX: 0000000000000001 RBX: c43e8954cd7f2d9e RCX: 7d57b9903aa0d500 [ 87.236338][ C1] handle_softirqs+0x328/0x820 [ 87.241710][ C0] RDX: 0000000000000001 RSI: ffffffff8a0b2e80 RDI: ffffffff8a59e800 [ 87.247335][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 87.252346][ C0] RBP: ffffc9000343f950 R08: dffffc0000000000 R09: fffffbfff1ad26b6 [ 87.257372][ C1] ? do_softirq+0x200/0x200 [ 87.263782][ C0] R10: fffffbfff1ad26b6 R11: 1ffffffff1ad26b5 R12: ffff888025840b18 [ 87.271265][ C1] __irq_exit_rcu+0x12f/0x220 [ 87.276626][ C0] R13: dffffc0000000000 R14: ffff888025840ae0 R15: 1ffff92000687f14 [ 87.281739][ C1] ? irq_exit_rcu+0x20/0x20 [ 87.287813][ C0] ? follow_page_pte+0xada/0xc20 [ 87.292739][ C1] irq_exit_rcu+0x5/0x20 [ 87.297227][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 87.302181][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 87.306766][ C0] ? workingset_activation+0x606/0x760 [ 87.311257][ C1] [ 87.316093][ C0] ? mark_page_accessed+0xce5/0x12b0 [ 87.320752][ C1] [ 87.320760][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 87.325767][ C0] _raw_spin_unlock+0x12/0x40 [ 87.331127][ C1] RIP: 0010:__vma_rb_erase+0x682/0xa30 [ 87.337007][ C0] follow_page_pte+0xada/0xc20 [ 87.342546][ C1] Code: 48 8b 03 83 e0 01 4c 09 f0 48 89 03 48 8b 5c 24 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 11 7c 0d 00 4c 8b 23 <4c> 89 e6 48 83 e6 fc 31 ff e8 40 17 c9 ff 4c 89 e3 48 83 e3 fc 74 [ 87.348623][ C0] ? __might_sleep+0xf0/0xf0 [ 87.353794][ C1] RSP: 0018:ffffc900035afad0 EFLAGS: 00000246 [ 87.358892][ C0] follow_page_mask+0xa6e/0x12d0 [ 87.363811][ C1] [ 87.363816][ C1] RAX: 1ffff1100cba8c46 RBX: ffff888065d46230 RCX: ffff88802959d940 [ 87.368911][ C0] __get_user_pages+0x3de/0x11c0 [ 87.373913][ C1] RDX: 0000000000000000 RSI: ffff888079a75408 RDI: ffff888065d46140 [ 87.379194][ C0] ? populate_vma_page_range+0x290/0x290 [ 87.384453][ C1] RBP: ffff888065d46128 R08: dffffc0000000000 R09: ffffed100f34ea90 [ 87.389633][ C0] ? read_lock_is_recursive+0x10/0x10 [ 87.394422][ C1] R10: ffffed100f34ea90 R11: 1ffff1100f34ea8f R12: ffff888056c73129 [ 87.400576][ C0] populate_vma_page_range+0x213/0x290 [ 87.407063][ C1] R13: dffffc0000000000 R14: ffff888065d46128 R15: ffff888065d46138 [ 87.412076][ C0] __mm_populate+0x26f/0x3a0 [ 87.417277][ C1] __do_munmap+0x521/0xdc0 [ 87.422541][ C0] ? check_vma_flags+0x480/0x480 [ 87.427988][ C1] mmap_region+0x8bb/0x1660 [ 87.433427][ C0] ? preempt_count_add+0x8d/0x190 [ 87.439399][ C1] do_mmap+0x81f/0xea0 [ 87.444484][ C0] ? up_write+0x1bb/0x420 [ 87.449582][ C1] vm_mmap_pgoff+0x1b2/0x2b0 [ 87.454877][ C0] vm_mmap_pgoff+0x203/0x2b0 [ 87.459892][ C1] ? account_locked_vm+0xe0/0xe0 [ 87.466400][ C0] ? account_locked_vm+0xe0/0xe0 [ 87.476671][ C1] ? __fget_files+0x40f/0x480 [ 87.488887][ C0] ? __fget_files+0x40f/0x480 [ 87.496332][ C1] ksys_mmap_pgoff+0x542/0x780 [ 87.501688][ C0] ksys_mmap_pgoff+0x542/0x780 [ 87.507045][ C1] ? mmap_region+0x1660/0x1660 [ 87.511097][ C0] ? mmap_region+0x1660/0x1660 [ 87.517668][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 87.524234][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 87.528458][ C1] do_syscall_64+0x4c/0xa0 [ 87.536586][ C0] do_syscall_64+0x4c/0xa0 [ 87.541592][ C1] ? clear_bhb_loop+0x30/0x80 [ 87.550970][ C0] ? clear_bhb_loop+0x30/0x80 [ 87.560581][ C1] ? clear_bhb_loop+0x30/0x80 [ 87.569851][ C0] ? clear_bhb_loop+0x30/0x80 [ 87.579110][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.584984][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.592247][ C1] RIP: 0033:0x7f1ad0813242 [ 87.602288][ C0] RIP: 0033:0x7f73478df749 [ 87.605568][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 87.608401][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.613082][ C1] RSP: 002b:00007fff3d98ff88 EFLAGS: 00000206 [ 87.617564][ C0] RSP: 002b:00007f7345b04038 EFLAGS: 00000246 [ 87.622734][ C1] ORIG_RAX: 0000000000000009 [ 87.627908][ C0] ORIG_RAX: 0000000000000009 [ 87.632829][ C1] RAX: ffffffffffffffda RBX: 00007f1ad0531000 RCX: 00007f1ad0813242 [ 87.637749][ C0] RAX: ffffffffffffffda RBX: 00007f7347b36180 RCX: 00007f73478df749 [ 87.642404][ C1] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 00007f1ad0531000 [ 87.646883][ C0] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 87.651191][ C1] RBP: 0000000000000812 R08: 0000000000000003 R09: 000000000000d000 [ 87.655501][ C0] RBP: 00007f7347963f91 R08: 0000000000000003 R09: 0000000000000000 [ 87.660331][ C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007fff3d990048 [ 87.664813][ C0] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 87.669990][ C1] R13: 00007f1ad07f0580 R14: 00007fff3d990400 R15: 00000fffe7b31ff4 [ 87.675173][ C0] R13: 00007f7347b36218 R14: 00007f7347b36180 R15: 00007ffd3711ac38 [ 87.679921][ C1] [ 87.684489][ C0] [ 87.689665][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.695530][ C0] irq event stamp: 973 [ 87.700364][ C1] CPU: 1 PID: 5131 Comm: cmp Not tainted syzkaller #0 [ 87.700380][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.704866][ C0] hardirqs last enabled at (972): [] _raw_spin_unlock_irqrestore+0x82/0x100 [ 87.710573][ C1] Call Trace: [ 87.710582][ C1] [ 87.716279][ C0] hardirqs last disabled at (973): [] _raw_spin_lock_irqsave+0x7f/0xf0 [ 87.721290][ C1] dump_stack_lvl+0x168/0x230 [ 87.726293][ C0] softirqs last enabled at (496): [] __irq_exit_rcu+0x12f/0x220 [ 87.731649][ C1] ? show_regs_print_info+0x20/0x20 [ 87.736393][ C0] softirqs last disabled at (967): [] __irq_exit_rcu+0x12f/0x220 [ 87.741136][ C1] ? load_image+0x3b0/0x3b0 [ 87.746420][ C0] ---[ end trace d68d0feb90dedef9 ]--- [ 87.751964][ C1] panic+0x2c9/0x7f0 [ 89.473019][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 89.477523][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 89.483202][ C1] __warn+0x248/0x2b0 [ 89.487179][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 89.492718][ C1] report_bug+0x1b7/0x2e0 [ 89.497039][ C1] handle_bug+0x3a/0x70 [ 89.501202][ C1] exc_invalid_op+0x16/0x40 [ 89.505704][ C1] asm_exc_invalid_op+0x16/0x20 [ 89.510552][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 89.516728][ C1] Code: 24 45 31 f6 31 ff 89 de e8 0d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 90 f2 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 89.536325][ C1] RSP: 0018:ffffc90000dd0860 EFLAGS: 00010046 [ 89.542380][ C1] RAX: ffffffff819ed980 RBX: 0000000000000000 RCX: ffff88802959d940 [ 89.550347][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.558476][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff5419 [ 89.566433][ C1] R10: fffffbfff1ff5419 R11: 1ffffffff1ff5418 R12: ffff88802959f0c8 [ 89.574390][ C1] R13: 1ffff920001ba11c R14: ffffc90000dd08c8 R15: 000000000028e000 [ 89.582352][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 89.587892][ C1] bpf_probe_read_user+0x26/0x70 [ 89.592816][ C1] bpf_prog_26fc836ad493b19c+0x3d/0x8d8 [ 89.598347][ C1] bpf_trace_run3+0x17e/0x320 [ 89.603005][ C1] ? bpf_trace_run2+0x2d0/0x2d0 [ 89.607835][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 89.613712][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 89.618724][ C1] ? dsp_cmx_receive+0x13c0/0x13c0 [ 89.623818][ C1] enqueue_timer+0x394/0x520 [ 89.628405][ C1] __mod_timer+0x8e1/0xd20 [ 89.632807][ C1] dsp_cmx_send+0x1ab4/0x1b30 [ 89.637473][ C1] ? detach_timer+0x33/0x2b0 [ 89.642044][ C1] ? read_lock_is_recursive+0x10/0x10 [ 89.647405][ C1] ? dsp_cmx_receive+0x13c0/0x13c0 [ 89.652511][ C1] call_timer_fn+0x16c/0x530 [ 89.657091][ C1] ? dsp_cmx_receive+0x13c0/0x13c0 [ 89.662189][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 89.668149][ C1] ? __run_timers+0x7c0/0x7c0 [ 89.672813][ C1] ? rcu_is_watching+0x11/0xa0 [ 89.677562][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 89.682755][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 89.687933][ C1] ? dsp_cmx_receive+0x13c0/0x13c0 [ 89.693027][ C1] __run_timers+0x525/0x7c0 [ 89.697520][ C1] ? detach_timer+0x2b0/0x2b0 [ 89.702187][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 89.708177][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 89.713014][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 89.718292][ C1] run_timer_softirq+0x63/0xf0 [ 89.723039][ C1] handle_softirqs+0x328/0x820 [ 89.728045][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 89.732896][ C1] ? do_softirq+0x200/0x200 [ 89.737390][ C1] __irq_exit_rcu+0x12f/0x220 [ 89.742064][ C1] ? irq_exit_rcu+0x20/0x20 [ 89.746565][ C1] irq_exit_rcu+0x5/0x20 [ 89.750789][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 89.756427][ C1] [ 89.759343][ C1] [ 89.762257][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 89.768221][ C1] RIP: 0010:__vma_rb_erase+0x682/0xa30 [ 89.773663][ C1] Code: 48 8b 03 83 e0 01 4c 09 f0 48 89 03 48 8b 5c 24 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 11 7c 0d 00 4c 8b 23 <4c> 89 e6 48 83 e6 fc 31 ff e8 40 17 c9 ff 4c 89 e3 48 83 e3 fc 74 [ 89.793334][ C1] RSP: 0018:ffffc900035afad0 EFLAGS: 00000246 [ 89.799405][ C1] RAX: 1ffff1100cba8c46 RBX: ffff888065d46230 RCX: ffff88802959d940 [ 89.807359][ C1] RDX: 0000000000000000 RSI: ffff888079a75408 RDI: ffff888065d46140 [ 89.815312][ C1] RBP: ffff888065d46128 R08: dffffc0000000000 R09: ffffed100f34ea90 [ 89.823270][ C1] R10: ffffed100f34ea90 R11: 1ffff1100f34ea8f R12: ffff888056c73129 [ 89.831228][ C1] R13: dffffc0000000000 R14: ffff888065d46128 R15: ffff888065d46138 [ 89.839197][ C1] __do_munmap+0x521/0xdc0 [ 89.843602][ C1] mmap_region+0x8bb/0x1660 [ 89.848098][ C1] do_mmap+0x81f/0xea0 [ 89.852161][ C1] vm_mmap_pgoff+0x1b2/0x2b0 [ 89.856747][ C1] ? account_locked_vm+0xe0/0xe0 [ 89.861665][ C1] ? __fget_files+0x40f/0x480 [ 89.866332][ C1] ksys_mmap_pgoff+0x542/0x780 [ 89.871085][ C1] ? mmap_region+0x1660/0x1660 [ 89.875836][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 89.881036][ C1] do_syscall_64+0x4c/0xa0 [ 89.885442][ C1] ? clear_bhb_loop+0x30/0x80 [ 89.890189][ C1] ? clear_bhb_loop+0x30/0x80 [ 89.894849][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.900727][ C1] RIP: 0033:0x7f1ad0813242 [ 89.905127][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 89.924720][ C1] RSP: 002b:00007fff3d98ff88 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 89.933113][ C1] RAX: ffffffffffffffda RBX: 00007f1ad0531000 RCX: 00007f1ad0813242 [ 89.941076][ C1] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 00007f1ad0531000 [ 89.949035][ C1] RBP: 0000000000000812 R08: 0000000000000003 R09: 000000000000d000 [ 89.956986][ C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007fff3d990048 [ 89.964940][ C1] R13: 00007f1ad07f0580 R14: 00007fff3d990400 R15: 00000fffe7b31ff4 [ 89.972908][ C1] [ 91.126554][ C1] Shutting down cpus with NMI [ 91.131534][ C1] Kernel Offset: disabled [ 91.135884][ C1] Rebooting in 86400 seconds..