Warning: Permanently added '[localhost]:45293' (ED25519) to the list of known hosts. 2025/06/07 19:41:05 ignoring optional flag "sandboxArg"="0" 2025/06/07 19:41:07 parsed 1 programs syzkaller login: [ 91.059531][ T5318] cgroup: Unknown subsys name 'net' [ 91.133916][ T5318] cgroup: Unknown subsys name 'cpuset' [ 91.142784][ T5318] cgroup: Unknown subsys name 'rlimit' [ 92.083132][ T10] cfg80211: failed to load regulatory.db [ 92.867081][ T5318] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.121549][ T45] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.126545][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.132318][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.135988][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.139699][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.696968][ T5340] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.907906][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.940748][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.450547][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.454053][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.047004][ T5381] syz-executor (5381) used greatest stack depth: 19752 bytes left [ 105.348780][ T5385] chnl_net:caif_netlink_parms(): no params data found [ 105.519650][ T5385] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.524328][ T5385] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.527359][ T5385] bridge_slave_0: entered allmulticast mode [ 105.532601][ T5385] bridge_slave_0: entered promiscuous mode [ 105.538889][ T5385] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.543829][ T5385] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.547899][ T5385] bridge_slave_1: entered allmulticast mode [ 105.554186][ T5385] bridge_slave_1: entered promiscuous mode [ 105.579677][ T5385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.588253][ T5385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.661213][ T5385] team0: Port device team_slave_0 added [ 105.672829][ T5385] team0: Port device team_slave_1 added [ 105.699511][ T5385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.703403][ T5385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.716128][ T5385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.724325][ T5385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.727262][ T5385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.739706][ T5385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.775094][ T5385] hsr_slave_0: entered promiscuous mode [ 105.778131][ T5385] hsr_slave_1: entered promiscuous mode [ 106.223453][ T5385] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.286687][ T5385] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.319398][ T5385] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.364474][ T5385] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.641809][ T5385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.685815][ T5385] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.706486][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.709431][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.732374][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.735922][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.826286][ T5385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.250641][ T5385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.659824][ T5385] veth0_vlan: entered promiscuous mode [ 107.671461][ T5385] veth1_vlan: entered promiscuous mode [ 107.706796][ T5385] veth0_macvtap: entered promiscuous mode [ 107.715270][ T5385] veth1_macvtap: entered promiscuous mode [ 107.729166][ T5385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.742396][ T5385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.753732][ T5385] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.757958][ T5385] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.764184][ T5385] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.768230][ T5385] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/06/07 19:41:26 executed programs: 0 [ 108.137783][ T4672] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.170681][ T4672] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.180651][ T4672] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.186492][ T4672] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.191317][ T4672] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.303062][ T5345] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.307965][ T5448] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.320940][ T5448] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.325962][ T5448] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.333633][ T5448] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.347019][ T5448] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.365511][ T5345] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.368347][ T5448] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.385997][ T4672] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.418098][ T4672] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.435524][ T5385] syz-executor (5385) used greatest stack depth: 19192 bytes left [ 108.456545][ T4672] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.504058][ T5452] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.524038][ T5448] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.527790][ T5448] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.534083][ T5448] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.537789][ T5452] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.542810][ T5452] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.548099][ T5448] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.552464][ T5448] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.557652][ T5452] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.721053][ T4672] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 108.731476][ T4672] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 108.740163][ T4672] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 108.760074][ T4672] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 108.775738][ T4672] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 109.943231][ T1039] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.237589][ T4672] Bluetooth: hci0: command tx timeout [ 110.288089][ T1039] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.410790][ T4672] Bluetooth: hci1: command tx timeout [ 110.480757][ T4672] Bluetooth: hci2: command tx timeout [ 110.561766][ T1039] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.634508][ T4672] Bluetooth: hci4: command tx timeout [ 110.637940][ T4672] Bluetooth: hci3: command tx timeout [ 110.841441][ T1039] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.876134][ T4672] Bluetooth: hci5: command tx timeout [ 111.083925][ T5440] chnl_net:caif_netlink_parms(): no params data found [ 111.283691][ T1039] bridge_slave_1: left allmulticast mode [ 111.286374][ T1039] bridge_slave_1: left promiscuous mode [ 111.289208][ T1039] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.311161][ T1039] bridge_slave_0: left allmulticast mode [ 111.313964][ T1039] bridge_slave_0: left promiscuous mode [ 111.317276][ T1039] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.665510][ T1039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.673327][ T1039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.678437][ T1039] bond0 (unregistering): Released all slaves [ 111.926392][ T1039] hsr_slave_0: left promiscuous mode [ 111.931625][ T1039] hsr_slave_1: left promiscuous mode [ 111.939781][ T1039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.950030][ T1039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.961424][ T1039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.964799][ T1039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.993461][ T1039] veth1_macvtap: left promiscuous mode [ 111.996667][ T1039] veth0_macvtap: left promiscuous mode [ 111.999690][ T1039] veth1_vlan: left promiscuous mode [ 112.003714][ T1039] veth0_vlan: left promiscuous mode [ 112.312310][ T4672] Bluetooth: hci0: command tx timeout [ 112.356740][ T1039] team0 (unregistering): Port device team_slave_1 removed [ 112.382492][ T1039] team0 (unregistering): Port device team_slave_0 removed [ 112.473396][ T4672] Bluetooth: hci1: command tx timeout [ 112.553991][ T4672] Bluetooth: hci2: command tx timeout [ 112.710304][ T4672] Bluetooth: hci3: command tx timeout [ 112.713195][ T4672] Bluetooth: hci4: command tx timeout [ 112.719361][ T5440] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.731588][ T5440] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.735701][ T5440] bridge_slave_0: entered allmulticast mode [ 112.751412][ T5440] bridge_slave_0: entered promiscuous mode [ 112.756567][ T5440] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.764589][ T5440] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.768206][ T5440] bridge_slave_1: entered allmulticast mode [ 112.772286][ T5440] bridge_slave_1: entered promiscuous mode [ 112.951617][ T5452] Bluetooth: hci5: command tx timeout [ 113.063362][ T5440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.262465][ T5440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.327199][ T5461] chnl_net:caif_netlink_parms(): no params data found [ 113.645119][ T5440] team0: Port device team_slave_0 added [ 113.692644][ T5442] chnl_net:caif_netlink_parms(): no params data found [ 113.774995][ T5440] team0: Port device team_slave_1 added [ 113.793358][ T5453] chnl_net:caif_netlink_parms(): no params data found [ 113.845640][ T5441] chnl_net:caif_netlink_parms(): no params data found [ 113.905097][ T5451] chnl_net:caif_netlink_parms(): no params data found [ 114.032339][ T5440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.035124][ T5440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.075914][ T5440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.120141][ T5461] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.123950][ T5461] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.127296][ T5461] bridge_slave_0: entered allmulticast mode [ 114.153784][ T5461] bridge_slave_0: entered promiscuous mode [ 114.169562][ T5461] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.181097][ T5461] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.185154][ T5461] bridge_slave_1: entered allmulticast mode [ 114.204399][ T5461] bridge_slave_1: entered promiscuous mode [ 114.212454][ T5440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.215825][ T5440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.251172][ T5440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.391467][ T5452] Bluetooth: hci0: command tx timeout [ 114.446110][ T5461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.525405][ T5441] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.529123][ T5441] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.534511][ T5441] bridge_slave_0: entered allmulticast mode [ 114.538687][ T5441] bridge_slave_0: entered promiscuous mode [ 114.548095][ T5461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.553033][ T5452] Bluetooth: hci1: command tx timeout [ 114.616626][ T5442] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.623422][ T5442] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.626871][ T5442] bridge_slave_0: entered allmulticast mode [ 114.631098][ T5452] Bluetooth: hci2: command tx timeout [ 114.636058][ T5442] bridge_slave_0: entered promiscuous mode [ 114.642619][ T5441] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.646186][ T5441] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.649541][ T5441] bridge_slave_1: entered allmulticast mode [ 114.655227][ T5441] bridge_slave_1: entered promiscuous mode [ 114.693609][ T5453] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.696933][ T5453] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.704317][ T5453] bridge_slave_0: entered allmulticast mode [ 114.708665][ T5453] bridge_slave_0: entered promiscuous mode [ 114.729222][ T5440] hsr_slave_0: entered promiscuous mode [ 114.736489][ T5440] hsr_slave_1: entered promiscuous mode [ 114.753619][ T5442] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.756819][ T5442] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.764133][ T5442] bridge_slave_1: entered allmulticast mode [ 114.768406][ T5442] bridge_slave_1: entered promiscuous mode [ 114.790073][ T5452] Bluetooth: hci4: command tx timeout [ 114.792757][ T5452] Bluetooth: hci3: command tx timeout [ 114.803098][ T5453] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.806453][ T5453] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.811810][ T5453] bridge_slave_1: entered allmulticast mode [ 114.816114][ T5453] bridge_slave_1: entered promiscuous mode [ 114.852700][ T5441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.861413][ T5461] team0: Port device team_slave_0 added [ 114.877164][ T5461] team0: Port device team_slave_1 added [ 114.942465][ T5451] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.946214][ T5451] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.960666][ T5451] bridge_slave_0: entered allmulticast mode [ 114.973078][ T5451] bridge_slave_0: entered promiscuous mode [ 114.986327][ T5451] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.989481][ T5451] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.013637][ T5451] bridge_slave_1: entered allmulticast mode [ 115.021172][ T5451] bridge_slave_1: entered promiscuous mode [ 115.030299][ T4672] Bluetooth: hci5: command tx timeout [ 115.078248][ T5442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.094486][ T5441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.182617][ T5453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.191809][ T5461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.195791][ T5461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.224817][ T5461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.257881][ T5442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.369072][ T5453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.425148][ T5461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.428155][ T5461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.455334][ T5461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.491439][ T5441] team0: Port device team_slave_0 added [ 115.498369][ T5442] team0: Port device team_slave_0 added [ 115.516544][ T5453] team0: Port device team_slave_0 added [ 115.565504][ T5451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.572471][ T5441] team0: Port device team_slave_1 added [ 115.590430][ T5442] team0: Port device team_slave_1 added [ 115.607873][ T5453] team0: Port device team_slave_1 added [ 115.648682][ T5451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.733249][ T5461] hsr_slave_0: entered promiscuous mode [ 115.736620][ T5461] hsr_slave_1: entered promiscuous mode [ 115.744263][ T5461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.748285][ T5461] Cannot create hsr debugfs directory [ 115.773266][ T5453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.776271][ T5453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.812869][ T5453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.818414][ T5441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.824222][ T5441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.853661][ T5441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.914779][ T5451] team0: Port device team_slave_0 added [ 115.954031][ T5442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.957051][ T5442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.983992][ T5442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.004599][ T5453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.007626][ T5453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.042662][ T5453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.052457][ T5441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.055918][ T5441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.102737][ T5441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.111734][ T5451] team0: Port device team_slave_1 added [ 116.165089][ T5442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.168357][ T5442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.210221][ T5442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.435716][ T5451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.438644][ T5451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.454745][ T5451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.472671][ T4672] Bluetooth: hci0: command tx timeout [ 116.522337][ T5453] hsr_slave_0: entered promiscuous mode [ 116.533453][ T5453] hsr_slave_1: entered promiscuous mode [ 116.540508][ T5453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.543678][ T5453] Cannot create hsr debugfs directory [ 116.557480][ T5441] hsr_slave_0: entered promiscuous mode [ 116.568753][ T5441] hsr_slave_1: entered promiscuous mode [ 116.577647][ T5441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.581840][ T5441] Cannot create hsr debugfs directory [ 116.585282][ T5451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.588337][ T5451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.604416][ T5451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.630758][ T4672] Bluetooth: hci1: command tx timeout [ 116.651727][ T5442] hsr_slave_0: entered promiscuous mode [ 116.655101][ T5442] hsr_slave_1: entered promiscuous mode [ 116.658511][ T5442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.665095][ T5442] Cannot create hsr debugfs directory [ 116.710192][ T4672] Bluetooth: hci2: command tx timeout [ 116.870399][ T4672] Bluetooth: hci3: command tx timeout [ 116.872963][ T4672] Bluetooth: hci4: command tx timeout [ 116.928120][ T5451] hsr_slave_0: entered promiscuous mode [ 116.934384][ T5451] hsr_slave_1: entered promiscuous mode [ 116.937724][ T5451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.943081][ T5451] Cannot create hsr debugfs directory [ 117.110173][ T5452] Bluetooth: hci5: command tx timeout [ 117.171932][ T5440] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.332181][ T5440] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.479154][ T5440] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.506374][ T5440] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.798101][ T5461] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 117.834852][ T5461] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 117.844664][ T5461] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.925208][ T5461] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 118.437340][ T5440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.491730][ T5440] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.531699][ T5461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.551264][ T1046] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.554182][ T1046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.608035][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.611432][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.668240][ T5453] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.741404][ T5461] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.770716][ T5453] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.836106][ T5453] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.848345][ T1046] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.851686][ T1046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.858975][ T1046] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.862566][ T1046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.898877][ T5453] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 119.006139][ T5442] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 119.093372][ T5442] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 119.188964][ T5442] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 119.208361][ T5461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.259497][ T5442] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 119.456487][ T5451] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 119.599796][ T5451] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 119.675524][ T5451] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 119.692775][ T5451] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 119.907345][ T5440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.005239][ T5453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.156596][ T5441] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 120.176584][ T5441] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 120.206545][ T5461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.288294][ T5441] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 120.331072][ T5453] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.404470][ T5441] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 120.540765][ T5442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.573594][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.577104][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.603423][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.606984][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.705976][ T5442] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.752748][ T5440] veth0_vlan: entered promiscuous mode [ 120.808186][ T5453] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 120.863635][ T5453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.977081][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.980887][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.002189][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.005372][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.033533][ T5451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.273022][ T5440] veth1_vlan: entered promiscuous mode [ 121.288913][ T5451] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.492626][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.496382][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.552749][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.556122][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.784322][ T5461] veth0_vlan: entered promiscuous mode [ 121.849667][ T5461] veth1_vlan: entered promiscuous mode [ 121.909113][ T5440] veth0_macvtap: entered promiscuous mode [ 122.054426][ T5440] veth1_macvtap: entered promiscuous mode [ 122.098124][ T5453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.127528][ T5441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.237555][ T5440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.351324][ T5440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.377321][ T5441] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.436000][ T5442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.454375][ T5461] veth0_macvtap: entered promiscuous mode [ 122.477235][ T5440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.525962][ T5440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.543454][ T5440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.547543][ T5440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.676827][ T5461] veth1_macvtap: entered promiscuous mode [ 122.725960][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.729386][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.761645][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.764656][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.835589][ T5451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.925109][ T5461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.093049][ T5461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.237786][ T5461] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.255078][ T5461] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.259304][ T5461] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.280096][ T5461] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.319820][ T5442] veth0_vlan: entered promiscuous mode [ 123.445510][ T5442] veth1_vlan: entered promiscuous mode [ 123.554083][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.557410][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.677676][ T5451] veth0_vlan: entered promiscuous mode [ 123.728079][ T1046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.764197][ T1046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.834461][ T5451] veth1_vlan: entered promiscuous mode [ 123.868285][ T5453] veth0_vlan: entered promiscuous mode [ 123.917999][ T5442] veth0_macvtap: entered promiscuous mode [ 123.939571][ T5442] veth1_macvtap: entered promiscuous mode [ 124.024703][ T5453] veth1_vlan: entered promiscuous mode 2025/06/07 19:41:42 executed programs: 12 [ 124.143770][ T5441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.194090][ T5442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.245370][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.249160][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.372785][ T5442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.387067][ T5451] veth0_macvtap: entered promiscuous mode [ 124.421311][ T5453] veth0_macvtap: entered promiscuous mode [ 124.457647][ T5442] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.482659][ T5442] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.486402][ T5442] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.528867][ T5442] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.557699][ T5451] veth1_macvtap: entered promiscuous mode [ 124.564894][ T5453] veth1_macvtap: entered promiscuous mode [ 124.649351][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.672205][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.806424][ T5451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.962506][ T5453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.013403][ T5451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.023145][ T5441] veth0_vlan: entered promiscuous mode [ 125.087270][ T5453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.163562][ T5451] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.180539][ T5451] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.198490][ T5451] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.209962][ T5451] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.315428][ T5453] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.319213][ T5453] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.377072][ T5453] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.401804][ T5453] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.434996][ T5441] veth1_vlan: entered promiscuous mode [ 125.492264][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.496264][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.906289][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.936894][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.987778][ T5441] veth0_macvtap: entered promiscuous mode [ 126.151309][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.155025][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.216863][ T5441] veth1_macvtap: entered promiscuous mode [ 126.372190][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.376015][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.561004][ T5441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.638658][ T5441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.642625][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.646381][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.679471][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.721044][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.775083][ T5441] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.779025][ T5441] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.847865][ T5441] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.886042][ T5441] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.531999][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.535033][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.840032][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.844094][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/06/07 19:41:47 executed programs: 91 [ 130.854721][ C0] ------------[ cut here ]------------ [ 130.857825][ C0] WARNING: CPU: 0 PID: 5453 at net/mac80211/tx.c:5024 __ieee80211_beacon_get+0x125d/0x1630 [ 130.863083][ C0] Modules linked in: [ 130.865223][ C0] CPU: 0 UID: 0 PID: 5453 Comm: syz-executor Not tainted 6.15.0-syzkaller-13655-gbdc7f8c5adad #0 PREEMPT(full) [ 130.872191][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.876766][ C0] RIP: 0010:__ieee80211_beacon_get+0x125d/0x1630 [ 130.880221][ C0] Code: e7 e8 17 ed 32 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 78 fe ff ff e8 42 6d da f6 90 0f 0b 90 e9 e0 f7 ff ff e8 34 6d da f6 90 <0f> 0b 90 e9 38 fb ff ff e8 26 6d da f6 48 c7 c7 e0 19 79 8f 4c 89 [ 130.889923][ C0] RSP: 0018:ffffc900000079f8 EFLAGS: 00010246 [ 130.892476][ C0] RAX: ffffffff8ae5eeec RBX: ffffffff8ae5dcc6 RCX: ffff88801f59a440 [ 130.896568][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.900617][ C0] RBP: 0000000000000000 R08: ffff88801f59a440 R09: 0000000000000003 [ 130.904093][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880420a6500 [ 130.907561][ C0] R13: dffffc0000000000 R14: ffff8880420a69d0 R15: ffff8880504af024 [ 130.911741][ C0] FS: 000055557e91e500(0000) GS:ffff88808d252000(0000) knlGS:0000000000000000 [ 130.916559][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.919597][ C0] CR2: 00007f720e77e2d8 CR3: 000000005066a000 CR4: 0000000000352ef0 [ 130.923363][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 130.927036][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 130.931099][ C0] Call Trace: [ 130.933151][ C0] [ 130.934818][ C0] ? __ieee80211_beacon_get+0x36/0x1630 [ 130.937820][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 130.940979][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 130.944167][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 130.946674][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 130.949734][ C0] __iterate_interfaces+0x2a8/0x590 [ 130.952263][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 130.955410][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 130.959334][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 130.962157][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 130.965249][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 130.968211][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 130.971121][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 130.973579][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 130.976104][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 130.978957][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 130.981908][ C0] handle_softirqs+0x286/0x870 [ 130.984224][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 130.986321][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 130.988459][ C0] ? irqtime_account_irq+0x18/0x1c0 [ 130.991050][ C0] __irq_exit_rcu+0xca/0x1f0 [ 130.993736][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 130.996498][ C0] irq_exit_rcu+0x9/0x30 [ 130.998372][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 131.000939][ C0] [ 131.002318][ C0] [ 131.003641][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 131.006459][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 131.009260][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b aa fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 131.018899][ C0] RSP: 0018:ffffc9000d50fa38 EFLAGS: 00000206 [ 131.021803][ C0] RAX: 974012eaa06fcc00 RBX: 0000000000000000 RCX: 974012eaa06fcc00 [ 131.025358][ C0] RDX: 0000000000000000 RSI: ffffffff8db6e2e9 RDI: ffffffff8be28200 [ 131.029720][ C0] RBP: ffffffff817464c8 R08: 0000000000000000 R09: ffffffff817464c8 [ 131.033558][ C0] R10: dffffc0000000000 R11: fffffbfff1f4225f R12: 0000000000000002 [ 131.036965][ C0] R13: ffffffff8e13f120 R14: 0000000000000000 R15: 0000000000000246 [ 131.040855][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 131.043913][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 131.046791][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 131.049570][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.052113][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 131.054560][ C0] __virt_addr_valid+0x1e5/0x5c0 [ 131.056765][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 131.059111][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 131.062708][ C0] kasan_addr_to_slab+0xf/0x90 [ 131.065160][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 131.068118][ C0] kasan_record_aux_stack+0xf/0xd0 [ 131.070586][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 131.073805][ C0] call_rcu+0x142/0x990 [ 131.076117][ C0] ? __pfx_call_rcu+0x10/0x10 [ 131.078384][ C0] ? __sk_destruct+0x4d2/0x660 [ 131.080490][ C0] kmem_cache_free+0x309/0x400 [ 131.082650][ C0] __sk_destruct+0x4d2/0x660 [ 131.084806][ C0] inet_release+0x184/0x210 [ 131.087051][ C0] sock_close+0xc3/0x240 [ 131.089380][ C0] ? __pfx_sock_close+0x10/0x10 [ 131.091934][ C0] __fput+0x44c/0xa70 [ 131.093751][ C0] fput_close_sync+0x119/0x200 [ 131.095850][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 131.098272][ C0] __x64_sys_close+0x7f/0x110 [ 131.100380][ C0] do_syscall_64+0xfa/0x3b0 [ 131.102692][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.105338][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.108399][ C0] ? clear_bhb_loop+0x60/0xb0 [ 131.110615][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.113401][ C0] RIP: 0033:0x7f720e58d58a [ 131.115489][ C0] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 43 91 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 a3 91 02 00 8b 44 24 [ 131.125000][ C0] RSP: 002b:00007fff7b0bcf50 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 131.128591][ C0] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f720e58d58a [ 131.132106][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 131.135958][ C0] RBP: 00007fff7b0bcfac R08: 00007fff7b0bc89c R09: 0079746972756365 [ 131.140761][ C0] R10: 00007fff7b0bc900 R11: 0000000000000293 R12: 0000000000000013 [ 131.144362][ C0] R13: 00000000000927c0 R14: 000000000001fe36 R15: 00007fff7b0bd000 [ 131.147822][ C0] [ 131.149239][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 131.153052][ C0] CPU: 0 UID: 0 PID: 5453 Comm: syz-executor Not tainted 6.15.0-syzkaller-13655-gbdc7f8c5adad #0 PREEMPT(full) [ 131.158951][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.163983][ C0] Call Trace: [ 131.165474][ C0] [ 131.166821][ C0] dump_stack_lvl+0x99/0x250 [ 131.169025][ C0] ? __asan_memcpy+0x40/0x70 [ 131.171602][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.174719][ C0] ? __pfx__printk+0x10/0x10 [ 131.177004][ C0] panic+0x2db/0x790 [ 131.178903][ C0] ? __pfx_panic+0x10/0x10 [ 131.181095][ C0] __warn+0x31b/0x4b0 [ 131.183058][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 131.185550][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 131.188026][ C0] report_bug+0x2be/0x4f0 [ 131.190203][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 131.193510][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 131.196419][ C0] ? __ieee80211_beacon_get+0x125f/0x1630 [ 131.198999][ C0] handle_bug+0x84/0x160 [ 131.201012][ C0] exc_invalid_op+0x1a/0x50 [ 131.203107][ C0] asm_exc_invalid_op+0x1a/0x20 [ 131.205292][ C0] RIP: 0010:__ieee80211_beacon_get+0x125d/0x1630 [ 131.208136][ C0] Code: e7 e8 17 ed 32 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 78 fe ff ff e8 42 6d da f6 90 0f 0b 90 e9 e0 f7 ff ff e8 34 6d da f6 90 <0f> 0b 90 e9 38 fb ff ff e8 26 6d da f6 48 c7 c7 e0 19 79 8f 4c 89 [ 131.218480][ C0] RSP: 0018:ffffc900000079f8 EFLAGS: 00010246 [ 131.221176][ C0] RAX: ffffffff8ae5eeec RBX: ffffffff8ae5dcc6 RCX: ffff88801f59a440 [ 131.224809][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.228712][ C0] RBP: 0000000000000000 R08: ffff88801f59a440 R09: 0000000000000003 [ 131.233014][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880420a6500 [ 131.236660][ C0] R13: dffffc0000000000 R14: ffff8880420a69d0 R15: ffff8880504af024 [ 131.240461][ C0] ? __ieee80211_beacon_get+0x36/0x1630 [ 131.243312][ C0] ? __ieee80211_beacon_get+0x125c/0x1630 [ 131.246282][ C0] ? __ieee80211_beacon_get+0x125c/0x1630 [ 131.249016][ C0] ? __ieee80211_beacon_get+0x36/0x1630 [ 131.251616][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 131.254161][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 131.257108][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 131.259929][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 131.263975][ C0] __iterate_interfaces+0x2a8/0x590 [ 131.266457][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 131.269076][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 131.272239][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 131.275358][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 131.279305][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 131.281746][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 131.284092][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 131.286277][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 131.288604][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 131.291246][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 131.293734][ C0] handle_softirqs+0x286/0x870 [ 131.296308][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 131.298945][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 131.301845][ C0] ? irqtime_account_irq+0x18/0x1c0 [ 131.304224][ C0] __irq_exit_rcu+0xca/0x1f0 [ 131.306431][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 131.309025][ C0] irq_exit_rcu+0x9/0x30 [ 131.311405][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 131.314346][ C0] [ 131.315653][ C0] [ 131.316909][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 131.319452][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 131.321894][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b aa fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 131.331184][ C0] RSP: 0018:ffffc9000d50fa38 EFLAGS: 00000206 [ 131.333859][ C0] RAX: 974012eaa06fcc00 RBX: 0000000000000000 RCX: 974012eaa06fcc00 [ 131.337426][ C0] RDX: 0000000000000000 RSI: ffffffff8db6e2e9 RDI: ffffffff8be28200 [ 131.341805][ C0] RBP: ffffffff817464c8 R08: 0000000000000000 R09: ffffffff817464c8 [ 131.345718][ C0] R10: dffffc0000000000 R11: fffffbfff1f4225f R12: 0000000000000002 [ 131.349287][ C0] R13: ffffffff8e13f120 R14: 0000000000000000 R15: 0000000000000246 [ 131.352759][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 131.355350][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 131.358372][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 131.361026][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.363363][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 131.365652][ C0] __virt_addr_valid+0x1e5/0x5c0 [ 131.368184][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 131.371047][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 131.373988][ C0] kasan_addr_to_slab+0xf/0x90 [ 131.376177][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 131.378930][ C0] kasan_record_aux_stack+0xf/0xd0 [ 131.381552][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 131.384699][ C0] call_rcu+0x142/0x990 [ 131.386621][ C0] ? __pfx_call_rcu+0x10/0x10 [ 131.388689][ C0] ? __sk_destruct+0x4d2/0x660 [ 131.390827][ C0] kmem_cache_free+0x309/0x400 [ 131.393169][ C0] __sk_destruct+0x4d2/0x660 [ 131.395570][ C0] inet_release+0x184/0x210 [ 131.398026][ C0] sock_close+0xc3/0x240 [ 131.400175][ C0] ? __pfx_sock_close+0x10/0x10 [ 131.402448][ C0] __fput+0x44c/0xa70 [ 131.404227][ C0] fput_close_sync+0x119/0x200 [ 131.406400][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 131.408798][ C0] __x64_sys_close+0x7f/0x110 [ 131.411206][ C0] do_syscall_64+0xfa/0x3b0 [ 131.413899][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.416659][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.419408][ C0] ? clear_bhb_loop+0x60/0xb0 [ 131.421556][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.424100][ C0] RIP: 0033:0x7f720e58d58a [ 131.426128][ C0] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 43 91 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 a3 91 02 00 8b 44 24 [ 131.435591][ C0] RSP: 002b:00007fff7b0bcf50 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 131.439312][ C0] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f720e58d58a [ 131.443141][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 131.447052][ C0] RBP: 00007fff7b0bcfac R08: 00007fff7b0bc89c R09: 0079746972756365 [ 131.450564][ C0] R10: 00007fff7b0bc900 R11: 0000000000000293 R12: 0000000000000013 [ 131.454586][ C0] R13: 00000000000927c0 R14: 000000000001fe36 R15: 00007fff7b0bd000 [ 131.458779][ C0] [ 131.460719][ C0] Kernel Offset: disabled [ 131.462724][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:41:49 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff8b6226e2 RBX=0000000000000050 RCX=ffff88801f59a440 RDX=0000000000000100 RSI=ffffffff8f881e50 RDI=0000000000000050 RBP=ffffffff8cb8b342 RSP=ffffc90000007288 R8 =ffff88801f59a440 R9 =0000000000000002 R10=0000000000000025 R11=0000000000000100 R12=ffffffff8cb8b343 R13=ffffc90000007338 R14=0000000000000001 R15=ffffffff8cb8b342 RIP=ffffffff81c05c4f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557e91e500 ffffffff 00c00000 GS =0000 ffff88808d252000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f720e77e2d8 CR3=000000005066a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff7b0bcf70 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f720e611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f720e611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f720e611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f720e611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f720e611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f720e611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000