batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active hsr_slave_0: entered promiscuous mode ============================= [ BUG: Invalid wait context ] 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 Not tainted ----------------------------- syz-executor/11549 is trying to lock: ffff888032aea200 (&trie->lock){....}-{3:3}, at: trie_delete_elem+0x96/0x6a0 kernel/bpf/lpm_trie.c:462 other info that might help us debug this: context-{5:5} 4 locks held by syz-executor/11549: #0: ffffffff901c0470 (&ops->srcu#2){.+.+}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #0: ffffffff901c0470 (&ops->srcu#2){.+.+}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff901c0470 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 net/core/rtnetlink.c:555 #1: ffffffff8fcaff08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #1: ffffffff8fcaff08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:326 [inline] #1: ffffffff8fcaff08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xbb0/0x20e0 net/core/rtnetlink.c:4008 #2: ffff8880b873e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 kernel/sched/core.c:598 #3: ffffffff8e937aa0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #3: ffffffff8e937aa0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #3: ffffffff8e937aa0 (rcu_read_lock){....}-{1:3}, at: __bpf_trace_run kernel/trace/bpf_trace.c:2350 [inline] #3: ffffffff8e937aa0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x244/0x590 kernel/trace/bpf_trace.c:2394 stack backtrace: CPU: 1 UID: 0 PID: 11549 Comm: syz-executor Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 print_lock_invalid_wait_context kernel/locking/lockdep.c:4826 [inline] check_wait_context kernel/locking/lockdep.c:4898 [inline] __lock_acquire+0x15a8/0x2100 kernel/locking/lockdep.c:5176 lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162 trie_delete_elem+0x96/0x6a0 kernel/bpf/lpm_trie.c:462 bpf_prog_1c0c44170264bb34+0x46/0x4a bpf_dispatcher_nop_func include/linux/bpf.h:1290 [inline] __bpf_prog_run include/linux/filter.h:701 [inline] bpf_prog_run include/linux/filter.h:708 [inline] __bpf_trace_run kernel/trace/bpf_trace.c:2351 [inline] bpf_trace_run4+0x334/0x590 kernel/trace/bpf_trace.c:2394 __traceiter_sched_switch+0x98/0xd0 include/trace/events/sched.h:222 trace_sched_switch include/trace/events/sched.h:222 [inline] __schedule+0x22bc/0x4c30 kernel/sched/core.c:6753 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7078 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:707 RIP: 0010:check_kcov_mode kernel/kcov.c:194 [inline] RIP: 0010:write_comp_data kernel/kcov.c:246 [inline] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x35/0x90 kernel/kcov.c:314 Code: 14 25 00 d6 03 00 65 8b 05 90 5f 64 7e 25 00 01 ff 00 74 10 3d 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 74 52 8b 82 f8 15 00 00 <83> f8 03 75 47 48 8b 8a 00 16 00 00 44 8b 8a fc 15 00 00 49 c1 e1 RSP: 0018:ffffc9000bcaea18 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9000bcae803 RDX: ffff88801dbc9e00 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc9000bcaec88 R08: ffffffff89a2e1d5 R09: 1ffffffff2033ce6 R10: dffffc0000000000 R11: fffffbfff2033ce7 R12: 1ffff1100a325415 R13: dffffc0000000000 R14: ffff88807d562000 R15: ffffc9000bcaeaf0 rtnl_fill_ifinfo+0x1115/0x22b0 net/core/rtnetlink.c:2063 rtmsg_ifinfo_build_skb+0x18a/0x260 net/core/rtnetlink.c:4353 rtmsg_ifinfo_event net/core/rtnetlink.c:4386 [inline] rtmsg_ifinfo+0x91/0x1b0 net/core/rtnetlink.c:4395 __dev_notify_flags+0xf7/0x400 net/core/dev.c:8984 __dev_set_promiscuity+0x152/0x5a0 net/core/dev.c:8756 dev_set_promiscuity+0x51/0xe0 net/core/dev.c:8776 hsr_portdev_setup net/hsr/hsr_slave.c:148 [inline] hsr_add_port+0x53e/0x790 net/hsr/hsr_slave.c:201 hsr_dev_finalize+0x69a/0xa20 net/hsr/hsr_device.c:741 hsr_newlink+0x7ee/0x970 net/hsr/hsr_netlink.c:120 rtnl_newlink_create+0x2ee/0xa40 net/core/rtnetlink.c:3786 __rtnl_newlink net/core/rtnetlink.c:3896 [inline] rtnl_newlink+0x1b40/0x20e0 net/core/rtnetlink.c:4009 rtnetlink_rcv_msg+0x791/0xcf0 net/core/rtnetlink.c:6919 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2542 netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline] netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1347 netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1891 sock_sendmsg_nosec net/socket.c:711 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:726 __sys_sendto+0x363/0x4c0 net/socket.c:2197 __do_sys_sendto net/socket.c:2204 [inline] __se_sys_sendto net/socket.c:2200 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2200 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f18b0b81dac Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b RSP: 002b:00007ffeff2d9790 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f18b1874620 RCX: 00007f18b0b81dac RDX: 0000000000000048 RSI: 00007f18b1874670 RDI: 0000000000000003 RBP: 0000000000000000 R08: 00007ffeff2d97e4 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f18b1874670 R15: 0000000000000000 hsr_slave_1: entered promiscuous mode debugfs: Directory 'hsr0' with parent 'hsr' already present! Cannot create hsr debugfs directory netdevsim netdevsim4 netdevsim0: renamed from eth0 netdevsim netdevsim4 netdevsim1: renamed from eth1 netdevsim netdevsim4 netdevsim2: renamed from eth2 netdevsim netdevsim4 netdevsim3: renamed from eth3 8021q: adding VLAN 0 to HW filter on device bond0 8021q: adding VLAN 0 to HW filter on device team0 8021q: adding VLAN 0 to HW filter on device batadv0 veth0_vlan: entered promiscuous mode veth1_vlan: entered promiscuous mode veth0_macvtap: entered promiscuous mode veth1_macvtap: entered promiscuous mode batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: batadv0: Interface activated: batadv_slave_0 batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: batadv0: Interface activated: batadv_slave_1 netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' ---------------- Code disassembly (best guess): 0: 14 25 adc $0x25,%al 2: 00 d6 add %dl,%dh 4: 03 00 add (%rax),%eax 6: 65 8b 05 90 5f 64 7e mov %gs:0x7e645f90(%rip),%eax # 0x7e645f9d d: 25 00 01 ff 00 and $0xff0100,%eax 12: 74 10 je 0x24 14: 3d 00 01 00 00 cmp $0x100,%eax 19: 75 5b jne 0x76 1b: 83 ba 1c 16 00 00 00 cmpl $0x0,0x161c(%rdx) 22: 74 52 je 0x76 24: 8b 82 f8 15 00 00 mov 0x15f8(%rdx),%eax * 2a: 83 f8 03 cmp $0x3,%eax <-- trapping instruction 2d: 75 47 jne 0x76 2f: 48 8b 8a 00 16 00 00 mov 0x1600(%rdx),%rcx 36: 44 8b 8a fc 15 00 00 mov 0x15fc(%rdx),%r9d 3d: 49 rex.WB 3e: c1 .byte 0xc1 3f: e1 .byte 0xe1