Warning: Permanently added '[localhost]:20991' (ED25519) to the list of known hosts. 2025/11/23 15:00:24 parsed 1 programs syzkaller login: [ 84.380513][ T5315] cgroup: Unknown subsys name 'net' [ 84.443787][ T5315] cgroup: Unknown subsys name 'cpuset' [ 84.448983][ T5315] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.073428][ T5315] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.466137][ T80] ODEBUG: Out of memory. ODEBUG disabled [ 90.490270][ T5338] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.701458][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.704902][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.054991][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.058254][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.854989][ T55] cfg80211: failed to load regulatory.db [ 93.199774][ T5378] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.204104][ T5378] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.209164][ T5378] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.221484][ T5378] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.226747][ T5378] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.038601][ T5368] chnl_net:caif_netlink_parms(): no params data found [ 95.281208][ T5378] Bluetooth: hci0: command tx timeout [ 95.432219][ T5368] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.436204][ T5368] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.439423][ T5368] bridge_slave_0: entered allmulticast mode [ 95.464237][ T5368] bridge_slave_0: entered promiscuous mode [ 95.480814][ T5368] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.491002][ T5368] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.495136][ T5368] bridge_slave_1: entered allmulticast mode [ 95.524782][ T5368] bridge_slave_1: entered promiscuous mode [ 95.610179][ T5368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.633493][ T5368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.817026][ T5368] team0: Port device team_slave_0 added [ 95.881260][ T5368] team0: Port device team_slave_1 added [ 96.033466][ T5368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.036271][ T5368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.088647][ T5368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.109359][ T5368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.119193][ T5368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.161367][ T5368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.275835][ T5368] hsr_slave_0: entered promiscuous mode [ 96.295289][ T5368] hsr_slave_1: entered promiscuous mode [ 96.707500][ T5368] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.716572][ T5368] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.722963][ T5368] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.728231][ T5368] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.793268][ T5368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.807021][ T5368] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.816249][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.819445][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.836047][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.839341][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.994256][ T5368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.025344][ T5368] veth0_vlan: entered promiscuous mode [ 97.036011][ T5368] veth1_vlan: entered promiscuous mode [ 97.059283][ T5368] veth0_macvtap: entered promiscuous mode [ 97.067412][ T5368] veth1_macvtap: entered promiscuous mode [ 97.083342][ T5368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.094203][ T5368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.105170][ T3028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.113802][ T3028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.123457][ T3028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.126722][ T3028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/11/23 15:00:39 executed programs: 0 [ 97.369189][ T5378] Bluetooth: hci0: command tx timeout [ 97.454763][ T46] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.458405][ T46] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.462055][ T46] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.465124][ T46] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.469786][ T46] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.473545][ T46] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.477223][ T46] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.482324][ T46] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.485503][ T46] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.488703][ T46] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.631679][ T46] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.641793][ T46] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.645192][ T46] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.648740][ T46] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.652631][ T46] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.780835][ T46] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.790617][ T46] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.800782][ T46] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.833219][ T5431] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.843942][ T5431] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.848696][ T5431] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.853607][ T5431] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.859827][ T5434] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.863635][ T5431] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.867754][ T5378] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.879575][ T5434] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.883028][ T5431] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.887514][ T5434] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.891623][ T5431] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.896699][ T4673] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 99.024328][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.067553][ T5427] chnl_net:caif_netlink_parms(): no params data found [ 99.533970][ T5427] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.537452][ T5427] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.540986][ T5427] bridge_slave_0: entered allmulticast mode [ 99.544568][ T5427] bridge_slave_0: entered promiscuous mode [ 99.567545][ T5427] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.571244][ T5427] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.574511][ T5427] bridge_slave_1: entered allmulticast mode [ 99.578533][ T5427] bridge_slave_1: entered promiscuous mode [ 99.647741][ T5427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.662096][ T5427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.680835][ T5434] Bluetooth: hci3: command tx timeout [ 99.683583][ T5434] Bluetooth: hci1: command tx timeout [ 99.686136][ T5434] Bluetooth: hci2: command tx timeout [ 99.779614][ T5427] team0: Port device team_slave_0 added [ 99.784767][ T5427] team0: Port device team_slave_1 added [ 99.878894][ T5427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.882267][ T5427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.893120][ T5427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.917916][ T5428] chnl_net:caif_netlink_parms(): no params data found [ 99.921082][ T5431] Bluetooth: hci5: command tx timeout [ 99.924135][ T5431] Bluetooth: hci4: command tx timeout [ 99.931918][ T5427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.934678][ T5427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.945241][ T5427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.000500][ T5434] Bluetooth: hci0: command tx timeout [ 100.180070][ T5427] hsr_slave_0: entered promiscuous mode [ 100.187879][ T5427] hsr_slave_1: entered promiscuous mode [ 100.191656][ T5427] debugfs: 'hsr0' already exists in 'hsr' [ 100.194311][ T5427] Cannot create hsr debugfs directory [ 100.257288][ T5443] chnl_net:caif_netlink_parms(): no params data found [ 100.313197][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.324382][ T5440] chnl_net:caif_netlink_parms(): no params data found [ 100.442041][ T5442] chnl_net:caif_netlink_parms(): no params data found [ 100.462444][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.505408][ T5438] chnl_net:caif_netlink_parms(): no params data found [ 100.588857][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.692028][ T5428] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.695499][ T5428] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.698881][ T5428] bridge_slave_0: entered allmulticast mode [ 100.703999][ T5428] bridge_slave_0: entered promiscuous mode [ 100.709092][ T5428] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.713644][ T5428] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.717390][ T5428] bridge_slave_1: entered allmulticast mode [ 100.721500][ T5428] bridge_slave_1: entered promiscuous mode [ 100.866023][ T5428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.922452][ T5443] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.926038][ T5443] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.928838][ T5443] bridge_slave_0: entered allmulticast mode [ 100.933944][ T5443] bridge_slave_0: entered promiscuous mode [ 100.957411][ T5428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.007151][ T5440] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.014514][ T5440] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.017910][ T5440] bridge_slave_0: entered allmulticast mode [ 101.022860][ T5440] bridge_slave_0: entered promiscuous mode [ 101.026726][ T5443] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.029901][ T5443] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.035096][ T5443] bridge_slave_1: entered allmulticast mode [ 101.039948][ T5443] bridge_slave_1: entered promiscuous mode [ 101.085031][ T5440] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.088410][ T5440] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.099137][ T5440] bridge_slave_1: entered allmulticast mode [ 101.104865][ T5440] bridge_slave_1: entered promiscuous mode [ 101.145353][ T43] bridge_slave_1: left allmulticast mode [ 101.148418][ T43] bridge_slave_1: left promiscuous mode [ 101.161378][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.172911][ T43] bridge_slave_0: left allmulticast mode [ 101.175303][ T43] bridge_slave_0: left promiscuous mode [ 101.177898][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.701677][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.708156][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.714060][ T43] bond0 (unregistering): Released all slaves [ 101.757163][ T5442] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.761034][ T5434] Bluetooth: hci2: command tx timeout [ 101.763560][ T5434] Bluetooth: hci1: command tx timeout [ 101.766021][ T5434] Bluetooth: hci3: command tx timeout [ 101.772769][ T5442] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.775993][ T5442] bridge_slave_0: entered allmulticast mode [ 101.799757][ T5442] bridge_slave_0: entered promiscuous mode [ 101.810043][ T5442] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.824958][ T5442] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.828000][ T5442] bridge_slave_1: entered allmulticast mode [ 101.841756][ T5442] bridge_slave_1: entered promiscuous mode [ 101.845560][ T5438] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.848821][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.861718][ T5438] bridge_slave_0: entered allmulticast mode [ 101.870860][ T5438] bridge_slave_0: entered promiscuous mode [ 101.879924][ T5438] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.889330][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.897450][ T5438] bridge_slave_1: entered allmulticast mode [ 101.907439][ T5438] bridge_slave_1: entered promiscuous mode [ 101.939083][ T5428] team0: Port device team_slave_0 added [ 101.949742][ T5428] team0: Port device team_slave_1 added [ 101.978597][ T5443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.989926][ T43] hsr_slave_0: left promiscuous mode [ 101.993340][ T43] hsr_slave_1: left promiscuous mode [ 101.996097][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.999109][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.002645][ T5431] Bluetooth: hci4: command tx timeout [ 102.005178][ T5431] Bluetooth: hci5: command tx timeout [ 102.009657][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.013971][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.025513][ T43] veth1_macvtap: left promiscuous mode [ 102.028730][ T43] veth0_macvtap: left promiscuous mode [ 102.032620][ T43] veth1_vlan: left promiscuous mode [ 102.035074][ T43] veth0_vlan: left promiscuous mode [ 102.081605][ T5434] Bluetooth: hci0: command tx timeout [ 102.308770][ T43] team0 (unregistering): Port device team_slave_1 removed [ 102.331762][ T43] team0 (unregistering): Port device team_slave_0 removed [ 102.620976][ T5440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.644958][ T5443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.657944][ T5428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.661429][ T5428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.673974][ T5428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.696704][ T5440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.744876][ T5442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.749777][ T5428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.754237][ T5428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.766092][ T5428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.773920][ T5438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.818380][ T5442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.853684][ T5438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.859764][ T5443] team0: Port device team_slave_0 added [ 102.866649][ T5440] team0: Port device team_slave_0 added [ 102.891763][ T5440] team0: Port device team_slave_1 added [ 103.019679][ T5443] team0: Port device team_slave_1 added [ 103.046086][ T5440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.049081][ T5440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.081738][ T5440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.091985][ T5440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.095115][ T5440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.131359][ T5440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.144070][ T5442] team0: Port device team_slave_0 added [ 103.223025][ T5442] team0: Port device team_slave_1 added [ 103.226715][ T5438] team0: Port device team_slave_0 added [ 103.238954][ T5428] hsr_slave_0: entered promiscuous mode [ 103.257593][ T5428] hsr_slave_1: entered promiscuous mode [ 103.334713][ T5438] team0: Port device team_slave_1 added [ 103.351850][ T5443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.354792][ T5443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.366897][ T5443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.392077][ T5442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.395457][ T5442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.407140][ T5442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.465295][ T5443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.468374][ T5443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.482350][ T5443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.491745][ T5440] hsr_slave_0: entered promiscuous mode [ 103.495125][ T5440] hsr_slave_1: entered promiscuous mode [ 103.498124][ T5440] debugfs: 'hsr0' already exists in 'hsr' [ 103.501252][ T5440] Cannot create hsr debugfs directory [ 103.504396][ T5442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.508287][ T5442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.520760][ T5442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.618581][ T5438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.621840][ T5438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.649505][ T5438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.752359][ T5438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.755625][ T5438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.778143][ T5438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.842317][ T5434] Bluetooth: hci3: command tx timeout [ 103.844757][ T5434] Bluetooth: hci1: command tx timeout [ 103.847228][ T5434] Bluetooth: hci2: command tx timeout [ 103.923622][ T5443] hsr_slave_0: entered promiscuous mode [ 103.931120][ T5443] hsr_slave_1: entered promiscuous mode [ 103.940861][ T5443] debugfs: 'hsr0' already exists in 'hsr' [ 103.943652][ T5443] Cannot create hsr debugfs directory [ 104.023953][ T5438] hsr_slave_0: entered promiscuous mode [ 104.029371][ T5438] hsr_slave_1: entered promiscuous mode [ 104.033819][ T5438] debugfs: 'hsr0' already exists in 'hsr' [ 104.036423][ T5438] Cannot create hsr debugfs directory [ 104.054648][ T5442] hsr_slave_0: entered promiscuous mode [ 104.066023][ T5442] hsr_slave_1: entered promiscuous mode [ 104.081057][ T5431] Bluetooth: hci5: command tx timeout [ 104.083896][ T5431] Bluetooth: hci4: command tx timeout [ 104.087193][ T5442] debugfs: 'hsr0' already exists in 'hsr' [ 104.090241][ T5442] Cannot create hsr debugfs directory [ 104.125242][ T5427] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.147271][ T5427] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.162657][ T5434] Bluetooth: hci0: command tx timeout [ 104.274715][ T5427] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.396759][ T5427] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.645227][ T5428] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.664748][ T5428] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.683868][ T5428] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.707232][ T5428] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.754547][ T5440] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.783908][ T5440] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.811022][ T5440] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.832022][ T5440] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.878236][ T5427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.893820][ T5438] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.931162][ T5427] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.948003][ T5438] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.961808][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.964941][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.005175][ T5438] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.014796][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.017859][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.042218][ T5438] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.056594][ T5428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.103817][ T5442] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.134833][ T5428] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.138052][ T5442] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.178746][ T5442] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.206667][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.209746][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.218668][ T5442] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.243247][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.246092][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.293966][ T5440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.316359][ T5443] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.341920][ T5443] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.364025][ T5443] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.406189][ T5443] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.427198][ T5428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.451887][ T5440] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.514132][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.517114][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.535363][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.538588][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.731766][ T5438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.765116][ T5442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.831647][ T5442] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.846421][ T5438] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.864551][ T5427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.919838][ T5443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.924675][ T5434] Bluetooth: hci2: command tx timeout [ 105.927077][ T5434] Bluetooth: hci1: command tx timeout [ 105.929365][ T5434] Bluetooth: hci3: command tx timeout [ 105.968014][ T5443] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.992988][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.995966][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.000172][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.003377][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.024586][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.028337][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.086300][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.089485][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.114457][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.117521][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.162306][ T5434] Bluetooth: hci4: command tx timeout [ 106.164713][ T5434] Bluetooth: hci5: command tx timeout [ 106.168928][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.172329][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.225662][ T5427] veth0_vlan: entered promiscuous mode [ 106.242633][ T46] Bluetooth: hci0: command tx timeout [ 106.279330][ T5443] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.286280][ T5443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.328044][ T5438] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.336446][ T5438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.344681][ T5427] veth1_vlan: entered promiscuous mode [ 106.366736][ T5428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.408684][ T5440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.595285][ T5427] veth0_macvtap: entered promiscuous mode [ 106.673445][ T5427] veth1_macvtap: entered promiscuous mode [ 106.677758][ T5428] veth0_vlan: entered promiscuous mode [ 106.806425][ T5428] veth1_vlan: entered promiscuous mode [ 106.832383][ T5427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.874592][ T5440] veth0_vlan: entered promiscuous mode [ 106.903482][ T5427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.919473][ T3028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.932721][ T3028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.936405][ T3028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.940182][ T3028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.013296][ T5443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.042078][ T5428] veth0_macvtap: entered promiscuous mode [ 107.046784][ T5440] veth1_vlan: entered promiscuous mode [ 107.085644][ T5428] veth1_macvtap: entered promiscuous mode [ 107.117619][ T5442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.157015][ T5438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.166982][ T5428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.254895][ T5440] veth0_macvtap: entered promiscuous mode [ 107.295363][ T5428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.316462][ T5440] veth1_macvtap: entered promiscuous mode [ 107.342954][ T1135] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.346669][ T1135] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.398680][ T3028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.430723][ T3028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.473023][ T5438] veth0_vlan: entered promiscuous mode [ 107.479621][ T5438] veth1_vlan: entered promiscuous mode [ 107.513229][ T1135] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.534914][ T5440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.550849][ T5440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.582468][ T1135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.667155][ T5438] veth0_macvtap: entered promiscuous mode [ 107.700967][ T3028] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.727110][ T5438] veth1_macvtap: entered promiscuous mode [ 107.748338][ T3028] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.768508][ T3028] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.774916][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.791796][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.819540][ T3028] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.920036][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2025/11/23 15:00:50 executed programs: 12 [ 107.946843][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.006454][ T5438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.032738][ T5622] bond0: entered promiscuous mode [ 108.035144][ T5622] bond_slave_0: entered promiscuous mode [ 108.040057][ T5622] bond_slave_1: entered promiscuous mode [ 108.045162][ T5622] batadv0: entered promiscuous mode [ 108.049759][ T5622] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 108.061377][ T5622] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 108.069328][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.083361][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.098236][ T5622] syz_tun: entered promiscuous mode [ 108.115529][ T5622] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 108.125112][ T5622] FAULT_INJECTION: forcing a failure. [ 108.125112][ T5622] name failslab, interval 1, probability 0, space 0, times 1 [ 108.130818][ T5622] CPU: 0 UID: 0 PID: 5622 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 108.130837][ T5622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.130844][ T5622] Call Trace: [ 108.130851][ T5622] [ 108.130858][ T5622] dump_stack_lvl+0x189/0x250 [ 108.131866][ T5622] ? __pfx____ratelimit+0x10/0x10 [ 108.132767][ T5622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.132784][ T5622] ? __pfx__printk+0x10/0x10 [ 108.132803][ T5622] ? stack_depot_save_flags+0x41b/0x860 [ 108.133760][ T5622] should_fail_ex+0x414/0x560 [ 108.133779][ T5622] should_failslab+0xa8/0x100 [ 108.133798][ T5622] __kmalloc_cache_noprof+0x6f/0x6f0 [ 108.133814][ T5622] ? hsr_forward_skb+0x9e/0x2860 [ 108.133828][ T5622] ? hsr_add_node+0x66/0xb70 [ 108.133843][ T5622] hsr_add_node+0x66/0xb70 [ 108.133861][ T5622] hsr_forward_skb+0x3aa/0x2860 [ 108.133883][ T5622] ? hsr_forward_skb+0x9e/0x2860 [ 108.133899][ T5622] ? __pfx_hsr_forward_skb+0x10/0x10 [ 108.133916][ T5622] ? hsr_addr_is_self+0x26/0x410 [ 108.133926][ T5622] ? hsr_addr_is_self+0x26/0x410 [ 108.133939][ T5622] ? hsr_addr_is_self+0x2ef/0x410 [ 108.133949][ T5622] ? hsr_addr_is_self+0x26/0x410 [ 108.133962][ T5622] hsr_handle_frame+0x6ce/0xa70 [ 108.133979][ T5622] ? __pfx_hsr_handle_frame+0x10/0x10 [ 108.133993][ T5622] __netif_receive_skb_core+0x10b9/0x4380 [ 108.134012][ T5622] ? __pfx___skb_flow_dissect+0x10/0x10 [ 108.134032][ T5622] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 108.134048][ T5622] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.134066][ T5622] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 108.134084][ T5622] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 108.134102][ T5622] ? stack_depot_save_flags+0x41b/0x860 [ 108.134121][ T5622] ? __lock_acquire+0xab9/0xd20 [ 108.134140][ T5622] ? netif_receive_skb+0x115/0x790 [ 108.134156][ T5622] ? netif_receive_skb+0x115/0x790 [ 108.134173][ T5622] __netif_receive_skb+0x72/0x380 [ 108.134193][ T5622] ? netif_receive_skb+0x115/0x790 [ 108.134206][ T5622] netif_receive_skb+0x1cb/0x790 [ 108.134218][ T5622] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 108.134239][ T5622] ? __pfx_netif_receive_skb+0x10/0x10 [ 108.134257][ T5622] ? tun_rx_batched+0x160/0x730 [ 108.134272][ T5622] tun_rx_batched+0x1b9/0x730 [ 108.134285][ T5622] ? __lock_acquire+0xab9/0xd20 [ 108.134298][ T5622] ? __pfx_tun_rx_batched+0x10/0x10 [ 108.134312][ T5622] ? tun_get_user+0x272f/0x3e90 [ 108.134333][ T5622] tun_get_user+0x2b65/0x3e90 [ 108.134351][ T5622] ? tun_get_user+0x6f6/0x3e90 [ 108.134363][ T5622] ? tun_get_user+0x272f/0x3e90 [ 108.134376][ T5622] ? aa_file_perm+0x44d/0x1550 [ 108.134390][ T5622] ? __pfx_tun_get_user+0x10/0x10 [ 108.134407][ T5622] ? __lock_acquire+0xab9/0xd20 [ 108.134422][ T5622] ? ref_tracker_alloc+0x318/0x460 [ 108.134438][ T5622] ? __lock_acquire+0xab9/0xd20 [ 108.134451][ T5622] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 108.134472][ T5622] ? tun_get+0x1c/0x2f0 [ 108.134489][ T5622] ? tun_get+0x1c/0x2f0 [ 108.134501][ T5622] ? tun_get+0x1c/0x2f0 [ 108.134518][ T5622] tun_chr_write_iter+0x113/0x200 [ 108.134534][ T5622] vfs_write+0x5c9/0xb30 [ 108.134556][ T5622] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 108.134570][ T5622] ? __pfx_vfs_write+0x10/0x10 [ 108.134594][ T5622] ? do_sys_openat2+0x154/0x1c0 [ 108.134615][ T5622] ksys_write+0x145/0x250 [ 108.134632][ T5622] ? __pfx_ksys_write+0x10/0x10 [ 108.134651][ T5622] ? do_syscall_64+0xbe/0xfa0 [ 108.134671][ T5622] do_syscall_64+0xfa/0xfa0 [ 108.134687][ T5622] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.134703][ T5622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.134716][ T5622] ? clear_bhb_loop+0x60/0xb0 [ 108.134732][ T5622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.134744][ T5622] RIP: 0033:0x7f69b2d8e1ff [ 108.134758][ T5622] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 108.134769][ T5622] RSP: 002b:00007ffd20301ff0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 108.134785][ T5622] RAX: ffffffffffffffda RBX: 00007f69b2fe5fa0 RCX: 00007f69b2d8e1ff [ 108.134795][ T5622] RDX: 000000000000003e RSI: 0000200000000500 RDI: 00000000000000c8 [ 108.134803][ T5622] RBP: 00007ffd20302080 R08: 0000000000000000 R09: 0000000000000000 [ 108.134810][ T5622] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 108.134818][ T5622] R13: 00007f69b2fe5fa0 R14: 00007f69b2fe5fa0 R15: 0000000000000003 [ 108.134840][ T5622] [ 108.135276][ T5438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.412157][ T5443] veth0_vlan: entered promiscuous mode [ 108.432428][ T5623] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 108.437478][ T3028] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.454983][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.458275][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.470593][ T3028] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.534229][ T5442] veth0_vlan: entered promiscuous mode [ 108.538851][ T3028] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.549590][ T3028] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.555532][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.558980][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.623517][ T5443] veth1_vlan: entered promiscuous mode [ 108.641886][ T5624] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 108.666627][ T5442] veth1_vlan: entered promiscuous mode [ 108.798714][ T5625] bond0: entered promiscuous mode [ 108.810152][ T5625] bond_slave_0: entered promiscuous mode [ 108.813587][ T5625] bond_slave_1: entered promiscuous mode [ 108.817532][ T5625] batadv0: entered promiscuous mode [ 108.822746][ T5625] debugfs: 'hsr1' already exists in 'hsr' [ 108.825269][ T5625] Cannot create hsr debugfs directory [ 108.828155][ T5625] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 108.836189][ T5625] netlink: 'syz.1.18': attribute type 10 has an invalid length. [ 108.855806][ T5628] bond0: entered promiscuous mode [ 108.858125][ T5628] bond_slave_0: entered promiscuous mode [ 108.861314][ T5628] bond_slave_1: entered promiscuous mode [ 108.865226][ T5628] batadv0: entered promiscuous mode [ 108.868758][ T5628] debugfs: 'hsr1' already exists in 'hsr' [ 108.873288][ T5626] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 108.877304][ T5628] Cannot create hsr debugfs directory [ 108.885724][ T5628] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 108.895657][ T5625] syz_tun: entered promiscuous mode [ 108.899630][ T5628] netlink: 'syz.3.20': attribute type 10 has an invalid length. [ 108.913033][ T5625] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 108.921914][ T5625] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000f: 0000 [#1] SMP KASAN NOPTI [ 108.926457][ T5625] KASAN: null-ptr-deref in range [0x0000000000000078-0x000000000000007f] [ 108.929678][ T5625] CPU: 0 UID: 0 PID: 5625 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full) [ 108.933240][ T5625] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.937652][ T5625] RIP: 0010:skb_clone+0xd7/0x3a0 [ 108.939902][ T5625] Code: 03 42 80 3c 20 00 74 08 4c 89 f7 e8 23 29 05 f9 49 83 3e 00 0f 85 a0 01 00 00 e8 94 dd 9d f8 48 8d 6b 7e 49 89 ee 49 c1 ee 03 <43> 0f b6 04 26 84 c0 0f 85 d1 01 00 00 44 0f b6 7d 00 41 83 e7 0c [ 108.947986][ T5625] RSP: 0018:ffffc9000d00f200 EFLAGS: 00010207 [ 108.950701][ T5625] RAX: ffffffff892235a1 RBX: 0000000000000000 RCX: ffff88803372a480 [ 108.954906][ T5625] RDX: 0000000000000000 RSI: 0000000000000820 RDI: 0000000000000000 [ 108.959007][ T5625] RBP: 000000000000007e R08: ffffffff8f7d0f77 R09: 1ffffffff1efa1ee [ 108.962535][ T5625] R10: dffffc0000000000 R11: fffffbfff1efa1ef R12: dffffc0000000000 [ 108.965654][ T5625] R13: 0000000000000820 R14: 000000000000000f R15: ffff88805144cc00 [ 108.968989][ T5625] FS: 0000555557f6d500(0000) GS:ffff88808d72f000(0000) knlGS:0000000000000000 [ 108.972451][ T5625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.975149][ T5625] CR2: 0000555581d35808 CR3: 000000005040e000 CR4: 0000000000352ef0 [ 108.978436][ T5625] Call Trace: [ 108.979893][ T5625] [ 108.981193][ T5625] hsr_forward_skb+0x1013/0x2860 [ 108.983214][ T5625] ? hsr_forward_skb+0x9e/0x2860 [ 108.985210][ T5625] ? __pfx_hsr_forward_skb+0x10/0x10 [ 108.987277][ T5625] ? hsr_addr_is_self+0x26/0x410 [ 108.989194][ T5625] ? hsr_addr_is_self+0x26/0x410 [ 108.991237][ T5625] ? hsr_addr_is_self+0x2ef/0x410 [ 108.993354][ T5625] ? hsr_addr_is_self+0x26/0x410 [ 108.995561][ T5625] hsr_handle_frame+0x6ce/0xa70 [ 108.997588][ T5625] ? __pfx_hsr_handle_frame+0x10/0x10 [ 108.999723][ T5625] __netif_receive_skb_core+0x10b9/0x4380 [ 109.002209][ T5625] ? __pfx___skb_flow_dissect+0x10/0x10 [ 109.004611][ T5625] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 109.007266][ T5625] ? arch_stack_walk+0xfc/0x150 [ 109.009350][ T5625] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 109.012039][ T5625] ? stack_trace_save+0x9c/0xe0 [ 109.014237][ T5625] ? __pfx_stack_trace_save+0x10/0x10 [ 109.016534][ T5625] ? stack_depot_save_flags+0x40/0x860 [ 109.020682][ T5625] ? __lock_acquire+0xab9/0xd20 [ 109.022855][ T5625] ? netif_receive_skb+0x115/0x790 [ 109.025209][ T5625] ? netif_receive_skb+0x115/0x790 [ 109.027460][ T5625] __netif_receive_skb+0x72/0x380 [ 109.029745][ T5625] ? netif_receive_skb+0x115/0x790 [ 109.032066][ T5625] netif_receive_skb+0x1cb/0x790 [ 109.034313][ T5625] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 109.036887][ T5625] ? __pfx_netif_receive_skb+0x10/0x10 [ 109.039145][ T5625] ? tun_rx_batched+0x160/0x730 [ 109.041233][ T5625] tun_rx_batched+0x1b9/0x730 [ 109.043205][ T5625] ? __lock_acquire+0xab9/0xd20 [ 109.045358][ T5625] ? __pfx_tun_rx_batched+0x10/0x10 [ 109.047586][ T5625] ? tun_get_user+0x272f/0x3e90 [ 109.049701][ T5625] tun_get_user+0x2b65/0x3e90 [ 109.051774][ T5625] ? tun_get_user+0x6f6/0x3e90 [ 109.053871][ T5625] ? tun_get_user+0x272f/0x3e90 [ 109.056245][ T5625] ? aa_file_perm+0x44d/0x1550 [ 109.058330][ T5625] ? __pfx_tun_get_user+0x10/0x10 [ 109.060540][ T5625] ? __lock_acquire+0xab9/0xd20 [ 109.062660][ T5625] ? ref_tracker_alloc+0x318/0x460 [ 109.064885][ T5625] ? __lock_acquire+0xab9/0xd20 [ 109.067035][ T5625] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 109.069574][ T5625] ? tun_get+0x1c/0x2f0 [ 109.071504][ T5625] ? tun_get+0x1c/0x2f0 [ 109.073394][ T5625] ? tun_get+0x1c/0x2f0 [ 109.075224][ T5625] tun_chr_write_iter+0x113/0x200 [ 109.077429][ T5625] vfs_write+0x5c9/0xb30 [ 109.079421][ T5625] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 109.081871][ T5625] ? __pfx_vfs_write+0x10/0x10 [ 109.083972][ T5625] ? do_sys_openat2+0x154/0x1c0 [ 109.086218][ T5625] ksys_write+0x145/0x250 [ 109.088177][ T5625] ? __pfx_ksys_write+0x10/0x10 [ 109.090350][ T5625] ? do_syscall_64+0xbe/0xfa0 [ 109.092495][ T5625] do_syscall_64+0xfa/0xfa0 [ 109.094444][ T5625] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.096617][ T5625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.099147][ T5625] ? clear_bhb_loop+0x60/0xb0 [ 109.101151][ T5625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.103655][ T5625] RIP: 0033:0x7f0449f8e1ff [ 109.105667][ T5625] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 109.113687][ T5625] RSP: 002b:00007ffd7ad94c90 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 109.116806][ T5625] RAX: ffffffffffffffda RBX: 00007f044a1e5fa0 RCX: 00007f0449f8e1ff [ 109.120447][ T5625] RDX: 000000000000003e RSI: 0000200000000500 RDI: 00000000000000c8 [ 109.123980][ T5625] RBP: 00007ffd7ad94d20 R08: 0000000000000000 R09: 0000000000000000 [ 109.127263][ T5625] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 109.130478][ T5625] R13: 00007f044a1e5fa0 R14: 00007f044a1e5fa0 R15: 0000000000000003 [ 109.133925][ T5625] [ 109.135412][ T5625] Modules linked in: [ 109.137301][ T5625] ---[ end trace 0000000000000000 ]--- [ 109.139515][ T5625] RIP: 0010:skb_clone+0xd7/0x3a0 [ 109.141707][ T5625] Code: 03 42 80 3c 20 00 74 08 4c 89 f7 e8 23 29 05 f9 49 83 3e 00 0f 85 a0 01 00 00 e8 94 dd 9d f8 48 8d 6b 7e 49 89 ee 49 c1 ee 03 <43> 0f b6 04 26 84 c0 0f 85 d1 01 00 00 44 0f b6 7d 00 41 83 e7 0c [ 109.149919][ T5625] RSP: 0018:ffffc9000d00f200 EFLAGS: 00010207 [ 109.152611][ T5625] RAX: ffffffff892235a1 RBX: 0000000000000000 RCX: ffff88803372a480 [ 109.156070][ T5625] RDX: 0000000000000000 RSI: 0000000000000820 RDI: 0000000000000000 [ 109.159631][ T5625] RBP: 000000000000007e R08: ffffffff8f7d0f77 R09: 1ffffffff1efa1ee [ 109.163103][ T5625] R10: dffffc0000000000 R11: fffffbfff1efa1ef R12: dffffc0000000000 [ 109.166412][ T5625] R13: 0000000000000820 R14: 000000000000000f R15: ffff88805144cc00 [ 109.169658][ T5625] FS: 0000555557f6d500(0000) GS:ffff88808d72f000(0000) knlGS:0000000000000000 [ 109.173598][ T5625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.176442][ T5625] CR2: 0000555581d35808 CR3: 000000005040e000 CR4: 0000000000352ef0 [ 109.179934][ T5625] Kernel panic - not syncing: Fatal exception in interrupt [ 109.183038][ T5625] Kernel Offset: disabled [ 109.184786][ T5625] Rebooting in 86400 seconds..