Warning: Permanently added '[localhost]:37750' (ED25519) to the list of known hosts. 2025/08/08 17:45:36 ignoring optional flag "sandboxArg"="0" 2025/08/08 17:45:37 parsed 1 programs syzkaller login: [ 45.072773][ T5820] cgroup: Unknown subsys name 'net' [ 45.159537][ T5820] cgroup: Unknown subsys name 'cpuset' [ 45.163287][ T5820] cgroup: Unknown subsys name 'rlimit' [ 46.414433][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.450593][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.777699][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.783110][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.787703][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.797146][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.800459][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 49.112912][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 49.216867][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.221985][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.224426][ T5851] bridge_slave_0: entered allmulticast mode [ 49.227564][ T5851] bridge_slave_0: entered promiscuous mode [ 49.237692][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.240116][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.242461][ T5851] bridge_slave_1: entered allmulticast mode [ 49.245616][ T5851] bridge_slave_1: entered promiscuous mode [ 49.318005][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.333945][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.395738][ T5851] team0: Port device team_slave_0 added [ 49.458557][ T5851] team0: Port device team_slave_1 added [ 49.526556][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.528923][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.540445][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.550709][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.553091][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.561716][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.646392][ T5851] hsr_slave_0: entered promiscuous mode [ 49.650838][ T5851] hsr_slave_1: entered promiscuous mode [ 49.970161][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.979802][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.017606][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.049327][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.108763][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.113265][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.226153][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.228751][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.320467][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.335935][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.346653][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.349374][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.353508][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.356506][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.450301][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.471584][ T5851] veth0_vlan: entered promiscuous mode [ 50.476773][ T5851] veth1_vlan: entered promiscuous mode [ 50.490807][ T5851] veth0_macvtap: entered promiscuous mode [ 50.494615][ T5851] veth1_macvtap: entered promiscuous mode [ 50.504450][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.510933][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.519332][ T5666] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.522578][ T5666] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.526181][ T5666] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.530554][ T5666] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/08/08 17:45:44 executed programs: 0 [ 50.609369][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 50.612327][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 50.616687][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 50.623541][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 50.627999][ T5932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 50.646622][ T5932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 50.649407][ T5208] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 50.654742][ T5932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 50.655029][ T5208] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 50.660189][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 50.663974][ T5937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 50.667676][ T5208] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 50.670225][ T5208] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 50.674204][ T5937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 50.682777][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 50.881025][ T5927] chnl_net:caif_netlink_parms(): no params data found [ 50.977006][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 51.008592][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.011067][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.013422][ T5927] bridge_slave_0: entered allmulticast mode [ 51.016548][ T5927] bridge_slave_0: entered promiscuous mode [ 51.019694][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.022045][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.024389][ T5927] bridge_slave_1: entered allmulticast mode [ 51.028053][ T5927] bridge_slave_1: entered promiscuous mode [ 51.040827][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 51.098197][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.101204][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.103554][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.106476][ T5930] bridge_slave_0: entered allmulticast mode [ 51.109193][ T5930] bridge_slave_0: entered promiscuous mode [ 51.120381][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.143387][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.146423][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.148794][ T5930] bridge_slave_1: entered allmulticast mode [ 51.151550][ T5930] bridge_slave_1: entered promiscuous mode [ 51.156708][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.159059][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.161407][ T5934] bridge_slave_0: entered allmulticast mode [ 51.164120][ T5934] bridge_slave_0: entered promiscuous mode [ 51.196482][ T5907] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.202900][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.205435][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.207912][ T5934] bridge_slave_1: entered allmulticast mode [ 51.210589][ T5934] bridge_slave_1: entered promiscuous mode [ 51.221045][ T5927] team0: Port device team_slave_0 added [ 51.231490][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.237053][ T5927] team0: Port device team_slave_1 added [ 51.240119][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.249278][ T5907] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.257664][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.284529][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.303547][ T5930] team0: Port device team_slave_0 added [ 51.306077][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.308339][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.317207][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.321652][ T5930] team0: Port device team_slave_1 added [ 51.323986][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.327125][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.335527][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.351195][ T5907] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.384751][ T5934] team0: Port device team_slave_0 added [ 51.388491][ T5934] team0: Port device team_slave_1 added [ 51.398129][ T5907] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.405639][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.407953][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.419414][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.433225][ T5927] hsr_slave_0: entered promiscuous mode [ 51.435974][ T5927] hsr_slave_1: entered promiscuous mode [ 51.438173][ T5927] debugfs: 'hsr0' already exists in 'hsr' [ 51.440108][ T5927] Cannot create hsr debugfs directory [ 51.455299][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.457598][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.466194][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.479192][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.481499][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.490299][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.508597][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.510897][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.520611][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.568858][ T5930] hsr_slave_0: entered promiscuous mode [ 51.571198][ T5930] hsr_slave_1: entered promiscuous mode [ 51.573770][ T5930] debugfs: 'hsr0' already exists in 'hsr' [ 51.575832][ T5930] Cannot create hsr debugfs directory [ 51.587133][ T5934] hsr_slave_0: entered promiscuous mode [ 51.589458][ T5934] hsr_slave_1: entered promiscuous mode [ 51.591585][ T5934] debugfs: 'hsr0' already exists in 'hsr' [ 51.593492][ T5934] Cannot create hsr debugfs directory [ 51.744320][ T5927] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.761055][ T5927] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.766794][ T5927] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.776055][ T5927] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.813787][ T5934] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.819314][ T5934] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.823908][ T5934] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.828924][ T5934] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.853798][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.856344][ T5934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.859137][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.861534][ T5934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.887732][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.898686][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.901331][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.912561][ T5927] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.920750][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.923145][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.931349][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.933705][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.943353][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.959615][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.970850][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.973233][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.982691][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.985076][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.088341][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.115920][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.118990][ T5927] veth0_vlan: entered promiscuous mode [ 52.125759][ T5927] veth1_vlan: entered promiscuous mode [ 52.149722][ T5934] veth0_vlan: entered promiscuous mode [ 52.153124][ T5927] veth0_macvtap: entered promiscuous mode [ 52.158733][ T5927] veth1_macvtap: entered promiscuous mode [ 52.162334][ T5934] veth1_vlan: entered promiscuous mode [ 52.173190][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.181047][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.190988][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.193883][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.202265][ T5934] veth0_macvtap: entered promiscuous mode [ 52.205537][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.209010][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.216381][ T5934] veth1_macvtap: entered promiscuous mode [ 52.244499][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.255815][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.256734][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.258434][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.263809][ T5876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.272324][ T5876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.276829][ T5876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.279924][ T5876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.302847][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.306117][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.329267][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.331844][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.354553][ T5978] syzkaller0: entered promiscuous mode [ 52.359728][ T5978] syzkaller0: entered allmulticast mode [ 52.364119][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.368527][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.399489][ T5979] syzkaller0: entered promiscuous mode [ 52.401333][ T5979] syzkaller0: entered allmulticast mode [ 52.424549][ T5980] syzkaller0: entered promiscuous mode [ 52.428828][ T5980] syzkaller0: entered allmulticast mode [ 52.470387][ T5981] syzkaller0: entered promiscuous mode [ 52.472200][ T5981] syzkaller0: entered allmulticast mode [ 52.508049][ T5982] syzkaller0: entered promiscuous mode [ 52.509935][ T5982] syzkaller0: entered allmulticast mode [ 52.716688][ T5854] Bluetooth: hci2: command tx timeout [ 52.718753][ T5854] Bluetooth: hci1: command tx timeout [ 52.719127][ T5933] Bluetooth: hci0: command tx timeout [ 53.214188][ T5907] bridge_slave_1: left allmulticast mode [ 53.216415][ T5907] bridge_slave_1: left promiscuous mode [ 53.218910][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.224054][ T5907] bridge_slave_0: left allmulticast mode [ 53.227975][ T5907] bridge_slave_0: left promiscuous mode [ 53.229857][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.417515][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.421795][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.425721][ T5907] bond0 (unregistering): Released all slaves [ 53.513460][ T5907] hsr_slave_0: left promiscuous mode [ 53.519209][ T5907] hsr_slave_1: left promiscuous mode [ 53.521380][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.523811][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.528608][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.531059][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.541206][ T5907] veth1_macvtap: left promiscuous mode [ 53.543130][ T5907] veth0_macvtap: left promiscuous mode [ 53.545365][ T5907] veth1_vlan: left promiscuous mode [ 53.547194][ T5907] veth0_vlan: left promiscuous mode [ 53.737784][ T5907] team0 (unregistering): Port device team_slave_1 removed [ 53.753453][ T5907] team0 (unregistering): Port device team_slave_0 removed [ 54.084349][ T5930] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.090110][ T5930] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.094055][ T5930] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.099785][ T5930] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.164044][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.180086][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.186389][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.188756][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.196195][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.198502][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.287290][ T6012] syzkaller0: entered promiscuous mode [ 54.289169][ T6012] syzkaller0: entered allmulticast mode [ 54.309895][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.333442][ T5930] veth0_vlan: entered promiscuous mode [ 54.338497][ T5930] veth1_vlan: entered promiscuous mode [ 54.356265][ T5930] veth0_macvtap: entered promiscuous mode [ 54.362363][ T6013] syzkaller0: entered promiscuous mode [ 54.364197][ T6013] syzkaller0: entered allmulticast mode [ 54.374543][ T5930] veth1_macvtap: entered promiscuous mode [ 54.384813][ T6014] syzkaller0: entered promiscuous mode [ 54.386829][ T6014] syzkaller0: entered allmulticast mode [ 54.392491][ T12] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 54.396376][ T12] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 54.399818][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) [ 54.403660][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 54.406973][ T12] Workqueue: ipv6_addrconf addrconf_dad_work [ 54.408951][ T12] RIP: 0010:tun_net_xmit+0x3ee/0x19c0 [ 54.410711][ T12] Code: 54 24 18 48 89 d0 48 c1 e8 03 48 89 44 24 58 42 0f b6 04 28 84 c0 0f 85 f9 11 00 00 48 63 02 48 8d 1c c3 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 d3 0f ac fb 48 8b 1b 48 8b 7c 24 [ 54.416983][ T12] RSP: 0018:ffffc900000f6f00 EFLAGS: 00010202 [ 54.418971][ T12] RAX: 0000000000000002 RBX: 0000000000000010 RCX: dffffc0000000000 [ 54.421561][ T12] RDX: ffff88811bf90940 RSI: 0000000000000004 RDI: ffffc900000f6e80 [ 54.424162][ T12] RBP: ffffc900000f7050 R08: 0000000000000003 R09: 0000000000000004 [ 54.426764][ T12] R10: dffffc0000000000 R11: fffff5200001edd0 R12: 0000000000000000 [ 54.429374][ T12] R13: dffffc0000000000 R14: ffff8881054c8000 R15: 0000000000000000 [ 54.431971][ T12] FS: 0000000000000000(0000) GS:ffff8881a3c80000(0000) knlGS:0000000000000000 [ 54.434811][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.436999][ T12] CR2: 0000200000002280 CR3: 0000000110b70000 CR4: 00000000000006f0 [ 54.439614][ T12] Call Trace: [ 54.440746][ T12] [ 54.441741][ T12] ? tun_net_xmit+0xed/0x19c0 [ 54.443315][ T12] ? __pfx_tun_net_xmit+0x10/0x10 [ 54.445000][ T12] ? validate_xmit_skb+0xb4c/0x11b0 [ 54.446711][ T12] dev_hard_start_xmit+0x2d7/0x830 [ 54.448413][ T12] sch_direct_xmit+0x241/0x4b0 [ 54.450005][ T12] ? __pfx_sch_direct_xmit+0x10/0x10 [ 54.451743][ T12] __dev_queue_xmit+0x1857/0x3b50 [ 54.453385][ T12] ? register_lock_class+0x51/0x320 [ 54.455081][ T12] ? __dev_queue_xmit+0x27b/0x3b50 [ 54.456761][ T12] ? __pfx___dev_queue_xmit+0x10/0x10 [ 54.458540][ T12] ? read_seqbegin+0x122/0x250 [ 54.460132][ T12] ? neigh_resolve_output+0x438/0x750 [ 54.461902][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 54.463608][ T12] ? read_seqbegin+0x1ac/0x250 [ 54.465203][ T12] ? __pfx_read_seqbegin+0x10/0x10 [ 54.466909][ T12] ? __local_bh_enable_ip+0x12d/0x1c0 [ 54.468637][ T12] ? eth_header+0x11b/0x200 [ 54.470150][ T12] ? __asan_memcpy+0x40/0x70 [ 54.471674][ T12] ? eth_header+0x11b/0x200 [ 54.473184][ T12] ? __pfx_eth_header+0x10/0x10 [ 54.474784][ T12] ? neigh_resolve_output+0x624/0x750 [ 54.476571][ T12] ip6_finish_output2+0x11fe/0x16a0 [ 54.478302][ T12] ? ip6_finish_output2+0x701/0x16a0 [ 54.480057][ T12] ? ip6_mtu+0x7d/0x3f0 [ 54.481437][ T12] ? __pfx_ip6_finish_output2+0x10/0x10 [ 54.483264][ T12] ? ip6_mtu+0x7d/0x3f0 [ 54.484633][ T12] ? ip6_mtu+0x321/0x3f0 [ 54.485974][ T12] ? ip6_finish_output+0x2ef/0x4e0 [ 54.487590][ T12] ndisc_send_skb+0xb54/0x1440 [ 54.489125][ T12] ? ndisc_send_skb+0x20c/0x1440 [ 54.490760][ T12] ? __pfx_ndisc_send_skb+0x10/0x10 [ 54.492425][ T12] addrconf_dad_completed+0x7ae/0xd60 [ 54.494162][ T12] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 54.496012][ T12] addrconf_dad_work+0xc36/0x14b0 [ 54.497655][ T12] ? __lock_acquire+0xab9/0xd20 [ 54.499282][ T12] ? __pfx_addrconf_dad_work+0x10/0x10 [ 54.501076][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 54.502907][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 54.504544][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 54.506425][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 54.508234][ T12] process_scheduled_works+0xae1/0x17b0 [ 54.509975][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 54.511826][ T12] worker_thread+0x8a0/0xda0 [ 54.513302][ T12] kthread+0x711/0x8a0 [ 54.514641][ T12] ? __pfx_worker_thread+0x10/0x10 [ 54.516337][ T12] ? __pfx_kthread+0x10/0x10 [ 54.517882][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 54.519584][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 54.521296][ T12] ? __pfx_kthread+0x10/0x10 [ 54.522794][ T12] ret_from_fork+0x3fc/0x770 [ 54.524282][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 54.525983][ T12] ? __switch_to_asm+0x39/0x70 [ 54.527567][ T12] ? __switch_to_asm+0x33/0x70 [ 54.529155][ T12] ? __pfx_kthread+0x10/0x10 [ 54.530681][ T12] ret_from_fork_asm+0x1a/0x30 [ 54.532275][ T12] [ 54.533306][ T12] Modules linked in: [ 54.534729][ T12] ---[ end trace 0000000000000000 ]--- [ 54.536569][ T12] RIP: 0010:tun_net_xmit+0x3ee/0x19c0 [ 54.538352][ T12] Code: 54 24 18 48 89 d0 48 c1 e8 03 48 89 44 24 58 42 0f b6 04 28 84 c0 0f 85 f9 11 00 00 48 63 02 48 8d 1c c3 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 d3 0f ac fb 48 8b 1b 48 8b 7c 24 [ 54.544594][ T12] RSP: 0018:ffffc900000f6f00 EFLAGS: 00010202 [ 54.546665][ T12] RAX: 0000000000000002 RBX: 0000000000000010 RCX: dffffc0000000000 [ 54.549260][ T12] RDX: ffff88811bf90940 RSI: 0000000000000004 RDI: ffffc900000f6e80 [ 54.551831][ T12] RBP: ffffc900000f7050 R08: 0000000000000003 R09: 0000000000000004 [ 54.554413][ T12] R10: dffffc0000000000 R11: fffff5200001edd0 R12: 0000000000000000 [ 54.557079][ T12] R13: dffffc0000000000 R14: ffff8881054c8000 R15: 0000000000000000 [ 54.559660][ T12] FS: 0000000000000000(0000) GS:ffff8881a3c80000(0000) knlGS:0000000000000000 [ 54.562561][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.564712][ T12] CR2: 0000200000002280 CR3: 0000000110b70000 CR4: 00000000000006f0 [ 54.567409][ T12] Kernel panic - not syncing: Fatal exception in interrupt [ 54.570449][ T12] Kernel Offset: disabled [ 54.571904][ T12] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:45:48 Registers: info registers vcpu 0 CPU#0 RAX=9705a61d1a32bc00 RBX=ffffffff81969b18 RCX=9705a61d1a32bc00 RDX=0000000000000001 RSI=ffffffff8be309e0 RDI=ffffffff81969b18 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80 R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec R12=ffffffff8fa07bf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a18 RIP=ffffffff8b6fd4f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880b8680000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c007f5a000 CR3=00000000289e6000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525 XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000 XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f2d59c12e53 XMM06=0000000000000000 00007f2d59c12e4d XMM07=0000000000000000 00007f2d59c12e61 XMM08=0000000000000000 00007f2d59c12ee7 XMM09=0000000000000000 00007f2d59c12fc5 XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000 XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000 XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f6730 R8 =ffff888107758237 R9 =1ffff11020eeb046 R10=dffffc0000000000 R11=ffffffff854c1d90 R12=dffffc0000000000 R13=ffffffff99a95937 R14=ffffffff99d9a4e0 R15=0000000000000000 RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8881a3c80000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000200000002280 CR3=0000000110b70000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000 0000000000000000 XMM01=0000000000003072 656c6c616b7a7973 XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000 XMM04=ff00000000000000 00000000000000ff XMM05=0000000000000000 00007f3448212e53 XMM06=0000000000000000 00007f3448212e4d XMM07=0000000000000000 00007f3448212e61 XMM08=0000000000000000 00007f3448212ee7 XMM09=0000000000000000 00007f3448212fc5 XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000 XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000 XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000