Warning: Permanently added '10.128.1.182' (ED25519) to the list of known hosts. 2026/09/11 19:34:14 parsed 1 programs 2026/09/11 19:34:14 serving rpc on tcp://37155 [ 74.037233][ T5624] cgroup: Unknown subsys name 'net' [ 74.118520][ T5624] cgroup: Unknown subsys name 'cpuset' [ 74.121549][ T5624] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.483172][ T5624] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.190897][ T5637] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.194226][ T5637] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 78.194501][ T5637] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 78.194719][ T5637] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 78.195004][ T5637] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 78.753196][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.753847][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.754241][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.755095][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.766234][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.117568][ T4223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.117592][ T4223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.163376][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.163396][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.124753][ T5681] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.125531][ T5681] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.125646][ T5681] bridge_slave_0: entered allmulticast mode [ 80.126716][ T5681] bridge_slave_0: entered promiscuous mode [ 80.131340][ T5681] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.131433][ T5681] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.131536][ T5681] bridge_slave_1: entered allmulticast mode [ 80.133329][ T5681] bridge_slave_1: entered promiscuous mode [ 80.166314][ T5681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.169231][ T5681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.203564][ T5681] team0: Port device team_slave_0 added [ 80.212758][ T5681] team0: Port device team_slave_1 added [ 80.230560][ T5681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.230572][ T5681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.230585][ T5681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.232244][ T5681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.232256][ T5681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.232278][ T5681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.280911][ T5681] hsr_slave_0: entered promiscuous mode [ 80.281967][ T5681] hsr_slave_1: entered promiscuous mode [ 80.424515][ T5681] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.437160][ T5681] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.438170][ T5681] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.441480][ T5681] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.442457][ T5681] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.444659][ T5681] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.448091][ T5681] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.460161][ T5681] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.492897][ T5681] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.493014][ T5681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.493502][ T5681] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.493611][ T5681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.552528][ T5681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.570299][ T4223] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.570974][ T4223] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.579049][ T5681] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.604331][ T4223] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.604407][ T4223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.607658][ T4223] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.607750][ T4223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.672340][ T5681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.712544][ T5681] veth0_vlan: entered promiscuous mode [ 80.722474][ T5681] veth1_vlan: entered promiscuous mode [ 80.749653][ T5681] veth0_macvtap: entered promiscuous mode [ 80.754999][ T5681] veth1_macvtap: entered promiscuous mode [ 80.770629][ T5681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.778810][ T5681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.807488][ T1167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.807530][ T1167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.807562][ T1167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.807588][ T1167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.931473][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.024794][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.084294][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.541451][ T1934] cfg80211: failed to load regulatory.db 2026/09/11 19:34:25 executed programs: 0 [ 82.573334][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.645076][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.648086][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.649199][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.650239][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.650759][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.868103][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.868215][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.868453][ T5731] bridge_slave_0: entered allmulticast mode [ 82.869381][ T5731] bridge_slave_0: entered promiscuous mode [ 82.872018][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.872109][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.872221][ T5731] bridge_slave_1: entered allmulticast mode [ 82.873821][ T5731] bridge_slave_1: entered promiscuous mode [ 82.916984][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.920444][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.949308][ T5731] team0: Port device team_slave_0 added [ 82.951115][ T5731] team0: Port device team_slave_1 added [ 82.972619][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.972636][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.972658][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.973725][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.973736][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.973758][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.018399][ T5731] hsr_slave_0: entered promiscuous mode [ 83.019411][ T5731] hsr_slave_1: entered promiscuous mode [ 83.020104][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 83.020177][ T5731] Cannot create hsr debugfs directory [ 84.053338][ T12] bridge_slave_1: left allmulticast mode [ 84.053376][ T12] bridge_slave_1: left promiscuous mode [ 84.054713][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.067251][ T12] bridge_slave_0: left allmulticast mode [ 84.067274][ T12] bridge_slave_0: left promiscuous mode [ 84.067454][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.186286][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.189246][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.190352][ T12] bond0 (unregistering): Released all slaves [ 84.281687][ T12] hsr_slave_0: left promiscuous mode [ 84.282724][ T12] hsr_slave_1: left promiscuous mode [ 84.283639][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.283668][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.284618][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.284636][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.314401][ T12] veth1_macvtap: left promiscuous mode [ 84.314453][ T12] veth0_macvtap: left promiscuous mode [ 84.314559][ T12] veth1_vlan: left promiscuous mode [ 84.314639][ T12] veth0_vlan: left promiscuous mode [ 84.608249][ T12] team0 (unregistering): Port device team_slave_1 removed [ 84.638925][ T12] team0 (unregistering): Port device team_slave_0 removed [ 84.659297][ T4933] Bluetooth: hci0: command tx timeout [ 84.803675][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 85.382265][ T5731] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.387252][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.388091][ T5731] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.396663][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.399772][ T5731] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.408001][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.410580][ T5731] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.454555][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.767996][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.783688][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.794071][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.794180][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.821985][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.822067][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.922346][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.977937][ T5731] veth0_vlan: entered promiscuous mode [ 85.984589][ T5731] veth1_vlan: entered promiscuous mode [ 86.029728][ T5731] veth0_macvtap: entered promiscuous mode [ 86.033971][ T5731] veth1_macvtap: entered promiscuous mode [ 86.065268][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.073589][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.137548][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.138109][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.138403][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.138469][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.210319][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.210340][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.259709][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.259749][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.335129][ T5794] batman_adv: batadv0: Adding interface: syzkaller0 [ 86.339274][ T5794] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.339305][ T5794] batman_adv: batadv0: Interface activated: syzkaller0 [ 86.341435][ T5794] FAULT_INJECTION: forcing a failure. [ 86.341435][ T5794] name failslab, interval 1, probability 0, space 0, times 1 [ 86.341475][ T5794] CPU: 1 UID: 0 PID: 5794 Comm: syz.1.17 Not tainted syzkaller #0 PREEMPT(full) [ 86.341495][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.341513][ T5794] Call Trace: [ 86.341524][ T5794] [ 86.341531][ T5794] dump_stack_lvl+0xe8/0x150 [ 86.341569][ T5794] should_fail_ex+0x410/0x560 [ 86.341595][ T5794] should_failslab+0xa8/0x100 [ 86.341618][ T5794] __kmalloc_cache_noprof+0xa3/0x600 [ 86.341637][ T5794] ? batadv_orig_ifinfo_new+0x99/0x320 [ 86.341664][ T5794] ? batadv_orig_ifinfo_new+0x99/0x320 [ 86.341697][ T5794] batadv_orig_ifinfo_new+0x99/0x320 [ 86.341726][ T5794] batadv_iv_ogm_process_per_outif+0x26b/0x25c0 [ 86.341763][ T5794] ? do_raw_spin_lock+0x12b/0x2f0 [ 86.341792][ T5794] ? batadv_iv_ogm_orig_get+0x47f/0x5c0 [ 86.341823][ T5794] ? __pfx_batadv_iv_ogm_process_per_outif+0x10/0x10 [ 86.341849][ T5794] ? lockdep_hardirqs_on+0x7b/0x110 [ 86.341867][ T5794] ? batadv_iv_ogm_orig_get+0x47f/0x5c0 [ 86.341890][ T5794] ? __local_bh_enable_ip+0xd6/0x140 [ 86.341914][ T5794] ? batadv_iv_ogm_orig_get+0x47f/0x5c0 [ 86.341946][ T5794] batadv_iv_ogm_receive+0xc13/0x1740 [ 86.341987][ T5794] ? batadv_iv_ogm_receive+0x4b1/0x1740 [ 86.342026][ T5794] ? __pfx_batadv_iv_ogm_receive+0x10/0x10 [ 86.342056][ T5794] ? rcu_is_watching+0x16/0xb0 [ 86.342077][ T5794] ? __alloc_skb+0x27a/0x7a0 [ 86.342095][ T5794] ? trace_kmem_cache_alloc+0x29/0xe0 [ 86.342128][ T5794] batadv_batman_skb_recv+0x4b6/0x870 [ 86.342154][ T5794] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 86.342179][ T5794] ? netif_receive_skb+0x102/0xbf0 [ 86.342207][ T5794] ? netif_receive_skb+0x102/0xbf0 [ 86.342233][ T5794] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 86.342274][ T5794] netif_receive_skb+0x4af/0xbf0 [ 86.342307][ T5794] ? __pfx_netif_receive_skb+0x10/0x10 [ 86.342340][ T5794] ? tun_rx_batched+0x185/0x790 [ 86.342363][ T5794] tun_rx_batched+0x1de/0x790 [ 86.342388][ T5794] ? __pfx_tun_rx_batched+0x10/0x10 [ 86.342408][ T5794] ? lock_acquire+0x115/0x350 [ 86.342434][ T5794] ? tun_get_user+0x23ba/0x44d0 [ 86.342453][ T5794] ? __local_bh_enable_ip+0xd6/0x140 [ 86.342476][ T5794] ? tun_get_user+0x27b0/0x44d0 [ 86.342498][ T5794] tun_get_user+0x2be0/0x44d0 [ 86.342530][ T5794] ? tun_get_user+0x27b0/0x44d0 [ 86.342555][ T5794] ? aa_file_perm+0x4ed/0x15f0 [ 86.342579][ T5794] ? __pfx_tun_get_user+0x10/0x10 [ 86.342601][ T5794] ? __lock_acquire+0x747/0x2de0 [ 86.342625][ T5794] ? kstrtoull+0x137/0x1d0 [ 86.342657][ T5794] ? ref_tracker_alloc+0x341/0x4b0 [ 86.342683][ T5794] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 86.342707][ T5794] ? lock_acquire+0x115/0x350 [ 86.342727][ T5794] ? tun_get+0x1c/0x2f0 [ 86.342750][ T5794] ? tun_get+0x1c/0x2f0 [ 86.342768][ T5794] ? tun_get+0x1c/0x2f0 [ 86.342790][ T5794] tun_chr_write_iter+0x113/0x200 [ 86.342812][ T5794] vfs_write+0x612/0xba0 [ 86.342846][ T5794] ? __pfx_vfs_write+0x10/0x10 [ 86.342891][ T5794] ksys_write+0x150/0x270 [ 86.342921][ T5794] ? __pfx_ksys_write+0x10/0x10 [ 86.342955][ T5794] __do_fast_syscall_32+0x27a/0x6a0 [ 86.342976][ T5794] ? do_fast_syscall_32+0x33/0x70 [ 86.342996][ T5794] ? asm_int80_emulation+0x1a/0x20 [ 86.343014][ T5794] ? do_int80_emulation+0x299/0x500 [ 86.343033][ T5794] ? trace_irq_disable+0x3b/0x140 [ 86.343055][ T5794] do_fast_syscall_32+0x33/0x70 [ 86.343075][ T5794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.343097][ T5794] RIP: 0023:0xf7f480ec [ 86.343122][ T5794] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 86.343137][ T5794] RSP: 002b:00000000f752fa5c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 86.343160][ T5794] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000800 [ 86.343172][ T5794] RDX: 0000000000000026 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.343183][ T5794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.343194][ T5794] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 86.343205][ T5794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.343233][ T5794] [ 86.344260][ T5794] ------------[ cut here ]------------ [ 86.344269][ T5794] !orig_ifinfo [ 86.344280][ T5794] WARNING: net/batman-adv/bat_iv_ogm.c:1413 at batadv_iv_ogm_process_per_outif+0x1fe4/0x25c0, CPU#1: syz.1.17/5794 [ 86.756133][ T4933] Bluetooth: hci0: command tx timeout [ 86.824274][ T5794] Modules linked in: [ 86.828872][ T5794] CPU: 1 UID: 0 PID: 5794 Comm: syz.1.17 Not tainted syzkaller #0 PREEMPT(full) [ 86.838044][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.848176][ T5794] RIP: 0010:batadv_iv_ogm_process_per_outif+0x1fe4/0x25c0 [ 86.855379][ T5794] Code: ff ff e8 af ad 1c f6 49 bc 00 00 00 00 00 fc ff df e9 80 f4 ff ff e8 9b ad 1c f6 90 0f 0b 90 e9 47 e1 ff ff e8 8d ad 1c f6 90 <0f> 0b 90 48 8b bc 24 80 00 00 00 e8 6c df ff ff 48 c7 44 24 50 00 [ 86.875054][ T5794] RSP: 0018:ffffc900030e7280 EFLAGS: 00010293 [ 86.881183][ T5794] RAX: ffffffff8bab1d03 RBX: ffff888078df0a00 RCX: ffff88802efc3e80 [ 86.889224][ T5794] RDX: 0000000000000000 RSI: ffffffff8e475f59 RDI: ffffffff8c6d9a80 [ 86.897270][ T5794] RBP: ffffc900030e7410 R08: ffffffff907a2b7f R09: 1ffffffff20f456f [ 86.905294][ T5794] R10: dffffc0000000000 R11: fffffbfff20f4570 R12: dffffc0000000000 [ 86.913279][ T5794] R13: 0000000002020000 R14: ffff88802bce4000 R15: ffff888078df0a00 [ 86.921320][ T5794] FS: 0000000000000000(0000) GS:ffff888124dd2000(0063) knlGS:000000005807c480 [ 86.930313][ T5794] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 86.936996][ T5794] CR2: 00000000f7153200 CR3: 000000007a636000 CR4: 00000000003526f0 [ 86.944980][ T5794] Call Trace: [ 86.948315][ T5794] [ 86.951254][ T5794] ? do_raw_spin_lock+0x12b/0x2f0 [ 86.956342][ T5794] ? batadv_iv_ogm_orig_get+0x47f/0x5c0 [ 86.961921][ T5794] ? __pfx_batadv_iv_ogm_process_per_outif+0x10/0x10 [ 86.968660][ T5794] ? lockdep_hardirqs_on+0x7b/0x110 [ 86.973877][ T5794] ? batadv_iv_ogm_orig_get+0x47f/0x5c0 [ 86.979496][ T5794] ? __local_bh_enable_ip+0xd6/0x140 [ 86.984800][ T5794] ? batadv_iv_ogm_orig_get+0x47f/0x5c0 [ 86.990411][ T5794] batadv_iv_ogm_receive+0xc13/0x1740 [ 86.995854][ T5794] ? batadv_iv_ogm_receive+0x4b1/0x1740 [ 87.001429][ T5794] ? __pfx_batadv_iv_ogm_receive+0x10/0x10 [ 87.007297][ T5794] ? rcu_is_watching+0x16/0xb0 [ 87.012075][ T5794] ? __alloc_skb+0x27a/0x7a0 [ 87.016718][ T5794] ? trace_kmem_cache_alloc+0x29/0xe0 [ 87.022128][ T5794] batadv_batman_skb_recv+0x4b6/0x870 [ 87.027569][ T5794] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 87.033487][ T5794] ? netif_receive_skb+0x102/0xbf0 [ 87.038665][ T5794] ? netif_receive_skb+0x102/0xbf0 [ 87.043796][ T5794] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 87.049754][ T5794] netif_receive_skb+0x4af/0xbf0 [ 87.054719][ T5794] ? __pfx_netif_receive_skb+0x10/0x10 [ 87.060266][ T5794] ? tun_rx_batched+0x185/0x790 [ 87.065189][ T5794] tun_rx_batched+0x1de/0x790 [ 87.069898][ T5794] ? __pfx_tun_rx_batched+0x10/0x10 [ 87.075119][ T5794] ? lock_acquire+0x115/0x350 [ 87.079869][ T5794] ? tun_get_user+0x23ba/0x44d0 [ 87.084736][ T5794] ? __local_bh_enable_ip+0xd6/0x140 [ 87.090105][ T5794] ? tun_get_user+0x27b0/0x44d0 [ 87.094984][ T5794] tun_get_user+0x2be0/0x44d0 [ 87.099734][ T5794] ? tun_get_user+0x27b0/0x44d0 [ 87.104602][ T5794] ? aa_file_perm+0x4ed/0x15f0 [ 87.109456][ T5794] ? __pfx_tun_get_user+0x10/0x10 [ 87.114486][ T5794] ? __lock_acquire+0x747/0x2de0 [ 87.119467][ T5794] ? kstrtoull+0x137/0x1d0 [ 87.123889][ T5794] ? ref_tracker_alloc+0x341/0x4b0 [ 87.129029][ T5794] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 87.134489][ T5794] ? lock_acquire+0x115/0x350 [ 87.139199][ T5794] ? tun_get+0x1c/0x2f0 [ 87.143357][ T5794] ? tun_get+0x1c/0x2f0 [ 87.147570][ T5794] ? tun_get+0x1c/0x2f0 [ 87.151746][ T5794] tun_chr_write_iter+0x113/0x200 [ 87.156826][ T5794] vfs_write+0x612/0xba0 [ 87.161091][ T5794] ? __pfx_vfs_write+0x10/0x10 [ 87.165916][ T5794] ksys_write+0x150/0x270 [ 87.170251][ T5794] ? __pfx_ksys_write+0x10/0x10 [ 87.175107][ T5794] __do_fast_syscall_32+0x27a/0x6a0 [ 87.180348][ T5794] ? do_fast_syscall_32+0x33/0x70 [ 87.185408][ T5794] ? asm_int80_emulation+0x1a/0x20 [ 87.190502][ T5794] ? do_int80_emulation+0x299/0x500 [ 87.195746][ T5794] ? trace_irq_disable+0x3b/0x140 [ 87.200774][ T5794] do_fast_syscall_32+0x33/0x70 [ 87.205680][ T5794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.212019][ T5794] RIP: 0023:0xf7f480ec [ 87.216172][ T5794] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 87.235832][ T5794] RSP: 002b:00000000f752fa5c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 87.244250][ T5794] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000800 [ 87.252714][ T5794] RDX: 0000000000000026 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.260738][ T5794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.268731][ T5794] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 87.276757][ T5794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.284760][ T5794] [ 87.287847][ T5794] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.295132][ T5794] CPU: 1 UID: 0 PID: 5794 Comm: syz.1.17 Not tainted syzkaller #0 PREEMPT(full) [ 87.304241][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.314279][ T5794] Call Trace: [ 87.317544][ T5794] [ 87.320452][ T5794] vpanic+0x56d/0xa60 [ 87.324415][ T5794] ? __pfx__printk+0x10/0x10 [ 87.328992][ T5794] ? __pfx_vpanic+0x10/0x10 [ 87.333476][ T5794] ? is_bpf_text_address+0x292/0x2b0 [ 87.338742][ T5794] ? is_bpf_text_address+0x26/0x2b0 [ 87.343940][ T5794] panic+0xc5/0xd0 [ 87.347653][ T5794] ? __pfx_panic+0x10/0x10 [ 87.352105][ T5794] __warn+0x315/0x4c0 [ 87.356096][ T5794] ? batadv_iv_ogm_process_per_outif+0x1fe4/0x25c0 [ 87.362587][ T5794] ? batadv_iv_ogm_process_per_outif+0x1fe4/0x25c0 [ 87.369102][ T5794] __report_bug+0x276/0x570 [ 87.373593][ T5794] ? batadv_iv_ogm_process_per_outif+0x1fe4/0x25c0 [ 87.380085][ T5794] ? __pfx___report_bug+0x10/0x10 [ 87.385097][ T5794] ? dump_stack_lvl+0x103/0x150 [ 87.389937][ T5794] ? batadv_iv_ogm_process_per_outif+0x1fe4/0x25c0 [ 87.396431][ T5794] report_bug+0x16b/0x220 [ 87.400763][ T5794] ? batadv_iv_ogm_process_per_outif+0x1fe4/0x25c0 [ 87.407265][ T5794] ? batadv_iv_ogm_process_per_outif+0x1fe6/0x25c0 [ 87.413779][ T5794] handle_bug+0x9c/0x200 [ 87.418020][ T5794] exc_invalid_op+0x1a/0x50 [ 87.422513][ T5794] asm_exc_invalid_op+0x1a/0x20 [ 87.427348][ T5794] RIP: 0010:batadv_iv_ogm_process_per_outif+0x1fe4/0x25c0 [ 87.434453][ T5794] Code: ff ff e8 af ad 1c f6 49 bc 00 00 00 00 00 fc ff df e9 80 f4 ff ff e8 9b ad 1c f6 90 0f 0b 90 e9 47 e1 ff ff e8 8d ad 1c f6 90 <0f> 0b 90 48 8b bc 24 80 00 00 00 e8 6c df ff ff 48 c7 44 24 50 00 [ 87.454045][ T5794] RSP: 0018:ffffc900030e7280 EFLAGS: 00010293 [ 87.460109][ T5794] RAX: ffffffff8bab1d03 RBX: ffff888078df0a00 RCX: ffff88802efc3e80 [ 87.468076][ T5794] RDX: 0000000000000000 RSI: ffffffff8e475f59 RDI: ffffffff8c6d9a80 [ 87.476052][ T5794] RBP: ffffc900030e7410 R08: ffffffff907a2b7f R09: 1ffffffff20f456f [ 87.484015][ T5794] R10: dffffc0000000000 R11: fffffbfff20f4570 R12: dffffc0000000000 [ 87.491978][ T5794] R13: 0000000002020000 R14: ffff88802bce4000 R15: ffff888078df0a00 [ 87.499959][ T5794] ? batadv_iv_ogm_process_per_outif+0x1fe3/0x25c0 [ 87.506488][ T5794] ? do_raw_spin_lock+0x12b/0x2f0 [ 87.511521][ T5794] ? batadv_iv_ogm_orig_get+0x47f/0x5c0 [ 87.517071][ T5794] ? __pfx_batadv_iv_ogm_process_per_outif+0x10/0x10 [ 87.523735][ T5794] ? lockdep_hardirqs_on+0x7b/0x110 [ 87.528922][ T5794] ? batadv_iv_ogm_orig_get+0x47f/0x5c0 [ 87.534460][ T5794] ? __local_bh_enable_ip+0xd6/0x140 [ 87.539738][ T5794] ? batadv_iv_ogm_orig_get+0x47f/0x5c0 [ 87.545287][ T5794] batadv_iv_ogm_receive+0xc13/0x1740 [ 87.550678][ T5794] ? batadv_iv_ogm_receive+0x4b1/0x1740 [ 87.556240][ T5794] ? __pfx_batadv_iv_ogm_receive+0x10/0x10 [ 87.562042][ T5794] ? rcu_is_watching+0x16/0xb0 [ 87.566819][ T5794] ? __alloc_skb+0x27a/0x7a0 [ 87.571400][ T5794] ? trace_kmem_cache_alloc+0x29/0xe0 [ 87.576776][ T5794] batadv_batman_skb_recv+0x4b6/0x870 [ 87.582140][ T5794] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 87.588027][ T5794] ? netif_receive_skb+0x102/0xbf0 [ 87.593174][ T5794] ? netif_receive_skb+0x102/0xbf0 [ 87.598299][ T5794] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 87.604205][ T5794] netif_receive_skb+0x4af/0xbf0 [ 87.609151][ T5794] ? __pfx_netif_receive_skb+0x10/0x10 [ 87.614609][ T5794] ? tun_rx_batched+0x185/0x790 [ 87.619449][ T5794] tun_rx_batched+0x1de/0x790 [ 87.624117][ T5794] ? __pfx_tun_rx_batched+0x10/0x10 [ 87.629304][ T5794] ? lock_acquire+0x115/0x350 [ 87.633977][ T5794] ? tun_get_user+0x23ba/0x44d0 [ 87.638811][ T5794] ? __local_bh_enable_ip+0xd6/0x140 [ 87.644083][ T5794] ? tun_get_user+0x27b0/0x44d0 [ 87.648931][ T5794] tun_get_user+0x2be0/0x44d0 [ 87.653627][ T5794] ? tun_get_user+0x27b0/0x44d0 [ 87.658481][ T5794] ? aa_file_perm+0x4ed/0x15f0 [ 87.663235][ T5794] ? __pfx_tun_get_user+0x10/0x10 [ 87.668249][ T5794] ? __lock_acquire+0x747/0x2de0 [ 87.673176][ T5794] ? kstrtoull+0x137/0x1d0 [ 87.677589][ T5794] ? ref_tracker_alloc+0x341/0x4b0 [ 87.682695][ T5794] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 87.688145][ T5794] ? lock_acquire+0x115/0x350 [ 87.692842][ T5794] ? tun_get+0x1c/0x2f0 [ 87.697024][ T5794] ? tun_get+0x1c/0x2f0 [ 87.701203][ T5794] ? tun_get+0x1c/0x2f0 [ 87.705372][ T5794] tun_chr_write_iter+0x113/0x200 [ 87.710395][ T5794] vfs_write+0x612/0xba0 [ 87.714637][ T5794] ? __pfx_vfs_write+0x10/0x10 [ 87.719410][ T5794] ksys_write+0x150/0x270 [ 87.723736][ T5794] ? __pfx_ksys_write+0x10/0x10 [ 87.728591][ T5794] __do_fast_syscall_32+0x27a/0x6a0 [ 87.733779][ T5794] ? do_fast_syscall_32+0x33/0x70 [ 87.738790][ T5794] ? asm_int80_emulation+0x1a/0x20 [ 87.743890][ T5794] ? do_int80_emulation+0x299/0x500 [ 87.749083][ T5794] ? trace_irq_disable+0x3b/0x140 [ 87.754106][ T5794] do_fast_syscall_32+0x33/0x70 [ 87.758948][ T5794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.765267][ T5794] RIP: 0023:0xf7f480ec [ 87.769324][ T5794] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 87.788917][ T5794] RSP: 002b:00000000f752fa5c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 87.797331][ T5794] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000800 [ 87.805307][ T5794] RDX: 0000000000000026 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.813272][ T5794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.821229][ T5794] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 87.829187][ T5794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.837161][ T5794] [ 87.840411][ T5794] Kernel Offset: disabled [ 87.844724][ T5794] Rebooting in 86400 seconds..