Warning: Permanently added '10.128.0.84' (ED25519) to the list of known hosts. 2025/12/06 14:04:36 parsed 1 programs syzkaller login: [ 75.666870][ T4273] cgroup: Unknown subsys name 'net' [ 75.800017][ T4273] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.358752][ T4273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 80.024077][ T4302] chnl_net:caif_netlink_parms(): no params data found [ 80.089229][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.097064][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.105263][ T4302] device bridge_slave_0 entered promiscuous mode [ 80.114786][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.122378][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.130772][ T4302] device bridge_slave_1 entered promiscuous mode [ 80.161752][ T4302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.172744][ T4302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.202574][ T4302] team0: Port device team_slave_0 added [ 80.210770][ T4302] team0: Port device team_slave_1 added [ 80.231130][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.238492][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.264627][ T4302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.283469][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.290570][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.316862][ T4302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.357848][ T4302] device hsr_slave_0 entered promiscuous mode [ 80.365097][ T4302] device hsr_slave_1 entered promiscuous mode [ 80.507760][ T4302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.519112][ T4302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.528509][ T4302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.539196][ T4302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.582343][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.589591][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.597575][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.604768][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.655043][ T4302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.668381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.679265][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.690334][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.699261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 80.715845][ T4302] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.728213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.736961][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.744125][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.755115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.763839][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.770977][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.799082][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.816722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.825631][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.841145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.854369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.865208][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.050587][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.058468][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.075571][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.094814][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.104277][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.131157][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.140208][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.149318][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.157526][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.170744][ T4302] device veth0_vlan entered promiscuous mode [ 81.181864][ T4302] device veth1_vlan entered promiscuous mode [ 81.208369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.217335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.226189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.235430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.248585][ T4302] device veth0_macvtap entered promiscuous mode [ 81.260500][ T4302] device veth1_macvtap entered promiscuous mode [ 81.278028][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.287040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.295653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.303862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.312441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.327205][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.341009][ T4302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.350406][ T4302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.360541][ T4302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.370495][ T4302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.380833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.389883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.527996][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.559630][ T4329] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.567692][ T4329] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.575966][ T4329] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.585731][ T4329] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.593256][ T4329] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.600827][ T4329] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.185534][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.210284][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.217871][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.219906][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.227112][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.242520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/12/06 14:04:46 executed programs: 0 [ 83.620548][ T4329] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.630388][ T4329] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.638392][ T4329] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.647028][ T4329] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.654733][ T4329] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.662018][ T4329] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.795804][ T4369] chnl_net:caif_netlink_parms(): no params data found [ 83.843903][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.851149][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.859270][ T4369] device bridge_slave_0 entered promiscuous mode [ 83.868267][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.875721][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.883574][ T4369] device bridge_slave_1 entered promiscuous mode [ 83.908941][ T4369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.920918][ T4369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.949525][ T4369] team0: Port device team_slave_0 added [ 83.956999][ T4369] team0: Port device team_slave_1 added [ 83.977145][ T4369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.984457][ T4369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.010516][ T4369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.024048][ T4369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.031138][ T4369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.057407][ T4369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.097604][ T4369] device hsr_slave_0 entered promiscuous mode [ 84.104689][ T4369] device hsr_slave_1 entered promiscuous mode [ 84.111898][ T4369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.120074][ T4369] Cannot create hsr debugfs directory [ 84.135505][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.755250][ T4331] Bluetooth: hci0: command 0x0409 tx timeout [ 86.423525][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.476413][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.635805][ T1179] cfg80211: failed to load regulatory.db [ 87.312129][ T51] device hsr_slave_0 left promiscuous mode [ 87.319909][ T51] device hsr_slave_1 left promiscuous mode [ 87.327025][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.334858][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.344299][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.351831][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.361217][ T51] device bridge_slave_1 left promiscuous mode [ 87.368575][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.380629][ T51] device bridge_slave_0 left promiscuous mode [ 87.391621][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.421669][ T51] device veth1_macvtap left promiscuous mode [ 87.430306][ T51] device veth0_macvtap left promiscuous mode [ 87.437523][ T51] device veth1_vlan left promiscuous mode [ 87.443594][ T51] device veth0_vlan left promiscuous mode [ 87.835201][ T4331] Bluetooth: hci0: command 0x041b tx timeout [ 87.844072][ T51] team0 (unregistering): Port device team_slave_1 removed [ 87.872815][ T51] team0 (unregistering): Port device team_slave_0 removed [ 87.902004][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.934625][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.215215][ T51] bond0 (unregistering): Released all slaves [ 88.298170][ T4369] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.307971][ T4369] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.317179][ T4369] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.328272][ T4369] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.416722][ T4369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.431451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.439963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.451212][ T4369] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.461339][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.470509][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.479682][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.486839][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.496059][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.514176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.523955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.532536][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.539728][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.554931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.566872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.584011][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.593968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.602664][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.613435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.623304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.641235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.650735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.664773][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.673370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.684886][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.919717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.928505][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.945626][ T4369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.968790][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.978578][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.012045][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.022278][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.037313][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.045513][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.056418][ T4369] device veth0_vlan entered promiscuous mode [ 89.077012][ T4369] device veth1_vlan entered promiscuous mode [ 89.107198][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.116621][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.125556][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.135131][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.147194][ T4369] device veth0_macvtap entered promiscuous mode [ 89.157177][ T4369] device veth1_macvtap entered promiscuous mode [ 89.173180][ T4369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.181373][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.190596][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.199682][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.209318][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.220939][ T4369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.230451][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.239217][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.249514][ T4369] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.258977][ T4369] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.268457][ T4369] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.278577][ T4369] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.329949][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.346875][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.357393][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.369668][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.378460][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.387636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.446880][ T4431] device syzkaller0 entered promiscuous mode [ 89.455064][ T4431] ------------[ cut here ]------------ [ 89.460734][ T4431] WARNING: CPU: 0 PID: 4431 at include/linux/skbuff.h:2844 em_nbyte_match+0x2cc/0x3e0 [ 89.470364][ T4431] Modules linked in: [ 89.474313][ T4431] CPU: 0 PID: 4431 Comm: syz.0.17 Not tainted syzkaller #0 [ 89.481556][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.491681][ T4431] RIP: 0010:em_nbyte_match+0x2cc/0x3e0 [ 89.497178][ T4431] Code: c0 eb 07 e8 86 11 28 f9 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 70 11 28 f9 0f 0b e9 e5 fe ff ff e8 64 11 28 f9 <0f> 0b e9 00 fe ff ff 89 d1 80 e1 07 fe c1 38 c1 0f 8c 7a fd ff ff [ 89.516828][ T4431] RSP: 0018:ffffc90003517138 EFLAGS: 00010293 [ 89.522922][ T4431] RAX: ffffffff8858c4fc RBX: ffff888029bb8640 RCX: ffff88807a1b3b80 [ 89.530924][ T4431] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff [ 89.538927][ T4431] RBP: 000000000000ffff R08: ffff88807a1b3b80 R09: 0000000000000003 [ 89.546920][ T4431] R10: 0000000000000002 R11: 0000000000000000 R12: dffffc0000000000 [ 89.554922][ T4431] R13: 1ffff110053770de R14: ffff88802ebb8ac8 R15: 1ffff11005d77159 [ 89.562909][ T4431] FS: 00005555674f6500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 89.571870][ T4431] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.578494][ T4431] CR2: 00002000000012c0 CR3: 000000002f425000 CR4: 00000000003506f0 [ 89.586556][ T4431] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.594560][ T4431] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.602544][ T4431] Call Trace: [ 89.605860][ T4431] [ 89.608806][ T4431] __tcf_em_tree_match+0x1a4/0x760 [ 89.613965][ T4431] ? tcf_em_tree_dump+0x8f0/0x8f0 [ 89.619186][ T4431] ? rcu_read_lock_held+0x40/0x40 [ 89.624242][ T4431] ? __lock_acquire+0x12e5/0x7c50 [ 89.629288][ T4431] basic_classify+0x111/0x2c0 [ 89.634031][ T4431] tcf_classify+0x331/0xbf0 [ 89.638570][ T4431] multiq_enqueue+0xf6/0x480 [ 89.643166][ T4431] ? sch_tree_unlock+0x1b0/0x1b0 [ 89.648128][ T4431] ? do_raw_spin_lock+0x11d/0x280 [ 89.653170][ T4431] ? __rwlock_init+0x140/0x140 [ 89.657967][ T4431] dev_qdisc_enqueue+0x4c/0x2b0 [ 89.662877][ T4431] __dev_queue_xmit+0xf8e/0x3760 [ 89.667852][ T4431] ? __dev_queue_xmit+0x26f/0x3760 [ 89.672971][ T4431] ? netdev_core_pick_tx+0x340/0x340 [ 89.678283][ T4431] ? packet_parse_headers+0x7b5/0xac0 [ 89.683713][ T4431] ? packet_parse_headers+0x855/0xac0 [ 89.689101][ T4431] ? __virt_addr_valid+0x188/0x540 [ 89.694250][ T4431] ? __check_object_size+0x500/0xa40 [ 89.699544][ T4431] ? skb_setup_tx_timestamp+0x1e0/0x1e0 [ 89.705137][ T4431] ? skb_copy_datagram_from_iter+0x5a8/0x690 [ 89.711565][ T4431] ? skb_put+0x117/0x210 [ 89.715847][ T4431] packet_sendmsg+0x3be8/0x4ea0 [ 89.720735][ T4431] ? __might_sleep+0xd0/0xd0 [ 89.725386][ T4431] ? aa_sk_perm+0x7e5/0x920 [ 89.729902][ T4431] ? packet_getsockopt+0x950/0x950 [ 89.735058][ T4431] ? aa_sock_msg_perm+0x94/0x150 [ 89.740014][ T4431] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 89.745331][ T4431] ? security_socket_sendmsg+0x7c/0xa0 [ 89.750811][ T4431] ? packet_getsockopt+0x950/0x950 [ 89.755962][ T4431] ____sys_sendmsg+0x59b/0x970 [ 89.760754][ T4431] ? __sys_sendmsg_sock+0x30/0x30 [ 89.765820][ T4431] ? __import_iovec+0x315/0x500 [ 89.770697][ T4431] ? import_iovec+0x6f/0xa0 [ 89.775241][ T4431] ___sys_sendmsg+0x21c/0x290 [ 89.779935][ T4431] ? __sys_sendmsg+0x270/0x270 [ 89.784739][ T4431] ? futex_wake+0x3dc/0x4b0 [ 89.789261][ T4431] ? put_user_ifreq+0x81/0xb0 [ 89.793986][ T4431] ? __ia32_sys_get_robust_list+0x80/0x80 [ 89.799730][ T4431] ? __fdget+0x146/0x200 [ 89.804012][ T4431] __se_sys_sendmsg+0x19e/0x270 [ 89.808879][ T4431] ? __se_sys_futex+0x14a/0x440 [ 89.813773][ T4431] ? __x64_sys_sendmsg+0x80/0x80 [ 89.818740][ T4431] ? lockdep_hardirqs_on+0x94/0x140 [ 89.823981][ T4431] do_syscall_64+0x4c/0xa0 [ 89.828415][ T4431] ? clear_bhb_loop+0x60/0xb0 [ 89.833115][ T4431] ? clear_bhb_loop+0x60/0xb0 [ 89.838090][ T4431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.844043][ T4431] RIP: 0033:0x7f5a7f18f749 [ 89.848493][ T4431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.868140][ T4431] RSP: 002b:00007ffc8341b138 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.876593][ T4431] RAX: ffffffffffffffda RBX: 00007f5a7f3e5fa0 RCX: 00007f5a7f18f749 [ 89.884600][ T4431] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 89.892581][ T4431] RBP: 00007f5a7f213f91 R08: 0000000000000000 R09: 0000000000000000 [ 89.900578][ T4431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.908579][ T4431] R13: 00007f5a7f3e5fa0 R14: 00007f5a7f3e5fa0 R15: 0000000000000003 [ 89.916591][ T4431] [ 89.919636][ T4431] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 89.926912][ T4431] CPU: 0 PID: 4431 Comm: syz.0.17 Not tainted syzkaller #0 [ 89.934205][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.944274][ T4431] Call Trace: [ 89.947589][ T4431] [ 89.950533][ T4431] dump_stack_lvl+0x168/0x22e [ 89.955224][ T4431] ? memcpy+0x3c/0x60 [ 89.959315][ T4431] ? show_regs_print_info+0x12/0x12 [ 89.964524][ T4431] ? load_image+0x3b0/0x3b0 [ 89.969052][ T4431] panic+0x2c9/0x710 [ 89.972959][ T4431] ? bpf_jit_dump+0xd0/0xd0 [ 89.977490][ T4431] __warn+0x2f8/0x4f0 [ 89.981477][ T4431] ? em_nbyte_match+0x2cc/0x3e0 [ 89.986331][ T4431] ? em_nbyte_match+0x2cc/0x3e0 [ 89.991215][ T4431] report_bug+0x2ba/0x4f0 [ 89.995553][ T4431] ? em_nbyte_match+0x2cc/0x3e0 [ 90.000413][ T4431] handle_bug+0x3a/0x70 [ 90.004584][ T4431] exc_invalid_op+0x16/0x40 [ 90.009097][ T4431] asm_exc_invalid_op+0x16/0x20 [ 90.013954][ T4431] RIP: 0010:em_nbyte_match+0x2cc/0x3e0 [ 90.019421][ T4431] Code: c0 eb 07 e8 86 11 28 f9 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 70 11 28 f9 0f 0b e9 e5 fe ff ff e8 64 11 28 f9 <0f> 0b e9 00 fe ff ff 89 d1 80 e1 07 fe c1 38 c1 0f 8c 7a fd ff ff [ 90.039037][ T4431] RSP: 0018:ffffc90003517138 EFLAGS: 00010293 [ 90.045109][ T4431] RAX: ffffffff8858c4fc RBX: ffff888029bb8640 RCX: ffff88807a1b3b80 [ 90.053099][ T4431] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff [ 90.061082][ T4431] RBP: 000000000000ffff R08: ffff88807a1b3b80 R09: 0000000000000003 [ 90.069064][ T4431] R10: 0000000000000002 R11: 0000000000000000 R12: dffffc0000000000 [ 90.077060][ T4431] R13: 1ffff110053770de R14: ffff88802ebb8ac8 R15: 1ffff11005d77159 [ 90.085138][ T4431] ? em_nbyte_match+0x2cc/0x3e0 [ 90.090008][ T4431] ? em_nbyte_match+0x2cc/0x3e0 [ 90.094865][ T4431] __tcf_em_tree_match+0x1a4/0x760 [ 90.100009][ T4431] ? tcf_em_tree_dump+0x8f0/0x8f0 [ 90.105072][ T4431] ? rcu_read_lock_held+0x40/0x40 [ 90.110116][ T4431] ? __lock_acquire+0x12e5/0x7c50 [ 90.115153][ T4431] basic_classify+0x111/0x2c0 [ 90.119848][ T4431] tcf_classify+0x331/0xbf0 [ 90.124384][ T4431] multiq_enqueue+0xf6/0x480 [ 90.129070][ T4431] ? sch_tree_unlock+0x1b0/0x1b0 [ 90.134008][ T4431] ? do_raw_spin_lock+0x11d/0x280 [ 90.139046][ T4431] ? __rwlock_init+0x140/0x140 [ 90.143824][ T4431] dev_qdisc_enqueue+0x4c/0x2b0 [ 90.148692][ T4431] __dev_queue_xmit+0xf8e/0x3760 [ 90.153659][ T4431] ? __dev_queue_xmit+0x26f/0x3760 [ 90.158798][ T4431] ? netdev_core_pick_tx+0x340/0x340 [ 90.164115][ T4431] ? packet_parse_headers+0x7b5/0xac0 [ 90.169503][ T4431] ? packet_parse_headers+0x855/0xac0 [ 90.174882][ T4431] ? __virt_addr_valid+0x188/0x540 [ 90.180006][ T4431] ? __check_object_size+0x500/0xa40 [ 90.185293][ T4431] ? skb_setup_tx_timestamp+0x1e0/0x1e0 [ 90.190870][ T4431] ? skb_copy_datagram_from_iter+0x5a8/0x690 [ 90.196867][ T4431] ? skb_put+0x117/0x210 [ 90.201122][ T4431] packet_sendmsg+0x3be8/0x4ea0 [ 90.206016][ T4431] ? __might_sleep+0xd0/0xd0 [ 90.210646][ T4431] ? aa_sk_perm+0x7e5/0x920 [ 90.215169][ T4431] ? packet_getsockopt+0x950/0x950 [ 90.220399][ T4431] ? aa_sock_msg_perm+0x94/0x150 [ 90.225382][ T4431] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 90.230697][ T4431] ? security_socket_sendmsg+0x7c/0xa0 [ 90.236263][ T4431] ? packet_getsockopt+0x950/0x950 [ 90.241436][ T4431] ____sys_sendmsg+0x59b/0x970 [ 90.246215][ T4431] ? __sys_sendmsg_sock+0x30/0x30 [ 90.251247][ T4431] ? __import_iovec+0x315/0x500 [ 90.256111][ T4431] ? import_iovec+0x6f/0xa0 [ 90.260627][ T4431] ___sys_sendmsg+0x21c/0x290 [ 90.265353][ T4431] ? __sys_sendmsg+0x270/0x270 [ 90.270158][ T4431] ? futex_wake+0x3dc/0x4b0 [ 90.274680][ T4431] ? put_user_ifreq+0x81/0xb0 [ 90.279381][ T4431] ? __ia32_sys_get_robust_list+0x80/0x80 [ 90.285113][ T4431] ? __fdget+0x146/0x200 [ 90.289371][ T4431] __se_sys_sendmsg+0x19e/0x270 [ 90.294237][ T4431] ? __se_sys_futex+0x14a/0x440 [ 90.299103][ T4431] ? __x64_sys_sendmsg+0x80/0x80 [ 90.304059][ T4431] ? lockdep_hardirqs_on+0x94/0x140 [ 90.309275][ T4431] do_syscall_64+0x4c/0xa0 [ 90.313708][ T4431] ? clear_bhb_loop+0x60/0xb0 [ 90.318396][ T4431] ? clear_bhb_loop+0x60/0xb0 [ 90.323080][ T4431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.328977][ T4431] RIP: 0033:0x7f5a7f18f749 [ 90.333391][ T4431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.353003][ T4431] RSP: 002b:00007ffc8341b138 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.361444][ T4431] RAX: ffffffffffffffda RBX: 00007f5a7f3e5fa0 RCX: 00007f5a7f18f749 [ 90.369434][ T4431] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 90.377439][ T4431] RBP: 00007f5a7f213f91 R08: 0000000000000000 R09: 0000000000000000 [ 90.385447][ T4431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.393439][ T4431] R13: 00007f5a7f3e5fa0 R14: 00007f5a7f3e5fa0 R15: 0000000000000003 [ 90.401436][ T4431] [ 90.404760][ T4431] Kernel Offset: disabled [ 90.409152][ T4431] Rebooting in 86400 seconds..