last executing test programs: 1.319911375s ago: executing program 1 (id=2): unshare(0x60400) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x28) poll(&(0x7f0000000040)=[{r0, 0x1146}], 0x1, 0x400) 439.719399ms ago: executing program 3 (id=4): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x4070bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0xfffffff1, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x40, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x55}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x10}, {0x0, 0x9, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x42, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x1, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0xffffffff, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff, 0x10000000}, {}, {0x0, 0x0, 0xc, 0x7, 0x0, 0x6}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x29, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x28e, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x6}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0xfffffffe}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x88}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0xb4f}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x4, 0x0, 0xffffffff}, {}, {0xfffffffd, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9, 0xfffffffe}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {0x0, 0x0, 0xfffffffd, 0x80000, 0x3}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {0x0, 0x80}, {}, {0x0, 0x1}, {0x6, 0x0, 0x0, 0x0, 0x8}, {0x7, 0x0, 0xfffffffe, 0xfffffffe}, {}, {}, {0xffffffff, 0x400, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x101}, {0x5, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7, 0x7f53}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}, {0x3, 0x0, 0x0, 0x0, 0xffffffff}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x1}, {0x4, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x5}, {0x4}, {}, {}, {0x1}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x8, 0x1}, {}, {0x1}, {0x4}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x1}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {0x6}, {0x2, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10) 292.385176ms ago: executing program 1 (id=5): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001b40)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x6, @loopback, 0xe94}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@hopopts_2292={{0x0, 0x29, 0x36, {0x6c, 0x0, '\x00', [@pad1]}}}], 0x9}}], 0x1, 0x20004000) 264.466147ms ago: executing program 2 (id=3): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) sendmsg$xdp(r3, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 81.217806ms ago: executing program 0 (id=1): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x8084, &(0x7f00000001c0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646f74732c646f74732c6e6f636173652c646f74732c636865636b3d72656c617865642c646f74732c6e6f646f74732c646f74732c0032884758edd2e7a17e3c116a014262927783807ed4e210440ddebdf7d64a629cc9e873202c6d1e1d7dbabad279cb290d8a6c81b9ee715a035afdc5af3e15b932174f56cf4f009847fbc0e187d20fe47e50595251e835b306e05bc51afba211073e289eb499be4d726e3efbbeb1eb175e92b262c4ee4cee83e529784e53c874b73bb376876e2f3b2e667330e12c337d3a8b8cacccd9d86bc4c2f3b8971a79fb8f69af7b1d19592bf6a7186f7d4322045a99eaa207c407ab52aeadaaf1d089c278fccfb2138f"], 0x1, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6(0xa, 0x2, 0x3a) sendfile(r0, r0, 0x0, 0x800000009) 210.03µs ago: executing program 1 (id=6): syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040)) 0s ago: executing program 3 (id=7): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000009c0)=0x1, 0x4) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 62.670374][ T5434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.697447][ T5434] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.188' (ED25519) to the list of known hosts. syzkaller login: [ 83.627083][ T5756] cgroup: Unknown subsys name 'net' [ 83.799487][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.575847][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.379142][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.408370][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.417928][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.426469][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.439897][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.451409][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.460417][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.468478][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.476864][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.486240][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.487182][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.494170][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.508259][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.514145][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.515952][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.530833][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.531942][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.542988][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.553878][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.562898][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.572340][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.580460][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.589667][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.609280][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.161376][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 88.368351][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 88.399725][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 88.510892][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.518430][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.530589][ T5769] bridge_slave_0: entered allmulticast mode [ 88.538232][ T5769] bridge_slave_0: entered promiscuous mode [ 88.547553][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 88.585304][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.593352][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.603981][ T5769] bridge_slave_1: entered allmulticast mode [ 88.612872][ T5769] bridge_slave_1: entered promiscuous mode [ 88.733943][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.747811][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.755321][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.764436][ T5770] bridge_slave_0: entered allmulticast mode [ 88.772479][ T5770] bridge_slave_0: entered promiscuous mode [ 88.801673][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.812209][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.820937][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.828335][ T5770] bridge_slave_1: entered allmulticast mode [ 88.836036][ T5770] bridge_slave_1: entered promiscuous mode [ 88.849300][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.856546][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.864008][ T5767] bridge_slave_0: entered allmulticast mode [ 88.871670][ T5767] bridge_slave_0: entered promiscuous mode [ 88.925034][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.933736][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.941533][ T5767] bridge_slave_1: entered allmulticast mode [ 88.948651][ T5767] bridge_slave_1: entered promiscuous mode [ 88.961082][ T5769] team0: Port device team_slave_0 added [ 88.983276][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.016109][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.023557][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.031270][ T5768] bridge_slave_0: entered allmulticast mode [ 89.038498][ T5768] bridge_slave_0: entered promiscuous mode [ 89.048953][ T5769] team0: Port device team_slave_1 added [ 89.061498][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.085924][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.094077][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.101478][ T5768] bridge_slave_1: entered allmulticast mode [ 89.108771][ T5768] bridge_slave_1: entered promiscuous mode [ 89.151674][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.165468][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.207211][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.214398][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.240787][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.255655][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.262851][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.289312][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.340578][ T5770] team0: Port device team_slave_0 added [ 89.352303][ T5767] team0: Port device team_slave_0 added [ 89.373494][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.385935][ T5770] team0: Port device team_slave_1 added [ 89.406177][ T5767] team0: Port device team_slave_1 added [ 89.440496][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.485159][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.492795][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.519275][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.533012][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.540151][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.566705][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.579540][ T5777] Bluetooth: hci1: command tx timeout [ 89.595788][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.603548][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.629909][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.642890][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.650218][ T5773] Bluetooth: hci2: command tx timeout [ 89.656451][ T5777] Bluetooth: hci3: command tx timeout [ 89.661190][ T5773] Bluetooth: hci0: command tx timeout [ 89.669109][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.695558][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.732437][ T5769] hsr_slave_0: entered promiscuous mode [ 89.741019][ T5769] hsr_slave_1: entered promiscuous mode [ 89.753777][ T5768] team0: Port device team_slave_0 added [ 89.764069][ T5768] team0: Port device team_slave_1 added [ 89.856144][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.866658][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.893764][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.920668][ T5767] hsr_slave_0: entered promiscuous mode [ 89.927534][ T5767] hsr_slave_1: entered promiscuous mode [ 89.934225][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.943186][ T5767] Cannot create hsr debugfs directory [ 89.963569][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.971138][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.997620][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.042617][ T5770] hsr_slave_0: entered promiscuous mode [ 90.050299][ T5770] hsr_slave_1: entered promiscuous mode [ 90.056781][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.064673][ T5770] Cannot create hsr debugfs directory [ 90.136781][ T5768] hsr_slave_0: entered promiscuous mode [ 90.144061][ T5768] hsr_slave_1: entered promiscuous mode [ 90.152147][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.160175][ T5768] Cannot create hsr debugfs directory [ 90.624057][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.641081][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.656422][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.667603][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.763487][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.787082][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.810536][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.846625][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.936822][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.948791][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.988901][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.017770][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.064214][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.085102][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.113511][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.130060][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.143688][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.207107][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.246819][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.254476][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.297261][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.304752][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.363461][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.430616][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.467359][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.474713][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.484495][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.491983][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.537629][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.570199][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.651137][ T5773] Bluetooth: hci1: command tx timeout [ 91.671359][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.688271][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.729845][ T5777] Bluetooth: hci3: command tx timeout [ 91.730370][ T5773] Bluetooth: hci2: command tx timeout [ 91.735498][ T5777] Bluetooth: hci0: command tx timeout [ 91.763356][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.770646][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.786631][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.794029][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.828857][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.858060][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.865353][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.934205][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.941466][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.128686][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.302240][ T5769] veth0_vlan: entered promiscuous mode [ 92.333840][ T5769] veth1_vlan: entered promiscuous mode [ 92.505042][ T5769] veth0_macvtap: entered promiscuous mode [ 92.542272][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.571834][ T5769] veth1_macvtap: entered promiscuous mode [ 92.640981][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.655643][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.696072][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.725430][ T5770] veth0_vlan: entered promiscuous mode [ 92.758796][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.782950][ T5770] veth1_vlan: entered promiscuous mode [ 92.793659][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.803408][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.813129][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.822614][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.897658][ T5768] veth0_vlan: entered promiscuous mode [ 92.923121][ T5767] veth0_vlan: entered promiscuous mode [ 92.964270][ T5770] veth0_macvtap: entered promiscuous mode [ 92.973949][ T5767] veth1_vlan: entered promiscuous mode [ 93.004298][ T5768] veth1_vlan: entered promiscuous mode [ 93.030705][ T5770] veth1_macvtap: entered promiscuous mode [ 93.118415][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.135899][ T5767] veth0_macvtap: entered promiscuous mode [ 93.158735][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.183714][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.197572][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.211267][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.239819][ T5767] veth1_macvtap: entered promiscuous mode [ 93.262710][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.267267][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.283465][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.284158][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.305062][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.355561][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.366392][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.381662][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.391140][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.429771][ T5768] veth0_macvtap: entered promiscuous mode [ 93.445718][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.460223][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.475685][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.497747][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.512627][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.531697][ T5768] veth1_macvtap: entered promiscuous mode [ 93.567554][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.607144][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.631094][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.648828][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.671029][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.703933][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.713451][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.722948][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.732331][ T5777] Bluetooth: hci1: command tx timeout [ 93.741276][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.809909][ T5777] Bluetooth: hci0: command tx timeout [ 93.820232][ T5777] Bluetooth: hci2: command tx timeout [ 93.825930][ T5777] Bluetooth: hci3: command tx timeout [ 93.835757][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.846577][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.856757][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.867663][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.877618][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.888768][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.903463][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.927407][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.940734][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.950860][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.961918][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.974185][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.984830][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.996501][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.030505][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.039872][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.055124][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.065145][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.102306][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.127294][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.217072][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.231642][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.265999][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.287626][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.354743][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.363264][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.413005][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.434573][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.577463][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.596600][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.931339][ T5848] syz.0.1[5848]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.966060][ T5848] loop0: detected capacity change from 0 to 128 [ 94.978882][ T5845] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3'. [ 95.007993][ T5845] ------------[ cut here ]------------ [ 95.014696][ T5845] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 95.060237][ T5845] WARNING: CPU: 0 PID: 5845 at net/sched/cls_u32.c:855 u32_change+0x1c5a/0x24f0 [ 95.069764][ T5845] Modules linked in: [ 95.073773][ T5845] CPU: 0 PID: 5845 Comm: syz.2.3 Not tainted syzkaller #0 [ 95.081153][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 95.091507][ T5845] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 95.096896][ T5845] Code: f8 eb 59 e8 58 b0 d8 f8 c6 05 35 39 c7 05 01 b9 10 00 00 00 48 c7 c7 80 5c c7 8b 4c 89 f6 48 c7 c2 00 5d c7 8b e8 66 68 a2 f8 <0f> 0b e9 86 f0 ff ff e8 2a b0 d8 f8 eb 24 e8 23 b0 d8 f8 c6 05 d7 [ 95.118103][ T5845] RSP: 0018:ffffc9000498ed40 EFLAGS: 00010246 [ 95.124509][ T5845] RAX: c435571a1d743e00 RBX: ffff8880241bf400 RCX: 0000000000080000 [ 95.132872][ T5845] RDX: ffffc9000d3bb000 RSI: 0000000000005b4c RDI: 0000000000005b4d [ 95.141103][ T5845] RBP: ffffc9000498eef8 R08: ffffc9000498e947 R09: 1ffff92000931d28 [ 95.149425][ T5845] R10: dffffc0000000000 R11: fffff52000931d29 R12: ffff8880241bcc00 [ 95.157573][ T5845] R13: ffff8880241bcce8 R14: 0000000000000020 R15: ffff88802ab89dc0 [ 95.165720][ T5845] FS: 00007fca3d6206c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 95.176428][ T5845] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.183314][ T5845] CR2: 0000559f75481ac0 CR3: 000000003003b000 CR4: 00000000003506f0 [ 95.191515][ T5845] Call Trace: [ 95.194908][ T5845] [ 95.197908][ T5845] ? tc_new_tfilter+0x8f7/0x17c0 [ 95.203039][ T5845] ? u32_get+0x370/0x370 [ 95.208258][ T5845] ? u32_get+0x370/0x370 [ 95.212938][ T5845] tc_new_tfilter+0x11f9/0x17c0 [ 95.218009][ T5845] ? tcf_proto_signal_destroying+0x240/0x240 [ 95.225171][ T5845] ? rcu_read_unlock+0x8c/0xa0 [ 95.230432][ T5845] ? tcf_proto_signal_destroying+0x240/0x240 [ 95.236607][ T5845] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 95.241883][ T5845] ? tcf_proto_signal_destroying+0x240/0x240 [ 95.248051][ T5845] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 95.253949][ T5845] ? lockdep_hardirqs_on+0x98/0x150 [ 95.259478][ T5845] ? rtnetlink_bind+0x80/0x80 [ 95.264346][ T5845] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 95.270513][ T5845] ? lock_chain_count+0x20/0x20 [ 95.275477][ T5845] ? __local_bh_enable_ip+0x13a/0x1c0 [ 95.281082][ T5845] ? lockdep_hardirqs_on+0x98/0x150 [ 95.286385][ T5845] ? __local_bh_enable_ip+0x13a/0x1c0 [ 95.292380][ T5845] ? _local_bh_enable+0xa0/0xa0 [ 95.297660][ T5845] ? __dev_queue_xmit+0x265/0x3660 [ 95.303049][ T5845] ? __dev_queue_xmit+0x265/0x3660 [ 95.309297][ T5845] ? __dev_queue_xmit+0x1b2c/0x3660 [ 95.314941][ T5845] ? __dev_queue_xmit+0x265/0x3660 [ 95.320676][ T5845] ? ref_tracker_free+0x690/0x840 [ 95.325809][ T5845] netlink_rcv_skb+0x241/0x4d0 [ 95.331112][ T5845] ? rtnetlink_bind+0x80/0x80 [ 95.335881][ T5845] ? netlink_ack+0x1180/0x1180 [ 95.340794][ T5845] ? __lock_acquire+0x7d40/0x7d40 [ 95.345904][ T5845] ? netlink_deliver_tap+0x2e/0x1b0 [ 95.351335][ T5845] netlink_unicast+0x751/0x8d0 [ 95.356209][ T5845] netlink_sendmsg+0x8d0/0xbf0 [ 95.361309][ T5845] ? netlink_getsockopt+0x590/0x590 [ 95.366616][ T5845] ? aa_sock_msg_perm+0x94/0x150 [ 95.372252][ T5845] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 95.377644][ T5845] ? security_socket_sendmsg+0x80/0xa0 [ 95.383370][ T5845] ? netlink_getsockopt+0x590/0x590 [ 95.388673][ T5845] ____sys_sendmsg+0x5ba/0x960 [ 95.393594][ T5845] ? __asan_memset+0x22/0x40 [ 95.398281][ T5845] ? __sys_sendmsg_sock+0x30/0x30 [ 95.403545][ T5845] ? __import_iovec+0x5f2/0x850 [ 95.408714][ T5845] ? import_iovec+0x73/0xa0 [ 95.414616][ T5845] ___sys_sendmsg+0x2a6/0x360 [ 95.419665][ T5845] ? __sys_sendmsg+0x2a0/0x2a0 [ 95.424578][ T5845] __sys_sendmmsg+0x2ca/0x510 [ 95.429444][ T5845] ? __ia32_sys_sendmsg+0x90/0x90 [ 95.434574][ T5845] ? __ia32_sys_get_robust_list+0x110/0x110 [ 95.440761][ T5845] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 95.446837][ T5845] ? lock_chain_count+0x20/0x20 [ 95.451855][ T5845] __x64_sys_sendmmsg+0xa0/0xb0 [ 95.457054][ T5845] do_syscall_64+0x55/0xa0 [ 95.461649][ T5845] ? clear_bhb_loop+0x40/0x90 [ 95.466542][ T5845] ? clear_bhb_loop+0x40/0x90 [ 95.471657][ T5845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.477734][ T5845] RIP: 0033:0x7fca3c79c799 [ 95.482525][ T5845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.503517][ T5845] RSP: 002b:00007fca3d620028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 95.513833][ T5845] RAX: ffffffffffffffda RBX: 00007fca3ca15fa0 RCX: 00007fca3c79c799 [ 95.522362][ T5845] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 95.530455][ T5845] RBP: 00007fca3c832c99 R08: 0000000000000000 R09: 0000000000000000 [ 95.538498][ T5845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.546741][ T5845] R13: 00007fca3ca16038 R14: 00007fca3ca15fa0 R15: 00007ffe799f0368 [ 95.554918][ T5845] [ 95.558097][ T5845] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.565443][ T5845] CPU: 0 PID: 5845 Comm: syz.2.3 Not tainted syzkaller #0 [ 95.572635][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 95.582785][ T5845] Call Trace: [ 95.586136][ T5845] [ 95.589116][ T5845] dump_stack_lvl+0x18c/0x250 [ 95.593882][ T5845] ? show_regs_print_info+0x20/0x20 [ 95.599300][ T5845] ? load_image+0x400/0x400 [ 95.604153][ T5845] panic+0x2dc/0x730 [ 95.608147][ T5845] ? bpf_jit_dump+0xd0/0xd0 [ 95.612849][ T5845] __warn+0x2e0/0x470 [ 95.616988][ T5845] ? u32_change+0x1c5a/0x24f0 [ 95.621841][ T5845] ? u32_change+0x1c5a/0x24f0 [ 95.626655][ T5845] report_bug+0x2be/0x4f0 [ 95.631063][ T5845] ? u32_change+0x1c5a/0x24f0 [ 95.635821][ T5845] ? u32_change+0x1c5a/0x24f0 [ 95.640555][ T5845] ? u32_change+0x1c5c/0x24f0 [ 95.645352][ T5845] handle_bug+0xcf/0x120 [ 95.649721][ T5845] exc_invalid_op+0x1a/0x50 [ 95.654255][ T5845] asm_exc_invalid_op+0x1a/0x20 [ 95.659227][ T5845] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 95.664701][ T5845] Code: f8 eb 59 e8 58 b0 d8 f8 c6 05 35 39 c7 05 01 b9 10 00 00 00 48 c7 c7 80 5c c7 8b 4c 89 f6 48 c7 c2 00 5d c7 8b e8 66 68 a2 f8 <0f> 0b e9 86 f0 ff ff e8 2a b0 d8 f8 eb 24 e8 23 b0 d8 f8 c6 05 d7 [ 95.684732][ T5845] RSP: 0018:ffffc9000498ed40 EFLAGS: 00010246 [ 95.691157][ T5845] RAX: c435571a1d743e00 RBX: ffff8880241bf400 RCX: 0000000000080000 [ 95.699359][ T5845] RDX: ffffc9000d3bb000 RSI: 0000000000005b4c RDI: 0000000000005b4d [ 95.707371][ T5845] RBP: ffffc9000498eef8 R08: ffffc9000498e947 R09: 1ffff92000931d28 [ 95.715473][ T5845] R10: dffffc0000000000 R11: fffff52000931d29 R12: ffff8880241bcc00 [ 95.723494][ T5845] R13: ffff8880241bcce8 R14: 0000000000000020 R15: ffff88802ab89dc0 [ 95.731703][ T5845] ? tc_new_tfilter+0x8f7/0x17c0 [ 95.736706][ T5845] ? u32_get+0x370/0x370 [ 95.741241][ T5845] ? u32_get+0x370/0x370 [ 95.745524][ T5845] tc_new_tfilter+0x11f9/0x17c0 [ 95.750523][ T5845] ? tcf_proto_signal_destroying+0x240/0x240 [ 95.756766][ T5845] ? rcu_read_unlock+0x8c/0xa0 [ 95.762195][ T5845] ? tcf_proto_signal_destroying+0x240/0x240 [ 95.768414][ T5845] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 95.773560][ T5845] ? tcf_proto_signal_destroying+0x240/0x240 [ 95.779577][ T5845] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 95.784558][ T5845] ? lockdep_hardirqs_on+0x98/0x150 [ 95.789795][ T5845] ? rtnetlink_bind+0x80/0x80 [ 95.794605][ T5845] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 95.800735][ T5845] ? lock_chain_count+0x20/0x20 [ 95.805629][ T5845] ? __local_bh_enable_ip+0x13a/0x1c0 [ 95.811097][ T5845] ? lockdep_hardirqs_on+0x98/0x150 [ 95.816396][ T5845] ? __local_bh_enable_ip+0x13a/0x1c0 [ 95.821828][ T5845] ? _local_bh_enable+0xa0/0xa0 [ 95.826729][ T5845] ? __dev_queue_xmit+0x265/0x3660 [ 95.831890][ T5845] ? __dev_queue_xmit+0x265/0x3660 [ 95.837068][ T5845] ? __dev_queue_xmit+0x1b2c/0x3660 [ 95.842531][ T5845] ? __dev_queue_xmit+0x265/0x3660 [ 95.847707][ T5845] ? ref_tracker_free+0x690/0x840 [ 95.852824][ T5845] netlink_rcv_skb+0x241/0x4d0 [ 95.857669][ T5845] ? rtnetlink_bind+0x80/0x80 [ 95.862483][ T5845] ? netlink_ack+0x1180/0x1180 [ 95.867392][ T5845] ? __lock_acquire+0x7d40/0x7d40 [ 95.872458][ T5845] ? netlink_deliver_tap+0x2e/0x1b0 [ 95.877707][ T5845] netlink_unicast+0x751/0x8d0 [ 95.882727][ T5845] netlink_sendmsg+0x8d0/0xbf0 [ 95.887552][ T5845] ? netlink_getsockopt+0x590/0x590 [ 95.892795][ T5845] ? aa_sock_msg_perm+0x94/0x150 [ 95.897853][ T5845] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 95.903359][ T5845] ? security_socket_sendmsg+0x80/0xa0 [ 95.908969][ T5845] ? netlink_getsockopt+0x590/0x590 [ 95.914240][ T5845] ____sys_sendmsg+0x5ba/0x960 [ 95.919081][ T5845] ? __asan_memset+0x22/0x40 [ 95.923732][ T5845] ? __sys_sendmsg_sock+0x30/0x30 [ 95.928990][ T5845] ? __import_iovec+0x5f2/0x850 [ 95.933936][ T5845] ? import_iovec+0x73/0xa0 [ 95.938481][ T5845] ___sys_sendmsg+0x2a6/0x360 [ 95.943202][ T5845] ? __sys_sendmsg+0x2a0/0x2a0 [ 95.948042][ T5845] __sys_sendmmsg+0x2ca/0x510 [ 95.952841][ T5845] ? __ia32_sys_sendmsg+0x90/0x90 [ 95.957902][ T5845] ? __ia32_sys_get_robust_list+0x110/0x110 [ 95.963850][ T5845] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 95.970022][ T5845] ? lock_chain_count+0x20/0x20 [ 95.974942][ T5845] __x64_sys_sendmmsg+0xa0/0xb0 [ 95.979842][ T5845] do_syscall_64+0x55/0xa0 [ 95.984351][ T5845] ? clear_bhb_loop+0x40/0x90 [ 95.989179][ T5845] ? clear_bhb_loop+0x40/0x90 [ 95.994107][ T5845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.000054][ T5845] RIP: 0033:0x7fca3c79c799 [ 96.004508][ T5845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.024254][ T5845] RSP: 002b:00007fca3d620028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 96.033017][ T5845] RAX: ffffffffffffffda RBX: 00007fca3ca15fa0 RCX: 00007fca3c79c799 [ 96.041065][ T5845] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 96.049347][ T5845] RBP: 00007fca3c832c99 R08: 0000000000000000 R09: 0000000000000000 [ 96.057607][ T5845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.065645][ T5845] R13: 00007fca3ca16038 R14: 00007fca3ca15fa0 R15: 00007ffe799f0368 [ 96.074121][ T5845] [ 96.077809][ T5845] Kernel Offset: disabled [ 96.082306][ T5845] Rebooting in 86400 seconds..