Warning: Permanently added '[localhost]:43151' (ED25519) to the list of known hosts. 2026/08/12 00:32:43 parsed 1 programs 2026/08/12 00:32:43 serving rpc on tcp://36225 syzkaller login: [ 53.469598][ T5594] cgroup: Unknown subsys name 'net' [ 53.556680][ T5594] cgroup: Unknown subsys name 'cpuset' [ 53.560135][ T5594] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.024072][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.276558][ T5605] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.401464][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.408766][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.432051][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.435025][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.804992][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.808465][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.811436][ T5639] bridge_slave_0: entered allmulticast mode [ 58.817163][ T5639] bridge_slave_0: entered promiscuous mode [ 58.825102][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.835973][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.842293][ T5639] bridge_slave_1: entered allmulticast mode [ 58.851353][ T5639] bridge_slave_1: entered promiscuous mode [ 58.857489][ T5682] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.860600][ T5682] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.865081][ T5682] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.867978][ T5682] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.870688][ T5682] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.906854][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.911846][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.990192][ T5639] team0: Port device team_slave_0 added [ 59.005672][ T5639] team0: Port device team_slave_1 added [ 59.062827][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.065163][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.073154][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.081122][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.083361][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.090895][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.145208][ T5639] hsr_slave_0: entered promiscuous mode [ 59.148259][ T5639] hsr_slave_1: entered promiscuous mode [ 59.410136][ T5639] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.421158][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.427963][ T5639] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.436859][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.440691][ T5639] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.455322][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.464477][ T5639] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.470412][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.573609][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.597838][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.609427][ T985] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.612715][ T985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.644924][ T985] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.647936][ T985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.722855][ T5639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.961448][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.997749][ T5639] veth0_vlan: entered promiscuous mode [ 60.008215][ T5639] veth1_vlan: entered promiscuous mode [ 60.031759][ T5639] veth0_macvtap: entered promiscuous mode [ 60.036757][ T5639] veth1_macvtap: entered promiscuous mode [ 60.049638][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.057394][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.068191][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.078737][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.082644][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.090301][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/08/12 00:32:52 executed programs: 0 [ 60.235203][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.249758][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.255762][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.266166][ T5720] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.273894][ T4979] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.280226][ T5722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.287061][ T5722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.290852][ T4979] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.298347][ T5724] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.298368][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.304384][ T5724] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.309493][ T5724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.313121][ T4979] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.316944][ T4979] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.324689][ T4979] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.330477][ T4979] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.448311][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.536112][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.594247][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.095310][ T5716] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.098441][ T5716] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.101278][ T5716] bridge_slave_0: entered allmulticast mode [ 61.106560][ T5716] bridge_slave_0: entered promiscuous mode [ 61.154647][ T5716] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.157795][ T5716] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.161009][ T5716] bridge_slave_1: entered allmulticast mode [ 61.165719][ T5716] bridge_slave_1: entered promiscuous mode [ 61.226611][ T5716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.264027][ T5716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.280905][ T5719] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.284339][ T5719] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.287236][ T5719] bridge_slave_0: entered allmulticast mode [ 61.290956][ T5719] bridge_slave_0: entered promiscuous mode [ 61.320038][ T5719] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.323456][ T5719] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.326309][ T5719] bridge_slave_1: entered allmulticast mode [ 61.329800][ T5719] bridge_slave_1: entered promiscuous mode [ 61.345339][ T5717] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.348214][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.350931][ T5717] bridge_slave_0: entered allmulticast mode [ 61.355974][ T5717] bridge_slave_0: entered promiscuous mode [ 61.374877][ T5716] team0: Port device team_slave_0 added [ 61.377306][ T5717] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.381143][ T5717] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.384747][ T5717] bridge_slave_1: entered allmulticast mode [ 61.388455][ T5717] bridge_slave_1: entered promiscuous mode [ 61.413723][ T5716] team0: Port device team_slave_1 added [ 61.429600][ T5719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.446791][ T5717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.454838][ T5719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.487380][ T5717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.504680][ T5719] team0: Port device team_slave_0 added [ 61.507421][ T5716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.510107][ T5716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.522039][ T5716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.550051][ T5719] team0: Port device team_slave_1 added [ 61.570191][ T5716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.573039][ T5716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.583738][ T5716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.598236][ T5717] team0: Port device team_slave_0 added [ 61.614894][ T5717] team0: Port device team_slave_1 added [ 61.617880][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.620758][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.631340][ T5719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.648070][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.651050][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.661571][ T5719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.697684][ T5717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.700208][ T5717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.709515][ T5717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.714557][ T5717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.717006][ T5717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.725644][ T5717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.751684][ T5716] hsr_slave_0: entered promiscuous mode [ 61.758789][ T5716] hsr_slave_1: entered promiscuous mode [ 61.761623][ T5716] debugfs: 'hsr0' already exists in 'hsr' [ 61.764353][ T5716] Cannot create hsr debugfs directory [ 61.831102][ T5719] hsr_slave_0: entered promiscuous mode [ 61.834027][ T5719] hsr_slave_1: entered promiscuous mode [ 61.836381][ T5719] debugfs: 'hsr0' already exists in 'hsr' [ 61.838428][ T5719] Cannot create hsr debugfs directory [ 61.859149][ T5717] hsr_slave_0: entered promiscuous mode [ 61.863109][ T5717] hsr_slave_1: entered promiscuous mode [ 61.865953][ T5717] debugfs: 'hsr0' already exists in 'hsr' [ 61.868267][ T5717] Cannot create hsr debugfs directory [ 62.157423][ T5716] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.163590][ T5716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.168356][ T5716] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.172404][ T5716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.175243][ T5716] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.179744][ T5716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.182915][ T5716] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.187403][ T5716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.263075][ T5719] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.271308][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.289594][ T5719] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.295320][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.298897][ T5719] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.305872][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.311005][ T5719] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.314232][ T54] Bluetooth: hci1: command tx timeout [ 62.320345][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.333200][ T13] bridge_slave_1: left allmulticast mode [ 62.335445][ T13] bridge_slave_1: left promiscuous mode [ 62.337936][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.344071][ T13] bridge_slave_0: left allmulticast mode [ 62.345867][ T13] bridge_slave_0: left promiscuous mode [ 62.347681][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.392292][ T54] Bluetooth: hci2: command tx timeout [ 62.392577][ T4979] Bluetooth: hci3: command tx timeout [ 62.432773][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.437469][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.440977][ T13] bond0 (unregistering): Released all slaves [ 62.518543][ T13] hsr_slave_0: left promiscuous mode [ 62.523254][ T13] hsr_slave_1: left promiscuous mode [ 62.525572][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.528236][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.531438][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.533995][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.541504][ T13] veth1_macvtap: left promiscuous mode [ 62.543958][ T13] veth0_macvtap: left promiscuous mode [ 62.546036][ T13] veth1_vlan: left promiscuous mode [ 62.548139][ T13] veth0_vlan: left promiscuous mode [ 62.677370][ T13] team0 (unregistering): Port device team_slave_1 removed [ 62.687428][ T13] team0 (unregistering): Port device team_slave_0 removed [ 62.795637][ T5335] 8021q: adding VLAN 0 to HW filter on device eth1 [ 62.857293][ T5716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.938905][ T5716] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.954966][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.957929][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.997238][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.000359][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.020441][ T5719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.042742][ T5719] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.049773][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.052126][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.094083][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.096872][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.194765][ T5717] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.209496][ T5717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.216876][ T5717] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.226601][ T5717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.230207][ T5717] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.238050][ T5717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.282651][ T5717] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.298345][ T5717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.543579][ T5717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.580468][ T5717] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.595841][ T985] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.598776][ T985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.617348][ T985] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.620231][ T985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.668167][ T5716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.699695][ T5719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.744288][ T5716] veth0_vlan: entered promiscuous mode [ 63.756683][ T5716] veth1_vlan: entered promiscuous mode [ 63.764442][ T5719] veth0_vlan: entered promiscuous mode [ 63.781552][ T5719] veth1_vlan: entered promiscuous mode [ 63.819576][ T5716] veth0_macvtap: entered promiscuous mode [ 63.839390][ T5716] veth1_macvtap: entered promiscuous mode [ 63.844069][ T5719] veth0_macvtap: entered promiscuous mode [ 63.855719][ T5719] veth1_macvtap: entered promiscuous mode [ 63.868956][ T5716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.881437][ T5716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.893154][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.898894][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.905389][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.911297][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.918531][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.929127][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.933739][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.946774][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.954748][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.964429][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.050238][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.057560][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.076322][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.080415][ T5717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.081252][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.111722][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.115605][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.157811][ T5717] veth0_vlan: entered promiscuous mode [ 64.164937][ T985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.167609][ T985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.186597][ T5848] ------------[ cut here ]------------ [ 64.188982][ T5848] syzkaller0: Failed check-sdata-in-driver check, flags: 0x0 [ 64.191536][ T5848] WARNING: net/mac80211/driver-ops.h:1719 at ieee80211_netdev_setup_tc+0x2f0/0x550, CPU#1: syz.1.18/5848 [ 64.195180][ T5848] Modules linked in: [ 64.196478][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full) [ 64.199305][ T5848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 64.202433][ T5848] RIP: 0010:ieee80211_netdev_setup_tc+0x345/0x550 [ 64.204422][ T5848] Code: 48 8b 02 48 8d b0 20 01 00 00 48 85 c0 48 0f 44 f1 0f b6 04 2b 84 c0 4d 89 ee 0f 85 ad 00 00 00 49 8d 84 24 68 0a 00 00 8b 10 <67> 48 0f b9 3a e9 16 fe ff ff e8 cc ee 86 f6 90 0f 0b 90 e9 75 fe [ 64.210237][ T5848] RSP: 0018:ffffc900042ff078 EFLAGS: 00010246 [ 64.212261][ T5848] RAX: ffff8881709e9928 RBX: 1ffff1102e13d325 RCX: ffff8881709e9938 [ 64.215323][ T5848] RDX: 0000000000000000 RSI: ffff8881709e8120 RDI: ffffffff9068ed60 [ 64.219139][ T5848] RBP: dffffc0000000000 R08: ffffc900042ff157 R09: 0000000000000000 [ 64.221729][ T5848] R10: ffffc900042ff128 R11: ffffffff8b3fff60 R12: ffff8881709e8ec0 [ 64.224561][ T5848] R13: ffffc900042ff120 R14: ffffc900042ff120 R15: ffff8881709e8000 [ 64.227216][ T5848] FS: 00007f5cd6df16c0(0000) GS:ffff8882a8f66000(0000) knlGS:0000000000000000 [ 64.230530][ T5848] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.232869][ T5848] CR2: 00002000000012c0 CR3: 000000016f0fc000 CR4: 00000000000006f0 [ 64.235630][ T5848] Call Trace: [ 64.236859][ T5848] [ 64.237836][ T5848] tcf_block_offload_cmd+0x235/0x3b0 [ 64.239442][ T5848] ? __pfx_tcf_block_offload_cmd+0x10/0x10 [ 64.241198][ T5848] ? __pfx_down_write+0x10/0x10 [ 64.242814][ T5848] ? __kmalloc_cache_noprof+0x150/0x660 [ 64.244544][ T5848] ? tcf_block_get_ext+0x6e7/0x17d0 [ 64.246135][ T5848] ? tcf_block_get_ext+0x6e7/0x17d0 [ 64.247719][ T5848] tcf_block_get_ext+0xfe0/0x17d0 [ 64.249314][ T5848] tcf_block_get+0x67/0xa0 [ 64.250671][ T5848] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 64.252674][ T5848] multiq_init+0x72/0x2b0 [ 64.254261][ T5848] ? __pfx_multiq_init+0x10/0x10 [ 64.256022][ T5848] qdisc_create+0x7b5/0xf00 [ 64.257693][ T5848] ? lockdep_rtnl_is_held+0x26/0x40 [ 64.259532][ T5848] tc_modify_qdisc+0x17af/0x2390 [ 64.261341][ T5848] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 64.263235][ T5848] ? __dev_queue_xmit+0x29b/0x3820 [ 64.265157][ T5848] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 64.267097][ T5848] rtnetlink_rcv_msg+0x7b9/0xc00 [ 64.268971][ T5848] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 64.270909][ T5848] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 64.272964][ T5848] ? ref_tracker_free+0x689/0x830 [ 64.274707][ T5848] ? __pfx_ref_tracker_free+0x10/0x10 [ 64.276316][ T5848] ? __asan_memcpy+0x40/0x70 [ 64.277773][ T5848] ? __skb_clone+0x5c/0x6c0 [ 64.279147][ T5848] netlink_rcv_skb+0x226/0x4a0 [ 64.280626][ T5848] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 64.282430][ T5848] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 64.284035][ T5848] ? netlink_deliver_tap+0x2e/0x1b0 [ 64.285633][ T5848] ? netlink_deliver_tap+0x2e/0x1b0 [ 64.287193][ T5848] netlink_unicast+0x7bb/0x940 [ 64.288676][ T5848] netlink_sendmsg+0x813/0xb40 [ 64.290139][ T5848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.291750][ T5848] ? aa_sock_msg_perm+0xf1/0x1b0 [ 64.293370][ T5848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.294973][ T5848] sock_sendmsg_nosec+0x13a/0x180 [ 64.296643][ T5848] ____sys_sendmsg+0x54e/0x850 [ 64.298330][ T5848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 64.300285][ T5848] ? import_iovec+0x73/0xa0 [ 64.302046][ T5848] ___sys_sendmsg+0x2a5/0x360 [ 64.303764][ T5848] ? __lock_acquire+0x683/0x2cf0 [ 64.305400][ T5848] ? __pfx____sys_sendmsg+0x10/0x10 [ 64.307169][ T5848] ? futex_wake+0x51b/0x5f0 [ 64.308734][ T5848] ? __fget_files+0x2a/0x420 [ 64.310350][ T5848] ? __fget_files+0x3a2/0x420 [ 64.312087][ T5848] __x64_sys_sendmsg+0x1b1/0x290 [ 64.313800][ T5848] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 64.315668][ T5848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.318073][ T5848] do_syscall_64+0x174/0x580 [ 64.319748][ T5848] ? trace_irq_disable+0x3b/0x140 [ 64.321535][ T5848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.324377][ T5848] RIP: 0033:0x7f5cd5f9e0d9 [ 64.326134][ T5848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.332828][ T5848] RSP: 002b:00007f5cd6df1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.335744][ T5848] RAX: ffffffffffffffda RBX: 00007f5cd6225fa0 RCX: 00007f5cd5f9e0d9 [ 64.338475][ T5848] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 64.341141][ T5848] RBP: 00007f5cd6035024 R08: 0000000000000000 R09: 0000000000000000 [ 64.344041][ T5848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.346909][ T5848] R13: 00007f5cd6226038 R14: 00007f5cd6225fa0 R15: 00007ffc6aba2558 [ 64.349622][ T5848] [ 64.350738][ T5848] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 64.353022][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full) [ 64.356010][ T5848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 64.359573][ T5848] Call Trace: [ 64.360598][ T5848] [ 64.361644][ T5848] vpanic+0x56c/0xa60 [ 64.362881][ T5848] ? __pfx__printk+0x10/0x10 [ 64.364260][ T5848] ? __pfx_vpanic+0x10/0x10 [ 64.365643][ T5848] ? is_bpf_text_address+0x292/0x2b0 [ 64.367249][ T5848] ? is_bpf_text_address+0x26/0x2b0 [ 64.368901][ T5848] panic+0xc5/0xd0 [ 64.370093][ T5848] ? __pfx_panic+0x10/0x10 [ 64.371531][ T5848] __warn+0x315/0x4c0 [ 64.372779][ T5848] ? ieee80211_netdev_setup_tc+0x2f0/0x550 [ 64.374642][ T5848] ? ieee80211_netdev_setup_tc+0x2f0/0x550 [ 64.376436][ T5848] __report_bug+0x276/0x570 [ 64.377846][ T5848] ? arch_stack_walk+0xfb/0x150 [ 64.379417][ T5848] ? ieee80211_netdev_setup_tc+0x2f0/0x550 [ 64.381248][ T5848] ? __pfx___report_bug+0x10/0x10 [ 64.382840][ T5848] ? check_path+0x21/0x40 [ 64.384189][ T5848] report_bug_entry+0x19a/0x290 [ 64.385744][ T5848] ? ieee80211_netdev_setup_tc+0x345/0x550 [ 64.387542][ T5848] ? ieee80211_netdev_setup_tc+0x34a/0x550 [ 64.389371][ T5848] handle_bug+0xce/0x200 [ 64.390824][ T5848] exc_invalid_op+0x1a/0x50 [ 64.392277][ T5848] asm_exc_invalid_op+0x1a/0x20 [ 64.393803][ T5848] RIP: 0010:ieee80211_netdev_setup_tc+0x345/0x550 [ 64.395822][ T5848] Code: 48 8b 02 48 8d b0 20 01 00 00 48 85 c0 48 0f 44 f1 0f b6 04 2b 84 c0 4d 89 ee 0f 85 ad 00 00 00 49 8d 84 24 68 0a 00 00 8b 10 <67> 48 0f b9 3a e9 16 fe ff ff e8 cc ee 86 f6 90 0f 0b 90 e9 75 fe [ 64.401913][ T5848] RSP: 0018:ffffc900042ff078 EFLAGS: 00010246 [ 64.403883][ T5848] RAX: ffff8881709e9928 RBX: 1ffff1102e13d325 RCX: ffff8881709e9938 [ 64.406315][ T5848] RDX: 0000000000000000 RSI: ffff8881709e8120 RDI: ffffffff9068ed60 [ 64.408752][ T5848] RBP: dffffc0000000000 R08: ffffc900042ff157 R09: 0000000000000000 [ 64.411265][ T5848] R10: ffffc900042ff128 R11: ffffffff8b3fff60 R12: ffff8881709e8ec0 [ 64.413761][ T5848] R13: ffffc900042ff120 R14: ffffc900042ff120 R15: ffff8881709e8000 [ 64.416184][ T5848] ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10 [ 64.418068][ T5848] ? ieee80211_netdev_setup_tc+0x2d9/0x550 [ 64.419886][ T5848] tcf_block_offload_cmd+0x235/0x3b0 [ 64.421548][ T5848] ? __pfx_tcf_block_offload_cmd+0x10/0x10 [ 64.423579][ T5848] ? __pfx_down_write+0x10/0x10 [ 64.425387][ T5848] ? __kmalloc_cache_noprof+0x150/0x660 [ 64.427551][ T5848] ? tcf_block_get_ext+0x6e7/0x17d0 [ 64.429574][ T5848] ? tcf_block_get_ext+0x6e7/0x17d0 [ 64.431601][ T5848] tcf_block_get_ext+0xfe0/0x17d0 [ 64.433561][ T5848] tcf_block_get+0x67/0xa0 [ 64.435287][ T5848] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 64.437693][ T5848] multiq_init+0x72/0x2b0 [ 64.439385][ T5848] ? __pfx_multiq_init+0x10/0x10 [ 64.441300][ T5848] qdisc_create+0x7b5/0xf00 [ 64.443089][ T5848] ? lockdep_rtnl_is_held+0x26/0x40 [ 64.445107][ T5848] tc_modify_qdisc+0x17af/0x2390 [ 64.447025][ T5848] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 64.449077][ T5848] ? __dev_queue_xmit+0x29b/0x3820 [ 64.451069][ T5848] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 64.452782][ T5848] rtnetlink_rcv_msg+0x7b9/0xc00 [ 64.454352][ T5848] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 64.455979][ T5848] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 64.457697][ T5848] ? ref_tracker_free+0x689/0x830 [ 64.459251][ T5848] ? __pfx_ref_tracker_free+0x10/0x10 [ 64.460953][ T5848] ? __asan_memcpy+0x40/0x70 [ 64.462421][ T5848] ? __skb_clone+0x5c/0x6c0 [ 64.463881][ T5848] netlink_rcv_skb+0x226/0x4a0 [ 64.465371][ T5848] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 64.467054][ T5848] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 64.468684][ T5848] ? netlink_deliver_tap+0x2e/0x1b0 [ 64.470330][ T5848] ? netlink_deliver_tap+0x2e/0x1b0 [ 64.472004][ T5848] netlink_unicast+0x7bb/0x940 [ 64.473533][ T5848] netlink_sendmsg+0x813/0xb40 [ 64.475049][ T5848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.476697][ T5848] ? aa_sock_msg_perm+0xf1/0x1b0 [ 64.478236][ T5848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.479865][ T5848] sock_sendmsg_nosec+0x13a/0x180 [ 64.481538][ T5848] ____sys_sendmsg+0x54e/0x850 [ 64.483451][ T5848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 64.485541][ T5848] ? import_iovec+0x73/0xa0 [ 64.487314][ T5848] ___sys_sendmsg+0x2a5/0x360 [ 64.489136][ T5848] ? __lock_acquire+0x683/0x2cf0 [ 64.491053][ T5848] ? __pfx____sys_sendmsg+0x10/0x10 [ 64.493080][ T5848] ? futex_wake+0x51b/0x5f0 [ 64.494859][ T5848] ? __fget_files+0x2a/0x420 [ 64.496663][ T5848] ? __fget_files+0x3a2/0x420 [ 64.498476][ T5848] __x64_sys_sendmsg+0x1b1/0x290 [ 64.500417][ T5848] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 64.502530][ T5848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.504477][ T5848] do_syscall_64+0x174/0x580 [ 64.505925][ T5848] ? trace_irq_disable+0x3b/0x140 [ 64.507533][ T5848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.509346][ T5848] RIP: 0033:0x7f5cd5f9e0d9 [ 64.510741][ T5848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.516528][ T5848] RSP: 002b:00007f5cd6df1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.519008][ T5848] RAX: ffffffffffffffda RBX: 00007f5cd6225fa0 RCX: 00007f5cd5f9e0d9 [ 64.521442][ T5848] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 64.523938][ T5848] RBP: 00007f5cd6035024 R08: 0000000000000000 R09: 0000000000000000 [ 64.526401][ T5848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.528836][ T5848] R13: 00007f5cd6226038 R14: 00007f5cd6225fa0 R15: 00007ffc6aba2558 [ 64.531206][ T5848] [ 64.532876][ T5848] Kernel Offset: disabled [ 64.534337][ T5848] Rebooting in 86400 seconds..