Warning: Permanently added '[localhost]:29628' (ED25519) to the list of known hosts. 2026/04/13 15:00:08 parsed 1 programs syzkaller login: [ 57.707794][ T5809] cgroup: Unknown subsys name 'net' [ 57.792334][ T5809] cgroup: Unknown subsys name 'cpuset' [ 57.797730][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.027238][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.262886][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.995644][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 62.164875][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.168210][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.172312][ T5840] bridge_slave_0: entered allmulticast mode [ 62.175816][ T5840] bridge_slave_0: entered promiscuous mode [ 62.191332][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.194213][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.197076][ T5840] bridge_slave_1: entered allmulticast mode [ 62.207897][ T5840] bridge_slave_1: entered promiscuous mode [ 62.247400][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.263698][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.307867][ T5840] team0: Port device team_slave_0 added [ 62.330893][ T5840] team0: Port device team_slave_1 added [ 62.381544][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.383701][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.394914][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.423768][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.426077][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.437682][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.564713][ T5840] hsr_slave_0: entered promiscuous mode [ 62.566919][ T5840] hsr_slave_1: entered promiscuous mode [ 62.586320][ T3922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.590307][ T3922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.700957][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.704045][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.798326][ T5880] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.803248][ T5880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.807179][ T5880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.816385][ T5880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.821414][ T5880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.962153][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.982536][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.998048][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.017103][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.274474][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.402208][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.438530][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.441587][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.535668][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.538597][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.767251][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.801334][ T5840] veth0_vlan: entered promiscuous mode [ 63.948112][ T5840] veth1_vlan: entered promiscuous mode [ 63.997247][ T5840] veth0_macvtap: entered promiscuous mode [ 64.013020][ T5840] veth1_macvtap: entered promiscuous mode [ 64.065310][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.081006][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.100928][ T5872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.104669][ T5872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.108354][ T5872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.125306][ T5872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/04/13 15:00:16 executed programs: 0 [ 64.239450][ T5198] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.242176][ T5198] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.245435][ T5198] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.260863][ T5198] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.263461][ T5198] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.276656][ T5198] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.280701][ T5198] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.284165][ T5198] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.286559][ T5198] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.297139][ T5931] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.310992][ T5931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.313962][ T5931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.316487][ T5931] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.320711][ T5931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.331444][ T5931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.393829][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.467383][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.588118][ T5923] chnl_net:caif_netlink_parms(): no params data found [ 64.648099][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 64.696809][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 64.775737][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.778355][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.781055][ T5923] bridge_slave_0: entered allmulticast mode [ 64.783597][ T5923] bridge_slave_0: entered promiscuous mode [ 64.787134][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.790555][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.792733][ T5923] bridge_slave_1: entered allmulticast mode [ 64.795427][ T5923] bridge_slave_1: entered promiscuous mode [ 64.825561][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.827791][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.830827][ T5930] bridge_slave_0: entered allmulticast mode [ 64.833515][ T5930] bridge_slave_0: entered promiscuous mode [ 64.856703][ T5923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.860212][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.863085][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.865614][ T5930] bridge_slave_1: entered allmulticast mode [ 64.868937][ T5930] bridge_slave_1: entered promiscuous mode [ 64.883993][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.886179][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.888611][ T5926] bridge_slave_0: entered allmulticast mode [ 64.893380][ T5926] bridge_slave_0: entered promiscuous mode [ 64.897521][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.903975][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.906847][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.909820][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.912052][ T5926] bridge_slave_1: entered allmulticast mode [ 64.914655][ T5926] bridge_slave_1: entered promiscuous mode [ 64.934367][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.953384][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.963986][ T5923] team0: Port device team_slave_0 added [ 64.975096][ T5923] team0: Port device team_slave_1 added [ 64.978384][ T5930] team0: Port device team_slave_0 added [ 64.982061][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.010106][ T5930] team0: Port device team_slave_1 added [ 65.020670][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.022859][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.031337][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.044259][ T5926] team0: Port device team_slave_0 added [ 65.054095][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.056449][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.065634][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.076203][ T5926] team0: Port device team_slave_1 added [ 65.087444][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.090619][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.099116][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.131417][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.133653][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.143166][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.147935][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.151236][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.161636][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.172751][ T5923] hsr_slave_0: entered promiscuous mode [ 65.175929][ T5923] hsr_slave_1: entered promiscuous mode [ 65.179300][ T5923] debugfs: 'hsr0' already exists in 'hsr' [ 65.181632][ T5923] Cannot create hsr debugfs directory [ 65.204398][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.207186][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.217585][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.241703][ T5930] hsr_slave_0: entered promiscuous mode [ 65.244109][ T5930] hsr_slave_1: entered promiscuous mode [ 65.246447][ T5930] debugfs: 'hsr0' already exists in 'hsr' [ 65.248224][ T5930] Cannot create hsr debugfs directory [ 65.284686][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.311680][ T5926] hsr_slave_0: entered promiscuous mode [ 65.313978][ T5926] hsr_slave_1: entered promiscuous mode [ 65.316227][ T5926] debugfs: 'hsr0' already exists in 'hsr' [ 65.318026][ T5926] Cannot create hsr debugfs directory [ 65.556085][ T5923] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.563185][ T5923] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.567088][ T5923] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.576200][ T5923] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.606869][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.609226][ T5923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.611925][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.614148][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.620229][ T5926] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.624440][ T5926] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.628191][ T5926] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.633353][ T5926] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.657359][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.659642][ T5926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.662061][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.664206][ T5926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.699599][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.703095][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.705988][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.710991][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.713647][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.732549][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.738380][ T5923] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.747494][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.750106][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.756960][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.762874][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.765056][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.786974][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.789442][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.800906][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.803221][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.813906][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.904661][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.925572][ T5923] veth0_vlan: entered promiscuous mode [ 65.933428][ T5923] veth1_vlan: entered promiscuous mode [ 65.953488][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.964499][ T5923] veth0_macvtap: entered promiscuous mode [ 65.972070][ T5923] veth1_macvtap: entered promiscuous mode [ 66.002275][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.005438][ T5926] veth0_vlan: entered promiscuous mode [ 66.012600][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.019598][ T5926] veth1_vlan: entered promiscuous mode [ 66.027031][ T5902] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.032334][ T5902] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.043256][ T5902] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.054607][ T5902] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.075019][ T5926] veth0_macvtap: entered promiscuous mode [ 66.092338][ T5926] veth1_macvtap: entered promiscuous mode [ 66.117434][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.126933][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.133816][ T5676] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.138873][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.141601][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.144920][ T5902] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.150513][ T5902] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.163697][ T5902] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.178473][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.182072][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.204327][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.206722][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.226434][ T3922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.229965][ T3922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.339631][ T5198] Bluetooth: hci1: command tx timeout [ 66.341712][ T5198] Bluetooth: hci0: command tx timeout [ 66.349721][ T5974] veth3: entered allmulticast mode [ 66.419039][ T5931] Bluetooth: hci2: command tx timeout [ 66.588543][ T5977] veth3: entered allmulticast mode [ 66.932912][ T5979] veth3: entered allmulticast mode [ 67.019779][ T12] bridge_slave_1: left allmulticast mode [ 67.022219][ T12] bridge_slave_1: left promiscuous mode [ 67.025243][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.032426][ T12] bridge_slave_0: left allmulticast mode [ 67.034819][ T12] bridge_slave_0: left promiscuous mode [ 67.037301][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.184076][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.190248][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.194861][ T12] bond0 (unregistering): Released all slaves [ 67.380728][ T5982] veth3: entered allmulticast mode [ 67.499979][ T12] hsr_slave_0: left promiscuous mode [ 67.510997][ T12] hsr_slave_1: left promiscuous mode [ 67.513629][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.516559][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.524102][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.528113][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.541637][ T12] veth1_macvtap: left promiscuous mode [ 67.544070][ T12] veth0_macvtap: left promiscuous mode [ 67.546281][ T12] veth1_vlan: left promiscuous mode [ 67.551877][ T12] veth0_vlan: left promiscuous mode [ 67.765707][ T12] team0 (unregistering): Port device team_slave_1 removed [ 67.777806][ T12] team0 (unregistering): Port device team_slave_0 removed [ 68.039838][ T5989] veth3: entered allmulticast mode [ 68.280509][ T5994] veth3: entered allmulticast mode [ 68.418931][ T5931] Bluetooth: hci0: command tx timeout [ 68.421174][ T5931] Bluetooth: hci1: command tx timeout [ 68.498930][ T5198] Bluetooth: hci2: command tx timeout [ 68.519268][ T5996] veth3: entered allmulticast mode [ 68.703638][ T5999] veth3: entered allmulticast mode [ 68.929677][ T6001] veth3: entered allmulticast mode [ 69.130542][ T6004] veth3: entered allmulticast mode [ 69.170968][ T6004] bond0: (slave veth3): Enslaving as an active interface with an up link [ 69.204709][ T6002] ------------[ cut here ]------------ [ 69.206940][ T6002] index >= dev->num_tx_queues [ 69.206951][ T6002] WARNING: ./include/linux/netdevice.h:2672 at veth_napi_del_range+0x3b7/0x4e0, CPU#0: syz.1.27/6002 [ 69.213270][ T6002] Modules linked in: [ 69.214980][ T6002] CPU: 0 UID: 0 PID: 6002 Comm: syz.1.27 Not tainted syzkaller #0 PREEMPT(full) [ 69.218569][ T6002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 69.223126][ T6002] RIP: 0010:veth_napi_del_range+0x3b7/0x4e0 [ 69.225020][ T6002] Code: 00 e8 ad 96 69 fe 44 39 6c 24 10 74 5e e8 41 61 44 fb 41 ff c5 49 bc 00 00 00 00 00 fc ff df e9 6d ff ff ff e8 2a 61 44 fb 90 <0f> 0b 90 42 80 3c 23 00 75 8e eb 94 48 8b 0c 24 80 e1 07 80 c1 03 [ 69.231906][ T6002] RSP: 0018:ffffc90003adf918 EFLAGS: 00010293 [ 69.234035][ T6002] RAX: ffffffff86814ec6 RBX: 1ffff110227a6c03 RCX: ffff888103a857c0 [ 69.236821][ T6002] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 69.239641][ T6002] RBP: 1ffff110227a6c9a R08: ffff888113f01ab7 R09: 0000000000000000 [ 69.242797][ T6002] R10: ffff888113f01a98 R11: ffffed10227e0357 R12: dffffc0000000000 [ 69.245564][ T6002] R13: 0000000000000002 R14: 0000000000000002 R15: ffff888113d36018 [ 69.248470][ T6002] FS: 000055555ea16500(0000) GS:ffff88818de4a000(0000) knlGS:0000000000000000 [ 69.252081][ T6002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.254646][ T6002] CR2: 00007efc287456b8 CR3: 000000010cdd0000 CR4: 00000000000006f0 [ 69.257259][ T6002] Call Trace: [ 69.258343][ T6002] [ 69.259453][ T6002] veth_disable_xdp+0x1b0/0x310 [ 69.261054][ T6002] veth_xdp+0x48e/0x730 [ 69.262391][ T6002] dev_xdp_propagate+0x125/0x260 [ 69.264044][ T6002] bond_xdp+0x3ca/0x830 [ 69.266026][ T6002] ? __pfx_bond_xdp+0x10/0x10 [ 69.267586][ T6002] ? __mutex_lock+0xd09/0x1300 2026/04/13 15:00:21 executed programs: 16 [ 69.269698][ T6002] dev_xdp_install+0x42c/0x600 [ 69.272232][ T6002] ? __pfx_bond_xdp+0x10/0x10 [ 69.273900][ T6002] ? __pfx_dev_xdp_install+0x10/0x10 [ 69.275800][ T6002] ? delete_node+0x29c/0xa50 [ 69.277306][ T6002] bpf_xdp_link_release+0x362/0x540 [ 69.279457][ T6002] bpf_link_free+0x103/0x480 [ 69.281348][ T6002] ? __pfx_bpf_link_release+0x10/0x10 [ 69.283658][ T6002] bpf_link_release+0x6b/0x80 [ 69.285398][ T6002] __fput+0x44f/0xa70 [ 69.286668][ T6002] task_work_run+0x1d9/0x270 [ 69.288189][ T6002] ? __pfx_task_work_run+0x10/0x10 [ 69.289958][ T6002] exit_to_user_mode_loop+0xed/0x480 [ 69.291816][ T6002] ? rcu_is_watching+0x15/0xb0 [ 69.293407][ T6002] do_syscall_64+0x32d/0xf80 [ 69.294867][ T6002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.296817][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.298973][ T6002] RIP: 0033:0x7f5bda39c819 [ 69.300471][ T6002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.306542][ T6002] RSP: 002b:00007ffdca2969e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 69.309336][ T6002] RAX: 0000000000000000 RBX: 00007f5bda617da0 RCX: 00007f5bda39c819 [ 69.312024][ T6002] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 69.314500][ T6002] RBP: 00007f5bda617da0 R08: 00007f5bda616128 R09: 0000000000000000 [ 69.317168][ T6002] R10: 000000000003fd78 R11: 0000000000000246 R12: 0000000000010fb8 [ 69.319816][ T6002] R13: 00007f5bda61609c R14: 0000000000010cdd R15: 00007ffdca296af0 [ 69.322365][ T6002] [ 69.323400][ T6002] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 69.325837][ T6002] CPU: 0 UID: 0 PID: 6002 Comm: syz.1.27 Not tainted syzkaller #0 PREEMPT(full) [ 69.328663][ T6002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 69.332035][ T6002] Call Trace: [ 69.333118][ T6002] [ 69.334161][ T6002] vpanic+0x56c/0xa60 [ 69.335729][ T6002] ? __pfx__printk+0x10/0x10 [ 69.337322][ T6002] ? __pfx_vpanic+0x10/0x10 [ 69.338813][ T6002] ? is_bpf_text_address+0x292/0x2b0 [ 69.340734][ T6002] ? is_bpf_text_address+0x26/0x2b0 [ 69.342703][ T6002] panic+0xc5/0xd0 [ 69.344097][ T6002] ? __pfx_panic+0x10/0x10 [ 69.345823][ T6002] __warn+0x315/0x4f0 [ 69.347339][ T6002] ? veth_napi_del_range+0x3b7/0x4e0 [ 69.349263][ T6002] ? veth_napi_del_range+0x3b7/0x4e0 [ 69.351173][ T6002] __report_bug+0x29a/0x540 [ 69.352871][ T6002] ? bpf_xdp_link_release+0x362/0x540 [ 69.354812][ T6002] ? bpf_link_free+0x103/0x480 [ 69.356592][ T6002] ? bpf_link_release+0x6b/0x80 [ 69.358429][ T6002] ? veth_napi_del_range+0x3b7/0x4e0 [ 69.360323][ T6002] ? __pfx___report_bug+0x10/0x10 [ 69.362146][ T6002] ? veth_napi_del_range+0x3b7/0x4e0 [ 69.364037][ T6002] report_bug+0x16a/0x220 [ 69.365616][ T6002] ? veth_napi_del_range+0x3b7/0x4e0 [ 69.367622][ T6002] ? veth_napi_del_range+0x3b9/0x4e0 [ 69.369534][ T6002] handle_bug+0x9c/0x200 [ 69.371163][ T6002] exc_invalid_op+0x1a/0x50 [ 69.372904][ T6002] asm_exc_invalid_op+0x1a/0x20 [ 69.374604][ T6002] RIP: 0010:veth_napi_del_range+0x3b7/0x4e0 [ 69.376474][ T6002] Code: 00 e8 ad 96 69 fe 44 39 6c 24 10 74 5e e8 41 61 44 fb 41 ff c5 49 bc 00 00 00 00 00 fc ff df e9 6d ff ff ff e8 2a 61 44 fb 90 <0f> 0b 90 42 80 3c 23 00 75 8e eb 94 48 8b 0c 24 80 e1 07 80 c1 03 [ 69.382865][ T6002] RSP: 0018:ffffc90003adf918 EFLAGS: 00010293 [ 69.384823][ T6002] RAX: ffffffff86814ec6 RBX: 1ffff110227a6c03 RCX: ffff888103a857c0 [ 69.387353][ T6002] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 69.389831][ T6002] RBP: 1ffff110227a6c9a R08: ffff888113f01ab7 R09: 0000000000000000 [ 69.392565][ T6002] R10: ffff888113f01a98 R11: ffffed10227e0357 R12: dffffc0000000000 [ 69.395271][ T6002] R13: 0000000000000002 R14: 0000000000000002 R15: ffff888113d36018 [ 69.398130][ T6002] ? veth_napi_del_range+0x3b6/0x4e0 [ 69.400042][ T6002] ? veth_napi_del_range+0x3b6/0x4e0 [ 69.401779][ T6002] veth_disable_xdp+0x1b0/0x310 [ 69.403589][ T6002] veth_xdp+0x48e/0x730 [ 69.405109][ T6002] dev_xdp_propagate+0x125/0x260 [ 69.406612][ T6002] bond_xdp+0x3ca/0x830 [ 69.407920][ T6002] ? __pfx_bond_xdp+0x10/0x10 [ 69.409541][ T6002] ? __mutex_lock+0xd09/0x1300 [ 69.411053][ T6002] dev_xdp_install+0x42c/0x600 [ 69.412885][ T6002] ? __pfx_bond_xdp+0x10/0x10 [ 69.414391][ T6002] ? __pfx_dev_xdp_install+0x10/0x10 [ 69.416026][ T6002] ? delete_node+0x29c/0xa50 [ 69.417443][ T6002] bpf_xdp_link_release+0x362/0x540 [ 69.419019][ T6002] bpf_link_free+0x103/0x480 [ 69.420450][ T6002] ? __pfx_bpf_link_release+0x10/0x10 [ 69.422086][ T6002] bpf_link_release+0x6b/0x80 [ 69.423571][ T6002] __fput+0x44f/0xa70 [ 69.424839][ T6002] task_work_run+0x1d9/0x270 [ 69.426256][ T6002] ? __pfx_task_work_run+0x10/0x10 [ 69.427818][ T6002] exit_to_user_mode_loop+0xed/0x480 [ 69.429390][ T6002] ? rcu_is_watching+0x15/0xb0 [ 69.431220][ T6002] do_syscall_64+0x32d/0xf80 [ 69.432718][ T6002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.434697][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.436735][ T6002] RIP: 0033:0x7f5bda39c819 [ 69.438117][ T6002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.443949][ T6002] RSP: 002b:00007ffdca2969e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 69.446402][ T6002] RAX: 0000000000000000 RBX: 00007f5bda617da0 RCX: 00007f5bda39c819 [ 69.448784][ T6002] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 69.451224][ T6002] RBP: 00007f5bda617da0 R08: 00007f5bda616128 R09: 0000000000000000 [ 69.453819][ T6002] R10: 000000000003fd78 R11: 0000000000000246 R12: 0000000000010fb8 [ 69.456411][ T6002] R13: 00007f5bda61609c R14: 0000000000010cdd R15: 00007ffdca296af0 [ 69.459179][ T6002] [ 69.461078][ T6002] Kernel Offset: disabled [ 69.462693][ T6002] Rebooting in 86400 seconds..