Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts. 2025/06/30 08:27:21 ignoring optional flag "sandboxArg"="0" 2025/06/30 08:27:22 parsed 1 programs syzkaller login: [ 59.915536][ T4258] cgroup: Unknown subsys name 'net' [ 60.022123][ T4258] cgroup: Unknown subsys name 'rlimit' [ 61.262958][ T4258] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.761084][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.769383][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.777115][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.786462][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.794441][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.802447][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.208690][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.236019][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.243574][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.252484][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.256839][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.269671][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.970541][ T4316] chnl_net:caif_netlink_parms(): no params data found [ 64.021782][ T4316] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.029212][ T4316] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.038475][ T4316] device bridge_slave_0 entered promiscuous mode [ 64.047537][ T4316] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.054760][ T4316] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.062771][ T4316] device bridge_slave_1 entered promiscuous mode [ 64.092468][ T4316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.103460][ T4316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.130917][ T4316] team0: Port device team_slave_0 added [ 64.139771][ T4316] team0: Port device team_slave_1 added [ 64.166282][ T4316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.173244][ T4316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.199516][ T4316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.214112][ T4316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.221350][ T4316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.248149][ T4316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.309608][ T4316] device hsr_slave_0 entered promiscuous mode [ 64.316849][ T4316] device hsr_slave_1 entered promiscuous mode [ 64.466953][ T4316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.479517][ T4316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.492577][ T4316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.504377][ T4316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.598301][ T4316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.614422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.625626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.636969][ T4316] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.650734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.660809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.670650][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.678035][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.696219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.704338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.713450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.722221][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.729356][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.738229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.756505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.767899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.785606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.807774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.822323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.831447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.840059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.848585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.862607][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.017904][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.027195][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.043909][ T4316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.065687][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.084508][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.093047][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.102058][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.117758][ T4316] device veth0_vlan entered promiscuous mode [ 65.129817][ T4316] device veth1_vlan entered promiscuous mode [ 65.147793][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.156904][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.166533][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.183844][ T4316] device veth0_macvtap entered promiscuous mode [ 65.192986][ T4316] device veth1_macvtap entered promiscuous mode [ 65.207835][ T4316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.216670][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.225027][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.233600][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.245125][ T4316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.254256][ T4316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.263390][ T4316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.273317][ T4316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.282166][ T4316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.301696][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.311204][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.651953][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/06/30 08:27:30 executed programs: 0 [ 66.406129][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.413937][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.422603][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.432258][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.440370][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.448359][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.557871][ T4354] chnl_net:caif_netlink_parms(): no params data found [ 66.596459][ T4354] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.603574][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.611546][ T4354] device bridge_slave_0 entered promiscuous mode [ 66.619430][ T4354] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.626851][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.635336][ T4354] device bridge_slave_1 entered promiscuous mode [ 66.658940][ T4354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.672271][ T4354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.694045][ T4354] team0: Port device team_slave_0 added [ 66.701233][ T4354] team0: Port device team_slave_1 added [ 66.722683][ T4354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.730094][ T4354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.756392][ T4354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.769203][ T4354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.776209][ T4354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.802539][ T4354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.831821][ T4354] device hsr_slave_0 entered promiscuous mode [ 66.838737][ T4354] device hsr_slave_1 entered promiscuous mode [ 66.845857][ T4354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.853614][ T4354] Cannot create hsr debugfs directory [ 68.036594][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.465355][ T4275] Bluetooth: hci0: command 0x0409 tx timeout [ 70.544720][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.545385][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 70.594415][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.268763][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.275364][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.419906][ T56] device hsr_slave_0 left promiscuous mode [ 71.430105][ T56] device hsr_slave_1 left promiscuous mode [ 71.451615][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.459790][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.468470][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.476385][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.484175][ T56] device bridge_slave_1 left promiscuous mode [ 71.491142][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.501374][ T56] device bridge_slave_0 left promiscuous mode [ 71.508646][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.527282][ T56] device veth1_macvtap left promiscuous mode [ 71.533529][ T56] device veth0_macvtap left promiscuous mode [ 71.539954][ T56] device veth1_vlan left promiscuous mode [ 71.546124][ T56] device veth0_vlan left promiscuous mode [ 71.807928][ T56] team0 (unregistering): Port device team_slave_1 removed [ 71.834296][ T56] team0 (unregistering): Port device team_slave_0 removed [ 71.859529][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.886622][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.113226][ T56] bond0 (unregistering): Released all slaves [ 72.204698][ T4354] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.213463][ T4354] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.225287][ T4354] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.235396][ T4354] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.287725][ T4354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.315523][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.323401][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.333694][ T4354] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.346129][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.355169][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.364059][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.371391][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.379950][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.395954][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.405113][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.413498][ T2918] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.420667][ T2918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.445250][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.453891][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.463055][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.472621][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.481965][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.491058][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.499726][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.508574][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.519153][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.527616][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.536111][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.549948][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.634774][ T4275] Bluetooth: hci0: command 0x040f tx timeout [ 72.727063][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.736003][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.748563][ T4354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.763919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.774252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.791212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.799505][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.809484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.817818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.835790][ T4354] device veth0_vlan entered promiscuous mode [ 72.845735][ T4354] device veth1_vlan entered promiscuous mode [ 72.862355][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.871506][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.880348][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.889344][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.906473][ T4354] device veth0_macvtap entered promiscuous mode [ 72.915931][ T4354] device veth1_macvtap entered promiscuous mode [ 72.930346][ T4354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.938381][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.947539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.955834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.964273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.980833][ T4354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.988338][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.997211][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.014383][ T4354] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.023584][ T4354] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.032425][ T4354] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.041597][ T4354] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.092419][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.101910][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.114230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2025/06/30 08:27:37 executed programs: 2 [ 73.136174][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.144250][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.153584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.198039][ T4406] ------------[ cut here ]------------ [ 73.203744][ T4406] WARNING: CPU: 1 PID: 4406 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x139/0x160 [ 73.213988][ T4406] Modules linked in: [ 73.217974][ T4406] CPU: 1 PID: 4406 Comm: syz.0.16 Not tainted 6.1.142-syzkaller #0 [ 73.225941][ T4406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.236042][ T4406] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 73.242150][ T4406] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 6c f1 85 f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 27 75 34 f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 73.261831][ T4406] RSP: 0018:ffffc90003346d88 EFLAGS: 00010293 [ 73.267951][ T4406] RAX: ffffffff884c6259 RBX: ffffc90003346e98 RCX: ffff88807b7c8000 [ 73.275975][ T4406] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.284049][ T4406] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff211726b [ 73.292264][ T4406] R10: fffffbfff211726b R11: 1ffffffff211726a R12: 184dc4a844392f5d [ 73.300369][ T4406] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.308396][ T4406] FS: 000055558f057500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 73.317385][ T4406] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.323990][ T4406] CR2: 0000200000000600 CR3: 0000000023bc3000 CR4: 00000000003506e0 [ 73.332016][ T4406] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.340152][ T4406] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.348193][ T4406] Call Trace: [ 73.351484][ T4406] [ 73.354431][ T4406] taprio_change+0x3daa/0x50f0 [ 73.359744][ T4406] ? taprio_destroy+0x4b0/0x4b0 [ 73.364656][ T4406] ? qdisc_create+0x7cb/0x1090 [ 73.369445][ T4406] ? ____sys_sendmsg+0x59b/0x970 [ 73.374401][ T4406] ? ___sys_sendmsg+0x21c/0x290 [ 73.379310][ T4406] ? __se_sys_sendmsg+0x19e/0x270 [ 73.384364][ T4406] ? do_syscall_64+0x4c/0xa0 [ 73.388995][ T4406] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.395149][ T4406] ? qdisc_alloc+0x95/0xa50 [ 73.399673][ T4406] ? fifo_init+0x3ab/0x650 [ 73.404088][ T4406] ? qdisc_peek_head+0x40/0x40 [ 73.409008][ T4406] ? qdisc_alloc+0x77a/0xa50 [ 73.413623][ T4406] ? mutex_is_locked+0xe/0x40 [ 73.418366][ T4406] ? taprio_peek+0x590/0x590 [ 73.422975][ T4406] qdisc_create+0x7cb/0x1090 [ 73.427718][ T4406] ? qdisc_notify+0x370/0x370 [ 73.432417][ T4406] tc_modify_qdisc+0xb0f/0x1be0 [ 73.437318][ T4406] ? qdisc_offload_query_caps+0x140/0x140 [ 73.443234][ T4406] ? qdisc_offload_query_caps+0x140/0x140 [ 73.449053][ T4406] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 73.454277][ T4406] rtnetlink_rcv_msg+0x79b/0xed0 [ 73.459318][ T4406] ? rtnetlink_bind+0x80/0x80 [ 73.464022][ T4406] ? __local_bh_enable_ip+0x12a/0x1b0 [ 73.469468][ T4406] ? lockdep_hardirqs_on+0x94/0x140 [ 73.474727][ T4406] ? __local_bh_enable_ip+0x12a/0x1b0 [ 73.480138][ T4406] ? _local_bh_enable+0xa0/0xa0 [ 73.485470][ T4406] ? __dev_queue_xmit+0x26f/0x3760 [ 73.490696][ T4406] ? __dev_queue_xmit+0x26f/0x3760 [ 73.495862][ T4406] ? __dev_queue_xmit+0x15c9/0x3760 [ 73.501070][ T4406] ? __dev_queue_xmit+0x26f/0x3760 [ 73.506327][ T4406] ? netdev_core_pick_tx+0x340/0x340 [ 73.511621][ T4406] ? ref_tracker_free+0x630/0x7c0 [ 73.516690][ T4406] ? refcount_inc+0x70/0x70 [ 73.521203][ T4406] ? __copy_skb_header+0x417/0x5a0 [ 73.526359][ T4406] ? __skb_clone+0x480/0x790 [ 73.530972][ T4406] netlink_rcv_skb+0x1de/0x420 [ 73.535802][ T4406] ? rtnetlink_bind+0x80/0x80 [ 73.540517][ T4406] ? netlink_ack+0x1100/0x1100 [ 73.545351][ T4406] ? netlink_deliver_tap+0x2e/0x1b0 [ 73.550571][ T4406] netlink_unicast+0x74c/0x8c0 [ 73.555421][ T4406] netlink_sendmsg+0x89e/0xbc0 [ 73.560258][ T4406] ? netlink_getsockopt+0x540/0x540 [ 73.565517][ T4406] ? aa_sock_msg_perm+0x94/0x150 [ 73.570518][ T4406] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 73.575849][ T4406] ? security_socket_sendmsg+0x7c/0xa0 [ 73.581321][ T4406] ? netlink_getsockopt+0x540/0x540 [ 73.586569][ T4406] ____sys_sendmsg+0x59b/0x970 [ 73.591354][ T4406] ? __sys_sendmsg_sock+0x30/0x30 [ 73.596435][ T4406] ? __import_iovec+0x315/0x500 [ 73.601315][ T4406] ? import_iovec+0x6f/0xa0 [ 73.605873][ T4406] ___sys_sendmsg+0x21c/0x290 [ 73.610566][ T4406] ? __sys_sendmsg+0x270/0x270 [ 73.615378][ T4406] ? memset+0x1e/0x40 [ 73.619375][ T4406] ? futex_wake+0x3dc/0x4b0 [ 73.623873][ T4406] ? lockdep_softirqs_off+0x420/0x420 [ 73.629315][ T4406] ? __ia32_sys_get_robust_list+0x80/0x80 [ 73.635088][ T4406] ? __fdget+0x146/0x200 [ 73.639343][ T4406] __se_sys_sendmsg+0x19e/0x270 [ 73.644195][ T4406] ? __se_sys_futex+0x14a/0x440 [ 73.649097][ T4406] ? __x64_sys_sendmsg+0x80/0x80 [ 73.654060][ T4406] ? lockdep_hardirqs_on+0x94/0x140 [ 73.659297][ T4406] do_syscall_64+0x4c/0xa0 [ 73.663808][ T4406] ? clear_bhb_loop+0x60/0xb0 [ 73.668541][ T4406] ? clear_bhb_loop+0x60/0xb0 [ 73.673240][ T4406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.679175][ T4406] RIP: 0033:0x7ffa05f8e929 [ 73.683608][ T4406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.703267][ T4406] RSP: 002b:00007ffe3830e1d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.711877][ T4406] RAX: ffffffffffffffda RBX: 00007ffa061b5fa0 RCX: 00007ffa05f8e929 [ 73.719936][ T4406] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 73.727951][ T4406] RBP: 00007ffa06010b39 R08: 0000000000000000 R09: 0000000000000000 [ 73.736033][ T4406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.744019][ T4406] R13: 00007ffa061b5fa0 R14: 00007ffa061b5fa0 R15: 0000000000000003 [ 73.752062][ T4406] [ 73.755132][ T4406] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 73.762462][ T4406] CPU: 1 PID: 4406 Comm: syz.0.16 Not tainted 6.1.142-syzkaller #0 [ 73.770435][ T4406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.780491][ T4406] Call Trace: [ 73.783762][ T4406] [ 73.786684][ T4406] dump_stack_lvl+0x168/0x22e [ 73.791515][ T4406] ? memcpy+0x3c/0x60 [ 73.795542][ T4406] ? show_regs_print_info+0x12/0x12 [ 73.800763][ T4406] ? load_image+0x3b0/0x3b0 [ 73.805304][ T4406] panic+0x2c9/0x710 [ 73.809190][ T4406] ? bpf_jit_dump+0xd0/0xd0 [ 73.813680][ T4406] __warn+0x2f8/0x4f0 [ 73.817650][ T4406] ? taprio_get_start_time+0x139/0x160 [ 73.823099][ T4406] ? taprio_get_start_time+0x139/0x160 [ 73.828645][ T4406] report_bug+0x2ba/0x4f0 [ 73.832971][ T4406] ? taprio_get_start_time+0x139/0x160 [ 73.838419][ T4406] handle_bug+0x3a/0x70 [ 73.842567][ T4406] exc_invalid_op+0x16/0x40 [ 73.847076][ T4406] asm_exc_invalid_op+0x16/0x20 [ 73.851935][ T4406] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 73.858052][ T4406] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 6c f1 85 f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 27 75 34 f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 73.877657][ T4406] RSP: 0018:ffffc90003346d88 EFLAGS: 00010293 [ 73.883716][ T4406] RAX: ffffffff884c6259 RBX: ffffc90003346e98 RCX: ffff88807b7c8000 [ 73.891679][ T4406] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.899637][ T4406] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff211726b [ 73.907710][ T4406] R10: fffffbfff211726b R11: 1ffffffff211726a R12: 184dc4a844392f5d [ 73.915869][ T4406] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.924124][ T4406] ? taprio_get_start_time+0x139/0x160 [ 73.929600][ T4406] ? taprio_get_start_time+0x139/0x160 [ 73.935166][ T4406] taprio_change+0x3daa/0x50f0 [ 73.940126][ T4406] ? taprio_destroy+0x4b0/0x4b0 [ 73.944990][ T4406] ? qdisc_create+0x7cb/0x1090 [ 73.949865][ T4406] ? ____sys_sendmsg+0x59b/0x970 [ 73.954807][ T4406] ? ___sys_sendmsg+0x21c/0x290 [ 73.959682][ T4406] ? __se_sys_sendmsg+0x19e/0x270 [ 73.964716][ T4406] ? do_syscall_64+0x4c/0xa0 [ 73.969467][ T4406] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.975563][ T4406] ? qdisc_alloc+0x95/0xa50 [ 73.980075][ T4406] ? fifo_init+0x3ab/0x650 [ 73.984509][ T4406] ? qdisc_peek_head+0x40/0x40 [ 73.989363][ T4406] ? qdisc_alloc+0x77a/0xa50 [ 73.993955][ T4406] ? mutex_is_locked+0xe/0x40 [ 73.998656][ T4406] ? taprio_peek+0x590/0x590 [ 74.003257][ T4406] qdisc_create+0x7cb/0x1090 [ 74.007863][ T4406] ? qdisc_notify+0x370/0x370 [ 74.012550][ T4406] tc_modify_qdisc+0xb0f/0x1be0 [ 74.017721][ T4406] ? qdisc_offload_query_caps+0x140/0x140 [ 74.023574][ T4406] ? qdisc_offload_query_caps+0x140/0x140 [ 74.029494][ T4406] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 74.034886][ T4406] rtnetlink_rcv_msg+0x79b/0xed0 [ 74.039838][ T4406] ? rtnetlink_bind+0x80/0x80 [ 74.044617][ T4406] ? __local_bh_enable_ip+0x12a/0x1b0 [ 74.050126][ T4406] ? lockdep_hardirqs_on+0x94/0x140 [ 74.055413][ T4406] ? __local_bh_enable_ip+0x12a/0x1b0 [ 74.060902][ T4406] ? _local_bh_enable+0xa0/0xa0 [ 74.065794][ T4406] ? __dev_queue_xmit+0x26f/0x3760 [ 74.070951][ T4406] ? __dev_queue_xmit+0x26f/0x3760 [ 74.076078][ T4406] ? __dev_queue_xmit+0x15c9/0x3760 [ 74.081296][ T4406] ? __dev_queue_xmit+0x26f/0x3760 [ 74.086464][ T4406] ? netdev_core_pick_tx+0x340/0x340 [ 74.091754][ T4406] ? ref_tracker_free+0x630/0x7c0 [ 74.096787][ T4406] ? refcount_inc+0x70/0x70 [ 74.101297][ T4406] ? __copy_skb_header+0x417/0x5a0 [ 74.106452][ T4406] ? __skb_clone+0x480/0x790 [ 74.111044][ T4406] netlink_rcv_skb+0x1de/0x420 [ 74.115808][ T4406] ? rtnetlink_bind+0x80/0x80 [ 74.120575][ T4406] ? netlink_ack+0x1100/0x1100 [ 74.125341][ T4406] ? netlink_deliver_tap+0x2e/0x1b0 [ 74.130538][ T4406] netlink_unicast+0x74c/0x8c0 [ 74.135308][ T4406] netlink_sendmsg+0x89e/0xbc0 [ 74.140072][ T4406] ? netlink_getsockopt+0x540/0x540 [ 74.145271][ T4406] ? aa_sock_msg_perm+0x94/0x150 [ 74.150200][ T4406] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 74.155476][ T4406] ? security_socket_sendmsg+0x7c/0xa0 [ 74.160932][ T4406] ? netlink_getsockopt+0x540/0x540 [ 74.166123][ T4406] ____sys_sendmsg+0x59b/0x970 [ 74.170901][ T4406] ? __sys_sendmsg_sock+0x30/0x30 [ 74.176007][ T4406] ? __import_iovec+0x315/0x500 [ 74.180851][ T4406] ? import_iovec+0x6f/0xa0 [ 74.185350][ T4406] ___sys_sendmsg+0x21c/0x290 [ 74.190044][ T4406] ? __sys_sendmsg+0x270/0x270 [ 74.194890][ T4406] ? memset+0x1e/0x40 [ 74.198867][ T4406] ? futex_wake+0x3dc/0x4b0 [ 74.203381][ T4406] ? lockdep_softirqs_off+0x420/0x420 [ 74.208792][ T4406] ? __ia32_sys_get_robust_list+0x80/0x80 [ 74.214548][ T4406] ? __fdget+0x146/0x200 [ 74.218934][ T4406] __se_sys_sendmsg+0x19e/0x270 [ 74.223795][ T4406] ? __se_sys_futex+0x14a/0x440 [ 74.228657][ T4406] ? __x64_sys_sendmsg+0x80/0x80 [ 74.233600][ T4406] ? lockdep_hardirqs_on+0x94/0x140 [ 74.238862][ T4406] do_syscall_64+0x4c/0xa0 [ 74.243284][ T4406] ? clear_bhb_loop+0x60/0xb0 [ 74.247958][ T4406] ? clear_bhb_loop+0x60/0xb0 [ 74.252628][ T4406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.258522][ T4406] RIP: 0033:0x7ffa05f8e929 [ 74.262929][ T4406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.282540][ T4406] RSP: 002b:00007ffe3830e1d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.291579][ T4406] RAX: ffffffffffffffda RBX: 00007ffa061b5fa0 RCX: 00007ffa05f8e929 [ 74.299551][ T4406] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 74.307518][ T4406] RBP: 00007ffa06010b39 R08: 0000000000000000 R09: 0000000000000000 [ 74.315480][ T4406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.323470][ T4406] R13: 00007ffa061b5fa0 R14: 00007ffa061b5fa0 R15: 0000000000000003 [ 74.331476][ T4406] [ 74.334799][ T4406] Kernel Offset: disabled [ 74.339350][ T4406] Rebooting in 86400 seconds..