Warning: Permanently added '[localhost]:49990' (ED25519) to the list of known hosts. 2026/02/18 05:44:25 parsed 1 programs syzkaller login: [ 62.876131][ T5816] cgroup: Unknown subsys name 'net' [ 62.960968][ T5816] cgroup: Unknown subsys name 'cpuset' [ 62.966045][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.210559][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.426301][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 66.503218][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.505973][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.508328][ T5825] bridge_slave_0: entered allmulticast mode [ 66.510940][ T5825] bridge_slave_0: entered promiscuous mode [ 66.514479][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.516683][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.519480][ T5825] bridge_slave_1: entered allmulticast mode [ 66.522318][ T5825] bridge_slave_1: entered promiscuous mode [ 66.537901][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.542159][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.557968][ T5825] team0: Port device team_slave_0 added [ 66.560794][ T5825] team0: Port device team_slave_1 added [ 66.573853][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.575928][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.583521][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.588737][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.590832][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.598753][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.622345][ T5825] hsr_slave_0: entered promiscuous mode [ 66.624777][ T5825] hsr_slave_1: entered promiscuous mode [ 66.711210][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.716683][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.721125][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.724864][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.742997][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.745392][ T5825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.748120][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.750446][ T5825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.784102][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.793451][ T3580] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.796070][ T3580] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.803036][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.810259][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.812476][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.818405][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.820640][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.910893][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.934689][ T5825] veth0_vlan: entered promiscuous mode [ 66.941092][ T5825] veth1_vlan: entered promiscuous mode [ 66.956554][ T5825] veth0_macvtap: entered promiscuous mode [ 66.961702][ T5825] veth1_macvtap: entered promiscuous mode [ 66.972275][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.980066][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.986810][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.992203][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.995859][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.999577][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.038255][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.122252][ T5840] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.156969][ T5840] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.233058][ T5840] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.319574][ T5840] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.052829][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.055632][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.060929][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.064119][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.066742][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.996313][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.000814][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.027919][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.030897][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/18 05:44:34 executed programs: 0 [ 69.530916][ T5198] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.534770][ T5198] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.538342][ T5198] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.541676][ T5198] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.544793][ T5198] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.674315][ T5923] chnl_net:caif_netlink_parms(): no params data found [ 69.741963][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.744743][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.748290][ T5923] bridge_slave_0: entered allmulticast mode [ 69.751739][ T5923] bridge_slave_0: entered promiscuous mode [ 69.756197][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.758978][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.761866][ T5923] bridge_slave_1: entered allmulticast mode [ 69.765219][ T5923] bridge_slave_1: entered promiscuous mode [ 69.790400][ T5923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.796206][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.820343][ T5923] team0: Port device team_slave_0 added [ 69.824604][ T5923] team0: Port device team_slave_1 added [ 69.845821][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.848534][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.857963][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.863512][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.866060][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.875764][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.911021][ T5923] hsr_slave_0: entered promiscuous mode [ 69.913831][ T5923] hsr_slave_1: entered promiscuous mode [ 69.916377][ T5923] debugfs: 'hsr0' already exists in 'hsr' [ 69.918753][ T5923] Cannot create hsr debugfs directory [ 70.041884][ T5840] bridge_slave_1: left allmulticast mode [ 70.044160][ T5840] bridge_slave_1: left promiscuous mode [ 70.046997][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.054508][ T5840] bridge_slave_0: left allmulticast mode [ 70.056631][ T5840] bridge_slave_0: left promiscuous mode [ 70.060442][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.230991][ T5840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.235816][ T5840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.240069][ T5840] bond0 (unregistering): Released all slaves [ 70.323783][ T5840] hsr_slave_0: left promiscuous mode [ 70.326499][ T5840] hsr_slave_1: left promiscuous mode [ 70.329630][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.332506][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.336370][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.338738][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.345083][ T5840] veth1_macvtap: left promiscuous mode [ 70.347049][ T5840] veth0_macvtap: left promiscuous mode [ 70.349919][ T5840] veth1_vlan: left promiscuous mode [ 70.352292][ T5840] veth0_vlan: left promiscuous mode [ 70.539144][ T5840] team0 (unregistering): Port device team_slave_1 removed [ 70.560476][ T5840] team0 (unregistering): Port device team_slave_0 removed [ 70.900307][ T5923] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.906171][ T5923] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.913026][ T5923] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.920282][ T5923] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.994203][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.533476][ T5923] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.544536][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.547647][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.556616][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.559499][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.587608][ T5198] Bluetooth: hci0: command tx timeout [ 71.740623][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.831369][ T5923] veth0_vlan: entered promiscuous mode [ 71.839973][ T5923] veth1_vlan: entered promiscuous mode [ 71.855015][ T5923] veth0_macvtap: entered promiscuous mode [ 71.862456][ T5923] veth1_macvtap: entered promiscuous mode [ 71.895497][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.920715][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.931203][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.934642][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.938871][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.942502][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.062983][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.066144][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.095848][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.101768][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.144285][ T5967] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 72.148974][ T5967] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 72.152192][ T5967] CPU: 1 UID: 0 PID: 5967 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 72.155721][ T5967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 72.159632][ T5967] RIP: 0010:__list_del_entry_valid_or_report+0x25/0x190 [ 72.162362][ T5967] Code: 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 df 8c 77 fd 4c 8b 7b 08 48 89 d8 48 c1 e8 [ 72.169821][ T5967] RSP: 0018:ffffc900040a7b68 EFLAGS: 00010202 [ 72.172227][ T5967] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 1ffff11035ee2732 [ 72.175318][ T5967] RDX: 1ffff11035ee2730 RSI: 00000000ffffffff RDI: 0000000000000008 [ 72.178431][ T5967] RBP: dffffc0000000000 R08: ffff8881af7139b7 R09: 0000000000000000 [ 72.181584][ T5967] R10: ffff8881af7139a0 R11: ffffed1035ee2737 R12: ffff8881af713980 [ 72.184721][ T5967] R13: dffffc0000000000 R14: 00000000ffffffff R15: 0000000000000000 [ 72.187808][ T5967] FS: 0000555560587500(0000) GS:ffff8882a9466000(0000) knlGS:0000000000000000 [ 72.191246][ T5967] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.193885][ T5967] CR2: 0000200000001000 CR3: 0000000175cd2000 CR4: 00000000000006f0 [ 72.197022][ T5967] Call Trace: [ 72.198394][ T5967] [ 72.199610][ T5967] io_remove_buffers_legacy+0x139/0x310 [ 72.201834][ T5967] io_put_bl+0x62/0x120 [ 72.203511][ T5967] io_register_pbuf_ring+0x6c0/0x7d0 [ 72.205627][ T5967] ? __pfx_io_register_pbuf_ring+0x10/0x10 [ 72.207962][ T5967] ? __pfx___mutex_lock+0x10/0x10 [ 72.209976][ T5967] ? __fget_files+0x3a0/0x420 [ 72.211888][ T5967] ? __fget_files+0x2a/0x420 [ 72.213778][ T5967] ? io_is_uring_fops+0xd/0x50 [ 72.215658][ T5967] __se_sys_io_uring_register+0xc3e/0x19a0 [ 72.218014][ T5967] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 72.220539][ T5967] ? __pfx___se_sys_futex+0x10/0x10 [ 72.222693][ T5967] do_syscall_64+0x14d/0xf80 [ 72.224576][ T5967] ? trace_irq_disable+0x3b/0x150 [ 72.226599][ T5967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.229018][ T5967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.231331][ T5967] RIP: 0033:0x7f056859bf79 [ 72.233123][ T5967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.240750][ T5967] RSP: 002b:00007fffd8dcfaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 72.244081][ T5967] RAX: ffffffffffffffda RBX: 00007f0568815fa0 RCX: 00007f056859bf79 [ 72.247220][ T5967] RDX: 0000200000000040 RSI: 0000000000000016 RDI: 0000000000000004 [ 72.250448][ T5967] RBP: 00007f05686327e0 R08: 0000000000000000 R09: 0000000000000000 [ 72.253576][ T5967] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 72.256746][ T5967] R13: 00007f0568815fac R14: 00007f0568815fa0 R15: 00007f0568815fa0 [ 72.259827][ T5967] [ 72.261053][ T5967] Modules linked in: [ 72.263243][ T5967] ---[ end trace 0000000000000000 ]--- [ 72.270349][ T5967] RIP: 0010:__list_del_entry_valid_or_report+0x25/0x190 [ 72.274577][ T5967] Code: 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 df 8c 77 fd 4c 8b 7b 08 48 89 d8 48 c1 e8 [ 72.282877][ T5967] RSP: 0018:ffffc900040a7b68 EFLAGS: 00010202 [ 72.286188][ T5967] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 1ffff11035ee2732 [ 72.290604][ T5967] RDX: 1ffff11035ee2730 RSI: 00000000ffffffff RDI: 0000000000000008 [ 72.293921][ T5967] RBP: dffffc0000000000 R08: ffff8881af7139b7 R09: 0000000000000000 [ 72.298080][ T5967] R10: ffff8881af7139a0 R11: ffffed1035ee2737 R12: ffff8881af713980 [ 72.301584][ T5967] R13: dffffc0000000000 R14: 00000000ffffffff R15: 0000000000000000 [ 72.305100][ T5967] FS: 0000555560587500(0000) GS:ffff8882a9466000(0000) knlGS:0000000000000000 [ 72.309389][ T5967] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.312959][ T5967] CR2: 00007f25f1e17095 CR3: 0000000175cd2000 CR4: 00000000000006f0 [ 72.317297][ T5967] Kernel panic - not syncing: Fatal exception [ 72.320592][ T5967] Kernel Offset: disabled [ 72.322343][ T5967] Rebooting in 86400 seconds..