Warning: Permanently added '[localhost]:18719' (ED25519) to the list of known hosts. 2025/12/05 21:49:21 parsed 1 programs syzkaller login: [ 61.998723][ T5846] cgroup: Unknown subsys name 'net' [ 62.126170][ T5846] cgroup: Unknown subsys name 'cpuset' [ 62.130511][ T5846] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.427206][ T5846] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.833268][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.106027][ T5891] chnl_net:caif_netlink_parms(): no params data found [ 67.190681][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.194184][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.196869][ T5891] bridge_slave_0: entered allmulticast mode [ 67.199801][ T5891] bridge_slave_0: entered promiscuous mode [ 67.205097][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.207735][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.210153][ T5891] bridge_slave_1: entered allmulticast mode [ 67.213353][ T5891] bridge_slave_1: entered promiscuous mode [ 67.230927][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.237151][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.253713][ T5891] team0: Port device team_slave_0 added [ 67.273154][ T5891] team0: Port device team_slave_1 added [ 67.288431][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.290649][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.298914][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.304119][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.306298][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.314298][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.344184][ T5891] hsr_slave_0: entered promiscuous mode [ 67.346576][ T5891] hsr_slave_1: entered promiscuous mode [ 67.451507][ T5891] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.458570][ T5891] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.463854][ T5891] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.468611][ T5891] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.490890][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.493288][ T5891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.496457][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.498742][ T5891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.542742][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.556781][ T4597] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.560178][ T4597] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.571549][ T5891] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.579114][ T4597] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.581678][ T4597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.588392][ T4597] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.591085][ T4597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.694248][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.727325][ T5891] veth0_vlan: entered promiscuous mode [ 67.733246][ T5891] veth1_vlan: entered promiscuous mode [ 67.753848][ T5891] veth0_macvtap: entered promiscuous mode [ 67.758569][ T5891] veth1_macvtap: entered promiscuous mode [ 67.769525][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.777698][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.785642][ T5898] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.789771][ T5898] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.794360][ T5898] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.800471][ T5898] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.873464][ T5891] syz-executor (5891) used greatest stack depth: 19776 bytes left [ 67.895699][ T5898] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.964632][ T5898] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.031302][ T5898] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.090172][ T5898] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.295252][ T57] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.298309][ T57] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.301335][ T57] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.307293][ T57] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.310119][ T57] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.539245][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.541854][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.566673][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.569509][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/05 21:49:30 executed programs: 0 [ 68.831502][ T5224] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.834980][ T5224] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.837678][ T5224] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.840548][ T5224] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.845292][ T5224] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.953687][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 69.001789][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.004632][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.007215][ T5953] bridge_slave_0: entered allmulticast mode [ 69.010069][ T5953] bridge_slave_0: entered promiscuous mode [ 69.014439][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.016835][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.019461][ T5953] bridge_slave_1: entered allmulticast mode [ 69.022221][ T5953] bridge_slave_1: entered promiscuous mode [ 69.046519][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.051359][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.072101][ T5953] team0: Port device team_slave_0 added [ 69.076481][ T5953] team0: Port device team_slave_1 added [ 69.094534][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.096790][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.105464][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.110006][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.112539][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.121116][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.149395][ T5953] hsr_slave_0: entered promiscuous mode [ 69.151741][ T5953] hsr_slave_1: entered promiscuous mode [ 69.154134][ T5953] debugfs: 'hsr0' already exists in 'hsr' [ 69.155973][ T5953] Cannot create hsr debugfs directory [ 70.914366][ T5224] Bluetooth: hci0: command tx timeout [ 71.072626][ T5898] bridge_slave_1: left allmulticast mode [ 71.081174][ T5898] bridge_slave_1: left promiscuous mode [ 71.085528][ T5898] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.095368][ T5898] bridge_slave_0: left allmulticast mode [ 71.097617][ T5898] bridge_slave_0: left promiscuous mode [ 71.099986][ T5898] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.304541][ T5898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.309074][ T5898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.318656][ T5898] bond0 (unregistering): Released all slaves [ 71.451068][ T5898] hsr_slave_0: left promiscuous mode [ 71.458740][ T5898] hsr_slave_1: left promiscuous mode [ 71.461731][ T5898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.465312][ T5898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.469256][ T5898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.472726][ T5898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.489240][ T5898] veth1_macvtap: left promiscuous mode [ 71.491697][ T5898] veth0_macvtap: left promiscuous mode [ 71.494275][ T5898] veth1_vlan: left promiscuous mode [ 71.496776][ T5898] veth0_vlan: left promiscuous mode [ 71.799162][ T5898] team0 (unregistering): Port device team_slave_1 removed [ 71.819684][ T5898] team0 (unregistering): Port device team_slave_0 removed [ 72.257474][ T5953] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.270308][ T5953] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.279308][ T5953] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.293214][ T5953] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.374947][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.560017][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.579746][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.582763][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.589040][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.591920][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.835217][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.890955][ T5953] veth0_vlan: entered promiscuous mode [ 72.897660][ T5953] veth1_vlan: entered promiscuous mode [ 72.923525][ T5953] veth0_macvtap: entered promiscuous mode [ 72.928345][ T5953] veth1_macvtap: entered promiscuous mode [ 72.938382][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.946156][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.956893][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.980163][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.988014][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.990933][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.994134][ T5224] Bluetooth: hci0: command tx timeout [ 73.036775][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.039405][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.066163][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.068793][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.110745][ T5994] loop0: detected capacity change from 0 to 1024 SYZFAIL: failed to recv rpc [ 73.144046][ T5953] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000048: 0000 [#1] SMP KASAN PTI [ 73.148836][ T5953] KASAN: null-ptr-deref in range [0x0000000000000240-0x0000000000000247] [ 73.152186][ T5953] CPU: 0 UID: 0 PID: 5953 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 73.155913][ T5953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 73.159883][ T5953] RIP: 0010:timer_is_static_object+0x26/0x80 [ 73.162140][ T5953] Code: 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 00 fc ff df e8 95 e8 12 00 4c 8d 73 08 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 8b e0 78 00 49 83 3e 00 74 09 e8 [ 73.169194][ T5953] RSP: 0018:ffffc900037879a8 EFLAGS: 00010006 [ 73.171183][ T5953] RAX: 0000000000000048 RBX: 0000000000000238 RCX: ffff8881761e9d40 [ 73.173617][ T5953] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000238 [ 73.175975][ T5953] RBP: ffffffff99a2bcc0 R08: 0000000000000003 R09: 0000000000000004 [ 73.178338][ T5953] R10: dffffc0000000000 R11: ffffffff81ae62d0 R12: ffffffff8b6d2550 [ 73.180885][ T5953] R13: fffffffffffffffe R14: 0000000000000240 R15: dffffc0000000000 [ 73.183440][ T5953] FS: 00005555838ab500(0000) GS:ffff88818ea8e000(0000) knlGS:0000000000000000 [ 73.186840][ T5953] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.189355][ T5953] CR2: 000000c000049018 CR3: 0000000175fb6000 CR4: 00000000000006f0 [ 73.192379][ T5953] Call Trace: [ 73.193698][ T5953] [ 73.194848][ T5953] debug_object_assert_init+0x16f/0x380 [ 73.196966][ T5953] __timer_delete+0x31/0x390 [ 73.198707][ T5953] ? rcu_is_watching+0x15/0xb0 [ 73.200493][ T5953] work_grab_pending+0x121/0x990 [ 73.202394][ T5953] ? __pfx_work_grab_pending+0x10/0x10 [ 73.204452][ T5953] ? do_raw_spin_unlock+0x4d/0x240 [ 73.206372][ T5953] ? hook_sb_delete+0xbc3/0xd00 [ 73.208260][ T5953] __cancel_work+0x85/0x2c0 [ 73.210042][ T5953] ? hook_sb_delete+0x213/0xd00 [ 73.211966][ T5953] ? __pfx___cancel_work+0x10/0x10 [ 73.214030][ T5953] ? __pfx_fsnotify_sb_delete+0x10/0x10 [ 73.216242][ T5953] __cancel_work_sync+0x1f/0x110 [ 73.218272][ T5953] hfsplus_put_super+0x56/0x3e0 [ 73.220197][ T5953] ? __pfx_hfsplus_put_super+0x10/0x10 [ 73.222367][ T5953] generic_shutdown_super+0x135/0x2c0 [ 73.224551][ T5953] kill_block_super+0x44/0x90 [ 73.226442][ T5953] deactivate_locked_super+0xbc/0x130 [ 73.228659][ T5953] cleanup_mnt+0x425/0x4c0 [ 73.230497][ T5953] ? lockdep_hardirqs_on+0x98/0x140 [ 73.232558][ T5953] task_work_run+0x1d4/0x260 [ 73.234445][ T5953] ? __pfx_task_work_run+0x10/0x10 [ 73.236514][ T5953] ? exit_to_user_mode_loop+0x55/0x4f0 [ 73.238722][ T5953] exit_to_user_mode_loop+0xff/0x4f0 [ 73.240918][ T5953] ? rcu_is_watching+0x15/0xb0 [ 73.242969][ T5953] do_syscall_64+0x2e3/0xf80 [ 73.244986][ T5953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.247406][ T5953] ? exc_page_fault+0xab/0x100 [ 73.249381][ T5953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.251707][ T5953] RIP: 0033:0x7f1a9a790af7 [ 73.253497][ T5953] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 73.261024][ T5953] RSP: 002b:00007ffdfbc83a18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 73.264196][ T5953] RAX: 0000000000000000 RBX: 00007f1a9a7ee72f RCX: 00007f1a9a790af7 [ 73.267283][ T5953] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdfbc83ad0 [ 73.270329][ T5953] RBP: 00007ffdfbc83ad0 R08: 0000000000000000 R09: 0000000000000000 [ 73.273675][ T5953] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdfbc84b60 [ 73.276789][ T5953] R13: 00007f1a9a7ee72f R14: 0000000000011d0f R15: 00007ffdfbc84ba0 [ 73.279841][ T5953] [ 73.281114][ T5953] Modules linked in: [ 73.282681][ T5953] ---[ end trace 0000000000000000 ]--- [ 73.284813][ T5953] RIP: 0010:timer_is_static_object+0x26/0x80 [ 73.287270][ T5953] Code: 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 00 fc ff df e8 95 e8 12 00 4c 8d 73 08 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 8b e0 78 00 49 83 3e 00 74 09 e8 [ 73.294876][ T5953] RSP: 0018:ffffc900037879a8 EFLAGS: 00010006 [ 73.297222][ T5953] RAX: 0000000000000048 RBX: 0000000000000238 RCX: ffff8881761e9d40 [ 73.300374][ T5953] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000238 [ 73.303552][ T5953] RBP: ffffffff99a2bcc0 R08: 0000000000000003 R09: 0000000000000004 [ 73.306782][ T5953] R10: dffffc0000000000 R11: ffffffff81ae62d0 R12: ffffffff8b6d2550 [ 73.310001][ T5953] R13: fffffffffffffffe R14: 0000000000000240 R15: dffffc0000000000 [ 73.313094][ T5953] FS: 00005555838ab500(0000) GS:ffff88818ea8e000(0000) knlGS:0000000000000000 [ 73.316649][ T5953] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.319335][ T5953] CR2: 000000c000049018 CR3: 0000000175fb6000 CR4: 00000000000006f0 [ 73.322652][ T5953] Kernel panic - not syncing: Fatal exception [ 73.325965][ T5953] Kernel Offset: disabled [ 73.327783][ T5953] Rebooting in 86400 seconds..