Warning: Permanently added '[localhost]:28370' (ED25519) to the list of known hosts. 2026/02/28 19:59:39 parsed 1 programs syzkaller login: [ 61.882044][ T5811] cgroup: Unknown subsys name 'net' [ 62.016697][ T5811] cgroup: Unknown subsys name 'cpuset' [ 62.022218][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.355451][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.195024][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.304254][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.308370][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.311839][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.320915][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.325498][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.034770][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 67.141763][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.145559][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.148572][ T5854] bridge_slave_0: entered allmulticast mode [ 67.152600][ T5854] bridge_slave_0: entered promiscuous mode [ 67.158759][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.162105][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.165490][ T5854] bridge_slave_1: entered allmulticast mode [ 67.169267][ T5854] bridge_slave_1: entered promiscuous mode [ 67.195579][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.200178][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.218410][ T5854] team0: Port device team_slave_0 added [ 67.221728][ T5854] team0: Port device team_slave_1 added [ 67.238169][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.240583][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.249497][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.255328][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.257830][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.268522][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.301656][ T5854] hsr_slave_0: entered promiscuous mode [ 67.305746][ T5854] hsr_slave_1: entered promiscuous mode [ 67.424305][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.429763][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.434316][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.438356][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.455566][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.457961][ T5854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.460597][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.462977][ T5854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.492322][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.501748][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.506998][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.513917][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.520245][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.523219][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.531215][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.534314][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.636225][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.659743][ T5854] veth0_vlan: entered promiscuous mode [ 67.667399][ T5854] veth1_vlan: entered promiscuous mode [ 67.684282][ T5854] veth0_macvtap: entered promiscuous mode [ 67.688410][ T5854] veth1_macvtap: entered promiscuous mode [ 67.699478][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.707279][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.714873][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.718857][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.723731][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.727365][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.844387][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.954309][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.046295][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.136201][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.087805][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.091020][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.125725][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.128748][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/28 19:59:48 executed programs: 0 [ 69.514646][ T5195] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.518027][ T5195] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.520952][ T5195] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.526112][ T5195] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.529391][ T5195] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.665543][ T5922] chnl_net:caif_netlink_parms(): no params data found [ 69.709146][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.711532][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.714519][ T5922] bridge_slave_0: entered allmulticast mode [ 69.717726][ T5922] bridge_slave_0: entered promiscuous mode [ 69.720975][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.723616][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.726467][ T5922] bridge_slave_1: entered allmulticast mode [ 69.729848][ T5922] bridge_slave_1: entered promiscuous mode [ 69.748007][ T5922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.753634][ T5922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.770474][ T5922] team0: Port device team_slave_0 added [ 69.774457][ T5922] team0: Port device team_slave_1 added [ 69.789222][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.792019][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.802115][ T5922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.807192][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.809457][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.817600][ T5922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.840882][ T5922] hsr_slave_0: entered promiscuous mode [ 69.843311][ T5922] hsr_slave_1: entered promiscuous mode [ 69.845459][ T5922] debugfs: 'hsr0' already exists in 'hsr' [ 69.847348][ T5922] Cannot create hsr debugfs directory [ 70.979346][ T12] bridge_slave_1: left allmulticast mode [ 70.981557][ T12] bridge_slave_1: left promiscuous mode [ 70.985581][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.991410][ T12] bridge_slave_0: left allmulticast mode [ 70.995646][ T12] bridge_slave_0: left promiscuous mode [ 70.998292][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.140636][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.146677][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.151494][ T12] bond0 (unregistering): Released all slaves [ 71.247782][ T12] hsr_slave_0: left promiscuous mode [ 71.250851][ T12] hsr_slave_1: left promiscuous mode [ 71.254346][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.257274][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.267343][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.270159][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.282368][ T12] veth1_macvtap: left promiscuous mode [ 71.285147][ T12] veth0_macvtap: left promiscuous mode [ 71.287708][ T12] veth1_vlan: left promiscuous mode [ 71.290003][ T12] veth0_vlan: left promiscuous mode [ 71.427207][ T12] team0 (unregistering): Port device team_slave_1 removed [ 71.436125][ T12] team0 (unregistering): Port device team_slave_0 removed [ 71.586411][ T5195] Bluetooth: hci0: command tx timeout [ 71.817802][ T5922] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.830380][ T5922] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.843914][ T5922] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.859845][ T5922] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.154955][ T5922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.166201][ T5922] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.177360][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.180001][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.189130][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.191630][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.368146][ T5922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.430252][ T5922] veth0_vlan: entered promiscuous mode [ 72.441949][ T5922] veth1_vlan: entered promiscuous mode [ 72.463657][ T5922] veth0_macvtap: entered promiscuous mode [ 72.469061][ T5922] veth1_macvtap: entered promiscuous mode [ 72.477849][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.486013][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.502210][ T5861] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.506205][ T5861] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.513792][ T5861] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.516789][ T5861] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.572934][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.575426][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.601932][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.606948][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.636796][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 72.646106][ T5971] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000012: 0000 [#1] SMP KASAN PTI [ 72.650974][ T5971] KASAN: null-ptr-deref in range [0x0000000000000090-0x0000000000000097] [ 72.654417][ T5971] CPU: 1 UID: 0 PID: 5971 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 72.658008][ T5971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 72.662107][ T5971] RIP: 0010:l2tp_eth_create+0x2cd/0xca0 [ 72.664306][ T5971] Code: 48 89 44 24 58 42 80 3c 28 00 74 08 48 89 df e8 b9 68 54 f7 48 89 5c 24 60 4c 8b 33 4d 8d a6 94 00 00 00 4c 89 e0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 35 08 00 00 45 8b 24 24 31 ff 44 89 e6 [ 72.672112][ T5971] RSP: 0018:ffffc900040c7160 EFLAGS: 00010207 [ 72.674639][ T5971] RAX: 0000000000000012 RBX: ffff888114d00020 RCX: 0000000000000000 [ 72.677873][ T5971] RDX: ffff888104f90000 RSI: 0000000000000028 RDI: 0000000000000000 [ 72.681089][ T5971] RBP: ffffc900040c7270 R08: 0000000000400dc0 R09: 00000000ffffffff [ 72.684280][ T5971] R10: dffffc0000000000 R11: fffffbfff2022f77 R12: 0000000000000094 [ 72.687267][ T5971] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888114d00000 [ 72.690150][ T5971] FS: 0000555574b08500(0000) GS:ffff8882a9467000(0000) knlGS:0000000000000000 [ 72.693373][ T5971] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.695636][ T5971] CR2: 000055a269259270 CR3: 0000000105770000 CR4: 00000000000006f0 [ 72.698373][ T5971] Call Trace: [ 72.699589][ T5971] [ 72.700634][ T5971] ? __local_bh_enable_ip+0xd0/0x130 [ 72.702847][ T5971] ? l2tp_tunnel_get+0x89/0x420 [ 72.704876][ T5971] ? __pfx_l2tp_eth_create+0x10/0x10 [ 72.707043][ T5971] l2tp_nl_cmd_session_create+0x766/0xc60 [ 72.709362][ T5971] ? rcu_is_watching+0x15/0xb0 [ 72.711283][ T5971] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 72.713725][ T5971] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 72.716187][ T5971] genl_family_rcv_msg_doit+0x22a/0x330 [ 72.718100][ T5971] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 72.719994][ T5971] ? bpf_lsm_capable+0x9/0x20 [ 72.721471][ T5971] ? security_capable+0x7e/0x2c0 [ 72.723058][ T5971] genl_rcv_msg+0x61c/0x7a0 [ 72.724718][ T5971] ? __pfx_genl_rcv_msg+0x10/0x10 [ 72.726844][ T5971] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 72.729408][ T5971] ? __lock_acquire+0x6b5/0x2cf0 [ 72.731464][ T5971] netlink_rcv_skb+0x232/0x4b0 [ 72.733044][ T5971] ? __pfx_genl_rcv_msg+0x10/0x10 [ 72.734926][ T5971] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 72.737034][ T5971] ? down_read+0x272/0x2e0 [ 72.738559][ T5971] ? genl_rcv+0xd/0x40 [ 72.739839][ T5971] genl_rcv+0x28/0x40 [ 72.741087][ T5971] netlink_unicast+0x80f/0x9b0 [ 72.742843][ T5971] ? __pfx_netlink_unicast+0x10/0x10 [ 72.745004][ T5971] ? netlink_sendmsg+0x650/0xb40 [ 72.746996][ T5971] ? skb_put+0x11b/0x210 [ 72.748735][ T5971] netlink_sendmsg+0x813/0xb40 [ 72.750691][ T5971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.752732][ T5971] ? aa_sock_msg_perm+0xf1/0x1b0 [ 72.754673][ T5971] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 72.756695][ T5971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.758780][ T5971] ____sys_sendmsg+0xa68/0xad0 [ 72.760612][ T5971] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.762687][ T5971] ? import_iovec+0x73/0xa0 [ 72.764420][ T5971] ___sys_sendmsg+0x2a5/0x360 [ 72.766246][ T5971] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.768267][ T5971] ? futex_hash_put+0x4b/0x60 [ 72.770172][ T5971] ? futex_wake+0x4ac/0x580 [ 72.771995][ T5971] ? __lock_acquire+0x6b5/0x2cf0 [ 72.773970][ T5971] ? file_init_path+0x434/0x590 [ 72.775878][ T5971] __x64_sys_sendmsg+0x1bd/0x2a0 [ 72.777880][ T5971] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 72.780037][ T5971] do_syscall_64+0x14d/0xf80 [ 72.781941][ T5971] ? trace_irq_disable+0x3b/0x150 [ 72.783967][ T5971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.786332][ T5971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.788699][ T5971] RIP: 0033:0x7f371079c799 [ 72.790545][ T5971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.798369][ T5971] RSP: 002b:00007fff7e0100f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.801822][ T5971] RAX: ffffffffffffffda RBX: 00007f3710a15fa0 RCX: 00007f371079c799 [ 72.805034][ T5971] RDX: 0000000020000034 RSI: 0000200000000140 RDI: 0000000000000005 [ 72.808227][ T5971] RBP: 00007f3710832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 72.811469][ T5971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.814650][ T5971] R13: 00007f3710a15fac R14: 00007f3710a15fa0 R15: 00007f3710a15fa0 [ 72.817453][ T5971] [ 72.818670][ T5971] Modules linked in: [ 72.820604][ T5971] ---[ end trace 0000000000000000 ]--- [ 72.832861][ T5971] RIP: 0010:l2tp_eth_create+0x2cd/0xca0 [ 72.834663][ T5971] Code: 48 89 44 24 58 42 80 3c 28 00 74 08 48 89 df e8 b9 68 54 f7 48 89 5c 24 60 4c 8b 33 4d 8d a6 94 00 00 00 4c 89 e0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 35 08 00 00 45 8b 24 24 31 ff 44 89 e6 [ 72.842206][ T5971] RSP: 0018:ffffc900040c7160 EFLAGS: 00010207 [ 72.845010][ T5971] RAX: 0000000000000012 RBX: ffff888114d00020 RCX: 0000000000000000 [ 72.847911][ T5971] RDX: ffff888104f90000 RSI: 0000000000000028 RDI: 0000000000000000 [ 72.851165][ T5971] RBP: ffffc900040c7270 R08: 0000000000400dc0 R09: 00000000ffffffff [ 72.854860][ T5971] R10: dffffc0000000000 R11: fffffbfff2022f77 R12: 0000000000000094 [ 72.858069][ T5971] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888114d00000 [ 72.861244][ T5971] FS: 0000555574b08500(0000) GS:ffff8882a9467000(0000) knlGS:0000000000000000 [ 72.867067][ T5971] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.869800][ T5971] CR2: 000055a269259270 CR3: 0000000105770000 CR4: 00000000000006f0 [ 72.873775][ T5971] Kernel panic - not syncing: Fatal exception [ 72.876960][ T5971] Kernel Offset: disabled [ 72.878769][ T5971] Rebooting in 86400 seconds..