Warning: Permanently added '[localhost]:25832' (ED25519) to the list of known hosts. 2026/02/05 14:35:01 parsed 1 programs syzkaller login: [ 65.949761][ T5833] cgroup: Unknown subsys name 'net' [ 66.095724][ T5833] cgroup: Unknown subsys name 'cpuset' [ 66.099418][ T5833] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.149449][ T5833] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.641573][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.165723][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.168500][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.170853][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.174337][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.177116][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.269134][ T5892] chnl_net:caif_netlink_parms(): no params data found [ 72.365257][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.368707][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.371312][ T5892] bridge_slave_0: entered allmulticast mode [ 72.374584][ T5892] bridge_slave_0: entered promiscuous mode [ 72.379830][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.383179][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.385837][ T5892] bridge_slave_1: entered allmulticast mode [ 72.389109][ T5892] bridge_slave_1: entered promiscuous mode [ 72.409671][ T5892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.414447][ T5892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.436240][ T5892] team0: Port device team_slave_0 added [ 72.439460][ T5892] team0: Port device team_slave_1 added [ 72.456999][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.459004][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.467072][ T5892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.472271][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.474415][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.482691][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.519823][ T5892] hsr_slave_0: entered promiscuous mode [ 72.522868][ T5892] hsr_slave_1: entered promiscuous mode [ 72.636303][ T5892] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.644862][ T5892] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.650898][ T5892] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.657341][ T5892] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.725682][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.745079][ T5892] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.751834][ T3855] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.754779][ T3855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.769719][ T3855] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.772646][ T3855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.913514][ T5892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.949823][ T5892] veth0_vlan: entered promiscuous mode [ 72.955816][ T5892] veth1_vlan: entered promiscuous mode [ 72.975441][ T5892] veth0_macvtap: entered promiscuous mode [ 72.980155][ T5892] veth1_macvtap: entered promiscuous mode [ 72.990766][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.997649][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.005742][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.010401][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.016995][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.020766][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.138647][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.178378][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.245395][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.299344][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.526714][ T4905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.529332][ T4905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.561388][ T4905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.567092][ T4905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/05 14:35:12 executed programs: 0 [ 74.400282][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.404516][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.407550][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.411103][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.415963][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.588422][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 74.700896][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.703762][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.706482][ T5939] bridge_slave_0: entered allmulticast mode [ 74.709950][ T5939] bridge_slave_0: entered promiscuous mode [ 74.716326][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.719087][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.721851][ T5939] bridge_slave_1: entered allmulticast mode [ 74.725545][ T5939] bridge_slave_1: entered promiscuous mode [ 74.758724][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.765163][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.794703][ T5939] team0: Port device team_slave_0 added [ 74.800162][ T5939] team0: Port device team_slave_1 added [ 74.826456][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.828929][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.837982][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.844017][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.846266][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.855110][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.895371][ T5939] hsr_slave_0: entered promiscuous mode [ 74.898979][ T5939] hsr_slave_1: entered promiscuous mode [ 74.901477][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 74.903747][ T5939] Cannot create hsr debugfs directory [ 76.508608][ T56] Bluetooth: hci0: command tx timeout [ 76.531381][ T13] bridge_slave_1: left allmulticast mode [ 76.533722][ T13] bridge_slave_1: left promiscuous mode [ 76.536420][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.550093][ T13] bridge_slave_0: left allmulticast mode [ 76.552422][ T13] bridge_slave_0: left promiscuous mode [ 76.554586][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.587335][ T1366] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.589816][ T1366] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.815932][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.822448][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.827065][ T13] bond0 (unregistering): Released all slaves [ 76.910415][ T13] hsr_slave_0: left promiscuous mode [ 76.913292][ T13] hsr_slave_1: left promiscuous mode [ 76.915820][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.918591][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.921995][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.928616][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.943248][ T13] veth1_macvtap: left promiscuous mode [ 76.945467][ T13] veth0_macvtap: left promiscuous mode [ 76.947434][ T13] veth1_vlan: left promiscuous mode [ 76.950701][ T13] veth0_vlan: left promiscuous mode [ 77.246171][ T13] team0 (unregistering): Port device team_slave_1 removed [ 77.269146][ T13] team0 (unregistering): Port device team_slave_0 removed [ 77.688987][ T5939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.702425][ T5939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.706931][ T5939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.716276][ T5939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.808064][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.819136][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.835053][ T3855] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.837083][ T3855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.843927][ T3855] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.846014][ T3855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.123989][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.198749][ T5939] veth0_vlan: entered promiscuous mode [ 78.205292][ T5939] veth1_vlan: entered promiscuous mode [ 78.222633][ T5939] veth0_macvtap: entered promiscuous mode [ 78.227453][ T5939] veth1_macvtap: entered promiscuous mode [ 78.249100][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.276084][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.284020][ T5975] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.288031][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.301450][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.307210][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.349234][ T3898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.351823][ T3898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.371651][ T3898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.374941][ T3898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.406392][ T5978] ------------[ cut here ]------------ [ 78.408015][ T5978] (skb->_skb_refdst & ~(1UL)) && !(skb->_skb_refdst & 1UL) [ 78.408023][ T5978] WARNING: ./include/linux/skbuff.h:1171 at skb_dst_set+0xfd/0x140, CPU#1: syz.0.17/5978 [ 78.413233][ T5978] Modules linked in: [ 78.414401][ T5978] CPU: 1 UID: 0 PID: 5978 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 78.416942][ T5978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 78.419808][ T5978] RIP: 0010:skb_dst_set+0xfd/0x140 [ 78.421285][ T5978] Code: 2d 00 00 74 08 4c 89 f7 e8 80 13 98 f8 49 89 1e 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 64 5c 30 f8 90 <0f> 0b 90 e9 6d ff ff ff 44 89 e1 80 e1 07 38 c1 7c 8f be 04 00 00 [ 78.427377][ T5978] RSP: 0018:ffffc90005367b58 EFLAGS: 00010293 [ 78.429279][ T5978] RAX: ffffffff89923bbc RBX: dffffc0000000001 RCX: ffff8881037d8000 [ 78.431849][ T5978] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.434506][ T5978] RBP: 1ffff1102edaad5b R08: ffffffff8fced777 R09: 1ffffffff1f9daee [ 78.436966][ T5978] R10: dffffc0000000000 R11: ffffffff817422b0 R12: 0000000000000000 [ 78.439560][ T5978] R13: ffff888176d56b01 R14: ffff888176d56ad8 R15: ffff888176d56a80 [ 78.442262][ T5978] FS: 0000555564e8a500(0000) GS:ffff8882a9928000(0000) knlGS:0000000000000000 [ 78.445076][ T5978] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.447298][ T5978] CR2: 0000001b2fe63fff CR3: 000000016852c000 CR4: 00000000000006f0 [ 78.450289][ T5978] Call Trace: [ 78.451335][ T5978] [ 78.452587][ T5978] bpf_prog_test_run_skb+0xe46/0x1ea0 [ 78.454574][ T5978] ? __might_fault+0xaf/0x130 [ 78.456207][ T5978] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 78.458194][ T5978] bpf_prog_test_run+0x2c7/0x340 [ 78.459950][ T5978] __sys_bpf+0x643/0x950 [ 78.461468][ T5978] ? __pfx___sys_bpf+0x10/0x10 [ 78.463257][ T5978] ? __pfx___se_sys_futex+0x10/0x10 [ 78.464962][ T5978] __x64_sys_bpf+0x7c/0x90 [ 78.466587][ T5978] do_syscall_64+0xe2/0xf80 [ 78.468168][ T5978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.470026][ T5978] ? trace_irq_disable+0x37/0x100 [ 78.471659][ T5978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.473409][ T5978] RIP: 0033:0x7f51a119acb9 [ 78.474671][ T5978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.480311][ T5978] RSP: 002b:00007fff3a40e428 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.483029][ T5978] RAX: ffffffffffffffda RBX: 00007f51a1415fa0 RCX: 00007f51a119acb9 [ 78.485678][ T5978] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 78.488209][ T5978] RBP: 00007f51a1208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 78.490794][ T5978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.493449][ T5978] R13: 00007f51a1415fac R14: 00007f51a1415fa0 R15: 00007f51a1415fa0 [ 78.496099][ T5978] [ 78.497479][ T5978] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 78.499891][ T5978] CPU: 1 UID: 0 PID: 5978 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 78.502844][ T5978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 78.506469][ T5978] Call Trace: [ 78.507638][ T5978] [ 78.508590][ T5978] vpanic+0x1e0/0x670 [ 78.509872][ T5978] panic+0xc5/0xd0 [ 78.511195][ T5978] ? __pfx_panic+0x10/0x10 [ 78.512569][ T5978] __warn+0x315/0x4a0 [ 78.513877][ T5978] ? skb_dst_set+0xfd/0x140 [ 78.515200][ T5978] ? skb_dst_set+0xfd/0x140 [ 78.516616][ T5978] __report_bug+0x29a/0x540 [ 78.518118][ T5978] ? preempt_count_add+0x91/0x190 [ 78.519772][ T5978] ? skb_dst_set+0xfd/0x140 [ 78.521083][ T5978] ? __pfx___report_bug+0x10/0x10 [ 78.522539][ T5978] ? skb_dst_set+0xfd/0x140 [ 78.523813][ T5978] report_bug+0x16a/0x220 [ 78.525038][ T5978] ? skb_dst_set+0xfd/0x140 [ 78.526471][ T5978] ? skb_dst_set+0xff/0x140 [ 78.527925][ T5978] handle_bug+0x98/0x200 [ 78.529363][ T5978] exc_invalid_op+0x1a/0x50 [ 78.530799][ T5978] asm_exc_invalid_op+0x1a/0x20 [ 78.532213][ T5978] RIP: 0010:skb_dst_set+0xfd/0x140 [ 78.533694][ T5978] Code: 2d 00 00 74 08 4c 89 f7 e8 80 13 98 f8 49 89 1e 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 64 5c 30 f8 90 <0f> 0b 90 e9 6d ff ff ff 44 89 e1 80 e1 07 38 c1 7c 8f be 04 00 00 [ 78.539562][ T5978] RSP: 0018:ffffc90005367b58 EFLAGS: 00010293 [ 78.541657][ T5978] RAX: ffffffff89923bbc RBX: dffffc0000000001 RCX: ffff8881037d8000 [ 78.544200][ T5978] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.546627][ T5978] RBP: 1ffff1102edaad5b R08: ffffffff8fced777 R09: 1ffffffff1f9daee [ 78.548857][ T5978] R10: dffffc0000000000 R11: ffffffff817422b0 R12: 0000000000000000 [ 78.551153][ T5978] R13: ffff888176d56b01 R14: ffff888176d56ad8 R15: ffff888176d56a80 [ 78.553449][ T5978] ? __pfx_kvm_clock_get_cycles+0x10/0x10 [ 78.555082][ T5978] ? skb_dst_set+0xfc/0x140 [ 78.556518][ T5978] ? skb_dst_set+0xfc/0x140 [ 78.557821][ T5978] bpf_prog_test_run_skb+0xe46/0x1ea0 [ 78.559368][ T5978] ? __might_fault+0xaf/0x130 [ 78.560809][ T5978] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 78.562761][ T5978] bpf_prog_test_run+0x2c7/0x340 [ 78.564443][ T5978] __sys_bpf+0x643/0x950 [ 78.565772][ T5978] ? __pfx___sys_bpf+0x10/0x10 [ 78.567112][ T5978] ? __pfx___se_sys_futex+0x10/0x10 [ 78.568629][ T5978] __x64_sys_bpf+0x7c/0x90 [ 78.570014][ T5978] do_syscall_64+0xe2/0xf80 [ 78.571379][ T5978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.573082][ T5978] ? trace_irq_disable+0x37/0x100 [ 78.574538][ T5978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.576186][ T5978] RIP: 0033:0x7f51a119acb9 [ 78.577442][ T5978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.582904][ T5978] RSP: 002b:00007fff3a40e428 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.585237][ T5978] RAX: ffffffffffffffda RBX: 00007f51a1415fa0 RCX: 00007f51a119acb9 [ 78.587441][ T5978] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 78.589883][ T5978] RBP: 00007f51a1208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 78.592407][ T5978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.594847][ T5978] R13: 00007f51a1415fac R14: 00007f51a1415fa0 R15: 00007f51a1415fa0 [ 78.597081][ T5978] [ 78.598621][ T5978] Kernel Offset: disabled [ 78.600012][ T5978] Rebooting in 86400 seconds..