Warning: Permanently added '[localhost]:42534' (ED25519) to the list of known hosts. 2026/02/01 09:31:45 parsed 1 programs syzkaller login: [ 62.621131][ T5839] cgroup: Unknown subsys name 'net' [ 62.786884][ T5839] cgroup: Unknown subsys name 'cpuset' [ 62.792159][ T5839] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.084328][ T5839] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.338619][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.341660][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.377047][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.380193][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.423555][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.650805][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.655338][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.658636][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.662558][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.666364][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.071960][ T5913] chnl_net:caif_netlink_parms(): no params data found [ 69.180139][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.183636][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.186392][ T5913] bridge_slave_0: entered allmulticast mode [ 69.190149][ T5913] bridge_slave_0: entered promiscuous mode [ 69.197685][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.200726][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.203935][ T5913] bridge_slave_1: entered allmulticast mode [ 69.207713][ T5913] bridge_slave_1: entered promiscuous mode [ 69.237681][ T5913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.244149][ T5913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.270189][ T5913] team0: Port device team_slave_0 added [ 69.275306][ T5913] team0: Port device team_slave_1 added [ 69.299156][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.301892][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.312968][ T5913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.319077][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.321830][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.332621][ T5913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.370754][ T5913] hsr_slave_0: entered promiscuous mode [ 69.374147][ T5913] hsr_slave_1: entered promiscuous mode [ 69.525740][ T5913] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.534334][ T5913] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.540257][ T5913] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.546686][ T5913] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.574455][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.577349][ T5913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.580714][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.583545][ T5913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.637655][ T5913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.651433][ T2056] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.657491][ T2056] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.668592][ T5913] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.677113][ T2056] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.679840][ T2056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.688428][ T2056] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.691192][ T2056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.840270][ T5913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.877359][ T5913] veth0_vlan: entered promiscuous mode [ 69.888238][ T5913] veth1_vlan: entered promiscuous mode [ 69.913887][ T5913] veth0_macvtap: entered promiscuous mode [ 69.919623][ T5913] veth1_macvtap: entered promiscuous mode [ 69.934867][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.945223][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.957601][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.961525][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.966960][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.974325][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.098697][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.165045][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.237279][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.305247][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/02/01 09:31:55 executed programs: 0 [ 70.686041][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.689499][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.693306][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.696894][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.700069][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.847896][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 70.928527][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.931500][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.935456][ T5948] bridge_slave_0: entered allmulticast mode [ 70.939207][ T5948] bridge_slave_0: entered promiscuous mode [ 70.945174][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.948008][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.950874][ T5948] bridge_slave_1: entered allmulticast mode [ 70.954995][ T5948] bridge_slave_1: entered promiscuous mode [ 70.984343][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.990330][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.019140][ T5948] team0: Port device team_slave_0 added [ 71.024379][ T5948] team0: Port device team_slave_1 added [ 71.042350][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.044894][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.053197][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.058428][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.060538][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.069356][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.096738][ T5948] hsr_slave_0: entered promiscuous mode [ 71.098897][ T5948] hsr_slave_1: entered promiscuous mode [ 71.101002][ T5948] debugfs: 'hsr0' already exists in 'hsr' [ 71.103050][ T5948] Cannot create hsr debugfs directory [ 72.773645][ T5860] Bluetooth: hci0: command tx timeout [ 72.925981][ T12] bridge_slave_1: left allmulticast mode [ 72.927987][ T12] bridge_slave_1: left promiscuous mode [ 72.930370][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.937124][ T12] bridge_slave_0: left allmulticast mode [ 72.938890][ T12] bridge_slave_0: left promiscuous mode [ 72.940646][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.111660][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.116039][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.119566][ T12] bond0 (unregistering): Released all slaves [ 73.225109][ T12] hsr_slave_0: left promiscuous mode [ 73.227769][ T12] hsr_slave_1: left promiscuous mode [ 73.230490][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.236072][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.239714][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.243193][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.260206][ T12] veth1_macvtap: left promiscuous mode [ 73.262515][ T12] veth0_macvtap: left promiscuous mode [ 73.270665][ T12] veth1_vlan: left promiscuous mode [ 73.274193][ T12] veth0_vlan: left promiscuous mode [ 73.601902][ T12] team0 (unregistering): Port device team_slave_1 removed [ 73.618749][ T12] team0 (unregistering): Port device team_slave_0 removed [ 73.936628][ T5948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.941508][ T5948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.946562][ T5948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.951147][ T5948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.052361][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.076616][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.081281][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.083462][ T3619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.091201][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.093677][ T3619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.348997][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.383519][ T5948] veth0_vlan: entered promiscuous mode [ 74.390712][ T5948] veth1_vlan: entered promiscuous mode [ 74.426264][ T5948] veth0_macvtap: entered promiscuous mode [ 74.431552][ T5948] veth1_macvtap: entered promiscuous mode [ 74.444309][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.452405][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.462410][ T5862] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.466673][ T5862] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.470565][ T5862] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.474700][ T5862] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.531432][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.543188][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.566497][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.569402][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.614125][ T5991] loop0: detected capacity change from 0 to 512 [ 74.640494][ T5991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.645837][ T5991] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.650685][ T5991] /dev/loop0: Can't open blockdev [ 74.653814][ T5991] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 74.658226][ T5991] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 74.661421][ T5991] CPU: 1 UID: 0 PID: 5991 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 74.664931][ T5991] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 74.668701][ T5991] RIP: 0010:erofs_kill_sb+0x4c/0x190 [ 74.670495][ T5991] Code: 9f 38 06 00 00 48 89 dd 48 c1 ed 03 42 80 7c 2d 00 00 74 08 48 89 df e8 82 83 eb fd 4c 8b 33 4d 8d 66 10 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 65 83 eb fd 49 83 3c 24 00 74 0f [ 74.676789][ T5991] RSP: 0018:ffffc900039e7b58 EFLAGS: 00010202 [ 74.678794][ T5991] RAX: 0000000000000002 RBX: ffff88816ed88638 RCX: ffff88816c548000 [ 74.681555][ T5991] RDX: 0000000000000000 RSI: ffffffff8dad1d20 RDI: ffff88816ed88000 [ 74.684262][ T5991] RBP: 1ffff1102ddb10c7 R08: ffffffff8fcec177 R09: 1ffffffff1f9d82e [ 74.686827][ T5991] R10: dffffc0000000000 R11: ffffffff843ef960 R12: 0000000000000010 [ 74.689179][ T5991] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88816ed88000 [ 74.691590][ T5991] FS: 000055558ffb4500(0000) GS:ffff8882a9942000(0000) knlGS:0000000000000000 [ 74.694644][ T5991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.696656][ T5991] CR2: 0000001b30763fff CR3: 00000001127bc000 CR4: 00000000000006f0 [ 74.699018][ T5991] Call Trace: [ 74.700076][ T5991] [ 74.700926][ T5991] deactivate_locked_super+0xbc/0x130 [ 74.702750][ T5991] get_tree_bdev_flags+0x4b4/0x560 [ 74.704462][ T5991] ? __pfx_erofs_fc_fill_super+0x10/0x10 [ 74.706365][ T5991] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 74.708359][ T5991] vfs_get_tree+0x92/0x2a0 [ 74.709765][ T5991] do_new_mount+0x329/0xa50 [ 74.711236][ T5991] ? apparmor_capable+0x137/0x1a0 [ 74.712736][ T5991] ? __pfx_do_new_mount+0x10/0x10 [ 74.714408][ T5991] ? ns_capable+0x89/0xe0 [ 74.715738][ T5991] ? kmem_cache_free+0x195/0x610 [ 74.717305][ T5991] __se_sys_mount+0x31d/0x420 [ 74.718981][ T5991] ? __pfx___se_sys_mount+0x10/0x10 [ 74.720700][ T5991] ? do_syscall_64+0xb4/0xf80 [ 74.722433][ T5991] ? __x64_sys_mount+0x20/0xc0 [ 74.724070][ T5991] do_syscall_64+0xf0/0xf80 [ 74.725568][ T5991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.727605][ T5991] ? exc_page_fault+0xa7/0xf0 [ 74.729205][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.731070][ T5991] RIP: 0033:0x7f3a7139acb9 [ 74.732522][ T5991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.738287][ T5991] RSP: 002b:00007fff10bbdc58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 74.740940][ T5991] RAX: ffffffffffffffda RBX: 00007f3a71615fa0 RCX: 00007f3a7139acb9 [ 74.743676][ T5991] RDX: 0000200000000700 RSI: 00002000000006c0 RDI: 0000200000000640 [ 74.746390][ T5991] RBP: 00007f3a71408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 74.748832][ T5991] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 74.751406][ T5991] R13: 00007f3a71615fac R14: 00007f3a71615fa0 R15: 00007f3a71615fa0 [ 74.754039][ T5991] [ 74.754972][ T5991] Modules linked in: [ 74.756379][ T5991] ---[ end trace 0000000000000000 ]--- [ 74.760716][ T5991] RIP: 0010:erofs_kill_sb+0x4c/0x190 [ 74.762541][ T5991] Code: 9f 38 06 00 00 48 89 dd 48 c1 ed 03 42 80 7c 2d 00 00 74 08 48 89 df e8 82 83 eb fd 4c 8b 33 4d 8d 66 10 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 65 83 eb fd 49 83 3c 24 00 74 0f [ 74.768931][ T5991] RSP: 0018:ffffc900039e7b58 EFLAGS: 00010202 [ 74.770978][ T5991] RAX: 0000000000000002 RBX: ffff88816ed88638 RCX: ffff88816c548000 [ 74.774127][ T5991] RDX: 0000000000000000 RSI: ffffffff8dad1d20 RDI: ffff88816ed88000 [ 74.776809][ T5991] RBP: 1ffff1102ddb10c7 R08: ffffffff8fcec177 R09: 1ffffffff1f9d82e [ 74.779298][ T5991] R10: dffffc0000000000 R11: ffffffff843ef960 R12: 0000000000000010 [ 74.781978][ T5991] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88816ed88000 [ 74.785000][ T5991] FS: 000055558ffb4500(0000) GS:ffff8882a9942000(0000) knlGS:0000000000000000 [ 74.787739][ T5991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.789937][ T5991] CR2: 0000001b30763fff CR3: 00000001127bc000 CR4: 00000000000006f0 [ 74.792466][ T5991] Kernel panic - not syncing: Fatal exception [ 74.795072][ T5991] Kernel Offset: disabled [ 74.796330][ T5991] Rebooting in 86400 seconds..