Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. 2026/05/04 05:09:24 parsed 1 programs syzkaller login: [ 78.921918][ T5610] cgroup: Unknown subsys name 'net' [ 79.182818][ T5610] cgroup: Unknown subsys name 'cpuset' [ 79.258420][ T5610] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.849927][ T5610] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.586239][ T1984] cfg80211: failed to load regulatory.db [ 86.024141][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.027258][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.028904][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.030372][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.043156][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.944499][ T5673] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.945709][ T5673] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.945801][ T5673] bridge_slave_0: entered allmulticast mode [ 87.947261][ T5673] bridge_slave_0: entered promiscuous mode [ 87.958477][ T5673] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.958599][ T5673] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.958732][ T5673] bridge_slave_1: entered allmulticast mode [ 87.969292][ T5673] bridge_slave_1: entered promiscuous mode [ 88.017451][ T5673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.030522][ T5673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.065460][ T5673] team0: Port device team_slave_0 added [ 88.067452][ T5673] team0: Port device team_slave_1 added [ 88.270153][ T5673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.270169][ T5673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.270188][ T5673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.333285][ T5673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.333301][ T5673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.333323][ T5673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.402858][ T5673] hsr_slave_0: entered promiscuous mode [ 88.403690][ T5673] hsr_slave_1: entered promiscuous mode [ 88.731122][ T5673] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.786057][ T5673] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.788444][ T5673] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.822209][ T5673] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.826333][ T5673] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.861553][ T5673] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.098575][ T5673] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.125188][ T5673] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.226989][ T5673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.260987][ T5673] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.276482][ T172] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.276767][ T172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.315990][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.316188][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.674205][ T5673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.750435][ T5673] veth0_vlan: entered promiscuous mode [ 89.771373][ T5673] veth1_vlan: entered promiscuous mode [ 89.806704][ T5673] veth0_macvtap: entered promiscuous mode [ 89.816877][ T5673] veth1_macvtap: entered promiscuous mode [ 89.845667][ T5673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.862566][ T5673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.876471][ T2282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.892673][ T172] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.896176][ T172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.896429][ T172] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.503310][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.710712][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.971024][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.801851][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.872561][ T4284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.872586][ T4284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.934606][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.934625][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/04 05:09:41 executed programs: 0 [ 92.788793][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.809742][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.811038][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.813613][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.815264][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.300986][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.301088][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.301179][ T5733] bridge_slave_0: entered allmulticast mode [ 93.302557][ T5733] bridge_slave_0: entered promiscuous mode [ 93.306492][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.306606][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.306697][ T5733] bridge_slave_1: entered allmulticast mode [ 93.311348][ T5733] bridge_slave_1: entered promiscuous mode [ 93.392110][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.394571][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.430051][ T5733] team0: Port device team_slave_0 added [ 93.435646][ T5733] team0: Port device team_slave_1 added [ 93.463411][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.463426][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.463441][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.464699][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.464711][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.464724][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.600323][ T5733] hsr_slave_0: entered promiscuous mode [ 93.601051][ T5733] hsr_slave_1: entered promiscuous mode [ 93.601703][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 93.601766][ T5733] Cannot create hsr debugfs directory [ 94.008044][ T56] bridge_slave_1: left allmulticast mode [ 94.008225][ T56] bridge_slave_1: left promiscuous mode [ 94.011572][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.088987][ T56] bridge_slave_0: left allmulticast mode [ 94.089010][ T56] bridge_slave_0: left promiscuous mode [ 94.089158][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.788542][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.848445][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.889814][ T56] bond0 (unregistering): Released all slaves [ 94.899993][ T4913] Bluetooth: hci0: command tx timeout [ 95.528040][ T56] hsr_slave_0: left promiscuous mode [ 95.568012][ T56] hsr_slave_1: left promiscuous mode [ 95.569259][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.569351][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.629078][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.629103][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.709245][ T56] veth1_macvtap: left promiscuous mode [ 95.709430][ T56] veth0_macvtap: left promiscuous mode [ 95.709584][ T56] veth1_vlan: left promiscuous mode [ 95.709744][ T56] veth0_vlan: left promiscuous mode [ 96.410622][ T56] team0 (unregistering): Port device team_slave_1 removed [ 96.458629][ T56] team0 (unregistering): Port device team_slave_0 removed [ 96.641583][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 96.978093][ T4913] Bluetooth: hci0: command tx timeout [ 97.626608][ T5733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.685300][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.686460][ T5733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.766281][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.775126][ T5733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.813751][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.815036][ T5733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.855908][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.555866][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.584396][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.596458][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.596659][ T4284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.644020][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.644104][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.057819][ T4913] Bluetooth: hci0: command tx timeout [ 99.461014][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.822632][ T5733] veth0_vlan: entered promiscuous mode [ 99.845748][ T5733] veth1_vlan: entered promiscuous mode [ 100.034936][ T5733] veth0_macvtap: entered promiscuous mode [ 100.044381][ T5733] veth1_macvtap: entered promiscuous mode [ 100.072634][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.097105][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.123885][ T2282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.125167][ T2282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.125816][ T2282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.125855][ T2282] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.465821][ T4284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.465841][ T4284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.526604][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.526623][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/04 05:09:49 executed programs: 2 [ 100.655969][ T5837] loop0: detected capacity change from 0 to 256 [ 100.789243][ T5837] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xb963610a, utbl_chksum : 0xe619d30d) [ 100.825634][ T36] audit: type=1800 audit(1777871389.190:2): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.17" name="file2" dev="loop0" ino=1048665 res=0 errno=0 [ 100.916631][ T5837] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 100.916654][ T5837] exFAT-fs (loop0): Filesystem has been set read-only [ 101.092025][ T5840] loop0: detected capacity [ 101.092025][ T5840] loop0: detected capacity change from 0 to 256 [ 101.099742][ T31] ------------[ cut here ]------------ [ 101.099752][ T31] READ_ONCE(rsp->gp_state) == GP_PASSED [ 101.099767][ T31] WARNING: kernel/rcu/sync.c:177 at rcu_sync_dtor+0xcd/0x180, CPU#1: kworker/1:0/31 [ 101.099810][ T31] Modules linked in: [ 101.100361][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 101.100383][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 101.100393][ T31] Workqueue: events destroy_super_work [ 101.100421][ T31] RIP: 0010:rcu_sync_dtor+0xcd/0x180 [ 101.100451][ T31] Code: 18 e8 07 cf 00 00 43 0f b6 44 25 00 84 c0 0f 85 82 00 00 00 83 3b 00 75 1f 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 e9 66 ff ff ff 90 0f 0b 90 eb 8a 90 0f 0b 90 eb db 89 d9 [ 101.100465][ T31] RSP: 0018:ffffc90000a5fa48 EFLAGS: 00010246 [ 101.100479][ T31] RAX: 0000000000000002 RBX: ffff888040300330 RCX: 0000000080000001 [ 101.100491][ T31] RDX: 0000000000000000 RSI: ffffffff8ba74d40 RDI: ffff888040300330 [ 101.100503][ T31] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 101.100513][ T31] R10: dffffc0000000000 R11: fffffbfff1bcc666 R12: dffffc0000000000 [ 101.100526][ T31] R13: 1ffff11008060066 R14: ffff888040300330 R15: dffffc0000000000 [ 101.100538][ T31] FS: 0000000000000000(0000) GS:ffff888126279000(0000) knlGS:0000000000000000 [ 101.100552][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.100564][ T31] CR2: 00007f8e37fad000 CR3: 0000000038018000 CR4: 00000000003526f0 [ 101.100579][ T31] Call Trace: [ 101.100586][ T31] [ 101.100598][ T31] percpu_free_rwsem+0x43/0x80 [ 101.100621][ T31] destroy_super_work+0x217/0x310 [ 101.100641][ T31] ? process_scheduled_works+0xa70/0x1860 [ 101.100662][ T31] process_scheduled_works+0xb5d/0x1860 [ 101.100708][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 101.100733][ T31] ? assign_work+0x3d5/0x5e0 [ 101.100757][ T31] worker_thread+0xa53/0xfc0 [ 101.100800][ T31] kthread+0x388/0x470 [ 101.100822][ T31] ? __pfx_worker_thread+0x10/0x10 [ 101.100839][ T31] ? __pfx_kthread+0x10/0x10 [ 101.100862][ T31] ret_from_fork+0x514/0xb70 [ 101.100885][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 101.100904][ T31] ? __switch_to+0xc79/0x1410 [ 101.100931][ T31] ? __pfx_kthread+0x10/0x10 [ 101.100954][ T31] ret_from_fork_asm+0x1a/0x30 [ 101.100990][ T31] [ 101.100999][ T31] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 101.101011][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 101.101030][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 101.101040][ T31] Workqueue: events destroy_super_work [ 101.101060][ T31] Call Trace: [ 101.101066][ T31] [ 101.101073][ T31] vpanic+0x56c/0xa60 [ 101.101099][ T31] ? __pfx__printk+0x10/0x10 [ 101.101121][ T31] ? __pfx_vpanic+0x10/0x10 [ 101.101139][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 101.101160][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 101.101190][ T31] panic+0xc5/0xd0 [ 101.101209][ T31] ? __pfx_panic+0x10/0x10 [ 101.101237][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 101.101262][ T31] __warn+0x315/0x4c0 [ 101.101281][ T31] ? rcu_sync_dtor+0xcd/0x180 [ 101.101302][ T31] ? rcu_sync_dtor+0xcd/0x180 [ 101.101323][ T31] __report_bug+0x29a/0x540 [ 101.101340][ T31] ? kasan_save_track+0x3e/0x80 [ 101.101356][ T31] ? kasan_save_free_info+0x46/0x50 [ 101.101376][ T31] ? __kasan_slab_free+0x5c/0x80 [ 101.101398][ T31] ? rcu_sync_dtor+0xcd/0x180 [ 101.101418][ T31] ? __pfx___report_bug+0x10/0x10 [ 101.101457][ T31] ? rcu_sync_dtor+0xcd/0x180 [ 101.101477][ T31] report_bug+0x16a/0x220 [ 101.101496][ T31] ? rcu_sync_dtor+0xcd/0x180 [ 101.101513][ T31] ? rcu_sync_dtor+0xcf/0x180 [ 101.101533][ T31] handle_bug+0x9c/0x200 [ 101.101554][ T31] exc_invalid_op+0x1a/0x50 [ 101.101574][ T31] asm_exc_invalid_op+0x1a/0x20 [ 101.101591][ T31] RIP: 0010:rcu_sync_dtor+0xcd/0x180 [ 101.101611][ T31] Code: 18 e8 07 cf 00 00 43 0f b6 44 25 00 84 c0 0f 85 82 00 00 00 83 3b 00 75 1f 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 e9 66 ff ff ff 90 0f 0b 90 eb 8a 90 0f 0b 90 eb db 89 d9 [ 101.101624][ T31] RSP: 0018:ffffc90000a5fa48 EFLAGS: 00010246 [ 101.101638][ T31] RAX: 0000000000000002 RBX: ffff888040300330 RCX: 0000000080000001 [ 101.101650][ T31] RDX: 0000000000000000 RSI: ffffffff8ba74d40 RDI: ffff888040300330 [ 101.101662][ T31] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 101.101671][ T31] R10: dffffc0000000000 R11: fffffbfff1bcc666 R12: dffffc0000000000 [ 101.101684][ T31] R13: 1ffff11008060066 R14: ffff888040300330 R15: dffffc0000000000 [ 101.101711][ T31] ? kfree+0x4d/0x6c0 [ 101.101730][ T31] percpu_free_rwsem+0x43/0x80 [ 101.101752][ T31] destroy_super_work+0x217/0x310 [ 101.101771][ T31] ? process_scheduled_works+0xa70/0x1860 [ 101.101791][ T31] process_scheduled_works+0xb5d/0x1860 [ 101.101837][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 101.101862][ T31] ? assign_work+0x3d5/0x5e0 [ 101.101885][ T31] worker_thread+0xa53/0xfc0 [ 101.101927][ T31] kthread+0x388/0x470 [ 101.101949][ T31] ? __pfx_worker_thread+0x10/0x10 [ 101.101966][ T31] ? __pfx_kthread+0x10/0x10 [ 101.101989][ T31] ret_from_fork+0x514/0xb70 [ 101.102010][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 101.102029][ T31] ? __switch_to+0xc79/0x1410 [ 101.102055][ T31] ? __pfx_kthread+0x10/0x10 [ 101.102078][ T31] ret_from_fork_asm+0x1a/0x30 [ 101.102113][ T31] [ 101.102454][ T31] Kernel Offset: disabled