Warning: Permanently added '10.128.0.174' (ED25519) to the list of known hosts. 2026/07/02 13:59:53 parsed 1 programs 2026/07/02 13:59:53 serving rpc on tcp://38699 [ 69.529365][ T4200] cgroup: Unknown subsys name 'net' [ 69.634205][ T4200] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.123683][ T4200] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.457164][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.463793][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.258325][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.271139][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.292103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.309776][ T4233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.317773][ T4233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.326068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.604401][ T4260] chnl_net:caif_netlink_parms(): no params data found [ 74.674239][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.682408][ T4260] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.692027][ T4260] device bridge_slave_0 entered promiscuous mode [ 74.708581][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.716005][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.725566][ T4260] device bridge_slave_1 entered promiscuous mode [ 74.765637][ T4260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.781403][ T4260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.823702][ T4260] team0: Port device team_slave_0 added [ 74.831086][ T4260] team0: Port device team_slave_1 added [ 74.850436][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.858355][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.885360][ T4260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.904164][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.911180][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.937357][ T4260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.990117][ T4260] device hsr_slave_0 entered promiscuous mode [ 74.999256][ T4260] device hsr_slave_1 entered promiscuous mode [ 75.096696][ T4260] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.108344][ T4260] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.117404][ T4260] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.128128][ T4260] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.152841][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.160356][ T4260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.168582][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.175835][ T4260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.222996][ T4260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.237765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.248859][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.258265][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.267606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 75.281570][ T4260] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.293827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.302314][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.309464][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.321183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.329811][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.337041][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.358879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.367538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.403643][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.416959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.429669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.441498][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.569809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.577681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.617025][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.634446][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.643463][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.679609][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.689159][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.698125][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.708135][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.719923][ T4260] device veth0_vlan entered promiscuous mode [ 75.757390][ T4260] device veth1_vlan entered promiscuous mode [ 75.779397][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.787906][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.797186][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.805896][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.817382][ T4260] device veth0_macvtap entered promiscuous mode [ 75.828241][ T4260] device veth1_macvtap entered promiscuous mode [ 75.865819][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.875063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.883846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.891846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.901271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.913119][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.924138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.933539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.964790][ T4260] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.974281][ T4260] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.983053][ T4260] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.991894][ T4260] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.122170][ T4260] syz-executor (4260) used greatest stack depth: 20176 bytes left 2026/07/02 14:00:03 executed programs: 0 [ 77.600281][ T4310] chnl_net:caif_netlink_parms(): no params data found [ 77.675418][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.682895][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.691051][ T4310] device bridge_slave_0 entered promiscuous mode [ 77.701690][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.709130][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.717412][ T4310] device bridge_slave_1 entered promiscuous mode [ 77.741925][ T4310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.754581][ T4310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.779280][ T4310] team0: Port device team_slave_0 added [ 77.787871][ T4310] team0: Port device team_slave_1 added [ 77.812041][ T4310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.819492][ T4310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.846728][ T4310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.859755][ T4310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.867376][ T4310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.893910][ T4310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.932438][ T4310] device hsr_slave_0 entered promiscuous mode [ 77.939655][ T4310] device hsr_slave_1 entered promiscuous mode [ 77.946527][ T4310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.955501][ T4310] Cannot create hsr debugfs directory [ 78.050547][ T4310] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.534350][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 80.877293][ T4310] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.941633][ T4310] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.991006][ T4310] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.222974][ T4310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.234236][ T4310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.244135][ T4310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.254131][ T4310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.333920][ T4310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.346952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.354884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.366013][ T4310] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.377305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.387583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.396534][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.403690][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.412168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.428149][ T1237] device hsr_slave_0 left promiscuous mode [ 81.434915][ T1237] device hsr_slave_1 left promiscuous mode [ 81.441585][ T1237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.449680][ T1237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.459294][ T1237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.467061][ T1237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.474883][ T1237] device bridge_slave_1 left promiscuous mode [ 81.481189][ T1237] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.497736][ T1237] device bridge_slave_0 left promiscuous mode [ 81.504111][ T1237] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.522561][ T1237] device veth1_macvtap left promiscuous mode [ 81.529306][ T1237] device veth0_macvtap left promiscuous mode [ 81.536183][ T1237] device veth1_vlan left promiscuous mode [ 81.542191][ T1237] device veth0_vlan left promiscuous mode [ 81.613564][ T1336] Bluetooth: hci0: command 0x041b tx timeout [ 81.727945][ T1237] team0 (unregistering): Port device team_slave_1 removed [ 81.741996][ T1237] team0 (unregistering): Port device team_slave_0 removed [ 81.760919][ T1237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.776147][ T1237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.835317][ T1237] bond0 (unregistering): Released all slaves [ 81.878983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.888203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.896869][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.903950][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.914641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.926760][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.949297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.964472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.984921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.993984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.002735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.013612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.021987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.031224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.039865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.049455][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.163966][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.171482][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.189068][ T4310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.206547][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.215495][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.235387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.244826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.256793][ T4310] device veth0_vlan entered promiscuous mode [ 82.268710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.277180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.291044][ T4310] device veth1_vlan entered promiscuous mode [ 82.312591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.324217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.332425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.344024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.357956][ T4310] device veth0_macvtap entered promiscuous mode [ 82.372510][ T4310] device veth1_macvtap entered promiscuous mode [ 82.398529][ T4310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.406167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.417929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.430506][ T4310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.439760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.449287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.462065][ T4310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.472021][ T4310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.482552][ T4310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.491902][ T4310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.568893][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.589667][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.611852][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/07/02 14:00:08 executed programs: 2 [ 82.628915][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.639351][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.648069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.958956][ T4322] loop0: detected capacity change from 0 to 32768 [ 83.127968][ T4322] XFS (loop0): Mounting V5 Filesystem [ 83.210499][ T4322] XFS (loop0): Ending clean mount [ 83.236930][ T4322] XFS (loop0): Quotacheck needed: Please wait. [ 83.305894][ T4322] XFS (loop0): Quotacheck: Done. [ 83.329076][ T4322] FAULT_INJECTION: forcing a failure. [ 83.329076][ T4322] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 83.358153][ T4322] CPU: 1 PID: 4322 Comm: syz.0.17 Not tainted syzkaller #0 [ 83.365518][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 83.375639][ T4322] Call Trace: [ 83.378943][ T4322] [ 83.381898][ T4322] dump_stack_lvl+0x188/0x250 [ 83.386629][ T4322] ? show_regs_print_info+0x20/0x20 [ 83.391864][ T4322] ? load_image+0x410/0x410 [ 83.396439][ T4322] ? __lock_acquire+0x7b50/0x7b50 [ 83.401511][ T4322] should_fail+0x383/0x4b0 [ 83.405962][ T4322] prepare_alloc_pages+0x1e3/0x5b0 [ 83.411117][ T4322] __alloc_pages+0x11b/0x480 [ 83.416002][ T4322] ? zone_statistics+0x170/0x170 [ 83.421120][ T4322] ? __lock_acquire+0x7b50/0x7b50 [ 83.426201][ T4322] new_slab+0xc0/0x4b0 [ 83.430309][ T4322] ___slab_alloc+0x807/0xdd0 [ 83.434947][ T4322] ? xfs_trans_alloc+0x85/0x780 [ 83.439834][ T4322] ? xfs_trans_alloc+0x85/0x780 [ 83.444720][ T4322] kmem_cache_alloc+0xf0/0x280 [ 83.449530][ T4322] xfs_trans_alloc+0x85/0x780 [ 83.454248][ T4322] xfs_vn_update_time+0x292/0x510 [ 83.459333][ T4322] ? xfs_vn_fiemap+0x100/0x100 [ 83.464136][ T4322] ? dentry_needs_remove_privs+0xf0/0xf0 [ 83.469854][ T4322] ? xfs_vn_fiemap+0x100/0x100 [ 83.474791][ T4322] file_update_time+0x3a6/0x440 [ 83.479698][ T4322] ? file_remove_privs+0x5d0/0x5d0 [ 83.484892][ T4322] ? xfs_break_leased_layouts+0x276/0x2a0 [ 83.490659][ T4322] xfs_file_write_checks+0x8bc/0xa80 [ 83.496001][ T4322] ? clear_nonspinnable+0x60/0x60 [ 83.501091][ T4322] ? xfs_file_buffered_write+0xa40/0xa40 [ 83.506868][ T4322] ? down_write_nested+0x47/0x60 [ 83.511982][ T4322] ? xfs_ilock+0x1cb/0x350 [ 83.516435][ T4322] xfs_file_buffered_write+0x163/0xa40 [ 83.521951][ T4322] ? xfs_file_dax_write+0x790/0x790 [ 83.527348][ T4322] ? rcu_read_lock_any_held+0xb0/0x130 [ 83.532940][ T4322] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 83.538264][ T4322] ? end_current_label_crit_section+0x14b/0x170 [ 83.544534][ T4322] ? xfs_file_write_iter+0x2bc/0x610 [ 83.549847][ T4322] vfs_write+0x748/0xd70 [ 83.554109][ T4322] ? lockdep_hardirqs_on+0x94/0x140 [ 83.559350][ T4322] ? file_end_write+0x250/0x250 [ 83.564373][ T4322] ? __fdget_pos+0x2c6/0x370 [ 83.569005][ T4322] ksys_write+0x153/0x260 [ 83.573365][ T4322] ? __ia32_sys_read+0x80/0x80 [ 83.578166][ T4322] ? lockdep_hardirqs_on+0x94/0x140 [ 83.583396][ T4322] do_syscall_64+0x4c/0xa0 [ 83.587852][ T4322] ? clear_bhb_loop+0x30/0x80 [ 83.592660][ T4322] ? clear_bhb_loop+0x30/0x80 [ 83.597357][ T4322] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.603290][ T4322] RIP: 0033:0x7f15db3f0e59 [ 83.607868][ T4322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.627504][ T4322] RSP: 002b:00007ffe367f73f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.635950][ T4322] RAX: ffffffffffffffda RBX: 00007f15db678fa0 RCX: 00007f15db3f0e59 [ 83.643942][ T4322] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000004 [ 83.651951][ T4322] RBP: 00007ffe367f7460 R08: 0000000000000000 R09: 0000000000000000 [ 83.659938][ T4322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.668536][ T4322] R13: 00007f15db678fac R14: 00007f15db678fa0 R15: 00007f15db678fa0 [ 83.676641][ T4322] [ 83.708905][ T4310] XFS (loop0): Unmounting Filesystem [ 83.732693][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 84.152791][ T4332] loop0: detected capacity change from 0 to 32768 [ 84.242127][ T4332] XFS (loop0): Mounting V5 Filesystem [ 84.279134][ T4332] XFS (loop0): Ending clean mount [ 84.289028][ T4332] XFS (loop0): Quotacheck needed: Please wait. [ 84.320820][ T4332] XFS (loop0): Quotacheck: Done. [ 84.329387][ T4332] FAULT_INJECTION: forcing a failure. [ 84.329387][ T4332] name failslab, interval 1, probability 0, space 0, times 1 [ 84.343676][ T4332] CPU: 0 PID: 4332 Comm: syz.0.18 Not tainted syzkaller #0 [ 84.350942][ T4332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 84.361045][ T4332] Call Trace: [ 84.364367][ T4332] [ 84.367334][ T4332] dump_stack_lvl+0x188/0x250 [ 84.372060][ T4332] ? show_regs_print_info+0x20/0x20 [ 84.377490][ T4332] ? load_image+0x410/0x410 [ 84.382048][ T4332] ? __might_sleep+0xf0/0xf0 [ 84.386873][ T4332] ? __lock_acquire+0x7b50/0x7b50 [ 84.391944][ T4332] should_fail+0x383/0x4b0 [ 84.396386][ T4332] should_failslab+0x5/0x20 [ 84.400902][ T4332] slab_pre_alloc_hook+0x51/0xc0 [ 84.405861][ T4332] __kmalloc_node+0x6d/0x3a0 [ 84.410479][ T4332] ? kvmalloc_node+0x84/0x130 [ 84.415164][ T4332] ? rcu_is_watching+0x11/0xa0 [ 84.419953][ T4332] ? xlog_cil_commit+0x29a/0x2020 [ 84.425026][ T4332] kvmalloc_node+0x84/0x130 [ 84.429567][ T4332] xlog_cil_commit+0x2ac/0x2020 [ 84.434433][ T4332] ? xfs_trans_log_inode+0x593/0x910 [ 84.439733][ T4332] ? __lock_acquire+0x7b50/0x7b50 [ 84.444791][ T4332] ? xfs_trans_apply_dquot_deltas+0xe69/0xe80 [ 84.450986][ T4332] ? xlog_cil_empty+0x80/0x80 [ 84.455705][ T4332] __xfs_trans_commit+0x6b4/0xc60 [ 84.460751][ T4332] ? xfs_trans_commit+0x20/0x20 [ 84.465619][ T4332] ? xfs_trans_ichgtime+0x160/0x160 [ 84.470853][ T4332] ? rcu_is_watching+0x11/0xa0 [ 84.475634][ T4332] ? xfs_trans_add_item+0x14c/0x2a0 [ 84.480858][ T4332] xfs_vn_update_time+0x3a1/0x510 [ 84.485913][ T4332] ? xfs_vn_fiemap+0x100/0x100 [ 84.490711][ T4332] ? dentry_needs_remove_privs+0xf0/0xf0 [ 84.496362][ T4332] ? xfs_vn_fiemap+0x100/0x100 [ 84.501136][ T4332] file_update_time+0x3a6/0x440 [ 84.506016][ T4332] ? file_remove_privs+0x5d0/0x5d0 [ 84.511285][ T4332] ? xfs_break_leased_layouts+0x276/0x2a0 [ 84.517026][ T4332] xfs_file_write_checks+0x8bc/0xa80 [ 84.522330][ T4332] ? clear_nonspinnable+0x60/0x60 [ 84.527379][ T4332] ? xfs_file_buffered_write+0xa40/0xa40 [ 84.533029][ T4332] ? down_write_nested+0x47/0x60 [ 84.537995][ T4332] ? xfs_ilock+0x1cb/0x350 [ 84.542436][ T4332] xfs_file_buffered_write+0x163/0xa40 [ 84.548007][ T4332] ? xfs_file_dax_write+0x790/0x790 [ 84.553223][ T4332] ? rcu_read_lock_any_held+0xb0/0x130 [ 84.558725][ T4332] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 84.564037][ T4332] ? end_current_label_crit_section+0x14b/0x170 [ 84.570409][ T4332] ? xfs_file_write_iter+0x2bc/0x610 [ 84.575811][ T4332] vfs_write+0x748/0xd70 [ 84.580094][ T4332] ? lockdep_hardirqs_on+0x94/0x140 [ 84.585361][ T4332] ? file_end_write+0x250/0x250 [ 84.590261][ T4332] ? __fdget_pos+0x2c6/0x370 [ 84.594863][ T4332] ksys_write+0x153/0x260 [ 84.599204][ T4332] ? __ia32_sys_read+0x80/0x80 [ 84.603986][ T4332] ? lockdep_hardirqs_on+0x94/0x140 [ 84.609226][ T4332] do_syscall_64+0x4c/0xa0 [ 84.613649][ T4332] ? clear_bhb_loop+0x30/0x80 [ 84.618338][ T4332] ? clear_bhb_loop+0x30/0x80 [ 84.623024][ T4332] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.628933][ T4332] RIP: 0033:0x7f15db3f0e59 [ 84.633379][ T4332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.653010][ T4332] RSP: 002b:00007ffe367f73f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.661528][ T4332] RAX: ffffffffffffffda RBX: 00007f15db678fa0 RCX: 00007f15db3f0e59 [ 84.670063][ T4332] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000004 [ 84.678044][ T4332] RBP: 00007ffe367f7460 R08: 0000000000000000 R09: 0000000000000000 [ 84.686034][ T4332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.694042][ T4332] R13: 00007f15db678fac R14: 00007f15db678fa0 R15: 00007f15db678fa0 [ 84.702048][ T4332] [ 84.707859][ T4332] ================================================================== [ 84.716246][ T4332] BUG: KASAN: null-ptr-deref in xlog_cil_commit+0x2c9/0x2020 [ 84.723668][ T4332] Write of size 88 at addr 0000000000000000 by task syz.0.18/4332 [ 84.731507][ T4332] [ 84.733845][ T4332] CPU: 1 PID: 4332 Comm: syz.0.18 Not tainted syzkaller #0 [ 84.741291][ T4332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 84.751351][ T4332] Call Trace: [ 84.754641][ T4332] [ 84.757602][ T4332] dump_stack_lvl+0x188/0x250 [ 84.762306][ T4332] ? xlog_cil_commit+0x2c9/0x2020 [ 84.767348][ T4332] ? show_regs_print_info+0x20/0x20 [ 84.772556][ T4332] ? load_image+0x410/0x410 [ 84.777067][ T4332] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 84.782552][ T4332] ? should_fail+0x271/0x4b0 [ 84.787194][ T4332] ? xlog_cil_commit+0x2c9/0x2020 [ 84.792222][ T4332] kasan_report+0xd5/0x130 [ 84.796643][ T4332] ? xlog_cil_commit+0x2c9/0x2020 [ 84.801679][ T4332] kasan_check_range+0x235/0x290 [ 84.806638][ T4332] memset+0x1e/0x40 [ 84.810472][ T4332] xlog_cil_commit+0x2c9/0x2020 [ 84.815324][ T4332] ? xfs_trans_log_inode+0x593/0x910 [ 84.820635][ T4332] ? __lock_acquire+0x7b50/0x7b50 [ 84.825662][ T4332] ? xfs_trans_apply_dquot_deltas+0xe69/0xe80 [ 84.831754][ T4332] ? xlog_cil_empty+0x80/0x80 [ 84.836445][ T4332] __xfs_trans_commit+0x6b4/0xc60 [ 84.841472][ T4332] ? xfs_trans_commit+0x20/0x20 [ 84.846326][ T4332] ? xfs_trans_ichgtime+0x160/0x160 [ 84.851532][ T4332] ? rcu_is_watching+0x11/0xa0 [ 84.856338][ T4332] ? xfs_trans_add_item+0x14c/0x2a0 [ 84.861661][ T4332] xfs_vn_update_time+0x3a1/0x510 [ 84.866879][ T4332] ? xfs_vn_fiemap+0x100/0x100 [ 84.871669][ T4332] ? dentry_needs_remove_privs+0xf0/0xf0 [ 84.877408][ T4332] ? xfs_vn_fiemap+0x100/0x100 [ 84.882190][ T4332] file_update_time+0x3a6/0x440 [ 84.887057][ T4332] ? file_remove_privs+0x5d0/0x5d0 [ 84.892205][ T4332] ? xfs_break_leased_layouts+0x276/0x2a0 [ 84.897945][ T4332] xfs_file_write_checks+0x8bc/0xa80 [ 84.903345][ T4332] ? clear_nonspinnable+0x60/0x60 [ 84.908432][ T4332] ? xfs_file_buffered_write+0xa40/0xa40 [ 84.914108][ T4332] ? down_write_nested+0x47/0x60 [ 84.919063][ T4332] ? xfs_ilock+0x1cb/0x350 [ 84.923514][ T4332] xfs_file_buffered_write+0x163/0xa40 [ 84.929430][ T4332] ? xfs_file_dax_write+0x790/0x790 [ 84.934636][ T4332] ? rcu_read_lock_any_held+0xb0/0x130 [ 84.940105][ T4332] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 84.945399][ T4332] ? end_current_label_crit_section+0x14b/0x170 [ 84.951663][ T4332] ? xfs_file_write_iter+0x2bc/0x610 [ 84.957008][ T4332] vfs_write+0x748/0xd70 [ 84.961288][ T4332] ? lockdep_hardirqs_on+0x94/0x140 [ 84.966503][ T4332] ? file_end_write+0x250/0x250 [ 84.971382][ T4332] ? __fdget_pos+0x2c6/0x370 [ 84.976107][ T4332] ksys_write+0x153/0x260 [ 84.980471][ T4332] ? __ia32_sys_read+0x80/0x80 [ 84.985249][ T4332] ? lockdep_hardirqs_on+0x94/0x140 [ 84.990477][ T4332] do_syscall_64+0x4c/0xa0 [ 84.994907][ T4332] ? clear_bhb_loop+0x30/0x80 [ 84.999604][ T4332] ? clear_bhb_loop+0x30/0x80 [ 85.004307][ T4332] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.010235][ T4332] RIP: 0033:0x7f15db3f0e59 [ 85.014664][ T4332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.034392][ T4332] RSP: 002b:00007ffe367f73f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.042814][ T4332] RAX: ffffffffffffffda RBX: 00007f15db678fa0 RCX: 00007f15db3f0e59 [ 85.050796][ T4332] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000004 [ 85.058782][ T4332] RBP: 00007ffe367f7460 R08: 0000000000000000 R09: 0000000000000000 [ 85.066876][ T4332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.074883][ T4332] R13: 00007f15db678fac R14: 00007f15db678fa0 R15: 00007f15db678fa0 [ 85.082898][ T4332] [ 85.085924][ T4332] ================================================================== [ 85.093983][ T4332] Disabling lock debugging due to kernel taint [ 85.103873][ T4332] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 85.111117][ T4332] CPU: 1 PID: 4332 Comm: syz.0.18 Tainted: G B syzkaller #0 [ 85.119749][ T4332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 85.129839][ T4332] Call Trace: [ 85.133170][ T4332] [ 85.136127][ T4332] dump_stack_lvl+0x188/0x250 [ 85.140945][ T4332] ? show_regs_print_info+0x20/0x20 [ 85.146218][ T4332] ? load_image+0x410/0x410 [ 85.150820][ T4332] panic+0x2f8/0x850 [ 85.154717][ T4332] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 85.160914][ T4332] ? bpf_jit_dump+0xd0/0xd0 [ 85.165423][ T4332] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 85.171407][ T4332] ? _raw_spin_unlock+0x40/0x40 [ 85.176362][ T4332] ? xlog_cil_commit+0x2c9/0x2020 [ 85.181398][ T4332] check_panic_on_warn+0x80/0xa0 [ 85.186437][ T4332] ? xlog_cil_commit+0x2c9/0x2020 [ 85.191557][ T4332] end_report+0x6d/0xf0 [ 85.195717][ T4332] kasan_report+0x102/0x130 [ 85.200226][ T4332] ? xlog_cil_commit+0x2c9/0x2020 [ 85.205295][ T4332] kasan_check_range+0x235/0x290 [ 85.210271][ T4332] memset+0x1e/0x40 [ 85.214115][ T4332] xlog_cil_commit+0x2c9/0x2020 [ 85.219006][ T4332] ? xfs_trans_log_inode+0x593/0x910 [ 85.224322][ T4332] ? __lock_acquire+0x7b50/0x7b50 [ 85.229399][ T4332] ? xfs_trans_apply_dquot_deltas+0xe69/0xe80 [ 85.235496][ T4332] ? xlog_cil_empty+0x80/0x80 [ 85.240184][ T4332] __xfs_trans_commit+0x6b4/0xc60 [ 85.245213][ T4332] ? xfs_trans_commit+0x20/0x20 [ 85.250075][ T4332] ? xfs_trans_ichgtime+0x160/0x160 [ 85.255273][ T4332] ? rcu_is_watching+0x11/0xa0 [ 85.260036][ T4332] ? xfs_trans_add_item+0x14c/0x2a0 [ 85.265252][ T4332] xfs_vn_update_time+0x3a1/0x510 [ 85.270278][ T4332] ? xfs_vn_fiemap+0x100/0x100 [ 85.275058][ T4332] ? dentry_needs_remove_privs+0xf0/0xf0 [ 85.280712][ T4332] ? xfs_vn_fiemap+0x100/0x100 [ 85.285689][ T4332] file_update_time+0x3a6/0x440 [ 85.290565][ T4332] ? file_remove_privs+0x5d0/0x5d0 [ 85.295698][ T4332] ? xfs_break_leased_layouts+0x276/0x2a0 [ 85.301453][ T4332] xfs_file_write_checks+0x8bc/0xa80 [ 85.306842][ T4332] ? clear_nonspinnable+0x60/0x60 [ 85.311891][ T4332] ? xfs_file_buffered_write+0xa40/0xa40 [ 85.317538][ T4332] ? down_write_nested+0x47/0x60 [ 85.322484][ T4332] ? xfs_ilock+0x1cb/0x350 [ 85.326913][ T4332] xfs_file_buffered_write+0x163/0xa40 [ 85.332390][ T4332] ? xfs_file_dax_write+0x790/0x790 [ 85.337595][ T4332] ? rcu_read_lock_any_held+0xb0/0x130 [ 85.343071][ T4332] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 85.348395][ T4332] ? end_current_label_crit_section+0x14b/0x170 [ 85.354657][ T4332] ? xfs_file_write_iter+0x2bc/0x610 [ 85.359989][ T4332] vfs_write+0x748/0xd70 [ 85.364270][ T4332] ? lockdep_hardirqs_on+0x94/0x140 [ 85.369514][ T4332] ? file_end_write+0x250/0x250 [ 85.374476][ T4332] ? __fdget_pos+0x2c6/0x370 [ 85.379080][ T4332] ksys_write+0x153/0x260 [ 85.383425][ T4332] ? __ia32_sys_read+0x80/0x80 [ 85.388195][ T4332] ? lockdep_hardirqs_on+0x94/0x140 [ 85.393575][ T4332] do_syscall_64+0x4c/0xa0 [ 85.397997][ T4332] ? clear_bhb_loop+0x30/0x80 [ 85.402677][ T4332] ? clear_bhb_loop+0x30/0x80 [ 85.407360][ T4332] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.413265][ T4332] RIP: 0033:0x7f15db3f0e59 [ 85.417701][ T4332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.437308][ T4332] RSP: 002b:00007ffe367f73f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.445747][ T4332] RAX: ffffffffffffffda RBX: 00007f15db678fa0 RCX: 00007f15db3f0e59 [ 85.453723][ T4332] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000004 [ 85.461711][ T4332] RBP: 00007ffe367f7460 R08: 0000000000000000 R09: 0000000000000000 [ 85.469687][ T4332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.477677][ T4332] R13: 00007f15db678fac R14: 00007f15db678fa0 R15: 00007f15db678fa0 [ 85.485666][ T4332] [ 85.488960][ T4332] Kernel Offset: disabled [ 85.493305][ T4332] Rebooting in 86400 seconds..