[ 81.486957][ T29] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.244' (ED25519) to the list of known hosts. 2026/02/24 13:53:20 ignoring optional flag "type"="gce" 2026/02/24 13:53:20 parsed 1 programs [ 82.877546][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 82.877561][ T30] audit: type=1400 audit(1771941200.967:96): avc: denied { unlink } for pid=5993 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2026/02/24 13:53:22 executed programs: 0 [ 84.193515][ T5993] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.242034][ T5128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.250627][ T5128] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.258301][ T5128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.266114][ T5128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.273547][ T5128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.388166][ T5999] chnl_net:caif_netlink_parms(): no params data found [ 84.444744][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.451949][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.459220][ T5999] bridge_slave_0: entered allmulticast mode [ 84.466668][ T5999] bridge_slave_0: entered promiscuous mode [ 84.474408][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.482513][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.489719][ T5999] bridge_slave_1: entered allmulticast mode [ 84.496571][ T5999] bridge_slave_1: entered promiscuous mode [ 84.519707][ T5999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.530736][ T5999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.557831][ T5999] team0: Port device team_slave_0 added [ 84.565207][ T5999] team0: Port device team_slave_1 added [ 84.586809][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.593775][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.619821][ T5999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.632050][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.639062][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.665272][ T5999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.704476][ T5999] hsr_slave_0: entered promiscuous mode [ 84.710673][ T5999] hsr_slave_1: entered promiscuous mode [ 85.123620][ T5999] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.138476][ T5999] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.149642][ T5999] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.162211][ T5999] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.202489][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.209672][ T5999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.217303][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.224535][ T5999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.299893][ T5999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.320168][ T86] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.328154][ T86] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.343822][ T5999] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.363807][ T1080] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.370967][ T1080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.386791][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.393902][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.439942][ T5999] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.450908][ T5999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.649709][ T5999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.698435][ T5999] veth0_vlan: entered promiscuous mode [ 85.714523][ T5999] veth1_vlan: entered promiscuous mode [ 85.762098][ T5999] veth0_macvtap: entered promiscuous mode [ 85.776349][ T5999] veth1_macvtap: entered promiscuous mode [ 85.799532][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.811994][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.832688][ T1080] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.842453][ T1080] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.852544][ T1080] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.874696][ T1080] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.961583][ T30] audit: type=1400 audit(1771941204.047:97): avc: denied { create } for pid=6057 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.018130][ T30] audit: type=1400 audit(1771941204.077:98): avc: denied { connect } for pid=6057 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.356453][ T51] Bluetooth: hci0: command tx timeout [ 86.387996][ T6058] loop0: detected capacity change from 0 to 32768 [ 86.402778][ T30] audit: type=1400 audit(1771941204.487:99): avc: denied { mounton } for pid=6057 comm="syz-executor.0" path="/root/syzkaller-testdir3593711228/syzkaller.Nhz5bF/0/bus" dev="sda1" ino=2036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 86.437568][ T6058] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 86.475166][ T6058] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 86.529279][ T6058] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 86.552694][ T29] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 86.561388][ T29] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 86.688516][ T29] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 127ms [ 86.699565][ T29] gfs2: fsid=syz:syz.0: jid=0: Done [ 86.705657][ T6058] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 86.796761][ T30] audit: type=1400 audit(1771941204.877:100): avc: denied { mount } for pid=6057 comm="syz-executor.0" name="/" dev="loop0" ino=2340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 86.819767][ T30] audit: type=1400 audit(1771941204.887:101): avc: denied { add_name } for pid=6057 comm="syz-executor.0" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.846509][ T30] audit: type=1400 audit(1771941204.887:102): avc: denied { create } for pid=6057 comm="syz-executor.0" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 86.868183][ T30] audit: type=1400 audit(1771941204.927:103): avc: denied { add_name } for pid=6057 comm="syz-executor.0" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 86.909906][ T30] audit: type=1400 audit(1771941204.997:104): avc: denied { unmount } for pid=5999 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 87.426072][ T6095] loop0: detected capacity change from 0 to 32768 [ 87.449047][ T6095] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 87.475518][ T6095] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 87.499495][ T6095] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 87.510463][ T6055] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 87.519895][ T6055] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 87.633800][ T6055] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 113ms [ 87.644061][ T6055] gfs2: fsid=syz:syz.0: jid=0: Done [ 87.649950][ T6095] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 88.236732][ T6127] loop0: detected capacity change from 0 to 32768 [ 88.255509][ T6127] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 88.263870][ T6127] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 88.292548][ T6127] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 88.301998][ T29] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 88.308934][ T29] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 88.437198][ T29] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 128ms [ 88.439220][ T51] Bluetooth: hci0: command tx timeout [ 88.446596][ T29] gfs2: fsid=syz:syz.0: jid=0: Done [ 88.457602][ T6127] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 89.076876][ T6155] loop0: detected capacity change from 0 to 32768 [ 89.108976][ T6155] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 89.119445][ T6155] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 89.140161][ T6155] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 89.151106][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 89.166031][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 89.376540][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 210ms [ 89.387134][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 89.392430][ T6155] gfs2: fsid=syz:syz.0: first mount done, others may mount 2026/02/24 13:53:27 executed programs: 4 [ 90.002580][ T6193] loop0: detected capacity change from 0 to 32768 [ 90.030979][ T6193] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 90.064194][ T6193] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 90.084486][ T6193] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 90.094221][ T792] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 90.101095][ T792] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 90.207603][ T792] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 106ms [ 90.216106][ T792] gfs2: fsid=syz:syz.0: jid=0: Done [ 90.221680][ T6193] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 90.311654][ T6215] ------------[ cut here ]------------ [ 90.317368][ T6215] DEBUG_RWSEMS_WARN_ON((rwsem_owner(sem) != current) && !rwsem_test_oflags(sem, RWSEM_NONSPINNABLE)): count = 0x0, magic = 0xffff88806aa5d6f8, owner = 0x0, curr 0xffff888078dd0000, list empty [ 90.336202][ T6215] WARNING: kernel/locking/rwsem.c:1380 at up_write+0x1bf/0x4f0, CPU#1: syz-executor.0/6215 [ 90.346260][ T6215] Modules linked in: [ 90.350341][ T6215] CPU: 1 UID: 0 PID: 6215 Comm: syz-executor.0 Not tainted syzkaller #0 PREEMPT(full) [ 90.360420][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.370564][ T6215] RIP: 0010:up_write+0x1d1/0x4f0 [ 90.375578][ T6215] Code: 48 c1 ea 03 80 3c 02 00 0f 85 2e 03 00 00 48 8b 13 48 8d 3d 51 a3 f8 0e 41 56 4d 89 e9 4d 89 f8 4c 89 e1 48 c7 c6 80 be af 8b <67> 48 0f b9 3a e8 55 fb 0d 03 59 bf 01 00 00 00 e8 2a a3 f1 ff 48 [ 90.395326][ T6215] RSP: 0018:ffffc90004a8fdb8 EFLAGS: 00010246 [ 90.401409][ T6215] RAX: dffffc0000000000 RBX: ffff88806aa5d6f8 RCX: ffff88806aa5d6f8 [ 90.409466][ T6215] RDX: 0000000000000000 RSI: ffffffff8bafbe80 RDI: ffffffff90dcb690 [ 90.417497][ T6215] RBP: ffff88806aa5d700 R08: 0000000000000000 R09: ffff888078dd0000 [ 90.425530][ T6215] R10: ffff88806aa5d6ff R11: 0000000000000000 R12: ffff88806aa5d6f8 [ 90.433604][ T6215] R13: ffff888078dd0000 R14: ffffffff8bafbc60 R15: 0000000000000000 [ 90.442052][ T6215] FS: 00007fc0d79bb6c0(0000) GS:ffff88812444a000(0000) knlGS:0000000000000000 [ 90.451065][ T6215] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.457697][ T6215] CR2: 00007fc0d79bafd0 CR3: 0000000079e37000 CR4: 00000000003526f0 [ 90.465717][ T6215] Call Trace: [ 90.468999][ T6215] [ 90.471942][ T6215] filename_mkdirat+0x1d5/0x5e0 [ 90.476872][ T6215] ? __pfx_filename_mkdirat+0x10/0x10 [ 90.482250][ T6215] ? strncpy_from_user+0x19d/0x2d0 [ 90.487469][ T6215] ? do_getname+0x191/0x390 [ 90.491979][ T6215] __x64_sys_mkdir+0x6b/0x90 [ 90.496659][ T6215] do_syscall_64+0x106/0xf80 [ 90.501267][ T6215] ? clear_bhb_loop+0x40/0x90 [ 90.506018][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.511915][ T6215] RIP: 0033:0x7fc0d6c6e3b9 [ 90.516680][ T6215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 90.525627][ T51] Bluetooth: hci0: command tx timeout [ 90.536531][ T6215] RSP: 002b:00007fc0d79bb0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 90.550220][ T6215] RAX: ffffffffffffffda RBX: 00007fc0d6dac050 RCX: 00007fc0d6c6e3b9 [ 90.558260][ T6215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 90.566325][ T6215] RBP: 00007fc0d6ccf498 R08: 0000000000000000 R09: 0000000000000000 [ 90.574302][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.582414][ T6215] R13: 000000000000000b R14: 00007fc0d6dac050 R15: 00007ffe589c6108 [ 90.590718][ T6215] [ 90.593747][ T6215] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 90.601117][ T6215] CPU: 1 UID: 0 PID: 6215 Comm: syz-executor.0 Not tainted syzkaller #0 PREEMPT(full) [ 90.610751][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.620816][ T6215] Call Trace: [ 90.624091][ T6215] [ 90.627019][ T6215] dump_stack_lvl+0x100/0x190 [ 90.631712][ T6215] vpanic+0x552/0x970 [ 90.635697][ T6215] ? __pfx_vpanic+0x10/0x10 [ 90.640212][ T6215] panic+0xd1/0xe0 [ 90.643941][ T6215] ? __pfx_panic+0x10/0x10 [ 90.648379][ T6215] ? check_panic_on_warn+0x1f/0x90 [ 90.653518][ T6215] check_panic_on_warn.cold+0x19/0x34 [ 90.658897][ T6215] ? up_write+0x1bf/0x4f0 [ 90.663241][ T6215] __warn.cold+0x191/0x348 [ 90.667675][ T6215] __report_bug+0x296/0x3d0 [ 90.672183][ T6215] ? up_write+0x1bf/0x4f0 [ 90.676498][ T6215] ? __pfx___report_bug+0x10/0x10 [ 90.681503][ T6215] ? avc_has_perm+0x135/0x1e0 [ 90.686156][ T6215] ? selinux_determine_inode_label+0x1ab/0x400 [ 90.692293][ T6215] report_bug_entry+0xe1/0x290 [ 90.697040][ T6215] ? up_write+0x1d1/0x4f0 [ 90.701358][ T6215] handle_bug+0x1c9/0x2a0 [ 90.705679][ T6215] exc_invalid_op+0x17/0x50 [ 90.710178][ T6215] asm_exc_invalid_op+0x1a/0x20 [ 90.715019][ T6215] RIP: 0010:up_write+0x1d1/0x4f0 [ 90.719953][ T6215] Code: 48 c1 ea 03 80 3c 02 00 0f 85 2e 03 00 00 48 8b 13 48 8d 3d 51 a3 f8 0e 41 56 4d 89 e9 4d 89 f8 4c 89 e1 48 c7 c6 80 be af 8b <67> 48 0f b9 3a e8 55 fb 0d 03 59 bf 01 00 00 00 e8 2a a3 f1 ff 48 [ 90.739550][ T6215] RSP: 0018:ffffc90004a8fdb8 EFLAGS: 00010246 [ 90.745608][ T6215] RAX: dffffc0000000000 RBX: ffff88806aa5d6f8 RCX: ffff88806aa5d6f8 [ 90.753565][ T6215] RDX: 0000000000000000 RSI: ffffffff8bafbe80 RDI: ffffffff90dcb690 [ 90.761516][ T6215] RBP: ffff88806aa5d700 R08: 0000000000000000 R09: ffff888078dd0000 [ 90.769484][ T6215] R10: ffff88806aa5d6ff R11: 0000000000000000 R12: ffff88806aa5d6f8 [ 90.777466][ T6215] R13: ffff888078dd0000 R14: ffffffff8bafbc60 R15: 0000000000000000 [ 90.785551][ T6215] filename_mkdirat+0x1d5/0x5e0 [ 90.790406][ T6215] ? __pfx_filename_mkdirat+0x10/0x10 [ 90.795767][ T6215] ? strncpy_from_user+0x19d/0x2d0 [ 90.800875][ T6215] ? do_getname+0x191/0x390 [ 90.805421][ T6215] __x64_sys_mkdir+0x6b/0x90 [ 90.810002][ T6215] do_syscall_64+0x106/0xf80 [ 90.814667][ T6215] ? clear_bhb_loop+0x40/0x90 [ 90.819335][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.825240][ T6215] RIP: 0033:0x7fc0d6c6e3b9 [ 90.829656][ T6215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 90.849355][ T6215] RSP: 002b:00007fc0d79bb0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 90.857769][ T6215] RAX: ffffffffffffffda RBX: 00007fc0d6dac050 RCX: 00007fc0d6c6e3b9 [ 90.865721][ T6215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 90.873684][ T6215] RBP: 00007fc0d6ccf498 R08: 0000000000000000 R09: 0000000000000000 [ 90.881635][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.889585][ T6215] R13: 000000000000000b R14: 00007fc0d6dac050 R15: 00007ffe589c6108 [ 90.897561][ T6215] [ 90.900854][ T6215] Kernel Offset: disabled [ 90.905161][ T6215] Rebooting in 86400 seconds..