[ 82.121399][ T1111] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.191' (ED25519) to the list of known hosts. 2026/10/06 21:05:28 parsed 1 programs 2026/10/06 21:05:28 serving rpc on tcp://45711 Setting up swapspace version 1, size = 127995904 bytes [ 91.479577][ T4534] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 95.861543][ T4699] chnl_net:caif_netlink_parms(): no params data found [ 95.898080][ T4699] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.905836][ T4699] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.913896][ T4699] device bridge_slave_0 entered promiscuous mode [ 95.922276][ T4699] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.929776][ T4699] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.937831][ T4699] device bridge_slave_1 entered promiscuous mode [ 95.955761][ T4699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.966745][ T4699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.986896][ T4699] team0: Port device team_slave_0 added [ 95.994413][ T4699] team0: Port device team_slave_1 added [ 96.009214][ T4699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.016398][ T4699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.042746][ T4699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.054874][ T4699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.062117][ T4699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.088492][ T4699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.114445][ T4699] device hsr_slave_0 entered promiscuous mode [ 96.121636][ T4699] device hsr_slave_1 entered promiscuous mode [ 96.645913][ T4699] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.656898][ T4699] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.667947][ T4699] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.702216][ T4699] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.726486][ T4699] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.733715][ T4699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.741140][ T4699] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.748233][ T4699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.820170][ T4699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.853903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.863273][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.873909][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.884707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 96.900936][ T4699] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.952018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.961903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.973132][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.980947][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.992869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.001717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.011728][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.018849][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.027026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.047764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.057944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.070873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.110638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.119052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.152033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.169180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.188871][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.208911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.217625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.243667][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.411529][ T4699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.419033][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.426656][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.482366][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.499408][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.530145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.542856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.554195][ T4699] device veth0_vlan entered promiscuous mode [ 97.562228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.590250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.603350][ T4699] device veth1_vlan entered promiscuous mode [ 97.651577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.661555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.673054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.683256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.694746][ T4699] device veth0_macvtap entered promiscuous mode [ 97.706405][ T4699] device veth1_macvtap entered promiscuous mode [ 97.725760][ T4699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.734883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.759730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.768232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.780077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.796651][ T4699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.821299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.831285][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.852946][ T4699] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.862994][ T4699] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.872326][ T4699] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.881776][ T4699] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.162083][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.178689][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.189766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.226660][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.241007][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.252228][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.892238][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/10/06 21:05:38 executed programs: 0 [ 99.253072][ T4831] chnl_net:caif_netlink_parms(): no params data found [ 99.313585][ T4831] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.321089][ T4831] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.329519][ T4831] device bridge_slave_0 entered promiscuous mode [ 99.339005][ T4831] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.346489][ T4831] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.355087][ T4831] device bridge_slave_1 entered promiscuous mode [ 99.377178][ T4831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.392375][ T4831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.424389][ T4831] team0: Port device team_slave_0 added [ 99.434666][ T4831] team0: Port device team_slave_1 added [ 99.462655][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.470511][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.500477][ T4831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.514513][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.524249][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.554366][ T4831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.597623][ T4831] device hsr_slave_0 entered promiscuous mode [ 99.606929][ T4831] device hsr_slave_1 entered promiscuous mode [ 99.614440][ T4831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.625190][ T4831] Cannot create hsr debugfs directory [ 101.148532][ T4239] Bluetooth: hci0: command 0x0409 tx timeout [ 101.865221][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.083523][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.136470][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.229766][ T4237] Bluetooth: hci0: command 0x041b tx timeout [ 103.927359][ T4831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.938631][ T4831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.948249][ T4831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.957962][ T4831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.008253][ T4831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.022441][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.031563][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.052628][ T4831] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.063063][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.072894][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.081990][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.089215][ T4353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.097667][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.125804][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.136093][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.145766][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.153126][ T4353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.182907][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.192470][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.205458][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.216943][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.226051][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.240342][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.249457][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.273480][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.283398][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.295811][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.305840][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.316787][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.415683][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.423667][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.457617][ T4831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.474573][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.483951][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.508572][ T144] device hsr_slave_0 left promiscuous mode [ 104.515842][ T144] device hsr_slave_1 left promiscuous mode [ 104.523216][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.531362][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.541002][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.548712][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.556770][ T144] device bridge_slave_1 left promiscuous mode [ 104.563892][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.574075][ T144] device bridge_slave_0 left promiscuous mode [ 104.581326][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.593502][ T144] device veth1_macvtap left promiscuous mode [ 104.599904][ T144] device veth0_macvtap left promiscuous mode [ 104.605968][ T144] device veth1_vlan left promiscuous mode [ 104.611895][ T144] device veth0_vlan left promiscuous mode [ 104.737895][ T144] team0 (unregistering): Port device team_slave_1 removed [ 104.753977][ T144] team0 (unregistering): Port device team_slave_0 removed [ 104.769524][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.783577][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.833013][ T144] bond0 (unregistering): Released all slaves [ 104.863134][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.871581][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.881338][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.890444][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.900228][ T4831] device veth0_vlan entered promiscuous mode [ 104.915746][ T4831] device veth1_vlan entered promiscuous mode [ 104.938383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.947232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.956807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.965676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.976784][ T4831] device veth0_macvtap entered promiscuous mode [ 104.986815][ T4831] device veth1_macvtap entered promiscuous mode [ 105.010302][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.017813][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.026841][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.035561][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.044443][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.055803][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.066238][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.076074][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.094318][ T4831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.104029][ T4831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.112942][ T4831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.121766][ T4831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.173538][ T460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.183072][ T460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.193221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/10/06 21:05:44 executed programs: 2 [ 105.217486][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.227207][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.238065][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.308901][ T5090] Bluetooth: hci0: command 0x040f tx timeout [ 105.536393][ T5121] loop0: detected capacity change from 0 to 32768 [ 105.646504][ T5121] XFS (loop0): Mounting V5 Filesystem [ 105.721634][ T5121] XFS (loop0): Ending clean mount [ 105.741135][ T5121] XFS (loop0): Quotacheck needed: Please wait. [ 105.789134][ T5121] XFS (loop0): Quotacheck: Done. [ 105.835917][ T5121] FAULT_INJECTION: forcing a failure. [ 105.835917][ T5121] name failslab, interval 1, probability 0, space 0, times 1 [ 105.852531][ T5121] CPU: 1 PID: 5121 Comm: syz.0.17 Not tainted syzkaller #0 [ 105.860228][ T5121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 105.870671][ T5121] Call Trace: [ 105.873985][ T5121] [ 105.876937][ T5121] dump_stack_lvl+0x188/0x250 [ 105.881653][ T5121] ? show_regs_print_info+0x20/0x20 [ 105.886957][ T5121] ? load_image+0x410/0x410 [ 105.891488][ T5121] ? __might_sleep+0xf0/0xf0 [ 105.896158][ T5121] ? __lock_acquire+0x7d40/0x7d40 [ 105.901200][ T5121] should_fail+0x383/0x4b0 [ 105.905637][ T5121] should_failslab+0x5/0x20 [ 105.910150][ T5121] slab_pre_alloc_hook+0x51/0xc0 [ 105.915095][ T5121] __kmalloc_node+0x6d/0x3a0 [ 105.919693][ T5121] ? kvmalloc_node+0x84/0x130 [ 105.924372][ T5121] ? rcu_is_watching+0x11/0xa0 [ 105.929156][ T5121] ? xlog_cil_commit+0x29a/0x2020 [ 105.934403][ T5121] kvmalloc_node+0x84/0x130 [ 105.938943][ T5121] xlog_cil_commit+0x2ac/0x2020 [ 105.943819][ T5121] ? xfs_trans_log_inode+0x593/0x910 [ 105.949216][ T5121] ? __lock_acquire+0x7d40/0x7d40 [ 105.954370][ T5121] ? xfs_trans_apply_dquot_deltas+0xe69/0xe80 [ 105.960650][ T5121] ? xlog_cil_empty+0x80/0x80 [ 105.965455][ T5121] __xfs_trans_commit+0x6b4/0xc60 [ 105.970634][ T5121] ? xfs_trans_commit+0x20/0x20 [ 105.975607][ T5121] ? xfs_trans_ichgtime+0x160/0x160 [ 105.980901][ T5121] ? rcu_is_watching+0x11/0xa0 [ 105.985672][ T5121] ? xfs_trans_add_item+0x14c/0x2a0 [ 105.990984][ T5121] xfs_vn_update_time+0x3a1/0x510 [ 105.996046][ T5121] ? xfs_vn_fiemap+0x100/0x100 [ 106.000824][ T5121] ? dentry_needs_remove_privs+0xf0/0xf0 [ 106.006496][ T5121] ? xfs_vn_fiemap+0x100/0x100 [ 106.011406][ T5121] file_update_time+0x3a6/0x440 [ 106.016287][ T5121] ? file_remove_privs+0x5d0/0x5d0 [ 106.021523][ T5121] ? xfs_break_leased_layouts+0x276/0x2a0 [ 106.027256][ T5121] xfs_file_write_checks+0x8bc/0xa80 [ 106.032563][ T5121] ? clear_nonspinnable+0x60/0x60 [ 106.037630][ T5121] ? xfs_file_buffered_write+0xa40/0xa40 [ 106.043349][ T5121] ? down_write_nested+0x47/0x60 [ 106.048434][ T5121] ? xfs_ilock+0x1cb/0x350 [ 106.052862][ T5121] xfs_file_buffered_write+0x163/0xa40 [ 106.058344][ T5121] ? xfs_file_dax_write+0x790/0x790 [ 106.063629][ T5121] ? rcu_read_lock_any_held+0xb0/0x130 [ 106.069101][ T5121] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 106.074398][ T5121] ? end_current_label_crit_section+0x14b/0x170 [ 106.080651][ T5121] ? xfs_file_write_iter+0x2bc/0x610 [ 106.086053][ T5121] vfs_write+0x748/0xd70 [ 106.090323][ T5121] ? file_end_write+0x250/0x250 [ 106.095210][ T5121] ? mutex_lock_nested+0x17/0x20 [ 106.100522][ T5121] ? __fdget_pos+0x2bf/0x370 [ 106.105124][ T5121] ? ksys_write+0x70/0x260 [ 106.109557][ T5121] ksys_write+0x153/0x260 [ 106.113943][ T5121] ? __ia32_sys_read+0x80/0x80 [ 106.118733][ T5121] ? lockdep_hardirqs_on+0x94/0x140 [ 106.124121][ T5121] do_syscall_64+0x4c/0xa0 [ 106.128637][ T5121] ? clear_bhb_loop+0x30/0x80 [ 106.133419][ T5121] ? clear_bhb_loop+0x30/0x80 [ 106.138136][ T5121] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.144057][ T5121] RIP: 0033:0x7f047a7b7e59 [ 106.148510][ T5121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.168491][ T5121] RSP: 002b:00007f0479e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.176930][ T5121] RAX: ffffffffffffffda RBX: 00007f047aa3ffa0 RCX: 00007f047a7b7e59 [ 106.185168][ T5121] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000004 [ 106.193318][ T5121] RBP: 00007f0479e18090 R08: 0000000000000000 R09: 0000000000000000 [ 106.201396][ T5121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.209565][ T5121] R13: 00007f047aa40038 R14: 00007f047aa3ffa0 R15: 00007ffe7a163638 [ 106.217835][ T5121] [ 106.235603][ T5121] ================================================================== [ 106.244464][ T5121] BUG: KASAN: null-ptr-deref in xlog_cil_commit+0x2c9/0x2020 [ 106.251870][ T5121] Write of size 88 at addr 0000000000000000 by task syz.0.17/5121 [ 106.259694][ T5121] [ 106.262025][ T5121] CPU: 1 PID: 5121 Comm: syz.0.17 Not tainted syzkaller #0 [ 106.269362][ T5121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.279513][ T5121] Call Trace: [ 106.282821][ T5121] [ 106.285829][ T5121] dump_stack_lvl+0x188/0x250 [ 106.290524][ T5121] ? xlog_cil_commit+0x2c9/0x2020 [ 106.295657][ T5121] ? show_regs_print_info+0x20/0x20 [ 106.300861][ T5121] ? load_image+0x410/0x410 [ 106.305365][ T5121] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 106.310817][ T5121] ? should_fail+0x271/0x4b0 [ 106.316019][ T5121] ? xlog_cil_commit+0x2c9/0x2020 [ 106.321062][ T5121] kasan_report+0xd5/0x130 [ 106.325534][ T5121] ? xlog_cil_commit+0x2c9/0x2020 [ 106.331078][ T5121] kasan_check_range+0x235/0x290 [ 106.336091][ T5121] memset+0x1e/0x40 [ 106.340110][ T5121] xlog_cil_commit+0x2c9/0x2020 [ 106.345163][ T5121] ? xfs_trans_log_inode+0x593/0x910 [ 106.350447][ T5121] ? __lock_acquire+0x7d40/0x7d40 [ 106.355560][ T5121] ? xfs_trans_apply_dquot_deltas+0xe69/0xe80 [ 106.361938][ T5121] ? xlog_cil_empty+0x80/0x80 [ 106.366635][ T5121] __xfs_trans_commit+0x6b4/0xc60 [ 106.371657][ T5121] ? xfs_trans_commit+0x20/0x20 [ 106.376634][ T5121] ? xfs_trans_ichgtime+0x160/0x160 [ 106.381830][ T5121] ? rcu_is_watching+0x11/0xa0 [ 106.386847][ T5121] ? xfs_trans_add_item+0x14c/0x2a0 [ 106.392116][ T5121] xfs_vn_update_time+0x3a1/0x510 [ 106.397144][ T5121] ? xfs_vn_fiemap+0x100/0x100 [ 106.401904][ T5121] ? dentry_needs_remove_privs+0xf0/0xf0 [ 106.408230][ T5121] ? xfs_vn_fiemap+0x100/0x100 [ 106.412995][ T5121] file_update_time+0x3a6/0x440 [ 106.417868][ T5121] ? file_remove_privs+0x5d0/0x5d0 [ 106.423011][ T5121] ? xfs_break_leased_layouts+0x276/0x2a0 [ 106.428858][ T5121] xfs_file_write_checks+0x8bc/0xa80 [ 106.434521][ T5121] ? clear_nonspinnable+0x60/0x60 [ 106.439664][ T5121] ? xfs_file_buffered_write+0xa40/0xa40 [ 106.445419][ T5121] ? down_write_nested+0x47/0x60 [ 106.450856][ T5121] ? xfs_ilock+0x1cb/0x350 [ 106.455358][ T5121] xfs_file_buffered_write+0x163/0xa40 [ 106.460821][ T5121] ? xfs_file_dax_write+0x790/0x790 [ 106.466040][ T5121] ? rcu_read_lock_any_held+0xb0/0x130 [ 106.471530][ T5121] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 106.476839][ T5121] ? end_current_label_crit_section+0x14b/0x170 [ 106.483094][ T5121] ? xfs_file_write_iter+0x2bc/0x610 [ 106.488499][ T5121] vfs_write+0x748/0xd70 [ 106.492763][ T5121] ? file_end_write+0x250/0x250 [ 106.497966][ T5121] ? mutex_lock_nested+0x17/0x20 [ 106.502913][ T5121] ? __fdget_pos+0x2bf/0x370 [ 106.507518][ T5121] ? ksys_write+0x70/0x260 [ 106.511928][ T5121] ksys_write+0x153/0x260 [ 106.516336][ T5121] ? __ia32_sys_read+0x80/0x80 [ 106.521098][ T5121] ? lockdep_hardirqs_on+0x94/0x140 [ 106.526301][ T5121] do_syscall_64+0x4c/0xa0 [ 106.530708][ T5121] ? clear_bhb_loop+0x30/0x80 [ 106.535476][ T5121] ? clear_bhb_loop+0x30/0x80 [ 106.540162][ T5121] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.546134][ T5121] RIP: 0033:0x7f047a7b7e59 [ 106.550631][ T5121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.570492][ T5121] RSP: 002b:00007f0479e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.578929][ T5121] RAX: ffffffffffffffda RBX: 00007f047aa3ffa0 RCX: 00007f047a7b7e59 [ 106.586894][ T5121] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000004 [ 106.594944][ T5121] RBP: 00007f0479e18090 R08: 0000000000000000 R09: 0000000000000000 [ 106.602914][ T5121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.610878][ T5121] R13: 00007f047aa40038 R14: 00007f047aa3ffa0 R15: 00007ffe7a163638 [ 106.618857][ T5121] [ 106.621865][ T5121] ================================================================== [ 106.629991][ T5121] Disabling lock debugging due to kernel taint [ 106.645179][ T5121] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 106.652523][ T5121] CPU: 0 PID: 5121 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 106.661204][ T5121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.671274][ T5121] Call Trace: [ 106.674610][ T5121] [ 106.677563][ T5121] dump_stack_lvl+0x188/0x250 [ 106.682286][ T5121] ? show_regs_print_info+0x20/0x20 [ 106.687586][ T5121] ? load_image+0x410/0x410 [ 106.692098][ T5121] panic+0x2f8/0x850 [ 106.695993][ T5121] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 106.702261][ T5121] ? bpf_jit_dump+0xd0/0xd0 [ 106.706948][ T5121] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 106.713304][ T5121] ? _raw_spin_unlock+0x40/0x40 [ 106.718173][ T5121] ? xlog_cil_commit+0x2c9/0x2020 [ 106.723216][ T5121] check_panic_on_warn+0x80/0xa0 [ 106.728369][ T5121] ? xlog_cil_commit+0x2c9/0x2020 [ 106.733933][ T5121] end_report+0x6d/0xf0 [ 106.738187][ T5121] kasan_report+0x102/0x130 [ 106.742869][ T5121] ? xlog_cil_commit+0x2c9/0x2020 [ 106.748122][ T5121] kasan_check_range+0x235/0x290 [ 106.753403][ T5121] memset+0x1e/0x40 [ 106.757495][ T5121] xlog_cil_commit+0x2c9/0x2020 [ 106.763174][ T5121] ? xfs_trans_log_inode+0x593/0x910 [ 106.770874][ T5121] ? __lock_acquire+0x7d40/0x7d40 [ 106.777119][ T5121] ? xfs_trans_apply_dquot_deltas+0xe69/0xe80 [ 106.784363][ T5121] ? xlog_cil_empty+0x80/0x80 [ 106.789313][ T5121] __xfs_trans_commit+0x6b4/0xc60 [ 106.794404][ T5121] ? xfs_trans_commit+0x20/0x20 [ 106.799357][ T5121] ? xfs_trans_ichgtime+0x160/0x160 [ 106.804586][ T5121] ? rcu_is_watching+0x11/0xa0 [ 106.809484][ T5121] ? xfs_trans_add_item+0x14c/0x2a0 [ 106.815081][ T5121] xfs_vn_update_time+0x3a1/0x510 [ 106.820449][ T5121] ? xfs_vn_fiemap+0x100/0x100 [ 106.825227][ T5121] ? dentry_needs_remove_privs+0xf0/0xf0 [ 106.831117][ T5121] ? xfs_vn_fiemap+0x100/0x100 [ 106.836225][ T5121] file_update_time+0x3a6/0x440 [ 106.841465][ T5121] ? file_remove_privs+0x5d0/0x5d0 [ 106.846797][ T5121] ? xfs_break_leased_layouts+0x276/0x2a0 [ 106.852654][ T5121] xfs_file_write_checks+0x8bc/0xa80 [ 106.857964][ T5121] ? clear_nonspinnable+0x60/0x60 [ 106.863208][ T5121] ? xfs_file_buffered_write+0xa40/0xa40 [ 106.869284][ T5121] ? down_write_nested+0x47/0x60 [ 106.874229][ T5121] ? xfs_ilock+0x1cb/0x350 [ 106.878749][ T5121] xfs_file_buffered_write+0x163/0xa40 [ 106.884579][ T5121] ? xfs_file_dax_write+0x790/0x790 [ 106.889872][ T5121] ? rcu_read_lock_any_held+0xb0/0x130 [ 106.895340][ T5121] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 106.900763][ T5121] ? end_current_label_crit_section+0x14b/0x170 [ 106.907015][ T5121] ? xfs_file_write_iter+0x2bc/0x610 [ 106.912307][ T5121] vfs_write+0x748/0xd70 [ 106.916658][ T5121] ? file_end_write+0x250/0x250 [ 106.921739][ T5121] ? mutex_lock_nested+0x17/0x20 [ 106.926682][ T5121] ? __fdget_pos+0x2bf/0x370 [ 106.931269][ T5121] ? ksys_write+0x70/0x260 [ 106.935697][ T5121] ksys_write+0x153/0x260 [ 106.940040][ T5121] ? __ia32_sys_read+0x80/0x80 [ 106.944853][ T5121] ? lockdep_hardirqs_on+0x94/0x140 [ 106.950268][ T5121] do_syscall_64+0x4c/0xa0 [ 106.954797][ T5121] ? clear_bhb_loop+0x30/0x80 [ 106.959494][ T5121] ? clear_bhb_loop+0x30/0x80 [ 106.964171][ T5121] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.970084][ T5121] RIP: 0033:0x7f047a7b7e59 [ 106.974799][ T5121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.994932][ T5121] RSP: 002b:00007f0479e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 107.003434][ T5121] RAX: ffffffffffffffda RBX: 00007f047aa3ffa0 RCX: 00007f047a7b7e59 [ 107.011505][ T5121] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000004 [ 107.019481][ T5121] RBP: 00007f0479e18090 R08: 0000000000000000 R09: 0000000000000000 [ 107.027559][ T5121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.035733][ T5121] R13: 00007f047aa40038 R14: 00007f047aa3ffa0 R15: 00007ffe7a163638 [ 107.043708][ T5121] [ 107.047002][ T5121] Kernel Offset: disabled [ 107.051448][ T5121] Rebooting in 86400 seconds..