Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. 2026/03/22 22:18:48 parsed 1 programs [ 63.748301][ T4190] cgroup: Unknown subsys name 'net' [ 63.888630][ T4190] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.375402][ T4190] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.370474][ T4215] chnl_net:caif_netlink_parms(): no params data found [ 67.418422][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.426117][ T4215] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.434426][ T4215] device bridge_slave_0 entered promiscuous mode [ 67.443648][ T4215] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.450744][ T4215] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.458709][ T4215] device bridge_slave_1 entered promiscuous mode [ 67.482908][ T4215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.494072][ T4215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.516251][ T4215] team0: Port device team_slave_0 added [ 67.523960][ T4215] team0: Port device team_slave_1 added [ 67.547406][ T4215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.555512][ T4215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.583157][ T4215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.596492][ T4215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.604767][ T4215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.631928][ T4215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.671699][ T4215] device hsr_slave_0 entered promiscuous mode [ 67.679807][ T4215] device hsr_slave_1 entered promiscuous mode [ 67.807425][ T4215] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.819603][ T4215] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.830079][ T4215] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.840233][ T4215] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.869433][ T4215] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.876704][ T4215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.884784][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.891873][ T4215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.950070][ T4215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.964690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.976362][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.985557][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.995409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 68.010834][ T4215] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.024038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.033323][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.040409][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.063074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.072272][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.079371][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.090237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.113619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.122258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.134840][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.145128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.157098][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.274010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.281481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.296746][ T4215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.320789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.346740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.357476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.369464][ T4215] device veth0_vlan entered promiscuous mode [ 68.377441][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.386216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.399316][ T4215] device veth1_vlan entered promiscuous mode [ 68.424884][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.435051][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.445507][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.454500][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.467265][ T4215] device veth0_macvtap entered promiscuous mode [ 68.478968][ T4215] device veth1_macvtap entered promiscuous mode [ 68.498914][ T4215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.509851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.518852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.529066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.537876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.552918][ T4215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.564127][ T4215] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.574736][ T4215] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.583939][ T4215] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.592817][ T4215] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.604888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.614825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.749190][ T4215] syz-executor (4215) used greatest stack depth: 20272 bytes left [ 68.860859][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.873831][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.884943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.910355][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.918294][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.926184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.188044][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.206058][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.212609][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.378828][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.728153][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.789489][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/03/22 22:19:01 executed programs: 0 [ 75.312270][ T144] device hsr_slave_0 left promiscuous mode [ 75.320347][ T144] device hsr_slave_1 left promiscuous mode [ 75.326992][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.334683][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.343045][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.350456][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.358441][ T144] device bridge_slave_1 left promiscuous mode [ 75.365485][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.379185][ T144] device bridge_slave_0 left promiscuous mode [ 75.385539][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.403205][ T144] device veth1_macvtap left promiscuous mode [ 75.409434][ T144] device veth0_macvtap left promiscuous mode [ 75.416082][ T144] device veth1_vlan left promiscuous mode [ 75.421995][ T144] device veth0_vlan left promiscuous mode [ 75.577259][ T144] team0 (unregistering): Port device team_slave_1 removed [ 75.590538][ T144] team0 (unregistering): Port device team_slave_0 removed [ 75.605261][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.620292][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.673688][ T144] bond0 (unregistering): Released all slaves [ 75.820152][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 75.896677][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.903913][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.912036][ T4328] device bridge_slave_0 entered promiscuous mode [ 75.920635][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.927856][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.936377][ T4328] device bridge_slave_1 entered promiscuous mode [ 75.961741][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.977300][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.007666][ T4328] team0: Port device team_slave_0 added [ 76.015832][ T4328] team0: Port device team_slave_1 added [ 76.036966][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.044244][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.073141][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.087541][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.095694][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.123399][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.160623][ T4328] device hsr_slave_0 entered promiscuous mode [ 76.167634][ T4328] device hsr_slave_1 entered promiscuous mode [ 76.801247][ T4328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.818606][ T4328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.828723][ T4328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.839328][ T4328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.977309][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.000766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.010838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.030396][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.043168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.055010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.064212][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.071298][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.094329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.102899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.111700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.121997][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.129125][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.141484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.165049][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.174208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.185407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.196980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.207614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.217338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.227211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.239064][ T4328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.252646][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.264020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.274019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.283367][ T4222] Bluetooth: hci0: command 0x0409 tx timeout [ 77.293096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.500029][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.509774][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.525637][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.555634][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.566780][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.591340][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.600587][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.615259][ T4328] device veth0_vlan entered promiscuous mode [ 77.626212][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.634839][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.648100][ T4328] device veth1_vlan entered promiscuous mode [ 77.674491][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.686979][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.696329][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.706957][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.724392][ T4328] device veth0_macvtap entered promiscuous mode [ 77.735901][ T4328] device veth1_macvtap entered promiscuous mode [ 77.754775][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.762231][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.780183][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.793099][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.812718][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.832296][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.840274][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.849554][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.876288][ T4328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.892682][ T4328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.901415][ T4328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.932366][ T4328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.019267][ T1258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.043675][ T1258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.051752][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.079643][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.092066][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.101563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.458993][ T4401] loop0: detected capacity change from 0 to 32768 [ 78.657552][ T4401] XFS (loop0): Mounting V5 Filesystem [ 78.720761][ T4401] XFS (loop0): Ending clean mount [ 78.755482][ T4401] FAULT_INJECTION: forcing a failure. [ 78.755482][ T4401] name failslab, interval 1, probability 0, space 0, times 1 [ 78.772565][ T4401] CPU: 0 PID: 4401 Comm: syz.0.17 Not tainted syzkaller #0 [ 78.779819][ T4401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 78.789908][ T4401] Call Trace: [ 78.793217][ T4401] [ 78.796174][ T4401] dump_stack_lvl+0x188/0x250 [ 78.800900][ T4401] ? show_regs_print_info+0x20/0x20 [ 78.806139][ T4401] ? load_image+0x400/0x400 [ 78.810685][ T4401] ? __might_sleep+0xf0/0xf0 [ 78.815298][ T4401] ? __lock_acquire+0x7d10/0x7d10 [ 78.820365][ T4401] should_fail+0x38c/0x4c0 [ 78.824833][ T4401] should_failslab+0x5/0x20 [ 78.829359][ T4401] slab_pre_alloc_hook+0x51/0xc0 [ 78.834343][ T4401] __kmalloc_node+0x6e/0x3b0 [ 78.838961][ T4401] ? kvmalloc_node+0x84/0x130 [ 78.843663][ T4401] ? rcu_is_watching+0x11/0xa0 [ 78.848465][ T4401] ? xlog_cil_commit+0x2a9/0x2050 [ 78.853517][ T4401] kvmalloc_node+0x84/0x130 [ 78.858055][ T4401] xlog_cil_commit+0x2bb/0x2050 [ 78.862939][ T4401] ? xfs_trans_log_inode+0x58a/0x930 [ 78.868265][ T4401] ? xlog_cil_empty+0x80/0x80 [ 78.872980][ T4401] __xfs_trans_commit+0x6b4/0xc60 [ 78.878039][ T4401] ? rwsem_write_trylock+0x135/0x1c0 [ 78.883350][ T4401] ? xfs_trans_commit+0x20/0x20 [ 78.888228][ T4401] ? xfs_trans_ichgtime+0x160/0x160 [ 78.893570][ T4401] ? rcu_is_watching+0x11/0xa0 [ 78.898364][ T4401] ? xfs_trans_add_item+0x14c/0x2a0 [ 78.903596][ T4401] xfs_vn_update_time+0x3a0/0x520 [ 78.908658][ T4401] ? current_time+0x1ad/0x2c0 [ 78.913371][ T4401] ? xfs_vn_fiemap+0x100/0x100 [ 78.918202][ T4401] ? xfs_vn_fiemap+0x100/0x100 [ 78.922995][ T4401] file_update_time+0x3a6/0x440 [ 78.927878][ T4401] ? file_remove_privs+0x5d0/0x5d0 [ 78.933028][ T4401] __xfs_filemap_fault+0x2fc/0x8f0 [ 78.938175][ T4401] ? do_page_mkwrite+0x168/0x3c0 [ 78.943155][ T4401] ? xfs_filemap_pfn_mkwrite+0x20/0x20 [ 78.948647][ T4401] ? __lock_acquire+0x7d10/0x7d10 [ 78.953711][ T4401] do_page_mkwrite+0x168/0x3c0 [ 78.958509][ T4401] wp_page_shared+0x16b/0x6d0 [ 78.963218][ T4401] handle_mm_fault+0x1f06/0x4410 [ 78.968213][ T4401] ? get_page+0xe0/0xe0 [ 78.972413][ T4401] ? vmacache_find+0x238/0x590 [ 78.977213][ T4401] ? find_vma+0xd2/0x230 [ 78.981497][ T4401] do_user_addr_fault+0x489/0xc80 [ 78.986578][ T4401] exc_page_fault+0x60/0x100 [ 78.991210][ T4401] ? __might_fault+0xb7/0x110 [ 78.995918][ T4401] asm_exc_page_fault+0x22/0x30 [ 79.000804][ T4401] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 79.007432][ T4401] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 79.027073][ T4401] RSP: 0018:ffffc9000304fb38 EFLAGS: 00050246 [ 79.033171][ T4401] RAX: ffffffff83e1a101 RBX: 0000000000000040 RCX: 0000000000000040 [ 79.041186][ T4401] RDX: 0000000000000040 RSI: ffffc9000304fd40 RDI: 0000200000000240 [ 79.049189][ T4401] RBP: ffffc9000304fc90 R08: ffffc9000304fd7f R09: 1ffff92000609faf [ 79.057188][ T4401] R10: dffffc0000000000 R11: fffff52000609fb0 R12: ffffc9000304fd40 [ 79.065189][ T4401] R13: dffffc00000000ff R14: 0000200000000240 R15: 0000000000000000 [ 79.073202][ T4401] ? _copy_to_iter+0x2b1/0x1180 [ 79.078089][ T4401] _copy_to_iter+0x318/0x1180 [ 79.082819][ T4401] ? iov_iter_init+0x170/0x170 [ 79.087616][ T4401] ? chacha_block_generic+0x5b/0xd20 [ 79.093028][ T4401] get_random_bytes_user+0x1cc/0x3d0 [ 79.098345][ T4401] ? signal_pending+0xa0/0xa0 [ 79.103046][ T4401] ? vfs_write+0x8b2/0xd60 [ 79.107511][ T4401] ? memset+0x1e/0x40 [ 79.111522][ T4401] ? import_single_range+0x1aa/0x2a0 [ 79.116855][ T4401] __x64_sys_getrandom+0x1c2/0x2a0 [ 79.122002][ T4401] ? add_disk_randomness+0xd0/0xd0 [ 79.127328][ T4401] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 79.133344][ T4401] ? lock_chain_count+0x20/0x20 [ 79.138242][ T4401] ? vtime_user_exit+0x2c8/0x3e0 [ 79.143215][ T4401] ? lockdep_hardirqs_on+0x94/0x140 [ 79.148445][ T4401] do_syscall_64+0x4c/0xa0 [ 79.152885][ T4401] ? clear_bhb_loop+0x30/0x80 [ 79.157580][ T4401] ? clear_bhb_loop+0x30/0x80 [ 79.162279][ T4401] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.168202][ T4401] RIP: 0033:0x7fdcb488e799 [ 79.172639][ T4401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.192355][ T4401] RSP: 002b:00007ffec335d1b8 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 79.200822][ T4401] RAX: ffffffffffffffda RBX: 00007fdcb4b07fa0 RCX: 00007fdcb488e799 [ 79.208825][ T4401] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 79.216832][ T4401] RBP: 00007ffec335d220 R08: 0000000000000000 R09: 0000000000000000 [ 79.224827][ T4401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.232820][ T4401] R13: 00007fdcb4b07fac R14: 00007fdcb4b07fa0 R15: 00007fdcb4b07fa0 [ 79.240830][ T4401] [ 79.281007][ T4401] ================================================================== [ 79.289415][ T4401] BUG: KASAN: null-ptr-deref in xlog_cil_commit+0x2d8/0x2050 [ 79.296830][ T4401] Write of size 88 at addr 0000000000000000 by task syz.0.17/4401 [ 79.304661][ T4401] [ 79.307006][ T4401] CPU: 0 PID: 4401 Comm: syz.0.17 Not tainted syzkaller #0 [ 79.314223][ T4401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 79.324334][ T4401] Call Trace: [ 79.327636][ T4401] [ 79.330585][ T4401] dump_stack_lvl+0x188/0x250 [ 79.335291][ T4401] ? xlog_cil_commit+0x2d8/0x2050 [ 79.340346][ T4401] ? show_regs_print_info+0x20/0x20 [ 79.345589][ T4401] ? load_image+0x400/0x400 [ 79.350119][ T4401] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 79.355616][ T4401] ? should_fail+0x277/0x4c0 [ 79.360232][ T4401] ? xlog_cil_commit+0x2d8/0x2050 [ 79.365288][ T4401] kasan_report+0xd5/0x130 [ 79.369744][ T4401] ? xlog_cil_commit+0x2d8/0x2050 [ 79.374808][ T4401] kasan_check_range+0x235/0x290 [ 79.379787][ T4401] memset+0x1e/0x40 [ 79.383628][ T4401] xlog_cil_commit+0x2d8/0x2050 [ 79.388517][ T4401] ? xfs_trans_log_inode+0x58a/0x930 [ 79.393850][ T4401] ? xlog_cil_empty+0x80/0x80 [ 79.398573][ T4401] __xfs_trans_commit+0x6b4/0xc60 [ 79.403631][ T4401] ? rwsem_write_trylock+0x135/0x1c0 [ 79.408950][ T4401] ? xfs_trans_commit+0x20/0x20 [ 79.413828][ T4401] ? xfs_trans_ichgtime+0x160/0x160 [ 79.419060][ T4401] ? rcu_is_watching+0x11/0xa0 [ 79.423851][ T4401] ? xfs_trans_add_item+0x14c/0x2a0 [ 79.429083][ T4401] xfs_vn_update_time+0x3a0/0x520 [ 79.434149][ T4401] ? current_time+0x1ad/0x2c0 [ 79.438865][ T4401] ? xfs_vn_fiemap+0x100/0x100 [ 79.443673][ T4401] ? xfs_vn_fiemap+0x100/0x100 [ 79.448471][ T4401] file_update_time+0x3a6/0x440 [ 79.453352][ T4401] ? file_remove_privs+0x5d0/0x5d0 [ 79.458518][ T4401] __xfs_filemap_fault+0x2fc/0x8f0 [ 79.463661][ T4401] ? do_page_mkwrite+0x168/0x3c0 [ 79.468626][ T4401] ? xfs_filemap_pfn_mkwrite+0x20/0x20 [ 79.474114][ T4401] ? __lock_acquire+0x7d10/0x7d10 [ 79.479183][ T4401] do_page_mkwrite+0x168/0x3c0 [ 79.483997][ T4401] wp_page_shared+0x16b/0x6d0 [ 79.488709][ T4401] handle_mm_fault+0x1f06/0x4410 [ 79.493687][ T4401] ? get_page+0xe0/0xe0 [ 79.497887][ T4401] ? vmacache_find+0x238/0x590 [ 79.502681][ T4401] ? find_vma+0xd2/0x230 [ 79.506950][ T4401] do_user_addr_fault+0x489/0xc80 [ 79.512011][ T4401] exc_page_fault+0x60/0x100 [ 79.516621][ T4401] ? __might_fault+0xb7/0x110 [ 79.521333][ T4401] asm_exc_page_fault+0x22/0x30 [ 79.526224][ T4401] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 79.532850][ T4401] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 79.552481][ T4401] RSP: 0018:ffffc9000304fb38 EFLAGS: 00050246 [ 79.558582][ T4401] RAX: ffffffff83e1a101 RBX: 0000000000000040 RCX: 0000000000000040 [ 79.566666][ T4401] RDX: 0000000000000040 RSI: ffffc9000304fd40 RDI: 0000200000000240 [ 79.574656][ T4401] RBP: ffffc9000304fc90 R08: ffffc9000304fd7f R09: 1ffff92000609faf [ 79.582654][ T4401] R10: dffffc0000000000 R11: fffff52000609fb0 R12: ffffc9000304fd40 [ 79.590643][ T4401] R13: dffffc00000000ff R14: 0000200000000240 R15: 0000000000000000 [ 79.598647][ T4401] ? _copy_to_iter+0x2b1/0x1180 [ 79.603546][ T4401] _copy_to_iter+0x318/0x1180 [ 79.608265][ T4401] ? iov_iter_init+0x170/0x170 [ 79.613233][ T4401] ? chacha_block_generic+0x5b/0xd20 [ 79.618561][ T4401] get_random_bytes_user+0x1cc/0x3d0 [ 79.623883][ T4401] ? signal_pending+0xa0/0xa0 [ 79.628597][ T4401] ? vfs_write+0x8b2/0xd60 [ 79.633056][ T4401] ? memset+0x1e/0x40 [ 79.637074][ T4401] ? import_single_range+0x1aa/0x2a0 [ 79.642659][ T4401] __x64_sys_getrandom+0x1c2/0x2a0 [ 79.647802][ T4401] ? add_disk_randomness+0xd0/0xd0 [ 79.652982][ T4401] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 79.658995][ T4401] ? lock_chain_count+0x20/0x20 [ 79.663879][ T4401] ? vtime_user_exit+0x2c8/0x3e0 [ 79.668850][ T4401] ? lockdep_hardirqs_on+0x94/0x140 [ 79.674084][ T4401] do_syscall_64+0x4c/0xa0 [ 79.678535][ T4401] ? clear_bhb_loop+0x30/0x80 [ 79.683256][ T4401] ? clear_bhb_loop+0x30/0x80 [ 79.687970][ T4401] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.693895][ T4401] RIP: 0033:0x7fdcb488e799 [ 79.698341][ T4401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.717972][ T4401] RSP: 002b:00007ffec335d1b8 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 79.726411][ T4401] RAX: ffffffffffffffda RBX: 00007fdcb4b07fa0 RCX: 00007fdcb488e799 [ 79.734409][ T4401] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 79.742419][ T4401] RBP: 00007ffec335d220 R08: 0000000000000000 R09: 0000000000000000 [ 79.750417][ T4401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.758408][ T4401] R13: 00007fdcb4b07fac R14: 00007fdcb4b07fa0 R15: 00007fdcb4b07fa0 [ 79.766425][ T4401] [ 79.769462][ T4401] ================================================================== [ 79.777535][ T4401] Disabling lock debugging due to kernel taint [ 79.785564][ T4430] Bluetooth: hci0: command 0x041b tx timeout [ 79.799300][ T4401] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 79.806532][ T4401] CPU: 0 PID: 4401 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 79.815137][ T4401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 79.825213][ T4401] Call Trace: [ 79.828507][ T4401] [ 79.831472][ T4401] dump_stack_lvl+0x188/0x250 [ 79.836179][ T4401] ? show_regs_print_info+0x20/0x20 [ 79.841418][ T4401] ? load_image+0x400/0x400 [ 79.845948][ T4401] panic+0x2e5/0x810 [ 79.849869][ T4401] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 79.856040][ T4401] ? bpf_jit_dump+0xd0/0xd0 [ 79.860572][ T4401] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 79.866570][ T4401] ? _raw_spin_unlock+0x40/0x40 [ 79.871438][ T4401] ? xlog_cil_commit+0x2d8/0x2050 [ 79.876491][ T4401] check_panic_on_warn+0x80/0xa0 [ 79.881451][ T4401] ? xlog_cil_commit+0x2d8/0x2050 [ 79.886496][ T4401] end_report+0x6d/0xf0 [ 79.890673][ T4401] kasan_report+0x102/0x130 [ 79.895204][ T4401] ? xlog_cil_commit+0x2d8/0x2050 [ 79.900247][ T4401] kasan_check_range+0x235/0x290 [ 79.905214][ T4401] memset+0x1e/0x40 [ 79.909047][ T4401] xlog_cil_commit+0x2d8/0x2050 [ 79.913927][ T4401] ? xfs_trans_log_inode+0x58a/0x930 [ 79.919241][ T4401] ? xlog_cil_empty+0x80/0x80 [ 79.923964][ T4401] __xfs_trans_commit+0x6b4/0xc60 [ 79.929018][ T4401] ? rwsem_write_trylock+0x135/0x1c0 [ 79.934330][ T4401] ? xfs_trans_commit+0x20/0x20 [ 79.939209][ T4401] ? xfs_trans_ichgtime+0x160/0x160 [ 79.944438][ T4401] ? rcu_is_watching+0x11/0xa0 [ 79.949222][ T4401] ? xfs_trans_add_item+0x14c/0x2a0 [ 79.954432][ T4401] xfs_vn_update_time+0x3a0/0x520 [ 79.959475][ T4401] ? current_time+0x1ad/0x2c0 [ 79.964186][ T4401] ? xfs_vn_fiemap+0x100/0x100 [ 79.968993][ T4401] ? xfs_vn_fiemap+0x100/0x100 [ 79.973784][ T4401] file_update_time+0x3a6/0x440 [ 79.978666][ T4401] ? file_remove_privs+0x5d0/0x5d0 [ 79.983888][ T4401] __xfs_filemap_fault+0x2fc/0x8f0 [ 79.989032][ T4401] ? do_page_mkwrite+0x168/0x3c0 [ 79.994019][ T4401] ? xfs_filemap_pfn_mkwrite+0x20/0x20 [ 79.999504][ T4401] ? __lock_acquire+0x7d10/0x7d10 [ 80.004552][ T4401] do_page_mkwrite+0x168/0x3c0 [ 80.009340][ T4401] wp_page_shared+0x16b/0x6d0 [ 80.014042][ T4401] handle_mm_fault+0x1f06/0x4410 [ 80.019009][ T4401] ? get_page+0xe0/0xe0 [ 80.023184][ T4401] ? vmacache_find+0x238/0x590 [ 80.027965][ T4401] ? find_vma+0xd2/0x230 [ 80.032225][ T4401] do_user_addr_fault+0x489/0xc80 [ 80.037283][ T4401] exc_page_fault+0x60/0x100 [ 80.041897][ T4401] ? __might_fault+0xb7/0x110 [ 80.046590][ T4401] asm_exc_page_fault+0x22/0x30 [ 80.051459][ T4401] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 80.058068][ T4401] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 80.077697][ T4401] RSP: 0018:ffffc9000304fb38 EFLAGS: 00050246 [ 80.083796][ T4401] RAX: ffffffff83e1a101 RBX: 0000000000000040 RCX: 0000000000000040 [ 80.091809][ T4401] RDX: 0000000000000040 RSI: ffffc9000304fd40 RDI: 0000200000000240 [ 80.099796][ T4401] RBP: ffffc9000304fc90 R08: ffffc9000304fd7f R09: 1ffff92000609faf [ 80.107828][ T4401] R10: dffffc0000000000 R11: fffff52000609fb0 R12: ffffc9000304fd40 [ 80.115819][ T4401] R13: dffffc00000000ff R14: 0000200000000240 R15: 0000000000000000 [ 80.123817][ T4401] ? _copy_to_iter+0x2b1/0x1180 [ 80.128798][ T4401] _copy_to_iter+0x318/0x1180 [ 80.133514][ T4401] ? iov_iter_init+0x170/0x170 [ 80.138312][ T4401] ? chacha_block_generic+0x5b/0xd20 [ 80.143627][ T4401] get_random_bytes_user+0x1cc/0x3d0 [ 80.148946][ T4401] ? signal_pending+0xa0/0xa0 [ 80.153654][ T4401] ? vfs_write+0x8b2/0xd60 [ 80.158102][ T4401] ? memset+0x1e/0x40 [ 80.162105][ T4401] ? import_single_range+0x1aa/0x2a0 [ 80.167428][ T4401] __x64_sys_getrandom+0x1c2/0x2a0 [ 80.172571][ T4401] ? add_disk_randomness+0xd0/0xd0 [ 80.177704][ T4401] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 80.183731][ T4401] ? lock_chain_count+0x20/0x20 [ 80.188612][ T4401] ? vtime_user_exit+0x2c8/0x3e0 [ 80.193576][ T4401] ? lockdep_hardirqs_on+0x94/0x140 [ 80.198892][ T4401] do_syscall_64+0x4c/0xa0 [ 80.203333][ T4401] ? clear_bhb_loop+0x30/0x80 [ 80.208034][ T4401] ? clear_bhb_loop+0x30/0x80 [ 80.212738][ T4401] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.218675][ T4401] RIP: 0033:0x7fdcb488e799 [ 80.223114][ T4401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.242742][ T4401] RSP: 002b:00007ffec335d1b8 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 80.251175][ T4401] RAX: ffffffffffffffda RBX: 00007fdcb4b07fa0 RCX: 00007fdcb488e799 [ 80.259172][ T4401] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 80.267172][ T4401] RBP: 00007ffec335d220 R08: 0000000000000000 R09: 0000000000000000 [ 80.275187][ T4401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.283177][ T4401] R13: 00007fdcb4b07fac R14: 00007fdcb4b07fa0 R15: 00007fdcb4b07fa0 [ 80.291172][ T4401] [ 80.294524][ T4401] Kernel Offset: disabled [ 80.298861][ T4401] Rebooting in 86400 seconds..