Warning: Permanently added '[localhost]:36513' (ED25519) to the list of known hosts. 2026/09/25 13:01:03 parsed 1 programs 2026/09/25 13:01:03 serving rpc on tcp://36137 syzkaller login: [ 90.554232][ T5286] cgroup: Unknown subsys name 'net' [ 90.626889][ T5286] cgroup: Unknown subsys name 'cpuset' [ 90.632868][ T5286] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.939960][ T10] cfg80211: failed to load regulatory.db [ 92.281504][ T5286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.812700][ T5301] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.595379][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.595405][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.635034][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.635050][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.244295][ T5339] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.245073][ T5339] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.245205][ T5339] bridge_slave_0: entered allmulticast mode [ 103.246352][ T5339] bridge_slave_0: entered promiscuous mode [ 103.264755][ T5339] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.264892][ T5339] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.264984][ T5339] bridge_slave_1: entered allmulticast mode [ 103.266184][ T5339] bridge_slave_1: entered promiscuous mode [ 103.313080][ T5339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.316067][ T5339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.348343][ T5339] team0: Port device team_slave_0 added [ 103.353398][ T5339] team0: Port device team_slave_1 added [ 103.377136][ T5339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.377150][ T5339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.377162][ T5339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.379838][ T5339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.379849][ T5339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.379863][ T5339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.461577][ T5339] hsr_slave_0: entered promiscuous mode [ 103.462493][ T5339] hsr_slave_1: entered promiscuous mode [ 103.654429][ T5339] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.670778][ T5339] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.672345][ T5339] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.677402][ T5339] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.678331][ T5339] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.698256][ T5339] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.699302][ T5339] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.727717][ T5339] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.788691][ T5339] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.788807][ T5339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.789340][ T5339] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.789413][ T5339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.865037][ T5339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.885308][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.886297][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.902145][ T5339] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.907499][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.907642][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.926696][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.926765][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.324179][ T5339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.368004][ T5339] veth0_vlan: entered promiscuous mode [ 104.378629][ T5339] veth1_vlan: entered promiscuous mode [ 104.415007][ T5339] veth0_macvtap: entered promiscuous mode [ 104.424123][ T5339] veth1_macvtap: entered promiscuous mode [ 104.445994][ T5339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.456625][ T5339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.478704][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.478840][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.478877][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.573119][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.829291][ T46] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.836702][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.837249][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.838363][ T46] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.839091][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.858257][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.953134][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.999047][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.062745][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.898764][ T12] bridge_slave_1: left allmulticast mode [ 106.898799][ T12] bridge_slave_1: left promiscuous mode [ 106.899883][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.933686][ T12] bridge_slave_0: left allmulticast mode [ 106.933711][ T12] bridge_slave_0: left promiscuous mode [ 106.933864][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.250646][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.253656][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.257380][ T12] bond0 (unregistering): Released all slaves [ 107.396158][ T12] hsr_slave_0: left promiscuous mode [ 107.397567][ T12] hsr_slave_1: left promiscuous mode [ 107.398237][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.398258][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.413757][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.413782][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.445076][ T12] veth1_macvtap: left promiscuous mode [ 107.445685][ T12] veth0_macvtap: left promiscuous mode [ 107.445873][ T12] veth1_vlan: left promiscuous mode [ 107.446079][ T12] veth0_vlan: left promiscuous mode [ 107.699223][ T12] team0 (unregistering): Port device team_slave_1 removed [ 107.711864][ T12] team0 (unregistering): Port device team_slave_0 removed [ 108.578405][ T4988] 8021q: adding VLAN 0 to HW filter on device eth2 [ 109.245634][ T4988] 8021q: adding VLAN 0 to HW filter on device eth3 [ 109.597237][ T4988] 8021q: adding VLAN 0 to HW filter on device eth4 [ 109.965894][ T4988] 8021q: adding VLAN 0 to HW filter on device eth5 2026/09/25 13:01:25 executed programs: 0 [ 110.367860][ T4642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.376300][ T4642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.377640][ T4642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.379437][ T4642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.379846][ T4642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.008721][ T5439] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.008874][ T5439] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.008956][ T5439] bridge_slave_0: entered allmulticast mode [ 111.024004][ T5439] bridge_slave_0: entered promiscuous mode [ 111.031291][ T5439] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.031370][ T5439] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.031515][ T5439] bridge_slave_1: entered allmulticast mode [ 111.032869][ T5439] bridge_slave_1: entered promiscuous mode [ 111.069206][ T5439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.076598][ T5439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.103269][ T5439] team0: Port device team_slave_0 added [ 111.104595][ T5439] team0: Port device team_slave_1 added [ 111.125393][ T5439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.125407][ T5439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.125420][ T5439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.127551][ T5439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.127560][ T5439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.127574][ T5439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.201437][ T5439] hsr_slave_0: entered promiscuous mode [ 111.202228][ T5439] hsr_slave_1: entered promiscuous mode [ 111.925798][ T5439] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.929970][ T5439] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.941700][ T5439] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.956195][ T5439] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.957176][ T5439] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.968527][ T5439] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.969308][ T5439] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.986578][ T5439] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.166104][ T5439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.203189][ T5439] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.214783][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.215034][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.244936][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.244981][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.412703][ T4642] Bluetooth: hci0: command tx timeout [ 112.937555][ T5439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.044678][ T5439] veth0_vlan: entered promiscuous mode [ 113.062035][ T5439] veth1_vlan: entered promiscuous mode [ 113.144787][ T5439] veth0_macvtap: entered promiscuous mode [ 113.157128][ T5439] veth1_macvtap: entered promiscuous mode [ 113.188483][ T5439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.206239][ T5439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.240713][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.240775][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.240797][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.240814][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.481015][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.481050][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.586599][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.586616][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.258530][ T5504] loop0: detected capacity change from 0 to 32768 [ 114.477163][ T5504] Bad maxslot:97 in dtpage (expected 128) [ 114.477163][ T5504] [ 114.477197][ T5504] ERROR: (device loop0): dtSearch: DT_GETPAGE: dtree page corrupt [ 114.477197][ T5504] [ 114.490282][ T4642] Bluetooth: hci0: command tx timeout [ 114.503540][ T5504] ERROR: (device loop0): remounting filesystem as read-only [ 114.572074][ T111] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 114.577204][ T111] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 114.580421][ T111] CPU: 0 UID: 0 PID: 111 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 114.584369][ T111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.588290][ T111] RIP: 0010:metapage_write_folio+0xa2/0xd40 [ 114.590880][ T111] Code: f3 e8 62 b6 54 fe 4c 8d 73 18 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 08 59 c6 fe 4d 8b 36 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 ef 58 c6 fe 49 8b 06 48 89 44 24 [ 114.599045][ T111] RSP: 0018:ffffc900013cf860 EFLAGS: 00010246 [ 114.601633][ T111] RAX: 0000000000000000 RBX: ffffea00004bb380 RCX: ffff888031790000 [ 114.605080][ T111] RDX: 0000000000000000 RSI: ffffc900013cf9c0 RDI: ffffea00004bb380 [ 114.608498][ T111] RBP: ffffc900013cf970 R08: ffffea00004bb3b7 R09: 1ffffd4000097676 [ 114.612051][ T111] R10: dffffc0000000000 R11: fffff94000097677 R12: 1ffff92000279f18 [ 114.615450][ T111] R13: ffffea00004bb380 R14: 0000000000000000 R15: dffffc0000000000 [ 114.618708][ T111] FS: 0000000000000000(0000) GS:ffff88808c2bf000(0000) knlGS:0000000000000000 [ 114.622445][ T111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.625398][ T111] CR2: 00007f0020a0b000 CR3: 000000003a13f000 CR4: 0000000000352ef0 [ 114.629028][ T111] Call Trace: [ 114.630550][ T111] [ 114.631869][ T111] ? unwind_next_frame+0x8f/0x2550 [ 114.634093][ T111] ? unwind_next_frame+0x1baf/0x2550 [ 114.636385][ T111] ? __pfx_metapage_write_folio+0x10/0x10 [ 114.638805][ T111] ? folio_mapping+0x16f/0x1f0 [ 114.640900][ T111] ? folio_clear_dirty_for_io+0x162/0x820 [ 114.643319][ T111] ? folio_wait_writeback+0xd1/0x100 [ 114.645548][ T111] metapage_write_one+0x2c4/0x520 [ 114.647759][ T111] ? __pfx_metapage_write_one+0x10/0x10 [ 114.650122][ T111] ? stack_trace_save+0xa9/0x100 [ 114.652237][ T111] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 114.654762][ T111] ? folio_mapping+0x16f/0x1f0 [ 114.656706][ T111] release_metapage+0x583/0xa60 [ 114.658795][ T111] ? put_metapage+0x182/0x1f0 [ 114.660833][ T111] txUnlock+0x51c/0xde0 [ 114.662600][ T111] jfs_lazycommit+0x59f/0xac0 [ 114.664581][ T111] ? __pfx_jfs_lazycommit+0x10/0x10 [ 114.666683][ T111] ? __pfx_default_wake_function+0x10/0x10 [ 114.669201][ T111] ? __kthread_parkme+0x71/0x1f0 [ 114.671264][ T111] ? __kthread_parkme+0x199/0x1f0 [ 114.673475][ T111] kthread+0x38b/0x480 [ 114.675164][ T111] ? __pfx_jfs_lazycommit+0x10/0x10 [ 114.677127][ T111] ? __pfx_kthread+0x10/0x10 [ 114.678870][ T111] ret_from_fork+0x514/0xb70 [ 114.680862][ T111] ? __pfx_ret_from_fork+0x10/0x10 [ 114.682989][ T111] ? __switch_to+0xc89/0x1420 [ 114.684728][ T111] ? __pfx_kthread+0x10/0x10 [ 114.686699][ T111] ret_from_fork_asm+0x1a/0x30 [ 114.688769][ T111] [ 114.690145][ T111] Modules linked in: [ 114.692275][ T111] ---[ end trace 0000000000000000 ]--- [ 114.736908][ T111] RIP: 0010:metapage_write_folio+0xa2/0xd40 [ 114.736936][ T111] Code: f3 e8 62 b6 54 fe 4c 8d 73 18 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 08 59 c6 fe 4d 8b 36 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 ef 58 c6 fe 49 8b 06 48 89 44 24 [ 114.736946][ T111] RSP: 0018:ffffc900013cf860 EFLAGS: 00010246 [ 114.736958][ T111] RAX: 0000000000000000 RBX: ffffea00004bb380 RCX: ffff888031790000 [ 114.736966][ T111] RDX: 0000000000000000 RSI: ffffc900013cf9c0 RDI: ffffea00004bb380 [ 114.736975][ T111] RBP: ffffc900013cf970 R08: ffffea00004bb3b7 R09: 1ffffd4000097676 [ 114.736983][ T111] R10: dffffc0000000000 R11: fffff94000097677 R12: 1ffff92000279f18 [ 114.736990][ T111] R13: ffffea00004bb380 R14: 0000000000000000 R15: dffffc0000000000 [ 114.736998][ T111] FS: 0000000000000000(0000) GS:ffff88808c2bf000(0000) knlGS:0000000000000000 [ 114.737008][ T111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.737016][ T111] CR2: 00007fff9d261000 CR3: 0000000043c41000 CR4: 0000000000352ef0 [ 114.737054][ T111] Kernel panic - not syncing: Fatal exception [ 114.780430][ T111] Kernel Offset: disabled [ 114.782311][ T111] Rebooting in 86400 seconds..