Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts. 2026/04/17 12:31:48 parsed 1 programs syzkaller login: [ 84.889826][ T5770] cgroup: Unknown subsys name 'net' [ 85.022512][ T5770] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.793605][ T5770] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.256811][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 89.328780][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.336832][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.344056][ T5803] bridge_slave_0: entered allmulticast mode [ 89.351284][ T5803] bridge_slave_0: entered promiscuous mode [ 89.362892][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.370170][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.377410][ T5803] bridge_slave_1: entered allmulticast mode [ 89.384155][ T5803] bridge_slave_1: entered promiscuous mode [ 89.409020][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.420731][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.454175][ T5803] team0: Port device team_slave_0 added [ 89.463159][ T5803] team0: Port device team_slave_1 added [ 89.484670][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.491805][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.517885][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.531532][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.538643][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.564833][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.614699][ T5803] hsr_slave_0: entered promiscuous mode [ 89.622085][ T5803] hsr_slave_1: entered promiscuous mode [ 89.773814][ T5803] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.807540][ T5803] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.832305][ T5803] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.842981][ T5803] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.926683][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.947178][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.973082][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.980545][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.997716][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.004881][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.210788][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.262108][ T5803] veth0_vlan: entered promiscuous mode [ 90.272935][ T5803] veth1_vlan: entered promiscuous mode [ 90.309559][ T5803] veth0_macvtap: entered promiscuous mode [ 90.319034][ T5803] veth1_macvtap: entered promiscuous mode [ 90.348867][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.367766][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.393559][ T5803] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.402893][ T5803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.411751][ T5803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.420779][ T5803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.621041][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.631262][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.639822][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.653283][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.669107][ T5820] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.673992][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.688079][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.556927][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.565250][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.595765][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.603637][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.590062][ T8] cfg80211: failed to load regulatory.db [ 93.164679][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/04/17 12:31:58 executed programs: 0 [ 93.907267][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.915297][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.923789][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.933211][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.941526][ T5820] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.949075][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.080256][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 94.140721][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.148093][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.155409][ T5876] bridge_slave_0: entered allmulticast mode [ 94.162422][ T5876] bridge_slave_0: entered promiscuous mode [ 94.170484][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.177698][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.184857][ T5876] bridge_slave_1: entered allmulticast mode [ 94.192549][ T5876] bridge_slave_1: entered promiscuous mode [ 94.218384][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.230792][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.258072][ T5876] team0: Port device team_slave_0 added [ 94.267171][ T5876] team0: Port device team_slave_1 added [ 94.289877][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.296944][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.323072][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.336326][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.343433][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.370045][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.407936][ T5876] hsr_slave_0: entered promiscuous mode [ 94.414400][ T5876] hsr_slave_1: entered promiscuous mode [ 94.420717][ T5876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.429080][ T5876] Cannot create hsr debugfs directory [ 95.496821][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.570477][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.037637][ T5820] Bluetooth: hci0: command tx timeout [ 96.462860][ T12] hsr_slave_0: left promiscuous mode [ 96.470409][ T12] hsr_slave_1: left promiscuous mode [ 96.477663][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.485171][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.495707][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.503148][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.511578][ T12] bridge_slave_1: left allmulticast mode [ 96.517801][ T12] bridge_slave_1: left promiscuous mode [ 96.524373][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.539221][ T12] bridge_slave_0: left allmulticast mode [ 96.544934][ T12] bridge_slave_0: left promiscuous mode [ 96.551866][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.581889][ T12] veth1_macvtap: left promiscuous mode [ 96.588726][ T12] veth0_macvtap: left promiscuous mode [ 96.594444][ T12] veth1_vlan: left promiscuous mode [ 96.602531][ T12] veth0_vlan: left promiscuous mode [ 97.032854][ T12] team0 (unregistering): Port device team_slave_1 removed [ 97.070344][ T12] team0 (unregistering): Port device team_slave_0 removed [ 97.103180][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.140410][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.368296][ T12] bond0 (unregistering): Released all slaves [ 97.473822][ T5876] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.489454][ T5876] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.501631][ T5876] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.512847][ T5876] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.637405][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.684908][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.703816][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.711066][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.766077][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.773328][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.837283][ T5876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.106523][ T5820] Bluetooth: hci0: command tx timeout [ 98.157815][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.236588][ T5876] veth0_vlan: entered promiscuous mode [ 98.251212][ T5876] veth1_vlan: entered promiscuous mode [ 98.303249][ T5876] veth0_macvtap: entered promiscuous mode [ 98.328256][ T5876] veth1_macvtap: entered promiscuous mode [ 98.344547][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.361746][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.373058][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.381942][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.391263][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.400104][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.460361][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.472776][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.499466][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.508859][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.570272][ T5917] syz.0.17[5917]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 98.625922][ T5917] loop0: detected capacity change from 0 to 4096 [ 98.649627][ T5917] NILFS (loop0): invalid segment: Checksum error in segment payload [ 98.659868][ T5917] NILFS (loop0): trying rollback from an earlier position [ 98.698315][ T5917] NILFS (loop0): recovery complete [ 98.708067][ T5918] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.724730][ T5917] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN [ 98.736519][ T5917] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 98.744971][ T5917] CPU: 1 PID: 5917 Comm: syz.0.17 Not tainted syzkaller #0 [ 98.752291][ T5917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 98.762390][ T5917] RIP: 0010:nilfs_mdt_save_to_shadow_map+0x141/0x1c0 [ 98.769203][ T5917] Code: 3f 4c 8d 63 d8 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 4e 11 9a fe 4d 8b 24 24 49 83 c4 40 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 30 11 9a fe 49 8b 34 24 4c 89 ff [ 98.788879][ T5917] RSP: 0018:ffffc90003247808 EFLAGS: 00010202 [ 98.795020][ T5917] RAX: 0000000000000008 RBX: ffff8880631f0158 RCX: 0000000000000000 [ 98.803030][ T5917] RDX: ffff8880268cda00 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.811110][ T5917] RBP: 0000000000000000 R08: ffffffff8e8b14ef R09: 1ffffffff1d1629d [ 98.819103][ T5917] R10: dffffc0000000000 R11: fffffbfff1d1629e R12: 0000000000000040 [ 98.827169][ T5917] R13: dffffc0000000000 R14: ffff88801cfd4d40 R15: ffff8880631f1050 [ 98.835151][ T5917] FS: 000055557b18a500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 98.844375][ T5917] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.851053][ T5917] CR2: 0000001b33f63fff CR3: 0000000075a5e000 CR4: 00000000003506e0 [ 98.859034][ T5917] Call Trace: [ 98.862315][ T5917] [ 98.865246][ T5917] nilfs_clean_segments+0x163/0xa40 [ 98.870533][ T5917] ? __might_fault+0xaa/0x120 [ 98.875224][ T5917] ? __lock_acquire+0x7d40/0x7d40 [ 98.880248][ T5917] ? __lock_acquire+0x7d40/0x7d40 [ 98.885271][ T5917] ? nilfs_segctor_do_construct+0x68a0/0x68a0 [ 98.891342][ T5917] ? __might_fault+0xaa/0x120 [ 98.896113][ T5917] ? __might_fault+0xaa/0x120 [ 98.900789][ T5917] ? _copy_from_user+0xa5/0xe0 [ 98.905586][ T5917] nilfs_ioctl+0x203f/0x21a0 [ 98.910215][ T5917] ? nilfs_ioctl_prepare_clean_segments+0x7f0/0x7f0 [ 98.916829][ T5917] ? mark_lock+0x94/0x320 [ 98.921169][ T5917] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 98.927319][ T5917] ? do_vfs_ioctl+0x1573/0x1cc0 [ 98.932270][ T5917] ? tomoyo_path_number_perm+0x217/0x620 [ 98.937917][ T5917] ? tomoyo_path_number_perm+0x500/0x620 [ 98.943572][ T5917] ? __kmem_cache_free+0xba/0x1e0 [ 98.948624][ T5917] ? tomoyo_path_number_perm+0x5b4/0x620 [ 98.954258][ T5917] ? tomoyo_path_number_perm+0x217/0x620 [ 98.959891][ T5917] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 98.965360][ T5917] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 98.971357][ T5917] ? bpf_lsm_file_ioctl+0x9/0x10 [ 98.976305][ T5917] ? security_file_ioctl+0x80/0xa0 [ 98.981418][ T5917] ? nilfs_ioctl_prepare_clean_segments+0x7f0/0x7f0 [ 98.988011][ T5917] __se_sys_ioctl+0xfd/0x170 [ 98.992608][ T5917] do_syscall_64+0x55/0xa0 [ 98.997036][ T5917] ? clear_bhb_loop+0x40/0x90 [ 99.001871][ T5917] ? clear_bhb_loop+0x40/0x90 [ 99.006579][ T5917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.012528][ T5917] RIP: 0033:0x7fd8a179c819 [ 99.016958][ T5917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.036665][ T5917] RSP: 002b:00007ffdf5639008 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.045095][ T5917] RAX: ffffffffffffffda RBX: 00007fd8a1a15fa0 RCX: 00007fd8a179c819 [ 99.053065][ T5917] RDX: 0000200000000640 RSI: 0000000040786e88 RDI: 0000000000000004 [ 99.061036][ T5917] RBP: 00007fd8a1832c91 R08: 0000000000000000 R09: 0000000000000000 [ 99.069047][ T5917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.077042][ T5917] R13: 00007fd8a1a15fac R14: 00007fd8a1a15fa0 R15: 00007fd8a1a15fa0 [ 99.085134][ T5917] [ 99.088332][ T5917] Modules linked in: [ 99.094272][ T5917] ---[ end trace 0000000000000000 ]--- [ 99.100005][ T5917] RIP: 0010:nilfs_mdt_save_to_shadow_map+0x141/0x1c0 [ 99.106793][ T5917] Code: 3f 4c 8d 63 d8 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 4e 11 9a fe 4d 8b 24 24 49 83 c4 40 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 30 11 9a fe 49 8b 34 24 4c 89 ff [ 99.126613][ T5917] RSP: 0018:ffffc90003247808 EFLAGS: 00010202 [ 99.132727][ T5917] RAX: 0000000000000008 RBX: ffff8880631f0158 RCX: 0000000000000000 [ 99.141219][ T5917] RDX: ffff8880268cda00 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.151077][ T5917] RBP: 0000000000000000 R08: ffffffff8e8b14ef R09: 1ffffffff1d1629d [ 99.159430][ T5917] R10: dffffc0000000000 R11: fffffbfff1d1629e R12: 0000000000000040 [ 99.175486][ T5917] R13: dffffc0000000000 R14: ffff88801cfd4d40 R15: ffff8880631f1050 [ 99.183567][ T5917] FS: 000055557b18a500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 99.193154][ T5917] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.200349][ T5917] CR2: 0000001b33f63fff CR3: 0000000075a5e000 CR4: 00000000003506e0 [ 99.208764][ T5917] Kernel panic - not syncing: Fatal exception [ 99.215368][ T5917] Kernel Offset: disabled [ 99.219782][ T5917] Rebooting in 86400 seconds..