Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts. 2026/04/20 10:05:31 parsed 1 programs syzkaller login: [ 89.929977][ T5772] cgroup: Unknown subsys name 'net' [ 90.100341][ T5772] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.927778][ T5772] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.363900][ T3064] cfg80211: failed to load regulatory.db [ 94.738340][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 94.841927][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.849402][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.857348][ T5807] bridge_slave_0: entered allmulticast mode [ 94.865117][ T5807] bridge_slave_0: entered promiscuous mode [ 94.874809][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.882342][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.889559][ T5807] bridge_slave_1: entered allmulticast mode [ 94.896972][ T5807] bridge_slave_1: entered promiscuous mode [ 94.926769][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.955613][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.989479][ T5807] team0: Port device team_slave_0 added [ 94.999014][ T5807] team0: Port device team_slave_1 added [ 95.026266][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.033372][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.060028][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.086382][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.093649][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.119839][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.176515][ T5807] hsr_slave_0: entered promiscuous mode [ 95.183771][ T5807] hsr_slave_1: entered promiscuous mode [ 95.383805][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.408969][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.419558][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.430464][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.474209][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.481678][ T5807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.489684][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.497083][ T5807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.575865][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.597925][ T4615] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.608398][ T4615] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.637903][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.653710][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.661019][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.680393][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.688230][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.940359][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.988340][ T5807] veth0_vlan: entered promiscuous mode [ 96.001358][ T5807] veth1_vlan: entered promiscuous mode [ 96.033923][ T5807] veth0_macvtap: entered promiscuous mode [ 96.045228][ T5807] veth1_macvtap: entered promiscuous mode [ 96.066188][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.083367][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.096098][ T5807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.105399][ T5807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.115343][ T5807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.126637][ T5807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.288206][ T3430] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.477118][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.489481][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.498197][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.507593][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.517076][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.527293][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.259079][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.269525][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.307567][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.316879][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.794446][ T3430] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/04/20 10:05:43 executed programs: 0 [ 99.538411][ T5083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.548181][ T5083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.557227][ T5083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.567374][ T5083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.577521][ T5083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.585883][ T5083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.743035][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 99.818825][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.826359][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.834178][ T5875] bridge_slave_0: entered allmulticast mode [ 99.842382][ T5875] bridge_slave_0: entered promiscuous mode [ 99.852124][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.859584][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.867136][ T5875] bridge_slave_1: entered allmulticast mode [ 99.874451][ T5875] bridge_slave_1: entered promiscuous mode [ 99.909029][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.922246][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.956450][ T5875] team0: Port device team_slave_0 added [ 99.964923][ T5875] team0: Port device team_slave_1 added [ 99.992988][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.000029][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.026802][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.039361][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.046457][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.072457][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.117273][ T5875] hsr_slave_0: entered promiscuous mode [ 100.125335][ T5875] hsr_slave_1: entered promiscuous mode [ 100.133012][ T5875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.141261][ T5875] Cannot create hsr debugfs directory [ 101.006312][ T3430] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.094791][ T3430] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.642484][ T5083] Bluetooth: hci0: command tx timeout [ 102.038164][ T5875] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.066579][ T5875] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.077296][ T5875] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.087634][ T5875] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.265428][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.293730][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.314549][ T3430] hsr_slave_0: left promiscuous mode [ 102.322094][ T3430] hsr_slave_1: left promiscuous mode [ 102.328598][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.336996][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.347081][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.356651][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.365582][ T3430] bridge_slave_1: left allmulticast mode [ 102.373369][ T3430] bridge_slave_1: left promiscuous mode [ 102.380486][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.398708][ T3430] bridge_slave_0: left allmulticast mode [ 102.404732][ T3430] bridge_slave_0: left promiscuous mode [ 102.410684][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.452396][ T3430] veth1_macvtap: left promiscuous mode [ 102.458722][ T3430] veth0_macvtap: left promiscuous mode [ 102.466186][ T3430] veth1_vlan: left promiscuous mode [ 102.473124][ T3430] veth0_vlan: left promiscuous mode [ 103.113722][ T3430] team0 (unregistering): Port device team_slave_1 removed [ 103.151379][ T3430] team0 (unregistering): Port device team_slave_0 removed [ 103.192189][ T3430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.229359][ T3430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.519898][ T3430] bond0 (unregistering): Released all slaves [ 103.620509][ T4615] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.627807][ T4615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.647409][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.654765][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.720920][ T5083] Bluetooth: hci0: command tx timeout [ 103.928694][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.984940][ T5875] veth0_vlan: entered promiscuous mode [ 104.002308][ T5875] veth1_vlan: entered promiscuous mode [ 104.039926][ T5875] veth0_macvtap: entered promiscuous mode [ 104.056260][ T5875] veth1_macvtap: entered promiscuous mode [ 104.078656][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.098249][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.113396][ T5875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.126563][ T5875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.137167][ T5875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.146969][ T5875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.351689][ T4615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.368319][ T4615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.446951][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.457906][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/20 10:05:49 executed programs: 2 [ 104.564765][ T5914] syz.0.17[5914]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 104.615780][ T5914] loop0: detected capacity change from 0 to 4096 [ 104.626266][ T5914] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 104.661117][ T5914] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 104.672818][ T5914] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 104.684732][ T5914] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 104.697932][ T5914] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 104.712974][ T5914] ntfs: (device loop0): map_mft_record_page(): Mft record 0xa is corrupt. Run chkdsk. [ 104.723139][ T5914] ntfs: (device loop0): map_mft_record(): Failed with error code 5. [ 104.733815][ T5914] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 104.747666][ T5914] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 104.765280][ T5914] ntfs: volume version 3.1. [ 104.776865][ T5914] ntfs: (device loop0): load_and_init_quota(): Failed to find inode number for $Quota. [ 104.815238][ T5875] general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN [ 104.827161][ T5875] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 104.835641][ T5875] CPU: 0 PID: 5875 Comm: syz-executor Not tainted syzkaller #0 [ 104.843363][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 104.853692][ T5875] RIP: 0010:step_into+0x129/0xf20 [ 104.859046][ T5875] Code: 74 24 08 c6 44 24 7f 00 43 0f b6 04 3c 84 c0 4d 89 fd 0f 85 fd 0b 00 00 45 8b 36 4c 8b bc 24 a8 00 00 00 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 fc 0b 00 00 45 8b 3f 44 89 fe 81 e6 00 [ 104.878885][ T5875] RSP: 0018:ffffc90003057ac0 EFLAGS: 00010206 [ 104.885016][ T5875] RAX: 0000000000000003 RBX: ffffc90003057ca0 RCX: ffff888027113c00 [ 104.893043][ T5875] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.901069][ T5875] RBP: ffffc90003057bc8 R08: ffff88805dc5ded7 R09: 1ffff1100bb8bbda [ 104.909212][ T5875] R10: dffffc0000000000 R11: ffffed100bb8bbdb R12: 1ffff9200060af9b [ 104.917274][ T5875] R13: dffffc0000000000 R14: 0000000000000080 R15: 0000000000000018 [ 104.925302][ T5875] FS: 0000555570e5b500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 104.934294][ T5875] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.940919][ T5875] CR2: 0000555570e86aa8 CR3: 000000002f2ba000 CR4: 00000000003506f0 [ 104.949100][ T5875] Call Trace: [ 104.952436][ T5875] [ 104.955421][ T5875] ? try_to_unlazy+0x34c/0x5a0 [ 104.960237][ T5875] ? set_root+0x3a0/0x3a0 [ 104.964642][ T5875] ? walk_component+0x182/0x3f0 [ 104.969681][ T5875] path_lookupat+0x169/0x440 [ 104.974352][ T5875] filename_lookup+0x228/0x560 [ 104.979201][ T5875] ? hashlen_string+0x110/0x110 [ 104.984151][ T5875] ? strncpy_from_user+0x197/0x2d0 [ 104.989336][ T5875] ? getname_flags+0x20a/0x500 [ 104.994283][ T5875] user_path_at_empty+0x42/0x60 [ 104.999209][ T5875] __x64_sys_umount+0xfd/0x180 [ 105.004079][ T5875] ? path_umount+0xf10/0xf10 [ 105.008921][ T5875] ? lockdep_hardirqs_on+0x98/0x150 [ 105.014275][ T5875] do_syscall_64+0x55/0xa0 [ 105.018829][ T5875] ? clear_bhb_loop+0x40/0x90 [ 105.023572][ T5875] ? clear_bhb_loop+0x40/0x90 [ 105.028308][ T5875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.034388][ T5875] RIP: 0033:0x7fb1df39da57 [ 105.038860][ T5875] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 105.058619][ T5875] RSP: 002b:00007ffcb192ba28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 105.067095][ T5875] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb1df39da57 [ 105.075129][ T5875] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb192bae0 [ 105.083255][ T5875] RBP: 00007ffcb192bae0 R08: 00007ffcb192cae0 R09: 00000000ffffffff [ 105.091279][ T5875] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcb192cbd0 [ 105.099306][ T5875] R13: 00007fb1df432048 R14: 0000555570e5b4e8 R15: 00007ffcb192ed90 [ 105.107399][ T5875] [ 105.110477][ T5875] Modules linked in: [ 105.119349][ T5875] ---[ end trace 0000000000000000 ]--- [ 105.125057][ T5875] RIP: 0010:step_into+0x129/0xf20 [ 105.130225][ T5875] Code: 74 24 08 c6 44 24 7f 00 43 0f b6 04 3c 84 c0 4d 89 fd 0f 85 fd 0b 00 00 45 8b 36 4c 8b bc 24 a8 00 00 00 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 fc 0b 00 00 45 8b 3f 44 89 fe 81 e6 00 [ 105.151528][ T5875] RSP: 0018:ffffc90003057ac0 EFLAGS: 00010206 [ 105.157748][ T5875] RAX: 0000000000000003 RBX: ffffc90003057ca0 RCX: ffff888027113c00 [ 105.166367][ T5875] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.174521][ T5875] RBP: ffffc90003057bc8 R08: ffff88805dc5ded7 R09: 1ffff1100bb8bbda [ 105.190435][ T5875] R10: dffffc0000000000 R11: ffffed100bb8bbdb R12: 1ffff9200060af9b [ 105.198985][ T5875] R13: dffffc0000000000 R14: 0000000000000080 R15: 0000000000000018 [ 105.207885][ T5875] FS: 0000555570e5b500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 105.217433][ T5875] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.225233][ T5875] CR2: 00007f05eada1796 CR3: 000000002f2ba000 CR4: 00000000003506f0 [ 105.233575][ T5875] Kernel panic - not syncing: Fatal exception [ 105.240281][ T5875] Kernel Offset: disabled [ 105.244716][ T5875] Rebooting in 86400 seconds..