Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. 2026/06/04 22:19:19 parsed 1 programs [ 24.384347][ T24] audit: type=1400 audit(1780611559.080:64): avc: denied { node_bind } for pid=287 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.405486][ T24] audit: type=1400 audit(1780611559.090:65): avc: denied { create } for pid=287 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 24.425881][ T24] audit: type=1400 audit(1780611559.090:66): avc: denied { module_request } for pid=287 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 25.326575][ T24] audit: type=1400 audit(1780611560.020:67): avc: denied { mounton } for pid=295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.329995][ T295] cgroup: Unknown subsys name 'net' [ 25.349871][ T24] audit: type=1400 audit(1780611560.020:68): avc: denied { mount } for pid=295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.376547][ T24] audit: type=1400 audit(1780611560.060:69): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.377021][ T295] cgroup: Unknown subsys name 'devices' [ 25.521207][ T295] cgroup: Unknown subsys name 'hugetlb' [ 25.526864][ T295] cgroup: Unknown subsys name 'rlimit' [ 25.646782][ T24] audit: type=1400 audit(1780611560.340:70): avc: denied { setattr } for pid=295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.669997][ T24] audit: type=1400 audit(1780611560.340:71): avc: denied { create } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.690571][ T24] audit: type=1400 audit(1780611560.340:72): avc: denied { write } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.710933][ T24] audit: type=1400 audit(1780611560.340:73): avc: denied { read } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.717033][ T298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.804544][ T295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.310754][ T304] request_module fs-gadgetfs succeeded, but still no fs? [ 26.351779][ T305] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 26.899453][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.906541][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.914295][ T348] device bridge_slave_0 entered promiscuous mode [ 26.921728][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.928783][ T348] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.936282][ T348] device bridge_slave_1 entered promiscuous mode [ 26.993415][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.000540][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.007855][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.014960][ T348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.039222][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.047374][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.055427][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.070722][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.079162][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.086305][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.095030][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.103795][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.110886][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.132548][ T348] device veth0_vlan entered promiscuous mode [ 27.139906][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.148414][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.157224][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.164953][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.172667][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.180721][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 2026/06/04 22:19:21 executed programs: 0 [ 27.195493][ T348] device veth1_macvtap entered promiscuous mode [ 27.202528][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.214513][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.225669][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.385039][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.392156][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.399755][ T368] device bridge_slave_0 entered promiscuous mode [ 27.420253][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.427456][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.434951][ T368] device bridge_slave_1 entered promiscuous mode [ 27.471116][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.478200][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.486355][ T371] device bridge_slave_0 entered promiscuous mode [ 27.494480][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.501594][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.508923][ T371] device bridge_slave_1 entered promiscuous mode [ 27.575909][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.583328][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.590959][ T376] device bridge_slave_0 entered promiscuous mode [ 27.606193][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.613341][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.620820][ T376] device bridge_slave_1 entered promiscuous mode [ 27.651061][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.658281][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.665980][ T375] device bridge_slave_0 entered promiscuous mode [ 27.672813][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.679989][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.687346][ T374] device bridge_slave_0 entered promiscuous mode [ 27.696988][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.704101][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.711668][ T374] device bridge_slave_1 entered promiscuous mode [ 27.721267][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.728359][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.735806][ T375] device bridge_slave_1 entered promiscuous mode [ 27.936350][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.943964][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.957683][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.966242][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.974832][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.981944][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.012582][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.020302][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.028573][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.037386][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.044494][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.052013][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.060120][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.067498][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.075912][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.084246][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.091343][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.098718][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.107158][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.115420][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.122499][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.129852][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.137262][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.145059][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.153448][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.161722][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.168744][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.176232][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.184700][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.192957][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.199995][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.207308][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.215545][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.223789][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.231593][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.260124][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.268656][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.285564][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.294313][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.302723][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.311574][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.319740][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.327194][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.351187][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.360064][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.368088][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.376391][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.385218][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.392947][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.401126][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.408562][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.416378][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.424102][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.431845][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.440228][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.448382][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.457274][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.464969][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.473403][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.481795][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.488975][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.503571][ T375] device veth0_vlan entered promiscuous mode [ 28.512567][ T371] device veth0_vlan entered promiscuous mode [ 28.519599][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.528098][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.536548][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.544805][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.551869][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.564425][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.572090][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.594470][ T368] device veth0_vlan entered promiscuous mode [ 28.603834][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.612442][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.621165][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.629316][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.636412][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.644435][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.652930][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.661381][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.669225][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.677326][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.685422][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.693025][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.704824][ T371] device veth1_macvtap entered promiscuous mode [ 28.713973][ T375] device veth1_macvtap entered promiscuous mode [ 28.726769][ T368] device veth1_macvtap entered promiscuous mode [ 28.734608][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.743426][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.752028][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.776358][ T376] device veth0_vlan entered promiscuous mode [ 28.785427][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.794079][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.802682][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.810697][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.818119][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.826312][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.834683][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.843064][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.851541][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.859930][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.868204][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.876590][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.885215][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.893800][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.912953][ T376] device veth1_macvtap entered promiscuous mode [ 28.924524][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.933733][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.943500][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.953227][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.962373][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.002590][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.017720][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.038312][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.046881][ T53] ================================================================== [ 29.046909][ T53] BUG: KASAN: null-ptr-deref in n_tty_flush_buffer+0x6c/0x200 [ 29.046920][ T53] Write of size 24 at addr 0000000000000000 by task kworker/0:2/53 [ 29.046923][ T53] [ 29.046939][ T53] CPU: 0 PID: 53 Comm: kworker/0:2 Not tainted syzkaller #0 [ 29.046946][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.046956][ T53] Workqueue: events vc_SAK [ 29.046969][ T53] Call Trace: [ 29.046986][ T53] __dump_stack+0x21/0x24 [ 29.046998][ T53] dump_stack_lvl+0x1a7/0x208 [ 29.047010][ T53] ? thaw_kernel_threads+0x220/0x220 [ 29.047022][ T53] ? show_regs_print_info+0x18/0x18 [ 29.047035][ T53] ? n_tty_flush_buffer+0x6c/0x200 [ 29.047046][ T53] kasan_report+0xd8/0x130 [ 29.047057][ T53] ? n_tty_flush_buffer+0x6c/0x200 [ 29.047068][ T53] kasan_check_range+0x249/0x2a0 [ 29.047078][ T53] memset+0x23/0x40 [ 29.047087][ T53] n_tty_flush_buffer+0x6c/0x200 [ 29.047096][ T53] ? n_tty_close+0x1d0/0x1d0 [ 29.047107][ T53] tty_buffer_flush+0x2d5/0x360 [ 29.047120][ T53] ? _raw_spin_lock+0xf0/0xf0 [ 29.047131][ T53] tty_ldisc_flush+0x6c/0xc0 [ 29.047140][ T53] __do_SAK+0x141/0x630 [ 29.047149][ T53] vc_SAK+0x78/0x250 [ 29.047160][ T53] process_one_work+0x6e1/0xba0 [ 29.047172][ T53] worker_thread+0xa6a/0x13c0 [ 29.047188][ T53] kthread+0x346/0x3d0 [ 29.047197][ T53] ? worker_clr_flags+0x190/0x190 [ 29.047208][ T53] ? kthread_blkcg+0xd0/0xd0 [ 29.047219][ T53] ret_from_fork+0x1f/0x30 [ 29.047227][ T53] ================================================================== [ 29.047231][ T53] Disabling lock debugging due to kernel taint [ 29.047255][ T53] BUG: unable to handle page fault for address: 0000000000002260 [ 29.047261][ T53] #PF: supervisor write access in kernel mode [ 29.047267][ T53] #PF: error_code(0x0002) - not-present page [ 29.047276][ T53] PGD 1122bf067 P4D 1122bf067 PUD 0 [ 29.047298][ T53] Oops: 0002 [#1] PREEMPT SMP KASAN [ 29.047311][ T53] CPU: 0 PID: 53 Comm: kworker/0:2 Tainted: G B syzkaller #0 [ 29.047317][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.047325][ T53] Workqueue: events vc_SAK [ 29.047340][ T53] RIP: 0010:memset_erms+0x9/0x10 [ 29.047351][ T53] Code: c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 [ 29.047357][ T53] RSP: 0018:ffffc90000aa7b68 EFLAGS: 00010202 [ 29.047367][ T53] RAX: 0000000000000000 RBX: 0000000000000010 RCX: 0000000000000010 [ 29.047374][ T53] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000002260 [ 29.047382][ T53] RBP: ffffc90000aa7b88 R08: 0000000000000000 R09: 0000000000002260 [ 29.047390][ T53] R10: dffffc0000000000 R11: fffffbfff0dcfa48 R12: 000000000000005d [ 29.047399][ T53] R13: 0000000000002260 R14: 0000000000000000 R15: 0000000000002260 [ 29.047410][ T53] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 29.047419][ T53] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.047429][ T53] CR2: 0000000000002260 CR3: 0000000112ba6000 CR4: 00000000003506b0 [ 29.047439][ T53] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.047446][ T53] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.047449][ T53] Call Trace: [ 29.047461][ T53] ? memset+0x35/0x40 [ 29.047472][ T53] n_tty_flush_buffer+0x7b/0x200 [ 29.047483][ T53] ? n_tty_close+0x1d0/0x1d0 [ 29.047494][ T53] tty_buffer_flush+0x2d5/0x360 [ 29.047506][ T53] ? _raw_spin_lock+0xf0/0xf0 [ 29.047518][ T53] tty_ldisc_flush+0x6c/0xc0 [ 29.047528][ T53] __do_SAK+0x141/0x630 [ 29.047539][ T53] vc_SAK+0x78/0x250 [ 29.047549][ T53] process_one_work+0x6e1/0xba0 [ 29.047562][ T53] worker_thread+0xa6a/0x13c0 [ 29.047577][ T53] kthread+0x346/0x3d0 [ 29.047587][ T53] ? worker_clr_flags+0x190/0x190 [ 29.047597][ T53] ? kthread_blkcg+0xd0/0xd0 [ 29.047608][ T53] ret_from_fork+0x1f/0x30 [ 29.047614][ T53] Modules linked in: [ 29.047632][ T53] CR2: 0000000000002260 [ 29.047644][ T53] ---[ end trace 911df8fa0c15a0da ]--- [ 29.047657][ T53] RIP: 0010:memset_erms+0x9/0x10 [ 29.047666][ T53] Code: c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 [ 29.047674][ T53] RSP: 0018:ffffc90000aa7b68 EFLAGS: 00010202 [ 29.047683][ T53] RAX: 0000000000000000 RBX: 0000000000000010 RCX: 0000000000000010 [ 29.047690][ T53] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000002260 [ 29.047697][ T53] RBP: ffffc90000aa7b88 R08: 0000000000000000 R09: 0000000000002260 [ 29.047712][ T53] R10: dffffc0000000000 R11: fffffbfff0dcfa48 R12: 000000000000005d [ 29.047718][ T53] R13: 0000000000002260 R14: 0000000000000000 R15: 0000000000002260 [ 29.047727][ T53] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 29.047735][ T53] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.047742][ T53] CR2: 0000000000002260 CR3: 0000000112ba6000 CR4: 00000000003506b0 [ 29.047752][ T53] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.047758][ T53] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.047765][ T53] Kernel panic - not syncing: Fatal exception [ 29.047990][ T53] Kernel Offset: disabled