Warning: Permanently added '10.128.1.25' (ED25519) to the list of known hosts. 2026/10/11 04:47:38 parsed 1 programs [ 37.673421][ T24] kauditd_printk_skb: 30 callbacks suppressed [ 37.673430][ T24] audit: type=1400 audit(1791694059.069:104): avc: denied { unlink } for pid=438 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.705808][ T438] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.091598][ T24] audit: type=1400 audit(1791694059.489:105): avc: denied { create } for pid=449 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.243634][ T448] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.254379][ T448] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.262181][ T448] device bridge_slave_0 entered promiscuous mode [ 38.276573][ T24] audit: type=1401 audit(1791694059.679:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 38.289327][ T448] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.304013][ T448] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.311791][ T448] device bridge_slave_1 entered promiscuous mode [ 38.634008][ T448] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.641078][ T448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.648529][ T448] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.656006][ T448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.690232][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.699623][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.708090][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.716299][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.745396][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.754079][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.761199][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.769020][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.777422][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.784590][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.792946][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.801326][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.818270][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.829054][ T448] device veth0_vlan entered promiscuous mode [ 38.836885][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.851326][ T448] device veth1_macvtap entered promiscuous mode [ 38.859376][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.868178][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.875635][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.886477][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 2026/10/11 04:47:40 executed programs: 0 [ 38.900339][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.931672][ T24] audit: type=1400 audit(1791694060.329:107): avc: denied { write } for pid=429 comm="syz-execprog" path="pipe:[15077]" dev="pipefs" ino=15077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.021235][ T504] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.028385][ T504] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.035777][ T504] device bridge_slave_0 entered promiscuous mode [ 39.043483][ T504] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.051081][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.059243][ T504] device bridge_slave_1 entered promiscuous mode [ 39.142543][ T512] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.149982][ T512] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.157453][ T512] device bridge_slave_0 entered promiscuous mode [ 39.168354][ T512] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.175685][ T512] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.183074][ T512] device bridge_slave_1 entered promiscuous mode [ 39.195188][ T509] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.202246][ T509] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.210048][ T509] device bridge_slave_0 entered promiscuous mode [ 39.218286][ T509] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.225408][ T509] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.232839][ T509] device bridge_slave_1 entered promiscuous mode [ 39.315652][ T507] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.322858][ T507] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.330546][ T507] device bridge_slave_0 entered promiscuous mode [ 39.337533][ T510] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.344745][ T510] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.352015][ T510] device bridge_slave_0 entered promiscuous mode [ 39.359356][ T510] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.366495][ T510] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.373790][ T510] device bridge_slave_1 entered promiscuous mode [ 39.397786][ T507] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.405017][ T507] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.412612][ T507] device bridge_slave_1 entered promiscuous mode [ 39.511618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.519411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.539881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.548860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.557123][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.564252][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.571974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.580491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.588929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.597113][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.604261][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.626535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.634208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.642028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.651102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.659609][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.666846][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.674721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.682177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.689920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.702582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.711114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.719592][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.726620][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.754584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.762189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.770492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.779328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.787889][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.795197][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.803186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.811991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.820176][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.827302][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.834930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.843076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.851274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.881299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.889308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.898187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.907621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.915856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.924136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.932843][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.939979][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.947741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.956556][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.963975][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.971622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.980139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.988436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.002010][ T504] device veth0_vlan entered promiscuous mode [ 40.010166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.018985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.028153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.036213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.044412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.052507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.072674][ T509] device veth0_vlan entered promiscuous mode [ 40.084856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.093196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.102315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.111327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.119655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.127221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.135825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.144535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.152013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.160180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.167864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.175780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.184230][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.191443][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.199294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.207664][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.214943][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.222355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.237184][ T504] device veth1_macvtap entered promiscuous mode [ 40.245179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.255997][ T507] device veth0_vlan entered promiscuous mode [ 40.266273][ T512] device veth0_vlan entered promiscuous mode [ 40.274320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.282252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.299142][ T507] device veth1_macvtap entered promiscuous mode [ 40.309622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.317264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.324902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.333015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.341818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.369489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.378438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.387380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.395735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.404449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.412853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.421276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.430126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.439079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.447753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.456318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.464616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.473068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.481390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.490660][ T512] device veth1_macvtap entered promiscuous mode [ 40.506099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.513789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.522765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.538808][ T509] device veth1_macvtap entered promiscuous mode [ 40.592172][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.624268][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.642780][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.654271][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.672868][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.691533][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.710571][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.729781][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.744438][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.763981][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.782749][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.825813][ T528] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 40.841089][ T510] device veth0_vlan entered promiscuous mode [ 40.849370][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.849377][ T528] F2FS-fs (loop2): Found nat_bits in checkpoint [ 40.864699][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.873285][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.881064][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.884921][ T528] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 40.903244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.918962][ T528] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 40.926165][ T528] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 40.932971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.941675][ T528] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 40.944727][ T530] F2FS-fs (loop6): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 40.949901][ T24] audit: type=1400 audit(1791694062.349:108): avc: denied { mount } for pid=527 comm="syz.2.18" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.986835][ T510] device veth1_macvtap entered promiscuous mode [ 41.002576][ T532] F2FS-fs (loop5): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 41.054550][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.062437][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.079934][ T532] F2FS-fs (loop5): Found nat_bits in checkpoint [ 41.081286][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.088896][ T530] F2FS-fs (loop6): Found nat_bits in checkpoint [ 41.113135][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.121849][ T532] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 41.134426][ T532] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 41.137419][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.144163][ T532] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 41.164090][ T532] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 41.190110][ T530] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 41.197752][ T530] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 41.204836][ T530] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 41.211773][ T539] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 41.220221][ T530] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 41.239092][ T553] ================================================================== [ 41.247308][ T553] BUG: KASAN: null-ptr-deref in kthread_stop+0x3a/0x3e0 [ 41.254682][ T553] Write of size 4 at addr 0000000000000020 by task syz.5.20/553 [ 41.262466][ T553] [ 41.264818][ T553] CPU: 0 PID: 553 Comm: syz.5.20 Not tainted syzkaller #0 [ 41.272176][ T553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 41.282407][ T553] Call Trace: [ 41.285777][ T553] __dump_stack+0x21/0x24 [ 41.290193][ T553] dump_stack_lvl+0x1a7/0x208 [ 41.294975][ T553] ? thaw_kernel_threads+0x220/0x220 [ 41.300361][ T553] ? show_regs_print_info+0x18/0x18 [ 41.305655][ T553] ? __wake_up+0x11c/0x180 [ 41.310094][ T553] ? kthread_stop+0x3a/0x3e0 [ 41.314688][ T553] kasan_report+0xbd/0x140 [ 41.319105][ T553] ? kthread_stop+0x3a/0x3e0 [ 41.323708][ T553] kasan_check_range+0x249/0x2a0 [ 41.328649][ T553] __kasan_check_write+0x14/0x20 [ 41.333762][ T553] kthread_stop+0x3a/0x3e0 [ 41.338273][ T553] f2fs_stop_gc_thread+0x65/0xb0 [ 41.343214][ T553] __f2fs_ioctl+0x9123/0xce30 [ 41.348234][ T553] ? avc_has_extended_perms+0x1fa/0xc90 [ 41.349883][ T539] F2FS-fs (loop1): Found nat_bits in checkpoint [ 41.353789][ T553] ? memcpy+0x56/0x70 [ 41.353800][ T553] ? avc_has_extended_perms+0x801/0xc90 [ 41.353816][ T553] ? avc_ss_reset+0x270/0x270 [ 41.374848][ T553] ? futex_wait+0x5bc/0x6f0 [ 41.379517][ T553] ? f2fs_ioctl+0x240/0x240 [ 41.384364][ T553] ? do_futex+0x1270/0x1270 [ 41.386297][ T539] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 41.390826][ T553] ? ioctl_has_perm+0x1b8/0x4f0 [ 41.390837][ T553] ? __asan_set_shadow_00+0xe/0x10 [ 41.390845][ T553] ? do_vfs_ioctl+0x1403/0x15d0 [ 41.390853][ T553] ? __ia32_compat_sys_ioctl+0x8c0/0x8c0 [ 41.390861][ T553] ? has_cap_mac_admin+0x370/0x370 [ 41.390879][ T553] ? kmem_cache_free+0x100/0x2d0 [ 41.397592][ T539] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 41.402421][ T553] ? selinux_file_ioctl+0x3ad/0x4c0 [ 41.408544][ T539] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 41.412701][ T553] ? putname+0xfe/0x150 [ 41.419044][ T539] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 41.423905][ T553] ? selinux_file_alloc_security+0x120/0x120 [ 41.423914][ T553] ? do_sys_openat2+0x68e/0x750 [ 41.423923][ T553] ? __fget_files+0x2e1/0x340 [ 41.423933][ T553] f2fs_ioctl+0x149/0x240 [ 41.423951][ T553] ? f2fs_precache_extents+0x290/0x290 [ 41.485903][ T553] __se_sys_ioctl+0x121/0x1a0 [ 41.490573][ T553] __x64_sys_ioctl+0x7b/0x90 [ 41.495151][ T553] do_syscall_64+0x31/0x40 [ 41.499661][ T553] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.505781][ T553] RIP: 0033:0x7f5a1395c8f9 [ 41.510176][ T553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.530149][ T553] RSP: 002b:00007f5a133a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.538740][ T553] RAX: ffffffffffffffda RBX: 00007f5a13b8b080 RCX: 00007f5a1395c8f9 [ 41.547163][ T553] RDX: 0000200000000140 RSI: 000000008004587d RDI: 0000000000000005 [ 41.555237][ T553] RBP: 00007f5a139ee1bc R08: 0000000000000000 R09: 0000000000000000 [ 41.563370][ T553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.571412][ T553] R13: 0000000000000000 R14: 00007f5a13b8b080 R15: 00007ffccb709408 [ 41.579458][ T553] ================================================================== [ 41.587494][ T553] Disabling lock debugging due to kernel taint [ 41.617767][ T553] BUG: kernel NULL pointer dereference, address: 0000000000000020 [ 41.625617][ T553] #PF: supervisor write access in kernel mode [ 41.628628][ T552] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 41.631693][ T553] #PF: error_code(0x0002) - not-present page [ 41.631698][ T553] PGD 119bdd067 P4D 119bdd067 PUD 0 [ 41.651376][ T553] Oops: 0002 [#1] PREEMPT SMP KASAN [ 41.656869][ T553] CPU: 0 PID: 553 Comm: syz.5.20 Tainted: G B syzkaller #0 [ 41.665538][ T553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 41.675804][ T553] RIP: 0010:kthread_stop+0x40/0x3e0 [ 41.681080][ T553] Code: 00 fc ff df e8 c1 44 22 00 0f 1f 44 00 00 e8 b7 44 22 00 4c 8d 73 20 4c 89 f7 be 04 00 00 00 e8 36 cb 5c 00 41 bf 01 00 00 00 44 0f c1 7b 20 31 ff 44 89 fe e8 40 48 22 00 45 85 ff 0f 84 32 [ 41.700965][ T553] RSP: 0018:ffffc90001097878 EFLAGS: 00010246 [ 41.707311][ T553] RAX: ffff88811a592800 RBX: 0000000000000000 RCX: ffff88811a592800 [ 41.715376][ T553] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000ffffffff [ 41.723333][ T553] RBP: ffffc900010978a0 R08: 0000000000000003 R09: 0000000000000004 [ 41.731413][ T553] R10: dffffc0000000000 R11: fffffbfff0dcf848 R12: 1ffff11023478925 [ 41.739736][ T553] R13: dffffc0000000000 R14: 0000000000000020 R15: 0000000000000001 [ 41.747957][ T553] FS: 00007f5a133a36c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 41.757047][ T553] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.763729][ T553] CR2: 0000000000000020 CR3: 0000000119671000 CR4: 00000000003506b0 [ 41.771687][ T553] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.779649][ T553] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.787690][ T553] Call Trace: [ 41.790972][ T553] f2fs_stop_gc_thread+0x65/0xb0 [ 41.796005][ T553] __f2fs_ioctl+0x9123/0xce30 [ 41.800667][ T553] ? avc_has_extended_perms+0x1fa/0xc90 [ 41.806194][ T553] ? memcpy+0x56/0x70 [ 41.810353][ T553] ? avc_has_extended_perms+0x801/0xc90 [ 41.815963][ T553] ? avc_ss_reset+0x270/0x270 [ 41.820730][ T553] ? futex_wait+0x5bc/0x6f0 [ 41.825318][ T553] ? f2fs_ioctl+0x240/0x240 [ 41.829803][ T553] ? do_futex+0x1270/0x1270 [ 41.834302][ T553] ? ioctl_has_perm+0x1b8/0x4f0 [ 41.839147][ T553] ? __asan_set_shadow_00+0xe/0x10 [ 41.844245][ T553] ? do_vfs_ioctl+0x1403/0x15d0 [ 41.849083][ T553] ? __ia32_compat_sys_ioctl+0x8c0/0x8c0 [ 41.854698][ T553] ? has_cap_mac_admin+0x370/0x370 [ 41.859791][ T553] ? kmem_cache_free+0x100/0x2d0 [ 41.864715][ T553] ? selinux_file_ioctl+0x3ad/0x4c0 [ 41.870069][ T553] ? putname+0xfe/0x150 [ 41.874205][ T553] ? selinux_file_alloc_security+0x120/0x120 [ 41.880172][ T553] ? do_sys_openat2+0x68e/0x750 [ 41.885089][ T553] ? __fget_files+0x2e1/0x340 [ 41.889834][ T553] f2fs_ioctl+0x149/0x240 [ 41.894303][ T553] ? f2fs_precache_extents+0x290/0x290 [ 41.899958][ T553] __se_sys_ioctl+0x121/0x1a0 [ 41.904812][ T553] __x64_sys_ioctl+0x7b/0x90 [ 41.909390][ T553] do_syscall_64+0x31/0x40 [ 41.913795][ T553] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.919670][ T553] RIP: 0033:0x7f5a1395c8f9 [ 41.924083][ T553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.943769][ T553] RSP: 002b:00007f5a133a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.952314][ T553] RAX: ffffffffffffffda RBX: 00007f5a13b8b080 RCX: 00007f5a1395c8f9 [ 41.960539][ T553] RDX: 0000200000000140 RSI: 000000008004587d RDI: 0000000000000005 [ 41.968611][ T553] RBP: 00007f5a139ee1bc R08: 0000000000000000 R09: 0000000000000000 [ 41.976850][ T553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.985096][ T553] R13: 0000000000000000 R14: 00007f5a13b8b080 R15: 00007ffccb709408 [ 41.993063][ T553] Modules linked in: [ 41.996966][ T553] CR2: 0000000000000020 [ 42.001127][ T553] ---[ end trace b2169954a7792c7d ]--- [ 42.006691][ T553] RIP: 0010:kthread_stop+0x40/0x3e0 [ 42.011956][ T553] Code: 00 fc ff df e8 c1 44 22 00 0f 1f 44 00 00 e8 b7 44 22 00 4c 8d 73 20 4c 89 f7 be 04 00 00 00 e8 36 cb 5c 00 41 bf 01 00 00 00 44 0f c1 7b 20 31 ff 44 89 fe e8 40 48 22 00 45 85 ff 0f 84 32 [ 42.031673][ T553] RSP: 0018:ffffc90001097878 EFLAGS: 00010246 [ 42.037736][ T553] RAX: ffff88811a592800 RBX: 0000000000000000 RCX: ffff88811a592800 [ 42.045719][ T553] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000ffffffff [ 42.054023][ T553] RBP: ffffc900010978a0 R08: 0000000000000003 R09: 0000000000000004 [ 42.062087][ T553] R10: dffffc0000000000 R11: fffffbfff0dcf848 R12: 1ffff11023478925 [ 42.070038][ T553] R13: dffffc0000000000 R14: 0000000000000020 R15: 0000000000000001 [ 42.078085][ T553] FS: 00007f5a133a36c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 42.086997][ T553] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.093564][ T553] CR2: 0000000000000020 CR3: 0000000119671000 CR4: 00000000003506b0 [ 42.101528][ T553] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.109657][ T553] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.117608][ T553] Kernel panic - not syncing: Fatal exception [ 42.124014][ T553] Kernel Offset: disabled [ 42.128351][ T553] Rebooting in 86400 seconds..