Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts. 2025/10/14 02:19:49 parsed 1 programs [ 54.903650][ T27] audit: type=1400 audit(1760408389.790:109): avc: denied { unlink } for pid=401 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 54.934494][ T401] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.765542][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.772606][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.781084][ T412] device bridge_slave_0 entered promiscuous mode [ 55.818545][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.845334][ T27] audit: type=1400 audit(1760408390.730:110): avc: denied { create } for pid=438 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.845673][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.874398][ T412] device bridge_slave_1 entered promiscuous mode [ 56.031229][ T27] audit: type=1401 audit(1760408390.910:111): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 56.107074][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.114408][ T412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.121786][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.128822][ T412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.177983][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.192670][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.206957][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.214575][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.234611][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.244228][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.251292][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.258993][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.267748][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.274830][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.282470][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.290602][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.306309][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.319605][ T412] device veth0_vlan entered promiscuous mode [ 56.326453][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.335087][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.342705][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.355295][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.364420][ T412] device veth1_macvtap entered promiscuous mode [ 56.373737][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 2025/10/14 02:19:51 executed programs: 0 [ 56.386309][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.543854][ T469] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.551006][ T469] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.558902][ T469] device bridge_slave_0 entered promiscuous mode [ 56.579805][ T469] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.586888][ T469] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.594285][ T469] device bridge_slave_1 entered promiscuous mode [ 56.631859][ T472] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.639190][ T472] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.646630][ T472] device bridge_slave_0 entered promiscuous mode [ 56.653954][ T472] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.661185][ T472] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.669148][ T472] device bridge_slave_1 entered promiscuous mode [ 56.711005][ T476] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.718428][ T476] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.726257][ T476] device bridge_slave_0 entered promiscuous mode [ 56.744443][ T476] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.751890][ T476] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.759532][ T476] device bridge_slave_1 entered promiscuous mode [ 56.774258][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.781575][ T474] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.789234][ T474] device bridge_slave_0 entered promiscuous mode [ 56.796727][ T474] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.803857][ T474] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.811313][ T474] device bridge_slave_1 entered promiscuous mode [ 56.932171][ T479] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.939235][ T479] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.946840][ T479] device bridge_slave_0 entered promiscuous mode [ 56.953956][ T479] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.961005][ T479] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.969090][ T479] device bridge_slave_1 entered promiscuous mode [ 57.124933][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.132366][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.146909][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.155685][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.164558][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.171761][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.206836][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.214920][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.222462][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.230240][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.238977][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.247460][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.254513][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.261962][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.270475][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.278979][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.286010][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.293533][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.301465][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.309612][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.330406][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.338970][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.347467][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.354823][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.383572][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.391054][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.398674][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.407185][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.414326][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.422608][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.450267][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.459181][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.466913][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.474663][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.482980][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.491559][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.498651][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.506131][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.514321][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.522588][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.531150][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.538301][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.545988][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.554195][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.562151][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.571845][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.589923][ T472] device veth0_vlan entered promiscuous mode [ 57.597505][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.606053][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.614418][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.621945][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.630294][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.637343][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.649033][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.669791][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.678599][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.686783][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.707529][ T469] device veth0_vlan entered promiscuous mode [ 57.716790][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.725068][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.732465][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.740670][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.749142][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.756284][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.763915][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.772233][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.779307][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.787376][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.795402][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.803412][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.817390][ T476] device veth0_vlan entered promiscuous mode [ 57.826284][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.834949][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.843535][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.851915][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.860243][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.868524][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.886130][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.894850][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.903118][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.911647][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.920147][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.928322][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.936310][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.943942][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.954771][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.963506][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.973906][ T472] device veth1_macvtap entered promiscuous mode [ 57.982117][ T479] device veth0_vlan entered promiscuous mode [ 57.994655][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.002377][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.011038][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.026455][ T474] device veth0_vlan entered promiscuous mode [ 58.033955][ T469] device veth1_macvtap entered promiscuous mode [ 58.049877][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.058137][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.066468][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.074147][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.081981][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.090358][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.098752][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.107483][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.115922][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.124405][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.132366][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.148973][ T476] device veth1_macvtap entered promiscuous mode [ 58.156747][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.164582][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.172874][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.182469][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.190992][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.204750][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.213060][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.227580][ T479] device veth1_macvtap entered promiscuous mode [ 58.240107][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.248292][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.249215][ T27] audit: type=1400 audit(1760408393.130:112): avc: denied { write } for pid=523 comm="syz.6.17" name="event2" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.256906][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.280367][ T27] audit: type=1400 audit(1760408393.130:113): avc: denied { open } for pid=523 comm="syz.6.17" path="/dev/input/event2" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.291305][ T474] device veth1_macvtap entered promiscuous mode [ 58.329818][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.338103][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.347226][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.372154][ T528] tty tty1: SAK: killed process 531 (syz.6.23): by fd#3 [ 58.372184][ T528] tty tty1: SAK: killed process 532 (syz.6.23): by fd#3 [ 58.403265][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.415129][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.424493][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.424718][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.424929][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.425185][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.425391][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.425616][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.425846][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.426074][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.499957][ T339] ================================================================== [ 58.499968][ T339] BUG: KASAN: null-ptr-deref in n_tty_flush_buffer+0x72/0x390 [ 58.500006][ T339] Write of size 24 at addr 0000000000000000 by task kworker/0:2/339 [ 58.500021][ T339] [ 58.500030][ T339] CPU: 0 PID: 339 Comm: kworker/0:2 Not tainted syzkaller #0 [ 58.500047][ T339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 58.500057][ T339] Workqueue: events vc_SAK [ 58.500082][ T339] Call Trace: [ 58.500087][ T339] [ 58.500093][ T339] __dump_stack+0x21/0x24 [ 58.500109][ T339] dump_stack_lvl+0xee/0x150 [ 58.500123][ T339] ? __cfi_dump_stack_lvl+0x8/0x8 [ 58.500138][ T339] ? preempt_count_add+0x90/0x150 [ 58.500158][ T339] ? n_tty_flush_buffer+0x72/0x390 [ 58.500183][ T339] ? n_tty_flush_buffer+0x72/0x390 [ 58.500204][ T339] print_report+0x3d/0x60 [ 58.500219][ T339] kasan_report+0x122/0x150 [ 58.500239][ T339] ? n_tty_flush_buffer+0x72/0x390 [ 58.500262][ T339] kasan_check_range+0x280/0x290 [ 58.500281][ T339] memset+0x23/0x40 [ 58.500297][ T339] n_tty_flush_buffer+0x72/0x390 [ 58.500315][ T339] ? __cfi_n_tty_flush_buffer+0x10/0x10 [ 58.500336][ T339] tty_buffer_flush+0x2f5/0x3c0 [ 58.500354][ T339] ? __cfi_ldsem_down_read_trylock+0x10/0x10 [ 58.500378][ T339] tty_ldisc_flush+0x6c/0xc0 [ 58.500395][ T339] __do_SAK+0x132/0x640 [ 58.500413][ T339] vc_SAK+0x78/0x220 [ 58.500429][ T339] process_one_work+0x6e9/0xdc0 [ 58.500451][ T339] worker_thread+0x9b3/0x10c0 [ 58.500474][ T339] kthread+0x243/0x2c0 [ 58.500488][ T339] ? __cfi_worker_thread+0x10/0x10 [ 58.500519][ T339] ? __cfi_kthread+0x10/0x10 [ 58.500531][ T339] ret_from_fork+0x1f/0x30 [ 58.500550][ T339] [ 58.500555][ T339] ================================================================== [ 58.500580][ T339] Disabling lock debugging due to kernel taint [ 58.500598][ T339] BUG: unable to handle page fault for address: 0000000000002260 [ 58.500606][ T339] #PF: supervisor write access in kernel mode [ 58.500613][ T339] #PF: error_code(0x0002) - not-present page [ 58.500621][ T339] PGD 11d599067 P4D 11d599067 PUD 0 [ 58.500640][ T339] Oops: 0002 [#1] PREEMPT SMP KASAN [ 58.500655][ T339] CPU: 0 PID: 339 Comm: kworker/0:2 Tainted: G B syzkaller #0 [ 58.500671][ T339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 58.500680][ T339] Workqueue: events vc_SAK [ 58.500695][ T339] RIP: 0010:memset_erms+0x9/0x10 [ 58.500713][ T339] Code: c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 [ 58.500726][ T339] RSP: 0018:ffffc900013d7b58 EFLAGS: 00010202 [ 58.500738][ T339] RAX: 0000000000000000 RBX: 0000000000000010 RCX: 0000000000000010 [ 58.500748][ T339] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000002260 [ 58.500757][ T339] RBP: ffffc900013d7b78 R08: 0000000000000000 R09: 0000000000002260 [ 58.500766][ T339] R10: fffffbfff0d3e2fd R11: 1ffffffff0d3e2fc R12: 0000000000000000 [ 58.500775][ T339] R13: 000000000000005d R14: 0000000000000000 R15: 0000000000002260 [ 58.500784][ T339] FS: 0000000000000000(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 58.500795][ T339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.500805][ T339] CR2: 0000000000002260 CR3: 0000000112270000 CR4: 00000000003506b0 [ 58.500818][ T339] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.500827][ T339] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.500836][ T339] Call Trace: [ 58.500839][ T339] [ 58.500844][ T339] ? memset+0x35/0x40 [ 58.500856][ T339] n_tty_flush_buffer+0x81/0x390 [ 58.500875][ T339] ? __cfi_n_tty_flush_buffer+0x10/0x10 [ 58.500896][ T339] tty_buffer_flush+0x2f5/0x3c0 [ 58.500912][ T339] ? __cfi_ldsem_down_read_trylock+0x10/0x10 [ 58.500935][ T339] tty_ldisc_flush+0x6c/0xc0 [ 58.500951][ T339] __do_SAK+0x132/0x640 [ 58.501029][ T339] vc_SAK+0x78/0x220 [ 58.501054][ T339] process_one_work+0x6e9/0xdc0 [ 58.501076][ T339] worker_thread+0x9b3/0x10c0 [ 58.501097][ T339] kthread+0x243/0x2c0 [ 58.501111][ T339] ? __cfi_worker_thread+0x10/0x10 [ 58.501128][ T339] ? __cfi_kthread+0x10/0x10 [ 58.501142][ T339] ret_from_fork+0x1f/0x30 [ 58.501161][ T339] [ 58.501167][ T339] Modules linked in: [ 58.501192][ T339] CR2: 0000000000002260 [ 58.501203][ T339] ---[ end trace 0000000000000000 ]--- [ 58.501210][ T339] RIP: 0010:memset_erms+0x9/0x10 [ 58.501230][ T339] Code: c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 [ 58.501243][ T339] RSP: 0018:ffffc900013d7b58 EFLAGS: 00010202 [ 58.501308][ T339] RAX: 0000000000000000 RBX: 0000000000000010 RCX: 0000000000000010 [ 58.501319][ T339] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000002260 [ 58.501329][ T339] RBP: ffffc900013d7b78 R08: 0000000000000000 R09: 0000000000002260 [ 58.501340][ T339] R10: fffffbfff0d3e2fd R11: 1ffffffff0d3e2fc R12: 0000000000000000 [ 58.501349][ T339] R13: 000000000000005d R14: 0000000000000000 R15: 0000000000002260 [ 58.501358][ T339] FS: 0000000000000000(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 58.501371][ T339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.501382][ T339] CR2: 0000000000002260 CR3: 0000000112270000 CR4: 00000000003506b0 [ 58.501396][ T339] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.501406][ T339] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.501418][ T339] Kernel panic - not syncing: Fatal exception [ 58.501725][ T339] Kernel Offset: disabled