[ 24.299710][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.309015][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.317522][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.370561][ T368] syz-executor (368) used greatest stack depth: 22024 bytes left [ 25.218497][ T45] device bridge_slave_1 left promiscuous mode [ 25.224665][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.232535][ T45] device bridge_slave_0 left promiscuous mode [ 25.239269][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.247618][ T45] device veth1_macvtap left promiscuous mode [ 25.253639][ T45] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. 2026/10/24 18:26:58 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 34.288044][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 34.288056][ T30] audit: type=1400 audit(1792866418.860:106): avc: denied { unlink } for pid=407 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.332180][ T407] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.947654][ T437] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.954685][ T437] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.962111][ T437] device bridge_slave_0 entered promiscuous mode [ 34.969482][ T437] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.976673][ T437] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.984525][ T437] device bridge_slave_1 entered promiscuous mode [ 35.016746][ T437] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.023835][ T437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.031101][ T437] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.038276][ T437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.054670][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.062047][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.069766][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.077183][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.087131][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.095411][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.102464][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.110921][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.119121][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.126168][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.137732][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.154237][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.162728][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.173659][ T437] device veth0_vlan entered promiscuous mode [ 35.180635][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.188827][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.196201][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.206925][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.215943][ T437] device veth1_macvtap entered promiscuous mode [ 35.224584][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.234607][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.404970][ T30] audit: type=1401 audit(1792866419.970:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 35.424413][ T30] audit: type=1400 audit(1792866419.990:108): avc: denied { create } for pid=457 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 2026/10/24 18:27:00 executed programs: 0 [ 35.670654][ T472] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.677984][ T472] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.685403][ T472] device bridge_slave_0 entered promiscuous mode [ 35.692480][ T472] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.699578][ T472] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.706942][ T472] device bridge_slave_1 entered promiscuous mode [ 35.742075][ T472] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.749381][ T472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.756602][ T472] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.763652][ T472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.783121][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.790653][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.798151][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.806919][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.815184][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.822256][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.841309][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.849978][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.857050][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.864815][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.872969][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.887762][ T472] device veth0_vlan entered promiscuous mode [ 35.894353][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.903527][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.911895][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.919538][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.930464][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.940220][ T472] device veth1_macvtap entered promiscuous mode [ 35.948923][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.957150][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.967923][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.976949][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.999907][ T477] loop2: detected capacity change from 0 to 256 [ 36.037869][ T477] ======================================================= [ 36.037869][ T477] WARNING: The mand mount option has been deprecated and [ 36.037869][ T477] and is ignored by this kernel. Remove the mand [ 36.037869][ T477] option from the mount to silence this warning. [ 36.037869][ T477] ======================================================= [ 36.099666][ T477] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.110528][ T477] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 36.120372][ T477] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe2e35dda, utbl_chksum : 0xe619d30d) [ 36.133485][ T30] audit: type=1400 audit(1792866420.700:109): avc: denied { mounton } for pid=476 comm="syz.2.17" path="/0/bus/file0/file0" dev="loop2" ino=1048665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.157204][ T30] audit: type=1400 audit(1792866420.720:110): avc: denied { write } for pid=476 comm="syz.2.17" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.178747][ T30] audit: type=1400 audit(1792866420.720:111): avc: denied { add_name } for pid=476 comm="syz.2.17" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.187565][ T477] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 36.199254][ T30] audit: type=1400 audit(1792866420.720:112): avc: denied { create } for pid=476 comm="syz.2.17" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 36.206691][ T477] #PF: supervisor instruction fetch in kernel mode [ 36.226862][ T30] audit: type=1400 audit(1792866420.720:113): avc: denied { associate } for pid=476 comm="syz.2.17" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 36.232757][ T477] #PF: error_code(0x0010) - not-present page [ 36.232770][ T477] PGD 12cd14067 P4D 12cd14067 PUD 0 [ 36.232809][ T477] Oops: 0010 [#1] PREEMPT SMP KASAN [ 36.254512][ T30] audit: type=1400 audit(1792866420.750:114): avc: denied { mounton } for pid=476 comm="syz.2.17" path="/0/bus/file0" dev="loop2" ino=1048664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.259941][ T477] CPU: 0 PID: 477 Comm: syz.2.17 Not tainted syzkaller #0 [ 36.259958][ T477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 36.259965][ T477] RIP: 0010:0x0 [ 36.259988][ T477] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 36.259994][ T477] RSP: 0018:ffffc90000b079d8 EFLAGS: 00010246 [ 36.260008][ T477] RAX: 1ffffffff0aa0f00 RBX: 1ffff11022324fdc RCX: ffff888112585000 [ 36.260019][ T477] RDX: 0000000000000000 RSI: ffff888111927ee0 RDI: ffff88812b5e1f00 [ 36.266160][ T30] audit: type=1400 audit(1792866420.750:115): avc: denied { read } for pid=476 comm="syz.2.17" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.270615][ T477] RBP: ffffc90000b07ab0 R08: ffffffff87121417 R09: 1ffffffff0e24282 [ 36.270628][ T477] R10: dffffc0000000000 R11: fffffbfff0e24283 R12: dffffc0000000000 [ 36.270637][ T477] R13: ffff888111927ee0 R14: ffffffff85507800 R15: 1ffff92000160f40 [ 36.270647][ T477] FS: 00007fbae3bcf6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.270660][ T477] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.270671][ T477] CR2: ffffffffffffffd6 CR3: 000000012c7e3000 CR4: 00000000003506b0 [ 36.270684][ T477] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.423727][ T477] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.431773][ T477] Call Trace: [ 36.435053][ T477] [ 36.438437][ T477] __lookup_slow+0x2b8/0x410 [ 36.443013][ T477] ? lookup_one_len+0x2d0/0x2d0 [ 36.447846][ T477] ? lookup_one_common+0x30b/0x460 [ 36.453041][ T477] lookup_one_len+0x19d/0x2d0 [ 36.457874][ T477] ? lookup_one_common+0x460/0x460 [ 36.463065][ T477] incfs_lookup_dentry+0x60/0xb0 [ 36.468066][ T477] pending_reads_dispatch_ioctl+0x1618/0x1e60 [ 36.474113][ T477] ? ioctl_has_perm+0x1b8/0x4f0 [ 36.478948][ T477] ? ioctl_has_perm+0x3ab/0x4f0 [ 36.483771][ T477] ? pending_reads_poll+0x160/0x160 [ 36.488944][ T477] ? has_cap_mac_admin+0x370/0x370 [ 36.494032][ T477] ? __kasan_slab_free+0x11/0x20 [ 36.498960][ T477] ? slab_free_freelist_hook+0xc2/0x190 [ 36.504611][ T477] ? putname+0x111/0x160 [ 36.508841][ T477] ? kmem_cache_free+0x100/0x320 [ 36.513762][ T477] ? selinux_file_ioctl+0x3ad/0x4c0 [ 36.518945][ T477] ? selinux_file_alloc_security+0x120/0x120 [ 36.524912][ T477] ? __fget_files+0x2e1/0x340 [ 36.529570][ T477] ? security_file_ioctl+0x84/0xa0 [ 36.534662][ T477] ? pending_reads_poll+0x160/0x160 [ 36.539845][ T477] __se_sys_ioctl+0x121/0x1a0 [ 36.544504][ T477] __x64_sys_ioctl+0x7b/0x90 [ 36.549104][ T477] x64_sys_call+0x2f/0x9a0 [ 36.553506][ T477] do_syscall_64+0x4c/0xa0 [ 36.557901][ T477] ? clear_bhb_loop+0x50/0xa0 [ 36.562557][ T477] ? clear_bhb_loop+0x50/0xa0 [ 36.567212][ T477] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 36.573083][ T477] RIP: 0033:0x7fbae3d6c819 [ 36.577554][ T477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.597289][ T477] RSP: 002b:00007fbae3bcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 36.605782][ T477] RAX: ffffffffffffffda RBX: 00007fbae3fe5fa0 RCX: 00007fbae3d6c819 [ 36.613744][ T477] RDX: 00002000000000c0 RSI: 00000000c058671e RDI: 0000000000000005 [ 36.621716][ T477] RBP: 00007fbae3e02c91 R08: 0000000000000000 R09: 0000000000000000 [ 36.629668][ T477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.637624][ T477] R13: 00007fbae3fe6038 R14: 00007fbae3fe5fa0 R15: 00007fffb284c388 [ 36.645590][ T477] [ 36.648631][ T477] Modules linked in: [ 36.652528][ T477] CR2: 0000000000000000 [ 36.656667][ T477] ---[ end trace e764ebdf804bd59b ]--- [ 36.662206][ T477] RIP: 0010:0x0 [ 36.665746][ T477] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 36.673671][ T477] RSP: 0018:ffffc90000b079d8 EFLAGS: 00010246 [ 36.679815][ T477] RAX: 1ffffffff0aa0f00 RBX: 1ffff11022324fdc RCX: ffff888112585000 [ 36.687791][ T477] RDX: 0000000000000000 RSI: ffff888111927ee0 RDI: ffff88812b5e1f00 [ 36.695747][ T477] RBP: ffffc90000b07ab0 R08: ffffffff87121417 R09: 1ffffffff0e24282 [ 36.703961][ T477] R10: dffffc0000000000 R11: fffffbfff0e24283 R12: dffffc0000000000 [ 36.711928][ T477] R13: ffff888111927ee0 R14: ffffffff85507800 R15: 1ffff92000160f40 [ 36.719968][ T477] FS: 00007fbae3bcf6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.729053][ T477] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.735626][ T477] CR2: ffffffffffffffd6 CR3: 000000012c7e3000 CR4: 00000000003506b0 [ 36.743583][ T477] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.751539][ T477] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.759528][ T477] Kernel panic - not syncing: Fatal exception [ 36.765863][ T477] Kernel Offset: disabled [ 36.770175][ T477] Rebooting in 86400 seconds..