Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. 2026/04/21 00:34:09 parsed 1 programs [ 45.990624][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 45.990635][ T24] audit: type=1400 audit(1776731649.920:105): avc: denied { unlink } for pid=417 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 46.052070][ T417] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.470330][ T24] audit: type=1400 audit(1776731650.390:106): avc: denied { create } for pid=428 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.936295][ T24] audit: type=1401 audit(1776731650.860:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 47.009018][ T465] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.016209][ T465] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.023846][ T465] device bridge_slave_0 entered promiscuous mode [ 47.031580][ T465] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.038662][ T465] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.046248][ T465] device bridge_slave_1 entered promiscuous mode [ 47.095635][ T465] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.102867][ T465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.110231][ T465] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.117322][ T465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.140262][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.147987][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.155519][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.164107][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.172336][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.179558][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.188888][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.197123][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.204166][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.215006][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.224124][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.243843][ T465] device veth0_vlan entered promiscuous mode [ 47.250135][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.258772][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.266993][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.274732][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.285938][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.294795][ T465] device veth1_macvtap entered promiscuous mode [ 47.303860][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.313701][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/04/21 00:34:11 executed programs: 0 [ 47.349817][ T24] audit: type=1400 audit(1776731651.270:108): avc: denied { write } for pid=408 comm="syz-execprog" path="pipe:[14994]" dev="pipefs" ino=14994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 47.497069][ T480] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.504563][ T480] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.512076][ T480] device bridge_slave_0 entered promiscuous mode [ 47.521479][ T480] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.528516][ T480] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.535945][ T480] device bridge_slave_1 entered promiscuous mode [ 47.569283][ T481] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.576446][ T481] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.583943][ T481] device bridge_slave_0 entered promiscuous mode [ 47.593309][ T481] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.600363][ T481] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.608119][ T481] device bridge_slave_1 entered promiscuous mode [ 47.644471][ T483] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.651681][ T483] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.659060][ T483] device bridge_slave_0 entered promiscuous mode [ 47.666123][ T483] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.673431][ T483] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.680863][ T483] device bridge_slave_1 entered promiscuous mode [ 47.692337][ T485] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.699427][ T485] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.707063][ T485] device bridge_slave_0 entered promiscuous mode [ 47.731156][ T484] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.738220][ T484] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.745602][ T484] device bridge_slave_0 entered promiscuous mode [ 47.760750][ T485] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.767800][ T485] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.775539][ T485] device bridge_slave_1 entered promiscuous mode [ 47.798359][ T484] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.805583][ T484] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.813254][ T484] device bridge_slave_1 entered promiscuous mode [ 47.926145][ T483] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.933304][ T483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.979125][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.987741][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.995711][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.011984][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.019480][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.032225][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.039757][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.047613][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.056237][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.064861][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.071952][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.080608][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.111590][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.119841][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.128585][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.135647][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.143313][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.151773][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.159826][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.166877][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.174246][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.182662][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.189710][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.197124][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.205071][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.213090][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.229314][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.237615][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.245965][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.253298][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.261751][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.270048][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.278538][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.285582][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.311279][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.319850][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.328812][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.338118][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.346266][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.353967][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.366071][ T483] device veth0_vlan entered promiscuous mode [ 48.377741][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.386019][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.393650][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.401693][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.410068][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.418743][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.425969][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.433660][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.442384][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.450668][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.457953][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.465524][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.473744][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.481984][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.502470][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.510050][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.519730][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.538608][ T481] device veth0_vlan entered promiscuous mode [ 48.559889][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.568322][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.576492][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.584177][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.592059][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.600300][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.608561][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.615664][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.623361][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.631592][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.638604][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.646004][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.653933][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.662080][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.674584][ T480] device veth0_vlan entered promiscuous mode [ 48.682125][ T483] device veth1_macvtap entered promiscuous mode [ 48.694230][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.702786][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.711345][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.719294][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.727941][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.736330][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.745014][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.752611][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.763208][ T481] device veth1_macvtap entered promiscuous mode [ 48.783368][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.792183][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.805255][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.813739][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.822662][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.831232][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.839469][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.848123][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.856499][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.885269][ T480] device veth1_macvtap entered promiscuous mode [ 48.897271][ T485] device veth0_vlan entered promiscuous mode [ 48.904200][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.912900][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.923880][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.932344][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.940354][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.948607][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.956712][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.964969][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.973624][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.978753][ T512] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 48.981453][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.997613][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.005769][ T512] F2FS-fs (loop0): Found nat_bits in checkpoint [ 49.010124][ T484] device veth0_vlan entered promiscuous mode [ 49.036444][ T485] device veth1_macvtap entered promiscuous mode [ 49.040142][ T512] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 49.043423][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.049892][ T512] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 49.061740][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.070735][ T512] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 49.071085][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.077387][ T512] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 49.085999][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.093050][ T24] audit: type=1400 audit(1776731653.020:109): avc: denied { mount } for pid=511 comm="syz.0.16" name="/" dev="loop0" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.124196][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.135383][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.143842][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.152463][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.161840][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.170168][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.178950][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.187621][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.196407][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.238564][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.246637][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.254401][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.263527][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.273307][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.291045][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.311578][ T484] device veth1_macvtap entered promiscuous mode [ 49.328152][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.347038][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.371996][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.404665][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.431309][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.454346][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.470780][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.721548][ T519] F2FS-fs (loop5): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 49.755049][ T519] F2FS-fs (loop5): Found nat_bits in checkpoint [ 49.792152][ T521] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 49.801603][ T519] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 49.808430][ T519] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 49.815146][ T519] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 49.822050][ T519] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 49.822500][ T521] F2FS-fs (loop0): Found nat_bits in checkpoint [ 49.853248][ T521] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 49.859740][ T521] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 49.866451][ T521] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 49.874806][ T525] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 49.883547][ T524] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 49.889106][ T521] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 49.893683][ T524] F2FS-fs (loop1): Found nat_bits in checkpoint [ 49.900438][ T525] F2FS-fs (loop2): Found nat_bits in checkpoint [ 49.948828][ T525] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 49.955735][ T525] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 49.970330][ T527] F2FS-fs (loop6): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 49.998219][ T525] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 50.051013][ T525] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 50.079690][ T524] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 50.097448][ T527] F2FS-fs (loop6): Found nat_bits in checkpoint [ 50.100428][ T524] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 50.110718][ T524] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 50.124522][ T524] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 50.194500][ T527] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 50.202118][ T49] device bridge_slave_1 left promiscuous mode [ 50.208465][ T527] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 50.215060][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.222689][ T527] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 50.246675][ T527] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 50.263907][ T49] device bridge_slave_0 left promiscuous mode [ 50.275055][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.294704][ T49] device veth1_macvtap left promiscuous mode [ 50.300900][ T49] device veth0_vlan left promiscuous mode [ 50.802239][ T556] F2FS-fs (loop5): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 50.872682][ T556] F2FS-fs (loop5): Found nat_bits in checkpoint [ 50.946603][ T562] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 50.973644][ T556] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 50.986842][ T562] F2FS-fs (loop0): Found nat_bits in checkpoint [ 50.991731][ T569] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 51.019146][ T556] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 51.026231][ T556] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 51.034100][ T569] F2FS-fs (loop1): Found nat_bits in checkpoint [ 51.041175][ T562] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 51.047728][ T562] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 51.054783][ T556] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 51.064494][ T562] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 51.071612][ T562] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 51.077154][ T569] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 51.085651][ T569] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 51.092586][ T569] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 51.099395][ T569] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 51.141597][ T564] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 51.234949][ T567] F2FS-fs (loop6): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 51.261747][ T564] F2FS-fs (loop2): Found nat_bits in checkpoint [ 51.340462][ T567] F2FS-fs (loop6): Found nat_bits in checkpoint [ 51.405812][ T564] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 51.436389][ T564] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 51.450699][ T564] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 51.470607][ T564] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 51.481323][ T567] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 51.487839][ T567] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 51.520662][ T567] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 51.591166][ T567] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 51.775996][ T595] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 51.796038][ T593] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 51.809830][ T595] F2FS-fs (loop0): Found nat_bits in checkpoint [ 51.872317][ T593] F2FS-fs (loop1): Found nat_bits in checkpoint [ 51.934412][ T595] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 51.945111][ T595] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 51.954901][ T593] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 51.961555][ T595] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 51.968239][ T593] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 51.975074][ T593] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 51.981820][ T595] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 51.989905][ T593] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 51.999711][ T601] F2FS-fs (loop5): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 52.021725][ T601] F2FS-fs (loop5): Found nat_bits in checkpoint [ 52.094085][ T601] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 52.100776][ T601] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 52.107316][ T601] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 52.114381][ T601] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 52.127307][ T607] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 52.188752][ T607] F2FS-fs (loop2): Found nat_bits in checkpoint [ 52.306786][ T607] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 52.340638][ T607] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 52.347163][ T607] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 52.380820][ T607] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 2026/04/21 00:34:16 executed programs: 28 [ 52.672659][ T619] F2FS-fs (loop6): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 52.711744][ T619] F2FS-fs (loop6): Found nat_bits in checkpoint [ 52.746784][ T619] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 52.753445][ T619] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 52.759986][ T619] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 52.767036][ T619] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 52.783493][ T626] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 52.792925][ T626] F2FS-fs (loop1): Found nat_bits in checkpoint [ 52.812313][ T633] F2FS-fs (loop5): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 52.821546][ T630] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 52.831264][ T626] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 52.837785][ T626] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 52.845118][ T626] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 52.852045][ T626] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 52.930216][ T633] F2FS-fs (loop5): Found nat_bits in checkpoint [ 52.951743][ T630] F2FS-fs (loop0): Found nat_bits in checkpoint [ 53.018280][ T633] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 53.024962][ T633] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 53.031953][ T633] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 53.038821][ T633] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 53.096792][ T630] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 53.103476][ T630] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 53.120651][ T630] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 53.127446][ T630] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 53.306391][ T643] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 53.390424][ T643] F2FS-fs (loop2): Found nat_bits in checkpoint [ 53.453463][ T643] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 53.460013][ T643] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 53.467053][ T643] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 53.474129][ T643] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 53.504071][ T658] F2FS-fs (loop6): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 53.607394][ T658] F2FS-fs (loop6): Found nat_bits in checkpoint [ 53.649124][ T658] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 53.655997][ T658] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 53.662688][ T658] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 53.669361][ T658] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 53.793856][ T661] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 53.832186][ T661] F2FS-fs (loop1): Found nat_bits in checkpoint [ 53.864506][ T667] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 53.900946][ T667] F2FS-fs (loop0): Found nat_bits in checkpoint [ 53.920844][ T666] F2FS-fs (loop5): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 53.932096][ T661] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 53.938637][ T661] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 53.945259][ T661] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 53.952944][ T666] F2FS-fs (loop5): Found nat_bits in checkpoint [ 53.961094][ T661] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 53.983347][ T666] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 53.989906][ T666] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 53.996776][ T666] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 54.003615][ T666] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 54.063117][ T687] ================================================================== [ 54.071328][ T687] BUG: KASAN: null-ptr-deref in kthread_stop+0x3a/0x3e0 [ 54.078276][ T687] Write of size 4 at addr 0000000000000020 by task syz.5.38/687 [ 54.085912][ T687] [ 54.088257][ T687] CPU: 1 PID: 687 Comm: syz.5.38 Not tainted syzkaller #0 [ 54.095375][ T687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 54.105450][ T687] Call Trace: [ 54.108777][ T687] __dump_stack+0x21/0x24 [ 54.113119][ T687] dump_stack_lvl+0x1a7/0x208 [ 54.117816][ T687] ? thaw_kernel_threads+0x220/0x220 [ 54.123121][ T687] ? show_regs_print_info+0x18/0x18 [ 54.125278][ T667] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 54.128334][ T687] ? __wake_up+0x11c/0x180 [ 54.128344][ T687] ? kthread_stop+0x3a/0x3e0 [ 54.128361][ T687] kasan_report+0xd8/0x130 [ 54.148248][ T687] ? kthread_stop+0x3a/0x3e0 [ 54.150627][ T667] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 54.152859][ T687] kasan_check_range+0x249/0x2a0 [ 54.164233][ T687] __kasan_check_write+0x14/0x20 [ 54.169189][ T687] kthread_stop+0x3a/0x3e0 [ 54.169587][ T667] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 54.173632][ T687] f2fs_stop_gc_thread+0x65/0xb0 [ 54.173642][ T687] __f2fs_ioctl+0x70d6/0xcc90 [ 54.173653][ T687] ? __kasan_check_read+0x11/0x20 [ 54.173664][ T687] ? avc_has_extended_perms+0x205/0xca0 [ 54.173673][ T687] ? memcpy+0x56/0x70 [ 54.173683][ T687] ? avc_has_extended_perms+0x802/0xca0 [ 54.173694][ T687] ? avc_ss_reset+0x280/0x280 [ 54.173704][ T687] ? try_to_wake_up+0x638/0xd70 [ 54.173713][ T687] ? f2fs_ioctl+0x240/0x240 [ 54.173723][ T687] ? __kasan_check_write+0x14/0x20 [ 54.173737][ T687] ? __asan_set_shadow_00+0xe/0x10 [ 54.173746][ T687] ? do_vfs_ioctl+0x1302/0x14c0 [ 54.173756][ T687] ? __ia32_compat_sys_ioctl+0x8e0/0x8e0 [ 54.173766][ T687] ? has_cap_mac_admin+0x370/0x370 [ 54.173777][ T687] ? kmem_cache_free+0x100/0x2d0 [ 54.173787][ T687] ? selinux_file_ioctl+0x3a0/0x4d0 [ 54.173796][ T687] ? putname+0xfe/0x150 [ 54.173807][ T687] ? selinux_file_alloc_security+0x120/0x120 [ 54.173824][ T687] ? do_sys_openat2+0x68e/0x750 [ 54.190745][ T667] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 54.195064][ T687] ? __fget_files+0x2c4/0x320 [ 54.195076][ T687] f2fs_ioctl+0x149/0x240 [ 54.195092][ T687] ? f2fs_precache_extents+0x290/0x290 [ 54.297644][ T687] __se_sys_ioctl+0x121/0x1a0 [ 54.302322][ T687] __x64_sys_ioctl+0x7b/0x90 [ 54.306918][ T687] do_syscall_64+0x31/0x40 [ 54.311341][ T687] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 54.317236][ T687] RIP: 0033:0x7f940b04b8f9 [ 54.321650][ T687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.341247][ T687] RSP: 002b:00007f940aa92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.349680][ T687] RAX: ffffffffffffffda RBX: 00007f940b27a080 RCX: 00007f940b04b8f9 [ 54.357645][ T687] RDX: 0000200000000140 RSI: 000000008004587d RDI: 0000000000000005 [ 54.365612][ T687] RBP: 00007f940b0dd1bc R08: 0000000000000000 R09: 0000000000000000 [ 54.373585][ T687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.381550][ T687] R13: 0000000000000000 R14: 00007f940b27a080 R15: 00007ffdab9e04d8 [ 54.389518][ T687] ================================================================== [ 54.397679][ T687] Disabling lock debugging due to kernel taint [ 54.406541][ T687] BUG: kernel NULL pointer dereference, address: 0000000000000020 [ 54.411531][ T24] audit: type=1400 audit(1776731658.340:110): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 54.414489][ T687] #PF: supervisor write access in kernel mode [ 54.442622][ T687] #PF: error_code(0x0002) - not-present page [ 54.448621][ T687] PGD 107992067 P4D 107992067 PUD 0 [ 54.454128][ T687] Oops: 0002 [#1] PREEMPT SMP KASAN [ 54.459350][ T687] CPU: 0 PID: 687 Comm: syz.5.38 Tainted: G B syzkaller #0 [ 54.467870][ T687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 54.470779][ T24] audit: type=1400 audit(1776731658.340:111): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.477951][ T687] RIP: 0010:kthread_stop+0x40/0x3e0 [ 54.477969][ T687] Code: 00 fc ff df e8 e1 41 22 00 0f 1f 44 00 00 e8 d7 41 22 00 4c 8d 73 20 4c 89 f7 be 04 00 00 00 e8 e6 c3 5c 00 41 bf 01 00 00 00 44 0f c1 7b 20 31 ff 44 89 fe e8 60 45 22 00 45 85 ff 0f 84 32 [ 54.524395][ T687] RSP: 0018:ffffc90001797898 EFLAGS: 00010246 [ 54.530454][ T687] RAX: ffff8881278be200 RBX: 0000000000000000 RCX: 0000000000000286 [ 54.538493][ T687] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000ffffffff [ 54.546446][ T687] RBP: ffffc900017978c0 R08: 0000000000000003 R09: 0000000000000004 [ 54.554410][ T687] R10: dffffc0000000000 R11: fffffbfff0dcf648 R12: 1ffff11021e03d25 [ 54.562816][ T687] R13: dffffc0000000000 R14: 0000000000000020 R15: 0000000000000001 [ 54.570793][ T687] FS: 00007f940aa926c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 54.579715][ T687] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.586293][ T687] CR2: 0000000000000020 CR3: 000000012be3b000 CR4: 00000000003506b0 [ 54.594278][ T687] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.602264][ T687] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.610231][ T687] Call Trace: [ 54.613510][ T687] f2fs_stop_gc_thread+0x65/0xb0 [ 54.618461][ T687] __f2fs_ioctl+0x70d6/0xcc90 [ 54.623122][ T687] ? __kasan_check_read+0x11/0x20 [ 54.628140][ T687] ? avc_has_extended_perms+0x205/0xca0 [ 54.633755][ T687] ? memcpy+0x56/0x70 [ 54.637720][ T687] ? avc_has_extended_perms+0x802/0xca0 [ 54.643250][ T687] ? avc_ss_reset+0x280/0x280 [ 54.648006][ T687] ? try_to_wake_up+0x638/0xd70 [ 54.652939][ T687] ? f2fs_ioctl+0x240/0x240 [ 54.657687][ T687] ? __kasan_check_write+0x14/0x20 [ 54.662845][ T687] ? __asan_set_shadow_00+0xe/0x10 [ 54.668217][ T687] ? do_vfs_ioctl+0x1302/0x14c0 [ 54.673182][ T687] ? __ia32_compat_sys_ioctl+0x8e0/0x8e0 [ 54.679082][ T687] ? has_cap_mac_admin+0x370/0x370 [ 54.684269][ T687] ? kmem_cache_free+0x100/0x2d0 [ 54.689358][ T687] ? selinux_file_ioctl+0x3a0/0x4d0 [ 54.694557][ T687] ? putname+0xfe/0x150 [ 54.698719][ T687] ? selinux_file_alloc_security+0x120/0x120 [ 54.704768][ T687] ? do_sys_openat2+0x68e/0x750 [ 54.709642][ T687] ? __fget_files+0x2c4/0x320 [ 54.714463][ T687] f2fs_ioctl+0x149/0x240 [ 54.719111][ T687] ? f2fs_precache_extents+0x290/0x290 [ 54.724577][ T687] __se_sys_ioctl+0x121/0x1a0 [ 54.729253][ T687] __x64_sys_ioctl+0x7b/0x90 [ 54.733941][ T687] do_syscall_64+0x31/0x40 [ 54.738371][ T687] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 54.744337][ T687] RIP: 0033:0x7f940b04b8f9 [ 54.748754][ T687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.768617][ T687] RSP: 002b:00007f940aa92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.777144][ T687] RAX: ffffffffffffffda RBX: 00007f940b27a080 RCX: 00007f940b04b8f9 [ 54.785106][ T687] RDX: 0000200000000140 RSI: 000000008004587d RDI: 0000000000000005 [ 54.793067][ T687] RBP: 00007f940b0dd1bc R08: 0000000000000000 R09: 0000000000000000 [ 54.801385][ T687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.809342][ T687] R13: 0000000000000000 R14: 00007f940b27a080 R15: 00007ffdab9e04d8 [ 54.817389][ T687] Modules linked in: [ 54.821268][ T687] CR2: 0000000000000020 [ 54.825517][ T687] ---[ end trace 30dddaea41dd68be ]--- [ 54.825549][ T694] BUG: kernel NULL pointer dereference, address: 0000000000000020 [ 54.830991][ T687] RIP: 0010:kthread_stop+0x40/0x3e0 [ 54.838811][ T694] #PF: supervisor write access in kernel mode [ 54.844000][ T687] Code: 00 fc ff df e8 e1 41 22 00 0f 1f 44 00 00 e8 d7 41 22 00 4c 8d 73 20 4c 89 f7 be 04 00 00 00 e8 e6 c3 5c 00 41 bf 01 00 00 00 44 0f c1 7b 20 31 ff 44 89 fe e8 60 45 22 00 45 85 ff 0f 84 32 [ 54.850049][ T694] #PF: error_code(0x0002) - not-present page [ 54.869826][ T687] RSP: 0018:ffffc90001797898 EFLAGS: 00010246 [ 54.875879][ T694] PGD 10698a067 [ 54.875883][ T687] [ 54.875899][ T687] RAX: ffff8881278be200 RBX: 0000000000000000 RCX: 0000000000000286 [ 54.882062][ T694] P4D 10698a067 [ 54.885593][ T687] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000ffffffff [ 54.885605][ T687] RBP: ffffc900017978c0 R08: 0000000000000003 R09: 0000000000000004 [ 54.887921][ T694] PUD 0 [ 54.895885][ T687] R10: dffffc0000000000 R11: fffffbfff0dcf648 R12: 1ffff11021e03d25 [ 54.899413][ T694] [ 54.907380][ T687] R13: dffffc0000000000 R14: 0000000000000020 R15: 0000000000000001 [ 54.915435][ T694] Oops: 0002 [#2] PREEMPT SMP KASAN [ 54.918279][ T687] FS: 00007f940aa926c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 54.926235][ T694] CPU: 1 PID: 694 Comm: syz.0.39 Tainted: G B D syzkaller #0 [ 54.928556][ T687] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.936534][ T694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 54.941719][ T687] CR2: 0000000000000020 CR3: 000000012be3b000 CR4: 00000000003506b0 [ 54.950643][ T694] RIP: 0010:kthread_stop+0x40/0x3e0 [ 54.959117][ T687] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.965695][ T694] Code: 00 fc ff df e8 e1 41 22 00 0f 1f 44 00 00 e8 d7 41 22 00 4c 8d 73 20 4c 89 f7 be 04 00 00 00 e8 e6 c3 5c 00 41 bf 01 00 00 00 44 0f c1 7b 20 31 ff 44 89 fe e8 60 45 22 00 45 85 ff 0f 84 32 [ 54.975831][ T687] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.983796][ T694] RSP: 0018:ffffc900016e7898 EFLAGS: 00010202 [ 54.989127][ T687] Kernel panic - not syncing: Fatal exception [ 54.997199][ T694] [ 55.039522][ T694] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000286 [ 55.047490][ T694] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000020 [ 55.055548][ T694] RBP: ffffc900016e78c0 R08: 0000000000000000 R09: 1ffff11021d84c0f [ 55.063520][ T694] R10: dffffc0000000000 R11: ffffed1021d84c10 R12: 1ffff11021d84d25 [ 55.071585][ T694] R13: dffffc0000000000 R14: 0000000000000020 R15: 0000000000000001 [ 55.079590][ T694] FS: 00007f77fcfa76c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 55.088516][ T694] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.095185][ T694] CR2: 0000000000000020 CR3: 000000011aa5c000 CR4: 00000000003506a0 [ 55.103193][ T694] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.111338][ T694] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.119413][ T694] Call Trace: [ 55.122703][ T694] f2fs_stop_gc_thread+0x65/0xb0 [ 55.127657][ T694] __f2fs_ioctl+0x70d6/0xcc90 [ 55.132331][ T694] ? __kasan_check_read+0x11/0x20 [ 55.137353][ T694] ? avc_has_extended_perms+0x205/0xca0 [ 55.142907][ T694] ? memcpy+0x56/0x70 [ 55.146890][ T694] ? avc_has_extended_perms+0x802/0xca0 [ 55.152434][ T694] ? avc_ss_reset+0x280/0x280 [ 55.157107][ T694] ? try_to_wake_up+0x638/0xd70 [ 55.161956][ T694] ? f2fs_ioctl+0x240/0x240 [ 55.166544][ T694] ? __kasan_check_write+0x14/0x20 [ 55.171656][ T694] ? __asan_set_shadow_00+0xe/0x10 [ 55.176763][ T694] ? do_vfs_ioctl+0x1302/0x14c0 [ 55.181609][ T694] ? __ia32_compat_sys_ioctl+0x8e0/0x8e0 [ 55.187253][ T694] ? has_cap_mac_admin+0x370/0x370 [ 55.192363][ T694] ? kmem_cache_free+0x100/0x2d0 [ 55.197305][ T694] ? selinux_file_ioctl+0x3a0/0x4d0 [ 55.202510][ T694] ? putname+0xfe/0x150 [ 55.206664][ T694] ? selinux_file_alloc_security+0x120/0x120 [ 55.212642][ T694] ? do_sys_openat2+0x68e/0x750 [ 55.217502][ T694] ? __fget_files+0x2c4/0x320 [ 55.222176][ T694] f2fs_ioctl+0x149/0x240 [ 55.226731][ T694] ? f2fs_precache_extents+0x290/0x290 [ 55.232287][ T694] __se_sys_ioctl+0x121/0x1a0 [ 55.236971][ T694] __x64_sys_ioctl+0x7b/0x90 [ 55.241573][ T694] do_syscall_64+0x31/0x40 [ 55.245991][ T694] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 55.251999][ T694] RIP: 0033:0x7f77fd5608f9 [ 55.256435][ T694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.276162][ T694] RSP: 002b:00007f77fcfa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.284662][ T694] RAX: ffffffffffffffda RBX: 00007f77fd78f080 RCX: 00007f77fd5608f9 [ 55.292638][ T694] RDX: 0000200000000140 RSI: 000000008004587d RDI: 0000000000000005 [ 55.300612][ T694] RBP: 00007f77fd5f21bc R08: 0000000000000000 R09: 0000000000000000 [ 55.308611][ T694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.316605][ T694] R13: 0000000000000000 R14: 00007f77fd78f080 R15: 00007ffef44cfac8 [ 55.324777][ T694] Modules linked in: [ 55.328673][ T694] CR2: 0000000000000020 [ 55.333003][ T694] ---[ end trace 30dddaea41dd68bf ]--- [ 55.338569][ T694] RIP: 0010:kthread_stop+0x40/0x3e0 [ 55.343776][ T694] Code: 00 fc ff df e8 e1 41 22 00 0f 1f 44 00 00 e8 d7 41 22 00 4c 8d 73 20 4c 89 f7 be 04 00 00 00 e8 e6 c3 5c 00 41 bf 01 00 00 00 44 0f c1 7b 20 31 ff 44 89 fe e8 60 45 22 00 45 85 ff 0f 84 32 [ 55.363466][ T694] RSP: 0018:ffffc90001797898 EFLAGS: 00010246 [ 55.369536][ T694] RAX: ffff8881278be200 RBX: 0000000000000000 RCX: 0000000000000286 [ 55.377504][ T694] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000ffffffff [ 55.385471][ T694] RBP: ffffc900017978c0 R08: 0000000000000003 R09: 0000000000000004 [ 55.393442][ T694] R10: dffffc0000000000 R11: fffffbfff0dcf648 R12: 1ffff11021e03d25 [ 55.401414][ T694] R13: dffffc0000000000 R14: 0000000000000020 R15: 0000000000000001 [ 55.409396][ T694] FS: 00007f77fcfa76c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 55.418496][ T694] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.425103][ T694] CR2: 0000000000000020 CR3: 000000011aa5c000 CR4: 00000000003506a0 [ 55.433170][ T694] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.441258][ T694] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.143566][ T687] Shutting down cpus with NMI [ 56.148702][ T687] Kernel Offset: disabled [ 56.153046][ T687] Rebooting in 86400 seconds..