Warning: Permanently added '10.128.1.213' (ED25519) to the list of known hosts. 2025/07/30 19:09:28 ignoring optional flag "sandboxArg"="0" 2025/07/30 19:09:29 parsed 1 programs [ 47.830632][ T30] audit: type=1400 audit(1753902570.278:106): avc: denied { unlink } for pid=399 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 47.865695][ T399] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.320067][ T30] audit: type=1401 audit(1753902570.758:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 48.777719][ T445] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.789611][ T445] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.800487][ T445] device bridge_slave_0 entered promiscuous mode [ 48.808203][ T445] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.815456][ T445] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.823069][ T445] device bridge_slave_1 entered promiscuous mode [ 48.892159][ T445] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.899201][ T445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.906493][ T445] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.913679][ T445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.931161][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.938674][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.946082][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.971859][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.980277][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.987355][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.995304][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.004015][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.011169][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.019101][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.027455][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.038805][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.049636][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.057753][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.065190][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.073561][ T445] device veth0_vlan entered promiscuous mode [ 49.083239][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 2025/07/30 19:09:31 executed programs: 0 [ 49.092324][ T445] device veth1_macvtap entered promiscuous mode [ 49.101119][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.111502][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.336856][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.344122][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.351604][ T473] device bridge_slave_0 entered promiscuous mode [ 49.358331][ T469] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.365376][ T469] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.372778][ T469] device bridge_slave_0 entered promiscuous mode [ 49.381881][ T469] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.389035][ T469] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.396475][ T469] device bridge_slave_1 entered promiscuous mode [ 49.403073][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.410127][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.417460][ T473] device bridge_slave_1 entered promiscuous mode [ 49.448902][ T472] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.456039][ T472] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.463431][ T472] device bridge_slave_0 entered promiscuous mode [ 49.470604][ T472] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.477797][ T472] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.485326][ T472] device bridge_slave_1 entered promiscuous mode [ 49.521086][ T470] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.528129][ T470] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.535928][ T470] device bridge_slave_0 entered promiscuous mode [ 49.543991][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.551184][ T470] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.558460][ T470] device bridge_slave_1 entered promiscuous mode [ 49.607742][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.614938][ T474] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.622498][ T474] device bridge_slave_0 entered promiscuous mode [ 49.640847][ T474] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.647894][ T474] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.655356][ T474] device bridge_slave_1 entered promiscuous mode [ 49.805305][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.812718][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.822722][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.831268][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.839386][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.846435][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.854255][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.862741][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.871148][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.878277][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.903790][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.911534][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.918970][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.933790][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.942109][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.950369][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.957376][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.979165][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.003951][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.012168][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.020477][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.028697][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.037071][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.044129][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.073511][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.086010][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.094152][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.111534][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.119383][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.127160][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.134684][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.143242][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.151688][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.159851][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.166892][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.174419][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.182758][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.191034][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.198059][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.230850][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.238374][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.246552][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.254695][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.262824][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.270381][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.277940][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.286286][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.293333][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.300811][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.308935][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.315986][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.323503][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.331717][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.339653][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.347806][ T473] device veth0_vlan entered promiscuous mode [ 50.364842][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.379547][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.388270][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.396517][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.404825][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.413327][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.420897][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.430188][ T473] device veth1_macvtap entered promiscuous mode [ 50.436945][ T470] device veth0_vlan entered promiscuous mode [ 50.453001][ T469] device veth0_vlan entered promiscuous mode [ 50.463047][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.471282][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.479088][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.486689][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.495363][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.503717][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.510773][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.518141][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.526482][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.533520][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.541360][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.563812][ T470] device veth1_macvtap entered promiscuous mode [ 50.570485][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.578403][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.587135][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.595508][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.604046][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.613052][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.621432][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.629473][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.637775][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.645955][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.654044][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.662170][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.670210][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.678261][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.686422][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.694159][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.701681][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.709237][ T469] device veth1_macvtap entered promiscuous mode [ 50.729042][ T472] device veth0_vlan entered promiscuous mode [ 50.740049][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.747998][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.758125][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.769129][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.777683][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.796350][ T474] device veth0_vlan entered promiscuous mode [ 50.811962][ T472] device veth1_macvtap entered promiscuous mode [ 50.820393][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.828864][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.838643][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.847107][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.855718][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.864201][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.873858][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.882303][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.890752][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.898943][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.906476][ T521] loop6: detected capacity change from 0 to 40427 [ 50.907462][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.936472][ T521] F2FS-fs (loop6): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 50.949473][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.957573][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.965627][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.966251][ T521] F2FS-fs (loop6): Found nat_bits in checkpoint [ 50.973912][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.000426][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.020188][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.028538][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.046301][ T521] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 51.050310][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.060302][ T521] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 51.070152][ T521] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 51.090651][ T474] device veth1_macvtap entered promiscuous mode [ 51.100649][ T521] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 51.116749][ T30] audit: type=1400 audit(1753902573.558:108): avc: denied { mount } for pid=520 comm="syz.6.20" name="/" dev="loop6" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.140895][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.220258][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.260202][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.275724][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.300695][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.324450][ T523] loop5: detected capacity change from 0 to 40427 [ 51.344381][ T527] loop0: detected capacity change from 0 to 40427 [ 51.379111][ T523] F2FS-fs (loop5): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 51.405227][ T529] loop2: detected capacity change from 0 to 40427 [ 51.417150][ T523] F2FS-fs (loop5): Found nat_bits in checkpoint [ 51.424487][ T527] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 51.479886][ T527] F2FS-fs (loop0): Found nat_bits in checkpoint [ 51.486799][ T529] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 51.495872][ T523] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 51.520420][ T523] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 51.527648][ T529] F2FS-fs (loop2): Found nat_bits in checkpoint [ 51.560407][ T523] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 51.567393][ T330] device bridge_slave_1 left promiscuous mode [ 51.573935][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.581558][ T523] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 51.588006][ T527] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 51.596187][ T330] device bridge_slave_0 left promiscuous mode [ 51.608232][ T527] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 51.614914][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.622915][ T529] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 51.639824][ T529] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 51.656544][ T529] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 51.663371][ T533] loop3: detected capacity change from 0 to 40427 [ 51.672612][ T527] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 51.683177][ T527] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 51.692162][ T529] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 51.709609][ T330] device veth1_macvtap left promiscuous mode [ 51.744574][ T549] ================================================================== [ 51.753287][ T549] BUG: KASAN: null-ptr-deref in kthread_stop+0x3a/0x3e0 [ 51.760249][ T549] Write of size 4 at addr 0000000000000028 by task syz.0.16/549 [ 51.767980][ T549] [ 51.770323][ T549] CPU: 1 PID: 549 Comm: syz.0.16 Not tainted 5.15.189-syzkaller-1081280-gf32b52534f1d #0 [ 51.780053][ T533] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 51.780117][ T549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.798307][ T549] Call Trace: [ 51.801698][ T549] [ 51.804799][ T549] __dump_stack+0x21/0x30 [ 51.809220][ T549] dump_stack_lvl+0xee/0x150 [ 51.813947][ T549] ? show_regs_print_info+0x20/0x20 [ 51.819175][ T549] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 51.821059][ T330] device veth0_vlan left promiscuous mode [ 51.824987][ T549] ? __wake_up+0x116/0x180 [ 51.835189][ T549] ? kthread_stop+0x3a/0x3e0 [ 51.839779][ T549] kasan_report+0xe7/0x140 [ 51.844194][ T549] ? kthread_stop+0x3a/0x3e0 [ 51.848786][ T549] kasan_check_range+0x280/0x290 [ 51.853717][ T549] __kasan_check_write+0x14/0x20 [ 51.858651][ T549] kthread_stop+0x3a/0x3e0 [ 51.863206][ T549] f2fs_stop_gc_thread+0x65/0xb0 [ 51.868155][ T549] __f2fs_ioctl+0x5c36/0xb150 [ 51.868863][ T535] loop6: detected capacity change from 0 to 40427 [ 51.872833][ T549] ? avc_flush+0x2b0/0x2b0 [ 51.872851][ T549] ? do_futex+0xc91/0x2620 [ 51.872866][ T549] ? kasan_set_free_info+0x23/0x40 [ 51.872881][ T549] ? do_vfs_ioctl+0xc1a/0x1d00 [ 51.872899][ T549] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 51.903696][ T549] ? futex_exit_release+0x1d0/0x1d0 [ 51.908888][ T549] ? f2fs_ioctl+0x240/0x240 [ 51.913379][ T549] ? ioctl_has_perm+0x394/0x4d0 [ 51.918212][ T549] ? debug_smp_processor_id+0x17/0x20 [ 51.923569][ T549] ? has_cap_mac_admin+0x330/0x330 [ 51.928768][ T549] ? slab_free_freelist_hook+0xc2/0x190 [ 51.934311][ T549] ? putname+0x111/0x160 [ 51.938533][ T549] ? selinux_file_ioctl+0x377/0x480 [ 51.943725][ T549] ? selinux_file_alloc_security+0x120/0x120 [ 51.949689][ T549] ? __fget_files+0x2c4/0x320 [ 51.954461][ T549] f2fs_ioctl+0x149/0x240 [ 51.958786][ T549] ? f2fs_precache_extents+0x260/0x260 [ 51.964225][ T549] __se_sys_ioctl+0x121/0x1a0 [ 51.968887][ T549] __x64_sys_ioctl+0x7b/0x90 [ 51.973459][ T549] x64_sys_call+0x2f/0x9a0 [ 51.977863][ T549] do_syscall_64+0x4c/0xa0 [ 51.982260][ T549] ? clear_bhb_loop+0x50/0xa0 [ 51.986920][ T549] ? clear_bhb_loop+0x50/0xa0 [ 51.991589][ T549] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.997462][ T549] RIP: 0033:0x7fa7ffffc929 [ 52.001866][ T549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.021551][ T549] RSP: 002b:00007fa7ffa4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.029950][ T549] RAX: ffffffffffffffda RBX: 00007fa800224080 RCX: 00007fa7ffffc929 [ 52.037903][ T549] RDX: 0000200000000140 RSI: 000000008004587d RDI: 0000000000000005 [ 52.045854][ T549] RBP: 00007fa80007eb39 R08: 0000000000000000 R09: 0000000000000000 [ 52.054153][ T549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.062103][ T549] R13: 0000000000000000 R14: 00007fa800224080 R15: 00007ffede2cd078 [ 52.070320][ T549] [ 52.073321][ T549] ================================================================== [ 52.081366][ T549] Disabling lock debugging due to kernel taint [ 52.092254][ T549] BUG: kernel NULL pointer dereference, address: 0000000000000028 [ 52.100082][ T549] #PF: supervisor write access in kernel mode [ 52.101596][ T533] F2FS-fs (loop3): Found nat_bits in checkpoint [ 52.106136][ T549] #PF: error_code(0x0002) - not-present page [ 52.118316][ T549] PGD 11a754067 P4D 11a754067 PUD 0 [ 52.123612][ T549] Oops: 0002 [#1] PREEMPT SMP KASAN [ 52.128801][ T549] CPU: 1 PID: 549 Comm: syz.0.16 Tainted: G B 5.15.189-syzkaller-1081280-gf32b52534f1d #0 [ 52.140065][ T549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 52.150124][ T549] RIP: 0010:kthread_stop+0x40/0x3e0 [ 52.155331][ T549] Code: 00 fc ff df e8 e1 c4 23 00 0f 1f 44 00 00 e8 d7 c4 23 00 4c 8d 73 28 4c 89 f7 be 04 00 00 00 e8 a6 41 62 00 41 bf 01 00 00 00 44 0f c1 7b 28 31 ff 44 89 fe e8 60 c8 23 00 45 85 ff 0f 84 32 [ 52.160967][ T533] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 52.174930][ T549] RSP: 0018:ffffc90000ec7918 EFLAGS: 00010246 [ 52.174948][ T549] RAX: ffff88811ceb1300 RBX: 0000000000000000 RCX: ffff88811ceb13c0 [ 52.174958][ T549] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000ffffffff [ 52.174967][ T549] RBP: ffffc90000ec7940 R08: 0000000000000004 R09: 0000000000000003 [ 52.181472][ T533] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 52.187407][ T549] R10: fffffbfff0e17c4c R11: 1ffffffff0e17c4c R12: 1ffff110239c9123 [ 52.195859][ T30] audit: type=1400 audit(1753902574.558:109): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 52.203483][ T549] R13: dffffc0000000000 R14: 0000000000000028 R15: 0000000000000001 [ 52.203497][ T549] FS: 00007fa7ffa4c6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 52.203511][ T549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.271053][ T549] CR2: 0000000000000028 CR3: 000000012f404000 CR4: 00000000003506a0 [ 52.279010][ T549] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.286964][ T549] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.294919][ T549] Call Trace: [ 52.298177][ T549] [ 52.301177][ T549] f2fs_stop_gc_thread+0x65/0xb0 [ 52.306103][ T549] __f2fs_ioctl+0x5c36/0xb150 [ 52.310763][ T549] ? avc_flush+0x2b0/0x2b0 [ 52.315282][ T549] ? do_futex+0xc91/0x2620 [ 52.319712][ T549] ? kasan_set_free_info+0x23/0x40 [ 52.324810][ T549] ? do_vfs_ioctl+0xc1a/0x1d00 [ 52.329564][ T549] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 52.335177][ T549] ? futex_exit_release+0x1d0/0x1d0 [ 52.340361][ T549] ? f2fs_ioctl+0x240/0x240 [ 52.345042][ T549] ? ioctl_has_perm+0x394/0x4d0 [ 52.349889][ T549] ? debug_smp_processor_id+0x17/0x20 [ 52.355238][ T549] ? has_cap_mac_admin+0x330/0x330 [ 52.360326][ T549] ? slab_free_freelist_hook+0xc2/0x190 [ 52.366024][ T549] ? putname+0x111/0x160 [ 52.370248][ T549] ? selinux_file_ioctl+0x377/0x480 [ 52.375516][ T549] ? selinux_file_alloc_security+0x120/0x120 [ 52.381478][ T549] ? __fget_files+0x2c4/0x320 [ 52.386138][ T549] f2fs_ioctl+0x149/0x240 [ 52.390536][ T549] ? f2fs_precache_extents+0x260/0x260 [ 52.396045][ T549] __se_sys_ioctl+0x121/0x1a0 [ 52.400765][ T549] __x64_sys_ioctl+0x7b/0x90 [ 52.405352][ T549] x64_sys_call+0x2f/0x9a0 [ 52.409848][ T549] do_syscall_64+0x4c/0xa0 [ 52.414250][ T549] ? clear_bhb_loop+0x50/0xa0 [ 52.419019][ T549] ? clear_bhb_loop+0x50/0xa0 [ 52.423690][ T549] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 52.429569][ T549] RIP: 0033:0x7fa7ffffc929 [ 52.433971][ T549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.453563][ T549] RSP: 002b:00007fa7ffa4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.461976][ T549] RAX: ffffffffffffffda RBX: 00007fa800224080 RCX: 00007fa7ffffc929 [ 52.469928][ T549] RDX: 0000200000000140 RSI: 000000008004587d RDI: 0000000000000005 [ 52.477918][ T549] RBP: 00007fa80007eb39 R08: 0000000000000000 R09: 0000000000000000 [ 52.485881][ T549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.493830][ T549] R13: 0000000000000000 R14: 00007fa800224080 R15: 00007ffede2cd078 [ 52.501786][ T549] [ 52.504905][ T549] Modules linked in: [ 52.508855][ T549] CR2: 0000000000000028 [ 52.513089][ T549] ---[ end trace c889106bf6ca3ef6 ]--- [ 52.518532][ T549] RIP: 0010:kthread_stop+0x40/0x3e0 [ 52.523719][ T549] Code: 00 fc ff df e8 e1 c4 23 00 0f 1f 44 00 00 e8 d7 c4 23 00 4c 8d 73 28 4c 89 f7 be 04 00 00 00 e8 a6 41 62 00 41 bf 01 00 00 00 44 0f c1 7b 28 31 ff 44 89 fe e8 60 c8 23 00 45 85 ff 0f 84 32 [ 52.543319][ T549] RSP: 0018:ffffc90000ec7918 EFLAGS: 00010246 [ 52.549371][ T549] RAX: ffff88811ceb1300 RBX: 0000000000000000 RCX: ffff88811ceb13c0 [ 52.557408][ T549] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000ffffffff [ 52.565443][ T549] RBP: ffffc90000ec7940 R08: 0000000000000004 R09: 0000000000000003 [ 52.573399][ T549] R10: fffffbfff0e17c4c R11: 1ffffffff0e17c4c R12: 1ffff110239c9123 [ 52.581365][ T549] R13: dffffc0000000000 R14: 0000000000000028 R15: 0000000000000001 [ 52.589318][ T549] FS: 00007fa7ffa4c6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 52.598230][ T549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.604800][ T549] CR2: 0000000000000028 CR3: 000000012f404000 CR4: 00000000003506a0 [ 52.612753][ T549] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.620702][ T549] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.628656][ T549] Kernel panic - not syncing: Fatal exception [ 52.634907][ T549] Kernel Offset: disabled [ 52.639234][ T549] Rebooting in 86400 seconds..