Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. 2026/01/24 20:37:44 parsed 1 programs [ 46.580930][ T28] audit: type=1400 audit(1769287064.924:106): avc: denied { unlink } for pid=398 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 46.639954][ T398] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.282271][ T28] audit: type=1400 audit(1769287065.624:107): avc: denied { create } for pid=407 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.711433][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.718494][ T426] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.726116][ T426] device bridge_slave_0 entered promiscuous mode [ 47.753854][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.762018][ T426] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.769436][ T426] device bridge_slave_1 entered promiscuous mode [ 47.832224][ T28] audit: type=1401 audit(1769287066.174:108): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 47.907951][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.915030][ T426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.922326][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.929343][ T426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.954856][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.962873][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.970117][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.979616][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.987808][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.994851][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.003609][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.011914][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.018935][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.030874][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.039807][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.052972][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.064812][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.072970][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.080309][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.088546][ T426] device veth0_vlan entered promiscuous mode [ 48.098345][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 2026/01/24 20:37:46 executed programs: 0 [ 48.107118][ T426] device veth1_macvtap entered promiscuous mode [ 48.117283][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.126921][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.319145][ T468] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.326259][ T468] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.333710][ T468] device bridge_slave_0 entered promiscuous mode [ 48.340639][ T468] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.347656][ T468] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.355112][ T468] device bridge_slave_1 entered promiscuous mode [ 48.391971][ T469] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.399010][ T469] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.406474][ T469] device bridge_slave_0 entered promiscuous mode [ 48.428131][ T469] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.435191][ T469] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.442584][ T469] device bridge_slave_1 entered promiscuous mode [ 48.486903][ T466] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.494055][ T466] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.501433][ T466] device bridge_slave_0 entered promiscuous mode [ 48.508379][ T466] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.515936][ T466] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.523310][ T466] device bridge_slave_1 entered promiscuous mode [ 48.546743][ T472] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.553827][ T472] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.561201][ T472] device bridge_slave_0 entered promiscuous mode [ 48.581452][ T472] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.588476][ T472] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.595840][ T472] device bridge_slave_1 entered promiscuous mode [ 48.608733][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.615887][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.623268][ T473] device bridge_slave_0 entered promiscuous mode [ 48.643842][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.650897][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.658164][ T473] device bridge_slave_1 entered promiscuous mode [ 48.873615][ T466] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.880673][ T466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.901420][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.909256][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.917316][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.926153][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.933593][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.940973][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.949170][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.957355][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.964382][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.971896][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.980230][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.988413][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.995439][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.002928][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.016619][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.042932][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.051726][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.059058][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.068725][ T468] device veth0_vlan entered promiscuous mode [ 49.102188][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.126096][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.134344][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.141387][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.148904][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.157168][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.164213][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.171995][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.179426][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.186845][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.194759][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.217054][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.224593][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.232061][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.240126][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.247146][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.254585][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.263562][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.271819][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.278818][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.286235][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.293765][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.301359][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.309546][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.318067][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.325081][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.332502][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.340754][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.348802][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.355822][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.363158][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.370798][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.382300][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.404489][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.412891][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.421226][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.428250][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.436655][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.444786][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.451801][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.459111][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.467059][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.475006][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.484974][ T468] device veth1_macvtap entered promiscuous mode [ 49.501791][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.511370][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.519388][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.535780][ T466] device veth0_vlan entered promiscuous mode [ 49.553574][ T466] device veth1_macvtap entered promiscuous mode [ 49.560126][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.568449][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.576958][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.585330][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.593902][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.602344][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.610819][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.618969][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.627152][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.635574][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.643982][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.652188][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.660214][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.667981][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.676117][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.688022][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.695526][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.708845][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.716934][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.731877][ T473] device veth0_vlan entered promiscuous mode [ 49.738224][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.745695][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.753602][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.762059][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.775754][ T28] audit: type=1400 audit(1769287068.114:109): avc: denied { write } for pid=521 comm="syz.6.18" name="event2" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.775778][ T28] audit: type=1400 audit(1769287068.114:110): avc: denied { open } for pid=521 comm="syz.6.18" path="/dev/input/event2" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.775975][ T349] tty tty1: SAK: killed process 521 (syz.6.18): by fd#3 [ 49.775999][ T349] tty tty1: SAK: killed process 522 (syz.6.18): by fd#3 [ 49.786387][ T472] device veth0_vlan entered promiscuous mode [ 49.855484][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.864055][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.873482][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.882077][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.890417][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.891726][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.906955][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.907188][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.924584][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.932389][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.956673][ T472] device veth1_macvtap entered promiscuous mode [ 49.975049][ T24] tty tty1: SAK: killed process 533 (syz.0.25): by fd#3 [ 49.975078][ T24] tty tty1: SAK: killed process 535 (syz.0.25): by fd#3 [ 49.990692][ T24] tty tty1: SAK: killed process 533 (syz.0.25): by fd#3 [ 50.009785][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.019455][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.027938][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.028148][ T24] tty tty1: SAK: killed process 544 (syz.0.29): by fd#3 [ 50.028171][ T24] tty tty1: SAK: killed process 545 (syz.0.29): by fd#3 [ 50.049590][ T473] device veth1_macvtap entered promiscuous mode [ 50.079263][ T24] tty tty1: SAK: killed process 550 (syz.0.32): by fd#3 [ 50.079285][ T24] tty tty1: SAK: killed process 551 (syz.0.32): by fd#3 [ 50.097124][ T469] device veth0_vlan entered promiscuous mode [ 50.100371][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.113301][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.125174][ T349] tty tty1: SAK: killed process 556 (syz.6.35): by fd#3 [ 50.125200][ T349] tty tty1: SAK: killed process 557 (syz.6.35): by fd#3 [ 50.129080][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.148124][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.148366][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.148577][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.148834][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.149287][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.149508][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.150837][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.151068][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.170068][ T469] device veth1_macvtap entered promiscuous mode [ 50.227782][ T532] ================================================================== [ 50.227791][ T532] BUG: KASAN: null-ptr-deref in n_tty_flush_buffer+0x6c/0x220 [ 50.227825][ T532] Write of size 24 at addr 0000000000000000 by task kworker/1:4/532 [ 50.227836][ T532] [ 50.227840][ T532] CPU: 1 PID: 532 Comm: kworker/1:4 Not tainted syzkaller #0 [ 50.227855][ T532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.227864][ T532] Workqueue: events vc_SAK [ 50.227889][ T532] Call Trace: [ 50.227894][ T532] [ 50.227899][ T532] __dump_stack+0x21/0x24 [ 50.227918][ T532] dump_stack_lvl+0x110/0x170 [ 50.227935][ T532] ? __cfi_dump_stack_lvl+0x8/0x8 [ 50.227950][ T532] ? preempt_count_add+0x90/0x1b0 [ 50.227966][ T532] ? n_tty_flush_buffer+0x6c/0x220 [ 50.227985][ T532] ? n_tty_flush_buffer+0x6c/0x220 [ 50.228001][ T532] print_report+0x3d/0x60 [ 50.228015][ T532] kasan_report+0x122/0x150 [ 50.228033][ T532] ? n_tty_flush_buffer+0x6c/0x220 [ 50.228052][ T532] kasan_check_range+0x249/0x2a0 [ 50.228071][ T532] memset+0x23/0x40 [ 50.228101][ T532] n_tty_flush_buffer+0x6c/0x220 [ 50.228118][ T532] ? __cfi_n_tty_flush_buffer+0x10/0x10 [ 50.228137][ T532] tty_buffer_flush+0x31d/0x3e0 [ 50.228152][ T532] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 50.228172][ T532] tty_ldisc_flush+0x6c/0xc0 [ 50.228187][ T532] __do_SAK+0x132/0x640 [ 50.228206][ T532] vc_SAK+0x78/0x220 [ 50.228221][ T532] process_one_work+0x71f/0xc40 [ 50.228236][ T532] worker_thread+0xa29/0x11e0 [ 50.228251][ T532] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 50.228270][ T532] ? __kthread_parkme+0x142/0x180 [ 50.228286][ T532] kthread+0x281/0x320 [ 50.228300][ T532] ? __cfi_worker_thread+0x10/0x10 [ 50.228315][ T532] ? __cfi_kthread+0x10/0x10 [ 50.228330][ T532] ret_from_fork+0x1f/0x30 [ 50.228358][ T532] [ 50.228364][ T532] ================================================================== [ 50.228369][ T532] Disabling lock debugging due to kernel taint [ 50.228386][ T532] BUG: unable to handle page fault for address: 0000000000002260 [ 50.228394][ T532] #PF: supervisor write access in kernel mode [ 50.228402][ T532] #PF: error_code(0x0002) - not-present page [ 50.228414][ T532] PGD 111c46067 P4D 111c46067 PUD 0 [ 50.228434][ T532] Oops: 0002 [#1] PREEMPT SMP KASAN [ 50.228448][ T532] CPU: 1 PID: 532 Comm: kworker/1:4 Tainted: G B syzkaller #0 [ 50.228464][ T532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.228473][ T532] Workqueue: events vc_SAK [ 50.228488][ T532] RIP: 0010:memset_erms+0x9/0x10 [ 50.228509][ T532] Code: c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 [ 50.228522][ T532] RSP: 0018:ffffc90000f67b50 EFLAGS: 00010202 [ 50.228535][ T532] RAX: 0000000000000000 RBX: 0000000000000010 RCX: 0000000000000010 [ 50.228546][ T532] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000002260 [ 50.228556][ T532] RBP: ffffc90000f67b70 R08: 0000000000000000 R09: 0000000000002260 [ 50.228567][ T532] R10: dffffc0000000000 R11: fffffbfff0f2defd R12: 000000000000005d [ 50.228578][ T532] R13: 0000000000002260 R14: 0000000000000000 R15: 0000000000002260 [ 50.228589][ T532] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 50.228603][ T532] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.228615][ T532] CR2: 0000000000002260 CR3: 00000001203cf000 CR4: 00000000003506a0 [ 50.228629][ T532] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.228638][ T532] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.228648][ T532] Call Trace: [ 50.228653][ T532] [ 50.228658][ T532] ? memset+0x35/0x40 [ 50.228673][ T532] n_tty_flush_buffer+0x7b/0x220 [ 50.228692][ T532] ? __cfi_n_tty_flush_buffer+0x10/0x10 [ 50.228711][ T532] tty_buffer_flush+0x31d/0x3e0 [ 50.228727][ T532] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 50.228747][ T532] tty_ldisc_flush+0x6c/0xc0 [ 50.228763][ T532] __do_SAK+0x132/0x640 [ 50.228781][ T532] vc_SAK+0x78/0x220 [ 50.228796][ T532] process_one_work+0x71f/0xc40 [ 50.228814][ T532] worker_thread+0xa29/0x11e0 [ 50.228829][ T532] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 50.228850][ T532] ? __kthread_parkme+0x142/0x180 [ 50.228865][ T532] kthread+0x281/0x320 [ 50.228881][ T532] ? __cfi_worker_thread+0x10/0x10 [ 50.228896][ T532] ? __cfi_kthread+0x10/0x10 [ 50.228913][ T532] ret_from_fork+0x1f/0x30 [ 50.228933][ T532] [ 50.228938][ T532] Modules linked in: [ 50.228959][ T532] CR2: 0000000000002260 [ 50.228965][ T532] ---[ end trace 0000000000000000 ]--- [ 50.228971][ T532] RIP: 0010:memset_erms+0x9/0x10 [ 50.228989][ T532] Code: c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 [ 50.229002][ T532] RSP: 0018:ffffc90000f67b50 EFLAGS: 00010202 [ 50.229015][ T532] RAX: 0000000000000000 RBX: 0000000000000010 RCX: 0000000000000010 [ 50.229025][ T532] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000002260 [ 50.229034][ T532] RBP: ffffc90000f67b70 R08: 0000000000000000 R09: 0000000000002260 [ 50.229045][ T532] R10: dffffc0000000000 R11: fffffbfff0f2defd R12: 000000000000005d [ 50.229057][ T532] R13: 0000000000002260 R14: 0000000000000000 R15: 0000000000002260 [ 50.229067][ T532] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 50.229081][ T532] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.229093][ T532] CR2: 0000000000002260 CR3: 00000001203cf000 CR4: 00000000003506a0 [ 50.229106][ T532] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.229115][ T532] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.229127][ T532] Kernel panic - not syncing: Fatal exception [ 50.229493][ T532] Kernel Offset: disabled