Warning: Permanently added '10.128.0.184' (ED25519) to the list of known hosts. 2026/11/01 07:55:30 parsed 1 programs [ 34.206771][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 34.206784][ T28] audit: type=1400 audit(1793519730.974:106): avc: denied { unlink } for pid=410 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.284629][ T410] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.294446][ T28] audit: type=1401 audit(1793519732.054:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 35.314597][ T439] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.321824][ T439] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.329757][ T439] device bridge_slave_0 entered promiscuous mode [ 35.347709][ T439] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.354950][ T439] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.363289][ T439] device bridge_slave_1 entered promiscuous mode [ 35.513732][ T439] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.521083][ T439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.528664][ T439] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.535806][ T439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.559610][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.567413][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.574714][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.596952][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.605394][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.612794][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.620756][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.629136][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.636238][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.643708][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.652783][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.667374][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.678132][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.686096][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.693681][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.701994][ T439] device veth0_vlan entered promiscuous mode 2026/11/01 07:55:32 executed programs: 0 [ 35.711674][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.720985][ T439] device veth1_macvtap entered promiscuous mode [ 35.730157][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.739952][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.908204][ T471] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.915605][ T471] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.923205][ T471] device bridge_slave_0 entered promiscuous mode [ 35.930290][ T471] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.937452][ T471] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.944882][ T471] device bridge_slave_1 entered promiscuous mode [ 35.955980][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.963081][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.970770][ T473] device bridge_slave_0 entered promiscuous mode [ 35.979262][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.986421][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.993703][ T473] device bridge_slave_1 entered promiscuous mode [ 36.097303][ T477] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.104451][ T477] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.112130][ T477] device bridge_slave_0 entered promiscuous mode [ 36.136449][ T477] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.143770][ T477] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.151243][ T477] device bridge_slave_1 entered promiscuous mode [ 36.219160][ T475] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.227177][ T475] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.234926][ T475] device bridge_slave_0 entered promiscuous mode [ 36.258542][ T475] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.265682][ T475] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.273421][ T475] device bridge_slave_1 entered promiscuous mode [ 36.292238][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.299419][ T478] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.307266][ T478] device bridge_slave_0 entered promiscuous mode [ 36.314755][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.322613][ T478] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.330160][ T478] device bridge_slave_1 entered promiscuous mode [ 36.428441][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.436520][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.492333][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.500725][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.509163][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.516310][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.524189][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.532693][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.541005][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.548047][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.555426][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.563586][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.571879][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.597863][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.605470][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.613336][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.622168][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.631481][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.638837][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.646625][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.655127][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.663428][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.670496][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.678068][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.718047][ T471] device veth0_vlan entered promiscuous mode [ 36.727006][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.735957][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.744482][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.752260][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.760030][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.768390][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.795677][ T471] device veth1_macvtap entered promiscuous mode [ 36.807039][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.833054][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.842068][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.850917][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.876855][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.884595][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.900737][ T473] device veth0_vlan entered promiscuous mode [ 36.927089][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.935208][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.943378][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.952241][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.961609][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.968685][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.976474][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.984766][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.992203][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.000107][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.008703][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.015833][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.023582][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.030826][ T499] loop6: detected capacity change from 0 to 40427 [ 37.032006][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.045533][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.053378][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.061160][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.069322][ T499] F2FS-fs (loop6): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root and reserve_node [ 37.069513][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.084360][ T499] F2FS-fs (loop6): Found nat_bits in checkpoint [ 37.086953][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.124047][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.125695][ T499] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 37.134059][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.147941][ T28] audit: type=1400 audit(1793519733.904:108): avc: denied { mount } for pid=498 comm="syz.6.17" name="/" dev="loop6" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.153566][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.176682][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.184167][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.192980][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.200062][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.213136][ T473] device veth1_macvtap entered promiscuous mode [ 37.252499][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.260707][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.269266][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.278399][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.287017][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.295520][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.306848][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.315114][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.324805][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.333740][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.342587][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.350873][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.359382][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.368023][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.376123][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.387429][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.395559][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.404081][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.412467][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.421548][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.430606][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.438574][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.453914][ T478] device veth0_vlan entered promiscuous mode [ 37.461424][ T477] device veth0_vlan entered promiscuous mode [ 37.475633][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.484985][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.485783][ T505] loop6: detected capacity change from 0 to 40427 [ 37.493876][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.509577][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.511279][ T505] F2FS-fs (loop6): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root and reserve_node [ 37.529388][ T505] F2FS-fs (loop6): Found nat_bits in checkpoint [ 37.533761][ T478] device veth1_macvtap entered promiscuous mode [ 37.559671][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.567515][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.575073][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.575747][ T505] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 37.586643][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.601071][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.611267][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.620213][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.629044][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.637595][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.645373][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.654118][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.663020][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.671639][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.680096][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.688335][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.704014][ T477] device veth1_macvtap entered promiscuous mode [ 37.713495][ T475] device veth0_vlan entered promiscuous mode [ 37.732404][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.741543][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.757273][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.787642][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.795981][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.817015][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.825388][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.846968][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.855478][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.887161][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.895492][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.923465][ T475] device veth1_macvtap entered promiscuous mode [ 37.941376][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.959658][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.986689][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.004720][ T512] loop6: detected capacity change from 0 to 40427 [ 38.005897][ T514] loop2: detected capacity change from 0 to 40427 [ 38.024393][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.042487][ T512] F2FS-fs (loop6): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root and reserve_node [ 38.052300][ T514] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root and reserve_node [ 38.063257][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.075926][ T512] F2FS-fs (loop6): Found nat_bits in checkpoint [ 38.128480][ T8] device bridge_slave_1 left promiscuous mode [ 38.135392][ T514] F2FS-fs (loop2): Found nat_bits in checkpoint [ 38.152088][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.177364][ T512] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 38.196472][ T8] device bridge_slave_0 left promiscuous mode [ 38.202671][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.237356][ T8] device veth1_macvtap left promiscuous mode [ 38.256318][ T8] device veth0_vlan left promiscuous mode [ 38.294213][ T514] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 38.338450][ T518] loop3: detected capacity change from 0 to 40427 [ 38.403869][ T518] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root and reserve_node [ 38.415041][ T516] loop4: detected capacity change from 0 to 40427 [ 38.425308][ T516] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root and reserve_node [ 38.447644][ T518] F2FS-fs (loop3): Found nat_bits in checkpoint [ 38.487748][ T516] F2FS-fs (loop4): Found nat_bits in checkpoint [ 38.575781][ T518] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 38.591603][ T524] loop5: detected capacity change from 0 to 40427 [ 38.607657][ T516] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 38.629060][ T524] F2FS-fs (loop5): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root and reserve_node [ 38.678812][ T542] ================================================================== [ 38.686907][ T542] BUG: KASAN: null-ptr-deref in kthread_stop+0x3a/0x3f0 [ 38.693960][ T542] Write of size 4 at addr 0000000000000028 by task syz.4.20/542 [ 38.701594][ T542] [ 38.703915][ T542] CPU: 0 PID: 542 Comm: syz.4.20 Not tainted syzkaller #0 [ 38.711021][ T542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 38.721177][ T542] Call Trace: [ 38.724474][ T542] [ 38.727760][ T542] __dump_stack+0x21/0x24 [ 38.732106][ T542] dump_stack_lvl+0x110/0x170 [ 38.736800][ T542] ? __cfi_dump_stack_lvl+0x8/0x8 [ 38.741845][ T542] ? kthread_stop+0x3a/0x3f0 [ 38.746443][ T542] ? kthread_stop+0x3a/0x3f0 [ 38.751040][ T542] print_report+0x3d/0x60 [ 38.755383][ T542] kasan_report+0x122/0x150 [ 38.759903][ T542] ? kthread_stop+0x3a/0x3f0 [ 38.764959][ T542] kasan_check_range+0x249/0x2a0 [ 38.769913][ T542] __kasan_check_write+0x14/0x20 [ 38.774860][ T542] kthread_stop+0x3a/0x3f0 [ 38.779278][ T542] f2fs_stop_gc_thread+0x65/0xb0 [ 38.784413][ T542] __f2fs_ioctl+0x85de/0xc4d0 [ 38.789099][ T542] ? avc_has_extended_perms+0x869/0xed0 [ 38.794649][ T542] ? memcpy+0x56/0x70 [ 38.798632][ T542] ? avc_has_extended_perms+0x9d5/0xed0 [ 38.800348][ T537] loop2: detected capacity change from 0 to 40427 [ 38.804193][ T542] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 38.816565][ T542] ? preempt_schedule+0xbc/0xd0 [ 38.821431][ T542] ? __kasan_check_read+0x11/0x20 [ 38.826737][ T542] ? f2fs_ioctl+0x240/0x240 [ 38.831252][ T542] ? __asan_set_shadow_00+0xe/0x10 [ 38.836497][ T542] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 38.841354][ T542] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 38.847011][ T542] ? __kasan_check_write+0x14/0x20 [ 38.852172][ T542] ? wake_up_q+0x101/0x1a0 [ 38.856691][ T542] ? futex_wake+0x5fa/0x8e0 [ 38.857453][ T537] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root and reserve_node [ 38.861302][ T542] ? ioctl_has_perm+0x1b8/0x4f0 [ 38.875990][ T542] ? ioctl_has_perm+0x3a6/0x4f0 [ 38.880860][ T542] ? has_cap_mac_admin+0x370/0x370 [ 38.885982][ T542] ? __kasan_slab_free+0x11/0x20 [ 38.891000][ T542] ? do_futex+0x2bf/0x430 [ 38.895311][ T542] ? selinux_file_ioctl+0x3ad/0x4c0 [ 38.900506][ T542] ? __cfi_do_futex+0x10/0x10 [ 38.905354][ T542] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 38.910910][ T542] ? __fget_files+0x2d1/0x330 [ 38.915584][ T542] f2fs_ioctl+0x14c/0x240 [ 38.920342][ T542] ? __cfi_f2fs_ioctl+0x10/0x10 [ 38.925191][ T542] __se_sys_ioctl+0x12f/0x1b0 [ 38.929863][ T542] __x64_sys_ioctl+0x7b/0x90 [ 38.934468][ T542] x64_sys_call+0x58b/0x9a0 [ 38.938977][ T542] do_syscall_64+0x4c/0xa0 [ 38.943382][ T542] ? clear_bhb_loop+0x30/0x80 [ 38.948132][ T542] ? clear_bhb_loop+0x30/0x80 [ 38.952810][ T542] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.958782][ T542] RIP: 0033:0x7f9f9b19a079 [ 38.963207][ T542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.982968][ T542] RSP: 002b:00007f9f9c060028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 38.991477][ T542] RAX: ffffffffffffffda RBX: 00007f9f9b3d6080 RCX: 00007f9f9b19a079 [ 38.999634][ T542] RDX: 0000200000000140 RSI: 000000008004587d RDI: 0000000000000005 [ 39.007777][ T542] RBP: 00007f9f9b22cbb4 R08: 0000000000000000 R09: 0000000000000000 [ 39.015785][ T542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.023845][ T542] R13: 0000000000000000 R14: 00007f9f9b3d6080 R15: 00007ffc28d352c8 [ 39.031902][ T542] [ 39.034945][ T542] ================================================================== [ 39.054396][ T524] F2FS-fs (loop5): Found nat_bits in checkpoint [ 39.092876][ T535] loop6: detected capacity change from 0 to 40427 [ 39.103396][ T537] F2FS-fs (loop2): Found nat_bits in checkpoint [ 39.121700][ T535] F2FS-fs (loop6): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root and reserve_node [ 39.134177][ T524] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 39.174094][ T537] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 39.188505][ T542] Disabling lock debugging due to kernel taint [ 39.195583][ T542] BUG: kernel NULL pointer dereference, address: 0000000000000028 [ 39.204265][ T542] #PF: supervisor write access in kernel mode [ 39.210444][ T542] #PF: error_code(0x0002) - not-present page [ 39.216545][ T542] PGD 12169a067 P4D 12169a067 PUD 0 [ 39.221849][ T542] Oops: 0002 [#1] PREEMPT SMP KASAN [ 39.227495][ T542] CPU: 0 PID: 542 Comm: syz.4.20 Tainted: G B syzkaller #0 [ 39.236087][ T542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 39.236674][ T535] F2FS-fs (loop6): Found nat_bits in checkpoint [ 39.246410][ T542] RIP: 0010:kthread_stop+0x40/0x3f0 [ 39.246440][ T542] Code: 00 fc ff df e8 91 47 27 00 0f 1f 44 00 00 e8 87 47 27 00 4c 8d 73 28 4c 89 f7 be 04 00 00 00 e8 56 e6 6c 00 41 bf 01 00 00 00 44 0f c1 7b 28 31 ff 44 89 fe e8 80 4b 27 00 45 85 ff 0f 84 3e [ 39.246451][ T542] RSP: 0018:ffffc90000eb7838 EFLAGS: 00010246 [ 39.246465][ T542] RAX: ffff88810f779400 RBX: 0000000000000000 RCX: ffff88810f779440 [ 39.246475][ T542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 39.246483][ T542] RBP: ffffc90000eb7860 R08: ffffffff87b777e7 R09: 1ffffffff0f6eefc [ 39.246493][ T542] R10: dffffc0000000000 R11: fffffbfff0f6eefd R12: 1ffff1102402b947 [ 39.246503][ T542] R13: dffffc0000000000 R14: 0000000000000028 R15: 0000000000000001 [ 39.322303][ T535] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 39.324592][ T542] FS: 00007f9f9c0606c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 39.341481][ T542] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.348172][ T542] CR2: 0000000000000028 CR3: 0000000121e61000 CR4: 00000000003506b0 [ 39.356151][ T542] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.364120][ T542] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.372252][ T542] Call Trace: [ 39.375621][ T542] [ 39.378551][ T542] f2fs_stop_gc_thread+0x65/0xb0 [ 39.383483][ T542] __f2fs_ioctl+0x85de/0xc4d0 [ 39.388504][ T542] ? avc_has_extended_perms+0x869/0xed0 [ 39.394090][ T542] ? memcpy+0x56/0x70 [ 39.398189][ T542] ? avc_has_extended_perms+0x9d5/0xed0 [ 39.403870][ T542] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 39.410030][ T542] ? preempt_schedule+0xbc/0xd0 [ 39.414867][ T542] ? __kasan_check_read+0x11/0x20 [ 39.419880][ T542] ? f2fs_ioctl+0x240/0x240 [ 39.424544][ T542] ? __asan_set_shadow_00+0xe/0x10 [ 39.429651][ T542] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 39.434675][ T542] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 39.440512][ T542] ? __kasan_check_write+0x14/0x20 [ 39.445800][ T542] ? wake_up_q+0x101/0x1a0 [ 39.450380][ T542] ? futex_wake+0x5fa/0x8e0 [ 39.455003][ T542] ? ioctl_has_perm+0x1b8/0x4f0 [ 39.459934][ T542] ? ioctl_has_perm+0x3a6/0x4f0 [ 39.464795][ T542] ? has_cap_mac_admin+0x370/0x370 [ 39.469916][ T542] ? __kasan_slab_free+0x11/0x20 [ 39.474841][ T542] ? do_futex+0x2bf/0x430 [ 39.479156][ T542] ? selinux_file_ioctl+0x3ad/0x4c0 [ 39.484342][ T542] ? __cfi_do_futex+0x10/0x10 [ 39.489014][ T542] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 39.494980][ T542] ? __fget_files+0x2d1/0x330 [ 39.499647][ T542] f2fs_ioctl+0x14c/0x240 [ 39.504049][ T542] ? __cfi_f2fs_ioctl+0x10/0x10 [ 39.508972][ T542] __se_sys_ioctl+0x12f/0x1b0 [ 39.513818][ T542] __x64_sys_ioctl+0x7b/0x90 [ 39.518410][ T542] x64_sys_call+0x58b/0x9a0 [ 39.523002][ T542] do_syscall_64+0x4c/0xa0 [ 39.527775][ T542] ? clear_bhb_loop+0x30/0x80 [ 39.532942][ T542] ? clear_bhb_loop+0x30/0x80 [ 39.537611][ T542] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 39.543747][ T542] RIP: 0033:0x7f9f9b19a079 [ 39.548144][ T542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.569665][ T542] RSP: 002b:00007f9f9c060028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 39.578516][ T542] RAX: ffffffffffffffda RBX: 00007f9f9b3d6080 RCX: 00007f9f9b19a079 [ 39.586899][ T542] RDX: 0000200000000140 RSI: 000000008004587d RDI: 0000000000000005 [ 39.595306][ T542] RBP: 00007f9f9b22cbb4 R08: 0000000000000000 R09: 0000000000000000 [ 39.603289][ T542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.611377][ T542] R13: 0000000000000000 R14: 00007f9f9b3d6080 R15: 00007ffc28d352c8 [ 39.619338][ T542] [ 39.622353][ T542] Modules linked in: [ 39.626269][ T542] CR2: 0000000000000028 [ 39.630409][ T542] ---[ end trace 0000000000000000 ]--- [ 39.635844][ T542] RIP: 0010:kthread_stop+0x40/0x3f0 [ 39.641038][ T542] Code: 00 fc ff df e8 91 47 27 00 0f 1f 44 00 00 e8 87 47 27 00 4c 8d 73 28 4c 89 f7 be 04 00 00 00 e8 56 e6 6c 00 41 bf 01 00 00 00 44 0f c1 7b 28 31 ff 44 89 fe e8 80 4b 27 00 45 85 ff 0f 84 3e [ 39.660626][ T542] RSP: 0018:ffffc90000eb7838 EFLAGS: 00010246 [ 39.666815][ T542] RAX: ffff88810f779400 RBX: 0000000000000000 RCX: ffff88810f779440 [ 39.674953][ T542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 39.682908][ T542] RBP: ffffc90000eb7860 R08: ffffffff87b777e7 R09: 1ffffffff0f6eefc [ 39.691125][ T542] R10: dffffc0000000000 R11: fffffbfff0f6eefd R12: 1ffff1102402b947 [ 39.699088][ T542] R13: dffffc0000000000 R14: 0000000000000028 R15: 0000000000000001 [ 39.707056][ T542] FS: 00007f9f9c0606c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 39.715978][ T542] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.722547][ T542] CR2: 0000000000000028 CR3: 0000000121e61000 CR4: 00000000003506b0 [ 39.730522][ T542] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.738491][ T542] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.746458][ T542] Kernel panic - not syncing: Fatal exception [ 39.752783][ T542] Kernel Offset: disabled [ 39.757190][ T542] Rebooting in 86400 seconds..