Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts. 2026/10/10 01:23:28 parsed 1 programs 2026/10/10 01:23:28 serving rpc on tcp://33803 [ 30.348760][ T28] audit: type=1400 audit(1791595408.235:64): avc: denied { node_bind } for pid=295 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 30.369759][ T28] audit: type=1400 audit(1791595408.235:65): avc: denied { module_request } for pid=295 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 31.187107][ T28] audit: type=1400 audit(1791595409.075:66): avc: denied { mounton } for pid=301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.188120][ T301] cgroup: Unknown subsys name 'net' [ 31.209891][ T28] audit: type=1400 audit(1791595409.075:67): avc: denied { mount } for pid=301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.237284][ T28] audit: type=1400 audit(1791595409.105:68): avc: denied { unmount } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.237464][ T301] cgroup: Unknown subsys name 'devices' [ 31.382929][ T301] cgroup: Unknown subsys name 'hugetlb' [ 31.388563][ T301] cgroup: Unknown subsys name 'rlimit' [ 31.497880][ T28] audit: type=1400 audit(1791595409.385:69): avc: denied { setattr } for pid=301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.521063][ T28] audit: type=1400 audit(1791595409.385:70): avc: denied { create } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.541406][ T28] audit: type=1400 audit(1791595409.385:71): avc: denied { write } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.561787][ T28] audit: type=1400 audit(1791595409.385:72): avc: denied { read } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 31.582022][ T28] audit: type=1400 audit(1791595409.385:73): avc: denied { mounton } for pid=301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.590901][ T306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.660075][ T301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.461758][ T314] request_module fs-gadgetfs succeeded, but still no fs? [ 32.537434][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.561238][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.571962][ T313] device bridge_slave_0 entered promiscuous mode [ 32.593768][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.600829][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.621830][ T313] device bridge_slave_1 entered promiscuous mode [ 33.001378][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.008466][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.015795][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.022854][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.084494][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.091835][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.099795][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.108496][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.125126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.133457][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.140531][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.148277][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.156575][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.163664][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.173461][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.196221][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.213879][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.252814][ T313] device veth0_vlan entered promiscuous mode [ 33.261332][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.269467][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.277542][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 2026/10/10 01:23:31 executed programs: 0 [ 33.299180][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.309553][ T313] device veth1_macvtap entered promiscuous mode [ 33.325165][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.335414][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.590445][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.598642][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.606266][ T372] device bridge_slave_0 entered promiscuous mode [ 33.614936][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.622144][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.629443][ T372] device bridge_slave_1 entered promiscuous mode [ 33.655045][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.662163][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.669511][ T371] device bridge_slave_0 entered promiscuous mode [ 33.679632][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.687781][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.695469][ T371] device bridge_slave_1 entered promiscuous mode [ 33.749330][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.756554][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.764829][ T374] device bridge_slave_0 entered promiscuous mode [ 33.797126][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.804211][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.811790][ T374] device bridge_slave_1 entered promiscuous mode [ 33.822676][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.829732][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.837203][ T376] device bridge_slave_0 entered promiscuous mode [ 33.848348][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.855664][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.863158][ T376] device bridge_slave_1 entered promiscuous mode [ 33.931763][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.938918][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.946558][ T377] device bridge_slave_0 entered promiscuous mode [ 33.953905][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.960956][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.968605][ T377] device bridge_slave_1 entered promiscuous mode [ 34.061378][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.068465][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.075823][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.083027][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.132298][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.139458][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.147802][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.154873][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.177009][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.184095][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.191407][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.198437][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.207194][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.214268][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.221569][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.228640][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.265953][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.273049][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.280405][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.287457][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.301817][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.309118][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.316358][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.325459][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.332932][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.340152][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.347475][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.354865][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.362194][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.369587][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.377108][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.411987][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.419774][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.427531][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.436136][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.443303][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.450952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.459174][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.466290][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.497467][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.507751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.516286][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.525152][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.532212][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.539843][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.548463][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.556657][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.563802][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.572333][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.580450][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.587573][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.595039][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.603580][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.610616][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.618094][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.626505][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.634776][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.641817][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.658557][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.666973][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.675917][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.682970][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.691316][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.699407][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.707836][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.716018][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.727913][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.763741][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.772565][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.780111][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.788014][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.796931][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.805332][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.812428][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.819805][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.828303][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.836937][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.844055][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.851717][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.859728][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.867907][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.875962][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.884113][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.902826][ T377] device veth0_vlan entered promiscuous mode [ 34.916636][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.924665][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.933006][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.941645][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.950010][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.958652][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.967149][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.974840][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.993061][ T371] device veth0_vlan entered promiscuous mode [ 35.007097][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.016952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.025386][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.033607][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.049777][ T372] device veth0_vlan entered promiscuous mode [ 35.061540][ T376] device veth0_vlan entered promiscuous mode [ 35.069744][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.077290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.085410][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.093775][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.101905][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.109852][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.117531][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.125076][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.132647][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.144833][ T377] device veth1_macvtap entered promiscuous mode [ 35.155756][ T372] device veth1_macvtap entered promiscuous mode [ 35.165930][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.174437][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.183089][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.194388][ T43] device bridge_slave_1 left promiscuous mode [ 35.200538][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.208062][ T43] device bridge_slave_0 left promiscuous mode [ 35.214336][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.222465][ T43] device veth1_macvtap left promiscuous mode [ 35.228576][ T43] device veth0_vlan left promiscuous mode [ 35.337174][ T376] device veth1_macvtap entered promiscuous mode [ 35.346123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.354586][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.363524][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.371508][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.378916][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.387414][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.395999][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.404330][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.412851][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.424532][ T371] device veth1_macvtap entered promiscuous mode [ 35.435299][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.443694][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.452035][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.459568][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.468004][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.476589][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.485064][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.494036][ T374] device veth0_vlan entered promiscuous mode [ 35.505429][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.513771][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.522248][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.530419][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.555803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.565101][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.573765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.583509][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.594864][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.603161][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.635330][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 35.635354][ T28] audit: type=1400 audit(1791595413.525:102): avc: denied { mount } for pid=398 comm="syz.0.17" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 35.652664][ T374] device veth1_macvtap entered promiscuous mode [ 35.682854][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.694249][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.703177][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.711638][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.719880][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.884947][ T410] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.892073][ T410] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.899426][ T410] device bridge_slave_0 entered promiscuous mode [ 50.908578][ T410] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.915679][ T410] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.923038][ T410] device bridge_slave_1 entered promiscuous mode [ 50.968759][ T414] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.975886][ T414] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.983366][ T414] device bridge_slave_0 entered promiscuous mode [ 51.002841][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.009992][ T411] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.017616][ T411] device bridge_slave_0 entered promiscuous mode [ 51.027659][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.034935][ T411] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.042343][ T411] device bridge_slave_1 entered promiscuous mode [ 51.048939][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.056046][ T414] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.063468][ T414] device bridge_slave_1 entered promiscuous mode [ 51.117541][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.124842][ T416] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.132333][ T416] device bridge_slave_0 entered promiscuous mode [ 51.160805][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.168050][ T416] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.175475][ T416] device bridge_slave_1 entered promiscuous mode [ 51.272953][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.280028][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.287485][ T415] device bridge_slave_0 entered promiscuous mode [ 51.294653][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.301742][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.309138][ T415] device bridge_slave_1 entered promiscuous mode [ 51.339266][ T28] audit: type=1400 audit(1791595429.225:103): avc: denied { create } for pid=414 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.345195][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.366878][ T414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.374184][ T414] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.381329][ T414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.388651][ T28] audit: type=1400 audit(1791595429.225:105): avc: denied { write } for pid=414 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.421324][ T28] audit: type=1400 audit(1791595429.225:106): avc: denied { read } for pid=414 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.427169][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.448679][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.451036][ T28] audit: type=1400 audit(1791595429.225:104): avc: denied { create } for pid=411 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.455972][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.483491][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.547205][ T410] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.554297][ T410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.561594][ T410] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.568617][ T410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.581256][ T400] ------------[ cut here ]------------ [ 51.587332][ T400] kobject: '(null)' (ffff88812a3a4550): is not initialized, yet kobject_put() is being called. [ 51.592068][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.598685][ T400] WARNING: CPU: 1 PID: 400 at lib/kobject.c:728 kobject_put+0x8a/0x280 [ 51.604754][ T416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.604842][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.604856][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.634819][ T400] Modules linked in: [ 51.638742][ T400] CPU: 1 PID: 400 Comm: syz.6.20 Not tainted syzkaller #0 [ 51.645907][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 51.646915][ T416] device veth0_vlan entered promiscuous mode [ 51.656121][ T400] RIP: 0010:kobject_put+0x8a/0x280 [ 51.667220][ T400] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 88 f2 c8 fc 48 8b 33 48 c7 c7 e0 10 0b 86 48 89 da e8 e6 e8 53 fc <0f> 0b eb 0f e8 9d 65 83 fc e9 8f 01 00 00 e8 93 65 83 fc 4c 8d 7b [ 51.686866][ T400] RSP: 0018:ffffc90000ae7538 EFLAGS: 00010246 [ 51.691855][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.692998][ T400] RAX: 5d1c27bdfc050c00 RBX: ffff88812a3a4550 RCX: ffff8881177e0000 [ 51.708168][ T400] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 51.716173][ T400] RBP: ffffc90000ae7560 R08: 0000000000000003 R09: 0000000000000004 [ 51.724228][ T400] R10: dffffc0000000000 R11: fffff5200015cdf8 R12: 00000000fffffff4 [ 51.732291][ T400] R13: ffff88812a3a458c R14: 1ffff110254748b1 R15: 0000000000000000 [ 51.740271][ T400] FS: 00007ff3cc90d6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 51.749243][ T400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.755871][ T400] CR2: 00007fff4f701ef0 CR3: 0000000110263000 CR4: 00000000003506a0 [ 51.763877][ T400] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.771932][ T400] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.779938][ T400] Call Trace: [ 51.783273][ T400] [ 51.786225][ T400] put_device+0x1f/0x30 [ 51.790404][ T400] __scsi_remove_device+0xc0/0x3c0 [ 51.795593][ T400] scsi_alloc_sdev+0x8e2/0xac0 [ 51.800382][ T400] scsi_probe_and_add_lun+0x18f/0x3ce0 [ 51.805894][ T400] ? trace_rpm_return_int_rcuidle+0x21/0x190 [ 51.812093][ T400] ? rpm_resume+0xb94/0x1610 [ 51.816771][ T400] ? __cfi_transport_setup_classdev+0x10/0x10 [ 51.822925][ T400] ? scsi_alloc_target+0xbe0/0xbe0 [ 51.828101][ T400] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 51.833615][ T400] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 51.839539][ T400] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 51.845420][ T400] ? __pm_runtime_resume+0x76/0x90 [ 51.850556][ T400] __scsi_scan_target+0x1ea/0xc20 [ 51.855620][ T400] ? scsi_scan_target+0x250/0x250 [ 51.860683][ T400] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 51.866536][ T400] ? __pm_runtime_resume+0x76/0x90 [ 51.871812][ T400] scsi_scan_host_selected+0x34e/0x600 [ 51.877267][ T400] store_scan+0x4aa/0x540 [ 51.881697][ T400] ? __cfi_store_scan+0x10/0x10 [ 51.886553][ T400] ? _copy_from_iter+0x1ff/0xfe0 [ 51.891612][ T400] ? __kasan_check_write+0x14/0x20 [ 51.896733][ T400] ? mutex_lock+0x93/0x1b0 [ 51.901170][ T400] ? __cfi_store_scan+0x10/0x10 [ 51.906027][ T400] dev_attr_store+0x6c/0x90 [ 51.910526][ T400] ? __cfi_dev_attr_store+0x10/0x10 [ 51.915753][ T400] sysfs_kf_write+0x137/0x150 [ 51.920447][ T400] ? __cfi_sysfs_kf_write+0x10/0x10 [ 51.925875][ T400] kernfs_fop_write_iter+0x307/0x470 [ 51.931199][ T400] vfs_write+0x5ef/0xd00 [ 51.935433][ T400] ? __cfi_vfs_write+0x10/0x10 [ 51.940181][ T400] ? __cfi_mutex_lock+0x10/0x10 [ 51.945097][ T400] ? __fdget_pos+0x2cd/0x380 [ 51.949698][ T400] ? ksys_write+0x70/0x260 [ 51.954131][ T400] ksys_write+0x14a/0x260 [ 51.958507][ T400] ? __cfi_ksys_write+0x10/0x10 [ 51.963382][ T400] ? fpregs_restore_userregs+0x128/0x260 [ 51.969024][ T400] __x64_sys_write+0x7b/0x90 [ 51.973644][ T400] x64_sys_call+0x27b/0x9a0 [ 51.978308][ T400] do_syscall_64+0x4c/0xa0 [ 51.982788][ T400] ? clear_bhb_loop+0x30/0x80 [ 51.987513][ T400] ? clear_bhb_loop+0x30/0x80 [ 51.992271][ T400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 51.998181][ T400] RIP: 0033:0x7ff3cb99e1d9 [ 52.002629][ T400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.022294][ T400] RSP: 002b:00007ff3cc90d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.030697][ T400] RAX: ffffffffffffffda RBX: 00007ff3cbc25fa0 RCX: 00007ff3cb99e1d9 [ 52.038774][ T400] RDX: 0000000000000005 RSI: 0000200000001400 RDI: 0000000000000003 [ 52.046770][ T400] RBP: 00007ff3cba35888 R08: 0000000000000000 R09: 0000000000000000 [ 52.054758][ T400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.062796][ T400] R13: 00007ff3cbc26038 R14: 00007ff3cbc25fa0 R15: 00007ffdbbae89d8 [ 52.070776][ T400] [ 52.073823][ T400] ---[ end trace 0000000000000000 ]--- [ 52.079345][ T400] ------------[ cut here ]------------ [ 52.084895][ T400] refcount_t: underflow; use-after-free. [ 52.090726][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.090796][ T400] WARNING: CPU: 0 PID: 400 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 52.107188][ T400] Modules linked in: [ 52.111184][ T400] CPU: 0 PID: 400 Comm: syz.6.20 Tainted: G W syzkaller #0 [ 52.119776][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 52.129927][ T400] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 52.136195][ T400] Code: 05 01 48 c7 c7 80 12 ca 85 e8 7c bd d8 fe 0f 0b eb c3 e8 33 3a 08 ff c6 05 25 73 26 05 01 48 c7 c7 e0 12 ca 85 e8 60 bd d8 fe <0f> 0b eb a7 e8 17 3a 08 ff c6 05 06 73 26 05 01 48 c7 c7 20 12 ca [ 52.155965][ T400] RSP: 0018:ffffc90000ae7518 EFLAGS: 00010246 [ 52.162138][ T400] RAX: 5d1c27bdfc050c00 RBX: 0000000000000003 RCX: ffff8881177e0000 [ 52.170117][ T400] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 52.178171][ T400] RBP: ffffc90000ae7528 R08: ffff8881f6e2759b R09: 1ffff1103edc4eb3 [ 52.186235][ T400] R10: dffffc0000000000 R11: ffffed103edc4eb4 R12: 0000000000000000 [ 52.194301][ T400] R13: ffff88812a3a458c R14: 0000000000000003 R15: ffff88812a3a4588 [ 52.202359][ T400] FS: 00007ff3cc90d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 52.211412][ T400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.218164][ T400] CR2: 00007fe37d9ee300 CR3: 0000000110263000 CR4: 00000000003506b0 [ 52.226239][ T400] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.234301][ T400] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.242360][ T400] Call Trace: [ 52.245629][ T400] [ 52.248546][ T400] kobject_put+0x244/0x280 [ 52.253047][ T400] put_device+0x1f/0x30 [ 52.257229][ T400] __scsi_remove_device+0xc0/0x3c0 [ 52.262444][ T400] scsi_alloc_sdev+0x8e2/0xac0 [ 52.267226][ T400] scsi_probe_and_add_lun+0x18f/0x3ce0 [ 52.272779][ T400] ? trace_rpm_return_int_rcuidle+0x21/0x190 [ 52.278779][ T400] ? rpm_resume+0xb94/0x1610 [ 52.283461][ T400] ? __cfi_transport_setup_classdev+0x10/0x10 [ 52.289542][ T400] ? scsi_alloc_target+0xbe0/0xbe0 [ 52.294769][ T400] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 52.300251][ T400] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 52.306441][ T400] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 52.312366][ T400] ? __pm_runtime_resume+0x76/0x90 [ 52.317505][ T400] __scsi_scan_target+0x1ea/0xc20 [ 52.322650][ T400] ? scsi_scan_target+0x250/0x250 [ 52.327806][ T400] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 52.333733][ T400] ? __pm_runtime_resume+0x76/0x90 [ 52.338859][ T400] scsi_scan_host_selected+0x34e/0x600 [ 52.344435][ T400] store_scan+0x4aa/0x540 [ 52.348768][ T400] ? __cfi_store_scan+0x10/0x10 [ 52.353713][ T400] ? _copy_from_iter+0x1ff/0xfe0 [ 52.358687][ T400] ? __kasan_check_write+0x14/0x20 [ 52.363905][ T400] ? mutex_lock+0x93/0x1b0 [ 52.368347][ T400] ? __cfi_store_scan+0x10/0x10 [ 52.373317][ T400] dev_attr_store+0x6c/0x90 [ 52.377844][ T400] ? __cfi_dev_attr_store+0x10/0x10 [ 52.383184][ T400] sysfs_kf_write+0x137/0x150 [ 52.387861][ T400] ? __cfi_sysfs_kf_write+0x10/0x10 [ 52.393166][ T400] kernfs_fop_write_iter+0x307/0x470 [ 52.398477][ T400] vfs_write+0x5ef/0xd00 [ 52.402824][ T400] ? __cfi_vfs_write+0x10/0x10 [ 52.407594][ T400] ? __cfi_mutex_lock+0x10/0x10 [ 52.412550][ T400] ? __fdget_pos+0x2cd/0x380 [ 52.417159][ T400] ? ksys_write+0x70/0x260 [ 52.421678][ T400] ksys_write+0x14a/0x260 [ 52.426008][ T400] ? __cfi_ksys_write+0x10/0x10 [ 52.430851][ T400] ? fpregs_restore_userregs+0x128/0x260 [ 52.436575][ T400] __x64_sys_write+0x7b/0x90 [ 52.441274][ T400] x64_sys_call+0x27b/0x9a0 [ 52.445778][ T400] do_syscall_64+0x4c/0xa0 [ 52.450195][ T400] ? clear_bhb_loop+0x30/0x80 [ 52.454960][ T400] ? clear_bhb_loop+0x30/0x80 [ 52.459646][ T400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 52.465662][ T400] RIP: 0033:0x7ff3cb99e1d9 [ 52.470081][ T400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.490212][ T400] RSP: 002b:00007ff3cc90d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.498741][ T400] RAX: ffffffffffffffda RBX: 00007ff3cbc25fa0 RCX: 00007ff3cb99e1d9 [ 52.506796][ T400] RDX: 0000000000000005 RSI: 0000200000001400 RDI: 0000000000000003 [ 52.514870][ T400] RBP: 00007ff3cba35888 R08: 0000000000000000 R09: 0000000000000000 [ 52.522947][ T400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.531640][ T400] R13: 00007ff3cbc26038 R14: 00007ff3cbc25fa0 R15: 00007ffdbbae89d8 [ 52.539608][ T400] [ 52.542729][ T400] ---[ end trace 0000000000000000 ]--- [ 52.548322][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.555782][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.563659][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.570885][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.579396][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.581157][ T400] ------------[ cut here ]------------ [ 52.591933][ T400] kobject: '(null)' (ffff88812a3a41d8): is not initialized, yet kobject_put() is being called. [ 52.602381][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.602478][ T400] WARNING: CPU: 0 PID: 400 at lib/kobject.c:728 kobject_put+0x8a/0x280 [ 52.609624][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.617674][ T400] Modules linked in: [ 52.617686][ T400] CPU: 0 PID: 400 Comm: syz.6.20 Tainted: G W syzkaller #0 [ 52.625856][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.628858][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 52.638000][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.645479][ T400] RIP: 0010:kobject_put+0x8a/0x280 [ 52.668666][ T400] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 88 f2 c8 fc 48 8b 33 48 c7 c7 e0 10 0b 86 48 89 da e8 e6 e8 53 fc <0f> 0b eb 0f e8 9d 65 83 fc e9 8f 01 00 00 e8 93 65 83 fc 4c 8d 7b [ 52.688455][ T400] RSP: 0018:ffffc90000ae7538 EFLAGS: 00010246 [ 52.694604][ T400] RAX: 5d1c27bdfc050c00 RBX: ffff88812a3a41d8 RCX: ffff8881177e0000 [ 52.702636][ T400] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 52.710616][ T400] RBP: ffffc90000ae7560 R08: ffffc90000ae7127 R09: 1ffff9200015ce24 [ 52.718606][ T400] R10: dffffc0000000000 R11: fffff5200015ce25 R12: ffffffff874c86e8 [ 52.726603][ T400] R13: ffff88812a3a4214 R14: 1ffff11025474842 R15: 0000000000000000 [ 52.734914][ T400] FS: 00007ff3cc90d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 52.743895][ T400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.750505][ T400] CR2: 00007fe37d9ee300 CR3: 0000000110263000 CR4: 00000000003506b0 [ 52.758550][ T400] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.766733][ T400] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.774771][ T400] Call Trace: [ 52.778062][ T400] [ 52.780986][ T400] put_device+0x1f/0x30 [ 52.785215][ T400] __scsi_remove_device+0x33d/0x3c0 [ 52.790407][ T400] scsi_alloc_sdev+0x8e2/0xac0 [ 52.795201][ T400] scsi_probe_and_add_lun+0x18f/0x3ce0 [ 52.800673][ T400] ? trace_rpm_return_int_rcuidle+0x21/0x190 [ 52.806679][ T400] ? rpm_resume+0xb94/0x1610 [ 52.811316][ T400] ? __cfi_transport_setup_classdev+0x10/0x10 [ 52.817391][ T400] ? scsi_alloc_target+0xbe0/0xbe0 [ 52.822531][ T400] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 52.828040][ T400] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 52.833954][ T400] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 52.839845][ T400] ? __pm_runtime_resume+0x76/0x90 [ 52.845027][ T400] __scsi_scan_target+0x1ea/0xc20 [ 52.850081][ T400] ? scsi_scan_target+0x250/0x250 [ 52.855142][ T400] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 52.860967][ T400] ? __pm_runtime_resume+0x76/0x90 [ 52.866238][ T400] scsi_scan_host_selected+0x34e/0x600 [ 52.871742][ T400] store_scan+0x4aa/0x540 [ 52.876249][ T400] ? __cfi_store_scan+0x10/0x10 [ 52.881120][ T400] ? _copy_from_iter+0x1ff/0xfe0 [ 52.886073][ T400] ? __kasan_check_write+0x14/0x20 [ 52.891208][ T400] ? mutex_lock+0x93/0x1b0 [ 52.895634][ T400] ? __cfi_store_scan+0x10/0x10 [ 52.900472][ T400] dev_attr_store+0x6c/0x90 [ 52.904996][ T400] ? __cfi_dev_attr_store+0x10/0x10 [ 52.910207][ T400] sysfs_kf_write+0x137/0x150 [ 52.914909][ T400] ? __cfi_sysfs_kf_write+0x10/0x10 [ 52.920119][ T400] kernfs_fop_write_iter+0x307/0x470 [ 52.925423][ T400] vfs_write+0x5ef/0xd00 [ 52.929676][ T400] ? __cfi_vfs_write+0x10/0x10 [ 52.934535][ T400] ? __cfi_mutex_lock+0x10/0x10 [ 52.939415][ T400] ? __fdget_pos+0x2cd/0x380 [ 52.944075][ T400] ? ksys_write+0x70/0x260 [ 52.948501][ T400] ksys_write+0x14a/0x260 [ 52.952864][ T400] ? __cfi_ksys_write+0x10/0x10 [ 52.957727][ T400] ? fpregs_restore_userregs+0x128/0x260 [ 52.963392][ T400] __x64_sys_write+0x7b/0x90 [ 52.968000][ T400] x64_sys_call+0x27b/0x9a0 [ 52.972531][ T400] do_syscall_64+0x4c/0xa0 [ 52.976963][ T400] ? clear_bhb_loop+0x30/0x80 [ 52.981665][ T400] ? clear_bhb_loop+0x30/0x80 [ 52.986351][ T400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 52.992264][ T400] RIP: 0033:0x7ff3cb99e1d9 [ 52.996688][ T400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.016344][ T400] RSP: 002b:00007ff3cc90d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 53.024830][ T400] RAX: ffffffffffffffda RBX: 00007ff3cbc25fa0 RCX: 00007ff3cb99e1d9 [ 53.032868][ T400] RDX: 0000000000000005 RSI: 0000200000001400 RDI: 0000000000000003 [ 53.040855][ T400] RBP: 00007ff3cba35888 R08: 0000000000000000 R09: 0000000000000000 [ 53.048871][ T400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.056876][ T400] R13: 00007ff3cbc26038 R14: 00007ff3cbc25fa0 R15: 00007ffdbbae89d8 [ 53.064944][ T400] [ 53.067984][ T400] ---[ end trace 0000000000000000 ]--- [ 53.073937][ T400] scsi_alloc_sdev: Allocation failure during SCSI scanning, some SCSI devices might not be configured [ 53.085024][ T400] ------------[ cut here ]------------ [ 53.090480][ T400] kernel BUG at drivers/scsi/scsi_scan.c:595! [ 53.096833][ T400] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 53.102936][ T400] CPU: 0 PID: 400 Comm: syz.6.20 Tainted: G W syzkaller #0 [ 53.111535][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 53.121616][ T400] RIP: 0010:scsi_target_reap+0x169/0x170 [ 53.127255][ T400] Code: bc fe e9 f4 fe ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 4b ff ff ff 4c 89 ef e8 c1 b6 bc fe e9 3e ff ff ff e8 17 2a 77 fe <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 f5 24 0c [ 53.146858][ T400] RSP: 0018:ffffc90000ae7808 EFLAGS: 00010293 [ 53.152928][ T400] RAX: ffffffff82fa4429 RBX: ffff888111c5a000 RCX: ffff8881177e0000 [ 53.160894][ T400] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 53.168855][ T400] RBP: ffffc90000ae7830 R08: 0000000000000003 R09: 0000000000000004 [ 53.177251][ T400] R10: dffffc0000000000 R11: fffff5200015cee8 R12: ffff888111c5a000 [ 53.185301][ T400] R13: ffff888111c5a3c4 R14: 1ffff1102238b478 R15: 0000000000000005 [ 53.193263][ T400] FS: 00007ff3cc90d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 53.202193][ T400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.208774][ T400] CR2: 00007fe37d9ee300 CR3: 0000000110263000 CR4: 00000000003506b0 [ 53.216738][ T400] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.224700][ T400] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.232673][ T400] Call Trace: [ 53.235942][ T400] [ 53.238873][ T400] __scsi_scan_target+0x5c0/0xc20 [ 53.243905][ T400] ? scsi_scan_target+0x250/0x250 [ 53.248923][ T400] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 53.254733][ T400] ? __pm_runtime_resume+0x76/0x90 [ 53.259844][ T400] scsi_scan_host_selected+0x34e/0x600 [ 53.265314][ T400] store_scan+0x4aa/0x540 [ 53.269640][ T400] ? __cfi_store_scan+0x10/0x10 [ 53.274491][ T400] ? _copy_from_iter+0x1ff/0xfe0 [ 53.279431][ T400] ? __kasan_check_write+0x14/0x20 [ 53.284548][ T400] ? mutex_lock+0x93/0x1b0 [ 53.288963][ T400] ? __cfi_store_scan+0x10/0x10 [ 53.293829][ T400] dev_attr_store+0x6c/0x90 [ 53.298510][ T400] ? __cfi_dev_attr_store+0x10/0x10 [ 53.303712][ T400] sysfs_kf_write+0x137/0x150 [ 53.308390][ T400] ? __cfi_sysfs_kf_write+0x10/0x10 [ 53.313677][ T400] kernfs_fop_write_iter+0x307/0x470 [ 53.318985][ T400] vfs_write+0x5ef/0xd00 [ 53.323228][ T400] ? __cfi_vfs_write+0x10/0x10 [ 53.327993][ T400] ? __cfi_mutex_lock+0x10/0x10 [ 53.332848][ T400] ? __fdget_pos+0x2cd/0x380 [ 53.337436][ T400] ? ksys_write+0x70/0x260 [ 53.341855][ T400] ksys_write+0x14a/0x260 [ 53.346182][ T400] ? __cfi_ksys_write+0x10/0x10 [ 53.351033][ T400] ? fpregs_restore_userregs+0x128/0x260 [ 53.356676][ T400] __x64_sys_write+0x7b/0x90 [ 53.361264][ T400] x64_sys_call+0x27b/0x9a0 [ 53.365768][ T400] do_syscall_64+0x4c/0xa0 [ 53.370195][ T400] ? clear_bhb_loop+0x30/0x80 [ 53.374876][ T400] ? clear_bhb_loop+0x30/0x80 [ 53.379553][ T400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.385443][ T400] RIP: 0033:0x7ff3cb99e1d9 [ 53.389868][ T400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.409479][ T400] RSP: 002b:00007ff3cc90d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 53.417906][ T400] RAX: ffffffffffffffda RBX: 00007ff3cbc25fa0 RCX: 00007ff3cb99e1d9 [ 53.425883][ T400] RDX: 0000000000000005 RSI: 0000200000001400 RDI: 0000000000000003 [ 53.433862][ T400] RBP: 00007ff3cba35888 R08: 0000000000000000 R09: 0000000000000000 [ 53.442457][ T400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.450434][ T400] R13: 00007ff3cbc26038 R14: 00007ff3cbc25fa0 R15: 00007ffdbbae89d8 [ 53.458409][ T400] [ 53.461430][ T400] Modules linked in: [ 53.465879][ T400] ---[ end trace 0000000000000000 ]--- [ 53.471430][ T400] RIP: 0010:scsi_target_reap+0x169/0x170 [ 53.477098][ T400] Code: bc fe e9 f4 fe ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 4b ff ff ff 4c 89 ef e8 c1 b6 bc fe e9 3e ff ff ff e8 17 2a 77 fe <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 f5 24 0c [ 53.496782][ T400] RSP: 0018:ffffc90000ae7808 EFLAGS: 00010293 [ 53.503095][ T400] RAX: ffffffff82fa4429 RBX: ffff888111c5a000 RCX: ffff8881177e0000 [ 53.511151][ T400] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 53.519149][ T400] RBP: ffffc90000ae7830 R08: 0000000000000003 R09: 0000000000000004 [ 53.527184][ T400] R10: dffffc0000000000 R11: fffff5200015cee8 R12: ffff888111c5a000 [ 53.535198][ T400] R13: ffff888111c5a3c4 R14: 1ffff1102238b478 R15: 0000000000000005 [ 53.535543][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.543216][ T400] FS: 00007ff3cc90d6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 53.551403][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.559874][ T400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.568235][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.574295][ T400] CR2: 00007fff4f701ef0 CR3: 0000000110263000 CR4: 00000000003506a0 [ 53.584022][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.590571][ T400] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.598736][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.606227][ T400] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.613744][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.621310][ T400] Kernel panic - not syncing: Fatal exception [ 53.621431][ T400] Kernel Offset: disabled [ 53.638980][ T400] Rebooting in 86400 seconds..