Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts.
2026/02/23 08:19:20 parsed 1 programs
[ 24.048121][ T28] audit: type=1400 audit(1771834760.984:64): avc: denied { node_bind } for pid=282 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 24.052134][ T28] audit: type=1400 audit(1771834760.984:65): avc: denied { module_request } for pid=282 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 24.810926][ T28] audit: type=1400 audit(1771834761.744:66): avc: denied { mounton } for pid=290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 24.811912][ T290] cgroup: Unknown subsys name 'net'
[ 24.833843][ T28] audit: type=1400 audit(1771834761.744:67): avc: denied { mount } for pid=290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 24.861985][ T28] audit: type=1400 audit(1771834761.774:68): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 24.862218][ T290] cgroup: Unknown subsys name 'devices'
[ 24.987765][ T290] cgroup: Unknown subsys name 'hugetlb'
[ 24.993473][ T290] cgroup: Unknown subsys name 'rlimit'
[ 25.130648][ T28] audit: type=1400 audit(1771834762.064:69): avc: denied { setattr } for pid=290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 25.150569][ T293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 25.153892][ T28] audit: type=1400 audit(1771834762.064:70): avc: denied { create } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 25.182915][ T28] audit: type=1400 audit(1771834762.064:71): avc: denied { write } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 25.203396][ T28] audit: type=1400 audit(1771834762.064:72): avc: denied { read } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 25.210778][ T290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 25.224222][ T28] audit: type=1400 audit(1771834762.064:73): avc: denied { mounton } for pid=290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 25.987823][ T295] request_module fs-gadgetfs succeeded, but still no fs?
[ 26.161563][ T307] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.169110][ T307] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.177083][ T307] device bridge_slave_0 entered promiscuous mode
[ 26.185170][ T307] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.192872][ T307] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.200373][ T307] device bridge_slave_1 entered promiscuous mode
[ 26.242573][ T307] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.249651][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 26.257201][ T307] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.264343][ T307] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 26.283570][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 26.291519][ T305] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.299686][ T305] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.308658][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 26.318033][ T305] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.325060][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 26.334685][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 26.343745][ T305] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.351015][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 26.363738][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 26.373409][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 26.388080][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 26.399020][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 26.407073][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 26.414450][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 26.422974][ T307] device veth0_vlan entered promiscuous mode
[ 26.432914][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 26.442795][ T307] device veth1_macvtap entered promiscuous mode
[ 26.452120][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 26.462027][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
2026/02/23 08:19:24 executed programs: 0
[ 27.207472][ T366] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.214699][ T366] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.222356][ T366] device bridge_slave_0 entered promiscuous mode
[ 27.229362][ T366] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.236845][ T366] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.244197][ T366] device bridge_slave_1 entered promiscuous mode
[ 27.289837][ T366] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.297043][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.304505][ T366] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.313624][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.336377][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 27.344095][ T302] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.352176][ T302] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.364202][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 27.372801][ T302] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.379850][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.388755][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 27.397040][ T302] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.404064][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.416728][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 27.425864][ T43] device bridge_slave_1 left promiscuous mode
[ 27.432004][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.439965][ T43] device bridge_slave_0 left promiscuous mode
[ 27.446486][ T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.454351][ T43] device veth1_macvtap left promiscuous mode
[ 27.460983][ T43] device veth0_vlan left promiscuous mode
[ 27.539546][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 27.553400][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 27.564622][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 27.572818][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 27.580815][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 27.589722][ T366] device veth0_vlan entered promiscuous mode
[ 27.599870][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 27.608996][ T366] device veth1_macvtap entered promiscuous mode
[ 27.618132][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 27.627977][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 27.655698][ T376] loop2: detected capacity change from 0 to 1024
[ 27.662432][ T376] =======================================================
[ 27.662432][ T376] WARNING: The mand mount option has been deprecated and
[ 27.662432][ T376] and is ignored by this kernel. Remove the mand
[ 27.662432][ T376] option from the mount to silence this warning.
[ 27.662432][ T376] =======================================================
[ 27.708488][ T376] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 27.721799][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 27.736972][ T380] loop2: detected capacity change from 0 to 1024
[ 27.758030][ T380] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 27.778663][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 27.794393][ T383] loop2: detected capacity change from 0 to 1024
[ 27.807072][ T383] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 27.821290][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 27.838105][ T386] loop2: detected capacity change from 0 to 1024
[ 27.857084][ T386] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 27.870920][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 27.886519][ T389] loop2: detected capacity change from 0 to 1024
[ 27.906956][ T389] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 27.920436][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 27.935986][ T392] loop2: detected capacity change from 0 to 1024
[ 27.946946][ T392] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 27.959768][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 27.974854][ T395] loop2: detected capacity change from 0 to 1024
[ 27.987379][ T395] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.003037][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 28.018600][ T398] loop2: detected capacity change from 0 to 1024
[ 28.047093][ T398] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.059825][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 28.076641][ T401] loop2: detected capacity change from 0 to 1024
[ 28.087145][ T401] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.104679][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 28.121454][ T404] loop2: detected capacity change from 0 to 1024
[ 28.137060][ T404] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.150740][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 28.183089][ T407] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.195772][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 28.228297][ T410] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.240260][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 28.267846][ T413] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.281282][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 28.316317][ T416] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.330383][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 28.356567][ T419] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.369285][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 28.396847][ T422] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.411037][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 28.438839][ T425] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.452367][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 28.486750][ T428] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.501446][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 28.527048][ T431] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.539821][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 28.567704][ T434] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.580751][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 28.607027][ T437] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.619933][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 28.647014][ T440] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.660010][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 28.686473][ T443] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.699957][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 28.726539][ T446] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.739606][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 28.768435][ T449] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.781182][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 28.807014][ T452] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.820250][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 28.856651][ T455] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.871451][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 28.906733][ T458] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.921477][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 28.947601][ T461] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.960917][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 28.986636][ T464] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 29.000535][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 29.027637][ T467] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 29.040530][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 29.066834][ T470] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
2026/02/23 08:19:29 executed programs: 168
[ 32.246131][ T28] kauditd_printk_skb: 34 callbacks suppressed
[ 32.246147][ T28] audit: type=1400 audit(1771834769.184:108): avc: denied { write } for pid=282 comm="syz-execprog" path="pipe:[14503]" dev="pipefs" ino=14503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 32.681666][ T920] set_capacity_and_notify: 168 callbacks suppressed
[ 32.681683][ T920] loop2: detected capacity change from 0 to 1024
[ 32.723414][ T923] loop2: detected capacity change from 0 to 1024
[ 32.749483][ T926] loop2: detected capacity change from 0 to 1024
[ 32.782817][ T929] loop2: detected capacity change from 0 to 1024
[ 32.813608][ T932] loop2: detected capacity change from 0 to 1024
[ 32.841638][ T935] loop2: detected capacity change from 0 to 1024
[ 32.870112][ T938] loop2: detected capacity change from 0 to 1024
[ 32.901993][ T941] loop2: detected capacity change from 0 to 1024
[ 32.931122][ T944] loop2: detected capacity change from 0 to 1024
[ 32.964315][ T947] loop2: detected capacity change from 0 to 1024
[ 33.386582][ T1001] EXT4-fs mount: 347 callbacks suppressed
[ 33.386599][ T1001] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 33.406139][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 33.427324][ T1004] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 33.440305][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 33.466757][ T1007] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 33.479484][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 33.506682][ T1010] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 33.519692][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 33.546672][ T1013] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 33.562767][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 33.588308][ T1016] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 33.601225][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 33.626746][ T1019] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 33.639225][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 33.666788][ T1022] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 33.679721][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 33.716600][ T1025] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 33.730048][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 33.766714][ T1028] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 33.779595][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 33.816861][ T1031] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 33.830743][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 33.866465][ T1034] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 33.880766][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 33.907191][ T1037] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 33.919128][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 33.948080][ T1040] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 33.960702][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 33.986697][ T1043] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 34.003770][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 34.037428][ T1046] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 34.050122][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 34.076683][ T1049] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 34.090955][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 34.116619][ T1052] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 34.130063][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 34.156682][ T1055] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 34.169494][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 34.196909][ T1058] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 34.210039][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 34.236995][ T1061] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 34.249562][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 34.276650][ T1064] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 34.289850][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 34.317513][ T1067] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 34.330258][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 34.356452][ T1070] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 34.372575][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 34.396728][ T1073] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 34.409707][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 34.436518][ T1076] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 34.449440][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 34.476532][ T1079] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 34.489381][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 34.516742][ T1082] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 34.531956][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 34.557274][ T1085] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 34.570323][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 34.596659][ T1088] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 34.610274][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 34.636620][ T1091] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 34.655167][ T366] EXT4-fs (loop2): unmounting filesystem.
[ 34.676768][ T1094] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 34.689546][ T366] EXT4-fs (loop2): unmounting filesystem.
2026/02/23 08:19:34 executed programs: 359
[ 37.696302][ T1489] set_capacity_and_notify: 177 callbacks suppressed
[ 37.696320][ T1489] loop2: detected capacity change from 0 to 1024
[ 37.735657][ T1492] loop2: detected capacity change from 0 to 1024
[ 37.760988][ T1495] loop2: detected capacity change from 0 to 1024
[ 37.789669][ T1498] loop2: detected capacity change from 0 to 1024
[ 37.821563][ T1501] loop2: detected capacity change from 0 to 1024
[ 37.853870][ T1504] loop2: detected capacity change from 0 to 1024
[ 37.880754][ T1507] loop2: detected capacity change from 0 to 1024
[ 37.911215][ T1510] loop2: detected capacity change from 0 to 1024
[ 37.952689][ T1513] loop2: detected capacity change from 0 to 1024
[ 37.981042][ T1516] loop2: detected capacity change from 0 to 1024
2026/02/23 08:19:39 executed programs: 575
[ 42.720388][ T2119] set_capacity_and_notify: 197 callbacks suppressed
[ 42.720401][ T2119] loop2: detected capacity change from 0 to 1024
[ 42.759609][ T2122] loop2: detected capacity change from 0 to 1024
[ 42.794592][ T2125] loop2: detected capacity change from 0 to 1024
[ 42.829726][ T2128] loop2: detected capacity change from 0 to 1024
[ 42.859722][ T2131] loop2: detected capacity change from 0 to 1024
[ 42.892099][ T2134] loop2: detected capacity change from 0 to 1024
[ 42.959612][ T2138] bridge0: port 1(bridge_slave_0) entered blocking state
[ 42.967057][ T2138] bridge0: port 1(bridge_slave_0) entered disabled state
[ 42.974819][ T2138] device bridge_slave_0 entered promiscuous mode
[ 42.984528][ T2138] bridge0: port 2(bridge_slave_1) entered blocking state
[ 42.992003][ T2138] bridge0: port 2(bridge_slave_1) entered disabled state
[ 42.999601][ T2138] device bridge_slave_1 entered promiscuous mode
[ 43.038236][ T2138] bridge0: port 2(bridge_slave_1) entered blocking state
[ 43.045280][ T2138] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 43.052600][ T2138] bridge0: port 1(bridge_slave_0) entered blocking state
[ 43.059653][ T2138] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 43.078913][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 43.086542][ T302] bridge0: port 1(bridge_slave_0) entered disabled state
[ 43.093756][ T302] bridge0: port 2(bridge_slave_1) entered disabled state
[ 43.102795][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 43.111415][ T302] bridge0: port 1(bridge_slave_0) entered blocking state
[ 43.118583][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 43.129045][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 43.137468][ T302] bridge0: port 2(bridge_slave_1) entered blocking state
[ 43.144566][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 43.159847][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 43.171388][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 43.185071][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 43.196581][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 43.204569][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 43.212408][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 43.220678][ T2138] device veth0_vlan entered promiscuous mode
[ 43.232804][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 43.241909][ T2138] device veth1_macvtap entered promiscuous mode
[ 43.251320][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 43.262509][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 43.290825][ T2148] loop2: detected capacity change from 0 to 1024
[ 43.332519][ T2151] loop2: detected capacity change from 0 to 1024
[ 43.364036][ T2154] loop2: detected capacity change from 0 to 1024
[ 43.400683][ T2157] loop2: detected capacity change from 0 to 1024
[ 43.426486][ T305] device bridge_slave_1 left promiscuous mode
[ 43.433016][ T305] bridge0: port 2(bridge_slave_1) entered disabled state
[ 43.441535][ T305] device bridge_slave_0 left promiscuous mode
[ 43.448891][ T305] bridge0: port 1(bridge_slave_0) entered disabled state
[ 43.457517][ T305] device veth1_macvtap left promiscuous mode
[ 43.466325][ T305] device veth0_vlan left promiscuous mode
[ 45.768221][ T2460] ==================================================================
[ 45.776341][ T2460] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x979/0x21d0
[ 45.784164][ T2460] Read of size 18446744073709551588 at addr ffff888129d93840 by task syz.2.721/2460
[ 45.793852][ T2460]
[ 45.796265][ T2460] CPU: 1 PID: 2460 Comm: syz.2.721 Not tainted syzkaller #0
[ 45.803984][ T2460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 45.814120][ T2460] Call Trace:
[ 45.817395][ T2460]
[ 45.820352][ T2460] __dump_stack+0x21/0x24
[ 45.824687][ T2460] dump_stack_lvl+0x110/0x170
[ 45.829366][ T2460] ? __cfi_dump_stack_lvl+0x8/0x8
[ 45.834396][ T2460] ? kasan_save_alloc_info+0x25/0x30
[ 45.839861][ T2460] ? ext4_xattr_block_set+0x9d5/0x3260
[ 45.845587][ T2460] ? ext4_xattr_set+0x242/0x320
[ 45.850439][ T2460] ? ext4_xattr_trusted_set+0x3c/0x50
[ 45.855816][ T2460] ? ext4_xattr_set_entry+0x979/0x21d0
[ 45.861365][ T2460] print_address_description+0x71/0x200
[ 45.866918][ T2460] print_report+0x4a/0x60
[ 45.871248][ T2460] kasan_report+0x122/0x150
[ 45.875758][ T2460] ? ext4_xattr_set_entry+0x979/0x21d0
[ 45.881218][ T2460] ? ext4_xattr_set_entry+0x979/0x21d0
[ 45.886680][ T2460] kasan_check_range+0x249/0x2a0
[ 45.891617][ T2460] ? ext4_xattr_set_entry+0x979/0x21d0
[ 45.897161][ T2460] memmove+0x2d/0x70
[ 45.901051][ T2460] ext4_xattr_set_entry+0x979/0x21d0
[ 45.906364][ T2460] ext4_xattr_block_set+0xad3/0x3260
[ 45.911654][ T2460] ? __kasan_check_write+0x14/0x20
[ 45.916763][ T2460] ? iput+0x620/0x670
[ 45.920922][ T2460] ? ext4_xattr_block_find+0x310/0x310
[ 45.926385][ T2460] ext4_xattr_set_handle+0x1338/0x1570
[ 45.931848][ T2460] ? __cfi_ext4_xattr_set_handle+0x10/0x10
[ 45.937656][ T2460] ? __kasan_check_read+0x11/0x20
[ 45.942768][ T2460] ? __ext4_journal_start_sb+0x2ed/0x4a0
[ 45.948590][ T2460] ext4_xattr_set+0x242/0x320
[ 45.953271][ T2460] ? __kasan_kmalloc+0x95/0xb0
[ 45.958040][ T2460] ? __kmalloc_node+0xb2/0x1e0
[ 45.962887][ T2460] ? __cfi_ext4_xattr_set+0x10/0x10
[ 45.968088][ T2460] ? selinux_inode_setxattr+0x5cf/0xbf0
[ 45.973809][ T2460] ext4_xattr_trusted_set+0x3c/0x50
[ 45.979183][ T2460] ? __cfi_ext4_xattr_trusted_set+0x10/0x10
[ 45.985077][ T2460] __vfs_setxattr+0x3f2/0x440
[ 45.989760][ T2460] __vfs_setxattr_noperm+0x12a/0x5e0
[ 45.995045][ T2460] __vfs_setxattr_locked+0x212/0x230
[ 46.000330][ T2460] vfs_setxattr+0x167/0x2e0
[ 46.004836][ T2460] ? __cfi_vfs_setxattr+0x10/0x10
[ 46.009860][ T2460] ? __kasan_check_write+0x14/0x20
[ 46.014968][ T2460] setxattr+0x346/0x360
[ 46.019126][ T2460] ? path_setxattr+0x290/0x290
[ 46.023901][ T2460] ? __mnt_want_write+0x1e6/0x260
[ 46.029316][ T2460] ? mnt_want_write+0x220/0x300
[ 46.034164][ T2460] path_setxattr+0x147/0x290
[ 46.038843][ T2460] ? simple_xattr_list_add+0x120/0x120
[ 46.044540][ T2460] __x64_sys_lsetxattr+0xc2/0xe0
[ 46.049597][ T2460] x64_sys_call+0x8b7/0x9a0
[ 46.054113][ T2460] do_syscall_64+0x4c/0xa0
[ 46.058542][ T2460] ? clear_bhb_loop+0x30/0x80
[ 46.063222][ T2460] ? clear_bhb_loop+0x30/0x80
[ 46.068069][ T2460] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 46.073973][ T2460] RIP: 0033:0x7f30ccf9c629
[ 46.078473][ T2460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 46.098423][ T2460] RSP: 002b:00007fff374a2f28 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[ 46.107021][ T2460] RAX: ffffffffffffffda RBX: 00007f30cd215fa0 RCX: 00007f30ccf9c629
[ 46.114997][ T2460] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0
[ 46.122987][ T2460] RBP: 00007f30cd032b39 R08: 0000000000000000 R09: 0000000000000000
[ 46.131058][ T2460] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000
[ 46.139033][ T2460] R13: 00007f30cd215fac R14: 00007f30cd215fa0 R15: 00007f30cd215fa0
[ 46.147105][ T2460]
[ 46.150137][ T2460]
[ 46.152506][ T2460] Allocated by task 2460:
[ 46.156838][ T2460] kasan_set_track+0x4b/0x70
[ 46.161437][ T2460] kasan_save_alloc_info+0x25/0x30
[ 46.166550][ T2460] __kasan_kmalloc+0x95/0xb0
[ 46.171222][ T2460] __kmalloc_node_track_caller+0xb1/0x1e0
[ 46.177120][ T2460] kmemdup+0x2b/0x60
[ 46.181036][ T2460] ext4_xattr_block_set+0x9d5/0x3260
[ 46.186329][ T2460] ext4_xattr_set_handle+0x1338/0x1570
[ 46.191792][ T2460] ext4_xattr_set+0x242/0x320
[ 46.196468][ T2460] ext4_xattr_trusted_set+0x3c/0x50
[ 46.201671][ T2460] __vfs_setxattr+0x3f2/0x440
[ 46.206442][ T2460] __vfs_setxattr_noperm+0x12a/0x5e0
[ 46.211755][ T2460] __vfs_setxattr_locked+0x212/0x230
[ 46.217180][ T2460] vfs_setxattr+0x167/0x2e0
[ 46.221709][ T2460] setxattr+0x346/0x360
[ 46.226003][ T2460] path_setxattr+0x147/0x290
[ 46.230695][ T2460] __x64_sys_lsetxattr+0xc2/0xe0
[ 46.235636][ T2460] x64_sys_call+0x8b7/0x9a0
[ 46.240159][ T2460] do_syscall_64+0x4c/0xa0
[ 46.244617][ T2460] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 46.250532][ T2460]
[ 46.252866][ T2460] The buggy address belongs to the object at ffff888129d93800
[ 46.252866][ T2460] which belongs to the cache kmalloc-1k of size 1024
[ 46.267006][ T2460] The buggy address is located 64 bytes inside of
[ 46.267006][ T2460] 1024-byte region [ffff888129d93800, ffff888129d93c00)
[ 46.280382][ T2460]
[ 46.282703][ T2460] The buggy address belongs to the physical page:
[ 46.289114][ T2460] page:ffffea0004a76400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x129d90
[ 46.299523][ T2460] head:ffffea0004a76400 order:3 compound_mapcount:0 compound_pincount:0
[ 46.307852][ T2460] flags: 0x4000000000010200(slab|head|zone=1)
[ 46.314035][ T2460] raw: 4000000000010200 ffffea000451b200 dead000000000003 ffff888100043080
[ 46.322813][ T2460] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 46.331496][ T2460] page dumped because: kasan: bad access detected
[ 46.339042][ T2460] page_owner tracks the page as allocated
[ 46.344762][ T2460] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 291, tgid 282 (syz-execprog), ts 43283515124, free_ts 43183815615
[ 46.367013][ T2460] post_alloc_hook+0x1f5/0x210
[ 46.371818][ T2460] prep_new_page+0x1c/0x110
[ 46.376320][ T2460] get_page_from_freelist+0x2d12/0x2d80
[ 46.381961][ T2460] __alloc_pages+0x1d9/0x480
[ 46.386548][ T2460] alloc_slab_page+0x6e/0xf0
[ 46.391141][ T2460] new_slab+0x98/0x3d0
[ 46.395210][ T2460] ___slab_alloc+0x6bd/0xb20
[ 46.399832][ T2460] __slab_alloc+0x5e/0xa0
[ 46.404161][ T2460] __kmem_cache_alloc_node+0x203/0x2c0
[ 46.409680][ T2460] __kmalloc_node_track_caller+0xa0/0x1e0
[ 46.415450][ T2460] __alloc_skb+0x236/0x4b0
[ 46.419880][ T2460] __tcp_send_ack+0x9b/0x690
[ 46.424469][ T2460] tcp_send_ack+0x3b/0x60
[ 46.428805][ T2460] __tcp_ack_snd_check+0x414/0x910
[ 46.434038][ T2460] tcp_rcv_established+0xa44/0x1a50
[ 46.439365][ T2460] tcp_v4_do_rcv+0x446/0xa10
[ 46.443962][ T2460] page last free stack trace:
[ 46.448635][ T2460] free_unref_page_prepare+0x742/0x750
[ 46.454184][ T2460] free_unref_page+0x95/0x540
[ 46.458972][ T2460] __free_pages+0x67/0x100
[ 46.463386][ T2460] __free_slab+0xca/0x1a0
[ 46.467729][ T2460] __unfreeze_partials+0x160/0x190
[ 46.472925][ T2460] put_cpu_partial+0xa9/0x100
[ 46.477691][ T2460] __slab_free+0x1c4/0x280
[ 46.482110][ T2460] ___cache_free+0xbf/0xd0
[ 46.486522][ T2460] qlist_free_all+0xc6/0x140
[ 46.491110][ T2460] kasan_quarantine_reduce+0x14a/0x170
[ 46.496562][ T2460] __kasan_slab_alloc+0x24/0x80
[ 46.501410][ T2460] slab_post_alloc_hook+0x4f/0x2d0
[ 46.506697][ T2460] __kmem_cache_alloc_node+0x192/0x2c0
[ 46.512157][ T2460] kmalloc_trace+0x29/0xb0
[ 46.516679][ T2460] ____ip_mc_inc_group+0x1ab/0x860
[ 46.521786][ T2460] ip_mc_up+0x112/0x1f0
[ 46.525933][ T2460]
[ 46.528249][ T2460] Memory state around the buggy address:
[ 46.533874][ T2460] ffff888129d93700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 46.542013][ T2460] ffff888129d93780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 46.550066][ T2460] >ffff888129d93800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 46.558200][ T2460] ^
[ 46.564342][ T2460] ffff888129d93880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 46.572392][ T2460] ffff888129d93900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 46.580529][ T2460] ==================================================================
[ 46.588961][ T2460] Disabling lock debugging due to kernel taint
[ 46.596290][ T28] audit: type=1400 audit(1771834783.524:109): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 46.621245][ T28] audit: type=1400 audit(1771834783.524:110): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 46.643026][ T28] audit: type=1400 audit(1771834783.524:111): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 46.665886][ T28] audit: type=1400 audit(1771834783.524:112): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 46.687365][ T28] audit: type=1400 audit(1771834783.534:113): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 46.708442][ T28] audit: type=1400 audit(1771834783.534:114): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 46.731997][ T28] audit: type=1400 audit(1771834783.534:115): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
2026/02/23 08:19:44 executed programs: 729
[ 47.741720][ T2590] set_capacity_and_notify: 142 callbacks suppressed
[ 47.741734][ T2590] loop2: detected capacity change from 0 to 1024
[ 47.782097][ T2593] loop2: detected capacity change from 0 to 1024
[ 47.809736][ T2596] loop2: detected capacity change from 0 to 1024
[ 47.839359][ T2599] loop2: detected capacity change from 0 to 1024
[ 47.872150][ T2602] loop2: detected capacity change from 0 to 1024
[ 47.900788][ T2605] loop2: detected capacity change from 0 to 1024
[ 47.931476][ T2608] loop2: detected capacity change from 0 to 1024
[ 47.960881][ T2611] loop2: detected capacity change from 0 to 1024
[ 47.991570][ T2614] loop2: detected capacity change from 0 to 1024
[ 48.019176][ T2617] loop2: detected capacity change from 0 to 1024
2026/02/23 08:19:49 executed programs: 946
[ 52.752974][ T3234] set_capacity_and_notify: 202 callbacks suppressed
[ 52.752990][ T3234] loop2: detected capacity change from 0 to 1024
[ 52.790299][ T3237] loop2: detected capacity change from 0 to 1024
[ 52.819902][ T3240] loop2: detected capacity change from 0 to 1024
[ 52.859764][ T3243] loop2: detected capacity change from 0 to 1024
[ 52.891699][ T3246] loop2: detected capacity change from 0 to 1024
[ 52.932161][ T3249] loop2: detected capacity change from 0 to 1024
[ 52.972301][ T3252] loop2: detected capacity change from 0 to 1024
[ 53.000106][ T3255] loop2: detected capacity change from 0 to 1024
[ 53.034673][ T3258] loop2: detected capacity change from 0 to 1024
[ 53.073117][ T3261] loop2: detected capacity change from 0 to 1024
[ 54.860374][ T298] general protection fault, probably for non-canonical address 0xdffffc00068e8f0d: 0000 [#1] PREEMPT SMP KASAN
[ 54.872520][ T298] KASAN: probably user-memory-access in range [0x0000000034747868-0x000000003474786f]
[ 54.882225][ T298] CPU: 0 PID: 298 Comm: udevd Tainted: G B syzkaller #0
[ 54.890922][ T298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 54.900967][ T298] RIP: 0010:vm_unmapped_area+0x6fd/0x9b0
[ 54.906599][ T298] Code: 89 ef 31 f6 e8 b4 d7 40 03 48 85 c0 0f 84 22 01 00 00 48 89 c3 4c 8d 78 08 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 45 24 09 00 4d 8b 3f 4c 89 ff 4c 89
[ 54.926725][ T298] RSP: 0018:ffffc90001667920 EFLAGS: 00010203
[ 54.933387][ T298] RAX: 00000000068e8f0d RBX: 0000000034747865 RCX: dffffc0000000000
[ 54.941346][ T298] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003
[ 54.949314][ T298] RBP: ffffc90001667ab0 R08: ffff88810e33e540 R09: 0000000000000003
[ 54.957355][ T298] R10: 0000000000000003 R11: 0000000000000000 R12: 00007f5f18beafff
[ 54.965394][ T298] R13: ffffc90001667a00 R14: 00007f5f18bea000 R15: 000000003474786d
[ 54.973350][ T298] FS: 00007f5f18c03880(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 54.982273][ T298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 54.988860][ T298] CR2: 0000001b32563fff CR3: 000000012149c000 CR4: 00000000003506b0
[ 54.996911][ T298] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 55.005064][ T298] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 55.013195][ T298] Call Trace:
[ 55.016639][ T298]
[ 55.019665][ T298] ? __cfi_vm_unmapped_area+0x10/0x10
[ 55.025043][ T298] ? __kasan_record_aux_stack+0xb6/0xc0
[ 55.030766][ T298] ? kasan_record_aux_stack_noalloc+0xb/0x10
[ 55.036994][ T298] ? call_rcu+0xcf/0xf90
[ 55.041225][ T298] ? __fput+0x66a/0x8f0
[ 55.045473][ T298] ? ____fput+0x15/0x20
[ 55.049786][ T298] ? task_work_run+0x1e1/0x250
[ 55.054554][ T298] ? exit_to_user_mode_loop+0x9b/0xb0
[ 55.059926][ T298] ? exit_to_user_mode_prepare+0x87/0xd0
[ 55.065557][ T298] ? syscall_exit_to_user_mode+0x1a/0x30
[ 55.071175][ T298] ? do_syscall_64+0x58/0xa0
[ 55.075760][ T298] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 55.081930][ T298] arch_get_unmapped_area_topdown+0x455/0x5b0
[ 55.087984][ T298] ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10
[ 55.094553][ T298] ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10
[ 55.101300][ T298] get_unmapped_area+0x203/0x380
[ 55.106467][ T298] do_mmap+0x32c/0xdd0
[ 55.110617][ T298] ? __cfi_do_mmap+0x10/0x10
[ 55.115198][ T298] ? percpu_counter_add_batch+0x13c/0x160
[ 55.120904][ T298] vm_mmap_pgoff+0x224/0x410
[ 55.125499][ T298] ? __cfi_vm_mmap_pgoff+0x10/0x10
[ 55.130803][ T298] ? generic_file_llseek_size+0x1fa/0x3a0
[ 55.136690][ T298] ksys_mmap_pgoff+0xf6/0x1d0
[ 55.141367][ T298] __x64_sys_mmap+0xfa/0x110
[ 55.145953][ T298] x64_sys_call+0x8fd/0x9a0
[ 55.150458][ T298] do_syscall_64+0x4c/0xa0
[ 55.154862][ T298] ? clear_bhb_loop+0x30/0x80
[ 55.159524][ T298] ? clear_bhb_loop+0x30/0x80
[ 55.164184][ T298] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 55.170076][ T298] RIP: 0033:0x7f5f1851d822
[ 55.174474][ T298] Code: 00 00 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 76 5b 5d c3 0f 1f 00 48 8b 05 a1 35 0d 00 64
[ 55.194338][ T298] RSP: 002b:00007ffecdd4d638 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 55.202851][ T298] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5f1851d822
[ 55.210817][ T298] RDX: 0000000000000003 RSI: 0000000000000200 RDI: 0000000000000000
[ 55.218897][ T298] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000
[ 55.226904][ T298] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000000
[ 55.235385][ T298] R13: 0000000000000000 R14: 000055fb7920b5b0 R15: 00007f5f18d243d8
[ 55.243349][ T298]
[ 55.246398][ T298] Modules linked in:
[ 55.250332][ T291] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#2] PREEMPT SMP KASAN
[ 55.250983][ C0] slab maple_node
[ 55.262070][ T291] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[ 55.262092][ T291] CPU: 1 PID: 291 Comm: syz-execprog Tainted: G B D syzkaller #0
[ 55.262110][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 55.262119][ T291] RIP: 0010:rb_erase+0x655/0xeb0
[ 55.265899][ C0] start ffff8881149fdc00
[ 55.274377][ T291] Code: 37 48 8b 45 c8 42 80 3c 28 00 74 09 48 8b 7d b8 e8 70 5c c5 fc 48 8b 45 d0 4c 89 70 10 49 89 07 49 89 c7 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 4c 5c c5 fc 4c 89 f8 48 83 c8 01
[ 55.283527][ C0] pointer offset 8
[ 55.293633][ T291] RSP: 0018:ffffc90000de7898 EFLAGS: 00010046
[ 55.293655][ T291] RAX: 0000000000000000 RBX: 1ffff1103ede5462 RCX: ffff88810e49e540
[ 55.298685][ C0]
[ 55.303068][ T291] RDX: 0000000000000000 RSI: ffff8881f6f29da0 RDI: ffffc90000db7b88
[ 55.351042][ T291] RBP: ffffc90000de78f0 R08: 0000000000000003 R09: 0000000000000004
[ 55.359121][ T291] R10: dffffc0000000000 R11: fffff520001bcf28 R12: ffff8881f6f2a310
[ 55.367438][ T291] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90000db7b80
[ 55.375425][ T291] FS: 000000c003db3098(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 55.384341][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 55.390919][ T291] CR2: 00007f5f18bdc000 CR3: 00000001237bb000 CR4: 00000000003506a0
[ 55.398887][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 55.407276][ T291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 55.415321][ T291] Call Trace:
[ 55.418600][ T291]
[ 55.421540][ T291] ? finish_task_switch+0x209/0x7b0
[ 55.426752][ T291] timerqueue_del+0xd3/0x120
[ 55.431329][ T291] ? __remove_hrtimer+0x76/0x3e0
[ 55.436427][ T291] __remove_hrtimer+0x93/0x3e0
[ 55.441186][ T291] remove_hrtimer+0x137/0x280
[ 55.445851][ T291] hrtimer_try_to_cancel+0x2b8/0x320
[ 55.451150][ T291] schedule_hrtimeout_range_clock+0x19d/0x310
[ 55.457292][ T291] ? __cfi_schedule_hrtimeout_range_clock+0x10/0x10
[ 55.463871][ T291] ? __cfi_hrtimer_wakeup+0x10/0x10
[ 55.469056][ T291] ? _raw_spin_lock_irq+0x95/0xf0
[ 55.474064][ T291] ? __cfi__raw_spin_lock_irq+0x10/0x10
[ 55.479684][ T291] schedule_hrtimeout_range+0x28/0x30
[ 55.485177][ T291] do_epoll_wait+0x150c/0x1710
[ 55.489931][ T291] ? __kasan_check_read+0x11/0x20
[ 55.494986][ T291] ? ep_destroy_wakeup_source+0x50/0x50
[ 55.500524][ T291] ? vfs_read+0x560/0x910
[ 55.505016][ T291] ? __cfi_ep_autoremove_wake_function+0x10/0x10
[ 55.512197][ T291] ? set_user_sigmask+0xca/0x1c0
[ 55.517247][ T291] ? timespec64_add_safe+0x183/0x1f0
[ 55.522541][ T291] ? __cfi_timespec64_add_safe+0x10/0x10
[ 55.528162][ T291] do_epoll_pwait+0x5e/0x1f0
[ 55.532841][ T291] __x64_sys_epoll_pwait+0x221/0x270
[ 55.538384][ T291] ? __cfi___x64_sys_epoll_pwait+0x10/0x10
[ 55.544622][ T291] ? fpregs_assert_state_consistent+0xb1/0xe0
[ 55.550765][ T291] x64_sys_call+0x2dd/0x9a0
[ 55.555257][ T291] do_syscall_64+0x4c/0xa0
[ 55.559665][ T291] ? clear_bhb_loop+0x30/0x80
[ 55.564338][ T291] ? clear_bhb_loop+0x30/0x80
[ 55.568996][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 55.574989][ T291] RIP: 0033:0x40dd0e
[ 55.578876][ T291] Code: 24 28 44 8b 44 24 2c e9 70 ff ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 49 89 f2 48 89 fa 48 89 ce 48 89 df 0f 05 <48> 3d 01 f0 ff ff 76 15 48 f7 d8 48 89 c1 48 c7 c0 ff ff ff ff 48
[ 55.598653][ T291] RSP: 002b:000000c003ddd6d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000119
[ 55.607083][ T291] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000040dd0e
[ 55.615054][ T291] RDX: 0000000000000080 RSI: 000000c003ddd764 RDI: 0000000000000004
[ 55.623024][ T291] RBP: 000000c003ddd718 R08: 0000000000000000 R09: 0000000000000000
[ 55.631076][ T291] R10: 00000000000000d0 R11: 0000000000000246 R12: 000000c003ddd7a8
[ 55.639046][ T291] R13: 00000000425ea601 R14: 000000c002523500 R15: 0000000000000001
[ 55.647230][ T291]
[ 55.650439][ T291] Modules linked in:
[ 55.654515][ T291] ---[ end trace 0000000000000000 ]---
[ 55.654550][ C0] BUG: unable to handle page fault for address: fffffffffffffffc
[ 55.659973][ T291] RIP: 0010:vm_unmapped_area+0x6fd/0x9b0
[ 55.667772][ C0] #PF: supervisor read access in kernel mode
[ 55.673564][ T291] Code: 89 ef 31 f6 e8 b4 d7 40 03 48 85 c0 0f 84 22 01 00 00 48 89 c3 4c 8d 78 08 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 45 24 09 00 4d 8b 3f 4c 89 ff 4c 89
[ 55.679530][ C0] #PF: error_code(0x0000) - not-present page
[ 55.699740][ T291] RSP: 0018:ffffc90001667920 EFLAGS: 00010203
[ 55.705707][ C0] PGD 7012067 P4D 7012067
[ 55.711851][ T291]
[ 55.711854][ C0] PUD 7014067 PMD 0
[ 55.716451][ T291] RAX: 00000000068e8f0d RBX: 0000000034747865 RCX: dffffc0000000000
[ 55.716465][ T291] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003
[ 55.718772][ C0]
[ 55.718778][ C0] Oops: 0000 [#3] PREEMPT SMP KASAN
[ 55.722741][ T291] RBP: ffffc90001667ab0 R08: ffff88810e33e540 R09: 0000000000000003
[ 55.730700][ C0] CPU: 0 PID: 13 Comm: ksoftirqd/0 Tainted: G B D syzkaller #0
[ 55.738751][ T291] R10: 0000000000000003 R11: 0000000000000000 R12: 00007f5f18beafff
[ 55.741069][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 55.746337][ T291] R13: ffffc90001667a00 R14: 00007f5f18bea000 R15: 000000003474786d
[ 55.754299][ C0] RIP: 0010:rcu_do_batch+0x51e/0xbc0
[ 55.763067][ T291] FS: 000000c003db3098(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000