Warning: Permanently added '10.128.1.146' (ED25519) to the list of known hosts. 2026/07/18 17:04:53 parsed 1 programs 2026/07/18 17:04:53 serving rpc on tcp://38673 [ 21.178833][ T24] audit: type=1400 audit(1784394293.369:64): avc: denied { node_bind } for pid=287 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 21.199852][ T24] audit: type=1400 audit(1784394293.369:65): avc: denied { create } for pid=287 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 21.219518][ T24] audit: type=1400 audit(1784394293.369:66): avc: denied { module_request } for pid=287 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 21.779825][ T24] audit: type=1400 audit(1784394293.969:67): avc: denied { mounton } for pid=293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.780800][ T293] cgroup: Unknown subsys name 'net' [ 21.802432][ T24] audit: type=1400 audit(1784394293.969:68): avc: denied { mount } for pid=293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.829652][ T24] audit: type=1400 audit(1784394293.999:69): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.829778][ T293] cgroup: Unknown subsys name 'devices' [ 21.909857][ T293] cgroup: Unknown subsys name 'hugetlb' [ 21.915432][ T293] cgroup: Unknown subsys name 'rlimit' [ 22.026779][ T24] audit: type=1400 audit(1784394294.209:70): avc: denied { setattr } for pid=293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.039165][ T296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.049938][ T24] audit: type=1400 audit(1784394294.209:71): avc: denied { create } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.078782][ T24] audit: type=1400 audit(1784394294.209:72): avc: denied { write } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.099009][ T24] audit: type=1400 audit(1784394294.209:73): avc: denied { read } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.125137][ T293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.449801][ T299] request_module fs-gadgetfs succeeded, but still no fs? [ 22.460070][ T299] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 23.000844][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.007868][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.015236][ T346] device bridge_slave_0 entered promiscuous mode [ 23.022173][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.029219][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.036412][ T346] device bridge_slave_1 entered promiscuous mode [ 23.069512][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.076527][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.083807][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.090825][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.105663][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.113130][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.120414][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.129665][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.137768][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.144790][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.152159][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.160236][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.167229][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.177565][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.186521][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.198912][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.209579][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.217530][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.225006][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.233014][ T346] device veth0_vlan entered promiscuous mode [ 23.242075][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.250774][ T346] device veth1_macvtap entered promiscuous mode [ 23.259461][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.269143][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/07/18 17:04:55 executed programs: 0 [ 23.528002][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.535232][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.542671][ T364] device bridge_slave_0 entered promiscuous mode [ 23.549676][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.556690][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.564078][ T364] device bridge_slave_1 entered promiscuous mode [ 23.600021][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.607028][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.614260][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.621270][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.643185][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.650960][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.658092][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.666616][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.674884][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.681903][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.690490][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.698666][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.705665][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.721056][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.730051][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.747297][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.757600][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.766078][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.773420][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.781551][ T364] device veth0_vlan entered promiscuous mode [ 23.794200][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.802988][ T364] device veth1_macvtap entered promiscuous mode [ 23.811396][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.828289][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.961024][ T370] F2FS-fs (loop2): invalid crc value [ 23.967320][ T370] F2FS-fs (loop2): Found nat_bits in checkpoint [ 23.988080][ T370] F2FS-fs (loop2): Start checkpoint disabled! [ 23.994857][ T370] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 24.039765][ T370] ------------[ cut here ]------------ [ 24.045246][ T370] WARNING: CPU: 0 PID: 370 at fs/f2fs/segment.c:2582 new_curseg+0xe3f/0x18d0 [ 24.054056][ T370] Modules linked in: [ 24.057937][ T370] CPU: 0 PID: 370 Comm: syz.2.17 Not tainted syzkaller #0 [ 24.065098][ T370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 24.075242][ T370] RIP: 0010:new_curseg+0xe3f/0x18d0 [ 24.080646][ T370] Code: 08 00 00 00 e8 e2 df 91 ff f0 41 80 0e 04 b8 01 00 00 00 48 89 85 58 ff ff ff 41 b4 01 41 89 dd e9 7c fb ff ff e8 a1 68 57 ff <0f> 0b 4c 8b b5 38 ff ff ff 4c 89 f7 be 08 00 00 00 e8 ab df 91 ff [ 24.100251][ T370] RSP: 0018:ffffc90000d67a18 EFLAGS: 00010293 [ 24.106304][ T370] RAX: ffffffff820d3abf RBX: 0000000000000018 RCX: ffff88810dca13c0 [ 24.114271][ T370] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000000000000018 [ 24.122250][ T370] RBP: ffffc90000d67b08 R08: 0000000000000003 R09: 0000000000000004 [ 24.130222][ T370] R10: dffffc0000000000 R11: fffff520001acf34 R12: ffff88810fa08e18 [ 24.138192][ T370] R13: 0000000000000016 R14: 0000000000000018 R15: dffffc0000000000 [ 24.146135][ T370] FS: 000055556814a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 24.155050][ T370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.161638][ T370] CR2: 0000559323d314b0 CR3: 000000010fe7d000 CR4: 00000000003506b0 [ 24.169666][ T370] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.177627][ T370] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.185639][ T370] Call Trace: [ 24.188926][ T370] __allocate_new_segment+0x13d/0x810 [ 24.194266][ T370] f2fs_allocate_new_section+0x1f3/0x290 [ 24.199893][ T370] ? new_curseg+0x18d0/0x18d0 [ 24.204557][ T370] ? __kasan_check_write+0x14/0x20 [ 24.209671][ T370] ? down_read_trylock+0x106/0x160 [ 24.214765][ T370] ? __init_rwsem+0x1c0/0x1c0 [ 24.219452][ T370] ? has_not_enough_free_secs+0x3f3/0x8d0 [ 24.225150][ T370] expand_inode_data+0x5e7/0x990 [ 24.230134][ T370] ? f2fs_insert_range+0x5e0/0x5e0 [ 24.235226][ T370] ? inode_dio_wait+0x25a/0x2d0 [ 24.240112][ T370] ? file_update_time+0x3d7/0x440 [ 24.245121][ T370] ? inode_owner_or_capable+0x140/0x140 [ 24.250659][ T370] f2fs_fallocate+0x3dd/0x750 [ 24.255318][ T370] vfs_fallocate+0x4b9/0x590 [ 24.259913][ T370] __x64_sys_fallocate+0xc0/0x110 [ 24.264917][ T370] do_syscall_64+0x31/0x40 [ 24.269326][ T370] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.275201][ T370] RIP: 0033:0x7ff14e1c7e99 [ 24.279613][ T370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.299219][ T370] RSP: 002b:00007fff3fd3ab68 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 24.307617][ T370] RAX: ffffffffffffffda RBX: 00007ff14e44ffa0 RCX: 00007ff14e1c7e99 [ 24.315612][ T370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 24.323600][ T370] RBP: 00007ff14e25deaf R08: 0000000000000000 R09: 0000000000000000 [ 24.331621][ T370] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000 [ 24.339688][ T370] R13: 00007ff14e44ffac R14: 00007ff14e44ffa0 R15: 00007ff14e44ffa0 [ 24.347635][ T370] ---[ end trace 238d23b6c8a97779 ]--- [ 24.353151][ T370] ------------[ cut here ]------------ [ 24.358612][ T370] WARNING: CPU: 0 PID: 370 at fs/f2fs/segment.c:2636 new_curseg+0x14d2/0x18d0 [ 24.367420][ T370] Modules linked in: [ 24.371312][ T370] CPU: 0 PID: 370 Comm: syz.2.17 Tainted: G W syzkaller #0 [ 24.379800][ T370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 24.389849][ T370] RIP: 0010:new_curseg+0x14d2/0x18d0 [ 24.395118][ T370] Code: ff e8 32 62 57 ff 0f 0b 4c 8b 75 d0 49 8d 7e 78 be 08 00 00 00 e8 3e d9 91 ff f0 41 80 4e 78 04 e9 b7 ed ff ff e8 0e 62 57 ff <0f> 0b 48 8b 5d d0 48 8d 7b 78 be 08 00 00 00 e8 1a d9 91 ff f0 80 [ 24.414743][ T370] RSP: 0018:ffffc90000d67a18 EFLAGS: 00010293 [ 24.420854][ T370] RAX: ffffffff820d4152 RBX: ffff88810cce2501 RCX: ffff88810dca13c0 [ 24.428854][ T370] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 24.436807][ T370] RBP: ffffc90000d67b08 R08: ffff88810cce252f R09: 1ffff1102199c4a5 [ 24.444771][ T370] R10: dffffc0000000000 R11: ffffed102199c4a6 R12: 0000000000000000 [ 24.452732][ T370] R13: 0000000000000016 R14: 0000000000000018 R15: 0000000000000018 [ 24.460699][ T370] FS: 000055556814a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 24.469616][ T370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.476168][ T370] CR2: 0000559323d314b0 CR3: 000000010fe7d000 CR4: 00000000003506b0 [ 24.484166][ T370] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.492131][ T370] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.500088][ T370] Call Trace: [ 24.503361][ T370] __allocate_new_segment+0x13d/0x810 [ 24.508722][ T370] f2fs_allocate_new_section+0x1f3/0x290 [ 24.514342][ T370] ? new_curseg+0x18d0/0x18d0 [ 24.519017][ T370] ? __kasan_check_write+0x14/0x20 [ 24.524114][ T370] ? down_read_trylock+0x106/0x160 [ 24.529214][ T370] ? __init_rwsem+0x1c0/0x1c0 [ 24.533875][ T370] ? has_not_enough_free_secs+0x3f3/0x8d0 [ 24.539601][ T370] expand_inode_data+0x5e7/0x990 [ 24.544527][ T370] ? f2fs_insert_range+0x5e0/0x5e0 [ 24.549635][ T370] ? inode_dio_wait+0x25a/0x2d0 [ 24.554469][ T370] ? file_update_time+0x3d7/0x440 [ 24.559517][ T370] ? inode_owner_or_capable+0x140/0x140 [ 24.565044][ T370] f2fs_fallocate+0x3dd/0x750 [ 24.569713][ T370] vfs_fallocate+0x4b9/0x590 [ 24.574286][ T370] __x64_sys_fallocate+0xc0/0x110 [ 24.579304][ T370] do_syscall_64+0x31/0x40 [ 24.583706][ T370] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.589591][ T370] RIP: 0033:0x7ff14e1c7e99 [ 24.593989][ T370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.613593][ T370] RSP: 002b:00007fff3fd3ab68 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 24.622013][ T370] RAX: ffffffffffffffda RBX: 00007ff14e44ffa0 RCX: 00007ff14e1c7e99 [ 24.629972][ T370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 24.637915][ T370] RBP: 00007ff14e25deaf R08: 0000000000000000 R09: 0000000000000000 [ 24.645965][ T370] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000 [ 24.653942][ T370] R13: 00007ff14e44ffac R14: 00007ff14e44ffa0 R15: 00007ff14e44ffa0 [ 24.661905][ T370] ---[ end trace 238d23b6c8a9777a ]--- [ 24.667380][ T370] ================================================================== [ 24.675428][ T370] BUG: KASAN: slab-out-of-bounds in reset_curseg+0x508/0x590 [ 24.682766][ T370] Read of size 4 at addr ffff8881111693c0 by task syz.2.17/370 [ 24.690272][ T370] [ 24.692585][ T370] CPU: 1 PID: 370 Comm: syz.2.17 Tainted: G W syzkaller #0 [ 24.701054][ T370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 24.711084][ T370] Call Trace: [ 24.714350][ T370] __dump_stack+0x21/0x24 [ 24.718995][ T370] dump_stack_lvl+0x1a7/0x208 [ 24.723644][ T370] ? show_regs_print_info+0x18/0x18 [ 24.728822][ T370] ? thaw_kernel_threads+0x220/0x220 [ 24.734083][ T370] ? __warn+0x207/0x2a0 [ 24.738210][ T370] print_address_description+0x7f/0x2c0 [ 24.743725][ T370] ? reset_curseg+0x508/0x590 [ 24.748374][ T370] kasan_report+0x100/0x140 [ 24.752845][ T370] ? schedule_preempt_disabled+0x20/0x20 [ 24.758446][ T370] ? reset_curseg+0x508/0x590 [ 24.763090][ T370] __asan_report_load4_noabort+0x14/0x20 [ 24.768691][ T370] reset_curseg+0x508/0x590 [ 24.773163][ T370] new_curseg+0x12ea/0x18d0 [ 24.777631][ T370] __allocate_new_segment+0x13d/0x810 [ 24.782969][ T370] f2fs_allocate_new_section+0x1f3/0x290 [ 24.788568][ T370] ? new_curseg+0x18d0/0x18d0 [ 24.793214][ T370] ? __kasan_check_write+0x14/0x20 [ 24.798296][ T370] ? down_read_trylock+0x106/0x160 [ 24.803373][ T370] ? __init_rwsem+0x1c0/0x1c0 [ 24.808018][ T370] ? has_not_enough_free_secs+0x3f3/0x8d0 [ 24.813708][ T370] expand_inode_data+0x5e7/0x990 [ 24.818614][ T370] ? f2fs_insert_range+0x5e0/0x5e0 [ 24.823693][ T370] ? inode_dio_wait+0x25a/0x2d0 [ 24.828519][ T370] ? file_update_time+0x3d7/0x440 [ 24.833524][ T370] ? inode_owner_or_capable+0x140/0x140 [ 24.839045][ T370] f2fs_fallocate+0x3dd/0x750 [ 24.843701][ T370] vfs_fallocate+0x4b9/0x590 [ 24.848262][ T370] __x64_sys_fallocate+0xc0/0x110 [ 24.853255][ T370] do_syscall_64+0x31/0x40 [ 24.857639][ T370] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.863502][ T370] RIP: 0033:0x7ff14e1c7e99 [ 24.867890][ T370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.887464][ T370] RSP: 002b:00007fff3fd3ab68 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 24.895850][ T370] RAX: ffffffffffffffda RBX: 00007ff14e44ffa0 RCX: 00007ff14e1c7e99 [ 24.903795][ T370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 24.911741][ T370] RBP: 00007ff14e25deaf R08: 0000000000000000 R09: 0000000000000000 [ 24.919685][ T370] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000 [ 24.927627][ T370] R13: 00007ff14e44ffac R14: 00007ff14e44ffa0 R15: 00007ff14e44ffa0 [ 24.935573][ T370] [ 24.937877][ T370] Allocated by task 370: [ 24.942091][ T370] __kasan_kmalloc+0xd4/0x100 [ 24.946734][ T370] __kmalloc+0x19f/0x330 [ 24.950959][ T370] kvmalloc_node+0x88/0x130 [ 24.955431][ T370] f2fs_build_segment_manager+0xdb6/0x48c0 [ 24.961205][ T370] f2fs_fill_super+0x4a08/0x73d0 [ 24.966111][ T370] mount_bdev+0x26a/0x380 [ 24.970405][ T370] f2fs_mount+0x34/0x40 [ 24.974531][ T370] legacy_get_tree+0xed/0x190 [ 24.979177][ T370] vfs_get_tree+0x89/0x260 [ 24.983559][ T370] do_new_mount+0x25a/0xa30 [ 24.988027][ T370] path_mount+0x581/0xca0 [ 24.992325][ T370] __se_sys_mount+0x320/0x390 [ 24.996969][ T370] __x64_sys_mount+0xbf/0xd0 [ 25.001527][ T370] do_syscall_64+0x31/0x40 [ 25.005911][ T370] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.011769][ T370] [ 25.014069][ T370] The buggy address belongs to the object at ffff888111169000 [ 25.014069][ T370] which belongs to the cache kmalloc-1k of size 1024 [ 25.028522][ T370] The buggy address is located 960 bytes inside of [ 25.028522][ T370] 1024-byte region [ffff888111169000, ffff888111169400) [ 25.041847][ T370] The buggy address belongs to the page: [ 25.047464][ T370] page:ffffea0004445a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111168 [ 25.057668][ T370] head:ffffea0004445a00 order:3 compound_mapcount:0 compound_pincount:0 [ 25.065962][ T370] flags: 0x4000000000010200(slab|head) [ 25.071392][ T370] raw: 4000000000010200 ffffea0004443600 0000000400000004 ffff888100042f00 [ 25.079945][ T370] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 25.088496][ T370] page dumped because: kasan: bad access detected [ 25.094874][ T370] page_owner tracks the page as allocated [ 25.100575][ T370] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 94, ts 3695918109, free_ts 0 [ 25.118512][ T370] prep_new_page+0x176/0x190 [ 25.123072][ T370] get_page_from_freelist+0x225f/0x23f0 [ 25.128583][ T370] __alloc_pages_nodemask+0x29a/0x640 [ 25.133920][ T370] new_slab+0x84/0x3f0 [ 25.137954][ T370] ___slab_alloc+0x2f8/0x4c0 [ 25.142514][ T370] __slab_alloc+0x63/0xa0 [ 25.146810][ T370] __kmalloc_track_caller+0x1e4/0x310 [ 25.152152][ T370] __alloc_skb+0xdc/0x520 [ 25.156450][ T370] netlink_sendmsg+0x693/0xb70 [ 25.161185][ T370] ____sys_sendmsg+0x5be/0x8f0 [ 25.165914][ T370] ___sys_sendmsg+0x236/0x2e0 [ 25.170558][ T370] __x64_sys_sendmsg+0x201/0x2d0 [ 25.175462][ T370] do_syscall_64+0x31/0x40 [ 25.179862][ T370] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.185718][ T370] page_owner free stack trace missing [ 25.191054][ T370] [ 25.193354][ T370] Memory state around the buggy address: [ 25.198952][ T370] ffff888111169280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 25.206981][ T370] ffff888111169300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 25.215011][ T370] >ffff888111169380: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 25.223040][ T370] ^ [ 25.229162][ T370] ffff888111169400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 25.237191][ T370] ffff888111169480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 25.245233][ T370] ================================================================== [ 25.253259][ T370] Disabling lock debugging due to kernel taint [ 25.260793][ T370] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 25.272668][ T370] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 25.281049][ T370] CPU: 1 PID: 370 Comm: syz.2.17 Tainted: G B W syzkaller #0 [ 25.289513][ T370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 25.299543][ T370] RIP: 0010:update_sit_entry+0x3d6/0xfd0 [ 25.305142][ T370] Code: 89 45 a8 49 01 c7 41 f6 d6 41 80 e6 07 41 bd 01 00 00 00 44 89 f1 41 d3 e5 4d 89 fc 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 04 84 c0 0f 85 3a 09 00 00 41 0f b6 1f 45 89 ee 41 21 [ 25.324716][ T370] RSP: 0018:ffffc90000d67678 EFLAGS: 00010246 [ 25.330752][ T370] RAX: dffffc0000000000 RBX: ffff8881111693c8 RCX: 0000000000000007 [ 25.338693][ T370] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881111693c8 [ 25.346634][ T370] RBP: ffffc90000d676f0 R08: ffff8881110e8006 R09: 1ffff1102221d000 [ 25.354575][ T370] R10: dffffc0000000000 R11: ffffed102221d001 R12: 0000000000000000 [ 25.362516][ T370] R13: 0000000000000080 R14: 0000000000000007 R15: 0000000000000000 [ 25.370462][ T370] FS: 000055556814a500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 25.379357][ T370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.385913][ T370] CR2: 0000559323d86e00 CR3: 000000010fe7d000 CR4: 00000000003506a0 [ 25.393857][ T370] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.401796][ T370] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.409735][ T370] Call Trace: [ 25.412996][ T370] f2fs_allocate_data_block+0x10c9/0x3880 [ 25.418687][ T370] ? f2fs_io_type_to_rw_hint+0x1e0/0x1e0 [ 25.424286][ T370] ? f2fs_mark_inode_dirty_sync+0x110/0x140 [ 25.430144][ T370] ? inc_valid_block_count+0x590/0xaf0 [ 25.435568][ T370] __allocate_data_block+0x52b/0xa00 [ 25.440821][ T370] ? f2fs_map_blocks+0x34e0/0x34e0 [ 25.445900][ T370] f2fs_map_blocks+0xd94/0x34e0 [ 25.450719][ T370] ? f2fs_do_map_lock+0x2e0/0x2e0 [ 25.455712][ T370] ? __kasan_check_write+0x14/0x20 [ 25.460791][ T370] ? down_read_trylock+0x106/0x160 [ 25.465869][ T370] expand_inode_data+0x616/0x990 [ 25.470773][ T370] ? f2fs_insert_range+0x5e0/0x5e0 [ 25.475849][ T370] ? inode_dio_wait+0x25a/0x2d0 [ 25.480666][ T370] ? file_update_time+0x3d7/0x440 [ 25.485655][ T370] ? inode_owner_or_capable+0x140/0x140 [ 25.491169][ T370] f2fs_fallocate+0x3dd/0x750 [ 25.495813][ T370] vfs_fallocate+0x4b9/0x590 [ 25.500373][ T370] __x64_sys_fallocate+0xc0/0x110 [ 25.505364][ T370] do_syscall_64+0x31/0x40 [ 25.509749][ T370] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.515608][ T370] RIP: 0033:0x7ff14e1c7e99 [ 25.519992][ T370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.539563][ T370] RSP: 002b:00007fff3fd3ab68 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 25.547942][ T370] RAX: ffffffffffffffda RBX: 00007ff14e44ffa0 RCX: 00007ff14e1c7e99 [ 25.555883][ T370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 25.563826][ T370] RBP: 00007ff14e25deaf R08: 0000000000000000 R09: 0000000000000000 [ 25.571765][ T370] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000 [ 25.579707][ T370] R13: 00007ff14e44ffac R14: 00007ff14e44ffa0 R15: 00007ff14e44ffa0 [ 25.587646][ T370] Modules linked in: [ 25.591678][ T370] ---[ end trace 238d23b6c8a9777b ]--- [ 25.597464][ T370] RIP: 0010:update_sit_entry+0x3d6/0xfd0 [ 25.603224][ T370] Code: 89 45 a8 49 01 c7 41 f6 d6 41 80 e6 07 41 bd 01 00 00 00 44 89 f1 41 d3 e5 4d 89 fc 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 04 84 c0 0f 85 3a 09 00 00 41 0f b6 1f 45 89 ee 41 21 [ 25.622968][ T370] RSP: 0018:ffffc90000d67678 EFLAGS: 00010246 [ 25.629056][ T370] RAX: dffffc0000000000 RBX: ffff8881111693c8 RCX: 0000000000000007 [ 25.644342][ T370] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881111693c8 [ 25.652599][ T370] RBP: ffffc90000d676f0 R08: ffff8881110e8006 R09: 1ffff1102221d000 [ 25.660950][ T370] R10: dffffc0000000000 R11: ffffed102221d001 R12: 0000000000000000 [ 25.668939][ T370] R13: 0000000000000080 R14: 0000000000000007 R15: 0000000000000000 [ 25.676912][ T370] FS: 000055556814a500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 25.685956][ T370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.692552][ T370] CR2: 0000559323d86e00 CR3: 000000010fe7d000 CR4: 00000000003506a0 [ 25.700546][ T370] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.708529][ T370] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.716505][ T370] Kernel panic - not syncing: Fatal exception [ 25.722735][ T370] Kernel Offset: disabled [ 25.727040][ T370] Rebooting in 86400 seconds..