Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts. 2026/01/17 07:43:25 parsed 1 programs [ 43.669575][ T24] kauditd_printk_skb: 30 callbacks suppressed [ 43.669586][ T24] audit: type=1400 audit(1768635806.240:104): avc: denied { unlink } for pid=402 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 43.706543][ T402] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.431928][ T24] audit: type=1401 audit(1768635807.010:105): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 44.469222][ T431] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.476387][ T431] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.483723][ T431] device bridge_slave_0 entered promiscuous mode [ 44.490613][ T431] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.497727][ T431] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.505162][ T431] device bridge_slave_1 entered promiscuous mode [ 44.535267][ T431] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.542332][ T431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.549551][ T431] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.556596][ T431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.572033][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.579603][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.586852][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.596244][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.604531][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.611559][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.620208][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.628362][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.635505][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.647149][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.655934][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.668238][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.679161][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.687440][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.695176][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.703761][ T431] device veth0_vlan entered promiscuous mode [ 44.714635][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.724026][ T431] device veth1_macvtap entered promiscuous mode [ 44.733810][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.744076][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.879680][ T24] audit: type=1400 audit(1768635807.450:106): avc: denied { create } for pid=446 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 2026/01/17 07:43:27 executed programs: 0 [ 45.177422][ T24] audit: type=1400 audit(1768635807.750:107): avc: denied { write } for pid=394 comm="syz-execprog" path="pipe:[15528]" dev="pipefs" ino=15528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.217459][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.224853][ T463] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.232418][ T463] device bridge_slave_0 entered promiscuous mode [ 45.239354][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.246409][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.253696][ T463] device bridge_slave_1 entered promiscuous mode [ 45.287373][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.294694][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.302098][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.309113][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.328845][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.336407][ T192] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.343696][ T192] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.352931][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.361820][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.368857][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.381795][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.390027][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.397057][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.407390][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.415666][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.424611][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.432731][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.448067][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.456546][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.467260][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.475337][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.483714][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.491209][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.499038][ T463] device veth0_vlan entered promiscuous mode [ 45.511415][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.519529][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.528998][ T463] device veth1_macvtap entered promiscuous mode [ 45.537574][ T9] device bridge_slave_1 left promiscuous mode [ 45.543707][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.551110][ T9] device bridge_slave_0 left promiscuous mode [ 45.557203][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.564987][ T9] device veth1_macvtap left promiscuous mode [ 45.571068][ T9] device veth0_vlan left promiscuous mode [ 45.665707][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.673385][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.681927][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.692682][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.701407][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.854311][ T468] F2FS-fs (loop2): fault_injection options not supported [ 45.862740][ T468] F2FS-fs (loop2): invalid crc value [ 45.869876][ T468] F2FS-fs (loop2): Found nat_bits in checkpoint [ 45.898193][ T468] F2FS-fs (loop2): Start checkpoint disabled! [ 45.906158][ T468] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 45.913896][ T24] audit: type=1400 audit(1768635808.490:108): avc: denied { mount } for pid=467 comm="syz.2.16" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.945339][ T24] audit: type=1400 audit(1768635808.490:109): avc: denied { write } for pid=467 comm="syz.2.16" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.967331][ T24] audit: type=1400 audit(1768635808.490:110): avc: denied { add_name } for pid=467 comm="syz.2.16" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.980628][ T192] attempt to access beyond end of device [ 45.980628][ T192] loop2: rw=2049, want=40968, limit=40427 [ 45.999122][ T24] audit: type=1400 audit(1768635808.490:111): avc: denied { create } for pid=467 comm="syz.2.16" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.999143][ T24] audit: type=1400 audit(1768635808.490:112): avc: denied { write open } for pid=467 comm="syz.2.16" path="/0/file0/file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.043473][ T24] audit: type=1400 audit(1768635808.490:113): avc: denied { ioctl } for pid=467 comm="syz.2.16" path="/0/file0/file0" dev="loop2" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.272582][ T479] F2FS-fs (loop2): fault_injection options not supported [ 46.280883][ T479] F2FS-fs (loop2): invalid crc value [ 46.287355][ T479] F2FS-fs (loop2): Found nat_bits in checkpoint [ 46.309963][ T479] F2FS-fs (loop2): Start checkpoint disabled! [ 46.316662][ T479] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 46.368116][ T192] attempt to access beyond end of device [ 46.368116][ T192] loop2: rw=2049, want=45104, limit=40427 [ 46.610402][ T484] F2FS-fs (loop2): fault_injection options not supported [ 46.618568][ T484] F2FS-fs (loop2): invalid crc value [ 46.625261][ T484] F2FS-fs (loop2): Found nat_bits in checkpoint [ 46.645463][ T484] F2FS-fs (loop2): Start checkpoint disabled! [ 46.652431][ T484] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 46.703807][ T192] attempt to access beyond end of device [ 46.703807][ T192] loop2: rw=2049, want=40968, limit=40427 [ 46.949322][ T492] F2FS-fs (loop2): fault_injection options not supported [ 46.957421][ T492] F2FS-fs (loop2): invalid crc value [ 46.963857][ T492] F2FS-fs (loop2): Found nat_bits in checkpoint [ 46.983633][ T492] F2FS-fs (loop2): Start checkpoint disabled! [ 46.990357][ T492] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 47.039020][ T9] attempt to access beyond end of device [ 47.039020][ T9] loop2: rw=2049, want=45104, limit=40427 [ 47.272428][ T497] F2FS-fs (loop2): fault_injection options not supported [ 47.281564][ T497] F2FS-fs (loop2): invalid crc value [ 47.287837][ T497] F2FS-fs (loop2): Found nat_bits in checkpoint [ 47.308006][ T497] F2FS-fs (loop2): Start checkpoint disabled! [ 47.314759][ T497] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 47.363750][ T9] attempt to access beyond end of device [ 47.363750][ T9] loop2: rw=2049, want=40968, limit=40427 [ 47.682976][ T502] F2FS-fs (loop2): fault_injection options not supported [ 47.691133][ T502] F2FS-fs (loop2): invalid crc value [ 47.697368][ T502] F2FS-fs (loop2): Found nat_bits in checkpoint [ 47.717237][ T502] F2FS-fs (loop2): Start checkpoint disabled! [ 47.724092][ T502] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 47.772703][ T9] attempt to access beyond end of device [ 47.772703][ T9] loop2: rw=2049, want=40968, limit=40427 [ 48.033227][ T507] F2FS-fs (loop2): fault_injection options not supported [ 48.041473][ T507] F2FS-fs (loop2): invalid crc value [ 48.047919][ T507] F2FS-fs (loop2): Found nat_bits in checkpoint [ 48.067801][ T507] F2FS-fs (loop2): Start checkpoint disabled! [ 48.074671][ T507] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 48.123809][ T9] attempt to access beyond end of device [ 48.123809][ T9] loop2: rw=2049, want=40968, limit=40427 [ 48.382482][ T512] F2FS-fs (loop2): fault_injection options not supported [ 48.390970][ T512] F2FS-fs (loop2): invalid crc value [ 48.397345][ T512] F2FS-fs (loop2): Found nat_bits in checkpoint [ 48.417236][ T512] F2FS-fs (loop2): Start checkpoint disabled! [ 48.424077][ T512] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 48.462823][ T512] ------------[ cut here ]------------ [ 48.468311][ T512] WARNING: CPU: 1 PID: 512 at fs/f2fs/segment.c:2582 new_curseg+0xe4f/0x1880 [ 48.477221][ T512] Modules linked in: [ 48.481157][ T512] CPU: 1 PID: 512 Comm: syz.2.23 Not tainted syzkaller #0 [ 48.488279][ T512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.498353][ T512] RIP: 0010:new_curseg+0xe4f/0x1880 [ 48.503577][ T512] Code: 0b 4c 8b bd 30 ff ff ff 4c 89 ff be 08 00 00 00 e8 66 d0 91 ff f0 41 80 0f 04 41 b5 01 45 89 f7 e9 4d fb ff ff e8 f1 51 57 ff <0f> 0b 4c 8b a5 30 ff ff ff 4c 89 e7 be 08 00 00 00 e8 3b d0 91 ff [ 48.523314][ T512] RSP: 0018:ffffc90000ee7718 EFLAGS: 00010293 [ 48.529378][ T512] RAX: ffffffff820d625f RBX: ffff888119109518 RCX: ffff8881137f0000 [ 48.537374][ T512] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000000000000018 [ 48.545357][ T512] RBP: ffffc90000ee7808 R08: 0000000000000003 R09: 0000000000000004 [ 48.553342][ T512] R10: dffffc0000000000 R11: fffff520001dced4 R12: 0000000000000018 [ 48.561330][ T512] R13: 1ffff110232212a3 R14: 0000000000000018 R15: 0000000000000013 [ 48.569290][ T512] FS: 00007fd9f32746c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 48.578404][ T512] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.585008][ T512] CR2: 00007f49566eb000 CR3: 0000000117b36000 CR4: 00000000003506a0 [ 48.593028][ T512] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.601015][ T512] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.608968][ T512] Call Trace: [ 48.612361][ T512] __allocate_new_segment+0x13d/0x810 [ 48.617997][ T512] f2fs_allocate_new_section+0x1f3/0x290 [ 48.623637][ T512] ? new_curseg+0x1880/0x1880 [ 48.628319][ T512] ? __kasan_check_write+0x14/0x20 [ 48.633457][ T512] ? down_read_trylock+0x106/0x160 [ 48.638658][ T512] ? __init_rwsem+0x1c0/0x1c0 [ 48.643368][ T512] ? has_not_enough_free_secs+0x3d7/0x8a0 [ 48.649093][ T512] expand_inode_data+0x5f7/0x9a0 [ 48.654059][ T512] ? f2fs_insert_range+0x5d0/0x5d0 [ 48.659174][ T512] ? inode_dio_wait+0x25a/0x2d0 [ 48.664033][ T512] ? file_update_time+0x3d7/0x440 [ 48.669068][ T512] ? inode_owner_or_capable+0x140/0x140 [ 48.674644][ T512] f2fs_fallocate+0x42b/0x7e0 [ 48.679495][ T512] vfs_fallocate+0x4b4/0x590 [ 48.684095][ T512] do_vfs_ioctl+0x1154/0x14c0 [ 48.688772][ T512] ? __ia32_compat_sys_ioctl+0x8e0/0x8e0 [ 48.694440][ T512] ? has_cap_mac_admin+0x370/0x370 [ 48.699565][ T512] ? kmem_cache_free+0x100/0x2d0 [ 48.704548][ T512] ? selinux_file_ioctl+0x3a0/0x4d0 [ 48.709949][ T512] ? putname+0xfe/0x150 [ 48.714108][ T512] ? selinux_file_alloc_security+0x120/0x120 [ 48.720111][ T512] ? do_sys_openat2+0x68e/0x750 [ 48.724972][ T512] ? __fget_files+0x2c4/0x320 [ 48.729681][ T512] ? security_file_ioctl+0x84/0xa0 [ 48.734827][ T512] __se_sys_ioctl+0x9f/0x1a0 [ 48.739433][ T512] __x64_sys_ioctl+0x7b/0x90 [ 48.744079][ T512] do_syscall_64+0x31/0x40 [ 48.748511][ T512] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 48.754439][ T512] RIP: 0033:0x7fd9f380e0b9 [ 48.758873][ T512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.778532][ T512] RSP: 002b:00007fd9f3274028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.786967][ T512] RAX: ffffffffffffffda RBX: 00007fd9f3a3afa0 RCX: 00007fd9f380e0b9 [ 48.794961][ T512] RDX: 00002000000000c0 RSI: 0000000040305828 RDI: 0000000000000005 [ 48.803422][ T512] RBP: 00007fd9f38a09c4 R08: 0000000000000000 R09: 0000000000000000 [ 48.811410][ T512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.819381][ T512] R13: 0000000000000000 R14: 00007fd9f3a3afa0 R15: 00007fff4d10fa48 [ 48.827453][ T512] ---[ end trace 369563503dc8520f ]--- [ 48.833107][ T512] ------------[ cut here ]------------ [ 48.838597][ T512] WARNING: CPU: 1 PID: 512 at fs/f2fs/segment.c:2636 new_curseg+0x14a6/0x1880 [ 48.847457][ T512] Modules linked in: [ 48.851404][ T512] CPU: 1 PID: 512 Comm: syz.2.23 Tainted: G W syzkaller #0 [ 48.860011][ T512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.870213][ T512] RIP: 0010:new_curseg+0x14a6/0x1880 [ 48.875573][ T512] Code: ff e8 be 4b 57 ff 0f 0b 4c 8b 75 d0 49 8d 7e 78 be 08 00 00 00 e8 0a ca 91 ff f0 41 80 4e 78 04 e9 d4 ed ff ff e8 9a 4b 57 ff <0f> 0b 48 8b 5d d0 48 8d 7b 78 be 08 00 00 00 e8 e6 c9 91 ff f0 80 [ 48.895472][ T512] RSP: 0018:ffffc90000ee7718 EFLAGS: 00010293 [ 48.901671][ T512] RAX: ffffffff820d68b6 RBX: ffff888106581301 RCX: ffff8881137f0000 [ 48.909648][ T512] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 48.917850][ T512] RBP: ffffc90000ee7808 R08: ffff88810658139f R09: 1ffff11020cb0273 [ 48.925861][ T512] R10: dffffc0000000000 R11: ffffed1020cb0274 R12: 0000000000000000 [ 48.933861][ T512] R13: 0000000000000018 R14: 0000000000000001 R15: 0000000000000018 [ 48.941886][ T512] FS: 00007fd9f32746c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 48.950844][ T512] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.957433][ T512] CR2: 00007f49566eb000 CR3: 0000000117b36000 CR4: 00000000003506a0 [ 48.965679][ T512] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.973777][ T512] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.981797][ T512] Call Trace: [ 48.985116][ T512] __allocate_new_segment+0x13d/0x810 [ 48.990558][ T512] f2fs_allocate_new_section+0x1f3/0x290 [ 48.996299][ T512] ? new_curseg+0x1880/0x1880 [ 49.001011][ T512] ? __kasan_check_write+0x14/0x20 [ 49.006153][ T512] ? down_read_trylock+0x106/0x160 [ 49.011306][ T512] ? __init_rwsem+0x1c0/0x1c0 [ 49.015998][ T512] ? has_not_enough_free_secs+0x3d7/0x8a0 [ 49.021914][ T512] expand_inode_data+0x5f7/0x9a0 [ 49.026984][ T512] ? f2fs_insert_range+0x5d0/0x5d0 [ 49.032111][ T512] ? inode_dio_wait+0x25a/0x2d0 [ 49.036979][ T512] ? file_update_time+0x3d7/0x440 [ 49.042031][ T512] ? inode_owner_or_capable+0x140/0x140 [ 49.047721][ T512] f2fs_fallocate+0x42b/0x7e0 [ 49.052442][ T512] vfs_fallocate+0x4b4/0x590 [ 49.057067][ T512] do_vfs_ioctl+0x1154/0x14c0 [ 49.061822][ T512] ? __ia32_compat_sys_ioctl+0x8e0/0x8e0 [ 49.067614][ T512] ? has_cap_mac_admin+0x370/0x370 [ 49.072868][ T512] ? kmem_cache_free+0x100/0x2d0 [ 49.078037][ T512] ? selinux_file_ioctl+0x3a0/0x4d0 [ 49.083310][ T512] ? putname+0xfe/0x150 [ 49.087840][ T512] ? selinux_file_alloc_security+0x120/0x120 [ 49.094158][ T512] ? do_sys_openat2+0x68e/0x750 [ 49.099288][ T512] ? __fget_files+0x2c4/0x320 [ 49.104174][ T512] ? security_file_ioctl+0x84/0xa0 [ 49.109298][ T512] __se_sys_ioctl+0x9f/0x1a0 [ 49.113925][ T512] __x64_sys_ioctl+0x7b/0x90 [ 49.118522][ T512] do_syscall_64+0x31/0x40 [ 49.123066][ T512] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 49.129308][ T512] RIP: 0033:0x7fd9f380e0b9 [ 49.133758][ T512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.153466][ T512] RSP: 002b:00007fd9f3274028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.161914][ T512] RAX: ffffffffffffffda RBX: 00007fd9f3a3afa0 RCX: 00007fd9f380e0b9 [ 49.170036][ T512] RDX: 00002000000000c0 RSI: 0000000040305828 RDI: 0000000000000005 [ 49.178007][ T512] RBP: 00007fd9f38a09c4 R08: 0000000000000000 R09: 0000000000000000 [ 49.186023][ T512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.194131][ T512] R13: 0000000000000000 R14: 00007fd9f3a3afa0 R15: 00007fff4d10fa48 [ 49.202230][ T512] ---[ end trace 369563503dc85210 ]--- [ 49.207777][ T512] ================================================================== [ 49.215852][ T512] BUG: KASAN: slab-out-of-bounds in reset_curseg+0x4dd/0x560 [ 49.223233][ T512] Read of size 4 at addr ffff888119d673c0 by task syz.2.23/512 [ 49.230926][ T512] [ 49.233258][ T512] CPU: 0 PID: 512 Comm: syz.2.23 Tainted: G W syzkaller #0 [ 49.241729][ T512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.251792][ T512] Call Trace: [ 49.255066][ T512] __dump_stack+0x21/0x24 [ 49.259380][ T512] dump_stack_lvl+0x1a7/0x208 [ 49.264125][ T512] ? show_regs_print_info+0x18/0x18 [ 49.269303][ T512] ? thaw_kernel_threads+0x220/0x220 [ 49.274715][ T512] print_address_description+0x7f/0x2c0 [ 49.280336][ T512] ? reset_curseg+0x4dd/0x560 [ 49.285089][ T512] kasan_report+0xe2/0x130 [ 49.289483][ T512] ? reset_curseg+0x4dd/0x560 [ 49.294154][ T512] __asan_report_load4_noabort+0x14/0x20 [ 49.299853][ T512] reset_curseg+0x4dd/0x560 [ 49.304341][ T512] new_curseg+0x12e8/0x1880 [ 49.308916][ T512] __allocate_new_segment+0x13d/0x810 [ 49.314273][ T512] f2fs_allocate_new_section+0x1f3/0x290 [ 49.319885][ T512] ? new_curseg+0x1880/0x1880 [ 49.324550][ T512] ? __kasan_check_write+0x14/0x20 [ 49.329872][ T512] ? down_read_trylock+0x106/0x160 [ 49.334975][ T512] ? __init_rwsem+0x1c0/0x1c0 [ 49.339639][ T512] ? has_not_enough_free_secs+0x3d7/0x8a0 [ 49.345347][ T512] expand_inode_data+0x5f7/0x9a0 [ 49.350463][ T512] ? f2fs_insert_range+0x5d0/0x5d0 [ 49.355579][ T512] ? inode_dio_wait+0x25a/0x2d0 [ 49.360501][ T512] ? file_update_time+0x3d7/0x440 [ 49.365534][ T512] ? inode_owner_or_capable+0x140/0x140 [ 49.371228][ T512] f2fs_fallocate+0x42b/0x7e0 [ 49.376240][ T512] vfs_fallocate+0x4b4/0x590 [ 49.380903][ T512] do_vfs_ioctl+0x1154/0x14c0 [ 49.385571][ T512] ? __ia32_compat_sys_ioctl+0x8e0/0x8e0 [ 49.391199][ T512] ? has_cap_mac_admin+0x370/0x370 [ 49.396291][ T512] ? kmem_cache_free+0x100/0x2d0 [ 49.401209][ T512] ? selinux_file_ioctl+0x3a0/0x4d0 [ 49.406386][ T512] ? putname+0xfe/0x150 [ 49.410529][ T512] ? selinux_file_alloc_security+0x120/0x120 [ 49.416489][ T512] ? do_sys_openat2+0x68e/0x750 [ 49.421319][ T512] ? __fget_files+0x2c4/0x320 [ 49.425990][ T512] ? security_file_ioctl+0x84/0xa0 [ 49.431096][ T512] __se_sys_ioctl+0x9f/0x1a0 [ 49.435674][ T512] __x64_sys_ioctl+0x7b/0x90 [ 49.440248][ T512] do_syscall_64+0x31/0x40 [ 49.444654][ T512] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 49.450526][ T512] RIP: 0033:0x7fd9f380e0b9 [ 49.454920][ T512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.474685][ T512] RSP: 002b:00007fd9f3274028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.483080][ T512] RAX: ffffffffffffffda RBX: 00007fd9f3a3afa0 RCX: 00007fd9f380e0b9 [ 49.491042][ T512] RDX: 00002000000000c0 RSI: 0000000040305828 RDI: 0000000000000005 [ 49.499090][ T512] RBP: 00007fd9f38a09c4 R08: 0000000000000000 R09: 0000000000000000 [ 49.507231][ T512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.515279][ T512] R13: 0000000000000000 R14: 00007fd9f3a3afa0 R15: 00007fff4d10fa48 [ 49.523260][ T512] [ 49.525572][ T512] Allocated by task 512: [ 49.529804][ T512] __kasan_kmalloc+0xda/0x110 [ 49.534553][ T512] __kmalloc+0x1a4/0x330 [ 49.538794][ T512] kvmalloc_node+0x88/0x130 [ 49.543275][ T512] f2fs_build_segment_manager+0xdba/0x4900 [ 49.549058][ T512] f2fs_fill_super+0x4a4a/0x72e0 [ 49.553974][ T512] mount_bdev+0x28b/0x3a0 [ 49.558281][ T512] f2fs_mount+0x34/0x40 [ 49.562437][ T512] legacy_get_tree+0xed/0x190 [ 49.567199][ T512] vfs_get_tree+0x89/0x260 [ 49.571598][ T512] do_new_mount+0x25a/0xa20 [ 49.576082][ T512] path_mount+0x585/0xc90 [ 49.580389][ T512] __se_sys_mount+0x320/0x390 [ 49.585044][ T512] __x64_sys_mount+0xbf/0xd0 [ 49.589614][ T512] do_syscall_64+0x31/0x40 [ 49.594011][ T512] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 49.599986][ T512] [ 49.602299][ T512] The buggy address belongs to the object at ffff888119d67000 [ 49.602299][ T512] which belongs to the cache kmalloc-1k of size 1024 [ 49.616345][ T512] The buggy address is located 960 bytes inside of [ 49.616345][ T512] 1024-byte region [ffff888119d67000, ffff888119d67400) [ 49.629685][ T512] The buggy address belongs to the page: [ 49.635313][ T512] page:ffffea0004675800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119d60 [ 49.645538][ T512] head:ffffea0004675800 order:3 compound_mapcount:0 compound_pincount:0 [ 49.653842][ T512] flags: 0x4000000000010200(slab|head) [ 49.659288][ T512] raw: 4000000000010200 ffffea0004660200 0000000600000006 ffff888100042f00 [ 49.668112][ T512] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 49.676766][ T512] page dumped because: kasan: bad access detected [ 49.683159][ T512] page_owner tracks the page as allocated [ 49.688872][ T512] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 129, ts 4819297026, free_ts 0 [ 49.706901][ T512] prep_new_page+0x179/0x180 [ 49.711491][ T512] get_page_from_freelist+0x223b/0x23d0 [ 49.717014][ T512] __alloc_pages_nodemask+0x290/0x620 [ 49.722390][ T512] new_slab+0x84/0x3f0 [ 49.726560][ T512] ___slab_alloc+0x2a6/0x450 [ 49.731136][ T512] __slab_alloc+0x63/0xa0 [ 49.735444][ T512] __kmalloc+0x1fe/0x330 [ 49.739664][ T512] load_elf_phdrs+0x132/0x230 [ 49.744321][ T512] load_elf_binary+0x962/0x28e0 [ 49.749150][ T512] bprm_execve+0x88b/0x15f0 [ 49.753633][ T512] do_execveat_common+0x918/0xaa0 [ 49.758639][ T512] __x64_sys_execve+0x92/0xb0 [ 49.763309][ T512] do_syscall_64+0x31/0x40 [ 49.768139][ T512] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 49.774012][ T512] page_owner free stack trace missing [ 49.779359][ T512] [ 49.781665][ T512] Memory state around the buggy address: [ 49.787273][ T512] ffff888119d67280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.795315][ T512] ffff888119d67300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.803356][ T512] >ffff888119d67380: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 49.811414][ T512] ^ [ 49.817641][ T512] ffff888119d67400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 49.825682][ T512] ffff888119d67480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 49.833760][ T512] ================================================================== [ 49.841812][ T512] Disabling lock debugging due to kernel taint [ 49.848792][ T512] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 49.852351][ T24] audit: type=1400 audit(1768635812.430:114): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 49.860510][ T512] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 49.860522][ T512] CPU: 0 PID: 512 Comm: syz.2.23 Tainted: G B W syzkaller #0 [ 49.860527][ T512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.860541][ T512] RIP: 0010:update_sit_entry+0x3eb/0xf50 [ 49.860558][ T512] Code: 89 45 a8 49 01 c5 41 f6 d7 41 80 e7 07 44 89 f9 41 bf 01 00 00 00 41 d3 e7 4d 89 ee 49 c1 ee 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 06 84 c0 0f 85 a5 08 00 00 41 0f b6 5d 00 44 89 f8 41 [ 49.934767][ T512] RSP: 0018:ffffc90000ee7330 EFLAGS: 00010246 [ 49.940828][ T512] RAX: dffffc0000000000 RBX: ffff888119d673c8 RCX: 0000000000000007 [ 49.948845][ T512] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888119d673c8 [ 49.956809][ T512] RBP: ffffc90000ee73b0 R08: ffff8881137f0000 R09: 0000000000000003 [ 49.964770][ T512] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000004000 [ 49.972732][ T512] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000080 [ 49.980700][ T512] FS: 00007fd9f32746c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 49.989622][ T512] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.996293][ T512] CR2: 00007fd9f385b800 CR3: 0000000117b36000 CR4: 00000000003506b0 [ 50.004263][ T512] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.012222][ T512] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.020354][ T512] Call Trace: [ 50.023653][ T512] ? __asan_report_store8_noabort+0x17/0x20 [ 50.029539][ T512] f2fs_allocate_data_block+0x159c/0x3a20 [ 50.035253][ T512] ? _raw_spin_trylock_bh+0x150/0x150 [ 50.040614][ T512] ? __dquot_alloc_space+0x2bd/0xb80 [ 50.045895][ T512] ? _raw_spin_unlock+0x4d/0x70 [ 50.050745][ T512] ? f2fs_inode_dirtied+0x26b/0x2a0 [ 50.056048][ T512] ? f2fs_io_type_to_rw_hint+0x1e0/0x1e0 [ 50.061758][ T512] ? f2fs_mark_inode_dirty_sync+0x110/0x140 [ 50.067734][ T512] ? inc_valid_block_count+0x562/0xa90 [ 50.073192][ T512] __allocate_data_block+0x553/0x9d0 [ 50.078468][ T512] ? f2fs_map_blocks+0x35a0/0x35a0 [ 50.083573][ T512] f2fs_map_blocks+0xda4/0x35a0 [ 50.088416][ T512] ? __kasan_check_write+0x14/0x20 [ 50.093519][ T512] ? f2fs_do_map_lock+0x2e0/0x2e0 [ 50.098534][ T512] ? __kasan_check_write+0x14/0x20 [ 50.103634][ T512] ? down_read_trylock+0x106/0x160 [ 50.108744][ T512] expand_inode_data+0x626/0x9a0 [ 50.113686][ T512] ? f2fs_insert_range+0x5d0/0x5d0 [ 50.118940][ T512] ? inode_dio_wait+0x25a/0x2d0 [ 50.123841][ T512] ? file_update_time+0x3d7/0x440 [ 50.128868][ T512] ? inode_owner_or_capable+0x140/0x140 [ 50.134410][ T512] f2fs_fallocate+0x42b/0x7e0 [ 50.139080][ T512] vfs_fallocate+0x4b4/0x590 [ 50.143660][ T512] do_vfs_ioctl+0x1154/0x14c0 [ 50.148340][ T512] ? __ia32_compat_sys_ioctl+0x8e0/0x8e0 [ 50.153977][ T512] ? has_cap_mac_admin+0x370/0x370 [ 50.159079][ T512] ? kmem_cache_free+0x100/0x2d0 [ 50.164103][ T512] ? selinux_file_ioctl+0x3a0/0x4d0 [ 50.169289][ T512] ? putname+0xfe/0x150 [ 50.173555][ T512] ? selinux_file_alloc_security+0x120/0x120 [ 50.179522][ T512] ? do_sys_openat2+0x68e/0x750 [ 50.184365][ T512] ? __fget_files+0x2c4/0x320 [ 50.189030][ T512] ? security_file_ioctl+0x84/0xa0 [ 50.194133][ T512] __se_sys_ioctl+0x9f/0x1a0 [ 50.198715][ T512] __x64_sys_ioctl+0x7b/0x90 [ 50.203303][ T512] do_syscall_64+0x31/0x40 [ 50.207719][ T512] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 50.213601][ T512] RIP: 0033:0x7fd9f380e0b9 [ 50.218016][ T512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.237618][ T512] RSP: 002b:00007fd9f3274028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.246020][ T512] RAX: ffffffffffffffda RBX: 00007fd9f3a3afa0 RCX: 00007fd9f380e0b9 [ 50.253991][ T512] RDX: 00002000000000c0 RSI: 0000000040305828 RDI: 0000000000000005 [ 50.262040][ T512] RBP: 00007fd9f38a09c4 R08: 0000000000000000 R09: 0000000000000000 [ 50.270092][ T512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.278056][ T512] R13: 0000000000000000 R14: 00007fd9f3a3afa0 R15: 00007fff4d10fa48 [ 50.286042][ T512] Modules linked in: [ 50.290785][ T512] ---[ end trace 369563503dc85211 ]--- [ 50.296316][ T24] audit: type=1400 audit(1768635812.430:115): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.296723][ T512] RIP: 0010:update_sit_entry+0x3eb/0xf50 [ 50.318028][ T24] audit: type=1400 audit(1768635812.430:116): avc: denied { write } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.323955][ T512] Code: 89 45 a8 49 01 c5 41 f6 d7 41 80 e7 07 44 89 f9 41 bf 01 00 00 00 41 d3 e7 4d 89 ee 49 c1 ee 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 06 84 c0 0f 85 a5 08 00 00 41 0f b6 5d 00 44 89 f8 41 [ 50.345046][ T24] audit: type=1400 audit(1768635812.430:117): avc: denied { add_name } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.364846][ T512] RSP: 0018:ffffc90000ee7330 EFLAGS: 00010246 [ 50.385803][ T24] audit: type=1400 audit(1768635812.430:118): avc: denied { create } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.386245][ T512] [ 50.392107][ T24] audit: type=1400 audit(1768635812.430:119): avc: denied { append open } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.412535][ T512] RAX: dffffc0000000000 RBX: ffff888119d673c8 RCX: 0000000000000007 [ 50.414814][ T24] audit: type=1400 audit(1768635812.430:120): avc: denied { getattr } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.437723][ T512] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888119d673c8 [ 50.476379][ T512] RBP: ffffc90000ee73b0 R08: ffff8881137f0000 R09: 0000000000000003 [ 50.484465][ T512] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000004000 [ 50.492462][ T512] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000080 [ 50.500453][ T512] FS: 00007fd9f32746c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 50.509385][ T512] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.515987][ T512] CR2: 00007fd9f385b800 CR3: 0000000117b36000 CR4: 00000000003506b0 [ 50.523980][ T512] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.531978][ T512] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.539963][ T512] Kernel panic - not syncing: Fatal exception [ 50.546336][ T512] Kernel Offset: disabled [ 50.550686][ T512] Rebooting in 86400 seconds..