Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. 2026/01/27 22:23:42 parsed 1 programs [ 46.701647][ T30] audit: type=1400 audit(1769552623.711:105): avc: denied { unlink } for pid=400 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 46.751269][ T400] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.813543][ T30] audit: type=1401 audit(1769552624.821:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 47.863352][ T446] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.871037][ T446] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.878591][ T446] device bridge_slave_0 entered promiscuous mode [ 47.885768][ T446] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.893255][ T446] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.900641][ T446] device bridge_slave_1 entered promiscuous mode [ 47.952944][ T446] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.960306][ T446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.967688][ T446] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.974844][ T446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.001275][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.011293][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.018824][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.029901][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.041168][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.049237][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.066032][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.074729][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.081926][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.094772][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.108814][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.123901][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.135791][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.144578][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.152781][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.161273][ T446] device veth0_vlan entered promiscuous mode [ 48.177451][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.186855][ T446] device veth1_macvtap entered promiscuous mode [ 48.196224][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.206933][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/01/27 22:23:45 executed programs: 0 [ 48.567582][ T470] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.575122][ T470] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.583325][ T470] device bridge_slave_0 entered promiscuous mode [ 48.590586][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.598006][ T470] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.605642][ T470] device bridge_slave_1 entered promiscuous mode [ 48.655151][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.662726][ T470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.670096][ T470] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.677492][ T470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.696443][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.704460][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.711967][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.722070][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.730570][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.737746][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.747051][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.755918][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.763166][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.775283][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.790324][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.805227][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.816849][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.825401][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.834032][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.847363][ T470] device veth0_vlan entered promiscuous mode [ 48.857882][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.867693][ T470] device veth1_macvtap entered promiscuous mode [ 48.877779][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.895998][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.007352][ T482] loop2: detected capacity change from 0 to 40427 [ 49.094962][ T482] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 49.112664][ T482] F2FS-fs (loop2): invalid crc value [ 49.119548][ T482] F2FS-fs (loop2): Found nat_bits in checkpoint [ 49.154827][ T482] F2FS-fs (loop2): recover fsync data on readonly fs [ 49.162249][ T482] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 49.169292][ T482] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 49.176884][ T482] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 49.184967][ T30] audit: type=1400 audit(1769552626.191:107): avc: denied { mount } for pid=481 comm="syz.2.17" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.201946][ T482] ======================================================= [ 49.201946][ T482] WARNING: The mand mount option has been deprecated and [ 49.201946][ T482] and is ignored by this kernel. Remove the mand [ 49.201946][ T482] option from the mount to silence this warning. [ 49.201946][ T482] ======================================================= [ 49.208417][ T30] audit: type=1400 audit(1769552626.211:108): avc: denied { remount } for pid=481 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.264645][ T482] F2FS-fs (loop2): Try to recover all the superblocks, ret: 0 [ 49.274848][ T482] ================================================================== [ 49.281574][ T30] audit: type=1400 audit(1769552626.281:109): avc: denied { write } for pid=481 comm="syz.2.17" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.283126][ T482] BUG: KASAN: null-ptr-deref in f2fs_issue_flush+0x161/0x8b0 [ 49.305630][ T30] audit: type=1400 audit(1769552626.281:110): avc: denied { add_name } for pid=481 comm="syz.2.17" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.313237][ T482] Write of size 4 at addr 0000000000000024 by task syz.2.17/482 [ 49.313254][ T482] [ 49.313268][ T482] CPU: 1 PID: 482 Comm: syz.2.17 Not tainted syzkaller #0 [ 49.335047][ T30] audit: type=1400 audit(1769552626.281:111): avc: denied { create } for pid=481 comm="syz.2.17" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.341538][ T482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.341561][ T482] Call Trace: [ 49.341567][ T482] [ 49.341575][ T482] __dump_stack+0x21/0x30 [ 49.344945][ T30] audit: type=1400 audit(1769552626.281:112): avc: denied { read write open } for pid=481 comm="syz.2.17" path="/0/file0/file1" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.351317][ T482] dump_stack_lvl+0x110/0x170 [ 49.351352][ T482] ? show_regs_print_info+0x20/0x20 [ 49.351374][ T482] ? f2fs_issue_flush+0x161/0x8b0 [ 49.351394][ T482] kasan_report+0xe7/0x140 [ 49.351413][ T482] ? f2fs_issue_flush+0x161/0x8b0 [ 49.351434][ T482] kasan_check_range+0x249/0x2a0 [ 49.351453][ T482] __kasan_check_write+0x14/0x20 [ 49.351471][ T482] f2fs_issue_flush+0x161/0x8b0 [ 49.458764][ T482] ? is_inflight_io+0x480/0x480 [ 49.463763][ T482] ? radix_tree_lookup+0x276/0x290 [ 49.469159][ T482] ? __remove_ino_entry+0x14c/0x220 [ 49.474620][ T482] ? f2fs_wait_on_node_pages_writeback+0x30a/0x370 [ 49.481256][ T482] f2fs_do_sync_file+0x11aa/0x1bb0 [ 49.486491][ T482] ? __kasan_check_read+0x11/0x20 [ 49.491656][ T482] ? f2fs_sync_file+0x150/0x150 [ 49.496537][ T482] __f2fs_ioctl+0x31ac/0xb580 [ 49.501686][ T482] ? avc_flush+0x2b0/0x2b0 [ 49.506316][ T482] ? slab_free_freelist_hook+0xc2/0x190 [ 49.511886][ T482] ? kmem_cache_free+0x100/0x320 [ 49.517030][ T482] ? __asan_set_shadow_00+0xe/0x10 [ 49.522341][ T482] ? do_vfs_ioctl+0x1c19/0x1d80 [ 49.527428][ T482] ? __ia32_compat_sys_ioctl+0x900/0x900 [ 49.533292][ T482] ? futex_exit_release+0x1d0/0x1d0 [ 49.538808][ T482] ? f2fs_ioctl+0x240/0x240 [ 49.543523][ T482] ? ioctl_has_perm+0x1b8/0x4f0 [ 49.548673][ T482] ? ioctl_has_perm+0x3ab/0x4f0 [ 49.554152][ T482] ? has_cap_mac_admin+0x370/0x370 [ 49.559472][ T482] ? __kasan_slab_free+0x11/0x20 [ 49.564521][ T482] ? slab_free_freelist_hook+0xc2/0x190 [ 49.570180][ T482] ? putname+0x111/0x160 [ 49.574519][ T482] ? kmem_cache_free+0x100/0x320 [ 49.579630][ T482] ? selinux_file_ioctl+0x3a0/0x4d0 [ 49.584852][ T482] ? selinux_file_alloc_security+0x120/0x120 [ 49.591064][ T482] ? __fget_files+0x2c4/0x320 [ 49.596117][ T482] f2fs_ioctl+0x149/0x240 [ 49.600578][ T482] ? f2fs_precache_extents+0x290/0x290 [ 49.606273][ T482] __se_sys_ioctl+0x121/0x1a0 [ 49.611236][ T482] __x64_sys_ioctl+0x7b/0x90 [ 49.615949][ T482] x64_sys_call+0x2f/0x9a0 [ 49.620391][ T482] do_syscall_64+0x4c/0xa0 [ 49.625346][ T482] ? clear_bhb_loop+0x50/0xa0 [ 49.630307][ T482] ? clear_bhb_loop+0x50/0xa0 [ 49.635377][ T482] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.641311][ T482] RIP: 0033:0x7f62aba90539 [ 49.645761][ T482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.665929][ T482] RSP: 002b:00007f62ab8f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.674463][ T482] RAX: ffffffffffffffda RBX: 00007f62abcfbfa0 RCX: 00007f62aba90539 [ 49.683002][ T482] RDX: 0000000000000000 RSI: 000000000000f502 RDI: 0000000000000005 [ 49.691019][ T482] RBP: 00007f62abb23ee0 R08: 0000000000000000 R09: 0000000000000000 [ 49.699032][ T482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.707468][ T482] R13: 00007f62abcfc038 R14: 00007f62abcfbfa0 R15: 00007ffd5eca5e58 [ 49.716224][ T482] [ 49.719452][ T482] ================================================================== [ 49.727951][ T482] Disabling lock debugging due to kernel taint [ 49.736256][ T482] BUG: kernel NULL pointer dereference, address: 0000000000000024 [ 49.743974][ T30] audit: type=1400 audit(1769552626.281:113): avc: denied { ioctl } for pid=481 comm="syz.2.17" path="/0/file0/file1" dev="loop2" ino=10 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.744464][ T482] #PF: supervisor write access in kernel mode [ 49.773928][ T30] audit: type=1400 audit(1769552626.781:114): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 49.775238][ T482] #PF: error_code(0x0002) - not-present page [ 49.803650][ T482] PGD 116b76067 P4D 116b76067 PUD 0 [ 49.809176][ T482] Oops: 0002 [#1] PREEMPT SMP KASAN [ 49.814526][ T482] CPU: 0 PID: 482 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 49.824153][ T482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.835022][ T482] RIP: 0010:f2fs_issue_flush+0x172/0x8b0 [ 49.840976][ T482] Code: 03 52 ff 4c 89 64 24 28 49 83 c4 24 4c 89 e7 be 04 00 00 00 e8 7f 2c 91 ff 81 e3 00 04 00 00 0f 85 52 01 00 00 4c 89 64 24 08 41 ff 04 24 4c 8b 74 24 20 4d 8d ae 3c 0c 00 00 4d 89 ec 49 c1 [ 49.862076][ T482] RSP: 0018:ffffc900020576c0 EFLAGS: 00010246 [ 49.868418][ T482] RAX: ffff8881186f4f00 RBX: 0000000000000000 RCX: ffff8881186f4f00 [ 49.876709][ T482] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000ffffffff [ 49.885016][ T482] RBP: ffffc900020577d0 R08: 0000000000000003 R09: 0000000000000004 [ 49.893330][ T482] R10: dffffc0000000000 R11: fffffbfff0e18a4c R12: 0000000000000024 [ 49.901805][ T482] R13: ffffc90002057720 R14: 0000000000000000 R15: 1ffff9200040aee0 [ 49.910006][ T482] FS: 00007f62ab8f56c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 49.919713][ T482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.926526][ T482] CR2: 0000000000000024 CR3: 0000000112c00000 CR4: 00000000003506b0 [ 49.934980][ T482] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.943048][ T482] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.951395][ T482] Call Trace: [ 49.954677][ T482] [ 49.957620][ T482] ? is_inflight_io+0x480/0x480 [ 49.962512][ T482] ? radix_tree_lookup+0x276/0x290 [ 49.967911][ T482] ? __remove_ino_entry+0x14c/0x220 [ 49.973308][ T482] ? f2fs_wait_on_node_pages_writeback+0x30a/0x370 [ 49.980122][ T482] f2fs_do_sync_file+0x11aa/0x1bb0 [ 49.985245][ T482] ? __kasan_check_read+0x11/0x20 [ 49.990477][ T482] ? f2fs_sync_file+0x150/0x150 [ 49.996034][ T482] __f2fs_ioctl+0x31ac/0xb580 [ 50.001072][ T482] ? avc_flush+0x2b0/0x2b0 [ 50.005885][ T482] ? slab_free_freelist_hook+0xc2/0x190 [ 50.011773][ T482] ? kmem_cache_free+0x100/0x320 [ 50.017035][ T482] ? __asan_set_shadow_00+0xe/0x10 [ 50.022726][ T482] ? do_vfs_ioctl+0x1c19/0x1d80 [ 50.027996][ T482] ? __ia32_compat_sys_ioctl+0x900/0x900 [ 50.034068][ T482] ? futex_exit_release+0x1d0/0x1d0 [ 50.039664][ T482] ? f2fs_ioctl+0x240/0x240 [ 50.045086][ T482] ? ioctl_has_perm+0x1b8/0x4f0 [ 50.050126][ T482] ? ioctl_has_perm+0x3ab/0x4f0 [ 50.055169][ T482] ? has_cap_mac_admin+0x370/0x370 [ 50.060373][ T482] ? __kasan_slab_free+0x11/0x20 [ 50.065561][ T482] ? slab_free_freelist_hook+0xc2/0x190 [ 50.071133][ T482] ? putname+0x111/0x160 [ 50.075729][ T482] ? kmem_cache_free+0x100/0x320 [ 50.080965][ T482] ? selinux_file_ioctl+0x3a0/0x4d0 [ 50.086613][ T482] ? selinux_file_alloc_security+0x120/0x120 [ 50.092680][ T482] ? __fget_files+0x2c4/0x320 [ 50.097767][ T482] f2fs_ioctl+0x149/0x240 [ 50.102494][ T482] ? f2fs_precache_extents+0x290/0x290 [ 50.108059][ T482] __se_sys_ioctl+0x121/0x1a0 [ 50.113120][ T482] __x64_sys_ioctl+0x7b/0x90 [ 50.118018][ T482] x64_sys_call+0x2f/0x9a0 [ 50.122771][ T482] do_syscall_64+0x4c/0xa0 [ 50.127729][ T482] ? clear_bhb_loop+0x50/0xa0 [ 50.132709][ T482] ? clear_bhb_loop+0x50/0xa0 [ 50.137419][ T482] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.144140][ T482] RIP: 0033:0x7f62aba90539 [ 50.149344][ T482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.170565][ T482] RSP: 002b:00007f62ab8f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.179423][ T482] RAX: ffffffffffffffda RBX: 00007f62abcfbfa0 RCX: 00007f62aba90539 [ 50.187591][ T482] RDX: 0000000000000000 RSI: 000000000000f502 RDI: 0000000000000005 [ 50.196029][ T482] RBP: 00007f62abb23ee0 R08: 0000000000000000 R09: 0000000000000000 [ 50.204368][ T482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.212747][ T482] R13: 00007f62abcfc038 R14: 00007f62abcfbfa0 R15: 00007ffd5eca5e58 [ 50.221141][ T482] [ 50.224188][ T482] Modules linked in: [ 50.228293][ T482] CR2: 0000000000000024 [ 50.232652][ T482] ---[ end trace bf949ca981f9b737 ]--- [ 50.238343][ T482] RIP: 0010:f2fs_issue_flush+0x172/0x8b0 [ 50.244513][ T482] Code: 03 52 ff 4c 89 64 24 28 49 83 c4 24 4c 89 e7 be 04 00 00 00 e8 7f 2c 91 ff 81 e3 00 04 00 00 0f 85 52 01 00 00 4c 89 64 24 08 41 ff 04 24 4c 8b 74 24 20 4d 8d ae 3c 0c 00 00 4d 89 ec 49 c1 [ 50.264917][ T482] RSP: 0018:ffffc900020576c0 EFLAGS: 00010246 [ 50.271197][ T482] RAX: ffff8881186f4f00 RBX: 0000000000000000 RCX: ffff8881186f4f00 [ 50.279356][ T482] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000ffffffff [ 50.287521][ T482] RBP: ffffc900020577d0 R08: 0000000000000003 R09: 0000000000000004 [ 50.296057][ T482] R10: dffffc0000000000 R11: fffffbfff0e18a4c R12: 0000000000000024 [ 50.304377][ T482] R13: ffffc90002057720 R14: 0000000000000000 R15: 1ffff9200040aee0 [ 50.312690][ T482] FS: 00007f62ab8f56c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 50.322476][ T482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.329620][ T482] CR2: 0000000000000024 CR3: 0000000112c00000 CR4: 00000000003506b0 [ 50.337894][ T482] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.346562][ T482] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.354855][ T482] Kernel panic - not syncing: Fatal exception [ 50.362410][ T482] Kernel Offset: disabled [ 50.367656][ T482] Rebooting in 86400 seconds..