Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. 2026/04/24 03:06:32 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 41.302775][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 41.302784][ T24] audit: type=1400 audit(1776999992.980:105): avc: denied { unlink } for pid=415 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 41.343532][ T24] audit: type=1400 audit(1776999993.020:106): avc: denied { write } for pid=417 comm="mkswap" path="pipe:[15727]" dev="pipefs" ino=15727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 41.366502][ T415] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 42.069750][ T442] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.076948][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.084844][ T442] device bridge_slave_0 entered promiscuous mode [ 42.092758][ T442] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.099785][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.107319][ T442] device bridge_slave_1 entered promiscuous mode [ 42.135177][ T442] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.142237][ T442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.149470][ T442] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.156627][ T442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.172086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.180118][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.187586][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.196965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.205630][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.212671][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.221236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.230410][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.237484][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.249136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.258717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.271068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.283016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.290956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.298636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.307010][ T442] device veth0_vlan entered promiscuous mode [ 42.319073][ T442] device veth1_macvtap entered promiscuous mode [ 42.326312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.337138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.346697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.414969][ T24] audit: type=1401 audit(1776999994.090:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 42.469829][ T24] audit: type=1400 audit(1776999994.140:108): avc: denied { create } for pid=460 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 2026/04/24 03:06:34 executed programs: 0 [ 42.769535][ T477] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.777041][ T477] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.784493][ T477] device bridge_slave_0 entered promiscuous mode [ 42.793999][ T477] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.801188][ T477] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.808763][ T477] device bridge_slave_1 entered promiscuous mode [ 42.836707][ T477] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.843870][ T477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.851431][ T477] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.858551][ T477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.877412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.885279][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.892988][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.908264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.916737][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.924159][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.932203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.940485][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.947637][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.955369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.971326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.979926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.990214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.998363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.006466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.014887][ T477] device veth0_vlan entered promiscuous mode [ 43.026276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.035968][ T477] device veth1_macvtap entered promiscuous mode [ 43.045433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.056551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.065505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.192477][ T482] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 43.203360][ T482] F2FS-fs (loop2): invalid crc value [ 43.210071][ T482] F2FS-fs (loop2): Found nat_bits in checkpoint [ 43.230453][ T482] F2FS-fs (loop2): recover fsync data on readonly fs [ 43.237411][ T482] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 43.244816][ T482] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 43.251754][ T482] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 43.259501][ T24] audit: type=1400 audit(1776999994.930:109): avc: denied { mount } for pid=481 comm="syz.2.17" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.259944][ T482] ====================================================== [ 43.259944][ T482] WARNING: the mand mount option is being deprecated and [ 43.259944][ T482] will be removed in v5.15! [ 43.259944][ T482] ====================================================== [ 43.290004][ T24] audit: type=1400 audit(1776999994.930:110): avc: denied { remount } for pid=481 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.308324][ T482] F2FS-fs (loop2): Try to recover all the superblocks, ret: 0 [ 43.335835][ T24] audit: type=1400 audit(1776999995.010:111): avc: denied { write } for pid=481 comm="syz.2.17" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.337164][ T482] ================================================================== [ 43.357382][ T24] audit: type=1400 audit(1776999995.010:112): avc: denied { add_name } for pid=481 comm="syz.2.17" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.365360][ T482] BUG: KASAN: null-ptr-deref in f2fs_issue_flush+0x161/0x8b0 [ 43.365368][ T482] Write of size 4 at addr 0000000000000024 by task syz.2.17/482 [ 43.365370][ T482] [ 43.365388][ T482] CPU: 0 PID: 482 Comm: syz.2.17 Not tainted syzkaller #0 [ 43.365393][ T482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 43.365403][ T482] Call Trace: [ 43.365416][ T482] __dump_stack+0x21/0x24 [ 43.365425][ T482] dump_stack_lvl+0x1a7/0x208 [ 43.365433][ T482] ? thaw_kernel_threads+0x220/0x220 [ 43.365442][ T482] ? show_regs_print_info+0x18/0x18 [ 43.365456][ T482] ? f2fs_issue_flush+0x161/0x8b0 [ 43.386797][ T24] audit: type=1400 audit(1776999995.010:113): avc: denied { create } for pid=481 comm="syz.2.17" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.393577][ T482] kasan_report+0xd8/0x130 [ 43.393586][ T482] ? f2fs_issue_flush+0x161/0x8b0 [ 43.393595][ T482] kasan_check_range+0x249/0x2a0 [ 43.393610][ T482] __kasan_check_write+0x14/0x20 [ 43.401621][ T24] audit: type=1400 audit(1776999995.010:114): avc: denied { write open } for pid=481 comm="syz.2.17" path="/0/file0/file1" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.403668][ T482] f2fs_issue_flush+0x161/0x8b0 [ 43.516619][ T482] ? is_inflight_io+0x480/0x480 [ 43.521859][ T482] ? radix_tree_lookup+0x1b8/0x1d0 [ 43.526995][ T482] ? __remove_ino_entry+0x14c/0x220 [ 43.532388][ T482] ? f2fs_wait_on_node_pages_writeback+0x33c/0x3a0 [ 43.538891][ T482] f2fs_do_sync_file+0x1325/0x1d80 [ 43.544075][ T482] ? f2fs_sync_file+0x150/0x150 [ 43.548901][ T482] ? balance_dirty_pages_ratelimited+0x5eb/0x1010 [ 43.555472][ T482] f2fs_sync_file+0x103/0x150 [ 43.560125][ T482] vfs_fsync_range+0x190/0x1a0 [ 43.564900][ T482] f2fs_file_write_iter+0x6d9/0x27a0 [ 43.570252][ T482] ? preempt_schedule_thunk+0x16/0x18 [ 43.576016][ T482] ? f2fs_file_read_iter+0xbc0/0xbc0 [ 43.581576][ T482] ? try_to_wake_up+0x638/0xd70 [ 43.586603][ T482] ? __kasan_check_write+0x14/0x20 [ 43.591856][ T482] ? wake_up_q+0x12c/0x1e0 [ 43.596286][ T482] ? futex_wake+0x4c4/0x570 [ 43.600777][ T482] ? futex_wait+0x6f0/0x6f0 [ 43.605268][ T482] ? avc_policy_seqno+0x1b/0x70 [ 43.610092][ T482] ? selinux_file_permission+0x2a5/0x510 [ 43.615806][ T482] ? security_file_permission+0x83/0xa0 [ 43.621502][ T482] ? iov_iter_init+0x3f/0x120 [ 43.626321][ T482] vfs_write+0x758/0xdc0 [ 43.630539][ T482] ? kernel_write+0x3c0/0x3c0 [ 43.635319][ T482] ? selinux_file_ioctl+0x3a0/0x4d0 [ 43.640503][ T482] ? __fget_files+0x2c4/0x320 [ 43.645431][ T482] ? __fdget+0x1a1/0x230 [ 43.649676][ T482] ? __x64_sys_pwrite64+0xf2/0x220 [ 43.654961][ T482] __x64_sys_pwrite64+0x197/0x220 [ 43.660062][ T482] ? ksys_pwrite64+0x1b0/0x1b0 [ 43.664803][ T482] ? __kasan_check_read+0x11/0x20 [ 43.670016][ T482] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 43.675731][ T482] do_syscall_64+0x31/0x40 [ 43.680417][ T482] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.686505][ T482] RIP: 0033:0x7f46954fbe79 [ 43.690902][ T482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.711640][ T482] RSP: 002b:00007f4695360028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 43.720142][ T482] RAX: ffffffffffffffda RBX: 00007f4695766fa0 RCX: 00007f46954fbe79 [ 43.728103][ T482] RDX: 0000000000000001 RSI: 0000200000005c80 RDI: 0000000000000005 [ 43.736160][ T482] RBP: 00007f469558eee0 R08: 0000000000000000 R09: 0000000000000000 [ 43.744404][ T482] R10: 0000000000c00000 R11: 0000000000000246 R12: 0000000000000000 [ 43.752354][ T482] R13: 00007f4695767038 R14: 00007f4695766fa0 R15: 00007ffe5ba4ad58 [ 43.760310][ T482] ================================================================== [ 43.768365][ T482] Disabling lock debugging due to kernel taint [ 43.776101][ T482] BUG: kernel NULL pointer dereference, address: 0000000000000024 [ 43.784018][ T482] #PF: supervisor write access in kernel mode [ 43.790059][ T482] #PF: error_code(0x0002) - not-present page [ 43.796099][ T482] PGD 11710c067 P4D 11710c067 PUD 0 [ 43.801486][ T482] Oops: 0002 [#1] PREEMPT SMP KASAN [ 43.806760][ T482] CPU: 1 PID: 482 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 43.815229][ T482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 43.825383][ T482] RIP: 0010:f2fs_issue_flush+0x172/0x8b0 [ 43.831205][ T482] Code: 4a 58 ff 4c 89 64 24 28 49 83 c4 24 4c 89 e7 be 04 00 00 00 e8 5f ca 92 ff 81 e3 00 04 00 00 0f 85 52 01 00 00 4c 89 64 24 08 41 ff 04 24 4c 8b 74 24 20 4d 8d ae 6c 0c 00 00 4d 89 ec 49 c1 [ 43.850866][ T482] RSP: 0018:ffffc90000bff5c0 EFLAGS: 00010246 [ 43.856923][ T482] RAX: ffff888115fee200 RBX: 0000000000000000 RCX: 0000000000000286 [ 43.864890][ T482] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000ffffffff [ 43.872939][ T482] RBP: ffffc90000bff6d0 R08: 0000000000000003 R09: 0000000000000004 [ 43.880901][ T482] R10: dffffc0000000000 R11: fffffbfff0dcf848 R12: 0000000000000024 [ 43.888947][ T482] R13: ffffc90000bff620 R14: 0000000000000000 R15: 1ffff9200017fec0 [ 43.897093][ T482] FS: 00007f46953606c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 43.906099][ T482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.912662][ T482] CR2: 0000000000000024 CR3: 0000000116db1000 CR4: 00000000003506a0 [ 43.920620][ T482] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.928581][ T482] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.936543][ T482] Call Trace: [ 43.939952][ T482] ? is_inflight_io+0x480/0x480 [ 43.944978][ T482] ? radix_tree_lookup+0x1b8/0x1d0 [ 43.950249][ T482] ? __remove_ino_entry+0x14c/0x220 [ 43.955481][ T482] ? f2fs_wait_on_node_pages_writeback+0x33c/0x3a0 [ 43.962065][ T482] f2fs_do_sync_file+0x1325/0x1d80 [ 43.967266][ T482] ? f2fs_sync_file+0x150/0x150 [ 43.972282][ T482] ? balance_dirty_pages_ratelimited+0x5eb/0x1010 [ 43.978768][ T482] f2fs_sync_file+0x103/0x150 [ 43.983451][ T482] vfs_fsync_range+0x190/0x1a0 [ 43.988394][ T482] f2fs_file_write_iter+0x6d9/0x27a0 [ 43.993667][ T482] ? preempt_schedule_thunk+0x16/0x18 [ 43.999051][ T482] ? f2fs_file_read_iter+0xbc0/0xbc0 [ 44.004314][ T482] ? try_to_wake_up+0x638/0xd70 [ 44.009411][ T482] ? __kasan_check_write+0x14/0x20 [ 44.014592][ T482] ? wake_up_q+0x12c/0x1e0 [ 44.019262][ T482] ? futex_wake+0x4c4/0x570 [ 44.023873][ T482] ? futex_wait+0x6f0/0x6f0 [ 44.028456][ T482] ? avc_policy_seqno+0x1b/0x70 [ 44.033454][ T482] ? selinux_file_permission+0x2a5/0x510 [ 44.039161][ T482] ? security_file_permission+0x83/0xa0 [ 44.044864][ T482] ? iov_iter_init+0x3f/0x120 [ 44.049516][ T482] vfs_write+0x758/0xdc0 [ 44.053897][ T482] ? kernel_write+0x3c0/0x3c0 [ 44.058909][ T482] ? selinux_file_ioctl+0x3a0/0x4d0 [ 44.064095][ T482] ? __fget_files+0x2c4/0x320 [ 44.068850][ T482] ? __fdget+0x1a1/0x230 [ 44.073180][ T482] ? __x64_sys_pwrite64+0xf2/0x220 [ 44.078380][ T482] __x64_sys_pwrite64+0x197/0x220 [ 44.083566][ T482] ? ksys_pwrite64+0x1b0/0x1b0 [ 44.088568][ T482] ? __kasan_check_read+0x11/0x20 [ 44.093781][ T482] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 44.099392][ T482] do_syscall_64+0x31/0x40 [ 44.104057][ T482] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.110026][ T482] RIP: 0033:0x7f46954fbe79 [ 44.114511][ T482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.134370][ T482] RSP: 002b:00007f4695360028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 44.142791][ T482] RAX: ffffffffffffffda RBX: 00007f4695766fa0 RCX: 00007f46954fbe79 [ 44.150930][ T482] RDX: 0000000000000001 RSI: 0000200000005c80 RDI: 0000000000000005 [ 44.158891][ T482] RBP: 00007f469558eee0 R08: 0000000000000000 R09: 0000000000000000 [ 44.167196][ T482] R10: 0000000000c00000 R11: 0000000000000246 R12: 0000000000000000 [ 44.175366][ T482] R13: 00007f4695767038 R14: 00007f4695766fa0 R15: 00007ffe5ba4ad58 [ 44.183447][ T482] Modules linked in: [ 44.187342][ T482] CR2: 0000000000000024 [ 44.191490][ T482] ---[ end trace 479ece41cf757306 ]--- [ 44.197220][ T482] RIP: 0010:f2fs_issue_flush+0x172/0x8b0 [ 44.203523][ T482] Code: 4a 58 ff 4c 89 64 24 28 49 83 c4 24 4c 89 e7 be 04 00 00 00 e8 5f ca 92 ff 81 e3 00 04 00 00 0f 85 52 01 00 00 4c 89 64 24 08 41 ff 04 24 4c 8b 74 24 20 4d 8d ae 6c 0c 00 00 4d 89 ec 49 c1 [ 44.223259][ T482] RSP: 0018:ffffc90000bff5c0 EFLAGS: 00010246 [ 44.229476][ T482] RAX: ffff888115fee200 RBX: 0000000000000000 RCX: 0000000000000286 [ 44.237448][ T482] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000ffffffff [ 44.245485][ T482] RBP: ffffc90000bff6d0 R08: 0000000000000003 R09: 0000000000000004 [ 44.253532][ T482] R10: dffffc0000000000 R11: fffffbfff0dcf848 R12: 0000000000000024 [ 44.262227][ T482] R13: ffffc90000bff620 R14: 0000000000000000 R15: 1ffff9200017fec0 [ 44.270625][ T482] FS: 00007f46953606c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 44.279705][ T482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.286276][ T482] CR2: 0000000000000024 CR3: 0000000116db1000 CR4: 00000000003506a0 [ 44.294486][ T482] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.302703][ T482] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.311712][ T482] Kernel panic - not syncing: Fatal exception [ 44.319066][ T482] Kernel Offset: disabled [ 44.323662][ T482] Rebooting in 86400 seconds..