[ 27.376936][ T45] device bridge_slave_0 left promiscuous mode [ 27.383506][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.391890][ T45] device veth1_macvtap left promiscuous mode [ 27.397812][ T45] device veth0_vlan left promiscuous mode [ 28.850837][ T45] device bridge_slave_1 left promiscuous mode [ 28.856806][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.864427][ T45] device bridge_slave_0 left promiscuous mode [ 28.870473][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.878462][ T45] device veth1_macvtap left promiscuous mode [ 28.884476][ T45] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.1.221' (ED25519) to the list of known hosts. 2024/08/21 05:49:12 ignoring optional flag "sandboxArg"="0" 2024/08/21 05:49:12 parsed 1 programs [ 45.190461][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 45.190476][ T30] audit: type=1400 audit(1724219352.606:95): avc: denied { unlink } for pid=427 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 45.228586][ T427] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.265290][ T30] audit: type=1400 audit(1724219352.676:96): avc: denied { mounton } for pid=433 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 45.460803][ T450] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.467741][ T450] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.475207][ T450] device bridge_slave_0 entered promiscuous mode [ 45.481956][ T450] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.488884][ T450] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.496399][ T450] device bridge_slave_1 entered promiscuous mode [ 45.543305][ T450] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.550271][ T450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.557332][ T450] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.564355][ T450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.583819][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.591501][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.598758][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.606343][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.606365][ T30] audit: type=1400 audit(1724219353.016:97): avc: denied { read } for pid=82 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 45.651354][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.660731][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.669068][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.675967][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.683390][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.692046][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.699087][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.706365][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.714224][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.724409][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.732708][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.740220][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.748379][ T450] device veth0_vlan entered promiscuous mode [ 45.759301][ T450] device veth1_macvtap entered promiscuous mode [ 45.766323][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.779823][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.788481][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2024/08/21 05:49:13 executed programs: 0 [ 46.132954][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.140064][ T478] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.147404][ T478] device bridge_slave_0 entered promiscuous mode [ 46.154603][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.161702][ T478] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.169021][ T478] device bridge_slave_1 entered promiscuous mode [ 46.222924][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.229965][ T478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.237024][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.243854][ T478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.265130][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.272698][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.280494][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.289189][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.297730][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.304644][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.316415][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.324651][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.331610][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.351012][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.360819][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.368547][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.379049][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.387650][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.395143][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.404775][ T478] device veth0_vlan entered promiscuous mode [ 46.418873][ T478] device veth1_macvtap entered promiscuous mode [ 46.425972][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.443143][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.451680][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.478314][ T483] loop0: detected capacity change from 0 to 2048 [ 46.501226][ T30] audit: type=1400 audit(1724219353.916:98): avc: denied { mounton } for pid=482 comm="syz-executor.0" path="/root/syzkaller-testdir1295213411/syzkaller.hHqRu6/0/file0" dev="sda1" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 46.562055][ T483] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 46.579745][ T30] audit: type=1400 audit(1724219353.986:99): avc: denied { mount } for pid=482 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 46.588790][ T482] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.602236][ T30] audit: type=1400 audit(1724219353.996:100): avc: denied { write } for pid=482 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.620240][ T482] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 46.638879][ T30] audit: type=1400 audit(1724219353.996:101): avc: denied { add_name } for pid=482 comm="syz-executor.0" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.651659][ T482] EXT4-fs (loop0): This should not happen!! Data will be lost [ 46.651659][ T482] [ 46.672948][ T30] audit: type=1400 audit(1724219353.996:102): avc: denied { create } for pid=482 comm="syz-executor.0" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.681863][ T482] EXT4-fs (loop0): Total free blocks count 0 [ 46.702030][ T30] audit: type=1400 audit(1724219353.996:103): avc: denied { read write open } for pid=482 comm="syz-executor.0" path="/root/syzkaller-testdir1295213411/syzkaller.hHqRu6/0/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.707458][ T482] EXT4-fs (loop0): Free/Dirty block details [ 46.736107][ T30] audit: type=1400 audit(1724219353.996:104): avc: denied { map } for pid=482 comm="syz-executor.0" path="/root/syzkaller-testdir1295213411/syzkaller.hHqRu6/0/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.741758][ T482] EXT4-fs (loop0): free_blocks=2415919104 [ 46.774541][ T482] EXT4-fs (loop0): dirty_blocks=16 [ 46.779667][ T482] EXT4-fs (loop0): Block reservation details [ 46.780107][ T45] device bridge_slave_1 left promiscuous mode [ 46.785612][ T482] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 46.791979][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.797850][ T482] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 46.816697][ T45] device bridge_slave_0 left promiscuous mode [ 46.822972][ T482] EXT4-fs (loop0): This should not happen!! Data will be lost [ 46.822972][ T482] [ 46.823027][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.840827][ T45] device veth1_macvtap left promiscuous mode [ 46.846908][ T45] device veth0_vlan left promiscuous mode [ 46.905966][ T488] loop0: detected capacity change from 0 to 2048 [ 46.991073][ T488] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.005311][ T487] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 47.021929][ T488] ------------[ cut here ]------------ [ 47.027244][ T488] kernel BUG at fs/ext4/inline.c:236! [ 47.032914][ T488] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 47.038760][ T488] CPU: 0 PID: 488 Comm: syz-executor.0 Not tainted 5.15.156-syzkaller-1070798-g29d153aabd54 #0 [ 47.049002][ T488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 47.058895][ T488] RIP: 0010:ext4_write_inline_data_end+0xe28/0xe30 [ 47.065319][ T488] Code: ff e8 dc ae cc ff e9 1b fa ff ff e8 82 9e f9 02 e8 cd 7f 8a ff 0f 0b e8 c6 7f 8a ff 0f 0b e8 bf 7f 8a ff 0f 0b e8 b8 7f 8a ff <0f> 0b 66 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 [ 47.085019][ T488] RSP: 0018:ffffc900023df700 EFLAGS: 00010293 [ 47.090918][ T488] RAX: ffffffff81e5e858 RBX: 000000000000003c RCX: ffff888112ec93c0 [ 47.098737][ T488] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000078 [ 47.106540][ T488] RBP: ffffc900023df848 R08: ffffffff81e5de2b R09: ffffed10225a0c4b [ 47.114459][ T488] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 47.122494][ T488] R13: 0000000000000078 R14: ffffea00047cdb00 R15: 0000000000000078 [ 47.130413][ T488] FS: 00007f53648c86c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 47.140132][ T488] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.146555][ T488] CR2: 0000000020000600 CR3: 0000000112731000 CR4: 00000000003506b0 [ 47.154366][ T488] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.162262][ T488] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.170174][ T488] Call Trace: [ 47.173283][ T488] [ 47.176061][ T488] ? __die_body+0x62/0xb0 [ 47.180325][ T488] ? die+0x88/0xb0 [ 47.183872][ T488] ? do_trap+0x103/0x330 [ 47.188041][ T488] ? ext4_write_inline_data_end+0xe28/0xe30 [ 47.194136][ T488] ? handle_invalid_op+0x95/0xc0 [ 47.198903][ T488] ? ext4_write_inline_data_end+0xe28/0xe30 [ 47.204887][ T488] ? exc_invalid_op+0x32/0x50 [ 47.209395][ T488] ? asm_exc_invalid_op+0x1b/0x20 [ 47.214258][ T488] ? ext4_write_inline_data_end+0x3fb/0xe30 [ 47.220256][ T488] ? ext4_write_inline_data_end+0xe28/0xe30 [ 47.226147][ T488] ? ext4_write_inline_data_end+0xe28/0xe30 [ 47.231880][ T488] ? ext4_set_page_dirty+0x1a0/0x1a0 [ 47.237014][ T488] ? put_page+0xc0/0xc0 [ 47.241109][ T488] ext4_da_write_end+0x3b2/0xab0 [ 47.245999][ T488] ? ext4_da_write_begin+0xc30/0xc30 [ 47.251115][ T488] generic_perform_write+0x3b4/0x5a0 [ 47.256256][ T488] ? grab_cache_page_write_begin+0xa0/0xa0 [ 47.261966][ T488] ? generic_write_checks+0x3b9/0x470 [ 47.267187][ T488] ext4_buffered_write_iter+0x48a/0x610 [ 47.272651][ T488] ext4_file_write_iter+0x443/0x1c80 [ 47.277956][ T488] ? sb_end_intwrite+0x120/0x120 [ 47.282806][ T488] ? __kasan_check_read+0x11/0x20 [ 47.287653][ T488] ? ext4_journal_check_start+0x16c/0x230 [ 47.293233][ T488] ? __ext4_journal_start_sb+0x153/0x2c0 [ 47.298767][ T488] ? avc_policy_seqno+0x1b/0x70 [ 47.303454][ T488] ? ext4_file_read_iter+0x4b0/0x4b0 [ 47.308573][ T488] ? fsnotify_perm+0x6a/0x5d0 [ 47.313091][ T488] ? iov_iter_init+0x53/0x190 [ 47.317598][ T488] vfs_write+0xd5d/0x1110 [ 47.321772][ T488] ? file_end_write+0x1c0/0x1c0 [ 47.326451][ T488] ? mutex_lock+0xb6/0x1e0 [ 47.330797][ T488] ? wait_for_completion_killable_timeout+0x10/0x10 [ 47.337222][ T488] ? __fdget_pos+0x2e7/0x3a0 [ 47.341638][ T488] ? ksys_write+0x77/0x2c0 [ 47.345897][ T488] ksys_write+0x199/0x2c0 [ 47.350107][ T488] ? __kasan_check_write+0x14/0x20 [ 47.355113][ T488] ? __ia32_sys_read+0x90/0x90 [ 47.359695][ T488] ? __kasan_check_read+0x11/0x20 [ 47.364569][ T488] __x64_sys_write+0x7b/0x90 [ 47.368988][ T488] x64_sys_call+0x2f/0x9a0 [ 47.373293][ T488] do_syscall_64+0x3b/0xb0 [ 47.378007][ T488] ? clear_bhb_loop+0x35/0x90 [ 47.382636][ T488] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.388358][ T488] RIP: 0033:0x7f5364d45ee9 [ 47.392747][ T488] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.412273][ T488] RSP: 002b:00007f53648c80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 47.420681][ T488] RAX: ffffffffffffffda RBX: 00007f5364e74f80 RCX: 00007f5364d45ee9 [ 47.428804][ T488] RDX: 0000000000000078 RSI: 0000000020000600 RDI: 0000000000000005 [ 47.436699][ T488] RBP: 00007f5364d9249e R08: 0000000000000000 R09: 0000000000000000 [ 47.444513][ T488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.452320][ T488] R13: 000000000000000b R14: 00007f5364e74f80 R15: 00007fff5a406ff8 [ 47.460396][ T488] [ 47.463254][ T488] Modules linked in: [ 47.467104][ T488] ---[ end trace d18e3a31898b2638 ]--- [ 47.472300][ T488] RIP: 0010:ext4_write_inline_data_end+0xe28/0xe30 [ 47.478711][ T488] Code: ff e8 dc ae cc ff e9 1b fa ff ff e8 82 9e f9 02 e8 cd 7f 8a ff 0f 0b e8 c6 7f 8a ff 0f 0b e8 bf 7f 8a ff 0f 0b e8 b8 7f 8a ff <0f> 0b 66 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 [ 47.498396][ T488] RSP: 0018:ffffc900023df700 EFLAGS: 00010293 [ 47.504245][ T488] RAX: ffffffff81e5e858 RBX: 000000000000003c RCX: ffff888112ec93c0 [ 47.512087][ T488] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000078 [ 47.519914][ T488] RBP: ffffc900023df848 R08: ffffffff81e5de2b R09: ffffed10225a0c4b [ 47.527753][ T488] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 47.535701][ T488] R13: 0000000000000078 R14: ffffea00047cdb00 R15: 0000000000000078 [ 47.543555][ T488] FS: 00007f53648c86c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 47.552328][ T488] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.558726][ T488] CR2: 0000000020000600 CR3: 0000000112731000 CR4: 00000000003506b0 [ 47.566582][ T488] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.574374][ T488] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.582228][ T488] Kernel panic - not syncing: Fatal exception [ 47.588317][ T488] Kernel Offset: disabled [ 47.592458][ T488] Rebooting in 86400 seconds..