Warning: Permanently added '10.128.1.220' (ED25519) to the list of known hosts. 2025/11/27 13:52:15 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 45.340688][ T30] audit: type=1400 audit(1764251535.727:105): avc: denied { unlink } for pid=401 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 45.385194][ T401] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.013613][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.020684][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.027932][ T424] device bridge_slave_0 entered promiscuous mode [ 46.035372][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.042490][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.049713][ T424] device bridge_slave_1 entered promiscuous mode [ 46.085927][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.092982][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.100234][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.107249][ T424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.123637][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.130834][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.138015][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.145783][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.155333][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.163415][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.170431][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.178758][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.186933][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.193957][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.204761][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.216417][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.228563][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.239402][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.247430][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.255015][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.263229][ T424] device veth0_vlan entered promiscuous mode [ 46.272983][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.281804][ T424] device veth1_macvtap entered promiscuous mode [ 46.291069][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.301026][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.334765][ T424] syz-executor (424) used greatest stack depth: 21760 bytes left [ 46.569391][ T30] audit: type=1401 audit(1764251536.947:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 46.617102][ T30] audit: type=1400 audit(1764251536.997:107): avc: denied { create } for pid=464 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 2025/11/27 13:52:17 executed programs: 0 [ 46.804626][ T469] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.811746][ T469] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.819316][ T469] device bridge_slave_0 entered promiscuous mode [ 46.826536][ T469] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.833604][ T469] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.841440][ T469] device bridge_slave_1 entered promiscuous mode [ 46.878390][ T469] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.885437][ T469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.892694][ T469] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.899698][ T469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.916078][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.923663][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.931082][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.939587][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.947839][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.954863][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.963629][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.971861][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.978858][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.989633][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.998614][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.011514][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.019829][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.031679][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.039553][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.047755][ T469] device veth0_vlan entered promiscuous mode [ 47.053938][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.061521][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.072023][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.080153][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.088797][ T469] device veth1_macvtap entered promiscuous mode [ 47.097236][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.104959][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.113432][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.122501][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.130954][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.158800][ T30] audit: type=1400 audit(1764251537.537:108): avc: denied { read write } for pid=479 comm="syz.2.17" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.179438][ T480] loop2: detected capacity change from 0 to 2048 [ 47.189528][ T30] audit: type=1400 audit(1764251537.537:109): avc: denied { open } for pid=479 comm="syz.2.17" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.231240][ T30] audit: type=1400 audit(1764251537.537:110): avc: denied { ioctl } for pid=479 comm="syz.2.17" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.257752][ T480] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.268701][ T30] audit: type=1400 audit(1764251537.647:111): avc: denied { mount } for pid=479 comm="syz.2.17" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.290486][ T479] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.17: bg 0: block 234: padding at end of block bitmap is not set [ 47.300131][ T30] audit: type=1400 audit(1764251537.647:112): avc: denied { write } for pid=479 comm="syz.2.17" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.325929][ T30] audit: type=1400 audit(1764251537.647:113): avc: denied { add_name } for pid=479 comm="syz.2.17" name="hugetlb.2MB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.349444][ T30] audit: type=1400 audit(1764251537.647:114): avc: denied { create } for pid=479 comm="syz.2.17" name="hugetlb.2MB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.436202][ T486] loop2: detected capacity change from 0 to 2048 [ 47.524558][ T486] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.541006][ T485] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.18: bg 0: block 234: padding at end of block bitmap is not set [ 47.641286][ T491] loop2: detected capacity change from 0 to 2048 [ 47.696457][ T491] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.711117][ T490] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.19: bg 0: block 234: padding at end of block bitmap is not set [ 47.726399][ T337] device bridge_slave_1 left promiscuous mode [ 47.732714][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.740384][ T337] device bridge_slave_0 left promiscuous mode [ 47.746561][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.754555][ T337] device veth1_macvtap left promiscuous mode [ 47.760573][ T337] device veth0_vlan left promiscuous mode [ 47.813689][ T496] loop2: detected capacity change from 0 to 2048 [ 47.831462][ T496] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.849583][ T497] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm vhost-496: bg 0: block 234: padding at end of block bitmap is not set [ 47.865482][ T45] ------------[ cut here ]------------ [ 47.870972][ T45] kernel BUG at fs/ext4/inode.c:2747! [ 47.876335][ T45] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 47.882371][ T45] CPU: 1 PID: 45 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 47.889711][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 47.899738][ T45] Workqueue: writeback wb_workfn (flush-7:2) [ 47.905710][ T45] RIP: 0010:ext4_writepages+0x2f75/0x2f90 [ 47.911408][ T45] Code: 00 00 00 e8 9d 73 8f ff 84 db 75 2c e8 04 71 8f ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 d6 f7 ff ff e8 eb 70 8f ff <0f> 0b e8 e4 70 8f ff e8 cb 28 27 ff eb a2 e8 d8 70 8f ff e8 bf 28 [ 47.930998][ T45] RSP: 0018:ffffc900002ef100 EFLAGS: 00010293 [ 47.937037][ T45] RAX: ffffffff81d94df5 RBX: 0000008410000000 RCX: ffff888104dfcf00 [ 47.944976][ T45] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 47.952917][ T45] RBP: ffffc900002ef470 R08: dffffc0000000000 R09: ffffed102553d528 [ 47.960862][ T45] R10: ffffed102553d528 R11: 1ffff1102553d527 R12: dffffc0000000000 [ 47.968803][ T45] R13: 0000000000000001 R14: 0000008000000000 R15: ffff88812a9eabd0 [ 47.976742][ T45] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 47.985638][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.992197][ T45] CR2: 000055558ea164a8 CR3: 000000011fc48000 CR4: 00000000003506a0 [ 48.000141][ T45] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.008081][ T45] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.016033][ T45] Call Trace: [ 48.019286][ T45] [ 48.022193][ T45] ? __kasan_check_write+0x14/0x20 [ 48.027278][ T45] ? pagecache_get_page+0xcb6/0xda0 [ 48.032448][ T45] ? __kasan_check_read+0x11/0x20 [ 48.037447][ T45] ? mark_page_accessed+0x3b6/0x8d0 [ 48.042786][ T45] ? __activate_page+0xd40/0xd40 [ 48.047690][ T45] ? ext4_readpage+0x220/0x220 [ 48.052423][ T45] ? __queue_work+0x913/0xc60 [ 48.057074][ T45] ? memcpy+0x56/0x70 [ 48.061026][ T45] ? copy_page_from_iter_atomic+0x784/0x1350 [ 48.066977][ T45] ? __kasan_check_read+0x11/0x20 [ 48.071970][ T45] ? __set_page_dirty_no_writeback+0xff/0x130 [ 48.078019][ T45] ? ext4_readpage+0x220/0x220 [ 48.082754][ T45] do_writepages+0x48a/0x6c0 [ 48.087316][ T45] ? update_curr+0x2f3/0x5b0 [ 48.091878][ T45] ? __writepage+0x130/0x130 [ 48.096439][ T45] ? enqueue_task_fair+0xaa7/0x2120 [ 48.101609][ T45] ? __kasan_check_write+0x14/0x20 [ 48.106690][ T45] ? _raw_spin_lock+0x8e/0xe0 [ 48.111340][ T45] __writeback_single_inode+0xd5/0x9c0 [ 48.116770][ T45] ? wbc_attach_and_unlock_inode+0x194/0x5f0 [ 48.122744][ T45] writeback_sb_inodes+0x9c0/0x1590 [ 48.127913][ T45] ? psi_task_change+0x212/0x370 [ 48.132834][ T45] ? queue_io+0x4c0/0x4c0 [ 48.137134][ T45] ? __kasan_check_read+0x11/0x20 [ 48.142126][ T45] ? queue_io+0x382/0x4c0 [ 48.146428][ T45] wb_writeback+0x3f1/0x980 [ 48.150900][ T45] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 48.156849][ T45] ? set_worker_desc+0x155/0x1c0 [ 48.161756][ T45] ? __kasan_check_write+0x14/0x20 [ 48.166838][ T45] wb_workfn+0x38f/0xe20 [ 48.171052][ T45] ? inode_wait_for_writeback+0x200/0x200 [ 48.176743][ T45] ? compat_start_thread+0x20/0x20 [ 48.181821][ T45] ? kvm_sched_clock_read+0x18/0x40 [ 48.186991][ T45] ? _raw_spin_unlock+0x4d/0x70 [ 48.191810][ T45] ? finish_task_switch+0x16b/0x780 [ 48.196982][ T45] ? __switch_to_asm+0x3a/0x60 [ 48.201717][ T45] ? __schedule+0xb76/0x14c0 [ 48.206277][ T45] process_one_work+0x6be/0xba0 [ 48.211098][ T45] worker_thread+0xa59/0x1200 [ 48.215744][ T45] ? __kthread_parkme+0xac/0x200 [ 48.220664][ T45] kthread+0x411/0x500 [ 48.224704][ T45] ? worker_clr_flags+0x190/0x190 [ 48.229696][ T45] ? kthread_blkcg+0xd0/0xd0 [ 48.234255][ T45] ret_from_fork+0x1f/0x30 [ 48.238652][ T45] [ 48.241660][ T45] Modules linked in: [ 48.247027][ T45] ---[ end trace fac1ec82eb2f79d3 ]--- [ 48.252763][ T45] RIP: 0010:ext4_writepages+0x2f75/0x2f90 [ 48.258465][ T45] Code: 00 00 00 e8 9d 73 8f ff 84 db 75 2c e8 04 71 8f ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 d6 f7 ff ff e8 eb 70 8f ff <0f> 0b e8 e4 70 8f ff e8 cb 28 27 ff eb a2 e8 d8 70 8f ff e8 bf 28 [ 48.278104][ T45] RSP: 0018:ffffc900002ef100 EFLAGS: 00010293 [ 48.284221][ T45] RAX: ffffffff81d94df5 RBX: 0000008410000000 RCX: ffff888104dfcf00 [ 48.292304][ T45] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 48.300401][ T45] RBP: ffffc900002ef470 R08: dffffc0000000000 R09: ffffed102553d528 [ 48.308369][ T45] R10: ffffed102553d528 R11: 1ffff1102553d527 R12: dffffc0000000000 [ 48.316513][ T45] R13: 0000000000000001 R14: 0000008000000000 R15: ffff88812a9eabd0 [ 48.324650][ T45] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 48.333620][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.340318][ T45] CR2: 000055558ea164a8 CR3: 000000010c705000 CR4: 00000000003506a0 [ 48.348287][ T45] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.356336][ T45] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.364328][ T45] Kernel panic - not syncing: Fatal exception [ 48.370586][ T45] Kernel Offset: disabled [ 48.375232][ T45] Rebooting in 86400 seconds..