[ 25.715940][ T45] device veth1_macvtap left promiscuous mode [ 25.721989][ T45] device veth0_vlan left promiscuous mode [ 27.247526][ T45] device bridge_slave_1 left promiscuous mode [ 27.253645][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.261172][ T45] device bridge_slave_0 left promiscuous mode [ 27.267439][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.275268][ T45] device veth1_macvtap left promiscuous mode [ 27.281433][ T45] device veth0_vlan left promiscuous mode [ 34.968934][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 34.968948][ T30] audit: type=1400 audit(1764254184.943:104): avc: denied { write } for pid=378 comm="sftp-server" path="pipe:[15344]" dev="pipefs" ino=15344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. 2025/11/27 14:36:33 parsed 1 programs [ 43.917519][ T30] audit: type=1400 audit(1764254193.893:105): avc: denied { unlink } for pid=398 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 44.139483][ T398] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.831798][ T30] audit: type=1401 audit(1764254194.803:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 44.941421][ T436] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.948600][ T436] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.955903][ T436] device bridge_slave_0 entered promiscuous mode [ 44.963146][ T436] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.970214][ T436] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.977592][ T436] device bridge_slave_1 entered promiscuous mode [ 45.021884][ T436] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.029230][ T436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.036728][ T436] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.043868][ T436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.060657][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.068210][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.075590][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.083506][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.092573][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.101085][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.108216][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.120245][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.128486][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.135669][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.145451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.155119][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.168131][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.179148][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.187386][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.194851][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.203185][ T436] device veth0_vlan entered promiscuous mode [ 45.212868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.222676][ T436] device veth1_macvtap entered promiscuous mode [ 45.231560][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.241932][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/11/27 14:36:35 executed programs: 0 [ 45.597222][ T468] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.604344][ T468] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.612037][ T468] device bridge_slave_0 entered promiscuous mode [ 45.622264][ T468] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.629510][ T468] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.636789][ T468] device bridge_slave_1 entered promiscuous mode [ 45.680196][ T468] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.687636][ T468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.694901][ T468] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.701937][ T468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.718695][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.726556][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.734235][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.743032][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.751333][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.758384][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.772240][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.780726][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.788033][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.807866][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.816239][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.829012][ T468] device veth0_vlan entered promiscuous mode [ 45.840167][ T468] device veth1_macvtap entered promiscuous mode [ 45.848056][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.859198][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.867613][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.875272][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.883215][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.900305][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.908986][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.928286][ T30] audit: type=1400 audit(1764254195.903:107): avc: denied { read write } for pid=480 comm="syz.2.17" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.953427][ T30] audit: type=1400 audit(1764254195.903:108): avc: denied { open } for pid=480 comm="syz.2.17" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.972624][ T481] loop2: detected capacity change from 0 to 2048 [ 45.979466][ T30] audit: type=1400 audit(1764254195.903:109): avc: denied { ioctl } for pid=480 comm="syz.2.17" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.080740][ T481] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 46.103324][ T30] audit: type=1400 audit(1764254196.073:110): avc: denied { mount } for pid=480 comm="syz.2.17" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 46.125143][ T480] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.17: bg 0: block 234: padding at end of block bitmap is not set [ 46.136991][ T30] audit: type=1400 audit(1764254196.073:111): avc: denied { write } for pid=480 comm="syz.2.17" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.161550][ T30] audit: type=1400 audit(1764254196.073:112): avc: denied { add_name } for pid=480 comm="syz.2.17" name="hugetlb.2MB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.184505][ T30] audit: type=1400 audit(1764254196.073:113): avc: denied { create } for pid=480 comm="syz.2.17" name="hugetlb.2MB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.208068][ T30] audit: type=1400 audit(1764254196.073:114): avc: denied { read append open } for pid=480 comm="syz.2.17" path="/0/file0/hugetlb.2MB.usage_in_bytes" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.303066][ T487] loop2: detected capacity change from 0 to 2048 [ 46.381450][ T487] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 46.408731][ T486] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.18: bg 0: block 234: padding at end of block bitmap is not set [ 46.478325][ T492] loop2: detected capacity change from 0 to 2048 [ 46.498852][ T492] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 46.526286][ T491] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.19: bg 0: block 234: padding at end of block bitmap is not set [ 46.603161][ T497] loop2: detected capacity change from 0 to 2048 [ 46.694548][ T497] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 46.732740][ T498] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm vhost-497: bg 0: block 234: padding at end of block bitmap is not set [ 46.749563][ T478] ------------[ cut here ]------------ [ 46.755160][ T478] kernel BUG at fs/ext4/inode.c:2747! [ 46.760699][ T478] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 46.766848][ T478] CPU: 0 PID: 478 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 46.774331][ T478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 46.784443][ T478] Workqueue: writeback wb_workfn (flush-7:2) [ 46.790457][ T478] RIP: 0010:ext4_writepages+0x2f75/0x2f90 [ 46.796170][ T478] Code: 00 00 00 e8 9d 73 8f ff 84 db 75 2c e8 04 71 8f ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 d6 f7 ff ff e8 eb 70 8f ff <0f> 0b e8 e4 70 8f ff e8 cb 28 27 ff eb a2 e8 d8 70 8f ff e8 bf 28 [ 46.816169][ T478] RSP: 0018:ffffc90001087100 EFLAGS: 00010293 [ 46.822399][ T478] RAX: ffffffff81d94df5 RBX: 0000008410000000 RCX: ffff8881176fcf00 [ 46.831011][ T478] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 46.839057][ T478] RBP: ffffc90001087470 R08: dffffc0000000000 R09: ffffed1025aa5814 [ 46.847595][ T478] R10: ffffed1025aa5814 R11: 1ffff11025aa5813 R12: dffffc0000000000 [ 46.855668][ T478] R13: 0000000000000001 R14: 0000008000000000 R15: ffff88812d52c330 [ 46.863729][ T478] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 46.872932][ T478] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.879784][ T478] CR2: 0000200000000480 CR3: 000000011b599000 CR4: 00000000003506b0 [ 46.887986][ T478] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.896389][ T478] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.904708][ T478] Call Trace: [ 46.907995][ T478] [ 46.910913][ T478] ? __kasan_check_write+0x14/0x20 [ 46.916031][ T478] ? pagecache_get_page+0xcb6/0xda0 [ 46.921229][ T478] ? __kasan_check_read+0x11/0x20 [ 46.926628][ T478] ? mark_page_accessed+0x3b6/0x8d0 [ 46.931900][ T478] ? __activate_page+0xd40/0xd40 [ 46.936829][ T478] ? ext4_readpage+0x220/0x220 [ 46.942308][ T478] ? __queue_work+0x913/0xc60 [ 46.947068][ T478] ? memcpy+0x56/0x70 [ 46.951044][ T478] ? copy_page_from_iter_atomic+0x784/0x1350 [ 46.957220][ T478] ? __kasan_check_read+0x11/0x20 [ 46.962254][ T478] ? __set_page_dirty_no_writeback+0xff/0x130 [ 46.968587][ T478] ? ext4_readpage+0x220/0x220 [ 46.973449][ T478] do_writepages+0x48a/0x6c0 [ 46.978133][ T478] ? update_curr+0x2f3/0x5b0 [ 46.982716][ T478] ? __writepage+0x130/0x130 [ 46.987292][ T478] ? enqueue_task_fair+0xaa7/0x2120 [ 46.992611][ T478] ? __kasan_check_write+0x14/0x20 [ 46.997710][ T478] ? _raw_spin_lock+0x8e/0xe0 [ 47.002631][ T478] __writeback_single_inode+0xd5/0x9c0 [ 47.008182][ T478] ? wbc_attach_and_unlock_inode+0x194/0x5f0 [ 47.014302][ T478] writeback_sb_inodes+0x9c0/0x1590 [ 47.019588][ T478] ? psi_task_change+0x212/0x370 [ 47.025115][ T478] ? queue_io+0x4c0/0x4c0 [ 47.029443][ T478] ? __kasan_check_read+0x11/0x20 [ 47.034460][ T478] ? queue_io+0x382/0x4c0 [ 47.038793][ T478] wb_writeback+0x3f1/0x980 [ 47.043503][ T478] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 47.049821][ T478] ? set_worker_desc+0x155/0x1c0 [ 47.055282][ T478] ? __kasan_check_write+0x14/0x20 [ 47.060382][ T478] wb_workfn+0x38f/0xe20 [ 47.064605][ T478] ? inode_wait_for_writeback+0x200/0x200 [ 47.070384][ T478] ? compat_start_thread+0x20/0x20 [ 47.075690][ T478] ? kvm_sched_clock_read+0x18/0x40 [ 47.080972][ T478] ? _raw_spin_unlock+0x4d/0x70 [ 47.085898][ T478] ? finish_task_switch+0x16b/0x780 [ 47.091076][ T478] ? __switch_to_asm+0x3a/0x60 [ 47.096086][ T478] ? __schedule+0xb76/0x14c0 [ 47.100673][ T478] process_one_work+0x6be/0xba0 [ 47.105524][ T478] worker_thread+0xa59/0x1200 [ 47.110359][ T478] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 47.115903][ T478] ? __kthread_parkme+0xac/0x200 [ 47.121091][ T478] kthread+0x411/0x500 [ 47.125505][ T478] ? worker_clr_flags+0x190/0x190 [ 47.131021][ T478] ? kthread_blkcg+0xd0/0xd0 [ 47.135849][ T478] ret_from_fork+0x1f/0x30 [ 47.140264][ T478] [ 47.143266][ T478] Modules linked in: [ 47.150619][ T478] ---[ end trace 826ddaa352cf0e02 ]--- [ 47.156279][ T478] RIP: 0010:ext4_writepages+0x2f75/0x2f90 [ 47.162383][ T478] Code: 00 00 00 e8 9d 73 8f ff 84 db 75 2c e8 04 71 8f ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 d6 f7 ff ff e8 eb 70 8f ff <0f> 0b e8 e4 70 8f ff e8 cb 28 27 ff eb a2 e8 d8 70 8f ff e8 bf 28 [ 47.182607][ T478] RSP: 0018:ffffc90001087100 EFLAGS: 00010293 [ 47.188926][ T478] RAX: ffffffff81d94df5 RBX: 0000008410000000 RCX: ffff8881176fcf00 [ 47.197154][ T478] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 47.205238][ T478] RBP: ffffc90001087470 R08: dffffc0000000000 R09: ffffed1025aa5814 [ 47.213733][ T478] R10: ffffed1025aa5814 R11: 1ffff11025aa5813 R12: dffffc0000000000 [ 47.221818][ T478] R13: 0000000000000001 R14: 0000008000000000 R15: ffff88812d52c330 [ 47.230802][ T478] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 47.240077][ T478] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.246789][ T478] CR2: 000000c005fde000 CR3: 000000000660f000 CR4: 00000000003506b0 [ 47.255026][ T478] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.263177][ T478] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.271693][ T478] Kernel panic - not syncing: Fatal exception [ 47.278192][ T478] Kernel Offset: disabled [ 47.282686][ T478] Rebooting in 86400 seconds..