Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts. 2025/07/11 13:26:56 ignoring optional flag "sandboxArg"="0" 2025/07/11 13:26:57 parsed 1 programs [ 53.213609][ T24] kauditd_printk_skb: 30 callbacks suppressed [ 53.213627][ T24] audit: type=1400 audit(1752240418.370:104): avc: denied { unlink } for pid=406 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 53.253737][ T406] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.802172][ T24] audit: type=1401 audit(1752240418.950:105): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 54.187466][ T444] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.195223][ T444] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.202729][ T444] device bridge_slave_0 entered promiscuous mode [ 54.217015][ T444] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.224253][ T444] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.231709][ T444] device bridge_slave_1 entered promiscuous mode [ 54.272208][ T444] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.279346][ T444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.286652][ T444] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.293816][ T444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.311528][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.319063][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.326718][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.335209][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.344283][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.352657][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.359733][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.372231][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.380714][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.387788][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.398650][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.408133][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.421489][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.432633][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.440978][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.448721][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.457483][ T444] device veth0_vlan entered promiscuous mode [ 54.468007][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.477417][ T444] device veth1_macvtap entered promiscuous mode [ 54.486747][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.497317][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.533126][ T24] audit: type=1400 audit(1752240419.690:106): avc: denied { create } for pid=451 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 2025/07/11 13:27:00 executed programs: 0 [ 54.914529][ T24] audit: type=1400 audit(1752240420.070:107): avc: denied { write } for pid=397 comm="syz-execprog" path="pipe:[15153]" dev="pipefs" ino=15153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 54.960005][ T466] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.967216][ T466] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.974690][ T466] device bridge_slave_0 entered promiscuous mode [ 54.986400][ T466] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.993514][ T466] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.001063][ T466] device bridge_slave_1 entered promiscuous mode [ 55.036896][ T466] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.044009][ T466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.051768][ T466] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.059057][ T466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.082268][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.090353][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.097739][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.110524][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.118790][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.125936][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.134565][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.143080][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.150330][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.168283][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.183424][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.191538][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.203286][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.211904][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.226186][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.235090][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.243986][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.251560][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.260237][ T466] device veth0_vlan entered promiscuous mode [ 55.271785][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.280328][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.291183][ T466] device veth1_macvtap entered promiscuous mode [ 55.301043][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.309116][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.318267][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.328278][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.336860][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.358889][ T24] audit: type=1400 audit(1752240420.510:108): avc: denied { read write } for pid=482 comm="syz.2.16" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.384176][ T24] audit: type=1400 audit(1752240420.510:109): avc: denied { open } for pid=482 comm="syz.2.16" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.408689][ T24] audit: type=1400 audit(1752240420.510:110): avc: denied { ioctl } for pid=482 comm="syz.2.16" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.487373][ T483] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue [ 55.508251][ T24] audit: type=1400 audit(1752240420.670:111): avc: denied { mount } for pid=482 comm="syz.2.16" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.530287][ T484] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm vhost-483: bg 0: block 234: padding at end of block bitmap is not set [ 55.530449][ T24] audit: type=1400 audit(1752240420.670:112): avc: denied { write } for pid=482 comm="syz.2.16" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.567295][ T24] audit: type=1400 audit(1752240420.670:113): avc: denied { add_name } for pid=482 comm="syz.2.16" name="hugetlb.2MB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.710929][ T489] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue [ 55.732881][ T488] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.17: bg 0: block 234: padding at end of block bitmap is not set [ 55.748003][ T490] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm vhost-489: lblock 0 mapped to illegal pblock 62218 (length 1) [ 55.748309][ T488] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm syz.2.17: lblock 0 mapped to illegal pblock 62218 (length 1) [ 55.764154][ T490] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm vhost-489: lblock 0 mapped to illegal pblock 62218 (length 1) [ 55.778390][ T488] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm syz.2.17: lblock 0 mapped to illegal pblock 62218 (length 1) [ 55.794373][ T490] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm vhost-489: lblock 0 mapped to illegal pblock 62218 (length 1) [ 55.808570][ T488] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm syz.2.17: lblock 0 mapped to illegal pblock 62218 (length 1) [ 55.823186][ T490] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm vhost-489: lblock 0 mapped to illegal pblock 62218 (length 1) [ 55.838173][ T488] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm syz.2.17: lblock 0 mapped to illegal pblock 62218 (length 1) [ 55.852156][ T490] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm vhost-489: lblock 0 mapped to illegal pblock 62218 (length 1) [ 56.014894][ T495] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue [ 56.037290][ T494] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.18: bg 0: block 234: padding at end of block bitmap is not set [ 56.147344][ T501] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue [ 56.194444][ T502] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm vhost-501: bg 0: block 234: padding at end of block bitmap is not set [ 56.257760][ T343] device bridge_slave_1 left promiscuous mode [ 56.264325][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.272258][ T343] device bridge_slave_0 left promiscuous mode [ 56.279038][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.287853][ T343] device veth1_macvtap left promiscuous mode [ 56.293978][ T343] device veth0_vlan left promiscuous mode [ 56.334317][ T507] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue [ 56.394025][ T508] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm vhost-507: bg 0: block 234: padding at end of block bitmap is not set [ 56.410899][ T49] ------------[ cut here ]------------ [ 56.416449][ T49] kernel BUG at fs/ext4/inode.c:2778! [ 56.421889][ T49] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 56.427975][ T49] CPU: 1 PID: 49 Comm: kworker/u4:2 Not tainted 5.10.238-syzkaller-1007487-g59e9a7228857 #0 [ 56.438030][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.448216][ T49] Workqueue: writeback wb_workfn (flush-7:2) [ 56.454207][ T49] RIP: 0010:ext4_writepages+0x2ddb/0x2e00 [ 56.459917][ T49] Code: 39 94 ff 84 db 75 31 e8 b3 36 94 ff 49 bc 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 8b 5c 24 38 e9 21 f8 ff ff e8 95 36 94 ff <0f> 0b e8 8e 36 94 ff e8 65 0d 31 ff eb 98 e8 82 36 94 ff e8 59 0d [ 56.479605][ T49] RSP: 0018:ffffc900009e7180 EFLAGS: 00010293 [ 56.485754][ T49] RAX: ffffffff81cf5d7b RBX: 0000008410000000 RCX: ffff888101db3b40 [ 56.493875][ T49] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 56.501939][ T49] RBP: ffffc900009e74f0 R08: dffffc0000000000 R09: ffffed102495de12 [ 56.509935][ T49] R10: ffffed102495de12 R11: 1ffff1102495de11 R12: dffffc0000000000 [ 56.518027][ T49] R13: ffff888118d1e000 R14: 0000008000000000 R15: ffff888124aef088 [ 56.526004][ T49] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 56.535182][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.541859][ T49] CR2: 0000000000000002 CR3: 000000011cd66000 CR4: 00000000003506a0 [ 56.549997][ T49] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.558081][ T49] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.566133][ T49] Call Trace: [ 56.569424][ T49] ? netif_rx_internal+0xdb/0x370 [ 56.574554][ T49] ? eth_get_headlen+0x1f0/0x1f0 [ 56.579510][ T49] ? debug_smp_processor_id+0x17/0x20 [ 56.585003][ T49] ? loopback_xmit+0x2f4/0x400 [ 56.589766][ T49] ? dev_hard_start_xmit+0x5fe/0x670 [ 56.595053][ T49] ? ext4_readpage+0x220/0x220 [ 56.599984][ T49] ? __local_bh_enable_ip+0x53/0x80 [ 56.605175][ T49] ? local_bh_enable+0x1f/0x30 [ 56.609954][ T49] ? __dev_queue_xmit+0x15a0/0x2540 [ 56.615241][ T49] ? stack_trace_save+0xe0/0xe0 [ 56.620088][ T49] ? __kasan_check_read+0x11/0x20 [ 56.625111][ T49] ? ext4_readpage+0x220/0x220 [ 56.629871][ T49] do_writepages+0x12a/0x270 [ 56.634548][ T49] ? __writepage+0x130/0x130 [ 56.639135][ T49] ? __kasan_check_write+0x14/0x20 [ 56.644257][ T49] ? _raw_spin_lock+0x8e/0xe0 [ 56.648964][ T49] ? __kasan_check_write+0x14/0x20 [ 56.654548][ T49] ? _raw_spin_lock+0x8e/0xe0 [ 56.659423][ T49] __writeback_single_inode+0xd5/0xa20 [ 56.664978][ T49] ? wbc_attach_and_unlock_inode+0x171/0x590 [ 56.671393][ T49] writeback_sb_inodes+0x860/0x1400 [ 56.676631][ T49] ? queue_io+0x4c0/0x4c0 [ 56.680972][ T49] ? __kasan_check_read+0x11/0x20 [ 56.686039][ T49] ? queue_io+0x385/0x4c0 [ 56.690867][ T49] wb_writeback+0x3e3/0xb90 [ 56.695402][ T49] ? wb_io_lists_depopulated+0x180/0x180 [ 56.701047][ T49] ? set_worker_desc+0x155/0x1c0 [ 56.705996][ T49] ? __kasan_check_write+0x14/0x20 [ 56.711132][ T49] wb_workfn+0x38f/0xe20 [ 56.715400][ T49] ? inode_wait_for_writeback+0x200/0x200 [ 56.721144][ T49] ? _raw_spin_unlock_irq+0x4e/0x70 [ 56.726390][ T49] ? finish_task_switch+0x12e/0x5a0 [ 56.731612][ T49] ? switch_mm_irqs_off+0x34d/0x9a0 [ 56.736825][ T49] ? __switch_to_asm+0x34/0x60 [ 56.741605][ T49] ? __schedule+0xb4f/0x1310 [ 56.746196][ T49] ? __kasan_check_read+0x11/0x20 [ 56.751223][ T49] ? read_word_at_a_time+0x12/0x20 [ 56.756380][ T49] ? strscpy+0x9b/0x290 [ 56.760637][ T49] process_one_work+0x6e1/0xba0 [ 56.765508][ T49] worker_thread+0xa6a/0x13b0 [ 56.770210][ T49] kthread+0x346/0x3d0 [ 56.774450][ T49] ? worker_clr_flags+0x190/0x190 [ 56.779476][ T49] ? kthread_blkcg+0xd0/0xd0 [ 56.784147][ T49] ret_from_fork+0x1f/0x30 [ 56.788573][ T49] Modules linked in: [ 56.793639][ T49] ---[ end trace 2ec30861892cd7aa ]--- [ 56.799372][ T49] RIP: 0010:ext4_writepages+0x2ddb/0x2e00 [ 56.805465][ T49] Code: 39 94 ff 84 db 75 31 e8 b3 36 94 ff 49 bc 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 8b 5c 24 38 e9 21 f8 ff ff e8 95 36 94 ff <0f> 0b e8 8e 36 94 ff e8 65 0d 31 ff eb 98 e8 82 36 94 ff e8 59 0d [ 56.825404][ T49] RSP: 0018:ffffc900009e7180 EFLAGS: 00010293 [ 56.831857][ T49] RAX: ffffffff81cf5d7b RBX: 0000008410000000 RCX: ffff888101db3b40 [ 56.840248][ T49] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 56.848498][ T49] RBP: ffffc900009e74f0 R08: dffffc0000000000 R09: ffffed102495de12 [ 56.856550][ T49] R10: ffffed102495de12 R11: 1ffff1102495de11 R12: dffffc0000000000 [ 56.864599][ T49] R13: ffff888118d1e000 R14: 0000008000000000 R15: ffff888124aef088 [ 56.872668][ T49] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 56.881866][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.888526][ T49] CR2: 0000000000000002 CR3: 000000010d0d6000 CR4: 00000000003506a0 [ 56.896650][ T49] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.905062][ T49] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.913094][ T49] Kernel panic - not syncing: Fatal exception [ 56.919444][ T49] Kernel Offset: disabled [ 56.923772][ T49] Rebooting in 86400 seconds..