Warning: Permanently added '10.128.1.231' (ED25519) to the list of known hosts. 2026/01/08 02:04:57 parsed 1 programs [ 49.045312][ T30] audit: type=1400 audit(1767837898.315:105): avc: denied { unlink } for pid=398 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.091820][ T398] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.013593][ T435] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.020894][ T435] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.028767][ T435] device bridge_slave_0 entered promiscuous mode [ 50.035888][ T435] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.042925][ T435] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.050666][ T435] device bridge_slave_1 entered promiscuous mode [ 50.108219][ T435] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.115590][ T435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.123144][ T435] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.130489][ T435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.148961][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.156656][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.163843][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.173082][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.181353][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.188484][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.197432][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.206046][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.213155][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.226641][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.236295][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.250584][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.261785][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.270298][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.278163][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.286744][ T435] device veth0_vlan entered promiscuous mode [ 50.296939][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.306560][ T435] device veth1_macvtap entered promiscuous mode [ 50.317009][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.326970][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.546712][ T30] audit: type=1401 audit(1767837899.815:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2026/01/08 02:05:00 executed programs: 0 [ 50.944696][ T469] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.952189][ T469] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.960876][ T469] device bridge_slave_0 entered promiscuous mode [ 50.968447][ T469] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.975855][ T469] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.983393][ T469] device bridge_slave_1 entered promiscuous mode [ 51.035866][ T469] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.043171][ T469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.050582][ T469] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.057671][ T469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.077640][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.085424][ T454] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.092657][ T454] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.102345][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.110664][ T454] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.117786][ T454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.127106][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.135752][ T454] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.142815][ T454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.155840][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.165359][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.179346][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.191309][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.200119][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.207988][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.216926][ T469] device veth0_vlan entered promiscuous mode [ 51.234296][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.243767][ T469] device veth1_macvtap entered promiscuous mode [ 51.259226][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.269875][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.300372][ T30] audit: type=1400 audit(1767837900.565:107): avc: denied { read write } for pid=479 comm="syz.2.17" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.325231][ T30] audit: type=1400 audit(1767837900.595:108): avc: denied { open } for pid=479 comm="syz.2.17" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.350247][ T30] audit: type=1400 audit(1767837900.595:109): avc: denied { ioctl } for pid=479 comm="syz.2.17" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.375324][ T480] loop2: detected capacity change from 0 to 2048 [ 51.406569][ T480] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,grpquota,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 51.428920][ T30] audit: type=1400 audit(1767837900.705:110): avc: denied { mount } for pid=479 comm="syz.2.17" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.451824][ T30] audit: type=1400 audit(1767837900.705:111): avc: denied { write } for pid=479 comm="syz.2.17" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.460577][ T479] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.17: bg 0: block 234: padding at end of block bitmap is not set [ 51.473742][ T30] audit: type=1400 audit(1767837900.705:112): avc: denied { add_name } for pid=479 comm="syz.2.17" name="hugetlb.2MB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.511094][ T30] audit: type=1400 audit(1767837900.705:113): avc: denied { create } for pid=479 comm="syz.2.17" name="hugetlb.2MB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.536269][ T481] EXT4-fs error (device loop2): ext4_map_blocks:740: inode #18: block 62218: comm vhost-480: lblock 0 mapped to illegal pblock 62218 (length 1) [ 51.544829][ T30] audit: type=1400 audit(1767837900.725:114): avc: denied { read append open } for pid=479 comm="syz.2.17" path="/0/file0/hugetlb.2MB.usage_in_bytes" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.558307][ T481] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm vhost-480: lblock 0 mapped to illegal pblock 62218 (length 1) [ 51.592329][ T481] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm vhost-480: lblock 0 mapped to illegal pblock 62218 (length 1) [ 51.607442][ T481] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm vhost-480: lblock 0 mapped to illegal pblock 62218 (length 1) [ 51.623181][ T481] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm vhost-480: lblock 0 mapped to illegal pblock 62218 (length 1) [ 51.680580][ T486] loop2: detected capacity change from 0 to 2048 [ 51.741697][ T486] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,grpquota,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 51.786719][ T487] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm vhost-486: bg 0: block 234: padding at end of block bitmap is not set [ 51.804037][ T454] ------------[ cut here ]------------ [ 51.809845][ T454] kernel BUG at fs/ext4/inode.c:2747! [ 51.815862][ T454] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 51.822074][ T454] CPU: 1 PID: 454 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 51.829653][ T454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.839725][ T454] Workqueue: writeback wb_workfn (flush-7:2) [ 51.845853][ T454] RIP: 0010:ext4_writepages+0x2f75/0x2f90 [ 51.851693][ T454] Code: 00 00 00 e8 2d 72 8f ff 84 db 75 2c e8 94 6f 8f ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 d6 f7 ff ff e8 7b 6f 8f ff <0f> 0b e8 74 6f 8f ff e8 fb 26 27 ff eb a2 e8 68 6f 8f ff e8 ef 26 [ 51.872216][ T454] RSP: 0018:ffffc90000ae7100 EFLAGS: 00010293 [ 51.878395][ T454] RAX: ffffffff81d94fd5 RBX: 0000008410000000 RCX: ffff888116a68000 [ 51.886379][ T454] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 51.894346][ T454] RBP: ffffc90000ae7470 R08: dffffc0000000000 R09: ffffed10241e28cf [ 51.902787][ T454] R10: ffffed10241e28cf R11: 1ffff110241e28ce R12: dffffc0000000000 [ 51.910770][ T454] R13: 0000000000000001 R14: 0000008000000000 R15: ffff888120f14908 [ 51.918866][ T454] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 51.928148][ T454] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.934748][ T454] CR2: 0000200000000600 CR3: 000000010d74e000 CR4: 00000000003506a0 [ 51.942729][ T454] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.950797][ T454] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.958896][ T454] Call Trace: [ 51.962294][ T454] [ 51.965335][ T454] ? __kasan_check_read+0x11/0x20 [ 51.970362][ T454] ? mark_page_accessed+0x3b6/0x8d0 [ 51.975652][ T454] ? native_send_call_func_single_ipi+0x5e/0x70 [ 51.981903][ T454] ? ext4_readpage+0x220/0x220 [ 51.986679][ T454] ? send_call_function_single_ipi+0xdd/0x180 [ 51.992880][ T454] ? __smp_call_single_queue+0x7a/0xa0 [ 51.998357][ T454] ? ttwu_queue_wakelist+0x2eb/0x490 [ 52.003797][ T454] ? ttwu_do_wakeup+0x470/0x470 [ 52.008671][ T454] ? copy_page_from_iter_atomic+0x784/0x1350 [ 52.014888][ T454] ? try_to_wake_up+0x611/0x1160 [ 52.019864][ T454] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 52.026235][ T454] ? ext4_readpage+0x220/0x220 [ 52.031009][ T454] do_writepages+0x48a/0x6c0 [ 52.035628][ T454] ? update_curr+0x2f3/0x5b0 [ 52.040437][ T454] ? __writepage+0x130/0x130 [ 52.045056][ T454] ? update_load_avg+0x410/0x1110 [ 52.050114][ T454] ? __kasan_check_write+0x14/0x20 [ 52.055608][ T454] ? _raw_spin_lock+0x8e/0xe0 [ 52.060335][ T454] __writeback_single_inode+0xd5/0x9c0 [ 52.065815][ T454] ? wbc_attach_and_unlock_inode+0x194/0x5f0 [ 52.071808][ T454] writeback_sb_inodes+0x9c0/0x1590 [ 52.077068][ T454] ? __switch_to_asm+0x3a/0x60 [ 52.081863][ T454] ? queue_io+0x4c0/0x4c0 [ 52.086207][ T454] ? __kasan_check_read+0x11/0x20 [ 52.091401][ T454] ? queue_io+0x382/0x4c0 [ 52.095741][ T454] wb_writeback+0x3f1/0x980 [ 52.100289][ T454] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 52.106387][ T454] ? set_worker_desc+0x155/0x1c0 [ 52.111342][ T454] ? __kasan_check_write+0x14/0x20 [ 52.116549][ T454] wb_workfn+0x38f/0xe20 [ 52.120801][ T454] ? inode_wait_for_writeback+0x200/0x200 [ 52.126526][ T454] ? compat_start_thread+0x20/0x20 [ 52.131651][ T454] ? kvm_sched_clock_read+0x18/0x40 [ 52.136949][ T454] ? _raw_spin_unlock+0x4d/0x70 [ 52.141832][ T454] ? finish_task_switch+0x16b/0x780 [ 52.147149][ T454] ? __switch_to_asm+0x3a/0x60 [ 52.151922][ T454] ? __schedule+0xb76/0x14c0 [ 52.156513][ T454] process_one_work+0x6be/0xba0 [ 52.161477][ T454] worker_thread+0xa59/0x1200 [ 52.166175][ T454] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 52.171657][ T454] ? __kthread_parkme+0xac/0x200 [ 52.176616][ T454] kthread+0x411/0x500 [ 52.180687][ T454] ? worker_clr_flags+0x190/0x190 [ 52.185807][ T454] ? kthread_blkcg+0xd0/0xd0 [ 52.190398][ T454] ret_from_fork+0x1f/0x30 [ 52.194816][ T454] [ 52.197982][ T454] Modules linked in: [ 52.205260][ T454] ---[ end trace 91f7fa321011195e ]--- [ 52.210759][ T454] RIP: 0010:ext4_writepages+0x2f75/0x2f90 [ 52.216623][ T454] Code: 00 00 00 e8 2d 72 8f ff 84 db 75 2c e8 94 6f 8f ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 d6 f7 ff ff e8 7b 6f 8f ff <0f> 0b e8 74 6f 8f ff e8 fb 26 27 ff eb a2 e8 68 6f 8f ff e8 ef 26 [ 52.236587][ T454] RSP: 0018:ffffc90000ae7100 EFLAGS: 00010293 [ 52.242668][ T454] RAX: ffffffff81d94fd5 RBX: 0000008410000000 RCX: ffff888116a68000 [ 52.250970][ T454] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 52.259767][ T454] RBP: ffffc90000ae7470 R08: dffffc0000000000 R09: ffffed10241e28cf [ 52.267960][ T454] R10: ffffed10241e28cf R11: 1ffff110241e28ce R12: dffffc0000000000 [ 52.276629][ T454] R13: 0000000000000001 R14: 0000008000000000 R15: ffff888120f14908 [ 52.284971][ T454] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 52.294567][ T454] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.301311][ T454] CR2: 0000200000000600 CR3: 000000010d74e000 CR4: 00000000003506a0 [ 52.309541][ T454] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.317613][ T454] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.318467][ T10] device bridge_slave_1 left promiscuous mode [ 52.331939][ T454] Kernel panic - not syncing: Fatal exception [ 52.335799][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.338578][ T454] Kernel Offset: disabled [ 52.350096][ T454] Rebooting in 86400 seconds..