Warning: Permanently added '10.128.0.28' (ED25519) to the list of known hosts. 2025/10/19 07:09:29 parsed 1 programs [ 48.194590][ T28] audit: type=1400 audit(1760857770.504:106): avc: denied { unlink } for pid=396 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 48.276766][ T396] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.973552][ T401] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.981027][ T401] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.988648][ T401] device bridge_slave_0 entered promiscuous mode [ 48.995841][ T401] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.003167][ T401] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.010774][ T401] device bridge_slave_1 entered promiscuous mode [ 49.069459][ T401] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.076570][ T401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.083836][ T401] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.090898][ T401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.110734][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.118117][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.125721][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.133158][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.142426][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.150694][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.157774][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.166475][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.174768][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.181838][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.194590][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.203848][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.218176][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.229686][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.238135][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.245699][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.253837][ T401] device veth0_vlan entered promiscuous mode [ 49.264756][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.273950][ T401] device veth1_macvtap entered promiscuous mode [ 49.283896][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.294474][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.346368][ T28] audit: type=1401 audit(1760857771.654:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/10/19 07:09:32 executed programs: 0 [ 50.232013][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.239440][ T463] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.246923][ T463] device bridge_slave_0 entered promiscuous mode [ 50.253786][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.261171][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.268686][ T463] device bridge_slave_1 entered promiscuous mode [ 50.336123][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.343198][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.350554][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.357848][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.386206][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.393958][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.402320][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.418737][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.427020][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.434245][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.443101][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.451587][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.458745][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.471687][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.482984][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.503345][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.515439][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.523679][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.531265][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.539553][ T463] device veth0_vlan entered promiscuous mode [ 50.557570][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.567020][ T463] device veth1_macvtap entered promiscuous mode [ 50.577172][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.595340][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.629588][ T474] loop2: detected capacity change from 0 to 2048 [ 50.646316][ T474] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 50.655488][ T28] audit: type=1400 audit(1760857772.974:108): avc: denied { mount } for pid=473 comm="syz.2.16" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.668635][ T473] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 50.678217][ T28] audit: type=1400 audit(1760857772.974:109): avc: denied { write } for pid=473 comm="syz.2.16" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.715873][ T28] audit: type=1400 audit(1760857772.974:110): avc: denied { add_name } for pid=473 comm="syz.2.16" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.738446][ T463] EXT4-fs (loop2): unmounting filesystem. [ 50.744317][ T28] audit: type=1400 audit(1760857772.974:111): avc: denied { create } for pid=473 comm="syz.2.16" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.766102][ T28] audit: type=1400 audit(1760857772.974:112): avc: denied { read append open } for pid=473 comm="syz.2.16" path="/0/file0/cpuacct.usage_sys" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.801035][ T480] loop2: detected capacity change from 0 to 2048 [ 50.802398][ T28] audit: type=1400 audit(1760857772.974:113): avc: denied { read write } for pid=473 comm="syz.2.16" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.831548][ T28] audit: type=1400 audit(1760857772.974:114): avc: denied { open } for pid=473 comm="syz.2.16" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.855841][ T306] device bridge_slave_1 left promiscuous mode [ 50.861983][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.864393][ T28] audit: type=1400 audit(1760857772.974:115): avc: denied { ioctl } for pid=473 comm="syz.2.16" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.871794][ T480] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 50.903799][ T306] device bridge_slave_0 left promiscuous mode [ 50.910279][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.918416][ T479] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 50.933717][ T306] device veth1_macvtap left promiscuous mode [ 50.939940][ T306] device veth0_vlan left promiscuous mode [ 50.946707][ T463] EXT4-fs (loop2): unmounting filesystem. [ 50.968376][ T486] loop2: detected capacity change from 0 to 2048 [ 50.991382][ T486] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.006583][ T485] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 51.028254][ T8] ------------[ cut here ]------------ [ 51.033768][ T8] kernel BUG at fs/ext4/inode.c:2761! [ 51.039949][ T8] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 51.046032][ T8] CPU: 1 PID: 8 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 51.053319][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 51.063385][ T8] Workqueue: writeback wb_workfn (flush-7:2) [ 51.069399][ T8] RIP: 0010:ext4_writepages+0x2ff8/0x3020 [ 51.075210][ T8] Code: 84 86 ff 84 db 75 31 e8 46 81 86 ff 49 bc 00 00 00 00 00 fc ff df 4c 8b 7c 24 18 4c 8b 6c 24 38 e9 a2 f7 ff ff e8 28 81 86 ff <0f> 0b e8 21 81 86 ff e8 a8 dd 16 ff eb 93 e8 15 81 86 ff e8 9c dd [ 51.094831][ T8] RSP: 0018:ffffc90000087120 EFLAGS: 00010293 [ 51.100904][ T8] RAX: ffffffff81e99cf8 RBX: 000000c410000000 RCX: ffff88810029bcc0 [ 51.108871][ T8] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 51.116839][ T8] RBP: ffffc90000087490 R08: dffffc0000000000 R09: ffffed10245f7ce9 [ 51.124902][ T8] R10: ffffed10245f7ce9 R11: 1ffff110245f7ce8 R12: dffffc0000000000 [ 51.132876][ T8] R13: ffff888122fbe858 R14: 0000008000000000 R15: ffff888122fbe740 [ 51.141197][ T8] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 51.150326][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.156999][ T8] CR2: 00007ffcabea9b98 CR3: 000000010ec90000 CR4: 00000000003506a0 [ 51.164985][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.172954][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.180920][ T8] Call Trace: [ 51.184192][ T8] [ 51.187123][ T8] ? unwind_next_frame+0x3d5/0x700 [ 51.192229][ T8] ? xas_start+0x317/0x3e0 [ 51.196654][ T8] ? xas_load+0x39e/0x3b0 [ 51.200985][ T8] ? __cfi_ext4_writepages+0x10/0x10 [ 51.206309][ T8] ? __kasan_check_write+0x14/0x20 [ 51.211419][ T8] ? __filemap_get_folio+0x81c/0x980 [ 51.216715][ T8] ? __kasan_check_write+0x14/0x20 [ 51.221824][ T8] ? folio_mark_accessed+0x277/0x4d0 [ 51.227115][ T8] ? __cfi____update_load_sum+0x10/0x10 [ 51.232668][ T8] ? __cfi_ext4_writepages+0x10/0x10 [ 51.237974][ T8] do_writepages+0x3a9/0x5e0 [ 51.242603][ T8] ? update_load_avg+0x4c2/0x13f0 [ 51.247631][ T8] ? kvm_sched_clock_read+0x18/0x40 [ 51.252839][ T8] ? __cfi_do_writepages+0x10/0x10 [ 51.257974][ T8] ? sched_clock_cpu+0x6e/0x250 [ 51.262920][ T8] ? __cfi_sched_clock_cpu+0x10/0x10 [ 51.268207][ T8] ? __kasan_check_write+0x14/0x20 [ 51.273416][ T8] ? _raw_spin_lock+0x8e/0xe0 [ 51.278100][ T8] __writeback_single_inode+0xc6/0xad0 [ 51.283562][ T8] ? inode_io_list_move_locked+0x366/0x3d0 [ 51.289372][ T8] writeback_sb_inodes+0x9b8/0x1550 [ 51.294578][ T8] ? queue_io+0x4c0/0x4c0 [ 51.299109][ T8] ? __kasan_check_read+0x11/0x20 [ 51.304155][ T8] ? queue_io+0x382/0x4c0 [ 51.308504][ T8] wb_writeback+0x3f1/0x980 [ 51.313018][ T8] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 51.319010][ T8] ? set_worker_desc+0x155/0x1c0 [ 51.324050][ T8] ? update_load_avg+0x4c2/0x13f0 [ 51.329121][ T8] ? __kasan_check_write+0x14/0x20 [ 51.334266][ T8] ? sched_clock_cpu+0x6e/0x250 [ 51.339140][ T8] wb_workfn+0x350/0xda0 [ 51.343389][ T8] ? __cfi_wb_workfn+0x10/0x10 [ 51.348190][ T8] ? kthread_data+0x50/0xc0 [ 51.352786][ T8] ? _raw_spin_unlock+0x4c/0x70 [ 51.357639][ T8] ? finish_task_switch+0x16b/0x7b0 [ 51.362846][ T8] ? __switch_to_asm+0x3a/0x60 [ 51.367633][ T8] ? __schedule+0xb8f/0x14e0 [ 51.372233][ T8] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 51.377803][ T8] process_one_work+0x71f/0xc40 [ 51.382664][ T8] worker_thread+0xa29/0x11f0 [ 51.387358][ T8] kthread+0x281/0x320 [ 51.391606][ T8] ? __cfi_worker_thread+0x10/0x10 [ 51.396756][ T8] ? __cfi_kthread+0x10/0x10 [ 51.401446][ T8] ret_from_fork+0x1f/0x30 [ 51.405970][ T8] [ 51.408990][ T8] Modules linked in: [ 51.413665][ T8] ---[ end trace 0000000000000000 ]--- [ 51.419293][ T8] RIP: 0010:ext4_writepages+0x2ff8/0x3020 [ 51.425167][ T8] Code: 84 86 ff 84 db 75 31 e8 46 81 86 ff 49 bc 00 00 00 00 00 fc ff df 4c 8b 7c 24 18 4c 8b 6c 24 38 e9 a2 f7 ff ff e8 28 81 86 ff <0f> 0b e8 21 81 86 ff e8 a8 dd 16 ff eb 93 e8 15 81 86 ff e8 9c dd [ 51.444822][ T8] RSP: 0018:ffffc90000087120 EFLAGS: 00010293 [ 51.451160][ T8] RAX: ffffffff81e99cf8 RBX: 000000c410000000 RCX: ffff88810029bcc0 [ 51.459411][ T8] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 51.468028][ T8] RBP: ffffc90000087490 R08: dffffc0000000000 R09: ffffed10245f7ce9 [ 51.476251][ T8] R10: ffffed10245f7ce9 R11: 1ffff110245f7ce8 R12: dffffc0000000000 [ 51.484770][ T8] R13: ffff888122fbe858 R14: 0000008000000000 R15: ffff888122fbe740 [ 51.494077][ T8] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 51.503061][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.510447][ T8] CR2: 000000c006be6000 CR3: 000000010fc3a000 CR4: 00000000003506a0 [ 51.518546][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.526788][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.535278][ T8] Kernel panic - not syncing: Fatal exception [ 51.541778][ T8] Kernel Offset: disabled [ 51.546112][ T8] Rebooting in 86400 seconds..