Warning: Permanently added '10.128.0.232' (ED25519) to the list of known hosts. 2025/10/24 15:07:58 parsed 1 programs [ 27.677408][ T30] audit: type=1400 audit(1761318478.765:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 27.698216][ T30] audit: type=1400 audit(1761318478.765:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 28.677341][ T30] audit: type=1400 audit(1761318479.765:66): avc: denied { mounton } for pid=289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.678804][ T289] cgroup: Unknown subsys name 'net' [ 28.700361][ T30] audit: type=1400 audit(1761318479.765:67): avc: denied { mount } for pid=289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.728003][ T30] audit: type=1400 audit(1761318479.795:68): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.728227][ T289] cgroup: Unknown subsys name 'devices' [ 28.842411][ T289] cgroup: Unknown subsys name 'hugetlb' [ 28.848067][ T289] cgroup: Unknown subsys name 'rlimit' [ 28.996872][ T30] audit: type=1400 audit(1761318480.085:69): avc: denied { setattr } for pid=289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.020127][ T30] audit: type=1400 audit(1761318480.085:70): avc: denied { create } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.040820][ T30] audit: type=1400 audit(1761318480.085:71): avc: denied { write } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.048928][ T291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.061134][ T30] audit: type=1400 audit(1761318480.085:72): avc: denied { read } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.089952][ T30] audit: type=1400 audit(1761318480.085:73): avc: denied { mounton } for pid=289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.124749][ T289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.575998][ T293] request_module fs-gadgetfs succeeded, but still no fs? [ 30.231168][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.238219][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.245856][ T341] device bridge_slave_0 entered promiscuous mode [ 30.252796][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.259988][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.267512][ T341] device bridge_slave_1 entered promiscuous mode [ 30.316345][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.323424][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.330771][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.337805][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.358254][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.366668][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.374097][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.383648][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.391857][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.398896][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.411427][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.419889][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.426932][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.444624][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.453901][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.467433][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.479159][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.487719][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.495445][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.507588][ T341] device veth0_vlan entered promiscuous mode [ 30.517753][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.527084][ T341] device veth1_macvtap entered promiscuous mode [ 30.536668][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.551539][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.584651][ T341] syz-executor (341) used greatest stack depth: 21120 bytes left 2025/10/24 15:08:02 executed programs: 0 [ 30.974379][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.981614][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.988993][ T362] device bridge_slave_0 entered promiscuous mode [ 30.996670][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.003905][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.011323][ T362] device bridge_slave_1 entered promiscuous mode [ 31.059546][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.066660][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.073975][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.081048][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.099987][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.108095][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.115614][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.124867][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.133280][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.140349][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.148949][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.157271][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.164422][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.175898][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.184034][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.193527][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.201942][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.221531][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.230152][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.247049][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.255010][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.263242][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.271585][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.280415][ T362] device veth0_vlan entered promiscuous mode [ 31.294792][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.303078][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.312712][ T362] device veth1_macvtap entered promiscuous mode [ 31.321689][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.329398][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.337860][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.352994][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.361351][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.392647][ T372] loop2: detected capacity change from 0 to 2048 [ 31.452001][ T372] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 31.476215][ T372] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.17: bg 0: block 234: padding at end of block bitmap is not set [ 31.596841][ T377] loop2: detected capacity change from 0 to 2048 [ 31.681913][ T8] device bridge_slave_1 left promiscuous mode [ 31.688083][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.696520][ T8] device bridge_slave_0 left promiscuous mode [ 31.703121][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.711872][ T8] device veth1_macvtap left promiscuous mode [ 31.717900][ T8] device veth0_vlan left promiscuous mode [ 31.724876][ T377] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 31.764244][ T377] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.18: bg 0: block 234: padding at end of block bitmap is not set [ 31.793275][ T10] ------------[ cut here ]------------ [ 31.798771][ T10] kernel BUG at fs/ext4/inode.c:2747! [ 31.804489][ T10] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 31.810584][ T10] CPU: 1 PID: 10 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 31.817977][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 31.828038][ T10] Workqueue: writeback wb_workfn (flush-7:2) [ 31.834047][ T10] RIP: 0010:ext4_writepages+0x2f75/0x2f90 [ 31.839791][ T10] Code: 00 00 00 e8 9d 77 8f ff 84 db 75 2c e8 04 75 8f ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 d6 f7 ff ff e8 eb 74 8f ff <0f> 0b e8 e4 74 8f ff e8 bb 2c 27 ff eb a2 e8 d8 74 8f ff e8 af 2c [ 31.859395][ T10] RSP: 0018:ffffc900000a7100 EFLAGS: 00010293 [ 31.865463][ T10] RAX: ffffffff81d94a05 RBX: 0000008410000000 RCX: ffff888100274f00 [ 31.873454][ T10] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 31.881622][ T10] RBP: ffffc900000a7470 R08: dffffc0000000000 R09: ffffed10213230c6 [ 31.889681][ T10] R10: ffffed10213230c6 R11: 1ffff110213230c5 R12: dffffc0000000000 [ 31.897659][ T10] R13: 0000000000000001 R14: 0000008000000000 R15: ffff8881099188c0 [ 31.905637][ T10] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 31.914570][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.921154][ T10] CR2: 000055555e4854a8 CR3: 000000012b0cf000 CR4: 00000000003506a0 [ 31.929151][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.937127][ T10] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.945186][ T10] Call Trace: [ 31.948484][ T10] [ 31.951423][ T10] ? __kasan_check_write+0x14/0x20 [ 31.956568][ T10] ? pagecache_get_page+0xcb6/0xda0 [ 31.961801][ T10] ? __kasan_check_read+0x11/0x20 [ 31.966828][ T10] ? mark_page_accessed+0x3b6/0x8d0 [ 31.972029][ T10] ? __activate_page+0xd40/0xd40 [ 31.976972][ T10] ? load_balance+0x3156/0x3ff0 [ 31.981843][ T10] ? ext4_readpage+0x220/0x220 [ 31.986653][ T10] ? memcpy+0x56/0x70 [ 31.990650][ T10] ? copy_page_from_iter_atomic+0x784/0x1350 [ 31.996668][ T10] ? __kasan_check_read+0x11/0x20 [ 32.001713][ T10] ? __set_page_dirty_no_writeback+0xff/0x130 [ 32.007908][ T10] ? ext4_readpage+0x220/0x220 [ 32.012714][ T10] do_writepages+0x48a/0x6c0 [ 32.017319][ T10] ? update_curr+0x2f3/0x5b0 [ 32.022066][ T10] ? __writepage+0x130/0x130 [ 32.026673][ T10] ? enqueue_task_fair+0xaa7/0x2120 [ 32.031886][ T10] ? __kasan_check_write+0x14/0x20 [ 32.037011][ T10] ? _raw_spin_lock+0x8e/0xe0 [ 32.041703][ T10] __writeback_single_inode+0xd5/0x9c0 [ 32.047172][ T10] ? wbc_attach_and_unlock_inode+0x194/0x5f0 [ 32.053279][ T10] writeback_sb_inodes+0x9c0/0x1590 [ 32.058486][ T10] ? psi_task_change+0x212/0x370 [ 32.063434][ T10] ? queue_io+0x4c0/0x4c0 [ 32.067769][ T10] ? __kasan_check_read+0x11/0x20 [ 32.072796][ T10] ? queue_io+0x382/0x4c0 [ 32.077127][ T10] wb_writeback+0x3f1/0x980 [ 32.081638][ T10] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 32.087631][ T10] ? set_worker_desc+0x155/0x1c0 [ 32.092575][ T10] ? __kasan_check_write+0x14/0x20 [ 32.097693][ T10] wb_workfn+0x38f/0xe20 [ 32.102031][ T10] ? inode_wait_for_writeback+0x200/0x200 [ 32.107933][ T10] ? compat_start_thread+0x20/0x20 [ 32.113060][ T10] ? _raw_spin_unlock+0x4d/0x70 [ 32.117933][ T10] ? finish_task_switch+0x16b/0x780 [ 32.123176][ T10] ? __switch_to_asm+0x3a/0x60 [ 32.127944][ T10] ? __schedule+0xb76/0x14c0 [ 32.132565][ T10] process_one_work+0x6be/0xba0 [ 32.137432][ T10] worker_thread+0xa59/0x1200 [ 32.142201][ T10] ? __kthread_parkme+0xac/0x200 [ 32.147227][ T10] kthread+0x411/0x500 [ 32.151295][ T10] ? worker_clr_flags+0x190/0x190 [ 32.156323][ T10] ? kthread_blkcg+0xd0/0xd0 [ 32.160926][ T10] ret_from_fork+0x1f/0x30 [ 32.165370][ T10] [ 32.168392][ T10] Modules linked in: [ 32.172783][ T10] ---[ end trace 7120a839fa032e2a ]--- [ 32.178280][ T10] RIP: 0010:ext4_writepages+0x2f75/0x2f90 [ 32.184670][ T10] Code: 00 00 00 e8 9d 77 8f ff 84 db 75 2c e8 04 75 8f ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 d6 f7 ff ff e8 eb 74 8f ff <0f> 0b e8 e4 74 8f ff e8 bb 2c 27 ff eb a2 e8 d8 74 8f ff e8 af 2c [ 32.204925][ T10] RSP: 0018:ffffc900000a7100 EFLAGS: 00010293 [ 32.211373][ T10] RAX: ffffffff81d94a05 RBX: 0000008410000000 RCX: ffff888100274f00 [ 32.219406][ T10] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 32.228709][ T10] RBP: ffffc900000a7470 R08: dffffc0000000000 R09: ffffed10213230c6 [ 32.236736][ T10] R10: ffffed10213230c6 R11: 1ffff110213230c5 R12: dffffc0000000000 [ 32.244852][ T10] R13: 0000000000000001 R14: 0000008000000000 R15: ffff8881099188c0 [ 32.253042][ T10] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 32.262159][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.268796][ T10] CR2: 000000c006b58000 CR3: 000000000660f000 CR4: 00000000003506a0 [ 32.277151][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.285321][ T10] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.293367][ T10] Kernel panic - not syncing: Fatal exception [ 32.299598][ T10] Kernel Offset: disabled [ 32.303932][ T10] Rebooting in 86400 seconds..