Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts. 2025/11/07 23:21:55 parsed 1 programs [ 20.452702][ T30] audit: type=1400 audit(1762557715.516:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 20.458992][ T30] audit: type=1400 audit(1762557715.516:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 21.088761][ T30] audit: type=1400 audit(1762557716.146:66): avc: denied { mounton } for pid=289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.089856][ T289] cgroup: Unknown subsys name 'net' [ 21.111446][ T30] audit: type=1400 audit(1762557716.146:67): avc: denied { mount } for pid=289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.138860][ T30] audit: type=1400 audit(1762557716.176:68): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.139061][ T289] cgroup: Unknown subsys name 'devices' [ 21.342194][ T289] cgroup: Unknown subsys name 'hugetlb' [ 21.347812][ T289] cgroup: Unknown subsys name 'rlimit' [ 21.494436][ T30] audit: type=1400 audit(1762557716.556:69): avc: denied { setattr } for pid=289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.517625][ T30] audit: type=1400 audit(1762557716.556:70): avc: denied { create } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.538193][ T30] audit: type=1400 audit(1762557716.556:71): avc: denied { write } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.544754][ T292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.558689][ T30] audit: type=1400 audit(1762557716.556:72): avc: denied { read } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.587771][ T30] audit: type=1400 audit(1762557716.556:73): avc: denied { mounton } for pid=289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.595148][ T289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.026443][ T294] request_module fs-gadgetfs succeeded, but still no fs? [ 22.356497][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.363575][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.371022][ T318] device bridge_slave_0 entered promiscuous mode [ 22.378077][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.385129][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.392541][ T318] device bridge_slave_1 entered promiscuous mode [ 22.430495][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.437527][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.444860][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.451897][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.468048][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.475708][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.483136][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.492939][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.501315][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.508339][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.516707][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.525020][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.532095][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.543361][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.560367][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.569178][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.579732][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.587820][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.595528][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.603962][ T318] device veth0_vlan entered promiscuous mode [ 22.613767][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.622673][ T318] device veth1_macvtap entered promiscuous mode [ 22.631572][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.641522][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.676277][ T318] syz-executor (318) used greatest stack depth: 21408 bytes left 2025/11/07 23:21:58 executed programs: 0 [ 23.041835][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.048869][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.056560][ T361] device bridge_slave_0 entered promiscuous mode [ 23.065810][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.072963][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.080433][ T361] device bridge_slave_1 entered promiscuous mode [ 23.122050][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.129082][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.136370][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.143399][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.159937][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.167495][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.175117][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.201226][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.209844][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.218207][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.225409][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.232944][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.242295][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.249343][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.256816][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.264736][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.274505][ T361] device veth0_vlan entered promiscuous mode [ 23.281687][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.289552][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.297641][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.305156][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.315791][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.324034][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.333390][ T361] device veth1_macvtap entered promiscuous mode [ 23.343730][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.351937][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.360581][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.369546][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.378051][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.409695][ T373] loop2: detected capacity change from 0 to 2048 [ 23.431938][ T373] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 23.459502][ T372] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.17: bg 0: block 234: padding at end of block bitmap is not set [ 23.515677][ T379] loop2: detected capacity change from 0 to 2048 [ 23.552111][ T379] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 23.591120][ T380] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm vhost-379: bg 0: block 234: padding at end of block bitmap is not set [ 23.664967][ T384] loop2: detected capacity change from 0 to 2048 [ 23.731945][ T384] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 23.760393][ T383] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.19: bg 0: block 234: padding at end of block bitmap is not set [ 23.849957][ T389] loop2: detected capacity change from 0 to 2048 [ 23.901341][ T389] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 23.933770][ T388] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.20: bg 0: block 234: padding at end of block bitmap is not set [ 24.048635][ T394] loop2: detected capacity change from 0 to 2048 [ 24.158528][ T394] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 24.188204][ T395] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm vhost-394: bg 0: block 234: padding at end of block bitmap is not set [ 24.204154][ T45] ------------[ cut here ]------------ [ 24.209715][ T45] kernel BUG at fs/ext4/inode.c:2747! [ 24.215165][ T45] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 24.221249][ T45] CPU: 1 PID: 45 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 24.228594][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 24.238627][ T45] Workqueue: writeback wb_workfn (flush-7:2) [ 24.244609][ T45] RIP: 0010:ext4_writepages+0x2f75/0x2f90 [ 24.250422][ T45] Code: 00 00 00 e8 7d 76 8f ff 84 db 75 2c e8 e4 73 8f ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 d6 f7 ff ff e8 cb 73 8f ff <0f> 0b e8 c4 73 8f ff e8 9b 2b 27 ff eb a2 e8 b8 73 8f ff e8 8f 2b [ 24.270362][ T45] RSP: 0018:ffffc900002ef100 EFLAGS: 00010293 [ 24.276451][ T45] RAX: ffffffff81d94b25 RBX: 0000008410000000 RCX: ffff888108782780 [ 24.284499][ T45] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 24.292543][ T45] RBP: ffffc900002ef470 R08: dffffc0000000000 R09: ffffed1023fe723c [ 24.300509][ T45] R10: ffffed1023fe723c R11: 1ffff11023fe723b R12: dffffc0000000000 [ 24.308563][ T45] R13: 0000000000000001 R14: 0000008000000000 R15: ffff88811ff39470 [ 24.316524][ T45] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 24.325430][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.332006][ T45] CR2: 0000000000000002 CR3: 0000000121d38000 CR4: 00000000003506a0 [ 24.340319][ T45] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.348275][ T45] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.356225][ T45] Call Trace: [ 24.359482][ T45] [ 24.362477][ T45] ? __kasan_check_write+0x14/0x20 [ 24.367568][ T45] ? pagecache_get_page+0xcb6/0xda0 [ 24.372746][ T45] ? __kasan_check_read+0x11/0x20 [ 24.377744][ T45] ? mark_page_accessed+0x3b6/0x8d0 [ 24.382923][ T45] ? __activate_page+0xd40/0xd40 [ 24.387838][ T45] ? ext4_readpage+0x220/0x220 [ 24.392595][ T45] ? update_curr+0x2f3/0x5b0 [ 24.397178][ T45] ? memcpy+0x56/0x70 [ 24.401134][ T45] ? copy_page_from_iter_atomic+0x784/0x1350 [ 24.407088][ T45] ? __kasan_check_read+0x11/0x20 [ 24.412088][ T45] ? __set_page_dirty_no_writeback+0xff/0x130 [ 24.418140][ T45] ? ext4_readpage+0x220/0x220 [ 24.422881][ T45] do_writepages+0x48a/0x6c0 [ 24.427481][ T45] ? update_curr+0x2f3/0x5b0 [ 24.432046][ T45] ? __writepage+0x130/0x130 [ 24.436705][ T45] ? enqueue_task_fair+0xaa7/0x2120 [ 24.441876][ T45] ? __kasan_check_write+0x14/0x20 [ 24.446968][ T45] ? _raw_spin_lock+0x8e/0xe0 [ 24.451621][ T45] __writeback_single_inode+0xd5/0x9c0 [ 24.457064][ T45] ? wbc_attach_and_unlock_inode+0x194/0x5f0 [ 24.463017][ T45] writeback_sb_inodes+0x9c0/0x1590 [ 24.468192][ T45] ? psi_task_change+0x212/0x370 [ 24.473111][ T45] ? queue_io+0x4c0/0x4c0 [ 24.477437][ T45] ? __kasan_check_read+0x11/0x20 [ 24.482444][ T45] ? queue_io+0x382/0x4c0 [ 24.486806][ T45] wb_writeback+0x3f1/0x980 [ 24.491550][ T45] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 24.497595][ T45] ? set_worker_desc+0x155/0x1c0 [ 24.502508][ T45] ? __kasan_check_write+0x14/0x20 [ 24.507601][ T45] wb_workfn+0x38f/0xe20 [ 24.511823][ T45] ? inode_wait_for_writeback+0x200/0x200 [ 24.517518][ T45] ? compat_start_thread+0x20/0x20 [ 24.522606][ T45] ? _raw_spin_unlock+0x4d/0x70 [ 24.527432][ T45] ? finish_task_switch+0x16b/0x780 [ 24.532607][ T45] ? __switch_to_asm+0x3a/0x60 [ 24.537350][ T45] ? __schedule+0xb76/0x14c0 [ 24.541917][ T45] process_one_work+0x6be/0xba0 [ 24.546746][ T45] worker_thread+0xa59/0x1200 [ 24.551399][ T45] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 24.556835][ T45] ? __kthread_parkme+0xac/0x200 [ 24.561755][ T45] kthread+0x411/0x500 [ 24.565799][ T45] ? worker_clr_flags+0x190/0x190 [ 24.570802][ T45] ? kthread_blkcg+0xd0/0xd0 [ 24.575372][ T45] ret_from_fork+0x1f/0x30 [ 24.579784][ T45] [ 24.582787][ T45] Modules linked in: [ 24.588005][ T45] ---[ end trace 6c989ffc849c4d56 ]--- [ 24.593719][ T45] RIP: 0010:ext4_writepages+0x2f75/0x2f90 [ 24.600079][ T45] Code: 00 00 00 e8 7d 76 8f ff 84 db 75 2c e8 e4 73 8f ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 d6 f7 ff ff e8 cb 73 8f ff <0f> 0b e8 c4 73 8f ff e8 9b 2b 27 ff eb a2 e8 b8 73 8f ff e8 8f 2b [ 24.619903][ T45] RSP: 0018:ffffc900002ef100 EFLAGS: 00010293 [ 24.626041][ T45] RAX: ffffffff81d94b25 RBX: 0000008410000000 RCX: ffff888108782780 [ 24.634215][ T45] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 24.642410][ T45] RBP: ffffc900002ef470 R08: dffffc0000000000 R09: ffffed1023fe723c [ 24.650420][ T45] R10: ffffed1023fe723c R11: 1ffff11023fe723b R12: dffffc0000000000 [ 24.658415][ T45] R13: 0000000000000001 R14: 0000008000000000 R15: ffff88811ff39470 [ 24.666538][ T45] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 24.675510][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.682127][ T45] CR2: 0000000000000002 CR3: 000000010d1b5000 CR4: 00000000003506a0 [ 24.690221][ T45] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.698520][ T45] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.706623][ T45] Kernel panic - not syncing: Fatal exception [ 24.712889][ T45] Kernel Offset: disabled [ 24.717199][ T45] Rebooting in 86400 seconds..