Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. 2025/12/18 01:00:11 parsed 1 programs [ 22.452145][ T28] audit: type=1400 audit(1766019611.672:64): avc: denied { node_bind } for pid=283 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 22.472897][ T28] audit: type=1400 audit(1766019611.672:65): avc: denied { module_request } for pid=283 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 23.279149][ T28] audit: type=1400 audit(1766019612.502:66): avc: denied { mounton } for pid=291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.280103][ T291] cgroup: Unknown subsys name 'net' [ 23.301813][ T28] audit: type=1400 audit(1766019612.502:67): avc: denied { mount } for pid=291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.329455][ T28] audit: type=1400 audit(1766019612.532:68): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.329615][ T291] cgroup: Unknown subsys name 'devices' [ 23.469279][ T291] cgroup: Unknown subsys name 'hugetlb' [ 23.474915][ T291] cgroup: Unknown subsys name 'rlimit' [ 23.612575][ T28] audit: type=1400 audit(1766019612.832:69): avc: denied { setattr } for pid=291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.635782][ T28] audit: type=1400 audit(1766019612.832:70): avc: denied { create } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.656192][ T28] audit: type=1400 audit(1766019612.832:71): avc: denied { write } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.665153][ T293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.676488][ T28] audit: type=1400 audit(1766019612.832:72): avc: denied { read } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.705295][ T28] audit: type=1400 audit(1766019612.832:73): avc: denied { mounton } for pid=291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.742052][ T291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.547736][ T300] request_module fs-gadgetfs succeeded, but still no fs? [ 24.726967][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.739313][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.757150][ T301] device bridge_slave_0 entered promiscuous mode [ 24.765712][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.773152][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.781041][ T301] device bridge_slave_1 entered promiscuous mode [ 25.192022][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.199134][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.206429][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.213511][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.289498][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.298088][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.305751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.313791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.334481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.342976][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.350072][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.358498][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.366833][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.373928][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.397278][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.405454][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.421372][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.432569][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.440814][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.448659][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.456816][ T301] device veth0_vlan entered promiscuous mode [ 25.466672][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.475849][ T301] device veth1_macvtap entered promiscuous mode [ 25.484940][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 2025/12/18 01:00:14 executed programs: 0 [ 25.495021][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.578817][ T301] syz-executor (301) used greatest stack depth: 21920 bytes left [ 25.654424][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.662681][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.670099][ T369] device bridge_slave_0 entered promiscuous mode [ 25.707987][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.715035][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.722489][ T369] device bridge_slave_1 entered promiscuous mode [ 25.795814][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.803099][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.810634][ T372] device bridge_slave_0 entered promiscuous mode [ 25.818738][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.825775][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.833566][ T372] device bridge_slave_1 entered promiscuous mode [ 25.881786][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.889011][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.896963][ T374] device bridge_slave_0 entered promiscuous mode [ 25.904969][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.912628][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.920029][ T374] device bridge_slave_1 entered promiscuous mode [ 25.950944][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.958043][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.965325][ T371] device bridge_slave_0 entered promiscuous mode [ 25.990869][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.998346][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.005880][ T371] device bridge_slave_1 entered promiscuous mode [ 26.047829][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.054891][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.062931][ T375] device bridge_slave_0 entered promiscuous mode [ 26.084302][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.091589][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.099068][ T375] device bridge_slave_1 entered promiscuous mode [ 26.272984][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.280061][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.287356][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.294379][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.303293][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.312089][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.320291][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.328039][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.336562][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.345037][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.353169][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.360250][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.377577][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.418835][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.426387][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.434789][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.443268][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.451678][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.458750][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.470815][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.479146][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.486185][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.493781][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.502116][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.509185][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.540468][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.548973][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.556869][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.565086][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.573567][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.580741][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.588580][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.596789][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.603858][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.621384][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.629475][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.639655][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.666607][ T369] device veth0_vlan entered promiscuous mode [ 26.682630][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.691242][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.699392][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.706795][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.714553][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.722988][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.731877][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.739815][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.747267][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.754685][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.762767][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.771018][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.778143][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.786041][ T371] device veth0_vlan entered promiscuous mode [ 26.809167][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.816817][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.824578][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.832173][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.840664][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.849109][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.856142][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.863664][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.871942][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.880190][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.887235][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.894774][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.903140][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.911270][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.918312][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.925815][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.933879][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.941780][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.949987][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.958115][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.966079][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.974236][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.982419][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.994215][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.013216][ T369] device veth1_macvtap entered promiscuous mode [ 27.030553][ T372] device veth0_vlan entered promiscuous mode [ 27.038332][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.046786][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.055439][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.063880][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.072524][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.080373][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.088464][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.096430][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.103998][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.125261][ T371] device veth1_macvtap entered promiscuous mode [ 27.134730][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.143479][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.152172][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.160767][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.169236][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.177047][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.185107][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.193199][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.201599][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.209255][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.217513][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.225577][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.233612][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.242440][ T374] device veth0_vlan entered promiscuous mode [ 27.256174][ T375] device veth0_vlan entered promiscuous mode [ 27.269761][ T372] device veth1_macvtap entered promiscuous mode [ 27.278261][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.286164][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.293982][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.301836][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.310863][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.319526][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.327852][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.336073][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.344429][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.358324][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.366620][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.375216][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.383410][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.396457][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.405709][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.418106][ T374] device veth1_macvtap entered promiscuous mode [ 27.438220][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.447230][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.455679][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.464119][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.486927][ T375] device veth1_macvtap entered promiscuous mode [ 27.508670][ T423] loop5: detected capacity change from 0 to 2048 [ 27.519812][ T425] loop1: detected capacity change from 0 to 2048 [ 27.531434][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.542763][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.552440][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.557196][ T423] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 27.573276][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 27.573291][ T28] audit: type=1400 audit(1766019616.792:105): avc: denied { mount } for pid=422 comm="syz.5.17" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.580387][ T423] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 27.607988][ T28] audit: type=1400 audit(1766019616.792:106): avc: denied { write } for pid=422 comm="syz.5.17" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.633098][ T425] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 27.639050][ T28] audit: type=1400 audit(1766019616.792:107): avc: denied { add_name } for pid=422 comm="syz.5.17" name="hugetlb.2MB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.646851][ T425] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 27.675703][ T28] audit: type=1400 audit(1766019616.792:108): avc: denied { create } for pid=422 comm="syz.5.17" name="hugetlb.2MB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.706472][ T369] EXT4-fs (loop5): unmounting filesystem. [ 27.711592][ T28] audit: type=1400 audit(1766019616.792:109): avc: denied { read append open } for pid=422 comm="syz.5.17" path="/0/file1/hugetlb.2MB.usage_in_bytes" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.738489][ T371] EXT4-fs (loop1): unmounting filesystem. [ 27.742501][ T28] audit: type=1400 audit(1766019616.792:110): avc: denied { map } for pid=422 comm="syz.5.17" path="/0/file1/hugetlb.2MB.usage_in_bytes" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.790808][ T435] loop1: detected capacity change from 0 to 2048 [ 27.802376][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.805911][ T434] loop5: detected capacity change from 0 to 2048 [ 27.826021][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.834766][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.835642][ T434] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 27.845025][ T435] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 27.854321][ T434] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 27.869523][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.879074][ T435] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 27.903924][ T369] EXT4-fs (loop5): unmounting filesystem. [ 27.923058][ T371] EXT4-fs (loop1): unmounting filesystem. [ 27.942450][ T441] loop4: detected capacity change from 0 to 2048 [ 27.954570][ T443] loop6: detected capacity change from 0 to 2048 [ 27.980014][ T449] loop1: detected capacity change from 0 to 2048 [ 27.986112][ T447] loop5: detected capacity change from 0 to 2048 [ 27.989169][ T445] loop2: detected capacity change from 0 to 2048 [ 28.011030][ T441] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 28.027027][ T443] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 28.033320][ T441] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.056913][ T443] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.088595][ T374] EXT4-fs (loop4): unmounting filesystem. [ 28.089310][ T449] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 28.105370][ T445] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 28.123731][ T445] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.149505][ T449] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.165896][ T372] EXT4-fs (loop6): unmounting filesystem. [ 28.172452][ T43] device bridge_slave_1 left promiscuous mode [ 28.172760][ T462] loop4: detected capacity change from 0 to 2048 [ 28.178874][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.192930][ T375] EXT4-fs (loop2): unmounting filesystem. [ 28.196726][ T447] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 28.207586][ T43] device bridge_slave_0 left promiscuous mode [ 28.213748][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.221875][ T371] EXT4-fs (loop1): unmounting filesystem. [ 28.222654][ T462] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 28.229205][ T447] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.271370][ T43] device veth1_macvtap left promiscuous mode [ 28.278073][ T43] device veth0_vlan left promiscuous mode [ 28.289409][ T462] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.299623][ T470] loop1: detected capacity change from 0 to 2048 [ 28.305797][ T469] loop2: detected capacity change from 0 to 2048 [ 28.318857][ T369] EXT4-fs (loop5): unmounting filesystem. [ 28.334382][ T469] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 28.353824][ T374] EXT4-fs (loop4): unmounting filesystem. [ 28.376799][ T470] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 28.378061][ T476] loop5: detected capacity change from 0 to 2048 [ 28.393737][ T469] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.413817][ T375] EXT4-fs (loop2): unmounting filesystem. [ 28.415129][ T474] loop6: detected capacity change from 0 to 2048 [ 28.437815][ T476] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 28.449743][ T470] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.452219][ T476] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.484978][ T474] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 28.494285][ T369] EXT4-fs (loop5): unmounting filesystem. [ 28.500580][ T482] loop4: detected capacity change from 0 to 2048 [ 28.509508][ T474] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.540748][ T371] EXT4-fs (loop1): unmounting filesystem. [ 28.551255][ T487] loop5: detected capacity change from 0 to 2048 [ 28.570068][ T488] loop2: detected capacity change from 0 to 2048 [ 28.579187][ T372] EXT4-fs (loop6): unmounting filesystem. [ 28.588552][ T482] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 28.644678][ T482] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.659002][ T492] loop1: detected capacity change from 0 to 2048 [ 28.669107][ T487] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 28.674226][ T496] loop6: detected capacity change from 0 to 2048 [ 28.690502][ T374] EXT4-fs (loop4): unmounting filesystem. [ 28.691793][ T487] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.699446][ T488] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 28.727390][ T496] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 28.729540][ T488] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.754605][ T369] EXT4-fs (loop5): unmounting filesystem. [ 28.756155][ T496] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.778516][ T375] EXT4-fs (loop2): unmounting filesystem. [ 28.819165][ T492] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 28.827515][ T506] loop5: detected capacity change from 0 to 2048 [ 28.849030][ T506] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 28.849357][ T492] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.858467][ T504] loop4: detected capacity change from 0 to 2048 [ 28.883055][ T510] loop2: detected capacity change from 0 to 2048 [ 28.891941][ T372] EXT4-fs (loop6): unmounting filesystem. [ 28.899246][ T506] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.918514][ T371] EXT4-fs (loop1): unmounting filesystem. [ 28.928794][ T369] EXT4-fs (loop5): unmounting filesystem. [ 28.956036][ T504] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 28.980839][ T513] loop6: detected capacity change from 0 to 2048 [ 28.988314][ T510] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.007416][ T518] loop5: detected capacity change from 0 to 2048 [ 29.024042][ T504] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.033504][ T510] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.046257][ T520] loop1: detected capacity change from 0 to 2048 [ 29.066051][ T513] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 29.073830][ T375] EXT4-fs (loop2): unmounting filesystem. [ 29.076611][ T518] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 29.081835][ T513] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.098289][ T518] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.130105][ T374] EXT4-fs (loop4): unmounting filesystem. [ 29.132023][ T372] EXT4-fs (loop6): unmounting filesystem. [ 29.163723][ T520] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 29.165514][ T527] loop4: detected capacity change from 0 to 2048 [ 29.172433][ T369] EXT4-fs (loop5): unmounting filesystem. [ 29.185431][ T530] loop2: detected capacity change from 0 to 2048 [ 29.201734][ T520] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.241261][ T371] EXT4-fs (loop1): unmounting filesystem. [ 29.255388][ T527] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 29.268763][ T527] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.283057][ T538] loop5: detected capacity change from 0 to 2048 [ 29.295765][ T536] loop6: detected capacity change from 0 to 2048 [ 29.303685][ T530] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.316219][ T374] EXT4-fs (loop4): unmounting filesystem. [ 29.324065][ T530] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.340846][ T536] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 29.359555][ T538] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 29.364491][ T542] loop1: detected capacity change from 0 to 2048 [ 29.370015][ T538] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.385936][ T536] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.397048][ T546] loop4: detected capacity change from 0 to 2048 [ 29.413154][ T369] EXT4-fs (loop5): unmounting filesystem. [ 29.419668][ T375] EXT4-fs (loop2): unmounting filesystem. [ 29.445222][ T372] EXT4-fs (loop6): unmounting filesystem. [ 29.456484][ T542] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 29.462712][ T550] loop5: detected capacity change from 0 to 2048 [ 29.476524][ T542] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.500292][ T553] loop2: detected capacity change from 0 to 2048 [ 29.516268][ T557] loop6: detected capacity change from 0 to 2048 [ 29.526461][ T546] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 29.536698][ T550] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 29.552655][ T546] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.552994][ T371] EXT4-fs (loop1): unmounting filesystem. [ 29.576520][ T550] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.592860][ T557] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 29.606429][ T553] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.617716][ T564] loop1: detected capacity change from 0 to 2048 [ 29.633220][ T557] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.659890][ T564] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.684557][ T568] loop5: detected capacity change from 0 to 2048 [ 29.713192][ T572] loop4: detected capacity change from 0 to 2048 [ 29.722836][ T570] loop2: detected capacity change from 0 to 2048 [ 29.754890][ T572] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.772743][ T578] loop6: detected capacity change from 0 to 2048 [ 29.780354][ T568] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.813296][ T580] loop1: detected capacity change from 0 to 2048 [ 29.827583][ T43] ------------[ cut here ]------------ [ 29.833085][ T43] kernel BUG at fs/ext4/inode.c:2761! [ 29.839835][ T43] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 29.845933][ T43] CPU: 1 PID: 43 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 29.853357][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 29.863457][ T43] Workqueue: writeback wb_workfn (flush-7:5) [ 29.869476][ T43] RIP: 0010:ext4_writepages+0x2ff8/0x3020 [ 29.871617][ T587] loop4: detected capacity change from 0 to 2048 [ 29.875223][ T43] Code: 7b 86 ff 84 db 75 31 e8 c6 78 86 ff 49 bc 00 00 00 00 00 fc ff df 4c 8b 7c 24 18 4c 8b 6c 24 38 e9 a2 f7 ff ff e8 a8 78 86 ff <0f> 0b e8 a1 78 86 ff e8 88 c9 16 ff eb 93 e8 95 78 86 ff e8 7c c9 [ 29.901324][ T43] RSP: 0018:ffffc900002cf120 EFLAGS: 00010293 [ 29.907586][ T43] RAX: ffffffff81e9b118 RBX: 000000c410000000 RCX: ffff888109f86540 [ 29.915576][ T43] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 29.923561][ T43] RBP: ffffc900002cf490 R08: dffffc0000000000 R09: ffffed10252aa230 [ 29.931549][ T43] R10: ffffed10252aa230 R11: 1ffff110252aa22f R12: dffffc0000000000 [ 29.939634][ T43] R13: ffff888129551290 R14: 0000008000000000 R15: ffff888129551178 [ 29.947608][ T43] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 29.956535][ T43] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.963116][ T43] CR2: 00007f153f223d58 CR3: 00000001227bc000 CR4: 00000000003506a0 [ 29.971118][ T43] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.979183][ T43] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.987328][ T43] Call Trace: [ 29.990604][ T43] [ 29.993532][ T43] ? xas_start+0x317/0x3e0 [ 29.997957][ T43] ? xas_load+0x39e/0x3b0 [ 30.002293][ T43] ? __cfi_ext4_writepages+0x10/0x10 [ 30.007589][ T43] ? __kasan_check_write+0x14/0x20 [ 30.012693][ T43] ? __filemap_get_folio+0x81c/0x980 [ 30.017972][ T43] ? __kasan_check_write+0x14/0x20 [ 30.023078][ T43] ? folio_mark_accessed+0x277/0x4d0 [ 30.028366][ T43] ? memcpy+0x56/0x70 [ 30.032435][ T43] ? __cfi_ext4_writepages+0x10/0x10 [ 30.037808][ T43] do_writepages+0x3a9/0x5e0 [ 30.042401][ T43] ? __kasan_check_write+0x14/0x20 [ 30.047506][ T43] ? __filemap_get_folio+0x81c/0x980 [ 30.052878][ T43] ? __cfi_do_writepages+0x10/0x10 [ 30.057989][ T43] ? __kasan_check_write+0x14/0x20 [ 30.063097][ T43] ? _raw_spin_lock+0x8e/0xe0 [ 30.067775][ T43] __writeback_single_inode+0xc6/0xad0 [ 30.073240][ T43] ? inode_io_list_move_locked+0x366/0x3d0 [ 30.079048][ T43] writeback_sb_inodes+0x9b8/0x1550 [ 30.084253][ T43] ? queue_io+0x4c0/0x4c0 [ 30.088582][ T43] ? __kasan_check_read+0x11/0x20 [ 30.093600][ T43] ? queue_io+0x382/0x4c0 [ 30.097959][ T43] wb_writeback+0x3f1/0x980 [ 30.102578][ T43] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 30.108573][ T43] ? set_worker_desc+0x155/0x1c0 [ 30.113540][ T43] ? __kasan_check_write+0x14/0x20 [ 30.118761][ T43] ? loop_process_work+0x1dd5/0x1eb0 [ 30.124050][ T43] wb_workfn+0x350/0xda0 [ 30.128301][ T43] ? __cfi_wb_workfn+0x10/0x10 [ 30.133236][ T43] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 30.139140][ T43] ? __kasan_check_read+0x11/0x20 [ 30.144245][ T43] ? ttwu_do_wakeup+0xfb/0x490 [ 30.149020][ T43] ? __kasan_check_write+0x14/0x20 [ 30.154129][ T43] ? _raw_spin_lock_irq+0x8f/0xe0 [ 30.159158][ T43] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 30.164719][ T43] ? try_to_wake_up+0x613/0x1220 [ 30.169665][ T43] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 30.175031][ T43] process_one_work+0x71f/0xc40 [ 30.179877][ T43] worker_thread+0xa29/0x11f0 [ 30.184633][ T43] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 30.190092][ T43] kthread+0x281/0x320 [ 30.194158][ T43] ? __cfi_worker_thread+0x10/0x10 [ 30.199350][ T43] ? __cfi_kthread+0x10/0x10 [ 30.203936][ T43] ret_from_fork+0x1f/0x30 [ 30.208352][ T43] [ 30.211625][ T43] Modules linked in: [ 30.218591][ T43] ---[ end trace 0000000000000000 ]--- [ 30.224322][ T43] RIP: 0010:ext4_writepages+0x2ff8/0x3020 [ 30.224746][ T592] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 30.230554][ T43] Code: 7b 86 ff 84 db 75 31 e8 c6 78 86 ff 49 bc 00 00 00 00 00 fc ff df 4c 8b 7c 24 18 4c 8b 6c 24 38 e9 a2 f7 ff ff e8 a8 78 86 ff <0f> 0b e8 a1 78 86 ff e8 88 c9 16 ff eb 93 e8 95 78 86 ff e8 7c c9 [ 30.275936][ T587] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 30.276888][ T580] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 30.292864][ T43] RSP: 0018:ffffc900002cf120 EFLAGS: 00010293 [ 30.306594][ T570] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 30.311453][ T43] RAX: ffffffff81e9b118 RBX: 000000c410000000 RCX: ffff888109f86540 [ 30.334398][ T43] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 30.342595][ T43] RBP: ffffc900002cf490 R08: dffffc0000000000 R09: ffffed10252aa230 [ 30.351451][ T43] R10: ffffed10252aa230 R11: 1ffff110252aa22f R12: dffffc0000000000 [ 30.359801][ T363] ------------[ cut here ]------------ [ 30.361535][ T43] R13: ffff888129551290 R14: 0000008000000000 R15: ffff888129551178 [ 30.365270][ T363] kernel BUG at fs/ext4/inode.c:2761! [ 30.373395][ T43] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 30.415338][ T596] loop2: detected capacity change from 0 to 2048 [ 30.425250][ T597] loop6: detected capacity change from 0 to 2048 [ 30.427681][ T43] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.434183][ T599] loop4: detected capacity change from 0 to 2048 [ 30.438567][ T43] CR2: 000055556f3ab4a8 CR3: 000000010fe3a000 CR4: 00000000003506a0 [ 30.444818][ T363] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 30.453512][ T43] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.458681][ T363] CPU: 0 PID: 363 Comm: kworker/u4:4 Tainted: G D syzkaller #0 [ 30.458702][ T363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 30.466861][ T43] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.475672][ T363] Workqueue: writeback wb_workfn (flush-7:1) [ 30.486354][ T43] Kernel panic - not syncing: Fatal exception [ 30.494226][ T363] RIP: 0010:ext4_writepages+0x2ff8/0x3020 [ 30.494255][ T363] Code: 7b 86 ff 84 db 75 31 e8 c6 78 86 ff 49 bc 00 00 00 00 00 fc ff df 4c 8b 7c 24 18 4c 8b 6c 24 38 e9 a2 f7 ff ff e8 a8 78 86 ff <0f> 0b e8 a1 78 86 ff e8 88 c9 16 ff eb 93 e8 95 78 86 ff e8 7c c9 [ 30.494268][ T363] RSP: 0018:ffffc900009e7120 EFLAGS: 00010293 [ 30.494283][ T363] RAX: ffffffff81e9b118 RBX: 000000c410000000 RCX: ffff888112973cc0 [ 30.494295][ T363] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 30.494305][ T363] RBP: ffffc900009e7490 R08: dffffc0000000000 R09: ffffed10252ab0c2 [ 30.494317][ T363] R10: ffffed10252ab0c2 R11: 1ffff110252ab0c1 R12: dffffc0000000000 [ 30.494328][ T363] R13: ffff888129558720 R14: 0000008000000000 R15: ffff888129558608 [ 30.494341][ T363] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.494355][ T363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.494366][ T363] CR2: 00007fca6f4ff000 CR3: 0000000113d21000 CR4: 00000000003506b0 [ 30.494382][ T363] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.494391][ T363] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.494402][ T363] Call Trace: [ 30.494407][ T363] [ 30.494416][ T363] ? xas_start+0x317/0x3e0 [ 30.494438][ T363] ? xas_load+0x39e/0x3b0 [ 30.494464][ T363] ? __cfi_ext4_writepages+0x10/0x10 [ 30.494484][ T363] ? __kasan_check_write+0x14/0x20 [ 30.494499][ T363] ? __filemap_get_folio+0x81c/0x980 [ 30.494517][ T363] ? __kasan_check_write+0x14/0x20 [ 30.494530][ T363] ? folio_mark_accessed+0x277/0x4d0 [ 30.494554][ T363] ? memcpy+0x56/0x70 [ 30.494569][ T363] ? __cfi_ext4_writepages+0x10/0x10 [ 30.494589][ T363] do_writepages+0x3a9/0x5e0 [ 30.494606][ T363] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 30.494628][ T363] ? __cfi_do_writepages+0x10/0x10 [ 30.494645][ T363] ? __kasan_check_write+0x14/0x20 [ 30.494659][ T363] ? _raw_spin_lock+0x8e/0xe0 [ 30.494677][ T363] __writeback_single_inode+0xc6/0xad0 [ 30.494697][ T363] ? inode_io_list_move_locked+0x366/0x3d0 [ 30.494715][ T363] writeback_sb_inodes+0x9b8/0x1550 [ 30.494737][ T363] ? check_preempt_wakeup+0x7fd/0xbc0 [ 30.494753][ T363] ? queue_io+0x4c0/0x4c0 [ 30.494773][ T363] ? __kasan_check_read+0x11/0x20 [ 30.494787][ T363] ? queue_io+0x382/0x4c0 [ 30.494805][ T363] wb_writeback+0x3f1/0x980 [ 30.494825][ T363] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 30.494844][ T363] ? set_worker_desc+0x155/0x1c0 [ 30.494865][ T363] ? update_load_avg+0x4c2/0x13f0 [ 30.494886][ T363] ? __kasan_check_write+0x14/0x20 [ 30.494900][ T363] ? sched_clock_cpu+0x6e/0x250 [ 30.494919][ T363] wb_workfn+0x350/0xda0 [ 30.494937][ T363] ? __cfi_wb_workfn+0x10/0x10 [ 30.494953][ T363] ? kthread_data+0x50/0xc0 [ 30.494968][ T363] ? _raw_spin_unlock+0x4c/0x70 [ 30.494984][ T363] ? finish_task_switch+0x16b/0x7b0 [ 30.495004][ T363] ? __switch_to_asm+0x3a/0x60 [ 30.495022][ T363] ? __schedule+0xb8f/0x14e0 [ 30.495039][ T363] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 30.495058][ T363] process_one_work+0x71f/0xc40 [ 30.495075][ T363] worker_thread+0xa29/0x11f0 [ 30.495094][ T363] kthread+0x281/0x320 [ 30.495109][ T363] ? __cfi_worker_thread+0x10/0x10 [ 30.495124][ T363] ? __cfi_kthread+0x10/0x10 [ 30.495140][ T363] ret_from_fork+0x1f/0x30 [ 30.495159][ T363] [ 30.495164][ T363] Modules linked in: [ 30.501258][ T43] Kernel Offset: disabled [ 30.835980][ T43] Rebooting in 86400 seconds..