Warning: Permanently added '10.128.1.102' (ED25519) to the list of known hosts. 2025/11/01 05:50:30 parsed 1 programs [ 23.911236][ T30] audit: type=1400 audit(1761976230.495:64): avc: denied { node_bind } for pid=282 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 23.932033][ T30] audit: type=1400 audit(1761976230.495:65): avc: denied { module_request } for pid=282 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 24.935800][ T30] audit: type=1400 audit(1761976231.515:66): avc: denied { mounton } for pid=290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.937200][ T290] cgroup: Unknown subsys name 'net' [ 24.958523][ T30] audit: type=1400 audit(1761976231.515:67): avc: denied { mount } for pid=290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.986056][ T30] audit: type=1400 audit(1761976231.545:68): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.987242][ T290] cgroup: Unknown subsys name 'devices' [ 25.190130][ T290] cgroup: Unknown subsys name 'hugetlb' [ 25.195775][ T290] cgroup: Unknown subsys name 'rlimit' [ 25.373348][ T30] audit: type=1400 audit(1761976231.955:69): avc: denied { setattr } for pid=290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.396631][ T30] audit: type=1400 audit(1761976231.955:70): avc: denied { create } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.417295][ T30] audit: type=1400 audit(1761976231.955:71): avc: denied { write } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.423406][ T293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.437870][ T30] audit: type=1400 audit(1761976231.955:72): avc: denied { read } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.466550][ T30] audit: type=1400 audit(1761976231.955:73): avc: denied { mounton } for pid=290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.525476][ T290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.015310][ T295] request_module fs-gadgetfs succeeded, but still no fs? [ 26.165673][ T300] syz-executor (300) used greatest stack depth: 21800 bytes left [ 26.571193][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.578359][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.585892][ T330] device bridge_slave_0 entered promiscuous mode [ 26.593917][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.601064][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.608628][ T330] device bridge_slave_1 entered promiscuous mode [ 26.660092][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.667258][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.674609][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.681855][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.701654][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.709430][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.716624][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.728831][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.737022][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.744082][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.751472][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.759842][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.766918][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.779205][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.788296][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.801739][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.812877][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.821064][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.828611][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.836699][ T330] device veth0_vlan entered promiscuous mode [ 26.847480][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.856604][ T330] device veth1_macvtap entered promiscuous mode [ 26.865641][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.875697][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.904789][ T330] syz-executor (330) used greatest stack depth: 21312 bytes left 2025/11/01 05:50:33 executed programs: 0 [ 27.212544][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.219629][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.226971][ T363] device bridge_slave_0 entered promiscuous mode [ 27.239564][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.246626][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.254166][ T363] device bridge_slave_1 entered promiscuous mode [ 27.307277][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.314451][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.321887][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.329026][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.346936][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.354756][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.362296][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.377417][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.385632][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.392692][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.401711][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.409950][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.417019][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.429282][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.444334][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.458595][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.469923][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.478085][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.485497][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.494954][ T363] device veth0_vlan entered promiscuous mode [ 27.507126][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.516836][ T363] device veth1_macvtap entered promiscuous mode [ 27.527742][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.549865][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.600419][ T375] loop2: detected capacity change from 0 to 2048 [ 27.643477][ T375] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,grpquota,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 27.667569][ T374] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.17: bg 0: block 234: padding at end of block bitmap is not set [ 27.690010][ T376] EXT4-fs error (device loop2): ext4_map_blocks:740: inode #18: block 62218: comm vhost-375: lblock 0 mapped to illegal pblock 62218 (length 1) [ 27.705344][ T376] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm vhost-375: lblock 0 mapped to illegal pblock 62218 (length 1) [ 27.720465][ T376] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm vhost-375: lblock 0 mapped to illegal pblock 62218 (length 1) [ 27.735725][ T376] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm vhost-375: lblock 0 mapped to illegal pblock 62218 (length 1) [ 27.815309][ T382] loop2: detected capacity change from 0 to 2048 [ 27.889138][ T382] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,grpquota,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 27.928932][ T381] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.18: bg 0: block 234: padding at end of block bitmap is not set [ 28.015670][ T387] loop2: detected capacity change from 0 to 2048 [ 28.039463][ T387] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,grpquota,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 28.066143][ T386] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.19: bg 0: block 234: padding at end of block bitmap is not set [ 28.085050][ T386] EXT4-fs error (device loop2): ext4_map_blocks:740: inode #18: block 62218: comm syz.2.19: lblock 0 mapped to illegal pblock 62218 (length 1) [ 28.085068][ T388] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm vhost-387: lblock 0 mapped to illegal pblock 62218 (length 1) [ 28.085317][ T388] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm vhost-387: lblock 0 mapped to illegal pblock 62218 (length 1) [ 28.100242][ T386] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm syz.2.19: lblock 0 mapped to illegal pblock 62218 (length 1) [ 28.114820][ T388] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm vhost-387: lblock 0 mapped to illegal pblock 62218 (length 1) [ 28.130217][ T386] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm syz.2.19: lblock 0 mapped to illegal pblock 62218 (length 1) [ 28.144430][ T388] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm vhost-387: lblock 0 mapped to illegal pblock 62218 (length 1) [ 28.158995][ T386] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm syz.2.19: lblock 0 mapped to illegal pblock 62218 (length 1) [ 28.174561][ T388] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 62218: comm vhost-387: lblock 0 mapped to illegal pblock 62218 (length 1) [ 28.308226][ T392] loop2: detected capacity change from 0 to 2048 [ 28.323204][ T392] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,grpquota,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 28.352720][ T391] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.20: bg 0: block 234: padding at end of block bitmap is not set [ 28.453476][ T397] loop2: detected capacity change from 0 to 2048 [ 28.486327][ T397] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,grpquota,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 28.529032][ T398] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm vhost-397: bg 0: block 234: padding at end of block bitmap is not set [ 28.550271][ T45] ------------[ cut here ]------------ [ 28.555762][ T45] kernel BUG at fs/ext4/inode.c:2747! [ 28.561262][ T45] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 28.567343][ T45] CPU: 0 PID: 45 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 28.574713][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 28.584856][ T45] Workqueue: writeback wb_workfn (flush-7:2) [ 28.590856][ T45] RIP: 0010:ext4_writepages+0x2f75/0x2f90 [ 28.596580][ T45] Code: 00 00 00 e8 9d 77 8f ff 84 db 75 2c e8 04 75 8f ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 d6 f7 ff ff e8 eb 74 8f ff <0f> 0b e8 e4 74 8f ff e8 bb 2c 27 ff eb a2 e8 d8 74 8f ff e8 af 2c [ 28.616297][ T45] RSP: 0018:ffffc900002ef100 EFLAGS: 00010293 [ 28.622369][ T45] RAX: ffffffff81d94a05 RBX: 0000008410000000 RCX: ffff888108784f00 [ 28.630346][ T45] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 28.638320][ T45] RBP: ffffc900002ef470 R08: dffffc0000000000 R09: ffffed1024052759 [ 28.646310][ T45] R10: ffffed1024052759 R11: 1ffff11024052758 R12: dffffc0000000000 [ 28.654297][ T45] R13: 0000000000000001 R14: 0000008000000000 R15: ffff888120293d58 [ 28.662355][ T45] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 28.671280][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.677858][ T45] CR2: 0000555560fd54a8 CR3: 0000000122b4a000 CR4: 00000000003506b0 [ 28.685852][ T45] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.693818][ T45] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.701791][ T45] Call Trace: [ 28.705067][ T45] [ 28.708002][ T45] ? __kasan_check_write+0x14/0x20 [ 28.713115][ T45] ? pagecache_get_page+0xcb6/0xda0 [ 28.718312][ T45] ? __kasan_check_read+0x11/0x20 [ 28.723337][ T45] ? mark_page_accessed+0x3b6/0x8d0 [ 28.728531][ T45] ? __activate_page+0xd40/0xd40 [ 28.733466][ T45] ? ext4_readpage+0x220/0x220 [ 28.738225][ T45] ? memcpy+0x56/0x70 [ 28.742202][ T45] ? copy_page_from_iter_atomic+0x784/0x1350 [ 28.748191][ T45] ? __kasan_check_read+0x11/0x20 [ 28.753242][ T45] ? __set_page_dirty_no_writeback+0xff/0x130 [ 28.759307][ T45] ? ext4_readpage+0x220/0x220 [ 28.764325][ T45] do_writepages+0x48a/0x6c0 [ 28.768918][ T45] ? update_curr+0x2f3/0x5b0 [ 28.773512][ T45] ? __writepage+0x130/0x130 [ 28.778109][ T45] ? enqueue_task_fair+0xaa7/0x2120 [ 28.783311][ T45] ? __kasan_check_write+0x14/0x20 [ 28.788425][ T45] ? _raw_spin_lock+0x8e/0xe0 [ 28.793112][ T45] __writeback_single_inode+0xd5/0x9c0 [ 28.798597][ T45] ? wbc_attach_and_unlock_inode+0x194/0x5f0 [ 28.804605][ T45] writeback_sb_inodes+0x9c0/0x1590 [ 28.809813][ T45] ? psi_task_change+0x212/0x370 [ 28.814759][ T45] ? queue_io+0x4c0/0x4c0 [ 28.819095][ T45] ? __kasan_check_read+0x11/0x20 [ 28.824126][ T45] ? queue_io+0x382/0x4c0 [ 28.828485][ T45] wb_writeback+0x3f1/0x980 [ 28.833006][ T45] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 28.839002][ T45] ? set_worker_desc+0x155/0x1c0 [ 28.843944][ T45] ? __kasan_check_write+0x14/0x20 [ 28.849075][ T45] wb_workfn+0x38f/0xe20 [ 28.853326][ T45] ? inode_wait_for_writeback+0x200/0x200 [ 28.859051][ T45] ? compat_start_thread+0x20/0x20 [ 28.864198][ T45] ? _raw_spin_unlock+0x4d/0x70 [ 28.869053][ T45] ? finish_task_switch+0x16b/0x780 [ 28.874259][ T45] ? __switch_to_asm+0x3a/0x60 [ 28.879030][ T45] ? __schedule+0xb76/0x14c0 [ 28.883665][ T45] process_one_work+0x6be/0xba0 [ 28.888531][ T45] worker_thread+0xa59/0x1200 [ 28.893238][ T45] ? __kthread_parkme+0xac/0x200 [ 28.898207][ T45] kthread+0x411/0x500 [ 28.902306][ T45] ? worker_clr_flags+0x190/0x190 [ 28.907358][ T45] ? kthread_blkcg+0xd0/0xd0 [ 28.911966][ T45] ret_from_fork+0x1f/0x30 [ 28.916404][ T45] [ 28.919456][ T45] Modules linked in: [ 28.925123][ T45] ---[ end trace 67c208c5bbbee502 ]--- [ 28.930700][ T45] RIP: 0010:ext4_writepages+0x2f75/0x2f90 [ 28.936468][ T45] Code: 00 00 00 e8 9d 77 8f ff 84 db 75 2c e8 04 75 8f ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 d6 f7 ff ff e8 eb 74 8f ff <0f> 0b e8 e4 74 8f ff e8 bb 2c 27 ff eb a2 e8 d8 74 8f ff e8 af 2c [ 28.956359][ T45] RSP: 0018:ffffc900002ef100 EFLAGS: 00010293 [ 28.962651][ T45] RAX: ffffffff81d94a05 RBX: 0000008410000000 RCX: ffff888108784f00 [ 28.970729][ T45] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 28.979058][ T45] RBP: ffffc900002ef470 R08: dffffc0000000000 R09: ffffed1024052759 [ 28.987111][ T45] R10: ffffed1024052759 R11: 1ffff11024052758 R12: dffffc0000000000 [ 28.995302][ T45] R13: 0000000000000001 R14: 0000008000000000 R15: ffff888120293d58 [ 29.003379][ T45] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 29.012713][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.019756][ T8] device bridge_slave_1 left promiscuous mode [ 29.024454][ T45] CR2: 0000555560fd54a8 CR3: 000000010d333000 CR4: 00000000003506b0 [ 29.026064][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.034040][ T45] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.049268][ T45] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.049481][ T8] device bridge_slave_0 left promiscuous mode [ 29.057274][ T45] Kernel panic - not syncing: Fatal exception [ 29.063803][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.069643][ T45] Kernel Offset: disabled [ 29.080982][ T45] Rebooting in 86400 seconds..