Warning: Permanently added '10.128.1.250' (ED25519) to the list of known hosts. 2026/01/23 05:51:40 parsed 1 programs [ 26.688089][ T30] audit: type=1400 audit(1769147500.688:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 26.708886][ T30] audit: type=1400 audit(1769147500.688:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 27.672133][ T30] audit: type=1400 audit(1769147501.668:66): avc: denied { mounton } for pid=288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.675542][ T288] cgroup: Unknown subsys name 'net' [ 27.694968][ T30] audit: type=1400 audit(1769147501.668:67): avc: denied { mount } for pid=288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.722412][ T30] audit: type=1400 audit(1769147501.698:68): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.722899][ T288] cgroup: Unknown subsys name 'devices' [ 27.869448][ T288] cgroup: Unknown subsys name 'hugetlb' [ 27.875131][ T288] cgroup: Unknown subsys name 'rlimit' [ 28.053035][ T30] audit: type=1400 audit(1769147502.048:69): avc: denied { setattr } for pid=288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.076508][ T30] audit: type=1400 audit(1769147502.048:70): avc: denied { create } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.096977][ T30] audit: type=1400 audit(1769147502.048:71): avc: denied { write } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.117820][ T30] audit: type=1400 audit(1769147502.048:72): avc: denied { read } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.137230][ T291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.138954][ T30] audit: type=1400 audit(1769147502.058:73): avc: denied { mounton } for pid=288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.191343][ T288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.631387][ T293] request_module fs-gadgetfs succeeded, but still no fs? [ 29.046116][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.053913][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.061607][ T323] device bridge_slave_0 entered promiscuous mode [ 29.068778][ T319] syz-executor (319) used greatest stack depth: 22208 bytes left [ 29.069029][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.083632][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.091202][ T323] device bridge_slave_1 entered promiscuous mode [ 29.135021][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.142145][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.149515][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.156559][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.180155][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.187888][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.196184][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.213577][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.221575][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.235156][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.248925][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.257506][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.264899][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.273548][ T323] device veth0_vlan entered promiscuous mode [ 29.284195][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.293421][ T323] device veth1_macvtap entered promiscuous mode [ 29.302488][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.312659][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.341870][ T323] syz-executor (323) used greatest stack depth: 20672 bytes left 2026/01/23 05:51:43 executed programs: 0 [ 29.922228][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.929318][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.936635][ T362] device bridge_slave_0 entered promiscuous mode [ 29.944139][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.951293][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.959048][ T362] device bridge_slave_1 entered promiscuous mode [ 30.003944][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.011096][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.018408][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.025446][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.038645][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.045873][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.061117][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.068792][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.078179][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.086533][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.095008][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.102102][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.110613][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.119164][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.127392][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.134436][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.145834][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.154061][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.163430][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.171609][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.184824][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.193290][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.204167][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.212250][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.220461][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.228043][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.242086][ T362] device veth0_vlan entered promiscuous mode [ 30.251753][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.260110][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.275129][ T362] device veth1_macvtap entered promiscuous mode [ 30.284030][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.291816][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.300241][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.309561][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.318121][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.348156][ T372] loop2: detected capacity change from 0 to 512 [ 30.362278][ T372] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0102] [ 30.370395][ T372] System zones: 1-12 [ 30.375862][ T372] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.17: error while reading EA inode 32 err=-116 [ 30.388253][ T372] EXT4-fs (loop2): Remounting filesystem read-only [ 30.394800][ T372] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.407928][ T372] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.17: error while reading EA inode 32 err=-116 [ 30.420287][ T372] EXT4-fs (loop2): Remounting filesystem read-only [ 30.426898][ T372] EXT4-fs (loop2): 1 orphan inode deleted [ 30.432931][ T372] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,debug,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,jqfmt=vfsv1,abort,inlinecrypt,. Quota mode: none. [ 30.456695][ T362] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 30.477374][ T362] EXT4-fs (loop2): Remounting filesystem read-only [ 30.485118][ T362] ------------[ cut here ]------------ [ 30.490715][ T362] kernel BUG at fs/namei.c:2941! [ 30.495670][ T362] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 30.501790][ T362] CPU: 0 PID: 362 Comm: syz-executor Not tainted syzkaller #0 [ 30.509258][ T362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 30.519398][ T362] RIP: 0010:may_delete+0x701/0x710 [ 30.524522][ T362] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 f0 29 f5 ff e9 77 fe ff ff e8 16 02 b6 ff 0f 0b e8 0f 02 b6 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 30.544125][ T362] RSP: 0018:ffffc90000b97c90 EFLAGS: 00010293 [ 30.550190][ T362] RAX: ffffffff81b3c761 RBX: ffff88810d19a330 RCX: ffff88810cb88000 [ 30.558163][ T362] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 30.566133][ T362] RBP: ffffc90000b97cf8 R08: 0000000000000003 R09: 0000000000000004 [ 30.574103][ T362] R10: dffffc0000000000 R11: fffff52000172f74 R12: dffffc0000000000 [ 30.582072][ T362] R13: 0000000000000001 R14: ffff88810d1ccbe0 R15: 1ffff11021a33466 [ 30.590051][ T362] FS: 000055556f170500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.598982][ T362] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.605564][ T362] CR2: 000055556f193948 CR3: 000000010dea9000 CR4: 00000000003506b0 [ 30.613535][ T362] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.621506][ T362] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.629482][ T362] Call Trace: [ 30.632759][ T362] [ 30.635687][ T362] vfs_rmdir+0x32/0x460 [ 30.639847][ T362] incfs_kill_sb+0x105/0x220 [ 30.644432][ T362] deactivate_locked_super+0xa0/0x100 [ 30.649820][ T362] deactivate_super+0xaf/0xe0 [ 30.654495][ T362] cleanup_mnt+0x45b/0x510 [ 30.658905][ T362] __cleanup_mnt+0x19/0x20 [ 30.663329][ T362] task_work_run+0x127/0x190 [ 30.668007][ T362] exit_to_user_mode_loop+0xd0/0xe0 [ 30.673225][ T362] exit_to_user_mode_prepare+0x87/0xd0 [ 30.678677][ T362] syscall_exit_to_user_mode+0x1a/0x30 [ 30.684129][ T362] do_syscall_64+0x58/0xa0 [ 30.688566][ T362] ? clear_bhb_loop+0x50/0xa0 [ 30.693242][ T362] ? clear_bhb_loop+0x50/0xa0 [ 30.697912][ T362] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 30.703800][ T362] RIP: 0033:0x7f4137f72f17 [ 30.708206][ T362] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 30.727983][ T362] RSP: 002b:00007ffdf32e2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 30.736392][ T362] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4137f72f17 [ 30.744362][ T362] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf32e20e0 [ 30.752340][ T362] RBP: 00007ffdf32e20e0 R08: 00007ffdf32e30e0 R09: 00000000ffffffff [ 30.760315][ T362] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf32e31d0 [ 30.768281][ T362] R13: 00007f4137fdb71f R14: 0000000000007677 R15: 00007ffdf32e42a0 [ 30.776253][ T362] [ 30.779267][ T362] Modules linked in: [ 30.785210][ T362] ---[ end trace 0aaac9a932ffd6d2 ]--- [ 30.790881][ T362] RIP: 0010:may_delete+0x701/0x710 [ 30.796122][ T362] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 f0 29 f5 ff e9 77 fe ff ff e8 16 02 b6 ff 0f 0b e8 0f 02 b6 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 30.816209][ T362] RSP: 0018:ffffc90000b97c90 EFLAGS: 00010293 [ 30.822386][ T362] RAX: ffffffff81b3c761 RBX: ffff88810d19a330 RCX: ffff88810cb88000 [ 30.831067][ T362] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 30.839315][ T362] RBP: ffffc90000b97cf8 R08: 0000000000000003 R09: 0000000000000004 [ 30.848088][ T362] R10: dffffc0000000000 R11: fffff52000172f74 R12: dffffc0000000000 [ 30.856104][ T362] R13: 0000000000000001 R14: ffff88810d1ccbe0 R15: 1ffff11021a33466 [ 30.864489][ T362] FS: 000055556f170500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.873642][ T362] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.880341][ T362] CR2: 000055556f193948 CR3: 000000010dea9000 CR4: 00000000003506b0 [ 30.888565][ T362] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.896615][ T362] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.904715][ T362] Kernel panic - not syncing: Fatal exception [ 30.911209][ T362] Kernel Offset: disabled [ 30.915637][ T362] Rebooting in 86400 seconds..