Warning: Permanently added '10.128.1.198' (ED25519) to the list of known hosts. 2026/05/06 08:18:47 parsed 1 programs [ 26.240844][ T30] audit: type=1400 audit(1778055527.666:64): avc: denied { node_bind } for pid=293 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 26.261711][ T30] audit: type=1400 audit(1778055527.666:65): avc: denied { module_request } for pid=293 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 27.218366][ T30] audit: type=1400 audit(1778055528.646:66): avc: denied { mounton } for pid=299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.221977][ T299] cgroup: Unknown subsys name 'net' [ 27.241217][ T30] audit: type=1400 audit(1778055528.646:67): avc: denied { mount } for pid=299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.269074][ T30] audit: type=1400 audit(1778055528.676:68): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.269527][ T299] cgroup: Unknown subsys name 'devices' [ 27.438188][ T299] cgroup: Unknown subsys name 'hugetlb' [ 27.443931][ T299] cgroup: Unknown subsys name 'rlimit' [ 27.681809][ T30] audit: type=1400 audit(1778055529.106:69): avc: denied { setattr } for pid=299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.705439][ T30] audit: type=1400 audit(1778055529.106:70): avc: denied { create } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.726141][ T30] audit: type=1400 audit(1778055529.106:71): avc: denied { write } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.746600][ T30] audit: type=1400 audit(1778055529.106:72): avc: denied { read } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.767629][ T30] audit: type=1400 audit(1778055529.116:73): avc: denied { mounton } for pid=299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.786465][ T303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.823833][ T299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.294544][ T307] request_module fs-gadgetfs succeeded, but still no fs? [ 28.747472][ T331] syz-executor (331) used greatest stack depth: 21888 bytes left [ 29.006051][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.013438][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.021344][ T354] device bridge_slave_0 entered promiscuous mode [ 29.028349][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.035392][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.043004][ T354] device bridge_slave_1 entered promiscuous mode [ 29.086398][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.093510][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.100874][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.108042][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.133582][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.142442][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.150699][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.165510][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.173920][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.181509][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.190613][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.198921][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.207640][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.228199][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.238749][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.259767][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.271945][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.280349][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.288054][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.297138][ T354] device veth0_vlan entered promiscuous mode [ 29.312559][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.322360][ T354] device veth1_macvtap entered promiscuous mode [ 29.333656][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.344238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.394025][ T354] syz-executor (354) used greatest stack depth: 21728 bytes left 2026/05/06 08:18:51 executed programs: 0 [ 29.702056][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.709820][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.717812][ T369] device bridge_slave_0 entered promiscuous mode [ 29.725649][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.732833][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.740632][ T369] device bridge_slave_1 entered promiscuous mode [ 29.793486][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.801190][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.810313][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.818773][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.827149][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.834176][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.842453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.851140][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.859815][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.868227][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.875491][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.893313][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.903256][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.917753][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.933671][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.942054][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.950892][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.959783][ T369] device veth0_vlan entered promiscuous mode [ 29.975563][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.984738][ T369] device veth1_macvtap entered promiscuous mode [ 29.998782][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.010059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.037277][ T373] loop2: detected capacity change from 0 to 16 [ 30.072431][ T373] erofs: (device loop2): mounted with root inode @ nid 36. [ 30.080812][ T373] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 30.090778][ T373] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 30.098744][ T373] #PF: supervisor instruction fetch in kernel mode [ 30.105595][ T373] #PF: error_code(0x0010) - not-present page [ 30.111904][ T373] PGD 123e22067 P4D 123e22067 PUD 0 [ 30.117323][ T373] Oops: 0010 [#1] PREEMPT SMP KASAN [ 30.122843][ T373] CPU: 0 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 30.129958][ T373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 30.140194][ T373] RIP: 0010:0x0 [ 30.143883][ T373] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 30.151635][ T373] RSP: 0018:ffffc9000400eb48 EFLAGS: 00010246 [ 30.157799][ T373] RAX: 1ffffffff0ac1962 RBX: ffffc9000400f4a0 RCX: ffff88811172e2c0 [ 30.165898][ T373] RDX: 0000000000000000 RSI: ffffc9000400f4a0 RDI: ffffc9000400f000 [ 30.173889][ T373] RBP: ffffc9000400eb70 R08: ffffc9000400f02f R09: ffffc9000400f02a [ 30.182046][ T373] R10: dffffc0000000000 R11: fffff52000801e06 R12: dffffc0000000000 [ 30.190111][ T373] R13: 000000000000073b R14: ffffc9000400f000 R15: ffffffff8560cb10 [ 30.198091][ T373] FS: 000055557dfaa500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.207226][ T373] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.214116][ T373] CR2: ffffffffffffffd6 CR3: 000000012ee91000 CR4: 00000000003506b0 [ 30.222404][ T373] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.230551][ T373] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.239006][ T373] Call Trace: [ 30.242396][ T373] [ 30.245359][ T373] z_erofs_decompress+0x79/0xb0 [ 30.250222][ T373] z_erofs_decompress_queue+0x10d4/0x1a30 [ 30.255958][ T373] ? z_erofs_pagevec_ctor_init+0x6a0/0x6a0 [ 30.261796][ T373] ? _raw_spin_unlock_irq+0x4e/0x70 [ 30.267122][ T373] ? wait_for_common_io+0x23b/0x2e0 [ 30.272356][ T373] ? wait_for_completion_io+0x20/0x20 [ 30.277733][ T373] ? submit_bio_noacct+0x800/0x800 [ 30.282939][ T373] z_erofs_runqueue+0x113e/0x11c0 [ 30.287968][ T373] ? z_erofs_do_read_page+0x21c8/0x2280 [ 30.293520][ T373] ? z_erofs_do_read_page+0x2280/0x2280 [ 30.299075][ T373] ? z_erofs_pcluster_readmore+0x52c/0x560 [ 30.304891][ T373] z_erofs_readpage+0x25d/0x4d0 [ 30.309880][ T373] ? z_erofs_rcu_callback+0x170/0x170 [ 30.315269][ T373] ? _raw_spin_lock+0x94/0xf0 [ 30.319969][ T373] ? add_to_page_cache_lru+0x18e/0x210 [ 30.325448][ T373] ? z_erofs_rcu_callback+0x170/0x170 [ 30.330850][ T373] do_read_cache_page+0x66e/0xa30 [ 30.336069][ T373] read_cache_page+0x50/0x70 [ 30.340701][ T373] erofs_namei+0x152/0xfa0 [ 30.345240][ T373] erofs_lookup+0xa5/0x260 [ 30.349680][ T373] __lookup_slow+0x2b8/0x410 [ 30.354293][ T373] ? lookup_one_len+0x2d0/0x2d0 [ 30.359165][ T373] ? down_read+0xab/0x100 [ 30.363527][ T373] ? __down_common+0x380/0x380 [ 30.368402][ T373] ? handle_dots+0xe10/0xe10 [ 30.373083][ T373] ? handle_dots+0xf8/0xe10 [ 30.377620][ T373] lookup_slow+0x57/0x70 [ 30.381892][ T373] walk_component+0x325/0x460 [ 30.386597][ T373] link_path_walk+0x665/0xd60 [ 30.391338][ T373] ? should_failslab+0x9/0x20 [ 30.396047][ T373] ? handle_lookup_down+0x130/0x130 [ 30.401356][ T373] path_openat+0x27b/0x2f20 [ 30.405890][ T373] ? kmem_cache_alloc+0xf7/0x260 [ 30.410879][ T373] ? getname+0x19/0x20 [ 30.414966][ T373] ? do_sys_openat2+0xeb/0x7f0 [ 30.419928][ T373] ? do_filp_open+0x410/0x410 [ 30.424634][ T373] do_filp_open+0x1e2/0x410 [ 30.429155][ T373] ? vfs_tmpfile+0x2d0/0x2d0 [ 30.433776][ T373] do_sys_openat2+0x15e/0x7f0 [ 30.438661][ T373] ? __se_sys_futex+0x135/0x330 [ 30.443821][ T373] ? do_sys_open+0xe0/0xe0 [ 30.448289][ T373] ? __x64_sys_futex+0x100/0x100 [ 30.453264][ T373] __x64_sys_open+0x11c/0x140 [ 30.457976][ T373] x64_sys_call+0x3fc/0x9a0 [ 30.462514][ T373] do_syscall_64+0x4c/0xa0 [ 30.466953][ T373] ? clear_bhb_loop+0x50/0xa0 [ 30.471668][ T373] ? clear_bhb_loop+0x50/0xa0 [ 30.476365][ T373] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 30.482290][ T373] RIP: 0033:0x7fb5425e5dd9 [ 30.486724][ T373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.506374][ T373] RSP: 002b:00007ffce6f6e8f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 30.514903][ T373] RAX: ffffffffffffffda RBX: 00007fb54285efa0 RCX: 00007fb5425e5dd9 [ 30.522902][ T373] RDX: 0000000000000000 RSI: 00000000001a1342 RDI: 0000200000000000 [ 30.530896][ T373] RBP: 00007fb54267bd69 R08: 0000000000000000 R09: 0000000000000000 [ 30.538885][ T373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.546873][ T373] R13: 00007fb54285efac R14: 00007fb54285efa0 R15: 00007fb54285efa0 [ 30.554961][ T373] [ 30.558091][ T373] Modules linked in: [ 30.562029][ T373] CR2: 0000000000000000 [ 30.566219][ T373] ---[ end trace 1ba30838848932bb ]--- [ 30.571689][ T373] RIP: 0010:0x0 [ 30.575202][ T373] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 30.582955][ T373] RSP: 0018:ffffc9000400eb48 EFLAGS: 00010246 [ 30.589044][ T373] RAX: 1ffffffff0ac1962 RBX: ffffc9000400f4a0 RCX: ffff88811172e2c0 [ 30.597141][ T373] RDX: 0000000000000000 RSI: ffffc9000400f4a0 RDI: ffffc9000400f000 [ 30.605394][ T373] RBP: ffffc9000400eb70 R08: ffffc9000400f02f R09: ffffc9000400f02a [ 30.613388][ T373] R10: dffffc0000000000 R11: fffff52000801e06 R12: dffffc0000000000 [ 30.621473][ T373] R13: 000000000000073b R14: ffffc9000400f000 R15: ffffffff8560cb10 [ 30.630098][ T373] FS: 000055557dfaa500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.639068][ T373] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.645766][ T373] CR2: ffffffffffffffd6 CR3: 000000012ee91000 CR4: 00000000003506b0 [ 30.653760][ T373] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.661744][ T373] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.669743][ T373] Kernel panic - not syncing: Fatal exception [ 30.676269][ T373] Kernel Offset: disabled [ 30.680767][ T373] Rebooting in 86400 seconds..