Warning: Permanently added '10.128.0.144' (ED25519) to the list of known hosts. 2026/01/09 08:55:28 parsed 1 programs [ 26.658097][ T30] audit: type=1400 audit(1767948928.061:64): avc: denied { node_bind } for pid=282 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 26.679616][ T30] audit: type=1400 audit(1767948928.061:65): avc: denied { module_request } for pid=282 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 27.649105][ T30] audit: type=1400 audit(1767948929.051:66): avc: denied { mounton } for pid=291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.652650][ T291] cgroup: Unknown subsys name 'net' [ 27.672001][ T30] audit: type=1400 audit(1767948929.051:67): avc: denied { mount } for pid=291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.699469][ T30] audit: type=1400 audit(1767948929.071:68): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.699990][ T291] cgroup: Unknown subsys name 'devices' [ 27.869825][ T291] cgroup: Unknown subsys name 'hugetlb' [ 27.875462][ T291] cgroup: Unknown subsys name 'rlimit' [ 28.022969][ T30] audit: type=1400 audit(1767948929.421:69): avc: denied { setattr } for pid=291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.046323][ T30] audit: type=1400 audit(1767948929.421:70): avc: denied { create } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.067231][ T30] audit: type=1400 audit(1767948929.421:71): avc: denied { write } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.087648][ T30] audit: type=1400 audit(1767948929.421:72): avc: denied { read } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.095102][ T293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.108840][ T30] audit: type=1400 audit(1767948929.421:73): avc: denied { mounton } for pid=291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.143208][ T291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.666352][ T297] request_module fs-gadgetfs succeeded, but still no fs? [ 28.909875][ T310] syz-executor (310) used greatest stack depth: 20488 bytes left [ 28.925561][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.932721][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.940227][ T314] device bridge_slave_0 entered promiscuous mode [ 28.947093][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.954350][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.961906][ T314] device bridge_slave_1 entered promiscuous mode [ 29.012333][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.019516][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.026852][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.033939][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.053309][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.061227][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.068818][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.078476][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.086688][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.093797][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.115181][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.123455][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.130537][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.138513][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.146458][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.157643][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.169194][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.177422][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.185268][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.193870][ T314] device veth0_vlan entered promiscuous mode [ 29.204201][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.213399][ T314] device veth1_macvtap entered promiscuous mode [ 29.223772][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.233858][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/01/09 08:55:31 executed programs: 0 [ 29.916385][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.923626][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.931231][ T363] device bridge_slave_0 entered promiscuous mode [ 29.938236][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.945293][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.952913][ T363] device bridge_slave_1 entered promiscuous mode [ 30.021290][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.028883][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.044809][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.053427][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.061703][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.068772][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.076338][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 30.088894][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.097184][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.105537][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.112626][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.122888][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.132420][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.145926][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.163215][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.171602][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.179555][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.187929][ T363] device veth0_vlan entered promiscuous mode [ 30.198206][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.214706][ T363] device veth1_macvtap entered promiscuous mode [ 30.224233][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.234338][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.267416][ T373] loop2: detected capacity change from 0 to 512 [ 30.291410][ T373] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0102] [ 30.299753][ T373] System zones: 1-12 [ 30.305543][ T373] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.17: error while reading EA inode 32 err=-116 [ 30.317988][ T373] EXT4-fs (loop2): Remounting filesystem read-only [ 30.324536][ T373] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.337920][ T373] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.17: error while reading EA inode 32 err=-116 [ 30.350525][ T373] EXT4-fs (loop2): Remounting filesystem read-only [ 30.357300][ T373] EXT4-fs (loop2): 1 orphan inode deleted [ 30.363481][ T373] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,debug,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,jqfmt=vfsv1,abort,inlinecrypt,. Quota mode: none. [ 30.395892][ T363] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 30.416748][ T363] EXT4-fs (loop2): Remounting filesystem read-only [ 30.424494][ T8] device bridge_slave_1 left promiscuous mode [ 30.430739][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.430862][ T363] ------------[ cut here ]------------ [ 30.443598][ T8] device bridge_slave_0 left promiscuous mode [ 30.449806][ T363] kernel BUG at fs/namei.c:2941! [ 30.449852][ T363] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 30.455353][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.461182][ T363] CPU: 0 PID: 363 Comm: syz-executor Not tainted syzkaller #0 [ 30.461203][ T363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 30.461214][ T363] RIP: 0010:may_delete+0x701/0x710 [ 30.490945][ T363] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 b0 4e f5 ff e9 77 fe ff ff e8 16 cc b6 ff 0f 0b e8 0f cc b6 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 30.510655][ T363] RSP: 0018:ffffc90000bc7c90 EFLAGS: 00010293 [ 30.516727][ T363] RAX: ffffffff81b1f341 RBX: ffff88810d146660 RCX: ffff88810cb793c0 [ 30.524737][ T363] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 30.532800][ T363] RBP: ffffc90000bc7cf8 R08: 0000000000000004 R09: 0000000000000003 [ 30.541035][ T363] R10: fffff52000178f74 R11: 1ffff92000178f74 R12: dffffc0000000000 [ 30.549004][ T363] R13: 0000000000000001 R14: ffff88810d149e00 R15: 1ffff11021a28ccc [ 30.556980][ T363] FS: 0000555568c52500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.565919][ T363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.573316][ T363] CR2: 00007f5524d49000 CR3: 000000010dd2c000 CR4: 00000000003506b0 [ 30.581291][ T363] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.589266][ T363] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.597413][ T363] Call Trace: [ 30.600690][ T363] [ 30.603663][ T363] vfs_rmdir+0x32/0x460 [ 30.607824][ T363] incfs_kill_sb+0x105/0x220 [ 30.612518][ T363] deactivate_locked_super+0xa0/0x100 [ 30.618019][ T363] deactivate_super+0xaf/0xe0 [ 30.622795][ T363] cleanup_mnt+0x446/0x500 [ 30.627218][ T363] __cleanup_mnt+0x19/0x20 [ 30.631638][ T363] task_work_run+0x127/0x190 [ 30.636248][ T363] exit_to_user_mode_loop+0xd0/0xe0 [ 30.641455][ T363] exit_to_user_mode_prepare+0x87/0xd0 [ 30.646916][ T363] syscall_exit_to_user_mode+0x1a/0x30 [ 30.652371][ T363] do_syscall_64+0x58/0xa0 [ 30.656787][ T363] ? clear_bhb_loop+0x50/0xa0 [ 30.661457][ T363] ? clear_bhb_loop+0x50/0xa0 [ 30.666131][ T363] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 30.672024][ T363] RIP: 0033:0x7f61f59caa77 [ 30.676436][ T363] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 30.696254][ T363] RSP: 002b:00007fff7c16f328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 30.704682][ T363] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f61f59caa77 [ 30.712761][ T363] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7c16f3e0 [ 30.720756][ T363] RBP: 00007fff7c16f3e0 R08: 0000000000000000 R09: 0000000000000000 [ 30.728794][ T363] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff7c1704d0 [ 30.736820][ T363] R13: 00007f61f5a4dd7d R14: 00000000000076a1 R15: 00007fff7c1715a0 [ 30.745074][ T363] [ 30.748419][ T363] Modules linked in: [ 30.753541][ T8] device veth1_macvtap left promiscuous mode [ 30.757957][ T363] ---[ end trace 4c2e8e67f68a7c1e ]--- [ 30.765186][ T8] device veth0_vlan left promiscuous mode [ 30.766227][ T363] RIP: 0010:may_delete+0x701/0x710 [ 30.776269][ T363] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 b0 4e f5 ff e9 77 fe ff ff e8 16 cc b6 ff 0f 0b e8 0f cc b6 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 30.796382][ T363] RSP: 0018:ffffc90000bc7c90 EFLAGS: 00010293 [ 30.802565][ T363] RAX: ffffffff81b1f341 RBX: ffff88810d146660 RCX: ffff88810cb793c0 [ 30.811114][ T363] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 30.819291][ T363] RBP: ffffc90000bc7cf8 R08: 0000000000000004 R09: 0000000000000003 [ 30.827381][ T363] R10: fffff52000178f74 R11: 1ffff92000178f74 R12: dffffc0000000000 [ 30.835488][ T363] R13: 0000000000000001 R14: ffff88810d149e00 R15: 1ffff11021a28ccc [ 30.843764][ T363] FS: 0000555568c52500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 30.852903][ T363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.859754][ T363] CR2: 0000555568c7d528 CR3: 000000010dd2c000 CR4: 00000000003506a0 [ 30.867849][ T363] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.875946][ T363] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.884044][ T363] Kernel panic - not syncing: Fatal exception [ 30.890427][ T363] Kernel Offset: disabled [ 30.894780][ T363] Rebooting in 86400 seconds..