Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts. 2026/04/18 19:47:26 parsed 1 programs [ 25.431192][ T28] audit: type=1400 audit(1776541646.771:64): avc: denied { node_bind } for pid=282 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 25.453590][ T28] audit: type=1400 audit(1776541646.771:65): avc: denied { module_request } for pid=282 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 26.267961][ T28] audit: type=1400 audit(1776541647.601:66): avc: denied { mounton } for pid=288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.269009][ T288] cgroup: Unknown subsys name 'net' [ 26.292250][ T28] audit: type=1400 audit(1776541647.601:67): avc: denied { mount } for pid=288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.321131][ T28] audit: type=1400 audit(1776541647.631:68): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.321280][ T288] cgroup: Unknown subsys name 'devices' [ 26.434128][ T288] cgroup: Unknown subsys name 'hugetlb' [ 26.439953][ T288] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 26.546118][ T28] audit: type=1400 audit(1776541647.881:69): avc: denied { setattr } for pid=288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.566945][ T293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.570548][ T28] audit: type=1400 audit(1776541647.881:70): avc: denied { create } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.598622][ T288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.601578][ T28] audit: type=1400 audit(1776541647.881:71): avc: denied { write } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.632508][ T28] audit: type=1400 audit(1776541647.881:72): avc: denied { read } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.654015][ T28] audit: type=1400 audit(1776541647.881:73): avc: denied { mounton } for pid=288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.383029][ T295] request_module fs-gadgetfs succeeded, but still no fs? [ 27.736253][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.743726][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.752476][ T314] device bridge_slave_0 entered promiscuous mode [ 27.759972][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.768661][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.776629][ T314] device bridge_slave_1 entered promiscuous mode [ 27.820334][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.828239][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.837212][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.846834][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.867293][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.876734][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.887556][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.897799][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.907323][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.915056][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.925473][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.935185][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.943040][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.955417][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.965444][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.979205][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.991685][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.000094][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.007980][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.016684][ T314] device veth0_vlan entered promiscuous mode [ 28.030293][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.040005][ T314] device veth1_macvtap entered promiscuous mode [ 28.049436][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.059894][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.101772][ T314] syz-executor (314) used greatest stack depth: 21848 bytes left 2026/04/18 19:47:30 executed programs: 0 [ 28.767767][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.776695][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.786621][ T358] device bridge_slave_0 entered promiscuous mode [ 28.795811][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.803116][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.811652][ T358] device bridge_slave_1 entered promiscuous mode [ 28.852792][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.862082][ T358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.883435][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.893455][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.902416][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.913431][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.923453][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.933715][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.943750][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.954477][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.964688][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.973690][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.992106][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.002694][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.020261][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.034336][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.045231][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.054419][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.064348][ T358] device veth0_vlan entered promiscuous mode [ 29.076052][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.087426][ T358] device veth1_macvtap entered promiscuous mode [ 29.098901][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.109612][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.143574][ T362] loop2: detected capacity change from 0 to 1024 [ 29.150824][ T362] ======================================================= [ 29.150824][ T362] WARNING: The mand mount option has been deprecated and [ 29.150824][ T362] and is ignored by this kernel. Remove the mand [ 29.150824][ T362] option from the mount to silence this warning. [ 29.150824][ T362] ======================================================= [ 29.194267][ T362] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.209502][ T358] EXT4-fs (loop2): unmounting filesystem. [ 29.230888][ T367] loop2: detected capacity change from 0 to 1024 [ 29.242680][ T367] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.262207][ T358] EXT4-fs (loop2): unmounting filesystem. [ 29.283994][ T370] loop2: detected capacity change from 0 to 1024 [ 29.302101][ T370] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.316984][ T358] EXT4-fs (loop2): unmounting filesystem. [ 29.335459][ T373] loop2: detected capacity change from 0 to 1024 [ 29.364150][ T373] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.377688][ T358] EXT4-fs (loop2): unmounting filesystem. [ 29.397144][ T376] loop2: detected capacity change from 0 to 1024 [ 29.416038][ T376] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.432386][ T358] EXT4-fs (loop2): unmounting filesystem. [ 29.452550][ T379] loop2: detected capacity change from 0 to 1024 [ 29.474875][ T379] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.489493][ T358] EXT4-fs (loop2): unmounting filesystem. [ 29.506381][ T382] loop2: detected capacity change from 0 to 1024 [ 29.530142][ T382] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.544722][ T358] EXT4-fs (loop2): unmounting filesystem. [ 29.564296][ T385] loop2: detected capacity change from 0 to 1024 [ 29.582468][ T385] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.597161][ T358] EXT4-fs (loop2): unmounting filesystem. [ 29.621308][ T388] loop2: detected capacity change from 0 to 1024 [ 29.643744][ T388] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.659329][ T358] EXT4-fs (loop2): unmounting filesystem. [ 29.675734][ T391] loop2: detected capacity change from 0 to 1024 [ 29.685621][ T8] device bridge_slave_1 left promiscuous mode [ 29.694712][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.702807][ T8] device bridge_slave_0 left promiscuous mode [ 29.703975][ T391] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.709363][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.728009][ T358] EXT4-fs (loop2): unmounting filesystem. [ 29.735649][ T8] device veth1_macvtap left promiscuous mode [ 29.744601][ T8] device veth0_vlan left promiscuous mode [ 29.773093][ T394] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.796923][ T358] EXT4-fs (loop2): unmounting filesystem. [ 29.842762][ T397] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.856158][ T358] EXT4-fs (loop2): unmounting filesystem. [ 29.892024][ T401] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.907247][ T358] EXT4-fs (loop2): unmounting filesystem. [ 29.942101][ T404] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.956721][ T358] EXT4-fs (loop2): unmounting filesystem. [ 29.981770][ T407] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.995129][ T358] EXT4-fs (loop2): unmounting filesystem. [ 30.031853][ T410] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.045684][ T358] EXT4-fs (loop2): unmounting filesystem. [ 30.077389][ T413] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.093456][ T358] EXT4-fs (loop2): unmounting filesystem. [ 30.112217][ T416] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.129786][ T358] EXT4-fs (loop2): unmounting filesystem. [ 30.163591][ T419] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.178513][ T358] EXT4-fs (loop2): unmounting filesystem. [ 30.202422][ T422] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.216517][ T358] EXT4-fs (loop2): unmounting filesystem. [ 30.242964][ T425] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.256512][ T358] EXT4-fs (loop2): unmounting filesystem. [ 30.291832][ T428] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.305768][ T358] EXT4-fs (loop2): unmounting filesystem. [ 30.331823][ T431] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.345131][ T358] EXT4-fs (loop2): unmounting filesystem. [ 30.372530][ T434] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.385421][ T358] EXT4-fs (loop2): unmounting filesystem. [ 30.421648][ T437] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.435331][ T358] EXT4-fs (loop2): unmounting filesystem. [ 30.471809][ T440] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.486167][ T358] EXT4-fs (loop2): unmounting filesystem. [ 30.522084][ T443] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.537140][ T358] EXT4-fs (loop2): unmounting filesystem. [ 30.561958][ T446] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.575031][ T358] EXT4-fs (loop2): unmounting filesystem. [ 30.602227][ T449] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.615368][ T358] EXT4-fs (loop2): unmounting filesystem. [ 30.643388][ T452] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.657219][ T358] EXT4-fs (loop2): unmounting filesystem. [ 30.682619][ T455] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.695997][ T358] EXT4-fs (loop2): unmounting filesystem. [ 30.722102][ T458] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. 2026/04/18 19:47:35 executed programs: 159 [ 33.746611][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 33.746628][ T28] audit: type=1400 audit(1776541655.081:107): avc: denied { write } for pid=282 comm="syz-execprog" path="pipe:[15400]" dev="pipefs" ino=15400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 34.156685][ T866] set_capacity_and_notify: 152 callbacks suppressed [ 34.156699][ T866] loop2: detected capacity change from 0 to 1024 [ 34.203979][ T869] loop2: detected capacity change from 0 to 1024 [ 34.247115][ T872] loop2: detected capacity change from 0 to 1024 [ 34.299542][ T876] loop2: detected capacity change from 0 to 1024 [ 34.339481][ T880] loop2: detected capacity change from 0 to 1024 [ 34.372002][ T884] loop2: detected capacity change from 0 to 1024 [ 34.405131][ T887] loop2: detected capacity change from 0 to 1024 [ 34.440965][ T890] loop2: detected capacity change from 0 to 1024 [ 34.463705][ T893] loop2: detected capacity change from 0 to 1024 [ 34.496694][ T896] loop2: detected capacity change from 0 to 1024 [ 34.941791][ T947] EXT4-fs mount: 311 callbacks suppressed [ 34.941803][ T947] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 34.961733][ T358] EXT4-fs (loop2): unmounting filesystem. [ 34.991775][ T950] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.006590][ T358] EXT4-fs (loop2): unmounting filesystem. [ 35.034166][ T953] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.050624][ T358] EXT4-fs (loop2): unmounting filesystem. [ 35.071996][ T956] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.086276][ T358] EXT4-fs (loop2): unmounting filesystem. [ 35.111842][ T959] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.125154][ T358] EXT4-fs (loop2): unmounting filesystem. [ 35.154570][ T962] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.167658][ T358] EXT4-fs (loop2): unmounting filesystem. [ 35.201921][ T965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.214429][ T358] EXT4-fs (loop2): unmounting filesystem. [ 35.233704][ T968] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.246421][ T358] EXT4-fs (loop2): unmounting filesystem. [ 35.272373][ T971] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.285787][ T358] EXT4-fs (loop2): unmounting filesystem. [ 35.311774][ T974] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.324662][ T358] EXT4-fs (loop2): unmounting filesystem. [ 35.352493][ T977] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.369121][ T358] EXT4-fs (loop2): unmounting filesystem. [ 35.393494][ T980] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.407028][ T358] EXT4-fs (loop2): unmounting filesystem. [ 35.432165][ T983] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.445593][ T358] EXT4-fs (loop2): unmounting filesystem. [ 35.481751][ T986] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.496703][ T358] EXT4-fs (loop2): unmounting filesystem. [ 35.521919][ T989] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.536234][ T358] EXT4-fs (loop2): unmounting filesystem. [ 35.572206][ T992] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.585841][ T358] EXT4-fs (loop2): unmounting filesystem. [ 35.612197][ T995] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.626625][ T358] EXT4-fs (loop2): unmounting filesystem. [ 35.651843][ T998] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.665427][ T358] EXT4-fs (loop2): unmounting filesystem. [ 35.691864][ T1001] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.705451][ T358] EXT4-fs (loop2): unmounting filesystem. [ 35.734388][ T1004] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.747415][ T358] EXT4-fs (loop2): unmounting filesystem. [ 35.772104][ T1007] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.785683][ T358] EXT4-fs (loop2): unmounting filesystem. [ 35.821754][ T1010] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.835407][ T358] EXT4-fs (loop2): unmounting filesystem. [ 35.861936][ T1013] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.876342][ T358] EXT4-fs (loop2): unmounting filesystem. [ 35.901934][ T1016] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.917487][ T358] EXT4-fs (loop2): unmounting filesystem. [ 35.951631][ T1019] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.969844][ T358] EXT4-fs (loop2): unmounting filesystem. [ 36.001954][ T1022] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.017455][ T358] EXT4-fs (loop2): unmounting filesystem. [ 36.043752][ T1025] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.056500][ T358] EXT4-fs (loop2): unmounting filesystem. [ 36.081934][ T1028] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.096305][ T358] EXT4-fs (loop2): unmounting filesystem. [ 36.122516][ T1031] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.135550][ T358] EXT4-fs (loop2): unmounting filesystem. [ 36.162088][ T1034] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.175442][ T358] EXT4-fs (loop2): unmounting filesystem. [ 36.201629][ T1037] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.216033][ T358] EXT4-fs (loop2): unmounting filesystem. [ 36.242933][ T1040] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.256200][ T358] EXT4-fs (loop2): unmounting filesystem. [ 37.021412][ T298] I/O error, dev loop2, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 2026/04/18 19:47:40 executed programs: 340 [ 39.170177][ T1386] set_capacity_and_notify: 159 callbacks suppressed [ 39.170198][ T1386] loop2: detected capacity change from 0 to 1024 [ 39.211013][ T1389] loop2: detected capacity change from 0 to 1024 [ 39.241019][ T1392] loop2: detected capacity change from 0 to 1024 [ 39.269286][ T1395] loop2: detected capacity change from 0 to 1024 [ 39.313952][ T1399] loop2: detected capacity change from 0 to 1024 [ 39.349356][ T1402] loop2: detected capacity change from 0 to 1024 [ 39.376207][ T1405] loop2: detected capacity change from 0 to 1024 [ 39.407074][ T1408] loop2: detected capacity change from 0 to 1024 [ 39.434146][ T1411] loop2: detected capacity change from 0 to 1024 [ 39.467117][ T1414] loop2: detected capacity change from 0 to 1024 2026/04/18 19:47:45 executed programs: 546 [ 44.188215][ T1959] set_capacity_and_notify: 172 callbacks suppressed [ 44.188233][ T1959] loop2: detected capacity change from 0 to 1024 [ 44.262123][ T298] I/O error, dev loop2, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.269392][ T1962] loop2: detected capacity change from 0 to 1024 [ 44.272028][ T298] I/O error, dev loop2, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 44.288288][ T298] Buffer I/O error on dev loop2, logical block 12, async page read [ 44.307153][ T1965] loop2: detected capacity change from 0 to 1024 [ 44.336518][ T1968] loop2: detected capacity change from 0 to 1024 [ 44.365656][ T1971] loop2: detected capacity change from 0 to 1024 [ 44.405753][ T1974] loop2: detected capacity change from 0 to 1024 [ 44.435552][ T1977] loop2: detected capacity change from 0 to 1024 [ 44.477953][ T1981] loop2: detected capacity change from 0 to 1024 [ 44.510011][ T1984] loop2: detected capacity change from 0 to 1024 [ 44.533799][ T1987] loop2: detected capacity change from 0 to 1024 [ 45.257737][ T2066] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.265122][ T2066] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.272832][ T2066] device bridge_slave_0 entered promiscuous mode [ 45.279791][ T2066] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.286868][ T2066] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.294507][ T2066] device bridge_slave_1 entered promiscuous mode [ 45.337867][ T2066] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.345606][ T2066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.353118][ T2066] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.360242][ T2066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.378704][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.387360][ T398] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.395569][ T398] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.405892][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.414577][ T398] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.422291][ T398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.433543][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.442500][ T398] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.450191][ T398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.464682][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.474575][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.488233][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.499688][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.508057][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.515995][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.527503][ T2066] device veth0_vlan entered promiscuous mode [ 45.537757][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.547357][ T2066] device veth1_macvtap entered promiscuous mode [ 45.559269][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.570340][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.811521][ T8] device bridge_slave_1 left promiscuous mode [ 45.817862][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.826784][ T8] device bridge_slave_0 left promiscuous mode [ 45.840319][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.852130][ T8] device veth1_macvtap left promiscuous mode [ 45.858954][ T8] device veth0_vlan left promiscuous mode [ 48.283241][ T2378] ================================================================== [ 48.291809][ T2378] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x979/0x21d0 [ 48.299774][ T2378] Read of size 18446744073709551588 at addr ffff88812228e040 by task syz.2.727/2378 [ 48.310048][ T2378] [ 48.313039][ T2378] CPU: 0 PID: 2378 Comm: syz.2.727 Not tainted syzkaller #0 [ 48.320795][ T2378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 48.331262][ T2378] Call Trace: [ 48.334850][ T2378] [ 48.337810][ T2378] __dump_stack+0x21/0x24 [ 48.342697][ T2378] dump_stack_lvl+0x110/0x170 [ 48.348204][ T2378] ? __cfi_dump_stack_lvl+0x8/0x8 [ 48.353427][ T2378] ? kasan_save_alloc_info+0x25/0x30 [ 48.359491][ T2378] ? ext4_xattr_block_set+0x9d5/0x3260 [ 48.365815][ T2378] ? ext4_xattr_set+0x242/0x320 [ 48.370864][ T2378] ? ext4_xattr_security_set+0x3c/0x50 [ 48.376551][ T2378] ? ext4_xattr_set_entry+0x979/0x21d0 [ 48.382469][ T2378] print_address_description+0x71/0x200 [ 48.388127][ T2378] print_report+0x4a/0x60 [ 48.392868][ T2378] kasan_report+0x122/0x150 [ 48.398260][ T2378] ? ext4_xattr_set_entry+0x979/0x21d0 [ 48.404263][ T2378] ? ext4_xattr_set_entry+0x979/0x21d0 [ 48.410027][ T2378] kasan_check_range+0x249/0x2a0 [ 48.415254][ T2378] ? ext4_xattr_set_entry+0x979/0x21d0 [ 48.420917][ T2378] memmove+0x2d/0x70 [ 48.425065][ T2378] ext4_xattr_set_entry+0x979/0x21d0 [ 48.430875][ T2378] ext4_xattr_block_set+0xad3/0x3260 [ 48.436263][ T2378] ? __kasan_check_write+0x14/0x20 [ 48.441516][ T2378] ? iput+0x620/0x670 [ 48.445554][ T2378] ? ext4_xattr_block_find+0x310/0x310 [ 48.451132][ T2378] ext4_xattr_set_handle+0xe3b/0x1570 [ 48.457485][ T2378] ? __cfi_ext4_xattr_set_handle+0x10/0x10 [ 48.463921][ T2378] ? __kasan_check_read+0x11/0x20 [ 48.469421][ T2378] ? __ext4_journal_start_sb+0x2ed/0x4a0 [ 48.475249][ T2378] ext4_xattr_set+0x242/0x320 [ 48.480048][ T2378] ? ns_capable+0x8c/0xf0 [ 48.484637][ T2378] ? __cfi_ext4_xattr_set+0x10/0x10 [ 48.489955][ T2378] ? selinux_inode_setxattr+0x5cf/0xbf0 [ 48.495884][ T2378] ext4_xattr_security_set+0x3c/0x50 [ 48.501869][ T2378] ? __cfi_ext4_xattr_security_set+0x10/0x10 [ 48.508599][ T2378] __vfs_setxattr+0x3f2/0x440 [ 48.514211][ T2378] __vfs_setxattr_noperm+0x12a/0x5e0 [ 48.520052][ T2378] __vfs_setxattr_locked+0x212/0x230 [ 48.525947][ T2378] vfs_setxattr+0x167/0x2e0 [ 48.531719][ T2378] ? __cfi_vfs_setxattr+0x10/0x10 [ 48.537047][ T2378] ? copy_user_enhanced_fast_string+0xa/0x40 [ 48.543845][ T2378] setxattr+0x346/0x360 [ 48.548544][ T2378] ? path_setxattr+0x290/0x290 [ 48.553429][ T2378] ? __mnt_want_write+0x1e6/0x260 [ 48.559014][ T2378] ? mnt_want_write+0x220/0x300 [ 48.564490][ T2378] path_setxattr+0x147/0x290 [ 48.569599][ T2378] ? simple_xattr_list_add+0x120/0x120 [ 48.575951][ T2378] __x64_sys_setxattr+0xc5/0xe0 [ 48.581266][ T2378] x64_sys_call+0x633/0x9a0 [ 48.586529][ T2378] do_syscall_64+0x4c/0xa0 [ 48.591143][ T2378] ? clear_bhb_loop+0x30/0x80 [ 48.596135][ T2378] ? clear_bhb_loop+0x30/0x80 [ 48.601538][ T2378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.610045][ T2378] RIP: 0033:0x7f3e2019c819 [ 48.617470][ T2378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.640953][ T2378] RSP: 002b:00007fffe3e48e38 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 48.650682][ T2378] RAX: ffffffffffffffda RBX: 00007f3e20415fa0 RCX: 00007f3e2019c819 [ 48.659812][ T2378] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 48.670770][ T2378] RBP: 00007f3e20232c91 R08: 0000000000000000 R09: 0000000000000000 [ 48.679745][ T2378] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 48.688526][ T2378] R13: 00007f3e20415fac R14: 00007f3e20415fa0 R15: 00007f3e20415fa0 [ 48.696813][ T2378] [ 48.700155][ T2378] [ 48.702999][ T2378] Allocated by task 2378: [ 48.707867][ T2378] kasan_set_track+0x4b/0x70 [ 48.714048][ T2378] kasan_save_alloc_info+0x25/0x30 [ 48.719590][ T2378] __kasan_kmalloc+0x95/0xb0 [ 48.724448][ T2378] __kmalloc_node_track_caller+0xb1/0x1e0 [ 48.731459][ T2378] kmemdup+0x2b/0x60 [ 48.735787][ T2378] ext4_xattr_block_set+0x9d5/0x3260 [ 48.741838][ T2378] ext4_xattr_set_handle+0xe3b/0x1570 [ 48.747452][ T2378] ext4_xattr_set+0x242/0x320 [ 48.753587][ T2378] ext4_xattr_security_set+0x3c/0x50 [ 48.759539][ T2378] __vfs_setxattr+0x3f2/0x440 [ 48.764867][ T2378] __vfs_setxattr_noperm+0x12a/0x5e0 [ 48.771841][ T2378] __vfs_setxattr_locked+0x212/0x230 [ 48.777426][ T2378] vfs_setxattr+0x167/0x2e0 [ 48.782846][ T2378] setxattr+0x346/0x360 [ 48.787438][ T2378] path_setxattr+0x147/0x290 [ 48.792363][ T2378] __x64_sys_setxattr+0xc5/0xe0 [ 48.797585][ T2378] x64_sys_call+0x633/0x9a0 [ 48.803274][ T2378] do_syscall_64+0x4c/0xa0 [ 48.808067][ T2378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.814571][ T2378] [ 48.816994][ T2378] The buggy address belongs to the object at ffff88812228e000 [ 48.816994][ T2378] which belongs to the cache kmalloc-1k of size 1024 [ 48.832096][ T2378] The buggy address is located 64 bytes inside of [ 48.832096][ T2378] 1024-byte region [ffff88812228e000, ffff88812228e400) [ 48.846599][ T2378] [ 48.849021][ T2378] The buggy address belongs to the physical page: [ 48.855871][ T2378] page:ffffea000488a200 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88812228d800 pfn:0x122288 [ 48.868474][ T2378] head:ffffea000488a200 order:3 compound_mapcount:0 compound_pincount:0 [ 48.876820][ T2378] flags: 0x4000000000010200(slab|head|zone=1) [ 48.883435][ T2378] raw: 4000000000010200 ffffea0004369200 dead000000000002 ffff888100043080 [ 48.892567][ T2378] raw: ffff88812228d800 000000008010000e 00000001ffffffff 0000000000000000 [ 48.901238][ T2378] page dumped because: kasan: bad access detected [ 48.907744][ T2378] page_owner tracks the page as allocated [ 48.914413][ T2378] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 288, tgid 288 (syz-executor), ts 45661399925, free_ts 45639049099 [ 48.939172][ T2378] post_alloc_hook+0x1f5/0x210 [ 48.944354][ T2378] prep_new_page+0x1c/0x110 [ 48.949033][ T2378] get_page_from_freelist+0x2d12/0x2d80 [ 48.954875][ T2378] __alloc_pages+0x1fa/0x610 [ 48.959677][ T2378] alloc_slab_page+0x6e/0xf0 [ 48.964538][ T2378] new_slab+0x98/0x3d0 [ 48.968797][ T2378] ___slab_alloc+0x6bd/0xb20 [ 48.973587][ T2378] __slab_alloc+0x5e/0xa0 [ 48.978003][ T2378] __kmem_cache_alloc_node+0x203/0x2c0 [ 48.983556][ T2378] __kmalloc_node_track_caller+0xa0/0x1e0 [ 48.989731][ T2378] __alloc_skb+0x236/0x4b0 [ 48.994240][ T2378] __tcp_send_ack+0x9b/0x690 [ 48.998932][ T2378] tcp_send_ack+0x3b/0x60 [ 49.003522][ T2378] __tcp_cleanup_rbuf+0x1e6/0x480 [ 49.008756][ T2378] tcp_recvmsg_locked+0x1b8f/0x23e0 [ 49.014073][ T2378] tcp_recvmsg+0x22d/0x850 [ 49.018544][ T2378] page last free stack trace: [ 49.023590][ T2378] free_unref_page_prepare+0x742/0x750 [ 49.029152][ T2378] free_unref_page+0x95/0x540 [ 49.033921][ T2378] __free_pages+0x67/0x100 [ 49.038394][ T2378] __free_slab+0xca/0x1a0 [ 49.042912][ T2378] __unfreeze_partials+0x160/0x190 [ 49.048052][ T2378] put_cpu_partial+0xa9/0x100 [ 49.052757][ T2378] __slab_free+0x1c4/0x280 [ 49.057210][ T2378] ___cache_free+0xbf/0xd0 [ 49.061724][ T2378] qlist_free_all+0xc6/0x140 [ 49.066334][ T2378] kasan_quarantine_reduce+0x14a/0x170 [ 49.072701][ T2378] __kasan_slab_alloc+0x24/0x80 [ 49.077755][ T2378] slab_post_alloc_hook+0x4f/0x2d0 [ 49.083716][ T2378] kmem_cache_alloc+0x16e/0x330 [ 49.088845][ T2378] getname_flags+0xb9/0x500 [ 49.093523][ T2378] getname+0x19/0x20 [ 49.097432][ T2378] do_sys_openat2+0xeb/0x810 [ 49.102030][ T2378] [ 49.104355][ T2378] Memory state around the buggy address: [ 49.110262][ T2378] ffff88812228df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 49.118941][ T2378] ffff88812228df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 49.127116][ T2378] >ffff88812228e000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.135626][ T2378] ^ [ 49.142064][ T2378] ffff88812228e080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.150249][ T2378] ffff88812228e100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.158423][ T2378] ================================================================== [ 49.167005][ T2378] Disabling lock debugging due to kernel taint 2026/04/18 19:47:50 executed programs: 713 [ 49.178760][ T28] audit: type=1400 audit(1776541670.511:108): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 49.212678][ T2381] set_capacity_and_notify: 123 callbacks suppressed [ 49.212695][ T2381] loop2: detected capacity change from 0 to 1024 [ 49.220795][ T28] audit: type=1400 audit(1776541670.511:109): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.248525][ T28] audit: type=1400 audit(1776541670.511:110): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.270271][ T28] audit: type=1400 audit(1776541670.511:111): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.294516][ T28] audit: type=1400 audit(1776541670.511:112): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.296595][ T2384] loop2: detected capacity change from 0 to 1024 [ 49.317456][ T28] audit: type=1400 audit(1776541670.511:113): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.347382][ T28] audit: type=1400 audit(1776541670.511:114): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.388655][ T2387] loop2: detected capacity change from 0 to 1024 [ 49.417590][ T2390] loop2: detected capacity change from 0 to 1024 [ 49.447101][ T2393] loop2: detected capacity change from 0 to 1024 [ 49.486399][ T2396] loop2: detected capacity change from 0 to 1024 [ 49.520221][ T2400] loop2: detected capacity change from 0 to 1024 [ 49.548367][ T2403] loop2: detected capacity change from 0 to 1024 [ 49.579899][ T2406] loop2: detected capacity change from 0 to 1024 [ 49.646142][ T2411] loop2: detected capacity change from 0 to 1024 2026/04/18 19:47:55 executed programs: 918 [ 54.251330][ T2958] set_capacity_and_notify: 175 callbacks suppressed [ 54.251346][ T2958] loop2: detected capacity change from 0 to 1024 [ 54.290156][ T2961] loop2: detected capacity change from 0 to 1024 [ 54.315474][ T2964] loop2: detected capacity change from 0 to 1024 [ 54.343862][ T2967] loop2: detected capacity change from 0 to 1024 [ 54.378616][ T2970] loop2: detected capacity change from 0 to 1024 [ 54.403529][ T2973] loop2: detected capacity change from 0 to 1024 [ 54.438296][ T2976] loop2: detected capacity change from 0 to 1024 [ 54.464104][ T2979] loop2: detected capacity change from 0 to 1024 [ 54.495177][ T2982] loop2: detected capacity change from 0 to 1024 [ 54.527635][ T2985] loop2: detected capacity change from 0 to 1024 [ 55.471660][ T298] I/O error, dev loop2, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2