Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts. 2026/01/21 08:12:53 parsed 1 programs [ 26.081624][ T28] audit: type=1400 audit(1768983173.919:64): avc: denied { node_bind } for pid=284 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 26.102948][ T28] audit: type=1400 audit(1768983173.919:65): avc: denied { module_request } for pid=284 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 27.259269][ T28] audit: type=1400 audit(1768983175.099:66): avc: denied { mounton } for pid=291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.262583][ T291] cgroup: Unknown subsys name 'net' [ 27.282056][ T28] audit: type=1400 audit(1768983175.099:67): avc: denied { mount } for pid=291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.309565][ T28] audit: type=1400 audit(1768983175.129:68): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.310030][ T291] cgroup: Unknown subsys name 'devices' [ 27.448726][ T291] cgroup: Unknown subsys name 'hugetlb' [ 27.454355][ T291] cgroup: Unknown subsys name 'rlimit' [ 27.568123][ T28] audit: type=1400 audit(1768983175.409:69): avc: denied { setattr } for pid=291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.591522][ T28] audit: type=1400 audit(1768983175.409:70): avc: denied { create } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.612173][ T28] audit: type=1400 audit(1768983175.409:71): avc: denied { write } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.632515][ T28] audit: type=1400 audit(1768983175.409:72): avc: denied { read } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.646717][ T294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.654134][ T28] audit: type=1400 audit(1768983175.409:73): avc: denied { mounton } for pid=291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.716131][ T291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.461167][ T297] request_module fs-gadgetfs succeeded, but still no fs? [ 29.238537][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.245624][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.253288][ T344] device bridge_slave_0 entered promiscuous mode [ 29.260438][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.267769][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.275210][ T344] device bridge_slave_1 entered promiscuous mode [ 29.324024][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.331098][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.338437][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.345502][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.366193][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.373933][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.381329][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.390592][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.399058][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.406114][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.415030][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.423357][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.430433][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.443512][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.453103][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.467790][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.479645][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.488151][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.495567][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.508862][ T344] device veth0_vlan entered promiscuous mode [ 29.520434][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.537085][ T344] device veth1_macvtap entered promiscuous mode [ 29.547616][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.558353][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.595151][ T344] syz-executor (344) used greatest stack depth: 21792 bytes left 2026/01/21 08:12:57 executed programs: 0 [ 29.897638][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.904695][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.912301][ T364] device bridge_slave_0 entered promiscuous mode [ 29.919353][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.926491][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.933968][ T364] device bridge_slave_1 entered promiscuous mode [ 29.983580][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.990682][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.998108][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.005502][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.029914][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.037618][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.044936][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.055534][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.063862][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.071047][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.079968][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.088686][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.096024][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.112345][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.121847][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.137134][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.149065][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.157425][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.165092][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.174256][ T364] device veth0_vlan entered promiscuous mode [ 30.185027][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.194912][ T364] device veth1_macvtap entered promiscuous mode [ 30.205265][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.216027][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.224788][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.252190][ T375] loop2: detected capacity change from 0 to 512 [ 30.262271][ T375] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0102] [ 30.271168][ T375] System zones: 1-12 [ 30.277559][ T375] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.17: error while reading EA inode 32 err=-116 [ 30.291975][ T375] EXT4-fs (loop2): Remounting filesystem read-only [ 30.298953][ T375] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.313271][ T375] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.17: error while reading EA inode 32 err=-116 [ 30.325750][ T375] EXT4-fs (loop2): Remounting filesystem read-only [ 30.332633][ T375] EXT4-fs (loop2): 1 orphan inode deleted [ 30.338478][ T375] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.352013][ T364] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 30.372659][ T364] EXT4-fs (loop2): Remounting filesystem read-only [ 30.380508][ T364] ------------[ cut here ]------------ [ 30.385977][ T364] kernel BUG at fs/namei.c:2962! [ 30.391319][ T364] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 30.397411][ T364] CPU: 0 PID: 364 Comm: syz-executor Not tainted syzkaller #0 [ 30.404902][ T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 30.414970][ T364] RIP: 0010:may_delete+0x701/0x710 [ 30.420127][ T364] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 90 ed f3 ff e9 77 fe ff ff e8 46 c1 ae ff 0f 0b e8 3f c1 ae ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 30.439831][ T364] RSP: 0018:ffffc900009b7c20 EFLAGS: 00010293 [ 30.446028][ T364] RAX: ffffffff81c28881 RBX: ffff8881118d3110 RCX: ffff888112f15100 [ 30.454028][ T364] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 30.462008][ T364] RBP: ffffc900009b7c88 R08: 0000000000000003 R09: 0000000000000004 [ 30.469983][ T364] R10: dffffc0000000000 R11: fffff52000136f64 R12: dffffc0000000000 [ 30.477959][ T364] R13: 0000000000000001 R14: ffff888111a6c8b0 R15: 1ffff1102231a622 [ 30.485939][ T364] FS: 000055555ef72500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.494873][ T364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.501551][ T364] CR2: 000055555ef9d988 CR3: 000000012d453000 CR4: 00000000003506b0 [ 30.509531][ T364] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.517528][ T364] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.525506][ T364] Call Trace: [ 30.528784][ T364] [ 30.531716][ T364] vfs_rmdir+0x32/0x500 [ 30.535882][ T364] incfs_kill_sb+0x105/0x220 [ 30.540494][ T364] deactivate_locked_super+0xb5/0x120 [ 30.545972][ T364] deactivate_super+0xaf/0xe0 [ 30.550667][ T364] cleanup_mnt+0x474/0x500 [ 30.555098][ T364] __cleanup_mnt+0x19/0x20 [ 30.559526][ T364] task_work_run+0x1e1/0x250 [ 30.564135][ T364] ? __cfi_task_work_run+0x10/0x10 [ 30.569256][ T364] ? __x64_sys_umount+0x12d/0x170 [ 30.574323][ T364] ? __cfi___x64_sys_umount+0x10/0x10 [ 30.579707][ T364] exit_to_user_mode_loop+0x9b/0xb0 [ 30.584919][ T364] exit_to_user_mode_prepare+0x87/0xd0 [ 30.590503][ T364] syscall_exit_to_user_mode+0x1a/0x30 [ 30.595982][ T364] do_syscall_64+0x58/0xa0 [ 30.600428][ T364] ? clear_bhb_loop+0x30/0x80 [ 30.605219][ T364] ? clear_bhb_loop+0x30/0x80 [ 30.609995][ T364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.615908][ T364] RIP: 0033:0x7f3d98b9bf17 [ 30.620514][ T364] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 30.640307][ T364] RSP: 002b:00007fff4863d308 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 30.648910][ T364] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3d98b9bf17 [ 30.656891][ T364] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4863d3c0 [ 30.664878][ T364] RBP: 00007fff4863d3c0 R08: 00007fff4863e3c0 R09: 00000000ffffffff [ 30.672855][ T364] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4863e4b0 [ 30.680867][ T364] R13: 00007f3d98c0471f R14: 000000000000760d R15: 00007fff4863f580 [ 30.688893][ T364] [ 30.691925][ T364] Modules linked in: [ 30.698545][ T364] ---[ end trace 0000000000000000 ]--- [ 30.704053][ T364] RIP: 0010:may_delete+0x701/0x710 [ 30.709524][ T364] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 90 ed f3 ff e9 77 fe ff ff e8 46 c1 ae ff 0f 0b e8 3f c1 ae ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 30.729604][ T364] RSP: 0018:ffffc900009b7c20 EFLAGS: 00010293 [ 30.735849][ T364] RAX: ffffffff81c28881 RBX: ffff8881118d3110 RCX: ffff888112f15100 [ 30.744431][ T364] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 30.752636][ T364] RBP: ffffc900009b7c88 R08: 0000000000000003 R09: 0000000000000004 [ 30.760699][ T364] R10: dffffc0000000000 R11: fffff52000136f64 R12: dffffc0000000000 [ 30.769596][ T364] R13: 0000000000000001 R14: ffff888111a6c8b0 R15: 1ffff1102231a622 [ 30.777904][ T364] FS: 000055555ef72500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 30.786981][ T364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.793687][ T364] CR2: 00007f775e1fe000 CR3: 000000012d453000 CR4: 00000000003506a0 [ 30.801820][ T364] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.810002][ T364] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.818506][ T364] Kernel panic - not syncing: Fatal exception [ 30.824737][ T364] Kernel Offset: disabled [ 30.829064][ T364] Rebooting in 86400 seconds..