[ 14.908985][ T28] audit: type=1400 audit(1779508184.734:62): avc: denied { rlimitinh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.912337][ T28] audit: type=1400 audit(1779508184.734:63): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts. 2026/05/23 03:49:54 parsed 1 programs [ 24.774208][ T28] audit: type=1400 audit(1779508194.604:64): avc: denied { node_bind } for pid=295 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.795162][ T28] audit: type=1400 audit(1779508194.604:65): avc: denied { module_request } for pid=295 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 25.966095][ T28] audit: type=1400 audit(1779508195.794:66): avc: denied { mounton } for pid=303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.969876][ T303] cgroup: Unknown subsys name 'net' [ 25.988970][ T28] audit: type=1400 audit(1779508195.794:67): avc: denied { mount } for pid=303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.016177][ T28] audit: type=1400 audit(1779508195.834:68): avc: denied { unmount } for pid=303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.016628][ T303] cgroup: Unknown subsys name 'devices' [ 26.161331][ T303] cgroup: Unknown subsys name 'hugetlb' [ 26.167081][ T303] cgroup: Unknown subsys name 'rlimit' [ 26.281746][ T28] audit: type=1400 audit(1779508196.114:69): avc: denied { setattr } for pid=303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.305762][ T28] audit: type=1400 audit(1779508196.114:70): avc: denied { create } for pid=303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.326349][ T28] audit: type=1400 audit(1779508196.114:71): avc: denied { write } for pid=303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.347089][ T28] audit: type=1400 audit(1779508196.114:72): avc: denied { read } for pid=303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.355790][ T306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.368138][ T28] audit: type=1400 audit(1779508196.114:73): avc: denied { mounton } for pid=303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.403079][ T303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.140846][ T308] request_module fs-gadgetfs succeeded, but still no fs? [ 27.455867][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.463067][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.470640][ T328] device bridge_slave_0 entered promiscuous mode [ 27.477651][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.484818][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.492447][ T328] device bridge_slave_1 entered promiscuous mode [ 27.540257][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.547342][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.554709][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.561959][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.583960][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.591341][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.598788][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.606636][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.616168][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.624525][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.631603][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.640726][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.649166][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.656361][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.670100][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.679862][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.696991][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.708939][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.717446][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.725229][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.733822][ T328] device veth0_vlan entered promiscuous mode [ 27.746835][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.756370][ T328] device veth1_macvtap entered promiscuous mode [ 27.766525][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.777087][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.811913][ T328] syz-executor (328) used greatest stack depth: 22144 bytes left 2026/05/23 03:49:58 executed programs: 0 [ 28.445583][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.452707][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.460626][ T368] device bridge_slave_0 entered promiscuous mode [ 28.467688][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.474828][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.482708][ T368] device bridge_slave_1 entered promiscuous mode [ 28.490342][ T315] device bridge_slave_1 left promiscuous mode [ 28.496484][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.504084][ T315] device bridge_slave_0 left promiscuous mode [ 28.510274][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.518963][ T315] device veth1_macvtap left promiscuous mode [ 28.525263][ T315] device veth0_vlan left promiscuous mode [ 28.658399][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.666040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.675285][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.683773][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.692381][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.699557][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.707458][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.716028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.724532][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.732798][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.739858][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.752605][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.762454][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.776877][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.788757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.797316][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.805420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.813984][ T368] device veth0_vlan entered promiscuous mode [ 28.827132][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.837076][ T368] device veth1_macvtap entered promiscuous mode [ 28.846907][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.857108][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.886154][ T373] loop2: detected capacity change from 0 to 1024 [ 28.893209][ T373] ======================================================= [ 28.893209][ T373] WARNING: The mand mount option has been deprecated and [ 28.893209][ T373] and is ignored by this kernel. Remove the mand [ 28.893209][ T373] option from the mount to silence this warning. [ 28.893209][ T373] ======================================================= [ 28.929818][ T373] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.951117][ T373] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 28.989350][ T373] loop2: detected capacity change from 1024 to 64 [ 29.000202][ T377] BUG: unable to handle page fault for address: fffffffffffffffc [ 29.007987][ T377] #PF: supervisor read access in kernel mode [ 29.009730][ T368] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 29.013989][ T377] #PF: error_code(0x0000) - not-present page [ 29.014027][ T377] PGD 7012067 P4D 7012067 PUD 7014067 PMD 0 [ 29.036625][ T368] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 29.039424][ T377] Oops: 0000 [#1] PREEMPT SMP KASAN [ 29.039445][ T377] CPU: 1 PID: 377 Comm: syz.2.17 Not tainted syzkaller #0 [ 29.039464][ T377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 29.039475][ T377] RIP: 0010:ext4_ext_map_blocks+0x2e59/0x6200 [ 29.039518][ T377] Code: 40 01 00 00 4d 85 f6 0f 84 bc 00 00 00 48 89 5c 24 20 49 8d 7e 08 48 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 38 16 00 00 <41> 0f b7 46 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 49 8d 46 28 48 [ 29.060454][ T368] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 29.065245][ T377] RSP: 0018:ffffc90000a56600 EFLAGS: 00010246 [ 29.077459][ T368] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 29.081580][ T377] [ 29.081586][ T377] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff888115701440 [ 29.081600][ T377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: fffffffffffffffc [ 29.081611][ T377] RBP: ffffc90000a568b0 R08: ffff88810b5f6ae3 R09: 1ffff110216bed5c [ 29.081625][ T377] R10: dffffc0000000000 R11: ffffed10216bed5d R12: dffffc0000000000 [ 29.081638][ T377] R13: 1ffff9200014acec R14: fffffffffffffff4 R15: 0000000000000010 [ 29.081651][ T377] FS: 0000555592bf4500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 29.185607][ T377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.192219][ T377] CR2: fffffffffffffffc CR3: 000000012d4cd000 CR4: 00000000003506a0 [ 29.200203][ T377] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.208186][ T377] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.216170][ T377] Call Trace: [ 29.219546][ T377] [ 29.222514][ T377] ? is_bpf_text_address+0x177/0x190 [ 29.227906][ T377] ? kernel_text_address+0xa0/0xd0 [ 29.233033][ T377] ? __kernel_text_address+0xd/0x30 [ 29.238252][ T377] ? unwind_get_return_address+0x4d/0x90 [ 29.244157][ T377] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 29.250416][ T377] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 29.256077][ T377] ? ext4_es_lookup_extent+0x54c/0x900 [ 29.261638][ T377] ext4_map_blocks+0x9d8/0x1b70 [ 29.266504][ T377] ? ext4_write_begin+0x343/0xf90 [ 29.271547][ T377] ? ext4_da_write_begin+0x3e7/0x8c0 [ 29.276848][ T377] ? generic_perform_write+0x32d/0x740 [ 29.282321][ T377] ? exit_to_user_mode_prepare+0x87/0xd0 [ 29.287976][ T377] ? __cfi_ext4_map_blocks+0x10/0x10 [ 29.293299][ T377] _ext4_get_block+0x1ea/0x540 [ 29.298083][ T377] ? ext4_get_block+0x50/0x50 [ 29.302774][ T377] ? kasan_save_alloc_info+0x25/0x30 [ 29.308074][ T377] ? __kasan_slab_alloc+0x72/0x80 [ 29.313120][ T377] ? slab_post_alloc_hook+0x6d/0x2d0 [ 29.318512][ T377] ext4_get_block_unwritten+0x2e/0x100 [ 29.323995][ T377] ext4_block_write_begin+0x594/0x1280 [ 29.329564][ T377] ? __cfi_ext4_get_block_unwritten+0x10/0x10 [ 29.335824][ T377] ? ext4_print_free_blocks+0x390/0x390 [ 29.341582][ T377] ? ext4_inode_journal_mode+0x19a/0x480 [ 29.347233][ T377] ext4_write_begin+0x600/0xf90 [ 29.352111][ T377] ? __cfi_ext4_write_begin+0x10/0x10 [ 29.357501][ T377] ext4_da_write_begin+0x3e7/0x8c0 [ 29.362620][ T377] ? ext4_write_end+0x76a/0x930 [ 29.367481][ T377] ? __cfi_ext4_da_write_begin+0x10/0x10 [ 29.373126][ T377] ? __file_remove_privs+0x359/0x600 [ 29.378434][ T377] generic_perform_write+0x32d/0x740 [ 29.383745][ T377] ? __cfi_generic_perform_write+0x10/0x10 [ 29.389574][ T377] ? file_modified+0x20/0x20 [ 29.394185][ T377] ext4_buffered_write_iter+0x367/0x630 [ 29.399755][ T377] ext4_file_write_iter+0x191/0x1500 [ 29.405101][ T377] ? __get_user_pages+0xb5d/0xdb0 [ 29.410666][ T377] ? __cfi_ext4_file_write_iter+0x10/0x10 [ 29.416411][ T377] ? populate_vma_page_range+0x120/0x120 [ 29.422155][ T377] ? _raw_spin_lock+0x94/0xf0 [ 29.426856][ T377] __kernel_write_iter+0x296/0x660 [ 29.431982][ T377] ? __cfi___kernel_write_iter+0x10/0x10 [ 29.437633][ T377] ? iov_iter_bvec+0x53/0x1f0 [ 29.442386][ T377] dump_user_range+0x40b/0x660 [ 29.447169][ T377] ? __cfi_dump_user_range+0x10/0x10 [ 29.452466][ T377] ? dump_align+0xfe/0x120 [ 29.456891][ T377] ? dump_emit+0xa8/0xc0 [ 29.461155][ T377] elf_core_dump+0x2b52/0x3060 [ 29.465959][ T377] ? __cfi_elf_core_dump+0x10/0x10 [ 29.471098][ T377] ? dump_interrupted+0xd0/0xd0 [ 29.475981][ T377] ? filp_open+0x195/0x1e0 [ 29.480426][ T377] ? 0xffffffffff600000 [ 29.484642][ T377] do_coredump+0x15d3/0x2240 [ 29.489277][ T377] ? __cfi_do_coredump+0x10/0x10 [ 29.494261][ T377] ? kmem_cache_free+0x12d/0x300 [ 29.499227][ T377] ? ____kasan_slab_free+0x13d/0x180 [ 29.504546][ T377] ? get_signal+0xa6c/0x1520 [ 29.509167][ T377] ? kmem_cache_free+0x12d/0x300 [ 29.514135][ T377] get_signal+0x11db/0x1520 [ 29.518669][ T377] arch_do_signal_or_restart+0xd1/0x1140 [ 29.524330][ T377] ? force_sig_fault+0xd9/0x130 [ 29.529207][ T377] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 29.535385][ T377] ? page_fault_oops+0x8e0/0x8e0 [ 29.540521][ T377] ? __bad_area_nosemaphore+0x303/0x620 [ 29.546108][ T377] ? do_user_addr_fault+0x9ac/0x1050 [ 29.551617][ T377] exit_to_user_mode_loop+0x7a/0xb0 [ 29.556838][ T377] exit_to_user_mode_prepare+0x87/0xd0 [ 29.562311][ T377] irqentry_exit_to_user_mode+0x9/0x10 [ 29.567782][ T377] irqentry_exit+0x12/0x40 [ 29.572208][ T377] exc_page_fault+0x5e/0xb0 [ 29.576739][ T377] asm_exc_page_fault+0x27/0x30 [ 29.581607][ T377] RIP: 0033:0x7fd65c59ce61 [ 29.586034][ T377] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 29.605838][ T377] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 29.612095][ T377] RAX: 0000000000000000 RBX: 00007fd65c815fa0 RCX: 00007fd65c59ce59 [ 29.620166][ T377] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 29.628189][ T377] RBP: 00007fd65c632d6f R08: 0000000000000000 R09: 0000000000000000 [ 29.636188][ T377] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 29.644179][ T377] R13: 00007fd65c815fac R14: 00007fd65c815fa0 R15: 00007fd65c815fa0 [ 29.652262][ T377] [ 29.655296][ T377] Modules linked in: [ 29.659221][ T377] CR2: fffffffffffffffc [ 29.663387][ T377] ---[ end trace 0000000000000000 ]--- [ 29.668933][ T377] RIP: 0010:ext4_ext_map_blocks+0x2e59/0x6200 [ 29.675021][ T377] Code: 40 01 00 00 4d 85 f6 0f 84 bc 00 00 00 48 89 5c 24 20 49 8d 7e 08 48 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 38 16 00 00 <41> 0f b7 46 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 49 8d 46 28 48 [ 29.695112][ T377] RSP: 0018:ffffc90000a56600 EFLAGS: 00010246 [ 29.701196][ T377] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff888115701440 [ 29.709271][ T377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: fffffffffffffffc [ 29.717259][ T377] RBP: ffffc90000a568b0 R08: ffff88810b5f6ae3 R09: 1ffff110216bed5c [ 29.725331][ T377] R10: dffffc0000000000 R11: ffffed10216bed5d R12: dffffc0000000000 [ 29.733324][ T377] R13: 1ffff9200014acec R14: fffffffffffffff4 R15: 0000000000000010 [ 29.741405][ T377] FS: 0000555592bf4500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 29.750350][ T377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.756962][ T377] CR2: fffffffffffffffc CR3: 000000012d4cd000 CR4: 00000000003506a0 [ 29.764954][ T377] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.772935][ T377] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.780922][ T377] Kernel panic - not syncing: Fatal exception [ 29.787551][ T377] Kernel Offset: disabled [ 29.792445][ T377] Rebooting in 86400 seconds..