Warning: Permanently added '10.128.10.17' (ED25519) to the list of known hosts. 2025/09/24 17:04:51 parsed 1 programs [ 26.818501][ T24] audit: type=1400 audit(1758733491.390:64): avc: denied { node_bind } for pid=275 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 26.840482][ T24] audit: type=1400 audit(1758733491.390:65): avc: denied { create } for pid=275 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.861728][ T24] audit: type=1400 audit(1758733491.390:66): avc: denied { module_request } for pid=275 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 27.773440][ T24] audit: type=1400 audit(1758733492.340:67): avc: denied { mounton } for pid=284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.774801][ T284] cgroup: Unknown subsys name 'net' [ 27.797466][ T24] audit: type=1400 audit(1758733492.340:68): avc: denied { mount } for pid=284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.827128][ T24] audit: type=1400 audit(1758733492.370:69): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.827405][ T284] cgroup: Unknown subsys name 'devices' [ 27.967875][ T284] cgroup: Unknown subsys name 'hugetlb' [ 27.974577][ T284] cgroup: Unknown subsys name 'rlimit' [ 28.161000][ T24] audit: type=1400 audit(1758733492.730:70): avc: denied { setattr } for pid=284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.187475][ T24] audit: type=1400 audit(1758733492.730:71): avc: denied { create } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.197522][ T286] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.208833][ T24] audit: type=1400 audit(1758733492.730:72): avc: denied { write } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.238876][ T24] audit: type=1400 audit(1758733492.730:73): avc: denied { read } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.261144][ T284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.727257][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 28.739433][ T288] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 29.348414][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.356281][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.364408][ T331] device bridge_slave_0 entered promiscuous mode [ 29.372464][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.380275][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.388109][ T331] device bridge_slave_1 entered promiscuous mode [ 29.426527][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.434300][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.442409][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.450194][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.469195][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.477412][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.486757][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.496826][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.506835][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.514673][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.525168][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.534550][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.542878][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.557704][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.567493][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.583429][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.600201][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.609198][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.617495][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.628209][ T331] device veth0_vlan entered promiscuous mode [ 29.640819][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.657415][ T331] device veth1_macvtap entered promiscuous mode [ 29.668905][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.680255][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/09/24 17:04:54 executed programs: 0 [ 30.175322][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.183252][ T384] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.191202][ T384] device bridge_slave_0 entered promiscuous mode [ 30.198345][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.206020][ T384] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.214066][ T384] device bridge_slave_1 entered promiscuous mode [ 30.250021][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.257602][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.265129][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.272562][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.290691][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.299017][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.308410][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.319376][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.328280][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.337462][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.345597][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.360561][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.369286][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.378238][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.385707][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.398767][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.407876][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.417032][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.426289][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.443817][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.452330][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.463985][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.472687][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.486064][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.493787][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.501784][ T384] device veth0_vlan entered promiscuous mode [ 30.512531][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.521115][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.534010][ T384] device veth1_macvtap entered promiscuous mode [ 30.543705][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.552456][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.562173][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.572713][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.581490][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.640702][ T389] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 30.773256][ T389] EXT4-fs (loop2): unsupported inode size: 0 [ 30.779797][ T389] EXT4-fs (loop2): blocksize: 4096 [ 30.786428][ T389] ------------[ cut here ]------------ [ 30.792791][ T389] WARNING: CPU: 1 PID: 389 at fs/inode.c:304 drop_nlink+0xc5/0x110 [ 30.802228][ T389] Modules linked in: [ 30.807385][ T389] CPU: 1 PID: 389 Comm: syz.2.17 Not tainted syzkaller #0 [ 30.815342][ T389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 30.826363][ T389] RIP: 0010:drop_nlink+0xc5/0x110 [ 30.831658][ T389] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 93 22 f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 2b 33 b8 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 30.854068][ T389] RSP: 0018:ffffc90002f97c70 EFLAGS: 00010293 [ 30.860969][ T389] RAX: ffffffff81ab72e5 RBX: ffff888128133320 RCX: ffff88810dab4f00 [ 30.869597][ T389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.879066][ T389] RBP: ffffc90002f97c98 R08: 0000000000000004 R09: 0000000000000003 [ 30.887635][ T389] R10: fffff520005f2f7c R11: 1ffff920005f2f7c R12: dffffc0000000000 [ 30.896334][ T389] R13: 1ffff1102502666d R14: ffff888128133368 R15: 0000000000000000 [ 30.905595][ T389] FS: 000055558504b500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.915569][ T389] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.922746][ T389] CR2: 000056030c8a3530 CR3: 0000000129e0c000 CR4: 00000000003506b0 [ 30.931352][ T389] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.940423][ T389] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.949416][ T389] Call Trace: [ 30.953269][ T389] shmem_rmdir+0x5b/0x90 [ 30.958193][ T389] vfs_rmdir+0x1b3/0x3e0 [ 30.962641][ T389] dir_rmdir+0x22b/0x310 [ 30.967532][ T389] ? dir_mkdir+0x570/0x570 [ 30.972442][ T389] ? down_write+0xac/0x110 [ 30.977499][ T389] ? selinux_inode_rmdir+0x22/0x30 [ 30.983199][ T389] ? security_inode_rmdir+0xd0/0x120 [ 30.990559][ T389] vfs_rmdir+0x1b3/0x3e0 [ 30.996287][ T389] do_rmdir+0x218/0x620 [ 31.001118][ T389] ? d_delete_notify+0xd0/0xd0 [ 31.001539][ T7] device bridge_slave_1 left promiscuous mode [ 31.006413][ T389] ? getname_flags+0x206/0x500 [ 31.014652][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.020782][ T389] __x64_sys_rmdir+0x49/0x50 [ 31.035204][ T389] do_syscall_64+0x31/0x40 [ 31.035450][ T7] device bridge_slave_0 left promiscuous mode [ 31.047532][ T389] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.047959][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.055433][ T389] RIP: 0033:0x7fa7baf02ec9 [ 31.069736][ T389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.092893][ T389] RSP: 002b:00007fffdd46bbf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 31.093222][ T7] device veth1_macvtap left promiscuous mode [ 31.102725][ T389] RAX: ffffffffffffffda RBX: 00007fa7bb159fa0 RCX: 00007fa7baf02ec9 [ 31.110610][ T7] device veth0_vlan left promiscuous mode [ 31.118555][ T389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000006c0 [ 31.134096][ T389] RBP: 00007fa7baf85f91 R08: 0000000000000000 R09: 0000000000000000 [ 31.143462][ T389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.152651][ T389] R13: 00007fa7bb159fa0 R14: 00007fa7bb159fa0 R15: 0000000000000001 [ 31.161211][ T389] ---[ end trace 75934f32e059f13b ]--- [ 31.166980][ T389] list_del corruption. prev->next should be ffff88810cfb06f0, but was ffff888126ceb800 [ 31.177989][ T389] ------------[ cut here ]------------ [ 31.184218][ T389] kernel BUG at lib/list_debug.c:61! [ 31.190195][ T389] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 31.196877][ T389] CPU: 1 PID: 389 Comm: syz.2.17 Tainted: G W syzkaller #0 [ 31.206233][ T389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 31.217037][ T389] RIP: 0010:__list_del_entry_valid+0x10c/0x120 [ 31.223535][ T389] Code: 48 89 de e8 66 fe 31 02 0f 0b 48 c7 c7 20 27 20 85 48 89 de e8 55 fe 31 02 0f 0b 48 c7 c7 80 27 20 85 48 89 de e8 44 fe 31 02 <0f> 0b 48 c7 c7 e0 27 20 85 48 89 de e8 33 fe 31 02 0f 0b 00 55 48 [ 31.244377][ T389] RSP: 0018:ffffc90002f97c58 EFLAGS: 00010246 [ 31.250709][ T389] RAX: 0000000000000054 RBX: ffff88810cfb06f0 RCX: 93bcfc5b6c1e6400 [ 31.259211][ T389] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 31.267490][ T389] RBP: ffffc90002f97c78 R08: dffffc0000000000 R09: fffff520005f2ec1 [ 31.276196][ T389] R10: fffff520005f2ec1 R11: 1ffff920005f2ec0 R12: dffffc0000000000 [ 31.284856][ T389] R13: dffffc0000000000 R14: ffff888126ceb800 R15: ffff888126ceb6f0 [ 31.293678][ T389] FS: 000055558504b500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 31.303456][ T389] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.310846][ T389] CR2: 000056030c86cf08 CR3: 0000000129e0c000 CR4: 00000000003506a0 [ 31.318996][ T389] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.327327][ T389] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.336318][ T389] Call Trace: [ 31.340074][ T389] __dentry_kill+0x24c/0x650 [ 31.345205][ T389] dentry_kill+0xc0/0x2a0 [ 31.350277][ T389] dput+0x42/0x80 [ 31.354183][ T389] path_put+0x39/0x60 [ 31.358347][ T389] dentry_release+0x4f/0xa0 [ 31.363203][ T389] ? dentry_revalidate+0x350/0x350 [ 31.368398][ T389] __dentry_kill+0x4b5/0x650 [ 31.373072][ T389] dentry_kill+0xc0/0x2a0 [ 31.377690][ T389] dput+0x42/0x80 [ 31.381406][ T389] do_rmdir+0x235/0x620 [ 31.385572][ T389] ? d_delete_notify+0xd0/0xd0 [ 31.390618][ T389] ? getname_flags+0x206/0x500 [ 31.395637][ T389] __x64_sys_rmdir+0x49/0x50 [ 31.400843][ T389] do_syscall_64+0x31/0x40 [ 31.406092][ T389] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.412342][ T389] RIP: 0033:0x7fa7baf02ec9 [ 31.417023][ T389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.437164][ T389] RSP: 002b:00007fffdd46bbf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 31.447274][ T389] RAX: ffffffffffffffda RBX: 00007fa7bb159fa0 RCX: 00007fa7baf02ec9 [ 31.455436][ T389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000006c0 [ 31.464146][ T389] RBP: 00007fa7baf85f91 R08: 0000000000000000 R09: 0000000000000000 [ 31.472778][ T389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.481149][ T389] R13: 00007fa7bb159fa0 R14: 00007fa7bb159fa0 R15: 0000000000000001 [ 31.489582][ T389] Modules linked in: [ 31.494625][ T389] ---[ end trace 75934f32e059f13c ]--- [ 31.501337][ T389] RIP: 0010:__list_del_entry_valid+0x10c/0x120 [ 31.507850][ T389] Code: 48 89 de e8 66 fe 31 02 0f 0b 48 c7 c7 20 27 20 85 48 89 de e8 55 fe 31 02 0f 0b 48 c7 c7 80 27 20 85 48 89 de e8 44 fe 31 02 <0f> 0b 48 c7 c7 e0 27 20 85 48 89 de e8 33 fe 31 02 0f 0b 00 55 48 [ 31.531011][ T389] RSP: 0018:ffffc90002f97c58 EFLAGS: 00010246 [ 31.538300][ T389] RAX: 0000000000000054 RBX: ffff88810cfb06f0 RCX: 93bcfc5b6c1e6400 [ 31.547048][ T389] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 31.555148][ T389] RBP: ffffc90002f97c78 R08: dffffc0000000000 R09: fffff520005f2ec1 [ 31.564442][ T389] R10: fffff520005f2ec1 R11: 1ffff920005f2ec0 R12: dffffc0000000000 [ 31.573396][ T389] R13: dffffc0000000000 R14: ffff888126ceb800 R15: ffff888126ceb6f0 [ 31.583038][ T389] FS: 000055558504b500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 31.593954][ T389] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.602734][ T389] CR2: 000056030c86cf08 CR3: 0000000129e0c000 CR4: 00000000003506a0 [ 31.614053][ T389] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.623744][ T389] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.633865][ T389] Kernel panic - not syncing: Fatal exception [ 31.658002][ T389] Kernel Offset: disabled [ 31.662697][ T389] Rebooting in 86400 seconds..