Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. 2026/03/29 00:43:29 parsed 1 programs [ 23.741500][ T36] audit: type=1400 audit(1774745009.630:64): avc: denied { node_bind } for pid=289 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.898468][ T36] audit: type=1400 audit(1774745010.780:65): avc: denied { mounton } for pid=295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.899515][ T295] cgroup: Unknown subsys name 'net' [ 24.921200][ T36] audit: type=1400 audit(1774745010.780:66): avc: denied { mount } for pid=295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.948442][ T36] audit: type=1400 audit(1774745010.820:67): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.948690][ T295] cgroup: Unknown subsys name 'devices' [ 25.131123][ T295] cgroup: Unknown subsys name 'hugetlb' [ 25.136839][ T295] cgroup: Unknown subsys name 'rlimit' [ 25.235322][ T36] audit: type=1400 audit(1774745011.120:68): avc: denied { setattr } for pid=295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.258671][ T36] audit: type=1400 audit(1774745011.120:69): avc: denied { create } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.278068][ T299] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.279203][ T36] audit: type=1400 audit(1774745011.120:70): avc: denied { write } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.307952][ T36] audit: type=1400 audit(1774745011.120:71): avc: denied { read } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.322115][ T295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.328420][ T36] audit: type=1400 audit(1774745011.120:72): avc: denied { sys_module } for pid=295 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 25.357970][ T36] audit: type=1400 audit(1774745011.120:73): avc: denied { mounton } for pid=295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.301916][ T302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.895975][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.903280][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.910419][ T336] bridge_slave_0: entered allmulticast mode [ 26.916814][ T336] bridge_slave_0: entered promiscuous mode [ 26.924254][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.931316][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.938369][ T336] bridge_slave_1: entered allmulticast mode [ 26.944698][ T336] bridge_slave_1: entered promiscuous mode [ 26.985698][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.992780][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.000095][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.007125][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.025889][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.033413][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.050332][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.057391][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.066892][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.074148][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.099049][ T336] veth0_vlan: entered promiscuous mode [ 27.110072][ T336] veth1_macvtap: entered promiscuous mode [ 27.181932][ T46] bridge_slave_1: left allmulticast mode [ 27.187649][ T46] bridge_slave_1: left promiscuous mode [ 27.193396][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.201031][ T46] bridge_slave_0: left allmulticast mode [ 27.206784][ T46] bridge_slave_0: left promiscuous mode [ 27.212546][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.331863][ T46] veth1_macvtap: left promiscuous mode [ 27.337471][ T46] veth0_vlan: left promiscuous mode 2026/03/29 00:43:33 executed programs: 0 [ 27.653057][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.660222][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.667282][ T366] bridge_slave_0: entered allmulticast mode [ 27.673698][ T366] bridge_slave_0: entered promiscuous mode [ 27.680027][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.687042][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.694176][ T366] bridge_slave_1: entered allmulticast mode [ 27.700703][ T366] bridge_slave_1: entered promiscuous mode [ 27.742244][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.749311][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.756538][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.763570][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.782501][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.789793][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.799656][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.806702][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.838067][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.845137][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.867879][ T366] veth0_vlan: entered promiscuous mode [ 27.877867][ T366] veth1_macvtap: entered promiscuous mode [ 27.917635][ T366] ------------[ cut here ]------------ [ 27.923149][ T366] WARNING: CPU: 1 PID: 366 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 27.931093][ T366] Modules linked in: [ 27.935012][ T366] CPU: 1 UID: 0 PID: 366 Comm: syz-executor Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 27.946757][ T366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 27.956914][ T366] RIP: 0010:drop_nlink+0xce/0x110 [ 27.962038][ T366] Code: 04 00 00 be 08 00 00 00 e8 df 15 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 e5 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 27.981971][ T366] RSP: 0018:ffffc9000117fc60 EFLAGS: 00010293 [ 27.988084][ T366] RAX: ffffffff81f1c4be RBX: ffff88811364cf50 RCX: ffff88810bb21300 [ 27.996118][ T366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.004263][ T366] RBP: ffffc9000117fc88 R08: 0000000000000003 R09: 0000000000000004 [ 28.012411][ T366] R10: dffffc0000000000 R11: fffff5200022ff7c R12: dffffc0000000000 [ 28.020450][ T366] R13: 1ffff110226c99f3 R14: ffff88811364cf98 R15: 0000000000000000 [ 28.028507][ T366] FS: 0000555588c7f500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 28.037464][ T366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.044100][ T366] CR2: 0000555588ca2948 CR3: 0000000112c62000 CR4: 00000000003526b0 [ 28.052116][ T366] Call Trace: [ 28.055405][ T366] [ 28.058385][ T366] shmem_rmdir+0x5f/0x90 [ 28.062704][ T366] vfs_rmdir+0x3e3/0x560 [ 28.067065][ T366] incfs_kill_sb+0x109/0x230 [ 28.071792][ T366] deactivate_locked_super+0xd5/0x2a0 [ 28.077239][ T366] deactivate_super+0xb8/0xe0 [ 28.081971][ T366] cleanup_mnt+0x406/0x4a0 [ 28.086512][ T366] __cleanup_mnt+0x1d/0x40 [ 28.090992][ T366] task_work_run+0x1e5/0x260 [ 28.095598][ T366] ? __cfi_task_work_run+0x10/0x10 [ 28.100824][ T366] ? __x64_sys_umount+0x12e/0x180 [ 28.105886][ T366] ? __cfi___x64_sys_umount+0x10/0x10 [ 28.111331][ T366] ? __kasan_check_read+0x15/0x20 [ 28.116554][ T366] resume_user_mode_work+0x35/0x50 [ 28.121715][ T366] syscall_exit_to_user_mode+0x63/0xb0 [ 28.127209][ T366] do_syscall_64+0x63/0xf0 [ 28.131674][ T366] ? clear_bhb_loop+0x50/0xa0 [ 28.136381][ T366] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.142312][ T366] RIP: 0033:0x7f490419da57 [ 28.146746][ T366] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 28.166385][ T366] RSP: 002b:00007ffd9d47ad78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 28.174874][ T366] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f490419da57 [ 28.182961][ T366] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9d47ae30 [ 28.190992][ T366] RBP: 00007ffd9d47ae30 R08: 00007ffd9d47be30 R09: 00000000ffffffff [ 28.199010][ T366] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd9d47bec0 [ 28.207022][ T366] R13: 00007f4904232048 R14: 0000000000006cf6 R15: 00007ffd9d47bf00 [ 28.215122][ T366] [ 28.218147][ T366] ---[ end trace 0000000000000000 ]--- [ 28.223779][ T366] ================================================================== [ 28.231941][ T366] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 28.238172][ T366] Write of size 4 at addr 0000000000000168 by task syz-executor/366 [ 28.246137][ T366] [ 28.248452][ T366] CPU: 0 UID: 0 PID: 366 Comm: syz-executor Tainted: G W syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 28.248473][ T366] Tainted: [W]=WARN [ 28.248477][ T366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 28.248485][ T366] Call Trace: [ 28.248490][ T366] [ 28.248495][ T366] __dump_stack+0x21/0x30 [ 28.248512][ T366] dump_stack_lvl+0x140/0x1c0 [ 28.248527][ T366] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.248544][ T366] print_report+0x3d/0x70 [ 28.248558][ T366] kasan_report+0x162/0x1a0 [ 28.248571][ T366] ? ihold+0x24/0x70 [ 28.248582][ T366] ? _raw_spin_unlock+0x45/0x60 [ 28.248598][ T366] ? ihold+0x24/0x70 [ 28.248608][ T366] kasan_check_range+0x25a/0x2b0 [ 28.248621][ T366] __kasan_check_write+0x18/0x20 [ 28.248637][ T366] ihold+0x24/0x70 [ 28.248647][ T366] vfs_rmdir+0x26a/0x560 [ 28.248661][ T366] incfs_kill_sb+0x109/0x230 [ 28.248678][ T366] deactivate_locked_super+0xd5/0x2a0 [ 28.248692][ T366] deactivate_super+0xb8/0xe0 [ 28.248705][ T366] cleanup_mnt+0x406/0x4a0 [ 28.248716][ T366] __cleanup_mnt+0x1d/0x40 [ 28.248727][ T366] task_work_run+0x1e5/0x260 [ 28.248741][ T366] ? __cfi_task_work_run+0x10/0x10 [ 28.248754][ T366] ? __x64_sys_umount+0x12e/0x180 [ 28.248769][ T366] ? __cfi___x64_sys_umount+0x10/0x10 [ 28.248784][ T366] ? __kasan_check_read+0x15/0x20 [ 28.248799][ T366] resume_user_mode_work+0x35/0x50 [ 28.248816][ T366] syscall_exit_to_user_mode+0x63/0xb0 [ 28.248829][ T366] do_syscall_64+0x63/0xf0 [ 28.248844][ T366] ? clear_bhb_loop+0x50/0xa0 [ 28.248860][ T366] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.248876][ T366] RIP: 0033:0x7f490419da57 [ 28.248888][ T366] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 28.248899][ T366] RSP: 002b:00007ffd9d47ad78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 28.248913][ T366] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f490419da57 [ 28.248921][ T366] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9d47ae30 [ 28.248929][ T366] RBP: 00007ffd9d47ae30 R08: 00007ffd9d47be30 R09: 00000000ffffffff [ 28.248938][ T366] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd9d47bec0 [ 28.248947][ T366] R13: 00007f4904232048 R14: 0000000000006cf6 R15: 00007ffd9d47bf00 [ 28.248957][ T366] [ 28.248973][ T366] ================================================================== [ 28.494280][ T366] Disabling lock debugging due to kernel taint [ 28.500695][ T366] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 28.508520][ T366] #PF: supervisor write access in kernel mode [ 28.514571][ T366] #PF: error_code(0x0002) - not-present page [ 28.520532][ T366] PGD 8000000113838067 P4D 8000000113838067 PUD 0 [ 28.527038][ T366] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 28.533096][ T366] CPU: 1 UID: 0 PID: 366 Comm: syz-executor Tainted: G B W syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 28.546192][ T366] Tainted: [B]=BAD_PAGE, [W]=WARN [ 28.551228][ T366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 28.561302][ T366] RIP: 0010:ihold+0x2a/0x70 [ 28.565898][ T366] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd dc 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 28.585934][ T366] RSP: 0018:ffffc9000117fca0 EFLAGS: 00010246 [ 28.591987][ T366] RAX: ffff88810bb21300 RBX: 0000000000000000 RCX: ffff88810bb21300 [ 28.599947][ T366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.607904][ T366] RBP: ffffc9000117fcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 28.615875][ T366] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff88811364cf5c [ 28.624094][ T366] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 28.632326][ T366] FS: 0000555588c7f500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 28.641242][ T366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.647934][ T366] CR2: 0000000000000168 CR3: 0000000112c62000 CR4: 00000000003526b0 [ 28.655910][ T366] Call Trace: [ 28.659176][ T366] [ 28.662185][ T366] vfs_rmdir+0x26a/0x560 [ 28.666423][ T366] incfs_kill_sb+0x109/0x230 [ 28.671031][ T366] deactivate_locked_super+0xd5/0x2a0 [ 28.676479][ T366] deactivate_super+0xb8/0xe0 [ 28.681144][ T366] cleanup_mnt+0x406/0x4a0 [ 28.685548][ T366] __cleanup_mnt+0x1d/0x40 [ 28.689951][ T366] task_work_run+0x1e5/0x260 [ 28.694547][ T366] ? __cfi_task_work_run+0x10/0x10 [ 28.699656][ T366] ? __x64_sys_umount+0x12e/0x180 [ 28.704668][ T366] ? __cfi___x64_sys_umount+0x10/0x10 [ 28.710026][ T366] ? __kasan_check_read+0x15/0x20 [ 28.715037][ T366] resume_user_mode_work+0x35/0x50 [ 28.720139][ T366] syscall_exit_to_user_mode+0x63/0xb0 [ 28.725589][ T366] do_syscall_64+0x63/0xf0 [ 28.729997][ T366] ? clear_bhb_loop+0x50/0xa0 [ 28.734664][ T366] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.740547][ T366] RIP: 0033:0x7f490419da57 [ 28.744955][ T366] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 28.764636][ T366] RSP: 002b:00007ffd9d47ad78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 28.773037][ T366] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f490419da57 [ 28.781082][ T366] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9d47ae30 [ 28.789127][ T366] RBP: 00007ffd9d47ae30 R08: 00007ffd9d47be30 R09: 00000000ffffffff [ 28.797083][ T366] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd9d47bec0 [ 28.805560][ T366] R13: 00007f4904232048 R14: 0000000000006cf6 R15: 00007ffd9d47bf00 [ 28.813520][ T366] [ 28.816576][ T366] Modules linked in: [ 28.820454][ T366] CR2: 0000000000000168 [ 28.824591][ T366] ---[ end trace 0000000000000000 ]--- [ 28.830029][ T366] RIP: 0010:ihold+0x2a/0x70 [ 28.834520][ T366] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd dc 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 28.854112][ T366] RSP: 0018:ffffc9000117fca0 EFLAGS: 00010246 [ 28.860165][ T366] RAX: ffff88810bb21300 RBX: 0000000000000000 RCX: ffff88810bb21300 [ 28.868211][ T366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.876176][ T366] RBP: ffffc9000117fcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 28.884152][ T366] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff88811364cf5c [ 28.892136][ T366] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 28.900104][ T366] FS: 0000555588c7f500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 28.909204][ T366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.915887][ T366] CR2: 0000000000000168 CR3: 0000000112c62000 CR4: 00000000003526b0 [ 28.923874][ T366] Kernel panic - not syncing: Fatal exception [ 28.930073][ T366] Kernel Offset: disabled [ 28.934388][ T366] Rebooting in 86400 seconds..