Warning: Permanently added '10.128.0.159' (ED25519) to the list of known hosts. 2026/03/28 23:55:36 parsed 1 programs [ 19.855711][ T36] audit: type=1400 audit(1774742136.450:64): avc: denied { node_bind } for pid=290 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 20.795193][ T36] audit: type=1400 audit(1774742137.390:65): avc: denied { mounton } for pid=296 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.796266][ T296] cgroup: Unknown subsys name 'net' [ 20.817984][ T36] audit: type=1400 audit(1774742137.390:66): avc: denied { mount } for pid=296 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.845248][ T36] audit: type=1400 audit(1774742137.430:67): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.845425][ T296] cgroup: Unknown subsys name 'devices' [ 21.030846][ T296] cgroup: Unknown subsys name 'hugetlb' [ 21.036457][ T296] cgroup: Unknown subsys name 'rlimit' [ 21.214681][ T36] audit: type=1400 audit(1774742137.810:68): avc: denied { setattr } for pid=296 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.238067][ T36] audit: type=1400 audit(1774742137.810:69): avc: denied { create } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.246500][ T301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.258609][ T36] audit: type=1400 audit(1774742137.810:70): avc: denied { write } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.287347][ T36] audit: type=1400 audit(1774742137.810:71): avc: denied { read } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.307612][ T36] audit: type=1400 audit(1774742137.810:72): avc: denied { sys_module } for pid=296 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 21.328803][ T36] audit: type=1400 audit(1774742137.810:73): avc: denied { mounton } for pid=296 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.357511][ T296] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.244323][ T307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.312016][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.319138][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.326343][ T312] bridge_slave_0: entered allmulticast mode [ 22.332694][ T312] bridge_slave_0: entered promiscuous mode [ 22.339582][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.346616][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.353694][ T312] bridge_slave_1: entered allmulticast mode [ 22.359872][ T312] bridge_slave_1: entered promiscuous mode [ 22.402913][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.409974][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.417216][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.424245][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.443275][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.450531][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.459198][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.466224][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.475029][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.482066][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.505468][ T312] veth0_vlan: entered promiscuous mode [ 22.515736][ T312] veth1_macvtap: entered promiscuous mode [ 22.615001][ T13] bridge_slave_1: left allmulticast mode [ 22.620898][ T13] bridge_slave_1: left promiscuous mode [ 22.626532][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.634628][ T13] bridge_slave_0: left allmulticast mode [ 22.640376][ T13] bridge_slave_0: left promiscuous mode [ 22.646025][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.777562][ T13] veth1_macvtap: left promiscuous mode [ 22.783999][ T13] veth0_vlan: left promiscuous mode 2026/03/28 23:55:39 executed programs: 0 [ 23.364216][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.371318][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.378618][ T364] bridge_slave_0: entered allmulticast mode [ 23.385061][ T364] bridge_slave_0: entered promiscuous mode [ 23.396302][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.403346][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.410428][ T364] bridge_slave_1: entered allmulticast mode [ 23.416631][ T364] bridge_slave_1: entered promiscuous mode [ 23.453687][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.460745][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.467954][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.475008][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.492217][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.499426][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.508168][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.515224][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.524235][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.531290][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.552186][ T364] veth0_vlan: entered promiscuous mode [ 23.561721][ T364] veth1_macvtap: entered promiscuous mode [ 23.587497][ T364] ------------[ cut here ]------------ [ 23.593000][ T364] WARNING: CPU: 1 PID: 364 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 23.600964][ T364] Modules linked in: [ 23.604873][ T364] CPU: 1 UID: 0 PID: 364 Comm: syz-executor Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 23.616519][ T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 23.626611][ T364] RIP: 0010:drop_nlink+0xce/0x110 [ 23.631687][ T364] Code: 04 00 00 be 08 00 00 00 e8 df 15 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 e5 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 23.651327][ T364] RSP: 0018:ffffc90001b1fc60 EFLAGS: 00010293 [ 23.657384][ T364] RAX: ffffffff81f1c4be RBX: ffff888132293838 RCX: ffff888114055f00 [ 23.665373][ T364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 23.673369][ T364] RBP: ffffc90001b1fc88 R08: 0000000000000003 R09: 0000000000000004 [ 23.681374][ T364] R10: dffffc0000000000 R11: fffff52000363f7c R12: dffffc0000000000 [ 23.689366][ T364] R13: 1ffff11026452710 R14: ffff888132293880 R15: 0000000000000000 [ 23.697330][ T364] FS: 00005555789cc500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 23.706282][ T364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.712889][ T364] CR2: 00005555789ef948 CR3: 0000000103b74000 CR4: 00000000003526b0 [ 23.720884][ T364] Call Trace: [ 23.724157][ T364] [ 23.727068][ T364] shmem_rmdir+0x5f/0x90 [ 23.731317][ T364] vfs_rmdir+0x3e3/0x560 [ 23.735558][ T364] incfs_kill_sb+0x109/0x230 [ 23.740154][ T364] deactivate_locked_super+0xd5/0x2a0 [ 23.745532][ T364] deactivate_super+0xb8/0xe0 [ 23.750262][ T364] cleanup_mnt+0x406/0x4a0 [ 23.754675][ T364] __cleanup_mnt+0x1d/0x40 [ 23.759103][ T364] task_work_run+0x1e5/0x260 [ 23.763691][ T364] ? __cfi_task_work_run+0x10/0x10 [ 23.768783][ T364] ? __x64_sys_umount+0x12e/0x180 [ 23.773837][ T364] ? __cfi___x64_sys_umount+0x10/0x10 [ 23.779240][ T364] ? __kasan_check_read+0x15/0x20 [ 23.784261][ T364] resume_user_mode_work+0x35/0x50 [ 23.789398][ T364] syscall_exit_to_user_mode+0x63/0xb0 [ 23.794856][ T364] do_syscall_64+0x63/0xf0 [ 23.799296][ T364] ? clear_bhb_loop+0x50/0xa0 [ 23.803973][ T364] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 23.809897][ T364] RIP: 0033:0x7ff81d99da57 [ 23.814326][ T364] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 23.833975][ T364] RSP: 002b:00007ffc56b30748 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 23.842414][ T364] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff81d99da57 [ 23.850422][ T364] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc56b30800 [ 23.858388][ T364] RBP: 00007ffc56b30800 R08: 00007ffc56b31800 R09: 00000000ffffffff [ 23.866375][ T364] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc56b31890 [ 23.874385][ T364] R13: 00007ff81da32048 R14: 0000000000005c0d R15: 00007ffc56b318d0 [ 23.882399][ T364] [ 23.885410][ T364] ---[ end trace 0000000000000000 ]--- [ 23.890996][ T364] ================================================================== [ 23.899071][ T364] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 23.905306][ T364] Write of size 4 at addr 0000000000000168 by task syz-executor/364 [ 23.913257][ T364] [ 23.915570][ T364] CPU: 0 UID: 0 PID: 364 Comm: syz-executor Tainted: G W syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 23.915587][ T364] Tainted: [W]=WARN [ 23.915591][ T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 23.915597][ T364] Call Trace: [ 23.915602][ T364] [ 23.915607][ T364] __dump_stack+0x21/0x30 [ 23.915623][ T364] dump_stack_lvl+0x140/0x1c0 [ 23.915634][ T364] ? __cfi_dump_stack_lvl+0x10/0x10 [ 23.915647][ T364] print_report+0x3d/0x70 [ 23.915659][ T364] kasan_report+0x162/0x1a0 [ 23.915669][ T364] ? ihold+0x24/0x70 [ 23.915678][ T364] ? _raw_spin_unlock+0x45/0x60 [ 23.915691][ T364] ? ihold+0x24/0x70 [ 23.915700][ T364] kasan_check_range+0x25a/0x2b0 [ 23.915710][ T364] __kasan_check_write+0x18/0x20 [ 23.915722][ T364] ihold+0x24/0x70 [ 23.915730][ T364] vfs_rmdir+0x26a/0x560 [ 23.915741][ T364] incfs_kill_sb+0x109/0x230 [ 23.915755][ T364] deactivate_locked_super+0xd5/0x2a0 [ 23.915766][ T364] deactivate_super+0xb8/0xe0 [ 23.915777][ T364] cleanup_mnt+0x406/0x4a0 [ 23.915786][ T364] __cleanup_mnt+0x1d/0x40 [ 23.915795][ T364] task_work_run+0x1e5/0x260 [ 23.915806][ T364] ? __cfi_task_work_run+0x10/0x10 [ 23.915817][ T364] ? __x64_sys_umount+0x12e/0x180 [ 23.915828][ T364] ? __cfi___x64_sys_umount+0x10/0x10 [ 23.915840][ T364] ? __kasan_check_read+0x15/0x20 [ 23.915852][ T364] resume_user_mode_work+0x35/0x50 [ 23.915865][ T364] syscall_exit_to_user_mode+0x63/0xb0 [ 23.915877][ T364] do_syscall_64+0x63/0xf0 [ 23.915889][ T364] ? clear_bhb_loop+0x50/0xa0 [ 23.915903][ T364] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 23.915915][ T364] RIP: 0033:0x7ff81d99da57 [ 23.915925][ T364] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 23.915934][ T364] RSP: 002b:00007ffc56b30748 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 23.915946][ T364] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff81d99da57 [ 23.915953][ T364] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc56b30800 [ 23.915960][ T364] RBP: 00007ffc56b30800 R08: 00007ffc56b31800 R09: 00000000ffffffff [ 23.915967][ T364] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc56b31890 [ 23.915974][ T364] R13: 00007ff81da32048 R14: 0000000000005c0d R15: 00007ffc56b318d0 [ 23.915982][ T364] [ 23.915985][ T364] ================================================================== [ 24.159523][ T364] Disabling lock debugging due to kernel taint [ 24.165723][ T364] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 24.173497][ T364] #PF: supervisor write access in kernel mode [ 24.179530][ T364] #PF: error_code(0x0002) - not-present page [ 24.185492][ T364] PGD 8000000113127067 P4D 8000000113127067 PUD 0 [ 24.191974][ T364] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 24.198016][ T364] CPU: 0 UID: 0 PID: 364 Comm: syz-executor Tainted: G B W syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 24.211098][ T364] Tainted: [B]=BAD_PAGE, [W]=WARN [ 24.216114][ T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 24.226142][ T364] RIP: 0010:ihold+0x2a/0x70 [ 24.230623][ T364] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd dc 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 24.250203][ T364] RSP: 0018:ffffc90001b1fca0 EFLAGS: 00010246 [ 24.256246][ T364] RAX: ffff888114055f00 RBX: 0000000000000000 RCX: ffff888114055f00 [ 24.264197][ T364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 24.272142][ T364] RBP: ffffc90001b1fcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 24.280086][ T364] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff888132293844 [ 24.288034][ T364] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 24.295989][ T364] FS: 00005555789cc500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 24.304896][ T364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.311453][ T364] CR2: 0000000000000168 CR3: 0000000103b74000 CR4: 00000000003526b0 [ 24.319399][ T364] Call Trace: [ 24.322651][ T364] [ 24.325561][ T364] vfs_rmdir+0x26a/0x560 [ 24.329788][ T364] incfs_kill_sb+0x109/0x230 [ 24.334356][ T364] deactivate_locked_super+0xd5/0x2a0 [ 24.339705][ T364] deactivate_super+0xb8/0xe0 [ 24.344353][ T364] cleanup_mnt+0x406/0x4a0 [ 24.348740][ T364] __cleanup_mnt+0x1d/0x40 [ 24.353129][ T364] task_work_run+0x1e5/0x260 [ 24.357692][ T364] ? __cfi_task_work_run+0x10/0x10 [ 24.362775][ T364] ? __x64_sys_umount+0x12e/0x180 [ 24.367778][ T364] ? __cfi___x64_sys_umount+0x10/0x10 [ 24.373123][ T364] ? __kasan_check_read+0x15/0x20 [ 24.378122][ T364] resume_user_mode_work+0x35/0x50 [ 24.383209][ T364] syscall_exit_to_user_mode+0x63/0xb0 [ 24.388646][ T364] do_syscall_64+0x63/0xf0 [ 24.393038][ T364] ? clear_bhb_loop+0x50/0xa0 [ 24.397699][ T364] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.403567][ T364] RIP: 0033:0x7ff81d99da57 [ 24.407954][ T364] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 24.427532][ T364] RSP: 002b:00007ffc56b30748 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 24.435919][ T364] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff81d99da57 [ 24.443864][ T364] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc56b30800 [ 24.451810][ T364] RBP: 00007ffc56b30800 R08: 00007ffc56b31800 R09: 00000000ffffffff [ 24.459754][ T364] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc56b31890 [ 24.467699][ T364] R13: 00007ff81da32048 R14: 0000000000005c0d R15: 00007ffc56b318d0 [ 24.475645][ T364] [ 24.478638][ T364] Modules linked in: [ 24.482517][ T364] CR2: 0000000000000168 [ 24.486644][ T364] ---[ end trace 0000000000000000 ]--- [ 24.492072][ T364] RIP: 0010:ihold+0x2a/0x70 [ 24.496549][ T364] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd dc 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 24.516129][ T364] RSP: 0018:ffffc90001b1fca0 EFLAGS: 00010246 [ 24.522171][ T364] RAX: ffff888114055f00 RBX: 0000000000000000 RCX: ffff888114055f00 [ 24.530117][ T364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 24.538062][ T364] RBP: ffffc90001b1fcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 24.546008][ T364] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff888132293844 [ 24.553958][ T364] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 24.561900][ T364] FS: 00005555789cc500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 24.570801][ T364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.577368][ T364] CR2: 0000000000000168 CR3: 0000000103b74000 CR4: 00000000003526b0 [ 24.585341][ T364] Kernel panic - not syncing: Fatal exception [ 24.591755][ T364] Kernel Offset: disabled [ 24.596063][ T364] Rebooting in 86400 seconds..