Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. 2026/04/03 21:51:43 parsed 1 programs [ 23.559541][ T36] audit: type=1400 audit(1775253103.320:64): avc: denied { node_bind } for pid=289 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.711577][ T36] audit: type=1400 audit(1775253104.470:65): avc: denied { mounton } for pid=295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.712704][ T295] cgroup: Unknown subsys name 'net' [ 24.734435][ T36] audit: type=1400 audit(1775253104.470:66): avc: denied { mount } for pid=295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.762151][ T36] audit: type=1400 audit(1775253104.510:67): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.762503][ T295] cgroup: Unknown subsys name 'devices' [ 24.924347][ T295] cgroup: Unknown subsys name 'hugetlb' [ 24.929967][ T295] cgroup: Unknown subsys name 'rlimit' [ 25.028390][ T36] audit: type=1400 audit(1775253104.790:68): avc: denied { setattr } for pid=295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.051732][ T36] audit: type=1400 audit(1775253104.790:69): avc: denied { create } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.064962][ T298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.072547][ T36] audit: type=1400 audit(1775253104.790:70): avc: denied { write } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.101534][ T36] audit: type=1400 audit(1775253104.790:71): avc: denied { read } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.102402][ T295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.121846][ T36] audit: type=1400 audit(1775253104.790:72): avc: denied { sys_module } for pid=295 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 25.152008][ T36] audit: type=1400 audit(1775253104.790:73): avc: denied { mounton } for pid=295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.141318][ T301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.260901][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.268012][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.275339][ T311] bridge_slave_0: entered allmulticast mode [ 26.281634][ T311] bridge_slave_0: entered promiscuous mode [ 26.287999][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.295088][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.302254][ T311] bridge_slave_1: entered allmulticast mode [ 26.308635][ T311] bridge_slave_1: entered promiscuous mode [ 26.350436][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.357519][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.365185][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.372260][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.399483][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.406872][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.417522][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.424601][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.434232][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.441339][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.466603][ T311] veth0_vlan: entered promiscuous mode [ 26.479157][ T311] veth1_macvtap: entered promiscuous mode [ 26.531666][ T13] bridge_slave_1: left allmulticast mode [ 26.537546][ T13] bridge_slave_1: left promiscuous mode [ 26.543912][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.552027][ T13] bridge_slave_0: left allmulticast mode [ 26.557747][ T13] bridge_slave_0: left promiscuous mode [ 26.563575][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.713750][ T13] veth1_macvtap: left promiscuous mode [ 26.719337][ T13] veth0_vlan: left promiscuous mode 2026/04/03 21:51:47 executed programs: 0 [ 27.570191][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.577374][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.584981][ T365] bridge_slave_0: entered allmulticast mode [ 27.591205][ T365] bridge_slave_0: entered promiscuous mode [ 27.598718][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.605961][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.613542][ T365] bridge_slave_1: entered allmulticast mode [ 27.620334][ T365] bridge_slave_1: entered promiscuous mode [ 27.666478][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.673720][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.680989][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.688036][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.707440][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.714800][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.725091][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.732262][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.741765][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.748932][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.771635][ T365] veth0_vlan: entered promiscuous mode [ 27.782460][ T365] veth1_macvtap: entered promiscuous mode [ 27.813392][ T365] ------------[ cut here ]------------ [ 27.818896][ T365] WARNING: CPU: 0 PID: 365 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 27.827138][ T365] Modules linked in: [ 27.831113][ T365] CPU: 0 UID: 0 PID: 365 Comm: syz-executor Not tainted syzkaller #0 90b12aa1a603b2eff3e7fbc29ad65555fd578c6a [ 27.842855][ T365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 27.852956][ T365] RIP: 0010:drop_nlink+0xce/0x110 [ 27.857990][ T365] Code: 04 00 00 be 08 00 00 00 e8 df 15 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 c4 b1 03 cc e8 d2 dc 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 27.877858][ T365] RSP: 0018:ffffc90001a7fc60 EFLAGS: 00010293 [ 27.884018][ T365] RAX: ffffffff81f1ce0e RBX: ffff888115515e30 RCX: ffff888114a6a600 [ 27.892113][ T365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.900381][ T365] RBP: ffffc90001a7fc88 R08: 0000000000000003 R09: 0000000000000004 [ 27.908441][ T365] R10: dffffc0000000000 R11: fffff5200034ff7c R12: dffffc0000000000 [ 27.916603][ T365] R13: 1ffff11022aa2bcf R14: ffff888115515e78 R15: 0000000000000000 [ 27.924645][ T365] FS: 0000555563d7c500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 27.933721][ T365] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.940416][ T365] CR2: 0000555563d9f948 CR3: 0000000114862000 CR4: 00000000003526b0 [ 27.948432][ T365] Call Trace: [ 27.951723][ T365] [ 27.954703][ T365] shmem_rmdir+0x5f/0x90 [ 27.958992][ T365] vfs_rmdir+0x3e3/0x560 [ 27.963295][ T365] incfs_kill_sb+0x109/0x230 [ 27.967909][ T365] deactivate_locked_super+0xd8/0x2a0 [ 27.973340][ T365] deactivate_super+0xb8/0xe0 [ 27.978036][ T365] cleanup_mnt+0x406/0x4a0 [ 27.982502][ T365] __cleanup_mnt+0x1d/0x40 [ 27.986965][ T365] task_work_run+0x1e8/0x260 [ 27.991551][ T365] ? __cfi_task_work_run+0x10/0x10 [ 27.996705][ T365] ? __x64_sys_umount+0x12e/0x180 [ 28.001763][ T365] ? __cfi___x64_sys_umount+0x10/0x10 [ 28.007195][ T365] ? __kasan_check_read+0x15/0x20 [ 28.012806][ T365] resume_user_mode_work+0x35/0x50 [ 28.017934][ T365] syscall_exit_to_user_mode+0x63/0xb0 [ 28.023524][ T365] do_syscall_64+0x63/0xf0 [ 28.027963][ T365] ? clear_bhb_loop+0x50/0xa0 [ 28.032763][ T365] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.038778][ T365] RIP: 0033:0x7f94c639da57 [ 28.043330][ T365] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 28.063344][ T365] RSP: 002b:00007ffe4c7b2528 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 28.072089][ T365] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f94c639da57 [ 28.080871][ T365] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4c7b25e0 [ 28.088912][ T365] RBP: 00007ffe4c7b25e0 R08: 00007ffe4c7b35e0 R09: 00000000ffffffff [ 28.096941][ T365] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4c7b3670 [ 28.104953][ T365] R13: 00007f94c6432048 R14: 0000000000006c95 R15: 00007ffe4c7b36b0 [ 28.112987][ T365] [ 28.116016][ T365] ---[ end trace 0000000000000000 ]--- [ 28.121602][ T365] ================================================================== [ 28.129943][ T365] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 28.136179][ T365] Write of size 4 at addr 0000000000000168 by task syz-executor/365 [ 28.144338][ T365] [ 28.146662][ T365] CPU: 1 UID: 0 PID: 365 Comm: syz-executor Tainted: G W syzkaller #0 90b12aa1a603b2eff3e7fbc29ad65555fd578c6a [ 28.146684][ T365] Tainted: [W]=WARN [ 28.146689][ T365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 28.146696][ T365] Call Trace: [ 28.146701][ T365] [ 28.146706][ T365] __dump_stack+0x21/0x30 [ 28.146726][ T365] dump_stack_lvl+0x140/0x1c0 [ 28.146741][ T365] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.146757][ T365] print_report+0x3d/0x70 [ 28.146772][ T365] kasan_report+0x162/0x1a0 [ 28.146786][ T365] ? ihold+0x24/0x70 [ 28.146798][ T365] ? _raw_spin_unlock+0x45/0x60 [ 28.146815][ T365] ? ihold+0x24/0x70 [ 28.146825][ T365] kasan_check_range+0x25a/0x2b0 [ 28.146839][ T365] __kasan_check_write+0x18/0x20 [ 28.146854][ T365] ihold+0x24/0x70 [ 28.146865][ T365] vfs_rmdir+0x26a/0x560 [ 28.146879][ T365] incfs_kill_sb+0x109/0x230 [ 28.146897][ T365] deactivate_locked_super+0xd8/0x2a0 [ 28.146911][ T365] deactivate_super+0xb8/0xe0 [ 28.146924][ T365] cleanup_mnt+0x406/0x4a0 [ 28.146936][ T365] __cleanup_mnt+0x1d/0x40 [ 28.146947][ T365] task_work_run+0x1e8/0x260 [ 28.146962][ T365] ? __cfi_task_work_run+0x10/0x10 [ 28.146975][ T365] ? __x64_sys_umount+0x12e/0x180 [ 28.146990][ T365] ? __cfi___x64_sys_umount+0x10/0x10 [ 28.147005][ T365] ? __kasan_check_read+0x15/0x20 [ 28.147021][ T365] resume_user_mode_work+0x35/0x50 [ 28.147038][ T365] syscall_exit_to_user_mode+0x63/0xb0 [ 28.147071][ T365] do_syscall_64+0x63/0xf0 [ 28.147088][ T365] ? clear_bhb_loop+0x50/0xa0 [ 28.147100][ T365] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.147118][ T365] RIP: 0033:0x7f94c639da57 [ 28.147130][ T365] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 28.147141][ T365] RSP: 002b:00007ffe4c7b2528 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 28.147156][ T365] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f94c639da57 [ 28.147165][ T365] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4c7b25e0 [ 28.147173][ T365] RBP: 00007ffe4c7b25e0 R08: 00007ffe4c7b35e0 R09: 00000000ffffffff [ 28.147182][ T365] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4c7b3670 [ 28.147190][ T365] R13: 00007f94c6432048 R14: 0000000000006c95 R15: 00007ffe4c7b36b0 [ 28.147201][ T365] [ 28.147205][ T365] ================================================================== [ 28.394261][ T365] Disabling lock debugging due to kernel taint [ 28.400448][ T365] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 28.408242][ T365] #PF: supervisor write access in kernel mode [ 28.414297][ T365] #PF: error_code(0x0002) - not-present page [ 28.420260][ T365] PGD 800000010c764067 P4D 800000010c764067 PUD 0 [ 28.426760][ T365] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 28.432843][ T365] CPU: 1 UID: 0 PID: 365 Comm: syz-executor Tainted: G B W syzkaller #0 90b12aa1a603b2eff3e7fbc29ad65555fd578c6a [ 28.445960][ T365] Tainted: [B]=BAD_PAGE, [W]=WARN [ 28.450979][ T365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 28.461128][ T365] RIP: 0010:ihold+0x2a/0x70 [ 28.465815][ T365] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd d3 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 28.485819][ T365] RSP: 0018:ffffc90001a7fca0 EFLAGS: 00010246 [ 28.491925][ T365] RAX: ffff888114a6a600 RBX: 0000000000000000 RCX: ffff888114a6a600 [ 28.499990][ T365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.508045][ T365] RBP: ffffc90001a7fcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 28.516010][ T365] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff888115515e3c [ 28.524078][ T365] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 28.532472][ T365] FS: 0000555563d7c500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 28.541387][ T365] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.547968][ T365] CR2: 0000000000000168 CR3: 0000000114862000 CR4: 00000000003526b0 [ 28.555953][ T365] Call Trace: [ 28.559228][ T365] [ 28.562155][ T365] vfs_rmdir+0x26a/0x560 [ 28.566393][ T365] incfs_kill_sb+0x109/0x230 [ 28.570980][ T365] deactivate_locked_super+0xd8/0x2a0 [ 28.576521][ T365] deactivate_super+0xb8/0xe0 [ 28.581188][ T365] cleanup_mnt+0x406/0x4a0 [ 28.585595][ T365] __cleanup_mnt+0x1d/0x40 [ 28.590086][ T365] task_work_run+0x1e8/0x260 [ 28.594760][ T365] ? __cfi_task_work_run+0x10/0x10 [ 28.599869][ T365] ? __x64_sys_umount+0x12e/0x180 [ 28.605332][ T365] ? __cfi___x64_sys_umount+0x10/0x10 [ 28.610870][ T365] ? __kasan_check_read+0x15/0x20 [ 28.616240][ T365] resume_user_mode_work+0x35/0x50 [ 28.621389][ T365] syscall_exit_to_user_mode+0x63/0xb0 [ 28.626957][ T365] do_syscall_64+0x63/0xf0 [ 28.631388][ T365] ? clear_bhb_loop+0x50/0xa0 [ 28.636075][ T365] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.641983][ T365] RIP: 0033:0x7f94c639da57 [ 28.646403][ T365] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 28.666464][ T365] RSP: 002b:00007ffe4c7b2528 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 28.674979][ T365] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f94c639da57 [ 28.683065][ T365] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4c7b25e0 [ 28.691073][ T365] RBP: 00007ffe4c7b25e0 R08: 00007ffe4c7b35e0 R09: 00000000ffffffff [ 28.699098][ T365] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4c7b3670 [ 28.707263][ T365] R13: 00007f94c6432048 R14: 0000000000006c95 R15: 00007ffe4c7b36b0 [ 28.715511][ T365] [ 28.718616][ T365] Modules linked in: [ 28.722510][ T365] CR2: 0000000000000168 [ 28.726653][ T365] ---[ end trace 0000000000000000 ]--- [ 28.732135][ T365] RIP: 0010:ihold+0x2a/0x70 [ 28.736657][ T365] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd d3 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 28.756444][ T365] RSP: 0018:ffffc90001a7fca0 EFLAGS: 00010246 [ 28.762501][ T365] RAX: ffff888114a6a600 RBX: 0000000000000000 RCX: ffff888114a6a600 [ 28.770549][ T365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.778531][ T365] RBP: ffffc90001a7fcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 28.786506][ T365] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff888115515e3c [ 28.794470][ T365] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 28.802729][ T365] FS: 0000555563d7c500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 28.811661][ T365] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.818239][ T365] CR2: 0000000000000168 CR3: 0000000114862000 CR4: 00000000003526b0 [ 28.826417][ T365] Kernel panic - not syncing: Fatal exception [ 28.832735][ T365] Kernel Offset: disabled [ 28.837052][ T365] Rebooting in 86400 seconds..