Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. 2026/03/31 04:53:15 parsed 1 programs [ 23.784842][ T36] audit: type=1400 audit(1774932795.350:64): avc: denied { node_bind } for pid=290 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.946806][ T36] audit: type=1400 audit(1774932796.510:65): avc: denied { mounton } for pid=297 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.947778][ T297] cgroup: Unknown subsys name 'net' [ 24.969635][ T36] audit: type=1400 audit(1774932796.510:66): avc: denied { mount } for pid=297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.997085][ T36] audit: type=1400 audit(1774932796.540:67): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.997229][ T297] cgroup: Unknown subsys name 'devices' [ 25.181252][ T297] cgroup: Unknown subsys name 'hugetlb' [ 25.186880][ T297] cgroup: Unknown subsys name 'rlimit' [ 25.385915][ T36] audit: type=1400 audit(1774932796.950:68): avc: denied { setattr } for pid=297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.409373][ T36] audit: type=1400 audit(1774932796.950:69): avc: denied { create } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.415514][ T300] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.430289][ T36] audit: type=1400 audit(1774932796.950:70): avc: denied { write } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.459265][ T36] audit: type=1400 audit(1774932796.950:71): avc: denied { read } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.479658][ T36] audit: type=1400 audit(1774932796.950:72): avc: denied { sys_module } for pid=297 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 25.483058][ T297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.500657][ T36] audit: type=1400 audit(1774932796.950:73): avc: denied { mounton } for pid=297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.500021][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.507117][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.514613][ T303] bridge_slave_0: entered allmulticast mode [ 26.520895][ T303] bridge_slave_0: entered promiscuous mode [ 26.527295][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.534472][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.541568][ T303] bridge_slave_1: entered allmulticast mode [ 26.547752][ T303] bridge_slave_1: entered promiscuous mode [ 26.585593][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.592710][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.600005][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.607035][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.626688][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.634052][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.644954][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.652226][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.661368][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.668425][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.692738][ T303] veth0_vlan: entered promiscuous mode [ 26.703940][ T303] veth1_macvtap: entered promiscuous mode [ 26.729857][ T303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.770286][ T46] bridge_slave_1: left allmulticast mode [ 26.775994][ T46] bridge_slave_1: left promiscuous mode [ 26.788378][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.796180][ T46] bridge_slave_0: left allmulticast mode [ 26.801979][ T46] bridge_slave_0: left promiscuous mode [ 26.807667][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.952855][ T46] veth1_macvtap: left promiscuous mode [ 26.958482][ T46] veth0_vlan: left promiscuous mode 2026/03/31 04:53:19 executed programs: 0 [ 27.910862][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.918007][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.925115][ T367] bridge_slave_0: entered allmulticast mode [ 27.931623][ T367] bridge_slave_0: entered promiscuous mode [ 27.938281][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.945515][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.952789][ T367] bridge_slave_1: entered allmulticast mode [ 27.959117][ T367] bridge_slave_1: entered promiscuous mode [ 28.001405][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.008471][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.015779][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.022833][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.046415][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.054123][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.063453][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.070815][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.081450][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.088567][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.112298][ T367] veth0_vlan: entered promiscuous mode [ 28.123051][ T367] veth1_macvtap: entered promiscuous mode [ 28.154572][ T367] ------------[ cut here ]------------ [ 28.160319][ T367] WARNING: CPU: 0 PID: 367 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 28.168358][ T367] Modules linked in: [ 28.172326][ T367] CPU: 0 UID: 0 PID: 367 Comm: syz-executor Not tainted syzkaller #0 0b287b3bbd43faecb53322318e35c6fd392f23aa [ 28.184244][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 28.194392][ T367] RIP: 0010:drop_nlink+0xce/0x110 [ 28.199480][ T367] Code: 04 00 00 be 08 00 00 00 e8 df 15 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 e5 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 28.219428][ T367] RSP: 0018:ffffc90004407c60 EFLAGS: 00010293 [ 28.225553][ T367] RAX: ffffffff81f1c4be RBX: ffff888113827bf0 RCX: ffff888113f19300 [ 28.233700][ T367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.241831][ T367] RBP: ffffc90004407c88 R08: 0000000000000003 R09: 0000000000000004 [ 28.249865][ T367] R10: dffffc0000000000 R11: fffff52000880f7c R12: dffffc0000000000 [ 28.257866][ T367] R13: 1ffff11022704f87 R14: ffff888113827c38 R15: 0000000000000000 [ 28.266137][ T367] FS: 0000555583f08500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 28.275280][ T367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.282037][ T367] CR2: 0000555583f2b948 CR3: 0000000113ed4000 CR4: 00000000003526b0 [ 28.290100][ T367] Call Trace: [ 28.293409][ T367] [ 28.296419][ T367] shmem_rmdir+0x5f/0x90 [ 28.300818][ T367] vfs_rmdir+0x3e3/0x560 [ 28.305201][ T367] incfs_kill_sb+0x109/0x230 [ 28.309832][ T367] deactivate_locked_super+0xd5/0x2a0 [ 28.315243][ T367] deactivate_super+0xb8/0xe0 [ 28.320039][ T367] cleanup_mnt+0x406/0x4a0 [ 28.324523][ T367] __cleanup_mnt+0x1d/0x40 [ 28.328987][ T367] task_work_run+0x1e5/0x260 [ 28.333606][ T367] ? __cfi_task_work_run+0x10/0x10 [ 28.338898][ T367] ? __x64_sys_umount+0x12e/0x180 [ 28.343962][ T367] ? __cfi___x64_sys_umount+0x10/0x10 [ 28.349436][ T367] ? __kasan_check_read+0x15/0x20 [ 28.354513][ T367] resume_user_mode_work+0x35/0x50 [ 28.359681][ T367] syscall_exit_to_user_mode+0x63/0xb0 [ 28.365161][ T367] do_syscall_64+0x63/0xf0 [ 28.369610][ T367] ? clear_bhb_loop+0x50/0xa0 [ 28.374495][ T367] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.380575][ T367] RIP: 0033:0x7f15f659da57 [ 28.385009][ T367] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 28.404787][ T367] RSP: 002b:00007ffdb1e8faa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 28.413351][ T367] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f15f659da57 [ 28.421379][ T367] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb1e8fb60 [ 28.429590][ T367] RBP: 00007ffdb1e8fb60 R08: 00007ffdb1e90b60 R09: 00000000ffffffff [ 28.437663][ T367] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdb1e90bf0 [ 28.445951][ T367] R13: 00007f15f6632048 R14: 0000000000006de2 R15: 00007ffdb1e90c30 [ 28.454171][ T367] [ 28.457285][ T367] ---[ end trace 0000000000000000 ]--- [ 28.463080][ T367] ================================================================== [ 28.471181][ T367] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 28.477685][ T367] Write of size 4 at addr 0000000000000168 by task syz-executor/367 [ 28.485894][ T367] [ 28.488244][ T367] CPU: 1 UID: 0 PID: 367 Comm: syz-executor Tainted: G W syzkaller #0 0b287b3bbd43faecb53322318e35c6fd392f23aa [ 28.488283][ T367] Tainted: [W]=WARN [ 28.488288][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 28.488296][ T367] Call Trace: [ 28.488302][ T367] [ 28.488309][ T367] __dump_stack+0x21/0x30 [ 28.488332][ T367] dump_stack_lvl+0x140/0x1c0 [ 28.488348][ T367] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.488365][ T367] print_report+0x3d/0x70 [ 28.488379][ T367] kasan_report+0x162/0x1a0 [ 28.488392][ T367] ? ihold+0x24/0x70 [ 28.488404][ T367] ? _raw_spin_unlock+0x45/0x60 [ 28.488421][ T367] ? ihold+0x24/0x70 [ 28.488431][ T367] kasan_check_range+0x25a/0x2b0 [ 28.488444][ T367] __kasan_check_write+0x18/0x20 [ 28.488460][ T367] ihold+0x24/0x70 [ 28.488471][ T367] vfs_rmdir+0x26a/0x560 [ 28.488485][ T367] incfs_kill_sb+0x109/0x230 [ 28.488503][ T367] deactivate_locked_super+0xd5/0x2a0 [ 28.488521][ T367] deactivate_super+0xb8/0xe0 [ 28.488535][ T367] cleanup_mnt+0x406/0x4a0 [ 28.488547][ T367] __cleanup_mnt+0x1d/0x40 [ 28.488558][ T367] task_work_run+0x1e5/0x260 [ 28.488573][ T367] ? __cfi_task_work_run+0x10/0x10 [ 28.488587][ T367] ? __x64_sys_umount+0x12e/0x180 [ 28.488602][ T367] ? __cfi___x64_sys_umount+0x10/0x10 [ 28.488617][ T367] ? __kasan_check_read+0x15/0x20 [ 28.488633][ T367] resume_user_mode_work+0x35/0x50 [ 28.488649][ T367] syscall_exit_to_user_mode+0x63/0xb0 [ 28.488664][ T367] do_syscall_64+0x63/0xf0 [ 28.488681][ T367] ? clear_bhb_loop+0x50/0xa0 [ 28.488699][ T367] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.488715][ T367] RIP: 0033:0x7f15f659da57 [ 28.488728][ T367] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 28.488739][ T367] RSP: 002b:00007ffdb1e8faa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 28.488756][ T367] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f15f659da57 [ 28.488765][ T367] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb1e8fb60 [ 28.488773][ T367] RBP: 00007ffdb1e8fb60 R08: 00007ffdb1e90b60 R09: 00000000ffffffff [ 28.488782][ T367] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdb1e90bf0 [ 28.488791][ T367] R13: 00007f15f6632048 R14: 0000000000006de2 R15: 00007ffdb1e90c30 [ 28.488801][ T367] [ 28.488806][ T367] ================================================================== [ 28.736545][ T367] Disabling lock debugging due to kernel taint [ 28.742859][ T367] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 28.750675][ T367] #PF: supervisor write access in kernel mode [ 28.756733][ T367] #PF: error_code(0x0002) - not-present page [ 28.762701][ T367] PGD 800000010b325067 P4D 800000010b325067 PUD 0 [ 28.769203][ T367] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 28.775321][ T367] CPU: 1 UID: 0 PID: 367 Comm: syz-executor Tainted: G B W syzkaller #0 0b287b3bbd43faecb53322318e35c6fd392f23aa [ 28.788462][ T367] Tainted: [B]=BAD_PAGE, [W]=WARN [ 28.793495][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 28.803798][ T367] RIP: 0010:ihold+0x2a/0x70 [ 28.808296][ T367] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd dc 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 28.828184][ T367] RSP: 0018:ffffc90004407ca0 EFLAGS: 00010246 [ 28.834367][ T367] RAX: ffff888113f19300 RBX: 0000000000000000 RCX: ffff888113f19300 [ 28.842590][ T367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.850638][ T367] RBP: ffffc90004407cb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 28.858601][ T367] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff888113827bfc [ 28.866573][ T367] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 28.874624][ T367] FS: 0000555583f08500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 28.883649][ T367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.890223][ T367] CR2: 0000000000000168 CR3: 0000000113ed4000 CR4: 00000000003526b0 [ 28.898206][ T367] Call Trace: [ 28.901561][ T367] [ 28.904492][ T367] vfs_rmdir+0x26a/0x560 [ 28.908726][ T367] incfs_kill_sb+0x109/0x230 [ 28.913315][ T367] deactivate_locked_super+0xd5/0x2a0 [ 28.918761][ T367] deactivate_super+0xb8/0xe0 [ 28.923422][ T367] cleanup_mnt+0x406/0x4a0 [ 28.927828][ T367] __cleanup_mnt+0x1d/0x40 [ 28.932233][ T367] task_work_run+0x1e5/0x260 [ 28.936821][ T367] ? __cfi_task_work_run+0x10/0x10 [ 28.941921][ T367] ? __x64_sys_umount+0x12e/0x180 [ 28.946940][ T367] ? __cfi___x64_sys_umount+0x10/0x10 [ 28.952400][ T367] ? __kasan_check_read+0x15/0x20 [ 28.957417][ T367] resume_user_mode_work+0x35/0x50 [ 28.962608][ T367] syscall_exit_to_user_mode+0x63/0xb0 [ 28.968077][ T367] do_syscall_64+0x63/0xf0 [ 28.972615][ T367] ? clear_bhb_loop+0x50/0xa0 [ 28.977315][ T367] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.983198][ T367] RIP: 0033:0x7f15f659da57 [ 28.987600][ T367] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 29.007197][ T367] RSP: 002b:00007ffdb1e8faa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 29.015601][ T367] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f15f659da57 [ 29.023565][ T367] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb1e8fb60 [ 29.031612][ T367] RBP: 00007ffdb1e8fb60 R08: 00007ffdb1e90b60 R09: 00000000ffffffff [ 29.039572][ T367] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdb1e90bf0 [ 29.047531][ T367] R13: 00007f15f6632048 R14: 0000000000006de2 R15: 00007ffdb1e90c30 [ 29.055496][ T367] [ 29.058594][ T367] Modules linked in: [ 29.062475][ T367] CR2: 0000000000000168 [ 29.066614][ T367] ---[ end trace 0000000000000000 ]--- [ 29.072101][ T367] RIP: 0010:ihold+0x2a/0x70 [ 29.076593][ T367] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd dc 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 29.096311][ T367] RSP: 0018:ffffc90004407ca0 EFLAGS: 00010246 [ 29.102380][ T367] RAX: ffff888113f19300 RBX: 0000000000000000 RCX: ffff888113f19300 [ 29.110435][ T367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.118494][ T367] RBP: ffffc90004407cb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 29.126458][ T367] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff888113827bfc [ 29.134420][ T367] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 29.142387][ T367] FS: 0000555583f08500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 29.151308][ T367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.157880][ T367] CR2: 0000000000000168 CR3: 0000000113ed4000 CR4: 00000000003526b0 [ 29.166037][ T367] Kernel panic - not syncing: Fatal exception [ 29.172395][ T367] Kernel Offset: disabled [ 29.176719][ T367] Rebooting in 86400 seconds..