Warning: Permanently added '10.128.0.49' (ED25519) to the list of known hosts. 2026/03/04 19:53:23 parsed 1 programs [ 22.666885][ T24] audit: type=1400 audit(1772654003.660:64): avc: denied { node_bind } for pid=275 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 22.692772][ T24] audit: type=1400 audit(1772654003.660:65): avc: denied { create } for pid=275 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 22.715610][ T24] audit: type=1400 audit(1772654003.660:66): avc: denied { module_request } for pid=275 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 23.304573][ T24] audit: type=1400 audit(1772654004.300:67): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.305679][ T281] cgroup: Unknown subsys name 'net' [ 23.329422][ T24] audit: type=1400 audit(1772654004.300:68): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.357704][ T24] audit: type=1400 audit(1772654004.330:69): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.357874][ T281] cgroup: Unknown subsys name 'devices' [ 23.502514][ T281] cgroup: Unknown subsys name 'hugetlb' [ 23.508228][ T281] cgroup: Unknown subsys name 'rlimit' [ 23.771166][ T24] audit: type=1400 audit(1772654004.770:70): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.796428][ T24] audit: type=1400 audit(1772654004.770:71): avc: denied { create } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.802402][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.818805][ T24] audit: type=1400 audit(1772654004.770:72): avc: denied { write } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.849229][ T24] audit: type=1400 audit(1772654004.770:73): avc: denied { read } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.878730][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.356957][ T296] request_module fs-gadgetfs succeeded, but still no fs? [ 24.373319][ T293] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 24.784375][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.801773][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.812317][ T329] device bridge_slave_0 entered promiscuous mode [ 24.831478][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.839337][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.848008][ T329] device bridge_slave_1 entered promiscuous mode [ 24.937276][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.945682][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.954340][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.962354][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.988541][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.012091][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.025018][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.047807][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.056767][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.065014][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.074041][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.082906][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.090873][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.113926][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.123534][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.141937][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.155545][ T329] device veth0_vlan entered promiscuous mode [ 25.165270][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.175429][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.183770][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 2026/03/04 19:53:26 executed programs: 0 [ 25.194625][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.203927][ T329] device veth1_macvtap entered promiscuous mode [ 25.213566][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.225305][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.379367][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.387124][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.396221][ T355] device bridge_slave_0 entered promiscuous mode [ 25.423054][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.431036][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.438841][ T355] device bridge_slave_1 entered promiscuous mode [ 25.504284][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.512958][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.521409][ T358] device bridge_slave_0 entered promiscuous mode [ 25.530742][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.540238][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.551844][ T358] device bridge_slave_1 entered promiscuous mode [ 25.620536][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.633207][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.643545][ T364] device bridge_slave_0 entered promiscuous mode [ 25.653104][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.662158][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.673201][ T360] device bridge_slave_0 entered promiscuous mode [ 25.683814][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.691993][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.703461][ T360] device bridge_slave_1 entered promiscuous mode [ 25.718853][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.730536][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.739504][ T364] device bridge_slave_1 entered promiscuous mode [ 25.782593][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.791570][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.803678][ T365] device bridge_slave_0 entered promiscuous mode [ 25.812822][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.820666][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.829771][ T365] device bridge_slave_1 entered promiscuous mode [ 26.030235][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.041191][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.051482][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.061415][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.083162][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.093088][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.103844][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.112702][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.121239][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.132773][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.143949][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.154859][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.167037][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.199444][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.209646][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.219263][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.227266][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.236576][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.250491][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.260620][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.271664][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.281696][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.291235][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.300536][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.311433][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.343819][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.353277][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.362083][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.370611][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.378807][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.389169][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.398534][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.406459][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.414738][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.424430][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.433813][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.441960][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.451312][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.460442][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.468600][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.476650][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.485464][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.494181][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.503399][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.536774][ T358] device veth0_vlan entered promiscuous mode [ 26.549113][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.559490][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.569941][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.579056][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.588366][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.598917][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.608159][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.616106][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.625303][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.634762][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.645232][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.655173][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.663822][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.683640][ T355] device veth0_vlan entered promiscuous mode [ 26.691311][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.700246][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.709916][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.720369][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.729335][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.738121][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.747129][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.755595][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.764565][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.773380][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.788457][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.797105][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.813581][ T358] device veth1_macvtap entered promiscuous mode [ 26.823250][ T355] device veth1_macvtap entered promiscuous mode [ 26.842759][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.852768][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.862337][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.873148][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.883183][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.893057][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.902650][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.912702][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.922530][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.931498][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.941182][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.950264][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.958560][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.967575][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.977162][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.986404][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.995789][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.007347][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.017924][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.039074][ T365] device veth0_vlan entered promiscuous mode [ 27.050722][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.060469][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.070342][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.080419][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.091145][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.100432][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.109833][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.119084][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.128201][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.138650][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.147890][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.158134][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.169582][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.178509][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.190402][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.198657][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.235781][ T365] device veth1_macvtap entered promiscuous mode [ 27.239228][ T358] ------------[ cut here ]------------ [ 27.248935][ T355] ------------[ cut here ]------------ [ 27.255232][ T355] WARNING: CPU: 1 PID: 355 at fs/inode.c:304 drop_nlink+0xc5/0x110 [ 27.265059][ T360] device veth0_vlan entered promiscuous mode [ 27.281277][ T358] WARNING: CPU: 1 PID: 358 at fs/inode.c:304 drop_nlink+0xc5/0x110 [ 27.282375][ T355] Modules linked in: [ 27.289457][ T358] Modules linked in: [ 27.289473][ T355] [ 27.294371][ T358] [ 27.304045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.311063][ T355] CPU: 0 PID: 355 Comm: syz-executor Not tainted syzkaller #0 [ 27.313881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.329872][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 27.329901][ T355] RIP: 0010:drop_nlink+0xc5/0x110 [ 27.329920][ T355] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 13 f1 f1 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 eb 6d b7 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 27.341706][ T358] CPU: 1 PID: 358 Comm: syz-executor Not tainted syzkaller #0 [ 27.346444][ T355] RSP: 0018:ffffc90000c07cd0 EFLAGS: 00010293 [ 27.368195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.376472][ T355] [ 27.383487][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 27.393188][ T355] RAX: ffffffff81ad4865 RBX: ffff888112fa9620 RCX: ffff8881287493c0 [ 27.395265][ T358] RIP: 0010:drop_nlink+0xc5/0x110 [ 27.407253][ T355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.416787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.421730][ T355] RBP: ffffc90000c07cf8 R08: 0000000000000003 R09: 0000000000000004 [ 27.430974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.439362][ T358] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 13 f1 f1 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 eb 6d b7 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 27.449282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.458387][ T355] R10: dffffc0000000000 R11: fffff52000180f88 R12: dffffc0000000000 [ 27.458394][ T355] R13: 1ffff110225f52cd R14: ffff888112fa9668 R15: 0000000000000000 [ 27.458403][ T355] FS: 0000555588a64500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 27.458410][ T355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.458417][ T355] CR2: 0000088d84471000 CR3: 0000000128380000 CR4: 00000000003506b0 [ 27.458425][ T355] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.458438][ T355] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.507207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.517530][ T358] RSP: 0018:ffffc90008197cd0 EFLAGS: 00010293 [ 27.529488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.537569][ T358] [ 27.547668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.556195][ T358] RAX: ffffffff81ad4865 RBX: ffff8881123d24a0 RCX: ffff88810c37a780 [ 27.566453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.575198][ T358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.583361][ T355] Call Trace: [ 27.583381][ T355] shmem_rmdir+0x5b/0x90 [ 27.583391][ T355] vfs_rmdir+0x1b3/0x3e0 [ 27.583400][ T355] incfs_kill_sb+0xfe/0x210 [ 27.583412][ T355] deactivate_locked_super+0xa0/0x100 [ 27.583420][ T355] deactivate_super+0xaf/0xe0 [ 27.583429][ T355] cleanup_mnt+0x45b/0x510 [ 27.583446][ T355] __cleanup_mnt+0x19/0x20 [ 27.595887][ T358] RBP: ffffc90008197cf8 R08: 0000000000000003 R09: 0000000000000004 [ 27.599498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.609328][ T358] R10: dffffc0000000000 R11: fffff52001032f88 R12: dffffc0000000000 [ 27.618190][ T355] task_work_run+0x127/0x190 [ 27.627207][ T358] R13: 1ffff1102247a49d R14: ffff8881123d24e8 R15: 0000000000000000 [ 27.637532][ T355] exit_to_user_mode_loop+0xcb/0xe0 [ 27.641963][ T358] FS: 0000555562c98500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 27.646885][ T355] exit_to_user_mode_prepare+0x76/0xa0 [ 27.651732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.656758][ T355] syscall_exit_to_user_mode+0x1d/0x40 [ 27.662937][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.667831][ T355] do_syscall_64+0x3d/0x40 [ 27.672934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.677100][ T355] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.686342][ T358] CR2: 0000088d84471000 CR3: 000000012f57f000 CR4: 00000000003506b0 [ 27.694312][ T355] RIP: 0033:0x7f4d038939d7 [ 27.704625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.709302][ T355] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 27.718580][ T358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.724087][ T355] RSP: 002b:00007ffee8e72708 EFLAGS: 00000246 [ 27.733987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.739904][ T355] ORIG_RAX: 00000000000000a6 [ 27.750899][ T358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.756693][ T355] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4d038939d7 [ 27.766397][ T364] device veth0_vlan entered promiscuous mode [ 27.769259][ T355] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee8e727c0 [ 27.778488][ T358] Call Trace: [ 27.785023][ T355] RBP: 00007ffee8e727c0 R08: 00007ffee8e737c0 R09: 00000000ffffffff [ 27.793890][ T358] shmem_rmdir+0x5b/0x90 [ 27.799888][ T355] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee8e73850 [ 27.815519][ T360] device veth1_macvtap entered promiscuous mode [ 27.842339][ T355] R13: 00007f4d03927f90 R14: 0000000000006a41 R15: 00007ffee8e73890 [ 27.849315][ T358] vfs_rmdir+0x1b3/0x3e0 [ 27.856785][ T355] ---[ end trace a75893579880053a ]--- [ 27.862235][ T358] incfs_kill_sb+0xfe/0x210 [ 27.872894][ T355] ================================================================== [ 27.872914][ T355] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 27.872939][ T355] Write of size 4 at addr 0000000000000170 by task syz-executor/355 [ 27.884399][ T358] deactivate_locked_super+0xa0/0x100 [ 27.889501][ T355] [ 27.899651][ T358] deactivate_super+0xaf/0xe0 [ 27.903087][ T355] CPU: 1 PID: 355 Comm: syz-executor Tainted: G W syzkaller #0 [ 27.903092][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 27.903096][ T355] Call Trace: [ 27.903110][ T355] __dump_stack+0x21/0x24 [ 27.903117][ T355] dump_stack_lvl+0x1a7/0x208 [ 27.903125][ T355] ? thaw_kernel_threads+0x220/0x220 [ 27.903139][ T355] ? show_regs_print_info+0x18/0x18 [ 27.911892][ T358] cleanup_mnt+0x45b/0x510 [ 27.916201][ T355] ? __kasan_check_write+0x14/0x20 [ 27.925390][ T358] __cleanup_mnt+0x19/0x20 [ 27.931851][ T355] ? _raw_spin_lock+0x94/0xf0 [ 27.931860][ T355] ? _raw_spin_trylock_bh+0x150/0x150 [ 27.931869][ T355] ? ihold+0x20/0x60 [ 27.931877][ T355] kasan_report+0xd8/0x130 [ 27.931885][ T355] ? ihold+0x20/0x60 [ 27.931893][ T355] kasan_check_range+0x249/0x2a0 [ 27.931901][ T355] __kasan_check_write+0x14/0x20 [ 27.931918][ T355] ihold+0x20/0x60 [ 27.940722][ T358] task_work_run+0x127/0x190 [ 27.945086][ T355] vfs_rmdir+0x247/0x3e0 [ 27.945096][ T355] incfs_kill_sb+0xfe/0x210 [ 27.945105][ T355] deactivate_locked_super+0xa0/0x100 [ 27.945113][ T355] deactivate_super+0xaf/0xe0 [ 27.945122][ T355] cleanup_mnt+0x45b/0x510 [ 27.945131][ T355] __cleanup_mnt+0x19/0x20 [ 27.945139][ T355] task_work_run+0x127/0x190 [ 27.945150][ T355] exit_to_user_mode_loop+0xcb/0xe0 [ 27.945158][ T355] exit_to_user_mode_prepare+0x76/0xa0 [ 27.945171][ T355] syscall_exit_to_user_mode+0x1d/0x40 [ 27.945179][ T355] do_syscall_64+0x3d/0x40 [ 27.945191][ T355] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.945200][ T355] RIP: 0033:0x7f4d038939d7 [ 27.945217][ T355] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 27.945223][ T355] RSP: 002b:00007ffee8e72708 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 27.945238][ T355] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4d038939d7 [ 27.945245][ T355] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee8e727c0 [ 27.945251][ T355] RBP: 00007ffee8e727c0 R08: 00007ffee8e737c0 R09: 00000000ffffffff [ 27.945257][ T355] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee8e73850 [ 27.945264][ T355] R13: 00007f4d03927f90 R14: 0000000000006a41 R15: 00007ffee8e73890 [ 27.945271][ T355] ================================================================== [ 27.945275][ T355] Disabling lock debugging due to kernel taint [ 27.952812][ T355] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 27.958319][ T358] exit_to_user_mode_loop+0xcb/0xe0 [ 27.965357][ T355] #PF: supervisor write access in kernel mode [ 27.965363][ T355] #PF: error_code(0x0002) - not-present page [ 27.965367][ T355] PGD 112277067 P4D 112277067 PUD 0 [ 27.965385][ T355] Oops: 0002 [#1] PREEMPT SMP KASAN [ 27.965395][ T355] CPU: 1 PID: 355 Comm: syz-executor Tainted: G B W syzkaller #0 [ 27.965398][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 27.965412][ T355] RIP: 0010:ihold+0x26/0x60 [ 27.965420][ T355] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 01 66 b7 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 00 e9 f1 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 81 [ 27.965425][ T355] RSP: 0018:ffffc90000c07d10 EFLAGS: 00010246 [ 27.965434][ T355] RAX: ffff888128749300 RBX: 0000000000000000 RCX: 0000000000000286 [ 27.965439][ T355] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 27.965444][ T355] RBP: ffffc90000c07d20 R08: 0000000000000003 R09: 0000000000000004 [ 27.965451][ T355] R10: dffffc0000000000 R11: fffffbfff0dcf648 R12: 1ffff1102419095a [ 27.965456][ T355] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 27.965462][ T355] FS: 0000555588a64500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 27.965468][ T355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.965473][ T355] CR2: 0000000000000170 CR3: 0000000128380000 CR4: 00000000003506a0 [ 27.965481][ T355] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.965486][ T355] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.965489][ T355] Call Trace: [ 27.965500][ T355] vfs_rmdir+0x247/0x3e0 [ 27.965508][ T355] incfs_kill_sb+0xfe/0x210 [ 27.965519][ T355] deactivate_locked_super+0xa0/0x100 [ 27.965528][ T355] deactivate_super+0xaf/0xe0 [ 27.965538][ T355] cleanup_mnt+0x45b/0x510 [ 27.965548][ T355] __cleanup_mnt+0x19/0x20 [ 27.965557][ T355] task_work_run+0x127/0x190 [ 27.965566][ T355] exit_to_user_mode_loop+0xcb/0xe0 [ 27.965579][ T355] exit_to_user_mode_prepare+0x76/0xa0 [ 27.965590][ T355] syscall_exit_to_user_mode+0x1d/0x40 [ 27.965597][ T355] do_syscall_64+0x3d/0x40 [ 27.965608][ T355] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.965615][ T355] RIP: 0033:0x7f4d038939d7 [ 27.965630][ T355] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 27.973119][ T358] exit_to_user_mode_prepare+0x76/0xa0 [ 27.981820][ T355] RSP: 002b:00007ffee8e72708 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 27.981830][ T355] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4d038939d7 [ 27.981836][ T355] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee8e727c0 [ 27.981849][ T355] RBP: 00007ffee8e727c0 R08: 00007ffee8e737c0 R09: 00000000ffffffff [ 27.988414][ T358] syscall_exit_to_user_mode+0x1d/0x40 [ 27.991002][ T355] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee8e73850 [ 27.991008][ T355] R13: 00007f4d03927f90 R14: 0000000000006a41 R15: 00007ffee8e73890 [ 27.991013][ T355] Modules linked in: [ 27.991040][ T355] CR2: 0000000000000170 [ 27.991054][ T355] ---[ end trace a75893579880053b ]--- [ 27.991066][ T355] RIP: 0010:ihold+0x26/0x60 [ 27.991074][ T355] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 01 66 b7 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 00 e9 f1 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 81 [ 27.991079][ T355] RSP: 0018:ffffc90000c07d10 EFLAGS: 00010246 [ 27.991088][ T355] RAX: ffff888128749300 RBX: 0000000000000000 RCX: 0000000000000286 [ 27.991093][ T355] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 27.991098][ T355] RBP: ffffc90000c07d20 R08: 0000000000000003 R09: 0000000000000004 [ 27.991103][ T355] R10: dffffc0000000000 R11: fffffbfff0dcf648 R12: 1ffff1102419095a [ 27.991107][ T355] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 27.991115][ T355] FS: 0000555588a64500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 27.991121][ T355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.991125][ T355] CR2: 0000000000000170 CR3: 0000000128380000 CR4: 00000000003506a0 [ 27.991133][ T355] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.991138][ T355] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.991149][ T355] Kernel panic - not syncing: Fatal exception [ 27.996446][ T358] do_syscall_64+0x3d/0x40 [ 28.006455][ T355] Kernel Offset: disabled [ 28.860295][ T355] Rebooting in 86400 seconds..