Warning: Permanently added '10.128.1.70' (ED25519) to the list of known hosts. 2026/03/26 08:45:16 parsed 1 programs [ 23.945888][ T36] audit: type=1400 audit(1774514716.609:64): avc: denied { node_bind } for pid=289 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.921175][ T36] audit: type=1400 audit(1774514717.589:65): avc: denied { mounton } for pid=295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.922350][ T295] cgroup: Unknown subsys name 'net' [ 24.944625][ T36] audit: type=1400 audit(1774514717.589:66): avc: denied { mount } for pid=295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.973129][ T36] audit: type=1400 audit(1774514717.619:67): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.973303][ T295] cgroup: Unknown subsys name 'devices' [ 25.161751][ T295] cgroup: Unknown subsys name 'hugetlb' [ 25.167550][ T295] cgroup: Unknown subsys name 'rlimit' [ 25.328323][ T36] audit: type=1400 audit(1774514717.989:68): avc: denied { setattr } for pid=295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.352712][ T36] audit: type=1400 audit(1774514717.989:69): avc: denied { create } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.374305][ T36] audit: type=1400 audit(1774514717.989:70): avc: denied { write } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.383953][ T299] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.396119][ T36] audit: type=1400 audit(1774514717.989:71): avc: denied { read } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.426426][ T36] audit: type=1400 audit(1774514717.989:72): avc: denied { sys_module } for pid=295 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 25.447633][ T36] audit: type=1400 audit(1774514717.999:73): avc: denied { mounton } for pid=295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.528411][ T295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.392394][ T302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.760138][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.767279][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.775413][ T328] bridge_slave_0: entered allmulticast mode [ 26.782836][ T328] bridge_slave_0: entered promiscuous mode [ 26.789522][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.796717][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.804102][ T328] bridge_slave_1: entered allmulticast mode [ 26.810474][ T328] bridge_slave_1: entered promiscuous mode [ 26.860083][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.867297][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.874995][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.882230][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.903645][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.911312][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.923680][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.930848][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.939907][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.947128][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.974183][ T328] veth0_vlan: entered promiscuous mode [ 26.985851][ T328] veth1_macvtap: entered promiscuous mode [ 27.042236][ T13] bridge_slave_1: left allmulticast mode [ 27.048296][ T13] bridge_slave_1: left promiscuous mode [ 27.054150][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.062497][ T13] bridge_slave_0: left allmulticast mode [ 27.068411][ T13] bridge_slave_0: left promiscuous mode [ 27.074199][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.182550][ T13] veth1_macvtap: left promiscuous mode [ 27.188111][ T13] veth0_vlan: left promiscuous mode 2026/03/26 08:45:20 executed programs: 0 [ 27.781772][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.790630][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.798881][ T367] bridge_slave_0: entered allmulticast mode [ 27.806743][ T367] bridge_slave_0: entered promiscuous mode [ 27.813664][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.821279][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.829070][ T367] bridge_slave_1: entered allmulticast mode [ 27.836066][ T367] bridge_slave_1: entered promiscuous mode [ 27.877704][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.885695][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.893087][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.900424][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.919542][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.927192][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.937148][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.944685][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.953841][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.961269][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.984240][ T367] veth0_vlan: entered promiscuous mode [ 27.994358][ T367] veth1_macvtap: entered promiscuous mode [ 28.021966][ T367] ------------[ cut here ]------------ [ 28.027642][ T367] WARNING: CPU: 1 PID: 367 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 28.037057][ T367] Modules linked in: [ 28.041593][ T367] CPU: 1 UID: 0 PID: 367 Comm: syz-executor Not tainted syzkaller #0 3b62e6afc526b595ceee21a395d0bcf22df4c572 [ 28.053774][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 28.064135][ T367] RIP: 0010:drop_nlink+0xce/0x110 [ 28.069275][ T367] Code: 04 00 00 be 08 00 00 00 e8 df 15 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 e5 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 28.090863][ T367] RSP: 0018:ffffc9000123fc60 EFLAGS: 00010293 [ 28.097135][ T367] RAX: ffffffff81f1c4be RBX: ffff888120c930c8 RCX: ffff888113df5f00 [ 28.105768][ T367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.114832][ T367] RBP: ffffc9000123fc88 R08: 0000000000000003 R09: 0000000000000004 [ 28.123397][ T367] R10: dffffc0000000000 R11: fffff52000247f7c R12: dffffc0000000000 [ 28.131628][ T367] R13: 1ffff11024192622 R14: ffff888120c93110 R15: 0000000000000000 [ 28.140003][ T367] FS: 0000555590787500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 28.149213][ T367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.156684][ T367] CR2: 00005555907aa948 CR3: 00000001133a0000 CR4: 00000000003526b0 [ 28.165254][ T367] Call Trace: [ 28.168896][ T367] [ 28.172060][ T367] shmem_rmdir+0x5f/0x90 [ 28.176523][ T367] vfs_rmdir+0x3e3/0x560 [ 28.181133][ T367] incfs_kill_sb+0x109/0x230 [ 28.186243][ T367] deactivate_locked_super+0xd5/0x2a0 [ 28.191798][ T367] deactivate_super+0xb8/0xe0 [ 28.196734][ T367] cleanup_mnt+0x406/0x4a0 [ 28.201400][ T367] __cleanup_mnt+0x1d/0x40 [ 28.205900][ T367] task_work_run+0x1e5/0x260 [ 28.210629][ T367] ? __cfi_task_work_run+0x10/0x10 [ 28.215858][ T367] ? __x64_sys_umount+0x12e/0x180 [ 28.220989][ T367] ? __cfi___x64_sys_umount+0x10/0x10 [ 28.227383][ T367] resume_user_mode_work+0x35/0x50 [ 28.232585][ T367] syscall_exit_to_user_mode+0x63/0xb0 [ 28.238139][ T367] do_syscall_64+0x63/0xf0 [ 28.242789][ T367] ? clear_bhb_loop+0x50/0xa0 [ 28.247787][ T367] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.253987][ T367] RIP: 0033:0x7f0b5219d9d7 [ 28.258738][ T367] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 28.279540][ T367] RSP: 002b:00007ffe4bc47928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 28.288278][ T367] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0b5219d9d7 [ 28.296623][ T367] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4bc479e0 [ 28.305082][ T367] RBP: 00007ffe4bc479e0 R08: 00007ffe4bc489e0 R09: 00000000ffffffff [ 28.313212][ T367] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4bc48a70 [ 28.321728][ T367] R13: 00007f0b52232050 R14: 0000000000006d68 R15: 00007ffe4bc48ab0 [ 28.329931][ T367] [ 28.333231][ T367] ---[ end trace 0000000000000000 ]--- [ 28.339023][ T367] ================================================================== [ 28.347276][ T367] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 28.353504][ T367] Write of size 4 at addr 0000000000000168 by task syz-executor/367 [ 28.361901][ T367] [ 28.364245][ T367] CPU: 1 UID: 0 PID: 367 Comm: syz-executor Tainted: G W syzkaller #0 3b62e6afc526b595ceee21a395d0bcf22df4c572 [ 28.364268][ T367] Tainted: [W]=WARN [ 28.364272][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 28.364280][ T367] Call Trace: [ 28.364285][ T367] [ 28.364292][ T367] __dump_stack+0x21/0x30 [ 28.364312][ T367] dump_stack_lvl+0x140/0x1c0 [ 28.364324][ T367] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.364337][ T367] print_report+0x3d/0x70 [ 28.364350][ T367] kasan_report+0x162/0x1a0 [ 28.364362][ T367] ? ihold+0x24/0x70 [ 28.364371][ T367] ? _raw_spin_unlock+0x45/0x60 [ 28.364385][ T367] ? ihold+0x24/0x70 [ 28.364393][ T367] kasan_check_range+0x25a/0x2b0 [ 28.364403][ T367] __kasan_check_write+0x18/0x20 [ 28.364417][ T367] ihold+0x24/0x70 [ 28.364425][ T367] vfs_rmdir+0x26a/0x560 [ 28.364437][ T367] incfs_kill_sb+0x109/0x230 [ 28.364450][ T367] deactivate_locked_super+0xd5/0x2a0 [ 28.364462][ T367] deactivate_super+0xb8/0xe0 [ 28.364478][ T367] cleanup_mnt+0x406/0x4a0 [ 28.364489][ T367] __cleanup_mnt+0x1d/0x40 [ 28.364497][ T367] task_work_run+0x1e5/0x260 [ 28.364509][ T367] ? __cfi_task_work_run+0x10/0x10 [ 28.364519][ T367] ? __x64_sys_umount+0x12e/0x180 [ 28.364532][ T367] ? __cfi___x64_sys_umount+0x10/0x10 [ 28.364544][ T367] resume_user_mode_work+0x35/0x50 [ 28.364557][ T367] syscall_exit_to_user_mode+0x63/0xb0 [ 28.364569][ T367] do_syscall_64+0x63/0xf0 [ 28.364580][ T367] ? clear_bhb_loop+0x50/0xa0 [ 28.364594][ T367] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.364665][ T367] RIP: 0033:0x7f0b5219d9d7 [ 28.364680][ T367] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 28.364689][ T367] RSP: 002b:00007ffe4bc47928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 28.364701][ T367] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0b5219d9d7 [ 28.364708][ T367] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4bc479e0 [ 28.364715][ T367] RBP: 00007ffe4bc479e0 R08: 00007ffe4bc489e0 R09: 00000000ffffffff [ 28.364723][ T367] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4bc48a70 [ 28.364729][ T367] R13: 00007f0b52232050 R14: 0000000000006d68 R15: 00007ffe4bc48ab0 [ 28.364738][ T367] [ 28.364742][ T367] ================================================================== [ 28.625571][ T367] Disabling lock debugging due to kernel taint [ 28.633024][ T367] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 28.641682][ T367] #PF: supervisor write access in kernel mode [ 28.648135][ T367] #PF: error_code(0x0002) - not-present page [ 28.654488][ T367] PGD 800000013217e067 P4D 800000013217e067 PUD 0 [ 28.661426][ T367] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 28.667486][ T367] CPU: 0 UID: 0 PID: 367 Comm: syz-executor Tainted: G B W syzkaller #0 3b62e6afc526b595ceee21a395d0bcf22df4c572 [ 28.681290][ T367] Tainted: [B]=BAD_PAGE, [W]=WARN [ 28.686715][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 28.697991][ T367] RIP: 0010:ihold+0x2a/0x70 [ 28.702681][ T367] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd dc 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 28.722988][ T367] RSP: 0018:ffffc9000123fca0 EFLAGS: 00010246 [ 28.729378][ T367] RAX: ffff888113df5f00 RBX: 0000000000000000 RCX: ffff888113df5f00 [ 28.737961][ T367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.746499][ T367] RBP: ffffc9000123fcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 28.754570][ T367] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff888120c930d4 [ 28.763137][ T367] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 28.771537][ T367] FS: 0000555590787500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 28.780643][ T367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.787387][ T367] CR2: 0000000000000168 CR3: 00000001133a0000 CR4: 00000000003526b0 [ 28.795605][ T367] Call Trace: [ 28.799129][ T367] [ 28.802135][ T367] vfs_rmdir+0x26a/0x560 [ 28.806384][ T367] incfs_kill_sb+0x109/0x230 [ 28.811325][ T367] deactivate_locked_super+0xd5/0x2a0 [ 28.816782][ T367] deactivate_super+0xb8/0xe0 [ 28.821463][ T367] cleanup_mnt+0x406/0x4a0 [ 28.826026][ T367] __cleanup_mnt+0x1d/0x40 [ 28.830519][ T367] task_work_run+0x1e5/0x260 [ 28.835473][ T367] ? __cfi_task_work_run+0x10/0x10 [ 28.841293][ T367] ? __x64_sys_umount+0x12e/0x180 [ 28.846578][ T367] ? __cfi___x64_sys_umount+0x10/0x10 [ 28.852032][ T367] resume_user_mode_work+0x35/0x50 [ 28.857586][ T367] syscall_exit_to_user_mode+0x63/0xb0 [ 28.863150][ T367] do_syscall_64+0x63/0xf0 [ 28.867662][ T367] ? clear_bhb_loop+0x50/0xa0 [ 28.872431][ T367] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.878611][ T367] RIP: 0033:0x7f0b5219d9d7 [ 28.883026][ T367] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 28.902998][ T367] RSP: 002b:00007ffe4bc47928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 28.912363][ T367] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0b5219d9d7 [ 28.920761][ T367] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4bc479e0 [ 28.928986][ T367] RBP: 00007ffe4bc479e0 R08: 00007ffe4bc489e0 R09: 00000000ffffffff [ 28.937593][ T367] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4bc48a70 [ 28.945701][ T367] R13: 00007f0b52232050 R14: 0000000000006d68 R15: 00007ffe4bc48ab0 [ 28.954214][ T367] [ 28.957591][ T367] Modules linked in: [ 28.961766][ T367] CR2: 0000000000000168 [ 28.966091][ T367] ---[ end trace 0000000000000000 ]--- [ 28.972055][ T367] RIP: 0010:ihold+0x2a/0x70 [ 28.976661][ T367] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd dc 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 28.996442][ T367] RSP: 0018:ffffc9000123fca0 EFLAGS: 00010246 [ 29.002597][ T367] RAX: ffff888113df5f00 RBX: 0000000000000000 RCX: ffff888113df5f00 [ 29.011847][ T367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.020203][ T367] RBP: ffffc9000123fcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 29.028796][ T367] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff888120c930d4 [ 29.036872][ T367] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 29.045065][ T367] FS: 0000555590787500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 29.054092][ T367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.060683][ T367] CR2: 0000000000000168 CR3: 00000001133a0000 CR4: 00000000003526b0 [ 29.068867][ T367] Kernel panic - not syncing: Fatal exception [ 29.075625][ T367] Kernel Offset: disabled [ 29.079966][ T367] Rebooting in 86400 seconds..