Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts. 2026/03/27 07:22:03 parsed 1 programs [ 22.849808][ T36] audit: type=1400 audit(1774596123.250:64): avc: denied { node_bind } for pid=290 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 23.803525][ T36] audit: type=1400 audit(1774596124.210:65): avc: denied { mounton } for pid=297 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.804590][ T297] cgroup: Unknown subsys name 'net' [ 23.826184][ T36] audit: type=1400 audit(1774596124.210:66): avc: denied { mount } for pid=297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.853440][ T36] audit: type=1400 audit(1774596124.230:67): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.853710][ T297] cgroup: Unknown subsys name 'devices' [ 24.055180][ T297] cgroup: Unknown subsys name 'hugetlb' [ 24.060785][ T297] cgroup: Unknown subsys name 'rlimit' [ 24.219214][ T36] audit: type=1400 audit(1774596124.620:68): avc: denied { setattr } for pid=297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.242390][ T36] audit: type=1400 audit(1774596124.620:69): avc: denied { create } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.262893][ T36] audit: type=1400 audit(1774596124.620:70): avc: denied { write } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.263601][ T300] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.283421][ T36] audit: type=1400 audit(1774596124.620:71): avc: denied { read } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.311946][ T36] audit: type=1400 audit(1774596124.620:72): avc: denied { sys_module } for pid=297 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 24.332902][ T36] audit: type=1400 audit(1774596124.620:73): avc: denied { mounton } for pid=297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.389441][ T297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.237352][ T302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.360191][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.367279][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.374410][ T312] bridge_slave_0: entered allmulticast mode [ 25.380600][ T312] bridge_slave_0: entered promiscuous mode [ 25.387007][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.394088][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.401246][ T312] bridge_slave_1: entered allmulticast mode [ 25.407470][ T312] bridge_slave_1: entered promiscuous mode [ 25.446978][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.454050][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.461291][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.468330][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.489679][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.497034][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.506208][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.513407][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.523677][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.530718][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.552231][ T312] veth0_vlan: entered promiscuous mode [ 25.562557][ T312] veth1_macvtap: entered promiscuous mode [ 25.629868][ T46] bridge_slave_1: left allmulticast mode [ 25.637508][ T46] bridge_slave_1: left promiscuous mode [ 25.643156][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.651185][ T46] bridge_slave_0: left allmulticast mode [ 25.656967][ T46] bridge_slave_0: left promiscuous mode [ 25.662592][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.820058][ T46] veth1_macvtap: left promiscuous mode [ 25.825666][ T46] veth0_vlan: left promiscuous mode 2026/03/27 07:22:06 executed programs: 0 [ 26.498719][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.505816][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.512965][ T364] bridge_slave_0: entered allmulticast mode [ 26.519406][ T364] bridge_slave_0: entered promiscuous mode [ 26.525988][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.533016][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.540093][ T364] bridge_slave_1: entered allmulticast mode [ 26.546439][ T364] bridge_slave_1: entered promiscuous mode [ 26.591827][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.599153][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.606429][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.613465][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.631386][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.638750][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.654515][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.661562][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.669892][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.676962][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.700209][ T364] veth0_vlan: entered promiscuous mode [ 26.709948][ T364] veth1_macvtap: entered promiscuous mode [ 26.737351][ T364] ------------[ cut here ]------------ [ 26.742841][ T364] WARNING: CPU: 1 PID: 364 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 26.750871][ T364] Modules linked in: [ 26.754820][ T364] CPU: 1 UID: 0 PID: 364 Comm: syz-executor Not tainted syzkaller #0 e5e4876e63e0994bd4350cd5f958f668e2098f7e [ 26.766477][ T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 26.776570][ T364] RIP: 0010:drop_nlink+0xce/0x110 [ 26.781610][ T364] Code: 04 00 00 be 08 00 00 00 e8 df 15 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 e5 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 26.801284][ T364] RSP: 0018:ffffc90001aefc60 EFLAGS: 00010293 [ 26.807408][ T364] RAX: ffffffff81f1c4be RBX: ffff88813503fbf0 RCX: ffff88813119b900 [ 26.815441][ T364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.823510][ T364] RBP: ffffc90001aefc88 R08: 0000000000000003 R09: 0000000000000004 [ 26.831484][ T364] R10: dffffc0000000000 R11: fffff5200035df7c R12: dffffc0000000000 [ 26.839476][ T364] R13: 1ffff11026a07f87 R14: ffff88813503fc38 R15: 0000000000000000 [ 26.847479][ T364] FS: 0000555562a52500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 26.856461][ T364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.863074][ T364] CR2: 0000001b33763fff CR3: 000000011519e000 CR4: 00000000003526b0 [ 26.871083][ T364] Call Trace: [ 26.874392][ T364] [ 26.877326][ T364] shmem_rmdir+0x5f/0x90 [ 26.881563][ T364] vfs_rmdir+0x3e3/0x560 [ 26.885873][ T364] incfs_kill_sb+0x109/0x230 [ 26.890472][ T364] deactivate_locked_super+0xd5/0x2a0 [ 26.895898][ T364] deactivate_super+0xb8/0xe0 [ 26.900578][ T364] cleanup_mnt+0x406/0x4a0 [ 26.905021][ T364] __cleanup_mnt+0x1d/0x40 [ 26.909431][ T364] task_work_run+0x1e5/0x260 [ 26.914044][ T364] ? __cfi_task_work_run+0x10/0x10 [ 26.919158][ T364] ? __x64_sys_umount+0x12e/0x180 [ 26.924298][ T364] ? __cfi___x64_sys_umount+0x10/0x10 [ 26.929702][ T364] ? __kasan_check_read+0x15/0x20 [ 26.934775][ T364] resume_user_mode_work+0x35/0x50 [ 26.939897][ T364] syscall_exit_to_user_mode+0x63/0xb0 [ 26.945404][ T364] do_syscall_64+0x63/0xf0 [ 26.949838][ T364] ? clear_bhb_loop+0x50/0xa0 [ 26.954596][ T364] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.960500][ T364] RIP: 0033:0x7f49da59d9d7 [ 26.964959][ T364] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 26.984638][ T364] RSP: 002b:00007fffa29c3538 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 26.993051][ T364] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f49da59d9d7 [ 27.001038][ T364] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa29c35f0 [ 27.009046][ T364] RBP: 00007fffa29c35f0 R08: 00007fffa29c45f0 R09: 00000000ffffffff [ 27.017040][ T364] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa29c4680 [ 27.025045][ T364] R13: 00007f49da632050 R14: 0000000000006856 R15: 00007fffa29c46c0 [ 27.033010][ T364] [ 27.036065][ T364] ---[ end trace 0000000000000000 ]--- [ 27.041644][ T364] ================================================================== [ 27.049716][ T364] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 27.055943][ T364] Write of size 4 at addr 0000000000000168 by task syz-executor/364 [ 27.063912][ T364] [ 27.066232][ T364] CPU: 0 UID: 0 PID: 364 Comm: syz-executor Tainted: G W syzkaller #0 e5e4876e63e0994bd4350cd5f958f668e2098f7e [ 27.066251][ T364] Tainted: [W]=WARN [ 27.066255][ T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 27.066262][ T364] Call Trace: [ 27.066266][ T364] [ 27.066272][ T364] __dump_stack+0x21/0x30 [ 27.066289][ T364] dump_stack_lvl+0x140/0x1c0 [ 27.066300][ T364] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.066313][ T364] print_report+0x3d/0x70 [ 27.066325][ T364] kasan_report+0x162/0x1a0 [ 27.066336][ T364] ? ihold+0x24/0x70 [ 27.066345][ T364] ? _raw_spin_unlock+0x45/0x60 [ 27.066358][ T364] ? ihold+0x24/0x70 [ 27.066366][ T364] kasan_check_range+0x25a/0x2b0 [ 27.066376][ T364] __kasan_check_write+0x18/0x20 [ 27.066388][ T364] ihold+0x24/0x70 [ 27.066396][ T364] vfs_rmdir+0x26a/0x560 [ 27.066407][ T364] incfs_kill_sb+0x109/0x230 [ 27.066421][ T364] deactivate_locked_super+0xd5/0x2a0 [ 27.066432][ T364] deactivate_super+0xb8/0xe0 [ 27.066443][ T364] cleanup_mnt+0x406/0x4a0 [ 27.066453][ T364] __cleanup_mnt+0x1d/0x40 [ 27.066461][ T364] task_work_run+0x1e5/0x260 [ 27.066472][ T364] ? __cfi_task_work_run+0x10/0x10 [ 27.066483][ T364] ? __x64_sys_umount+0x12e/0x180 [ 27.066495][ T364] ? __cfi___x64_sys_umount+0x10/0x10 [ 27.066506][ T364] ? __kasan_check_read+0x15/0x20 [ 27.066518][ T364] resume_user_mode_work+0x35/0x50 [ 27.066531][ T364] syscall_exit_to_user_mode+0x63/0xb0 [ 27.066543][ T364] do_syscall_64+0x63/0xf0 [ 27.066554][ T364] ? clear_bhb_loop+0x50/0xa0 [ 27.066568][ T364] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.066580][ T364] RIP: 0033:0x7f49da59d9d7 [ 27.066590][ T364] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 27.066599][ T364] RSP: 002b:00007fffa29c3538 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 27.066611][ T364] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f49da59d9d7 [ 27.066618][ T364] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa29c35f0 [ 27.066625][ T364] RBP: 00007fffa29c35f0 R08: 00007fffa29c45f0 R09: 00000000ffffffff [ 27.066632][ T364] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa29c4680 [ 27.066639][ T364] R13: 00007f49da632050 R14: 0000000000006856 R15: 00007fffa29c46c0 [ 27.066647][ T364] [ 27.066651][ T364] ================================================================== [ 27.311119][ T364] Disabling lock debugging due to kernel taint [ 27.317394][ T364] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 27.325198][ T364] #PF: supervisor write access in kernel mode [ 27.331237][ T364] #PF: error_code(0x0002) - not-present page [ 27.337196][ T364] PGD 800000011519b067 P4D 800000011519b067 PUD 0 [ 27.343679][ T364] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 27.349723][ T364] CPU: 1 UID: 0 PID: 364 Comm: syz-executor Tainted: G B W syzkaller #0 e5e4876e63e0994bd4350cd5f958f668e2098f7e [ 27.362801][ T364] Tainted: [B]=BAD_PAGE, [W]=WARN [ 27.367791][ T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 27.377830][ T364] RIP: 0010:ihold+0x2a/0x70 [ 27.382329][ T364] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd dc 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 27.401928][ T364] RSP: 0018:ffffc90001aefca0 EFLAGS: 00010246 [ 27.408162][ T364] RAX: ffff88813119b900 RBX: 0000000000000000 RCX: ffff88813119b900 [ 27.416123][ T364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.424119][ T364] RBP: ffffc90001aefcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 27.432085][ T364] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff88813503fbfc [ 27.440057][ T364] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 27.448017][ T364] FS: 0000555562a52500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 27.456942][ T364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.463517][ T364] CR2: 0000000000000168 CR3: 000000011519e000 CR4: 00000000003526b0 [ 27.471480][ T364] Call Trace: [ 27.474765][ T364] [ 27.477702][ T364] vfs_rmdir+0x26a/0x560 [ 27.481938][ T364] incfs_kill_sb+0x109/0x230 [ 27.486517][ T364] deactivate_locked_super+0xd5/0x2a0 [ 27.491900][ T364] deactivate_super+0xb8/0xe0 [ 27.496566][ T364] cleanup_mnt+0x406/0x4a0 [ 27.500967][ T364] __cleanup_mnt+0x1d/0x40 [ 27.505360][ T364] task_work_run+0x1e5/0x260 [ 27.509933][ T364] ? __cfi_task_work_run+0x10/0x10 [ 27.515020][ T364] ? __x64_sys_umount+0x12e/0x180 [ 27.520020][ T364] ? __cfi___x64_sys_umount+0x10/0x10 [ 27.525368][ T364] ? __kasan_check_read+0x15/0x20 [ 27.530369][ T364] resume_user_mode_work+0x35/0x50 [ 27.535457][ T364] syscall_exit_to_user_mode+0x63/0xb0 [ 27.540891][ T364] do_syscall_64+0x63/0xf0 [ 27.545282][ T364] ? clear_bhb_loop+0x50/0xa0 [ 27.549949][ T364] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.555851][ T364] RIP: 0033:0x7f49da59d9d7 [ 27.560260][ T364] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 27.580109][ T364] RSP: 002b:00007fffa29c3538 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 27.588505][ T364] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f49da59d9d7 [ 27.596484][ T364] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa29c35f0 [ 27.604442][ T364] RBP: 00007fffa29c35f0 R08: 00007fffa29c45f0 R09: 00000000ffffffff [ 27.612406][ T364] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa29c4680 [ 27.620360][ T364] R13: 00007f49da632050 R14: 0000000000006856 R15: 00007fffa29c46c0 [ 27.628320][ T364] [ 27.631325][ T364] Modules linked in: [ 27.635216][ T364] CR2: 0000000000000168 [ 27.639432][ T364] ---[ end trace 0000000000000000 ]--- [ 27.644866][ T364] RIP: 0010:ihold+0x2a/0x70 [ 27.649352][ T364] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd dc 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 27.668944][ T364] RSP: 0018:ffffc90001aefca0 EFLAGS: 00010246 [ 27.674996][ T364] RAX: ffff88813119b900 RBX: 0000000000000000 RCX: ffff88813119b900 [ 27.682951][ T364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.690905][ T364] RBP: ffffc90001aefcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 27.698853][ T364] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff88813503fbfc [ 27.706800][ T364] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 27.714745][ T364] FS: 0000555562a52500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 27.723648][ T364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.730204][ T364] CR2: 0000000000000168 CR3: 000000011519e000 CR4: 00000000003526b0 [ 27.738243][ T364] Kernel panic - not syncing: Fatal exception [ 27.744644][ T364] Kernel Offset: disabled [ 27.748965][ T364] Rebooting in 86400 seconds..