Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts. 2026/03/26 03:31:19 parsed 1 programs [ 21.047544][ T36] audit: type=1400 audit(1774495879.429:64): avc: denied { node_bind } for pid=291 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 22.012202][ T36] audit: type=1400 audit(1774495880.399:65): avc: denied { mounton } for pid=298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.013271][ T298] cgroup: Unknown subsys name 'net' [ 22.034934][ T36] audit: type=1400 audit(1774495880.399:66): avc: denied { mount } for pid=298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.062345][ T36] audit: type=1400 audit(1774495880.429:67): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.062541][ T298] cgroup: Unknown subsys name 'devices' [ 22.223388][ T298] cgroup: Unknown subsys name 'hugetlb' [ 22.229007][ T298] cgroup: Unknown subsys name 'rlimit' [ 22.386578][ T36] audit: type=1400 audit(1774495880.769:68): avc: denied { setattr } for pid=298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.409755][ T36] audit: type=1400 audit(1774495880.769:69): avc: denied { create } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.423884][ T301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.430126][ T36] audit: type=1400 audit(1774495880.769:70): avc: denied { write } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.459660][ T36] audit: type=1400 audit(1774495880.769:71): avc: denied { read } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.465167][ T298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.479840][ T36] audit: type=1400 audit(1774495880.769:72): avc: denied { sys_module } for pid=298 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 22.509510][ T36] audit: type=1400 audit(1774495880.769:73): avc: denied { mounton } for pid=298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.350949][ T304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.936681][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.943801][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.950985][ T342] bridge_slave_0: entered allmulticast mode [ 23.957213][ T342] bridge_slave_0: entered promiscuous mode [ 23.963608][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.970622][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.977954][ T342] bridge_slave_1: entered allmulticast mode [ 23.984618][ T342] bridge_slave_1: entered promiscuous mode [ 24.027626][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.034784][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.042264][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.049282][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.066922][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.074224][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.083265][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.090338][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.100076][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.107136][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.131898][ T342] veth0_vlan: entered promiscuous mode [ 24.141682][ T342] veth1_macvtap: entered promiscuous mode [ 24.282856][ T242] bridge_slave_1: left allmulticast mode [ 24.296618][ T242] bridge_slave_1: left promiscuous mode [ 24.306395][ T242] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.314681][ T242] bridge_slave_0: left allmulticast mode [ 24.320342][ T242] bridge_slave_0: left promiscuous mode [ 24.326398][ T242] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.467037][ T242] veth1_macvtap: left promiscuous mode [ 24.472724][ T242] veth0_vlan: left promiscuous mode 2026/03/26 03:31:23 executed programs: 0 [ 24.654263][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.661370][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.668493][ T367] bridge_slave_0: entered allmulticast mode [ 24.674841][ T367] bridge_slave_0: entered promiscuous mode [ 24.681642][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.688767][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.695900][ T367] bridge_slave_1: entered allmulticast mode [ 24.702252][ T367] bridge_slave_1: entered promiscuous mode [ 24.736274][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.743338][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.750554][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.757594][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.778037][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.785477][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.794635][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.801688][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.810898][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.817976][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.848394][ T367] veth0_vlan: entered promiscuous mode [ 24.858039][ T367] veth1_macvtap: entered promiscuous mode [ 24.886982][ T367] ------------[ cut here ]------------ [ 24.892561][ T367] WARNING: CPU: 1 PID: 367 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 24.900524][ T367] Modules linked in: [ 24.904514][ T367] CPU: 1 UID: 0 PID: 367 Comm: syz-executor Not tainted syzkaller #0 3b62e6afc526b595ceee21a395d0bcf22df4c572 [ 24.916172][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 24.926266][ T367] RIP: 0010:drop_nlink+0xce/0x110 [ 24.931359][ T367] Code: 04 00 00 be 08 00 00 00 e8 df 15 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 e5 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 24.951016][ T367] RSP: 0018:ffffc9000120fc60 EFLAGS: 00010293 [ 24.957088][ T367] RAX: ffffffff81f1c4be RBX: ffff8881037b8f50 RCX: ffff888113eccc00 [ 24.965090][ T367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 24.973088][ T367] RBP: ffffc9000120fc88 R08: 0000000000000003 R09: 0000000000000004 [ 24.981100][ T367] R10: dffffc0000000000 R11: fffff52000241f7c R12: dffffc0000000000 [ 24.989064][ T367] R13: 1ffff110206f71f3 R14: ffff8881037b8f98 R15: 0000000000000000 [ 24.997058][ T367] FS: 0000555593e74500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 25.006025][ T367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.012643][ T367] CR2: 00000718b174f000 CR3: 0000000115016000 CR4: 00000000003526b0 [ 25.020612][ T367] Call Trace: [ 25.023939][ T367] [ 25.026950][ T367] shmem_rmdir+0x5f/0x90 [ 25.031206][ T367] vfs_rmdir+0x3e3/0x560 [ 25.035445][ T367] incfs_kill_sb+0x109/0x230 [ 25.040021][ T367] deactivate_locked_super+0xd5/0x2a0 [ 25.045418][ T367] deactivate_super+0xb8/0xe0 [ 25.050085][ T367] cleanup_mnt+0x406/0x4a0 [ 25.054518][ T367] __cleanup_mnt+0x1d/0x40 [ 25.058967][ T367] task_work_run+0x1e5/0x260 [ 25.063592][ T367] ? __cfi_task_work_run+0x10/0x10 [ 25.068698][ T367] ? __x64_sys_umount+0x12e/0x180 [ 25.073743][ T367] ? __cfi___x64_sys_umount+0x10/0x10 [ 25.079117][ T367] ? __kasan_check_read+0x15/0x20 [ 25.084181][ T367] resume_user_mode_work+0x35/0x50 [ 25.089291][ T367] syscall_exit_to_user_mode+0x63/0xb0 [ 25.094775][ T367] do_syscall_64+0x63/0xf0 [ 25.099189][ T367] ? clear_bhb_loop+0x50/0xa0 [ 25.103904][ T367] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.109805][ T367] RIP: 0033:0x7f8aa579d9d7 [ 25.114267][ T367] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 25.134004][ T367] RSP: 002b:00007ffe5e5b8448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 25.142476][ T367] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8aa579d9d7 [ 25.150452][ T367] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe5e5b8500 [ 25.158480][ T367] RBP: 00007ffe5e5b8500 R08: 00007ffe5e5b9500 R09: 00000000ffffffff [ 25.166554][ T367] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe5e5b9590 [ 25.174589][ T367] R13: 00007f8aa5832050 R14: 000000000000611e R15: 00007ffe5e5b95d0 [ 25.182589][ T367] [ 25.185605][ T367] ---[ end trace 0000000000000000 ]--- [ 25.191200][ T367] ================================================================== [ 25.200061][ T367] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 25.206301][ T367] Write of size 4 at addr 0000000000000168 by task syz-executor/367 [ 25.214270][ T367] [ 25.216600][ T367] CPU: 0 UID: 0 PID: 367 Comm: syz-executor Tainted: G W syzkaller #0 3b62e6afc526b595ceee21a395d0bcf22df4c572 [ 25.216624][ T367] Tainted: [W]=WARN [ 25.216629][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 25.216638][ T367] Call Trace: [ 25.216644][ T367] [ 25.216652][ T367] __dump_stack+0x21/0x30 [ 25.216675][ T367] dump_stack_lvl+0x140/0x1c0 [ 25.216692][ T367] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.216710][ T367] print_report+0x3d/0x70 [ 25.216727][ T367] kasan_report+0x162/0x1a0 [ 25.216741][ T367] ? ihold+0x24/0x70 [ 25.216754][ T367] ? _raw_spin_unlock+0x45/0x60 [ 25.216772][ T367] ? ihold+0x24/0x70 [ 25.216784][ T367] kasan_check_range+0x25a/0x2b0 [ 25.216798][ T367] __kasan_check_write+0x18/0x20 [ 25.216817][ T367] ihold+0x24/0x70 [ 25.216829][ T367] vfs_rmdir+0x26a/0x560 [ 25.216845][ T367] incfs_kill_sb+0x109/0x230 [ 25.216864][ T367] deactivate_locked_super+0xd5/0x2a0 [ 25.216880][ T367] deactivate_super+0xb8/0xe0 [ 25.216895][ T367] cleanup_mnt+0x406/0x4a0 [ 25.216908][ T367] __cleanup_mnt+0x1d/0x40 [ 25.216920][ T367] task_work_run+0x1e5/0x260 [ 25.216937][ T367] ? __cfi_task_work_run+0x10/0x10 [ 25.216952][ T367] ? __x64_sys_umount+0x12e/0x180 [ 25.216970][ T367] ? __cfi___x64_sys_umount+0x10/0x10 [ 25.216986][ T367] ? __kasan_check_read+0x15/0x20 [ 25.217007][ T367] resume_user_mode_work+0x35/0x50 [ 25.217026][ T367] syscall_exit_to_user_mode+0x63/0xb0 [ 25.217042][ T367] do_syscall_64+0x63/0xf0 [ 25.217065][ T367] ? clear_bhb_loop+0x50/0xa0 [ 25.217084][ T367] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.217102][ T367] RIP: 0033:0x7f8aa579d9d7 [ 25.217116][ T367] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 25.217128][ T367] RSP: 002b:00007ffe5e5b8448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 25.217144][ T367] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8aa579d9d7 [ 25.217154][ T367] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe5e5b8500 [ 25.217163][ T367] RBP: 00007ffe5e5b8500 R08: 00007ffe5e5b9500 R09: 00000000ffffffff [ 25.217174][ T367] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe5e5b9590 [ 25.217183][ T367] R13: 00007f8aa5832050 R14: 000000000000611e R15: 00007ffe5e5b95d0 [ 25.217195][ T367] [ 25.217200][ T367] ================================================================== [ 25.461998][ T367] Disabling lock debugging due to kernel taint [ 25.468197][ T367] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 25.475976][ T367] #PF: supervisor write access in kernel mode [ 25.482019][ T367] #PF: error_code(0x0002) - not-present page [ 25.487984][ T367] PGD 8000000115d5c067 P4D 8000000115d5c067 PUD 0 [ 25.494470][ T367] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 25.500529][ T367] CPU: 1 UID: 0 PID: 367 Comm: syz-executor Tainted: G B W syzkaller #0 3b62e6afc526b595ceee21a395d0bcf22df4c572 [ 25.513623][ T367] Tainted: [B]=BAD_PAGE, [W]=WARN [ 25.518631][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 25.528677][ T367] RIP: 0010:ihold+0x2a/0x70 [ 25.533170][ T367] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd dc 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 25.552763][ T367] RSP: 0018:ffffc9000120fca0 EFLAGS: 00010246 [ 25.558818][ T367] RAX: ffff888113eccc00 RBX: 0000000000000000 RCX: ffff888113eccc00 [ 25.566779][ T367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.574764][ T367] RBP: ffffc9000120fcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 25.582719][ T367] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff8881037b8f5c [ 25.590679][ T367] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 25.598628][ T367] FS: 0000555593e74500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 25.607633][ T367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.614219][ T367] CR2: 0000000000000168 CR3: 0000000115016000 CR4: 00000000003526b0 [ 25.622170][ T367] Call Trace: [ 25.625428][ T367] [ 25.628335][ T367] vfs_rmdir+0x26a/0x560 [ 25.632559][ T367] incfs_kill_sb+0x109/0x230 [ 25.637132][ T367] deactivate_locked_super+0xd5/0x2a0 [ 25.642477][ T367] deactivate_super+0xb8/0xe0 [ 25.647131][ T367] cleanup_mnt+0x406/0x4a0 [ 25.651529][ T367] __cleanup_mnt+0x1d/0x40 [ 25.655922][ T367] task_work_run+0x1e5/0x260 [ 25.660490][ T367] ? __cfi_task_work_run+0x10/0x10 [ 25.665584][ T367] ? __x64_sys_umount+0x12e/0x180 [ 25.670582][ T367] ? __cfi___x64_sys_umount+0x10/0x10 [ 25.675937][ T367] ? __kasan_check_read+0x15/0x20 [ 25.680942][ T367] resume_user_mode_work+0x35/0x50 [ 25.686028][ T367] syscall_exit_to_user_mode+0x63/0xb0 [ 25.691462][ T367] do_syscall_64+0x63/0xf0 [ 25.695861][ T367] ? clear_bhb_loop+0x50/0xa0 [ 25.700521][ T367] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.706389][ T367] RIP: 0033:0x7f8aa579d9d7 [ 25.710782][ T367] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 25.730361][ T367] RSP: 002b:00007ffe5e5b8448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 25.738749][ T367] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8aa579d9d7 [ 25.746699][ T367] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe5e5b8500 [ 25.754651][ T367] RBP: 00007ffe5e5b8500 R08: 00007ffe5e5b9500 R09: 00000000ffffffff [ 25.762601][ T367] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe5e5b9590 [ 25.770550][ T367] R13: 00007f8aa5832050 R14: 000000000000611e R15: 00007ffe5e5b95d0 [ 25.778528][ T367] [ 25.781526][ T367] Modules linked in: [ 25.785409][ T367] CR2: 0000000000000168 [ 25.789535][ T367] ---[ end trace 0000000000000000 ]--- [ 25.794972][ T367] RIP: 0010:ihold+0x2a/0x70 [ 25.799481][ T367] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd dc 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 25.819062][ T367] RSP: 0018:ffffc9000120fca0 EFLAGS: 00010246 [ 25.825104][ T367] RAX: ffff888113eccc00 RBX: 0000000000000000 RCX: ffff888113eccc00 [ 25.833056][ T367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.841003][ T367] RBP: ffffc9000120fcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 25.849081][ T367] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff8881037b8f5c [ 25.857044][ T367] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 25.865002][ T367] FS: 0000555593e74500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 25.873915][ T367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.880491][ T367] CR2: 0000000000000168 CR3: 0000000115016000 CR4: 00000000003526b0 [ 25.888462][ T367] Kernel panic - not syncing: Fatal exception [ 25.894934][ T367] Kernel Offset: disabled [ 25.899252][ T367] Rebooting in 86400 seconds..