Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. 2026/03/29 18:48:28 parsed 1 programs [ 24.280297][ T36] audit: type=1400 audit(1774810108.430:64): avc: denied { node_bind } for pid=291 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 25.805284][ T36] audit: type=1400 audit(1774810109.960:65): avc: denied { mounton } for pid=298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.808833][ T298] cgroup: Unknown subsys name 'net' [ 25.828030][ T36] audit: type=1400 audit(1774810109.960:66): avc: denied { mount } for pid=298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.855368][ T36] audit: type=1400 audit(1774810109.990:67): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.875475][ T298] cgroup: Unknown subsys name 'devices' [ 26.037486][ T298] cgroup: Unknown subsys name 'hugetlb' [ 26.043133][ T298] cgroup: Unknown subsys name 'rlimit' [ 26.227912][ T36] audit: type=1400 audit(1774810110.380:68): avc: denied { setattr } for pid=298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.251123][ T36] audit: type=1400 audit(1774810110.380:69): avc: denied { create } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.271640][ T36] audit: type=1400 audit(1774810110.380:70): avc: denied { write } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.291969][ T36] audit: type=1400 audit(1774810110.380:71): avc: denied { read } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.299662][ T301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.312382][ T36] audit: type=1400 audit(1774810110.380:72): avc: denied { sys_module } for pid=298 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 26.341873][ T36] audit: type=1400 audit(1774810110.380:73): avc: denied { mounton } for pid=298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.397152][ T298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.294994][ T304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.546781][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.553848][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.561112][ T322] bridge_slave_0: entered allmulticast mode [ 27.568349][ T322] bridge_slave_0: entered promiscuous mode [ 27.577315][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.584361][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.591527][ T322] bridge_slave_1: entered allmulticast mode [ 27.597877][ T322] bridge_slave_1: entered promiscuous mode [ 27.654522][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.661619][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.669074][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.676165][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.698319][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.705928][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.715563][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.722734][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.732601][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.739705][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.765946][ T322] veth0_vlan: entered promiscuous mode [ 27.777435][ T322] veth1_macvtap: entered promiscuous mode [ 27.849341][ T13] bridge_slave_1: left allmulticast mode [ 27.855137][ T13] bridge_slave_1: left promiscuous mode [ 27.860811][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.869479][ T13] bridge_slave_0: left allmulticast mode [ 27.875264][ T13] bridge_slave_0: left promiscuous mode [ 27.880876][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.018864][ T13] veth1_macvtap: left promiscuous mode [ 28.024537][ T13] veth0_vlan: left promiscuous mode 2026/03/29 18:48:32 executed programs: 0 [ 28.849329][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.856657][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.863764][ T365] bridge_slave_0: entered allmulticast mode [ 28.870189][ T365] bridge_slave_0: entered promiscuous mode [ 28.876946][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.883999][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.891177][ T365] bridge_slave_1: entered allmulticast mode [ 28.897584][ T365] bridge_slave_1: entered promiscuous mode [ 28.953073][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.960180][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.967550][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.974599][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.995951][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.003243][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.012685][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.019791][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.029368][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.036458][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.062114][ T365] veth0_vlan: entered promiscuous mode [ 29.073057][ T365] veth1_macvtap: entered promiscuous mode [ 29.106499][ T365] ------------[ cut here ]------------ [ 29.111979][ T365] WARNING: CPU: 0 PID: 365 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 29.120013][ T365] Modules linked in: [ 29.123970][ T365] CPU: 0 UID: 0 PID: 365 Comm: syz-executor Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 29.135737][ T365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 29.145969][ T365] RIP: 0010:drop_nlink+0xce/0x110 [ 29.151123][ T365] Code: 04 00 00 be 08 00 00 00 e8 df 15 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 e5 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 29.171109][ T365] RSP: 0018:ffffc90005bafc60 EFLAGS: 00010293 [ 29.177300][ T365] RAX: ffffffff81f1c4be RBX: ffff88813269c7e0 RCX: ffff8881077f1300 [ 29.185363][ T365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.193348][ T365] RBP: ffffc90005bafc88 R08: 0000000000000003 R09: 0000000000000004 [ 29.201398][ T365] R10: dffffc0000000000 R11: fffff52000b75f7c R12: dffffc0000000000 [ 29.209454][ T365] R13: 1ffff110264d3905 R14: ffff88813269c828 R15: 0000000000000000 [ 29.217516][ T365] FS: 0000555589c01500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 29.226540][ T365] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.233145][ T365] CR2: 0000555589c24948 CR3: 000000011375c000 CR4: 00000000003526b0 [ 29.241204][ T365] Call Trace: [ 29.244508][ T365] [ 29.247506][ T365] shmem_rmdir+0x5f/0x90 [ 29.251782][ T365] vfs_rmdir+0x3e3/0x560 [ 29.256110][ T365] incfs_kill_sb+0x109/0x230 [ 29.260748][ T365] deactivate_locked_super+0xd5/0x2a0 [ 29.266211][ T365] deactivate_super+0xb8/0xe0 [ 29.270924][ T365] cleanup_mnt+0x406/0x4a0 [ 29.275444][ T365] __cleanup_mnt+0x1d/0x40 [ 29.279942][ T365] task_work_run+0x1e5/0x260 [ 29.284557][ T365] ? __cfi_task_work_run+0x10/0x10 [ 29.289863][ T365] ? __x64_sys_umount+0x12e/0x180 [ 29.294927][ T365] ? __cfi___x64_sys_umount+0x10/0x10 [ 29.300433][ T365] ? __kasan_check_read+0x15/0x20 [ 29.305564][ T365] resume_user_mode_work+0x35/0x50 [ 29.310697][ T365] syscall_exit_to_user_mode+0x63/0xb0 [ 29.316249][ T365] do_syscall_64+0x63/0xf0 [ 29.320709][ T365] ? clear_bhb_loop+0x50/0xa0 [ 29.325499][ T365] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.331435][ T365] RIP: 0033:0x7fa4dad9da57 [ 29.335959][ T365] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 29.355766][ T365] RSP: 002b:00007ffed2e0e228 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 29.364228][ T365] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa4dad9da57 [ 29.372319][ T365] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed2e0e2e0 [ 29.380437][ T365] RBP: 00007ffed2e0e2e0 R08: 00007ffed2e0f2e0 R09: 00000000ffffffff [ 29.388562][ T365] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed2e0f370 [ 29.396648][ T365] R13: 00007fa4dae32048 R14: 0000000000007193 R15: 00007ffed2e0f3b0 [ 29.404642][ T365] [ 29.407742][ T365] ---[ end trace 0000000000000000 ]--- [ 29.413944][ T365] ================================================================== [ 29.422149][ T365] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 29.428408][ T365] Write of size 4 at addr 0000000000000168 by task syz-executor/365 [ 29.436406][ T365] [ 29.438747][ T365] CPU: 1 UID: 0 PID: 365 Comm: syz-executor Tainted: G W syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 29.438772][ T365] Tainted: [W]=WARN [ 29.438777][ T365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 29.438787][ T365] Call Trace: [ 29.438793][ T365] [ 29.438800][ T365] __dump_stack+0x21/0x30 [ 29.438825][ T365] dump_stack_lvl+0x140/0x1c0 [ 29.438845][ T365] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.438867][ T365] print_report+0x3d/0x70 [ 29.438886][ T365] kasan_report+0x162/0x1a0 [ 29.438902][ T365] ? ihold+0x24/0x70 [ 29.438917][ T365] ? _raw_spin_unlock+0x45/0x60 [ 29.438938][ T365] ? ihold+0x24/0x70 [ 29.438951][ T365] kasan_check_range+0x25a/0x2b0 [ 29.438975][ T365] __kasan_check_write+0x18/0x20 [ 29.438996][ T365] ihold+0x24/0x70 [ 29.439009][ T365] vfs_rmdir+0x26a/0x560 [ 29.439027][ T365] incfs_kill_sb+0x109/0x230 [ 29.439050][ T365] deactivate_locked_super+0xd5/0x2a0 [ 29.439068][ T365] deactivate_super+0xb8/0xe0 [ 29.439085][ T365] cleanup_mnt+0x406/0x4a0 [ 29.439101][ T365] __cleanup_mnt+0x1d/0x40 [ 29.439114][ T365] task_work_run+0x1e5/0x260 [ 29.439133][ T365] ? __cfi_task_work_run+0x10/0x10 [ 29.439150][ T365] ? __x64_sys_umount+0x12e/0x180 [ 29.439170][ T365] ? __cfi___x64_sys_umount+0x10/0x10 [ 29.439190][ T365] ? __kasan_check_read+0x15/0x20 [ 29.439211][ T365] resume_user_mode_work+0x35/0x50 [ 29.439243][ T365] syscall_exit_to_user_mode+0x63/0xb0 [ 29.439265][ T365] do_syscall_64+0x63/0xf0 [ 29.439286][ T365] ? clear_bhb_loop+0x50/0xa0 [ 29.439310][ T365] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.439336][ T365] RIP: 0033:0x7fa4dad9da57 [ 29.439349][ T365] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 29.439363][ T365] RSP: 002b:00007ffed2e0e228 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 29.439379][ T365] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa4dad9da57 [ 29.439390][ T365] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed2e0e2e0 [ 29.439400][ T365] RBP: 00007ffed2e0e2e0 R08: 00007ffed2e0f2e0 R09: 00000000ffffffff [ 29.439411][ T365] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed2e0f370 [ 29.439421][ T365] R13: 00007fa4dae32048 R14: 0000000000007193 R15: 00007ffed2e0f3b0 [ 29.439435][ T365] [ 29.439440][ T365] ================================================================== [ 29.684612][ T365] Disabling lock debugging due to kernel taint [ 29.690879][ T365] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 29.698719][ T365] #PF: supervisor write access in kernel mode [ 29.704802][ T365] #PF: error_code(0x0002) - not-present page [ 29.710806][ T365] PGD 80000001147cb067 P4D 80000001147cb067 PUD 0 [ 29.717451][ T365] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 29.723551][ T365] CPU: 1 UID: 0 PID: 365 Comm: syz-executor Tainted: G B W syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 29.736777][ T365] Tainted: [B]=BAD_PAGE, [W]=WARN [ 29.741901][ T365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 29.751978][ T365] RIP: 0010:ihold+0x2a/0x70 [ 29.756506][ T365] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd dc 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 29.776132][ T365] RSP: 0018:ffffc90005bafca0 EFLAGS: 00010246 [ 29.782224][ T365] RAX: ffff8881077f1300 RBX: 0000000000000000 RCX: ffff8881077f1300 [ 29.790215][ T365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.798213][ T365] RBP: ffffc90005bafcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 29.806221][ T365] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff88813269c7ec [ 29.814226][ T365] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 29.822223][ T365] FS: 0000555589c01500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 29.831181][ T365] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.837782][ T365] CR2: 0000000000000168 CR3: 000000011375c000 CR4: 00000000003526b0 [ 29.845781][ T365] Call Trace: [ 29.849080][ T365] [ 29.852038][ T365] vfs_rmdir+0x26a/0x560 [ 29.856306][ T365] incfs_kill_sb+0x109/0x230 [ 29.860925][ T365] deactivate_locked_super+0xd5/0x2a0 [ 29.866317][ T365] deactivate_super+0xb8/0xe0 [ 29.871021][ T365] cleanup_mnt+0x406/0x4a0 [ 29.875455][ T365] __cleanup_mnt+0x1d/0x40 [ 29.879884][ T365] task_work_run+0x1e5/0x260 [ 29.884495][ T365] ? __cfi_task_work_run+0x10/0x10 [ 29.889622][ T365] ? __x64_sys_umount+0x12e/0x180 [ 29.894668][ T365] ? __cfi___x64_sys_umount+0x10/0x10 [ 29.900064][ T365] ? __kasan_check_read+0x15/0x20 [ 29.905115][ T365] resume_user_mode_work+0x35/0x50 [ 29.910259][ T365] syscall_exit_to_user_mode+0x63/0xb0 [ 29.915738][ T365] do_syscall_64+0x63/0xf0 [ 29.920178][ T365] ? clear_bhb_loop+0x50/0xa0 [ 29.924881][ T365] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.930799][ T365] RIP: 0033:0x7fa4dad9da57 [ 29.935231][ T365] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 29.954855][ T365] RSP: 002b:00007ffed2e0e228 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 29.963376][ T365] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa4dad9da57 [ 29.971371][ T365] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed2e0e2e0 [ 29.979365][ T365] RBP: 00007ffed2e0e2e0 R08: 00007ffed2e0f2e0 R09: 00000000ffffffff [ 29.987357][ T365] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed2e0f370 [ 29.995349][ T365] R13: 00007fa4dae32048 R14: 0000000000007193 R15: 00007ffed2e0f3b0 [ 30.003340][ T365] [ 30.006374][ T365] Modules linked in: [ 30.010301][ T365] CR2: 0000000000000168 [ 30.014461][ T365] ---[ end trace 0000000000000000 ]--- [ 30.020103][ T365] RIP: 0010:ihold+0x2a/0x70 [ 30.024625][ T365] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd dc 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 30.044247][ T365] RSP: 0018:ffffc90005bafca0 EFLAGS: 00010246 [ 30.050332][ T365] RAX: ffff8881077f1300 RBX: 0000000000000000 RCX: ffff8881077f1300 [ 30.058321][ T365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.066303][ T365] RBP: ffffc90005bafcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 30.074296][ T365] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff88813269c7ec [ 30.082290][ T365] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 30.090280][ T365] FS: 0000555589c01500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.099232][ T365] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.105834][ T365] CR2: 0000000000000168 CR3: 000000011375c000 CR4: 00000000003526b0 [ 30.113829][ T365] Kernel panic - not syncing: Fatal exception [ 30.120044][ T365] Kernel Offset: disabled [ 30.124369][ T365] Rebooting in 86400 seconds..