Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts. 2026/03/30 19:59:29 parsed 1 programs [ 23.062712][ T36] audit: type=1400 audit(1774900769.970:64): avc: denied { node_bind } for pid=290 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.218238][ T36] audit: type=1400 audit(1774900771.120:65): avc: denied { mounton } for pid=297 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.219242][ T297] cgroup: Unknown subsys name 'net' [ 24.240990][ T36] audit: type=1400 audit(1774900771.120:66): avc: denied { mount } for pid=297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.268410][ T36] audit: type=1400 audit(1774900771.150:67): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.268604][ T297] cgroup: Unknown subsys name 'devices' [ 24.471633][ T297] cgroup: Unknown subsys name 'hugetlb' [ 24.477261][ T297] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 24.657247][ T36] audit: type=1400 audit(1774900771.560:68): avc: denied { setattr } for pid=297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.680555][ T36] audit: type=1400 audit(1774900771.560:69): avc: denied { create } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.699124][ T300] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.701082][ T36] audit: type=1400 audit(1774900771.560:70): avc: denied { write } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.729817][ T36] audit: type=1400 audit(1774900771.560:71): avc: denied { read } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.742591][ T297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.750185][ T36] audit: type=1400 audit(1774900771.560:72): avc: denied { sys_module } for pid=297 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 24.779838][ T36] audit: type=1400 audit(1774900771.560:73): avc: denied { mounton } for pid=297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.728609][ T303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.332564][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.340114][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.347274][ T341] bridge_slave_0: entered allmulticast mode [ 26.353707][ T341] bridge_slave_0: entered promiscuous mode [ 26.360138][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.367175][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.374290][ T341] bridge_slave_1: entered allmulticast mode [ 26.380710][ T341] bridge_slave_1: entered promiscuous mode [ 26.426341][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.433609][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.440999][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.448037][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.475197][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.482515][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.492210][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.499243][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.508654][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.515730][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.541020][ T341] veth0_vlan: entered promiscuous mode [ 26.551472][ T341] veth1_macvtap: entered promiscuous mode [ 26.603954][ T13] bridge_slave_1: left allmulticast mode [ 26.609631][ T13] bridge_slave_1: left promiscuous mode [ 26.615552][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.623787][ T13] bridge_slave_0: left allmulticast mode [ 26.629428][ T13] bridge_slave_0: left promiscuous mode [ 26.635265][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.805433][ T13] veth1_macvtap: left promiscuous mode [ 26.811004][ T13] veth0_vlan: left promiscuous mode 2026/03/30 19:59:34 executed programs: 0 [ 27.164017][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.171115][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.178175][ T367] bridge_slave_0: entered allmulticast mode [ 27.184558][ T367] bridge_slave_0: entered promiscuous mode [ 27.191032][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.198152][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.205611][ T367] bridge_slave_1: entered allmulticast mode [ 27.212041][ T367] bridge_slave_1: entered promiscuous mode [ 27.258215][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.265275][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.272645][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.279865][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.303825][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.311449][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.320916][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.327958][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.336877][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.343935][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.367297][ T367] veth0_vlan: entered promiscuous mode [ 27.377861][ T367] veth1_macvtap: entered promiscuous mode [ 27.407733][ T367] ------------[ cut here ]------------ [ 27.413282][ T367] WARNING: CPU: 0 PID: 367 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 27.421237][ T367] Modules linked in: [ 27.425251][ T367] CPU: 0 UID: 0 PID: 367 Comm: syz-executor Not tainted syzkaller #0 f4a4c1113d1fc99d80605e766864695bb8e4828c [ 27.436943][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 27.447168][ T367] RIP: 0010:drop_nlink+0xce/0x110 [ 27.452257][ T367] Code: 04 00 00 be 08 00 00 00 e8 df 15 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 e5 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 27.472183][ T367] RSP: 0018:ffffc900010efc60 EFLAGS: 00010293 [ 27.478259][ T367] RAX: ffffffff81f1c4be RBX: ffff888114b147e0 RCX: ffff88811517a600 [ 27.486282][ T367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.494319][ T367] RBP: ffffc900010efc88 R08: 0000000000000003 R09: 0000000000000004 [ 27.502425][ T367] R10: dffffc0000000000 R11: fffff5200021df7c R12: dffffc0000000000 [ 27.510465][ T367] R13: 1ffff11022962905 R14: ffff888114b14828 R15: 0000000000000000 [ 27.518454][ T367] FS: 0000555583e48500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 27.527417][ T367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.534051][ T367] CR2: 0000555583e6b948 CR3: 000000010c7f2000 CR4: 00000000003526b0 [ 27.542062][ T367] Call Trace: [ 27.545351][ T367] [ 27.548287][ T367] shmem_rmdir+0x5f/0x90 [ 27.552585][ T367] vfs_rmdir+0x3e3/0x560 [ 27.556941][ T367] incfs_kill_sb+0x109/0x230 [ 27.561576][ T367] deactivate_locked_super+0xd5/0x2a0 [ 27.566964][ T367] deactivate_super+0xb8/0xe0 [ 27.571662][ T367] cleanup_mnt+0x406/0x4a0 [ 27.576092][ T367] __cleanup_mnt+0x1d/0x40 [ 27.580534][ T367] task_work_run+0x1e5/0x260 [ 27.585144][ T367] ? __cfi_task_work_run+0x10/0x10 [ 27.590280][ T367] ? __x64_sys_umount+0x12e/0x180 [ 27.595417][ T367] ? __cfi___x64_sys_umount+0x10/0x10 [ 27.600822][ T367] ? __kasan_check_read+0x15/0x20 [ 27.605892][ T367] resume_user_mode_work+0x35/0x50 [ 27.611055][ T367] syscall_exit_to_user_mode+0x63/0xb0 [ 27.616532][ T367] do_syscall_64+0x63/0xf0 [ 27.620974][ T367] ? clear_bhb_loop+0x50/0xa0 [ 27.625677][ T367] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.631612][ T367] RIP: 0033:0x7f4ee039da57 [ 27.636049][ T367] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 27.655879][ T367] RSP: 002b:00007ffd13df1648 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 27.664345][ T367] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4ee039da57 [ 27.672443][ T367] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd13df1700 [ 27.680456][ T367] RBP: 00007ffd13df1700 R08: 00007ffd13df2700 R09: 00000000ffffffff [ 27.688432][ T367] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd13df2790 [ 27.696422][ T367] R13: 00007f4ee0432048 R14: 0000000000006af7 R15: 00007ffd13df27d0 [ 27.704434][ T367] [ 27.707458][ T367] ---[ end trace 0000000000000000 ]--- [ 27.713072][ T367] ================================================================== [ 27.721162][ T367] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 27.727410][ T367] Write of size 4 at addr 0000000000000168 by task syz-executor/367 [ 27.735371][ T367] [ 27.737690][ T367] CPU: 1 UID: 0 PID: 367 Comm: syz-executor Tainted: G W syzkaller #0 f4a4c1113d1fc99d80605e766864695bb8e4828c [ 27.737712][ T367] Tainted: [W]=WARN [ 27.737717][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 27.737724][ T367] Call Trace: [ 27.737729][ T367] [ 27.737734][ T367] __dump_stack+0x21/0x30 [ 27.737752][ T367] dump_stack_lvl+0x140/0x1c0 [ 27.737767][ T367] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.737789][ T367] print_report+0x3d/0x70 [ 27.737804][ T367] kasan_report+0x162/0x1a0 [ 27.737817][ T367] ? ihold+0x24/0x70 [ 27.737828][ T367] ? _raw_spin_unlock+0x45/0x60 [ 27.737844][ T367] ? ihold+0x24/0x70 [ 27.737855][ T367] kasan_check_range+0x25a/0x2b0 [ 27.737867][ T367] __kasan_check_write+0x18/0x20 [ 27.737883][ T367] ihold+0x24/0x70 [ 27.737893][ T367] vfs_rmdir+0x26a/0x560 [ 27.737910][ T367] incfs_kill_sb+0x109/0x230 [ 27.737927][ T367] deactivate_locked_super+0xd5/0x2a0 [ 27.737941][ T367] deactivate_super+0xb8/0xe0 [ 27.737954][ T367] cleanup_mnt+0x406/0x4a0 [ 27.737966][ T367] __cleanup_mnt+0x1d/0x40 [ 27.737977][ T367] task_work_run+0x1e5/0x260 [ 27.737991][ T367] ? __cfi_task_work_run+0x10/0x10 [ 27.738004][ T367] ? __x64_sys_umount+0x12e/0x180 [ 27.738019][ T367] ? __cfi___x64_sys_umount+0x10/0x10 [ 27.738034][ T367] ? __kasan_check_read+0x15/0x20 [ 27.738049][ T367] resume_user_mode_work+0x35/0x50 [ 27.738065][ T367] syscall_exit_to_user_mode+0x63/0xb0 [ 27.738080][ T367] do_syscall_64+0x63/0xf0 [ 27.738095][ T367] ? clear_bhb_loop+0x50/0xa0 [ 27.738112][ T367] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.738128][ T367] RIP: 0033:0x7f4ee039da57 [ 27.738140][ T367] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 27.738151][ T367] RSP: 002b:00007ffd13df1648 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 27.738165][ T367] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4ee039da57 [ 27.738174][ T367] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd13df1700 [ 27.738182][ T367] RBP: 00007ffd13df1700 R08: 00007ffd13df2700 R09: 00000000ffffffff [ 27.738191][ T367] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd13df2790 [ 27.738199][ T367] R13: 00007f4ee0432048 R14: 0000000000006af7 R15: 00007ffd13df27d0 [ 27.738209][ T367] [ 27.738214][ T367] ================================================================== [ 27.983726][ T367] Disabling lock debugging due to kernel taint [ 27.990415][ T367] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 27.998244][ T367] #PF: supervisor write access in kernel mode [ 28.004314][ T367] #PF: error_code(0x0002) - not-present page [ 28.010282][ T367] PGD 800000012b0db067 P4D 800000012b0db067 PUD 0 [ 28.016786][ T367] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 28.022844][ T367] CPU: 1 UID: 0 PID: 367 Comm: syz-executor Tainted: G B W syzkaller #0 f4a4c1113d1fc99d80605e766864695bb8e4828c [ 28.035939][ T367] Tainted: [B]=BAD_PAGE, [W]=WARN [ 28.040948][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 28.051075][ T367] RIP: 0010:ihold+0x2a/0x70 [ 28.055574][ T367] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd dc 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 28.075169][ T367] RSP: 0018:ffffc900010efca0 EFLAGS: 00010246 [ 28.081232][ T367] RAX: ffff88811517a600 RBX: 0000000000000000 RCX: ffff88811517a600 [ 28.089276][ T367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.097237][ T367] RBP: ffffc900010efcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 28.105283][ T367] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff888114b147ec [ 28.113242][ T367] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 28.121215][ T367] FS: 0000555583e48500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 28.130220][ T367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.136798][ T367] CR2: 0000000000000168 CR3: 000000010c7f2000 CR4: 00000000003526b0 [ 28.144771][ T367] Call Trace: [ 28.148039][ T367] [ 28.150968][ T367] vfs_rmdir+0x26a/0x560 [ 28.155216][ T367] incfs_kill_sb+0x109/0x230 [ 28.159817][ T367] deactivate_locked_super+0xd5/0x2a0 [ 28.165194][ T367] deactivate_super+0xb8/0xe0 [ 28.169860][ T367] cleanup_mnt+0x406/0x4a0 [ 28.174265][ T367] __cleanup_mnt+0x1d/0x40 [ 28.178759][ T367] task_work_run+0x1e5/0x260 [ 28.183338][ T367] ? __cfi_task_work_run+0x10/0x10 [ 28.188438][ T367] ? __x64_sys_umount+0x12e/0x180 [ 28.193451][ T367] ? __cfi___x64_sys_umount+0x10/0x10 [ 28.198821][ T367] ? __kasan_check_read+0x15/0x20 [ 28.203897][ T367] resume_user_mode_work+0x35/0x50 [ 28.208999][ T367] syscall_exit_to_user_mode+0x63/0xb0 [ 28.214446][ T367] do_syscall_64+0x63/0xf0 [ 28.218877][ T367] ? clear_bhb_loop+0x50/0xa0 [ 28.223560][ T367] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.229446][ T367] RIP: 0033:0x7f4ee039da57 [ 28.233848][ T367] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 28.253438][ T367] RSP: 002b:00007ffd13df1648 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 28.261841][ T367] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4ee039da57 [ 28.269799][ T367] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd13df1700 [ 28.277845][ T367] RBP: 00007ffd13df1700 R08: 00007ffd13df2700 R09: 00000000ffffffff [ 28.285815][ T367] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd13df2790 [ 28.293779][ T367] R13: 00007f4ee0432048 R14: 0000000000006af7 R15: 00007ffd13df27d0 [ 28.301763][ T367] [ 28.304768][ T367] Modules linked in: [ 28.308645][ T367] CR2: 0000000000000168 [ 28.312791][ T367] ---[ end trace 0000000000000000 ]--- [ 28.318239][ T367] RIP: 0010:ihold+0x2a/0x70 [ 28.322768][ T367] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd dc 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 28.342885][ T367] RSP: 0018:ffffc900010efca0 EFLAGS: 00010246 [ 28.348949][ T367] RAX: ffff88811517a600 RBX: 0000000000000000 RCX: ffff88811517a600 [ 28.356997][ T367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.364968][ T367] RBP: ffffc900010efcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 28.372938][ T367] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff888114b147ec [ 28.380912][ T367] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 28.388871][ T367] FS: 0000555583e48500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 28.397798][ T367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.404390][ T367] CR2: 0000000000000168 CR3: 000000010c7f2000 CR4: 00000000003526b0 [ 28.412381][ T367] Kernel panic - not syncing: Fatal exception [ 28.419072][ T367] Kernel Offset: disabled [ 28.423393][ T367] Rebooting in 86400 seconds..