Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. 2026/04/11 19:36:23 parsed 1 programs [ 27.721566][ T36] audit: type=1400 audit(1775936183.340:64): avc: denied { node_bind } for pid=291 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 29.282357][ T36] audit: type=1400 audit(1775936184.900:65): avc: denied { mounton } for pid=297 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.286288][ T297] cgroup: Unknown subsys name 'net' [ 29.305247][ T36] audit: type=1400 audit(1775936184.900:66): avc: denied { mount } for pid=297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.333012][ T36] audit: type=1400 audit(1775936184.930:67): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.333563][ T297] cgroup: Unknown subsys name 'devices' [ 29.473235][ T297] cgroup: Unknown subsys name 'hugetlb' [ 29.478883][ T297] cgroup: Unknown subsys name 'rlimit' [ 29.585697][ T36] audit: type=1400 audit(1775936185.200:68): avc: denied { setattr } for pid=297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.609572][ T36] audit: type=1400 audit(1775936185.200:69): avc: denied { create } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.630315][ T36] audit: type=1400 audit(1775936185.200:70): avc: denied { write } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.650632][ T36] audit: type=1400 audit(1775936185.200:71): avc: denied { read } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.666458][ T301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.671773][ T36] audit: type=1400 audit(1775936185.200:72): avc: denied { sys_module } for pid=297 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 29.700559][ T36] audit: type=1400 audit(1775936185.210:73): avc: denied { mounton } for pid=297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.730392][ T297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.714017][ T304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.289874][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.297008][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.304309][ T331] bridge_slave_0: entered allmulticast mode [ 31.310685][ T331] bridge_slave_0: entered promiscuous mode [ 31.317279][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.324430][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.331667][ T331] bridge_slave_1: entered allmulticast mode [ 31.338153][ T331] bridge_slave_1: entered promiscuous mode [ 31.391360][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.398438][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.405929][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.413028][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.435114][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.443056][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.453730][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.460846][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.470772][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.477858][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.505515][ T331] veth0_vlan: entered promiscuous mode [ 31.517738][ T331] veth1_macvtap: entered promiscuous mode [ 31.584527][ T13] bridge_slave_1: left allmulticast mode [ 31.590268][ T13] bridge_slave_1: left promiscuous mode [ 31.595969][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.603927][ T13] bridge_slave_0: left allmulticast mode [ 31.609683][ T13] bridge_slave_0: left promiscuous mode [ 31.615454][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.774851][ T13] veth1_macvtap: left promiscuous mode [ 31.787051][ T13] veth0_vlan: left promiscuous mode 2026/04/11 19:36:27 executed programs: 0 [ 32.314990][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.322127][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.329309][ T366] bridge_slave_0: entered allmulticast mode [ 32.336082][ T366] bridge_slave_0: entered promiscuous mode [ 32.342698][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.349745][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.357278][ T366] bridge_slave_1: entered allmulticast mode [ 32.363703][ T366] bridge_slave_1: entered promiscuous mode [ 32.416064][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.423784][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.431136][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.438189][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.459297][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.466768][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.478090][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.485243][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.494688][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.501804][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.529379][ T366] veth0_vlan: entered promiscuous mode [ 32.541663][ T366] veth1_macvtap: entered promiscuous mode [ 32.578882][ T366] ------------[ cut here ]------------ [ 32.584475][ T366] WARNING: CPU: 0 PID: 366 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 32.592499][ T366] Modules linked in: [ 32.596454][ T366] CPU: 0 UID: 0 PID: 366 Comm: syz-executor Not tainted syzkaller #0 c4f271c1f416af74072d306bc5476bac4a1aadeb [ 32.608279][ T366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 32.618718][ T366] RIP: 0010:drop_nlink+0xce/0x110 [ 32.623936][ T366] Code: 04 00 00 be 08 00 00 00 e8 df 15 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 c2 d4 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 32.644198][ T366] RSP: 0018:ffffc900039ffc60 EFLAGS: 00010293 [ 32.650372][ T366] RAX: ffffffff81f1d5fe RBX: ffff888115f0f0c8 RCX: ffff8881158d5f00 [ 32.658560][ T366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.667019][ T366] RBP: ffffc900039ffc88 R08: 0000000000000003 R09: 0000000000000004 [ 32.675188][ T366] R10: dffffc0000000000 R11: fffff5200073ff7c R12: dffffc0000000000 [ 32.683273][ T366] R13: 1ffff11022be1e22 R14: ffff888115f0f110 R15: 0000000000000000 [ 32.691330][ T366] FS: 0000555559d60500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.700459][ T366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.707264][ T366] CR2: 0000001b33963fff CR3: 00000001154ea000 CR4: 00000000003526b0 [ 32.715419][ T366] Call Trace: [ 32.718727][ T366] [ 32.721745][ T366] shmem_rmdir+0x5f/0x90 [ 32.726078][ T366] vfs_rmdir+0x3e3/0x560 [ 32.730513][ T366] incfs_kill_sb+0x109/0x230 [ 32.735166][ T366] deactivate_locked_super+0xd5/0x2a0 [ 32.740800][ T366] deactivate_super+0xb8/0xe0 [ 32.745511][ T366] cleanup_mnt+0x406/0x4a0 [ 32.750019][ T366] __cleanup_mnt+0x1d/0x40 [ 32.754503][ T366] task_work_run+0x1e8/0x260 [ 32.759325][ T366] ? __cfi_task_work_run+0x10/0x10 [ 32.764552][ T366] ? __x64_sys_umount+0x12e/0x180 [ 32.769696][ T366] ? __cfi___x64_sys_umount+0x10/0x10 [ 32.775211][ T366] ? __kasan_check_read+0x15/0x20 [ 32.780357][ T366] resume_user_mode_work+0x35/0x50 [ 32.785594][ T366] syscall_exit_to_user_mode+0x63/0xb0 [ 32.791299][ T366] do_syscall_64+0x63/0xf0 [ 32.795766][ T366] ? clear_bhb_loop+0x50/0xa0 [ 32.800534][ T366] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.806563][ T366] RIP: 0033:0x7f63a259da57 [ 32.811077][ T366] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 32.830999][ T366] RSP: 002b:00007ffd9c6d5548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 32.839527][ T366] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f63a259da57 [ 32.847596][ T366] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9c6d5600 [ 32.855984][ T366] RBP: 00007ffd9c6d5600 R08: 00007ffd9c6d6600 R09: 00000000ffffffff [ 32.864323][ T366] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd9c6d6690 [ 32.872426][ T366] R13: 00007f63a2632048 R14: 0000000000007f1f R15: 00007ffd9c6d66d0 [ 32.880518][ T366] [ 32.883666][ T366] ---[ end trace 0000000000000000 ]--- [ 32.889396][ T366] ================================================================== [ 32.897599][ T366] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 32.903882][ T366] Write of size 4 at addr 0000000000000168 by task syz-executor/366 [ 32.911958][ T366] [ 32.914296][ T366] CPU: 1 UID: 0 PID: 366 Comm: syz-executor Tainted: G W syzkaller #0 c4f271c1f416af74072d306bc5476bac4a1aadeb [ 32.914322][ T366] Tainted: [W]=WARN [ 32.914328][ T366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 32.914339][ T366] Call Trace: [ 32.914346][ T366] [ 32.914353][ T366] __dump_stack+0x21/0x30 [ 32.914380][ T366] dump_stack_lvl+0x140/0x1c0 [ 32.914401][ T366] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.914423][ T366] print_report+0x3d/0x70 [ 32.914444][ T366] kasan_report+0x162/0x1a0 [ 32.914463][ T366] ? ihold+0x24/0x70 [ 32.914477][ T366] ? _raw_spin_unlock+0x45/0x60 [ 32.914503][ T366] ? ihold+0x24/0x70 [ 32.914516][ T366] kasan_check_range+0x25a/0x2b0 [ 32.914534][ T366] __kasan_check_write+0x18/0x20 [ 32.914555][ T366] ihold+0x24/0x70 [ 32.914569][ T366] vfs_rmdir+0x26a/0x560 [ 32.914588][ T366] incfs_kill_sb+0x109/0x230 [ 32.914612][ T366] deactivate_locked_super+0xd5/0x2a0 [ 32.914632][ T366] deactivate_super+0xb8/0xe0 [ 32.914650][ T366] cleanup_mnt+0x406/0x4a0 [ 32.914666][ T366] __cleanup_mnt+0x1d/0x40 [ 32.914680][ T366] task_work_run+0x1e8/0x260 [ 32.914700][ T366] ? __cfi_task_work_run+0x10/0x10 [ 32.914718][ T366] ? __x64_sys_umount+0x12e/0x180 [ 32.914739][ T366] ? __cfi___x64_sys_umount+0x10/0x10 [ 32.914759][ T366] ? __kasan_check_read+0x15/0x20 [ 32.914781][ T366] resume_user_mode_work+0x35/0x50 [ 32.914805][ T366] syscall_exit_to_user_mode+0x63/0xb0 [ 32.914827][ T366] do_syscall_64+0x63/0xf0 [ 32.914851][ T366] ? clear_bhb_loop+0x50/0xa0 [ 32.914869][ T366] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.914896][ T366] RIP: 0033:0x7f63a259da57 [ 32.914916][ T366] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 32.914929][ T366] RSP: 002b:00007ffd9c6d5548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 32.914947][ T366] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f63a259da57 [ 32.914958][ T366] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9c6d5600 [ 32.914968][ T366] RBP: 00007ffd9c6d5600 R08: 00007ffd9c6d6600 R09: 00000000ffffffff [ 32.914980][ T366] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd9c6d6690 [ 32.914990][ T366] R13: 00007f63a2632048 R14: 0000000000007f1f R15: 00007ffd9c6d66d0 [ 32.915004][ T366] [ 32.915010][ T366] ================================================================== [ 33.162047][ T366] Disabling lock debugging due to kernel taint [ 33.168270][ T366] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 33.176092][ T366] #PF: supervisor write access in kernel mode [ 33.182347][ T366] #PF: error_code(0x0002) - not-present page [ 33.188344][ T366] PGD 8000000113aed067 P4D 8000000113aed067 PUD 0 [ 33.194869][ T366] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 33.200947][ T366] CPU: 1 UID: 0 PID: 366 Comm: syz-executor Tainted: G B W syzkaller #0 c4f271c1f416af74072d306bc5476bac4a1aadeb [ 33.214148][ T366] Tainted: [B]=BAD_PAGE, [W]=WARN [ 33.219177][ T366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 33.229249][ T366] RIP: 0010:ihold+0x2a/0x70 [ 33.233799][ T366] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 ad cb 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 bd [ 33.253846][ T366] RSP: 0018:ffffc900039ffca0 EFLAGS: 00010246 [ 33.260094][ T366] RAX: ffff8881158d5f00 RBX: 0000000000000000 RCX: ffff8881158d5f00 [ 33.268067][ T366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.276154][ T366] RBP: ffffc900039ffcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 33.284221][ T366] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff888115f0f0d4 [ 33.292198][ T366] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 33.300189][ T366] FS: 0000555559d60500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 33.309129][ T366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.315867][ T366] CR2: 0000000000000168 CR3: 00000001154ea000 CR4: 00000000003526b0 [ 33.323964][ T366] Call Trace: [ 33.327245][ T366] [ 33.330193][ T366] vfs_rmdir+0x26a/0x560 [ 33.334478][ T366] incfs_kill_sb+0x109/0x230 [ 33.339091][ T366] deactivate_locked_super+0xd5/0x2a0 [ 33.344503][ T366] deactivate_super+0xb8/0xe0 [ 33.349382][ T366] cleanup_mnt+0x406/0x4a0 [ 33.353863][ T366] __cleanup_mnt+0x1d/0x40 [ 33.358289][ T366] task_work_run+0x1e8/0x260 [ 33.362991][ T366] ? __cfi_task_work_run+0x10/0x10 [ 33.368105][ T366] ? __x64_sys_umount+0x12e/0x180 [ 33.373229][ T366] ? __cfi___x64_sys_umount+0x10/0x10 [ 33.378611][ T366] ? __kasan_check_read+0x15/0x20 [ 33.383641][ T366] resume_user_mode_work+0x35/0x50 [ 33.388762][ T366] syscall_exit_to_user_mode+0x63/0xb0 [ 33.394259][ T366] do_syscall_64+0x63/0xf0 [ 33.398687][ T366] ? clear_bhb_loop+0x50/0xa0 [ 33.403376][ T366] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.409281][ T366] RIP: 0033:0x7f63a259da57 [ 33.413841][ T366] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 33.433464][ T366] RSP: 002b:00007ffd9c6d5548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 33.441916][ T366] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f63a259da57 [ 33.450019][ T366] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9c6d5600 [ 33.458110][ T366] RBP: 00007ffd9c6d5600 R08: 00007ffd9c6d6600 R09: 00000000ffffffff [ 33.466117][ T366] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd9c6d6690 [ 33.474112][ T366] R13: 00007f63a2632048 R14: 0000000000007f1f R15: 00007ffd9c6d66d0 [ 33.482133][ T366] [ 33.485173][ T366] Modules linked in: [ 33.489117][ T366] CR2: 0000000000000168 [ 33.493284][ T366] ---[ end trace 0000000000000000 ]--- [ 33.498757][ T366] RIP: 0010:ihold+0x2a/0x70 [ 33.503289][ T366] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 ad cb 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 bd [ 33.523364][ T366] RSP: 0018:ffffc900039ffca0 EFLAGS: 00010246 [ 33.529557][ T366] RAX: ffff8881158d5f00 RBX: 0000000000000000 RCX: ffff8881158d5f00 [ 33.537988][ T366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.545995][ T366] RBP: ffffc900039ffcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 33.553992][ T366] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff888115f0f0d4 [ 33.562166][ T366] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 33.570428][ T366] FS: 0000555559d60500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 33.579481][ T366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.586100][ T366] CR2: 0000000000000168 CR3: 00000001154ea000 CR4: 00000000003526b0 [ 33.594114][ T366] Kernel panic - not syncing: Fatal exception [ 33.600777][ T366] Kernel Offset: disabled [ 33.605128][ T366] Rebooting in 86400 seconds..