Warning: Permanently added '10.128.0.7' (ED25519) to the list of known hosts. 2026/01/21 10:54:33 parsed 1 programs [ 22.851739][ T36] audit: type=1400 audit(1768992873.280:64): avc: denied { node_bind } for pid=290 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 23.744642][ T36] audit: type=1400 audit(1768992874.170:65): avc: denied { mounton } for pid=297 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.745633][ T297] cgroup: Unknown subsys name 'net' [ 23.767544][ T36] audit: type=1400 audit(1768992874.170:66): avc: denied { mount } for pid=297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.794860][ T36] audit: type=1400 audit(1768992874.200:67): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.795096][ T297] cgroup: Unknown subsys name 'devices' [ 23.981688][ T297] cgroup: Unknown subsys name 'hugetlb' [ 23.987392][ T297] cgroup: Unknown subsys name 'rlimit' [ 24.145865][ T36] audit: type=1400 audit(1768992874.570:68): avc: denied { setattr } for pid=297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.169041][ T36] audit: type=1400 audit(1768992874.570:69): avc: denied { create } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.183184][ T301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.189561][ T36] audit: type=1400 audit(1768992874.570:70): avc: denied { write } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.218285][ T36] audit: type=1400 audit(1768992874.570:71): avc: denied { read } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.238448][ T36] audit: type=1400 audit(1768992874.570:72): avc: denied { sys_module } for pid=297 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 24.259436][ T36] audit: type=1400 audit(1768992874.570:73): avc: denied { mounton } for pid=297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.434659][ T297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.304474][ T303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.713439][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.720629][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.727692][ T339] bridge_slave_0: entered allmulticast mode [ 25.734040][ T339] bridge_slave_0: entered promiscuous mode [ 25.740411][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.747425][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.754652][ T339] bridge_slave_1: entered allmulticast mode [ 25.760818][ T339] bridge_slave_1: entered promiscuous mode [ 25.799655][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.806830][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.814176][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.821222][ T339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.838575][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.845990][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.855730][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.862807][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.881714][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.888770][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.900134][ T339] veth0_vlan: entered promiscuous mode [ 25.910863][ T339] veth1_macvtap: entered promiscuous mode [ 25.958698][ T12] bridge_slave_1: left allmulticast mode [ 25.964438][ T12] bridge_slave_1: left promiscuous mode [ 25.970375][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.978002][ T12] bridge_slave_0: left allmulticast mode [ 25.984454][ T12] bridge_slave_0: left promiscuous mode [ 25.990211][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.131719][ T12] veth1_macvtap: left promiscuous mode [ 26.137271][ T12] veth0_vlan: left promiscuous mode 2026/01/21 10:54:36 executed programs: 0 [ 26.416070][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.423166][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.430425][ T369] bridge_slave_0: entered allmulticast mode [ 26.436694][ T369] bridge_slave_0: entered promiscuous mode [ 26.443147][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.450278][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.457361][ T369] bridge_slave_1: entered allmulticast mode [ 26.464102][ T369] bridge_slave_1: entered promiscuous mode [ 26.519119][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.526203][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.533495][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.540529][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.559412][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.566754][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.576966][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.584041][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.596199][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.603257][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.623881][ T369] veth0_vlan: entered promiscuous mode [ 26.633604][ T369] veth1_macvtap: entered promiscuous mode [ 26.661465][ T369] ------------[ cut here ]------------ [ 26.666961][ T369] WARNING: CPU: 0 PID: 369 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 26.674941][ T369] Modules linked in: [ 26.679040][ T369] CPU: 0 UID: 0 PID: 369 Comm: syz-executor Not tainted syzkaller #0 bfede744b46277b76d69ebe6cb8c22209d769bcb [ 26.690746][ T369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 26.700859][ T369] RIP: 0010:drop_nlink+0xce/0x110 [ 26.705883][ T369] Code: 04 00 00 be 08 00 00 00 e8 0f 1d ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 55 96 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 26.725542][ T369] RSP: 0018:ffffc9000116fc60 EFLAGS: 00010293 [ 26.731644][ T369] RAX: ffffffff81f1303e RBX: ffff888114e55e30 RCX: ffff888107bd0000 [ 26.739613][ T369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.747651][ T369] RBP: ffffc9000116fc88 R08: 0000000000000003 R09: 0000000000000004 [ 26.755777][ T369] R10: dffffc0000000000 R11: fffff5200022df7c R12: dffffc0000000000 [ 26.763809][ T369] R13: 1ffff110229cabcf R14: ffff888114e55e78 R15: 0000000000000000 [ 26.771814][ T369] FS: 000055556ce1f500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 26.780788][ T369] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.787372][ T369] CR2: 000055556ce42948 CR3: 000000011441e000 CR4: 00000000003526b0 [ 26.795402][ T369] Call Trace: [ 26.798674][ T369] [ 26.801723][ T369] shmem_rmdir+0x5f/0x90 [ 26.805984][ T369] vfs_rmdir+0x3e0/0x560 [ 26.810304][ T369] incfs_kill_sb+0x109/0x230 [ 26.814904][ T369] deactivate_locked_super+0xd8/0x2a0 [ 26.820316][ T369] deactivate_super+0xb8/0xe0 [ 26.824995][ T369] cleanup_mnt+0x406/0x4a0 [ 26.829402][ T369] __cleanup_mnt+0x1d/0x40 [ 26.833847][ T369] task_work_run+0x1e5/0x260 [ 26.838435][ T369] ? __cfi_task_work_run+0x10/0x10 [ 26.843614][ T369] ? __x64_sys_umount+0x12e/0x180 [ 26.848644][ T369] ? __cfi___x64_sys_umount+0x10/0x10 [ 26.854049][ T369] ? __kasan_check_read+0x15/0x20 [ 26.859075][ T369] resume_user_mode_work+0x35/0x50 [ 26.864230][ T369] syscall_exit_to_user_mode+0x63/0xb0 [ 26.869784][ T369] do_syscall_64+0x63/0xf0 [ 26.874231][ T369] ? clear_bhb_loop+0x50/0xa0 [ 26.878904][ T369] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.884848][ T369] RIP: 0033:0x7fad0e99bf17 [ 26.889272][ T369] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 26.908908][ T369] RSP: 002b:00007fff1d6ff108 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 26.917370][ T369] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fad0e99bf17 [ 26.925432][ T369] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff1d6ff1c0 [ 26.933492][ T369] RBP: 00007fff1d6ff1c0 R08: 00007fff1d7001c0 R09: 00000000ffffffff [ 26.941526][ T369] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff1d700250 [ 26.949757][ T369] R13: 00007fad0ea0471f R14: 0000000000006810 R15: 00007fff1d700290 [ 26.957756][ T369] [ 26.960819][ T369] ---[ end trace 0000000000000000 ]--- [ 26.966426][ T369] ================================================================== [ 26.974502][ T369] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 26.980734][ T369] Write of size 4 at addr 0000000000000168 by task syz-executor/369 [ 26.988702][ T369] [ 26.991007][ T369] CPU: 1 UID: 0 PID: 369 Comm: syz-executor Tainted: G W syzkaller #0 bfede744b46277b76d69ebe6cb8c22209d769bcb [ 26.991024][ T369] Tainted: [W]=WARN [ 26.991028][ T369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 26.991034][ T369] Call Trace: [ 26.991039][ T369] [ 26.991044][ T369] __dump_stack+0x21/0x30 [ 26.991059][ T369] dump_stack_lvl+0x140/0x1c0 [ 26.991070][ T369] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.991082][ T369] print_report+0x3d/0x70 [ 26.991093][ T369] kasan_report+0x162/0x1a0 [ 26.991107][ T369] ? ihold+0x24/0x70 [ 26.991119][ T369] ? _raw_spin_unlock+0x45/0x60 [ 26.991131][ T369] ? ihold+0x24/0x70 [ 26.991142][ T369] kasan_check_range+0x25a/0x2b0 [ 26.991155][ T369] __kasan_check_write+0x18/0x20 [ 26.991166][ T369] ihold+0x24/0x70 [ 26.991177][ T369] vfs_rmdir+0x26a/0x560 [ 26.991187][ T369] incfs_kill_sb+0x109/0x230 [ 26.991198][ T369] deactivate_locked_super+0xd8/0x2a0 [ 26.991208][ T369] deactivate_super+0xb8/0xe0 [ 26.991217][ T369] cleanup_mnt+0x406/0x4a0 [ 26.991230][ T369] __cleanup_mnt+0x1d/0x40 [ 26.991241][ T369] task_work_run+0x1e5/0x260 [ 26.991253][ T369] ? __cfi_task_work_run+0x10/0x10 [ 26.991262][ T369] ? __x64_sys_umount+0x12e/0x180 [ 26.991272][ T369] ? __cfi___x64_sys_umount+0x10/0x10 [ 26.991282][ T369] ? __kasan_check_read+0x15/0x20 [ 26.991292][ T369] resume_user_mode_work+0x35/0x50 [ 26.991305][ T369] syscall_exit_to_user_mode+0x63/0xb0 [ 26.991321][ T369] do_syscall_64+0x63/0xf0 [ 26.991333][ T369] ? clear_bhb_loop+0x50/0xa0 [ 26.991345][ T369] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.991355][ T369] RIP: 0033:0x7fad0e99bf17 [ 26.991366][ T369] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 26.991374][ T369] RSP: 002b:00007fff1d6ff108 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 26.991385][ T369] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fad0e99bf17 [ 26.991392][ T369] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff1d6ff1c0 [ 26.991398][ T369] RBP: 00007fff1d6ff1c0 R08: 00007fff1d7001c0 R09: 00000000ffffffff [ 26.991405][ T369] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff1d700250 [ 26.991412][ T369] R13: 00007fad0ea0471f R14: 0000000000006810 R15: 00007fff1d700290 [ 26.991420][ T369] [ 26.991423][ T369] ================================================================== [ 27.236238][ T369] Disabling lock debugging due to kernel taint [ 27.242834][ T369] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 27.250687][ T369] #PF: supervisor write access in kernel mode [ 27.256827][ T369] #PF: error_code(0x0002) - not-present page [ 27.262784][ T369] PGD 8000000114e5f067 P4D 8000000114e5f067 PUD 0 [ 27.269276][ T369] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 27.275330][ T369] CPU: 0 UID: 0 PID: 369 Comm: syz-executor Tainted: G B W syzkaller #0 bfede744b46277b76d69ebe6cb8c22209d769bcb [ 27.288593][ T369] Tainted: [B]=BAD_PAGE, [W]=WARN [ 27.293661][ T369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 27.303705][ T369] RIP: 0010:ihold+0x2a/0x70 [ 27.308211][ T369] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 4c 96 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 cc 13 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 27.327805][ T369] RSP: 0018:ffffc9000116fca0 EFLAGS: 00010246 [ 27.333875][ T369] RAX: ffff888107bd0000 RBX: 0000000000000000 RCX: ffff888107bd0000 [ 27.341834][ T369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.349802][ T369] RBP: ffffc9000116fcb0 R08: ffffffff88b86947 R09: 1ffffffff1170d28 [ 27.357770][ T369] R10: dffffc0000000000 R11: fffffbfff1170d29 R12: ffff888114e55e3c [ 27.365726][ T369] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 27.373699][ T369] FS: 000055556ce1f500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 27.382612][ T369] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.389180][ T369] CR2: 0000000000000168 CR3: 000000011441e000 CR4: 00000000003526b0 [ 27.397137][ T369] Call Trace: [ 27.400398][ T369] [ 27.403311][ T369] vfs_rmdir+0x26a/0x560 [ 27.407545][ T369] incfs_kill_sb+0x109/0x230 [ 27.412120][ T369] deactivate_locked_super+0xd8/0x2a0 [ 27.417479][ T369] deactivate_super+0xb8/0xe0 [ 27.422314][ T369] cleanup_mnt+0x406/0x4a0 [ 27.426719][ T369] __cleanup_mnt+0x1d/0x40 [ 27.431127][ T369] task_work_run+0x1e5/0x260 [ 27.435726][ T369] ? __cfi_task_work_run+0x10/0x10 [ 27.440825][ T369] ? __x64_sys_umount+0x12e/0x180 [ 27.445837][ T369] ? __cfi___x64_sys_umount+0x10/0x10 [ 27.451280][ T369] ? __kasan_check_read+0x15/0x20 [ 27.456296][ T369] resume_user_mode_work+0x35/0x50 [ 27.461402][ T369] syscall_exit_to_user_mode+0x63/0xb0 [ 27.466870][ T369] do_syscall_64+0x63/0xf0 [ 27.471299][ T369] ? clear_bhb_loop+0x50/0xa0 [ 27.475981][ T369] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.481880][ T369] RIP: 0033:0x7fad0e99bf17 [ 27.486315][ T369] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 27.506001][ T369] RSP: 002b:00007fff1d6ff108 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 27.514405][ T369] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fad0e99bf17 [ 27.522365][ T369] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff1d6ff1c0 [ 27.530319][ T369] RBP: 00007fff1d6ff1c0 R08: 00007fff1d7001c0 R09: 00000000ffffffff [ 27.538275][ T369] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff1d700250 [ 27.546230][ T369] R13: 00007fad0ea0471f R14: 0000000000006810 R15: 00007fff1d700290 [ 27.554279][ T369] [ 27.557371][ T369] Modules linked in: [ 27.561260][ T369] CR2: 0000000000000168 [ 27.565393][ T369] ---[ end trace 0000000000000000 ]--- [ 27.570860][ T369] RIP: 0010:ihold+0x2a/0x70 [ 27.575359][ T369] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 4c 96 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 cc 13 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 27.594947][ T369] RSP: 0018:ffffc9000116fca0 EFLAGS: 00010246 [ 27.601000][ T369] RAX: ffff888107bd0000 RBX: 0000000000000000 RCX: ffff888107bd0000 [ 27.609040][ T369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.616994][ T369] RBP: ffffc9000116fcb0 R08: ffffffff88b86947 R09: 1ffffffff1170d28 [ 27.624950][ T369] R10: dffffc0000000000 R11: fffffbfff1170d29 R12: ffff888114e55e3c [ 27.632904][ T369] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 27.640858][ T369] FS: 000055556ce1f500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 27.649779][ T369] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.656345][ T369] CR2: 0000000000000168 CR3: 000000011441e000 CR4: 00000000003526b0 [ 27.664304][ T369] Kernel panic - not syncing: Fatal exception [ 27.670761][ T369] Kernel Offset: disabled [ 27.675083][ T369] Rebooting in 86400 seconds..