Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts. 2026/02/08 08:47:31 parsed 1 programs [ 26.165804][ T36] audit: type=1400 audit(1770540451.860:64): avc: denied { node_bind } for pid=290 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 27.210726][ T36] audit: type=1400 audit(1770540452.910:65): avc: denied { mounton } for pid=297 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.211791][ T297] cgroup: Unknown subsys name 'net' [ 27.233667][ T36] audit: type=1400 audit(1770540452.910:66): avc: denied { mount } for pid=297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.261125][ T36] audit: type=1400 audit(1770540452.930:67): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.261300][ T297] cgroup: Unknown subsys name 'devices' [ 27.422531][ T297] cgroup: Unknown subsys name 'hugetlb' [ 27.428145][ T297] cgroup: Unknown subsys name 'rlimit' [ 27.607547][ T36] audit: type=1400 audit(1770540453.300:68): avc: denied { setattr } for pid=297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.630843][ T36] audit: type=1400 audit(1770540453.300:69): avc: denied { create } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.639653][ T300] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.651570][ T36] audit: type=1400 audit(1770540453.300:70): avc: denied { write } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.680326][ T36] audit: type=1400 audit(1770540453.300:71): avc: denied { read } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.700735][ T36] audit: type=1400 audit(1770540453.300:72): avc: denied { sys_module } for pid=297 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 27.721724][ T36] audit: type=1400 audit(1770540453.300:73): avc: denied { mounton } for pid=297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.761645][ T297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.717962][ T303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.408737][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.415854][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.423165][ T346] bridge_slave_0: entered allmulticast mode [ 29.429377][ T346] bridge_slave_0: entered promiscuous mode [ 29.435920][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.443003][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.450615][ T346] bridge_slave_1: entered allmulticast mode [ 29.457055][ T346] bridge_slave_1: entered promiscuous mode [ 29.497486][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.504573][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.511869][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.518893][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.542489][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.550297][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.560338][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.567411][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.582396][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.589440][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.612333][ T346] veth0_vlan: entered promiscuous mode [ 29.624792][ T346] veth1_macvtap: entered promiscuous mode [ 29.714167][ T46] bridge_slave_1: left allmulticast mode [ 29.719896][ T46] bridge_slave_1: left promiscuous mode [ 29.725566][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.733445][ T46] bridge_slave_0: left allmulticast mode [ 29.739109][ T46] bridge_slave_0: left promiscuous mode [ 29.744953][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.871475][ T46] veth1_macvtap: left promiscuous mode [ 29.877147][ T46] veth0_vlan: left promiscuous mode 2026/02/08 08:47:35 executed programs: 0 [ 30.167718][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.174927][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.182217][ T373] bridge_slave_0: entered allmulticast mode [ 30.188514][ T373] bridge_slave_0: entered promiscuous mode [ 30.194863][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.201947][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.209178][ T373] bridge_slave_1: entered allmulticast mode [ 30.215775][ T373] bridge_slave_1: entered promiscuous mode [ 30.258248][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.265346][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.272761][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.279796][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.298918][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.306250][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.317723][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.324797][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.332454][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.339498][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.364029][ T373] veth0_vlan: entered promiscuous mode [ 30.374815][ T373] veth1_macvtap: entered promiscuous mode [ 30.403636][ T373] ------------[ cut here ]------------ [ 30.409134][ T373] WARNING: CPU: 1 PID: 373 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 30.417184][ T373] Modules linked in: [ 30.421132][ T373] CPU: 1 UID: 0 PID: 373 Comm: syz-executor Not tainted syzkaller #0 e538f3f6a543b135812147031d083fd1f2699041 [ 30.432792][ T373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 30.442888][ T373] RIP: 0010:drop_nlink+0xce/0x110 [ 30.447928][ T373] Code: 04 00 00 be 08 00 00 00 e8 bf 25 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 52 57 96 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 30.467745][ T373] RSP: 0018:ffffc90001adfc60 EFLAGS: 00010293 [ 30.474000][ T373] RAX: ffffffff81f145be RBX: ffff8881159a30c8 RCX: ffff888123ac8000 [ 30.482051][ T373] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.490161][ T373] RBP: ffffc90001adfc88 R08: 0000000000000003 R09: 0000000000000004 [ 30.498137][ T373] R10: dffffc0000000000 R11: fffff5200035bf7c R12: dffffc0000000000 [ 30.506257][ T373] R13: 1ffff11022b34622 R14: ffff8881159a3110 R15: 0000000000000000 [ 30.514275][ T373] FS: 0000555582dd9500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.523251][ T373] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.529956][ T373] CR2: 0000555582dfc948 CR3: 0000000113768000 CR4: 00000000003526b0 [ 30.538117][ T373] Call Trace: [ 30.541439][ T373] [ 30.544393][ T373] shmem_rmdir+0x5f/0x90 [ 30.548630][ T373] vfs_rmdir+0x3e3/0x560 [ 30.552946][ T373] incfs_kill_sb+0x109/0x230 [ 30.557568][ T373] deactivate_locked_super+0xd5/0x2a0 [ 30.563019][ T373] deactivate_super+0xb8/0xe0 [ 30.567754][ T373] cleanup_mnt+0x406/0x4a0 [ 30.572256][ T373] __cleanup_mnt+0x1d/0x40 [ 30.576702][ T373] task_work_run+0x1e5/0x260 [ 30.581916][ T373] ? __cfi_task_work_run+0x10/0x10 [ 30.587056][ T373] ? __x64_sys_umount+0x12e/0x180 [ 30.592116][ T373] ? __cfi___x64_sys_umount+0x10/0x10 [ 30.597501][ T373] ? __kasan_check_read+0x15/0x20 [ 30.602668][ T373] resume_user_mode_work+0x35/0x50 [ 30.607811][ T373] syscall_exit_to_user_mode+0x63/0xb0 [ 30.613509][ T373] do_syscall_64+0x63/0xf0 [ 30.617946][ T373] ? clear_bhb_loop+0x50/0xa0 [ 30.622670][ T373] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.628579][ T373] RIP: 0033:0x7fa5e6b9c117 [ 30.633077][ T373] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 30.652964][ T373] RSP: 002b:00007ffe6c663728 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 30.661450][ T373] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa5e6b9c117 [ 30.669611][ T373] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6c6637e0 [ 30.677651][ T373] RBP: 00007ffe6c6637e0 R08: 00007ffe6c6647e0 R09: 00000000ffffffff [ 30.685701][ T373] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe6c664870 [ 30.693768][ T373] R13: 00007fa5e6c0471f R14: 00000000000076b4 R15: 00007ffe6c6648b0 [ 30.701831][ T373] [ 30.704855][ T373] ---[ end trace 0000000000000000 ]--- [ 30.710633][ T373] ================================================================== [ 30.718798][ T373] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 30.725072][ T373] Write of size 4 at addr 0000000000000168 by task syz-executor/373 [ 30.733037][ T373] [ 30.735352][ T373] CPU: 0 UID: 0 PID: 373 Comm: syz-executor Tainted: G W syzkaller #0 e538f3f6a543b135812147031d083fd1f2699041 [ 30.735373][ T373] Tainted: [W]=WARN [ 30.735377][ T373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 30.735384][ T373] Call Trace: [ 30.735389][ T373] [ 30.735394][ T373] __dump_stack+0x21/0x30 [ 30.735416][ T373] dump_stack_lvl+0x140/0x1c0 [ 30.735430][ T373] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.735445][ T373] print_report+0x3d/0x70 [ 30.735457][ T373] kasan_report+0x162/0x1a0 [ 30.735474][ T373] ? ihold+0x24/0x70 [ 30.735488][ T373] ? _raw_spin_unlock+0x45/0x60 [ 30.735504][ T373] ? ihold+0x24/0x70 [ 30.735517][ T373] kasan_check_range+0x25a/0x2b0 [ 30.735533][ T373] __kasan_check_write+0x18/0x20 [ 30.735546][ T373] ihold+0x24/0x70 [ 30.735559][ T373] vfs_rmdir+0x26a/0x560 [ 30.735571][ T373] incfs_kill_sb+0x109/0x230 [ 30.735584][ T373] deactivate_locked_super+0xd5/0x2a0 [ 30.735595][ T373] deactivate_super+0xb8/0xe0 [ 30.735606][ T373] cleanup_mnt+0x406/0x4a0 [ 30.735621][ T373] __cleanup_mnt+0x1d/0x40 [ 30.735635][ T373] task_work_run+0x1e5/0x260 [ 30.735648][ T373] ? __cfi_task_work_run+0x10/0x10 [ 30.735659][ T373] ? __x64_sys_umount+0x12e/0x180 [ 30.735671][ T373] ? __cfi___x64_sys_umount+0x10/0x10 [ 30.735683][ T373] ? __kasan_check_read+0x15/0x20 [ 30.735696][ T373] resume_user_mode_work+0x35/0x50 [ 30.735710][ T373] syscall_exit_to_user_mode+0x63/0xb0 [ 30.735724][ T373] do_syscall_64+0x63/0xf0 [ 30.735738][ T373] ? clear_bhb_loop+0x50/0xa0 [ 30.735753][ T373] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.735767][ T373] RIP: 0033:0x7fa5e6b9c117 [ 30.735779][ T373] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 30.735789][ T373] RSP: 002b:00007ffe6c663728 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 30.735803][ T373] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa5e6b9c117 [ 30.735811][ T373] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6c6637e0 [ 30.735818][ T373] RBP: 00007ffe6c6637e0 R08: 00007ffe6c6647e0 R09: 00000000ffffffff [ 30.735826][ T373] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe6c664870 [ 30.735834][ T373] R13: 00007fa5e6c0471f R14: 00000000000076b4 R15: 00007ffe6c6648b0 [ 30.735843][ T373] [ 30.735848][ T373] ================================================================== [ 30.982116][ T373] Disabling lock debugging due to kernel taint [ 30.988332][ T373] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 30.996191][ T373] #PF: supervisor write access in kernel mode [ 31.002243][ T373] #PF: error_code(0x0002) - not-present page [ 31.008205][ T373] PGD 8000000115b57067 P4D 8000000115b57067 PUD 0 [ 31.014704][ T373] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 31.020755][ T373] CPU: 1 UID: 0 PID: 373 Comm: syz-executor Tainted: G B W syzkaller #0 e538f3f6a543b135812147031d083fd1f2699041 [ 31.033931][ T373] Tainted: [B]=BAD_PAGE, [W]=WARN [ 31.038933][ T373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 31.049063][ T373] RIP: 0010:ihold+0x2a/0x70 [ 31.053586][ T373] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 3d 4e 96 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 7c 1c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 4d [ 31.073184][ T373] RSP: 0018:ffffc90001adfca0 EFLAGS: 00010246 [ 31.079239][ T373] RAX: ffff888123ac8000 RBX: 0000000000000000 RCX: ffff888123ac8000 [ 31.087225][ T373] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.095963][ T373] RBP: ffffc90001adfcb0 R08: ffffffff88b8c947 R09: 1ffffffff1171928 [ 31.104788][ T373] R10: dffffc0000000000 R11: fffffbfff1171929 R12: ffff8881159a30d4 [ 31.112839][ T373] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 31.120975][ T373] FS: 0000555582dd9500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 31.129890][ T373] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.136459][ T373] CR2: 0000000000000168 CR3: 0000000113768000 CR4: 00000000003526b0 [ 31.144444][ T373] Call Trace: [ 31.147735][ T373] [ 31.150667][ T373] vfs_rmdir+0x26a/0x560 [ 31.154917][ T373] incfs_kill_sb+0x109/0x230 [ 31.159518][ T373] deactivate_locked_super+0xd5/0x2a0 [ 31.164903][ T373] deactivate_super+0xb8/0xe0 [ 31.169668][ T373] cleanup_mnt+0x406/0x4a0 [ 31.174079][ T373] __cleanup_mnt+0x1d/0x40 [ 31.178503][ T373] task_work_run+0x1e5/0x260 [ 31.184091][ T373] ? __cfi_task_work_run+0x10/0x10 [ 31.189272][ T373] ? __x64_sys_umount+0x12e/0x180 [ 31.194318][ T373] ? __cfi___x64_sys_umount+0x10/0x10 [ 31.199697][ T373] ? __kasan_check_read+0x15/0x20 [ 31.204728][ T373] resume_user_mode_work+0x35/0x50 [ 31.209849][ T373] syscall_exit_to_user_mode+0x63/0xb0 [ 31.215301][ T373] do_syscall_64+0x63/0xf0 [ 31.219707][ T373] ? clear_bhb_loop+0x50/0xa0 [ 31.224388][ T373] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.230299][ T373] RIP: 0033:0x7fa5e6b9c117 [ 31.234714][ T373] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 31.254485][ T373] RSP: 002b:00007ffe6c663728 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 31.262894][ T373] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa5e6b9c117 [ 31.270950][ T373] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6c6637e0 [ 31.279005][ T373] RBP: 00007ffe6c6637e0 R08: 00007ffe6c6647e0 R09: 00000000ffffffff [ 31.286982][ T373] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe6c664870 [ 31.295117][ T373] R13: 00007fa5e6c0471f R14: 00000000000076b4 R15: 00007ffe6c6648b0 [ 31.303078][ T373] [ 31.306087][ T373] Modules linked in: [ 31.309975][ T373] CR2: 0000000000000168 [ 31.314111][ T373] ---[ end trace 0000000000000000 ]--- [ 31.319582][ T373] RIP: 0010:ihold+0x2a/0x70 [ 31.324614][ T373] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 3d 4e 96 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 7c 1c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 4d [ 31.344222][ T373] RSP: 0018:ffffc90001adfca0 EFLAGS: 00010246 [ 31.350296][ T373] RAX: ffff888123ac8000 RBX: 0000000000000000 RCX: ffff888123ac8000 [ 31.358440][ T373] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.366536][ T373] RBP: ffffc90001adfcb0 R08: ffffffff88b8c947 R09: 1ffffffff1171928 [ 31.374509][ T373] R10: dffffc0000000000 R11: fffffbfff1171929 R12: ffff8881159a30d4 [ 31.382483][ T373] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 31.390563][ T373] FS: 0000555582dd9500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 31.399693][ T373] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.406451][ T373] CR2: 0000000000000168 CR3: 0000000113768000 CR4: 00000000003526b0 [ 31.414530][ T373] Kernel panic - not syncing: Fatal exception [ 31.421162][ T373] Kernel Offset: disabled [ 31.425510][ T373] Rebooting in 86400 seconds..