Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. 2026/05/05 06:15:42 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 55.249419][ T36] audit: type=1400 audit(1777961743.380:106): avc: denied { unlink } for pid=420 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 55.303904][ T420] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.756672][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.764106][ T452] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.771663][ T452] bridge_slave_0: entered allmulticast mode [ 56.778327][ T452] bridge_slave_0: entered promiscuous mode [ 56.785172][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.792223][ T452] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.799861][ T452] bridge_slave_1: entered allmulticast mode [ 56.806665][ T452] bridge_slave_1: entered promiscuous mode [ 56.849420][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.857183][ T452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.865329][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.873158][ T452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.896378][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.903972][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.914877][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.922933][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.933138][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.940755][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.964895][ T452] veth0_vlan: entered promiscuous mode [ 56.976363][ T452] veth1_macvtap: entered promiscuous mode [ 57.027173][ T13] bridge_slave_1: left allmulticast mode [ 57.033677][ T13] bridge_slave_1: left promiscuous mode [ 57.040171][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.049383][ T13] bridge_slave_0: left allmulticast mode [ 57.056292][ T13] bridge_slave_0: left promiscuous mode [ 57.062714][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.168059][ T13] veth1_macvtap: left promiscuous mode [ 57.173911][ T13] veth0_vlan: left promiscuous mode [ 57.306124][ T36] audit: type=1401 audit(1777961745.440:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 57.406453][ T36] audit: type=1400 audit(1777961745.540:108): avc: denied { create } for pid=476 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 2026/05/05 06:15:45 executed programs: 0 [ 57.768439][ T485] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.776200][ T485] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.783809][ T485] bridge_slave_0: entered allmulticast mode [ 57.791074][ T485] bridge_slave_0: entered promiscuous mode [ 57.798606][ T485] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.807178][ T485] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.814997][ T485] bridge_slave_1: entered allmulticast mode [ 57.822100][ T485] bridge_slave_1: entered promiscuous mode [ 57.874721][ T485] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.882452][ T485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.905610][ T382] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.917239][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.925124][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.935255][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.942956][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.967666][ T485] veth0_vlan: entered promiscuous mode [ 57.979334][ T485] veth1_macvtap: entered promiscuous mode [ 58.009086][ T36] audit: type=1400 audit(1777961746.140:109): avc: denied { mount } for pid=489 comm="syz.2.17" name="/" dev="ramfs" ino=4962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 58.033019][ T36] audit: type=1400 audit(1777961746.140:110): avc: denied { mounton } for pid=489 comm="syz.2.17" path="/0/file0" dev="ramfs" ino=4962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 58.057406][ T36] audit: type=1400 audit(1777961746.140:111): avc: denied { unmount } for pid=485 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 58.080000][ T36] audit: type=1400 audit(1777961746.170:112): avc: denied { unmount } for pid=485 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 58.141303][ T491] ------------[ cut here ]------------ [ 58.147296][ T491] WARNING: CPU: 0 PID: 491 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 58.155365][ T491] Modules linked in: [ 58.159469][ T491] CPU: 0 UID: 0 PID: 491 Comm: syz.2.17 Not tainted syzkaller #0 dd152f38de96ba099968f93de6974e843be5472c [ 58.171436][ T491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 58.182407][ T491] RIP: 0010:drop_nlink+0xce/0x110 [ 58.187886][ T491] Code: 04 00 00 be 08 00 00 00 e8 af 15 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 72 a1 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 58.208928][ T491] RSP: 0018:ffffc900012af820 EFLAGS: 00010293 [ 58.215193][ T491] RAX: ffffffff81f21b2e RBX: ffff888130d2a700 RCX: ffff88811cc20000 [ 58.223823][ T491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.233113][ T491] RBP: ffffc900012af848 R08: 0000000000000003 R09: 0000000000000004 [ 58.241455][ T491] R10: dffffc0000000000 R11: fffff52000255efc R12: dffffc0000000000 [ 58.250308][ T491] R13: 1ffff110261a54e9 R14: ffff888130d2a748 R15: 0000000000000000 [ 58.258609][ T491] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 58.267780][ T491] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.274727][ T491] CR2: 000055556c8e3998 CR3: 000000010c716000 CR4: 00000000003526b0 [ 58.283272][ T491] Call Trace: [ 58.286701][ T491] [ 58.289827][ T491] simple_rmdir+0x153/0x260 [ 58.294546][ T491] vfs_rmdir+0x3e0/0x560 [ 58.299108][ T491] incfs_kill_sb+0x109/0x230 [ 58.304257][ T491] deactivate_locked_super+0xd8/0x2a0 [ 58.310181][ T491] deactivate_super+0xb8/0xe0 [ 58.315274][ T491] cleanup_mnt+0x406/0x4a0 [ 58.320079][ T491] __cleanup_mnt+0x1d/0x40 [ 58.324924][ T491] task_work_run+0x1e5/0x260 [ 58.330028][ T491] ? __cfi_task_work_run+0x10/0x10 [ 58.335770][ T491] ? free_nsproxy+0x223/0x290 [ 58.340661][ T491] do_exit+0x9ad/0x2720 [ 58.345160][ T491] ? __cfi_do_exit+0x10/0x10 [ 58.349984][ T491] do_group_exit+0x229/0x2f0 [ 58.355079][ T491] ? get_signal+0xa74/0x14e0 [ 58.360053][ T491] get_signal+0x1398/0x14e0 [ 58.364815][ T491] arch_do_signal_or_restart+0xbc/0x760 [ 58.370955][ T491] ? fixup_vdso_exception+0x20d/0x310 [ 58.376863][ T491] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 58.383778][ T491] irqentry_exit_to_user_mode+0x4d/0xb0 [ 58.390811][ T491] irqentry_exit+0x16/0x60 [ 58.395472][ T491] exc_page_fault+0x65/0xc0 [ 58.400550][ T491] asm_exc_page_fault+0x2b/0x30 [ 58.405814][ T491] RIP: 0033:0x7f0fbc4514f7 [ 58.410874][ T491] Code: Unable to access opcode bytes at 0x7f0fbc4514cd. [ 58.419280][ T491] RSP: 002b:00007f0fbd37e120 EFLAGS: 00010202 [ 58.425786][ T491] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f0fbc59aeb9 [ 58.434483][ T491] RDX: 00007f0fbd37e140 RSI: 00007f0fbd37e270 RDI: 000000000000000b [ 58.443383][ T491] RBP: 00007f0fbc608c1f R08: 0000000000000000 R09: 0000000000000000 [ 58.452293][ T491] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 58.461231][ T491] R13: 00007f0fbc816038 R14: 00007f0fbc815fa0 R15: 00007ffe1ab62098 [ 58.470116][ T491] [ 58.473455][ T491] ---[ end trace 0000000000000000 ]--- [ 58.479272][ T491] ================================================================== [ 58.487719][ T491] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 58.494451][ T491] Write of size 4 at addr 0000000000000168 by task syz.2.17/491 [ 58.503155][ T491] [ 58.505790][ T491] CPU: 1 UID: 0 PID: 491 Comm: syz.2.17 Tainted: G W syzkaller #0 dd152f38de96ba099968f93de6974e843be5472c [ 58.505821][ T491] Tainted: [W]=WARN [ 58.505827][ T491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 58.505837][ T491] Call Trace: [ 58.505845][ T491] [ 58.505853][ T491] __dump_stack+0x21/0x30 [ 58.505881][ T491] dump_stack_lvl+0x140/0x1c0 [ 58.505902][ T491] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.505925][ T491] print_report+0x3d/0x70 [ 58.505946][ T491] kasan_report+0x162/0x1a0 [ 58.505965][ T491] ? ihold+0x24/0x70 [ 58.505982][ T491] ? _raw_spin_unlock+0x45/0x60 [ 58.506002][ T491] ? ihold+0x24/0x70 [ 58.506017][ T491] kasan_check_range+0x25a/0x2b0 [ 58.506036][ T491] __kasan_check_write+0x18/0x20 [ 58.506058][ T491] ihold+0x24/0x70 [ 58.506075][ T491] vfs_rmdir+0x26a/0x560 [ 58.506095][ T491] incfs_kill_sb+0x109/0x230 [ 58.506119][ T491] deactivate_locked_super+0xd8/0x2a0 [ 58.506140][ T491] deactivate_super+0xb8/0xe0 [ 58.506159][ T491] cleanup_mnt+0x406/0x4a0 [ 58.506176][ T491] __cleanup_mnt+0x1d/0x40 [ 58.506191][ T491] task_work_run+0x1e5/0x260 [ 58.506212][ T491] ? __cfi_task_work_run+0x10/0x10 [ 58.506231][ T491] ? free_nsproxy+0x223/0x290 [ 58.506254][ T491] do_exit+0x9ad/0x2720 [ 58.506275][ T491] ? __cfi_do_exit+0x10/0x10 [ 58.506305][ T491] do_group_exit+0x229/0x2f0 [ 58.506325][ T491] ? get_signal+0xa74/0x14e0 [ 58.506345][ T491] get_signal+0x1398/0x14e0 [ 58.506368][ T491] arch_do_signal_or_restart+0xbc/0x760 [ 58.506393][ T491] ? fixup_vdso_exception+0x20d/0x310 [ 58.506418][ T491] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 58.506444][ T491] irqentry_exit_to_user_mode+0x4d/0xb0 [ 58.506461][ T491] irqentry_exit+0x16/0x60 [ 58.506476][ T491] exc_page_fault+0x65/0xc0 [ 58.506500][ T491] asm_exc_page_fault+0x2b/0x30 [ 58.506520][ T491] RIP: 0033:0x7f0fbc4514f7 [ 58.506535][ T491] Code: Unable to access opcode bytes at 0x7f0fbc4514cd. [ 58.506545][ T491] RSP: 002b:00007f0fbd37e120 EFLAGS: 00010202 [ 58.506562][ T491] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f0fbc59aeb9 [ 58.506575][ T491] RDX: 00007f0fbd37e140 RSI: 00007f0fbd37e270 RDI: 000000000000000b [ 58.506587][ T491] RBP: 00007f0fbc608c1f R08: 0000000000000000 R09: 0000000000000000 [ 58.506598][ T491] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 58.506608][ T491] R13: 00007f0fbc816038 R14: 00007f0fbc815fa0 R15: 00007ffe1ab62098 [ 58.506623][ T491] [ 58.506634][ T491] ================================================================== [ 58.780032][ T491] Disabling lock debugging due to kernel taint [ 58.780298][ T12] bridge_slave_1: left allmulticast mode [ 58.787127][ T491] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 58.793502][ T12] bridge_slave_1: left promiscuous mode [ 58.801684][ T491] #PF: supervisor write access in kernel mode [ 58.801698][ T491] #PF: error_code(0x0002) - not-present page [ 58.801709][ T491] PGD 0 P4D 0 [ 58.801728][ T491] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 58.801750][ T491] CPU: 1 UID: 0 PID: 491 Comm: syz.2.17 Tainted: G B W syzkaller #0 dd152f38de96ba099968f93de6974e843be5472c [ 58.808907][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.814611][ T491] Tainted: [B]=BAD_PAGE, [W]=WARN [ 58.814622][ T491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 58.814634][ T491] RIP: 0010:ihold+0x2a/0x70 [ 58.824096][ T36] audit: type=1400 audit(1777961746.950:113): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 58.825283][ T491] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 5d 98 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 6c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 6d [ 58.825304][ T491] RSP: 0018:ffffc900012af880 EFLAGS: 00010246 [ 58.825325][ T491] RAX: ffff88811cc20000 RBX: 0000000000000000 RCX: ffff88811cc20000 [ 58.825341][ T491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.825355][ T491] RBP: ffffc900012af890 R08: ffffffff88b9f947 R09: 1ffffffff1173f28 [ 58.825370][ T491] R10: dffffc0000000000 R11: fffffbfff1173f29 R12: ffff888130d2a70c [ 58.832961][ T36] audit: type=1400 audit(1777961746.950:114): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.847964][ T491] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 58.847992][ T491] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 58.848010][ T491] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.848025][ T491] CR2: 0000000000000168 CR3: 000000010c394000 CR4: 00000000003526b0 [ 58.848046][ T491] Call Trace: [ 58.856224][ T36] audit: type=1400 audit(1777961746.950:115): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.860814][ T491] [ 59.048879][ T491] vfs_rmdir+0x26a/0x560 [ 59.053952][ T491] incfs_kill_sb+0x109/0x230 [ 59.059011][ T491] deactivate_locked_super+0xd8/0x2a0 [ 59.065291][ T491] deactivate_super+0xb8/0xe0 [ 59.070384][ T491] cleanup_mnt+0x406/0x4a0 [ 59.075401][ T491] __cleanup_mnt+0x1d/0x40 [ 59.079850][ T491] task_work_run+0x1e5/0x260 [ 59.085253][ T491] ? __cfi_task_work_run+0x10/0x10 [ 59.091065][ T491] ? free_nsproxy+0x223/0x290 [ 59.096397][ T491] do_exit+0x9ad/0x2720 [ 59.101089][ T491] ? __cfi_do_exit+0x10/0x10 [ 59.107115][ T491] do_group_exit+0x229/0x2f0 [ 59.112312][ T491] ? get_signal+0xa74/0x14e0 [ 59.117272][ T491] get_signal+0x1398/0x14e0 [ 59.121791][ T491] arch_do_signal_or_restart+0xbc/0x760 [ 59.127630][ T491] ? fixup_vdso_exception+0x20d/0x310 [ 59.133710][ T491] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 59.140754][ T491] irqentry_exit_to_user_mode+0x4d/0xb0 [ 59.146529][ T491] irqentry_exit+0x16/0x60 [ 59.151501][ T491] exc_page_fault+0x65/0xc0 [ 59.156332][ T491] asm_exc_page_fault+0x2b/0x30 [ 59.161760][ T491] RIP: 0033:0x7f0fbc4514f7 [ 59.166291][ T491] Code: Unable to access opcode bytes at 0x7f0fbc4514cd. [ 59.174571][ T491] RSP: 002b:00007f0fbd37e120 EFLAGS: 00010202 [ 59.180738][ T491] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f0fbc59aeb9 [ 59.189070][ T491] RDX: 00007f0fbd37e140 RSI: 00007f0fbd37e270 RDI: 000000000000000b [ 59.198100][ T491] RBP: 00007f0fbc608c1f R08: 0000000000000000 R09: 0000000000000000 [ 59.206316][ T491] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 59.214547][ T491] R13: 00007f0fbc816038 R14: 00007f0fbc815fa0 R15: 00007ffe1ab62098 [ 59.223162][ T491] [ 59.226534][ T491] Modules linked in: [ 59.230615][ T491] CR2: 0000000000000168 [ 59.234850][ T491] ---[ end trace 0000000000000000 ]--- [ 59.240302][ T491] RIP: 0010:ihold+0x2a/0x70 [ 59.245465][ T491] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 5d 98 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 6c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 6d [ 59.265958][ T491] RSP: 0018:ffffc900012af880 EFLAGS: 00010246 [ 59.272760][ T491] RAX: ffff88811cc20000 RBX: 0000000000000000 RCX: ffff88811cc20000 [ 59.281037][ T491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.289468][ T491] RBP: ffffc900012af890 R08: ffffffff88b9f947 R09: 1ffffffff1173f28 [ 59.298136][ T491] R10: dffffc0000000000 R11: fffffbfff1173f29 R12: ffff888130d2a70c [ 59.307502][ T491] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 59.317043][ T491] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 59.328041][ T491] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.335517][ T491] CR2: 0000000000000168 CR3: 000000010c394000 CR4: 00000000003526b0 [ 59.344236][ T491] Kernel panic - not syncing: Fatal exception [ 59.351998][ T491] Kernel Offset: disabled [ 59.356873][ T491] Rebooting in 86400 seconds..