Warning: Permanently added '10.128.0.141' (ED25519) to the list of known hosts. 2026/05/12 02:18:13 parsed 1 programs [ 23.259113][ T36] audit: type=1400 audit(1778552293.610:64): avc: denied { node_bind } for pid=302 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.429475][ T36] audit: type=1400 audit(1778552294.780:65): avc: denied { mounton } for pid=308 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.431020][ T308] cgroup: Unknown subsys name 'net' [ 24.453068][ T36] audit: type=1400 audit(1778552294.780:66): avc: denied { mount } for pid=308 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.481679][ T36] audit: type=1400 audit(1778552294.810:67): avc: denied { unmount } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.481848][ T308] cgroup: Unknown subsys name 'devices' [ 24.651065][ T308] cgroup: Unknown subsys name 'hugetlb' [ 24.656908][ T308] cgroup: Unknown subsys name 'rlimit' [ 24.836747][ T36] audit: type=1400 audit(1778552295.180:68): avc: denied { setattr } for pid=308 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.861073][ T36] audit: type=1400 audit(1778552295.180:69): avc: denied { create } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.870891][ T312] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.882454][ T36] audit: type=1400 audit(1778552295.180:70): avc: denied { write } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.912745][ T36] audit: type=1400 audit(1778552295.180:71): avc: denied { read } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.922076][ T308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.933777][ T36] audit: type=1400 audit(1778552295.180:72): avc: denied { sys_module } for pid=308 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 24.964609][ T36] audit: type=1400 audit(1778552295.180:73): avc: denied { mounton } for pid=308 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.889851][ T314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.641083][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.648315][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.655959][ T364] bridge_slave_0: entered allmulticast mode [ 26.662391][ T364] bridge_slave_0: entered promiscuous mode [ 26.668751][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.675962][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.683427][ T364] bridge_slave_1: entered allmulticast mode [ 26.689828][ T364] bridge_slave_1: entered promiscuous mode [ 26.734968][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.742375][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.749995][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.757222][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.777118][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.785626][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.807418][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.814968][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.824525][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.831896][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.853706][ T364] veth0_vlan: entered promiscuous mode [ 26.865977][ T364] veth1_macvtap: entered promiscuous mode [ 26.956557][ T13] bridge_slave_1: left allmulticast mode [ 26.979009][ T13] bridge_slave_1: left promiscuous mode [ 26.987296][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.005133][ T13] bridge_slave_0: left allmulticast mode [ 27.012140][ T13] bridge_slave_0: left promiscuous mode [ 27.017830][ T13] bridge0: port 1(bridge_slave_0) entered disabled state 2026/05/12 02:18:17 executed programs: 0 [ 27.134295][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.141692][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.149394][ T375] bridge_slave_0: entered allmulticast mode [ 27.156007][ T375] bridge_slave_0: entered promiscuous mode [ 27.162863][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.170065][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.177406][ T375] bridge_slave_1: entered allmulticast mode [ 27.184082][ T375] bridge_slave_1: entered promiscuous mode [ 27.207905][ T13] veth1_macvtap: left promiscuous mode [ 27.213750][ T13] veth0_vlan: left promiscuous mode [ 27.269499][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.276843][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.284832][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.292295][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.314732][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.322712][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.332207][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.340021][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.349321][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.356943][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.380913][ T375] veth0_vlan: entered promiscuous mode [ 27.391754][ T375] veth1_macvtap: entered promiscuous mode [ 27.423558][ T375] ------------[ cut here ]------------ [ 27.429169][ T375] WARNING: CPU: 1 PID: 375 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 27.437466][ T375] Modules linked in: [ 27.441537][ T375] CPU: 1 UID: 0 PID: 375 Comm: syz-executor Not tainted syzkaller #0 ca429099f74224a639333f286931cd4c0f3f23fe [ 27.454485][ T375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 27.465034][ T375] RIP: 0010:drop_nlink+0xce/0x110 [ 27.470144][ T375] Code: 04 00 00 be 08 00 00 00 e8 af 15 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 a2 8f 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 27.490140][ T375] RSP: 0018:ffffc90001a8fc60 EFLAGS: 00010293 [ 27.496490][ T375] RAX: ffffffff81f22cfe RBX: ffff8881163d8428 RCX: ffff8881148ccc00 [ 27.504599][ T375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.512815][ T375] RBP: ffffc90001a8fc88 R08: 0000000000000003 R09: 0000000000000004 [ 27.520945][ T375] R10: dffffc0000000000 R11: fffff52000351f7c R12: dffffc0000000000 [ 27.529059][ T375] R13: 1ffff11022c7b08e R14: ffff8881163d8470 R15: 0000000000000000 [ 27.537303][ T375] FS: 000055556f783500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 27.546366][ T375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.553098][ T375] CR2: 000055556f7a6958 CR3: 00000001233da000 CR4: 00000000003526b0 [ 27.561126][ T375] Call Trace: [ 27.564604][ T375] [ 27.567706][ T375] shmem_rmdir+0x5f/0x90 [ 27.572079][ T375] vfs_rmdir+0x3e3/0x560 [ 27.576523][ T375] incfs_kill_sb+0x109/0x230 [ 27.581386][ T375] deactivate_locked_super+0xd5/0x2a0 [ 27.586880][ T375] deactivate_super+0xb8/0xe0 [ 27.591799][ T375] cleanup_mnt+0x406/0x4a0 [ 27.596260][ T375] __cleanup_mnt+0x1d/0x40 [ 27.600767][ T375] task_work_run+0x1e5/0x260 [ 27.605503][ T375] ? __cfi_task_work_run+0x10/0x10 [ 27.610753][ T375] ? __x64_sys_umount+0x12e/0x180 [ 27.616099][ T375] ? __cfi___x64_sys_umount+0x10/0x10 [ 27.621662][ T375] ? __kasan_check_read+0x15/0x20 [ 27.626736][ T375] resume_user_mode_work+0x35/0x50 [ 27.632051][ T375] syscall_exit_to_user_mode+0x63/0xb0 [ 27.637552][ T375] do_syscall_64+0x63/0xf0 [ 27.642642][ T375] ? clear_bhb_loop+0x50/0xa0 [ 27.647385][ T375] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.653527][ T375] RIP: 0033:0x7ff13559e017 [ 27.657955][ T375] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 27.678356][ T375] RSP: 002b:00007ffcb5e13238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 27.687249][ T375] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff13559e017 [ 27.695656][ T375] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb5e132f0 [ 27.704227][ T375] RBP: 00007ffcb5e132f0 R08: 00007ffcb5e142f0 R09: 00000000ffffffff [ 27.712372][ T375] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcb5e14380 [ 27.720419][ T375] R13: 00007ff135632120 R14: 0000000000006afd R15: 00007ffcb5e143c0 [ 27.728534][ T375] [ 27.731809][ T375] ---[ end trace 0000000000000000 ]--- [ 27.737805][ T375] ================================================================== [ 27.746424][ T375] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 27.752865][ T375] Write of size 4 at addr 0000000000000168 by task syz-executor/375 [ 27.761764][ T375] [ 27.764252][ T375] CPU: 0 UID: 0 PID: 375 Comm: syz-executor Tainted: G W syzkaller #0 ca429099f74224a639333f286931cd4c0f3f23fe [ 27.764274][ T375] Tainted: [W]=WARN [ 27.764279][ T375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 27.764289][ T375] Call Trace: [ 27.764295][ T375] [ 27.764301][ T375] __dump_stack+0x21/0x30 [ 27.764336][ T375] dump_stack_lvl+0x140/0x1c0 [ 27.764353][ T375] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.764371][ T375] print_report+0x3d/0x70 [ 27.764386][ T375] kasan_report+0x162/0x1a0 [ 27.764402][ T375] ? ihold+0x24/0x70 [ 27.764416][ T375] ? _raw_spin_unlock+0x45/0x60 [ 27.764427][ T375] ? ihold+0x24/0x70 [ 27.764440][ T375] kasan_check_range+0x25a/0x2b0 [ 27.764456][ T375] __kasan_check_write+0x18/0x20 [ 27.764468][ T375] ihold+0x24/0x70 [ 27.764481][ T375] vfs_rmdir+0x26a/0x560 [ 27.764496][ T375] incfs_kill_sb+0x109/0x230 [ 27.764522][ T375] deactivate_locked_super+0xd5/0x2a0 [ 27.764539][ T375] deactivate_super+0xb8/0xe0 [ 27.764554][ T375] cleanup_mnt+0x406/0x4a0 [ 27.764569][ T375] __cleanup_mnt+0x1d/0x40 [ 27.764582][ T375] task_work_run+0x1e5/0x260 [ 27.764598][ T375] ? __cfi_task_work_run+0x10/0x10 [ 27.764614][ T375] ? __x64_sys_umount+0x12e/0x180 [ 27.764631][ T375] ? __cfi___x64_sys_umount+0x10/0x10 [ 27.764648][ T375] ? __kasan_check_read+0x15/0x20 [ 27.764660][ T375] resume_user_mode_work+0x35/0x50 [ 27.764672][ T375] syscall_exit_to_user_mode+0x63/0xb0 [ 27.764688][ T375] do_syscall_64+0x63/0xf0 [ 27.764699][ T375] ? clear_bhb_loop+0x50/0xa0 [ 27.764713][ T375] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.764725][ T375] RIP: 0033:0x7ff13559e017 [ 27.764738][ T375] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 27.764749][ T375] RSP: 002b:00007ffcb5e13238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 27.764768][ T375] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff13559e017 [ 27.764777][ T375] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb5e132f0 [ 27.764785][ T375] RBP: 00007ffcb5e132f0 R08: 00007ffcb5e142f0 R09: 00000000ffffffff [ 27.764795][ T375] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcb5e14380 [ 27.764803][ T375] R13: 00007ff135632120 R14: 0000000000006afd R15: 00007ffcb5e143c0 [ 27.764813][ T375] [ 27.764818][ T375] ================================================================== [ 28.016797][ T375] Disabling lock debugging due to kernel taint [ 28.024793][ T375] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 28.032900][ T375] #PF: supervisor write access in kernel mode [ 28.038974][ T375] #PF: error_code(0x0002) - not-present page [ 28.045393][ T375] PGD 8000000112fc3067 P4D 8000000112fc3067 PUD 0 [ 28.052145][ T375] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 28.058325][ T375] CPU: 0 UID: 0 PID: 375 Comm: syz-executor Tainted: G B W syzkaller #0 ca429099f74224a639333f286931cd4c0f3f23fe [ 28.072429][ T375] Tainted: [B]=BAD_PAGE, [W]=WARN [ 28.077801][ T375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 28.088256][ T375] RIP: 0010:ihold+0x2a/0x70 [ 28.092955][ T375] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 8d 86 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 6c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 9d [ 28.113268][ T375] RSP: 0018:ffffc90001a8fca0 EFLAGS: 00010246 [ 28.119557][ T375] RAX: ffff8881148ccc00 RBX: 0000000000000000 RCX: ffff8881148ccc00 [ 28.127738][ T375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.135987][ T375] RBP: ffffc90001a8fcb0 R08: ffffffff88bba947 R09: 1ffffffff1177528 [ 28.144073][ T375] R10: dffffc0000000000 R11: fffffbfff1177529 R12: ffff8881163d8434 [ 28.152234][ T375] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 28.160216][ T375] FS: 000055556f783500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 28.169163][ T375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.175842][ T375] CR2: 0000000000000168 CR3: 00000001233da000 CR4: 00000000003526b0 [ 28.183926][ T375] Call Trace: [ 28.187484][ T375] [ 28.190500][ T375] vfs_rmdir+0x26a/0x560 [ 28.194858][ T375] incfs_kill_sb+0x109/0x230 [ 28.199547][ T375] deactivate_locked_super+0xd5/0x2a0 [ 28.205021][ T375] deactivate_super+0xb8/0xe0 [ 28.209797][ T375] cleanup_mnt+0x406/0x4a0 [ 28.214315][ T375] __cleanup_mnt+0x1d/0x40 [ 28.218834][ T375] task_work_run+0x1e5/0x260 [ 28.223431][ T375] ? __cfi_task_work_run+0x10/0x10 [ 28.228545][ T375] ? __x64_sys_umount+0x12e/0x180 [ 28.233577][ T375] ? __cfi___x64_sys_umount+0x10/0x10 [ 28.239345][ T375] ? __kasan_check_read+0x15/0x20 [ 28.244461][ T375] resume_user_mode_work+0x35/0x50 [ 28.249603][ T375] syscall_exit_to_user_mode+0x63/0xb0 [ 28.255241][ T375] do_syscall_64+0x63/0xf0 [ 28.259750][ T375] ? clear_bhb_loop+0x50/0xa0 [ 28.264428][ T375] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.270410][ T375] RIP: 0033:0x7ff13559e017 [ 28.274916][ T375] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 28.295167][ T375] RSP: 002b:00007ffcb5e13238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 28.303818][ T375] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff13559e017 [ 28.311993][ T375] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb5e132f0 [ 28.320143][ T375] RBP: 00007ffcb5e132f0 R08: 00007ffcb5e142f0 R09: 00000000ffffffff [ 28.328204][ T375] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcb5e14380 [ 28.336268][ T375] R13: 00007ff135632120 R14: 0000000000006afd R15: 00007ffcb5e143c0 [ 28.344954][ T375] [ 28.348061][ T375] Modules linked in: [ 28.352001][ T375] CR2: 0000000000000168 [ 28.356328][ T375] ---[ end trace 0000000000000000 ]--- [ 28.361782][ T375] RIP: 0010:ihold+0x2a/0x70 [ 28.366298][ T375] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 8d 86 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 6c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 9d [ 28.386354][ T375] RSP: 0018:ffffc90001a8fca0 EFLAGS: 00010246 [ 28.392725][ T375] RAX: ffff8881148ccc00 RBX: 0000000000000000 RCX: ffff8881148ccc00 [ 28.400890][ T375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.409123][ T375] RBP: ffffc90001a8fcb0 R08: ffffffff88bba947 R09: 1ffffffff1177528 [ 28.417587][ T375] R10: dffffc0000000000 R11: fffffbfff1177529 R12: ffff8881163d8434 [ 28.425940][ T375] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 28.434224][ T375] FS: 000055556f783500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 28.443433][ T375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.450212][ T375] CR2: 0000000000000168 CR3: 00000001233da000 CR4: 00000000003526b0 [ 28.458577][ T375] Kernel panic - not syncing: Fatal exception [ 28.465647][ T375] Kernel Offset: disabled [ 28.470081][ T375] Rebooting in 86400 seconds..