Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. 2026/05/04 03:10:41 parsed 1 programs [ 26.411220][ T36] audit: type=1400 audit(1777864241.620:64): avc: denied { node_bind } for pid=303 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 27.889579][ T36] audit: type=1400 audit(1777864243.100:65): avc: denied { mounton } for pid=310 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.893289][ T310] cgroup: Unknown subsys name 'net' [ 27.912267][ T36] audit: type=1400 audit(1777864243.100:66): avc: denied { mount } for pid=310 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.939689][ T36] audit: type=1400 audit(1777864243.140:67): avc: denied { unmount } for pid=310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.940281][ T310] cgroup: Unknown subsys name 'devices' [ 28.145911][ T310] cgroup: Unknown subsys name 'hugetlb' [ 28.151561][ T310] cgroup: Unknown subsys name 'rlimit' [ 28.336692][ T36] audit: type=1400 audit(1777864243.550:68): avc: denied { setattr } for pid=310 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.359915][ T36] audit: type=1400 audit(1777864243.550:69): avc: denied { create } for pid=310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.380644][ T36] audit: type=1400 audit(1777864243.550:70): avc: denied { write } for pid=310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.401057][ T36] audit: type=1400 audit(1777864243.550:71): avc: denied { read } for pid=310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.421318][ T36] audit: type=1400 audit(1777864243.550:72): avc: denied { sys_module } for pid=310 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 28.429475][ T314] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.442421][ T36] audit: type=1400 audit(1777864243.550:73): avc: denied { mounton } for pid=310 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.519156][ T310] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.400126][ T316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.977100][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.984233][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.991303][ T348] bridge_slave_0: entered allmulticast mode [ 29.997711][ T348] bridge_slave_0: entered promiscuous mode [ 30.004560][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.011670][ T348] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.018823][ T348] bridge_slave_1: entered allmulticast mode [ 30.025200][ T348] bridge_slave_1: entered promiscuous mode [ 30.074771][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.081824][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.089176][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.096274][ T348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.117492][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.125015][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.147539][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.154632][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.163453][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.170554][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.196151][ T348] veth0_vlan: entered promiscuous mode [ 30.209153][ T348] veth1_macvtap: entered promiscuous mode [ 30.336173][ T13] bridge_slave_1: left allmulticast mode [ 30.341887][ T13] bridge_slave_1: left promiscuous mode [ 30.347740][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.355860][ T13] bridge_slave_0: left allmulticast mode [ 30.361530][ T13] bridge_slave_0: left promiscuous mode [ 30.367497][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.546479][ T13] veth1_macvtap: left promiscuous mode [ 30.552071][ T13] veth0_vlan: left promiscuous mode 2026/05/04 03:10:46 executed programs: 0 [ 30.986590][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.993682][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.000732][ T379] bridge_slave_0: entered allmulticast mode [ 31.007089][ T379] bridge_slave_0: entered promiscuous mode [ 31.013478][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.020584][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.027747][ T379] bridge_slave_1: entered allmulticast mode [ 31.034034][ T379] bridge_slave_1: entered promiscuous mode [ 31.112012][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.119094][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.126401][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.133447][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.153974][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.161279][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.171085][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.178169][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.187398][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.194489][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.222484][ T379] veth0_vlan: entered promiscuous mode [ 31.233304][ T379] veth1_macvtap: entered promiscuous mode [ 31.264560][ T379] ------------[ cut here ]------------ [ 31.270142][ T379] WARNING: CPU: 1 PID: 379 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 31.278162][ T379] Modules linked in: [ 31.282118][ T379] CPU: 1 UID: 0 PID: 379 Comm: syz-executor Not tainted syzkaller #0 2d55ab0d08d30afb2392ba3a535ea3e888ff1e10 [ 31.293802][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 31.303930][ T379] RIP: 0010:drop_nlink+0xce/0x110 [ 31.308980][ T379] Code: 04 00 00 be 08 00 00 00 e8 af 15 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 72 a1 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 31.328693][ T379] RSP: 0018:ffffc90001b1fc60 EFLAGS: 00010293 [ 31.334826][ T379] RAX: ffffffff81f21b2e RBX: ffff8881145d16c0 RCX: ffff88810c3a9300 [ 31.342818][ T379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.350856][ T379] RBP: ffffc90001b1fc88 R08: 0000000000000003 R09: 0000000000000004 [ 31.358900][ T379] R10: dffffc0000000000 R11: fffff52000363f7c R12: dffffc0000000000 [ 31.366952][ T379] R13: 1ffff110228ba2e1 R14: ffff8881145d1708 R15: 0000000000000000 [ 31.374998][ T379] FS: 000055558cfac500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 31.384087][ T379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.390703][ T379] CR2: 000055558cfcf958 CR3: 000000012608c000 CR4: 00000000003526b0 [ 31.398749][ T379] Call Trace: [ 31.402055][ T379] [ 31.405041][ T379] shmem_rmdir+0x5f/0x90 [ 31.409353][ T379] vfs_rmdir+0x3e0/0x560 [ 31.413669][ T379] incfs_kill_sb+0x109/0x230 [ 31.418304][ T379] deactivate_locked_super+0xd8/0x2a0 [ 31.423761][ T379] deactivate_super+0xb8/0xe0 [ 31.428467][ T379] cleanup_mnt+0x406/0x4a0 [ 31.432903][ T379] __cleanup_mnt+0x1d/0x40 [ 31.437413][ T379] task_work_run+0x1e5/0x260 [ 31.442047][ T379] ? __cfi_task_work_run+0x10/0x10 [ 31.447258][ T379] ? __x64_sys_umount+0x12e/0x180 [ 31.452325][ T379] ? __cfi___x64_sys_umount+0x10/0x10 [ 31.457762][ T379] ? __kasan_check_read+0x15/0x20 [ 31.462832][ T379] resume_user_mode_work+0x35/0x50 [ 31.468031][ T379] syscall_exit_to_user_mode+0x63/0xb0 [ 31.473519][ T379] do_syscall_64+0x63/0xf0 [ 31.478032][ T379] ? clear_bhb_loop+0x50/0xa0 [ 31.482725][ T379] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.488692][ T379] RIP: 0033:0x7fc45099e017 [ 31.493158][ T379] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 31.512866][ T379] RSP: 002b:00007ffd6cc98ff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 31.521361][ T379] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc45099e017 [ 31.529480][ T379] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6cc990b0 [ 31.537511][ T379] RBP: 00007ffd6cc990b0 R08: 00007ffd6cc9a0b0 R09: 00000000ffffffff [ 31.545593][ T379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6cc9a140 [ 31.553628][ T379] R13: 00007fc450a32120 R14: 0000000000007a04 R15: 00007ffd6cc9a180 [ 31.561615][ T379] [ 31.564691][ T379] ---[ end trace 0000000000000000 ]--- [ 31.570258][ T379] ================================================================== [ 31.578357][ T379] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 31.584608][ T379] Write of size 4 at addr 0000000000000168 by task syz-executor/379 [ 31.592581][ T379] [ 31.594907][ T379] CPU: 0 UID: 0 PID: 379 Comm: syz-executor Tainted: G W syzkaller #0 2d55ab0d08d30afb2392ba3a535ea3e888ff1e10 [ 31.594931][ T379] Tainted: [W]=WARN [ 31.594937][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 31.594947][ T379] Call Trace: [ 31.594953][ T379] [ 31.594959][ T379] __dump_stack+0x21/0x30 [ 31.594983][ T379] dump_stack_lvl+0x140/0x1c0 [ 31.595004][ T379] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.595027][ T379] print_report+0x3d/0x70 [ 31.595047][ T379] kasan_report+0x162/0x1a0 [ 31.595064][ T379] ? ihold+0x24/0x70 [ 31.595080][ T379] ? _raw_spin_unlock+0x45/0x60 [ 31.595098][ T379] ? ihold+0x24/0x70 [ 31.595113][ T379] kasan_check_range+0x25a/0x2b0 [ 31.595131][ T379] __kasan_check_write+0x18/0x20 [ 31.595153][ T379] ihold+0x24/0x70 [ 31.595167][ T379] vfs_rmdir+0x26a/0x560 [ 31.595186][ T379] incfs_kill_sb+0x109/0x230 [ 31.595211][ T379] deactivate_locked_super+0xd8/0x2a0 [ 31.595230][ T379] deactivate_super+0xb8/0xe0 [ 31.595249][ T379] cleanup_mnt+0x406/0x4a0 [ 31.595265][ T379] __cleanup_mnt+0x1d/0x40 [ 31.595280][ T379] task_work_run+0x1e5/0x260 [ 31.595300][ T379] ? __cfi_task_work_run+0x10/0x10 [ 31.595318][ T379] ? __x64_sys_umount+0x12e/0x180 [ 31.595339][ T379] ? __cfi___x64_sys_umount+0x10/0x10 [ 31.595360][ T379] ? __kasan_check_read+0x15/0x20 [ 31.595382][ T379] resume_user_mode_work+0x35/0x50 [ 31.595405][ T379] syscall_exit_to_user_mode+0x63/0xb0 [ 31.595421][ T379] do_syscall_64+0x63/0xf0 [ 31.595439][ T379] ? clear_bhb_loop+0x50/0xa0 [ 31.595461][ T379] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.595481][ T379] RIP: 0033:0x7fc45099e017 [ 31.595496][ T379] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 31.595509][ T379] RSP: 002b:00007ffd6cc98ff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 31.595525][ T379] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc45099e017 [ 31.595537][ T379] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6cc990b0 [ 31.595547][ T379] RBP: 00007ffd6cc990b0 R08: 00007ffd6cc9a0b0 R09: 00000000ffffffff [ 31.595559][ T379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6cc9a140 [ 31.595569][ T379] R13: 00007fc450a32120 R14: 0000000000007a04 R15: 00007ffd6cc9a180 [ 31.595583][ T379] [ 31.595589][ T379] ================================================================== [ 31.840601][ T379] Disabling lock debugging due to kernel taint [ 31.847904][ T379] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 31.855742][ T379] #PF: supervisor write access in kernel mode [ 31.861823][ T379] #PF: error_code(0x0002) - not-present page [ 31.867805][ T379] PGD 800000010e32c067 P4D 800000010e32c067 PUD 0 [ 31.874488][ T379] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 31.880561][ T379] CPU: 1 UID: 0 PID: 379 Comm: syz-executor Tainted: G B W syzkaller #0 2d55ab0d08d30afb2392ba3a535ea3e888ff1e10 [ 31.893669][ T379] Tainted: [B]=BAD_PAGE, [W]=WARN [ 31.898682][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 31.908749][ T379] RIP: 0010:ihold+0x2a/0x70 [ 31.913257][ T379] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 5d 98 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 6c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 6d [ 31.932863][ T379] RSP: 0018:ffffc90001b1fca0 EFLAGS: 00010246 [ 31.938933][ T379] RAX: ffff88810c3a9300 RBX: 0000000000000000 RCX: ffff88810c3a9300 [ 31.946923][ T379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.954890][ T379] RBP: ffffc90001b1fcb0 R08: ffffffff88b9f947 R09: 1ffffffff1173f28 [ 31.962861][ T379] R10: dffffc0000000000 R11: fffffbfff1173f29 R12: ffff8881145d16cc [ 31.970831][ T379] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 31.978799][ T379] FS: 000055558cfac500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 31.987723][ T379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.994304][ T379] CR2: 0000000000000168 CR3: 000000012608c000 CR4: 00000000003526b0 [ 32.002279][ T379] Call Trace: [ 32.005559][ T379] [ 32.008493][ T379] vfs_rmdir+0x26a/0x560 [ 32.012745][ T379] incfs_kill_sb+0x109/0x230 [ 32.017350][ T379] deactivate_locked_super+0xd8/0x2a0 [ 32.022737][ T379] deactivate_super+0xb8/0xe0 [ 32.027439][ T379] cleanup_mnt+0x406/0x4a0 [ 32.031874][ T379] __cleanup_mnt+0x1d/0x40 [ 32.036298][ T379] task_work_run+0x1e5/0x260 [ 32.040907][ T379] ? __cfi_task_work_run+0x10/0x10 [ 32.046028][ T379] ? __x64_sys_umount+0x12e/0x180 [ 32.051060][ T379] ? __cfi___x64_sys_umount+0x10/0x10 [ 32.056455][ T379] ? __kasan_check_read+0x15/0x20 [ 32.061487][ T379] resume_user_mode_work+0x35/0x50 [ 32.066606][ T379] syscall_exit_to_user_mode+0x63/0xb0 [ 32.072066][ T379] do_syscall_64+0x63/0xf0 [ 32.076484][ T379] ? clear_bhb_loop+0x50/0xa0 [ 32.081180][ T379] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.087076][ T379] RIP: 0033:0x7fc45099e017 [ 32.091491][ T379] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 32.111107][ T379] RSP: 002b:00007ffd6cc98ff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 32.119522][ T379] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc45099e017 [ 32.127586][ T379] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6cc990b0 [ 32.135566][ T379] RBP: 00007ffd6cc990b0 R08: 00007ffd6cc9a0b0 R09: 00000000ffffffff [ 32.143554][ T379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6cc9a140 [ 32.151533][ T379] R13: 00007fc450a32120 R14: 0000000000007a04 R15: 00007ffd6cc9a180 [ 32.159518][ T379] [ 32.162538][ T379] Modules linked in: [ 32.166455][ T379] CR2: 0000000000000168 [ 32.170605][ T379] ---[ end trace 0000000000000000 ]--- [ 32.176061][ T379] RIP: 0010:ihold+0x2a/0x70 [ 32.180658][ T379] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 5d 98 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 6c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 6d [ 32.200259][ T379] RSP: 0018:ffffc90001b1fca0 EFLAGS: 00010246 [ 32.206328][ T379] RAX: ffff88810c3a9300 RBX: 0000000000000000 RCX: ffff88810c3a9300 [ 32.214557][ T379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.222523][ T379] RBP: ffffc90001b1fcb0 R08: ffffffff88b9f947 R09: 1ffffffff1173f28 [ 32.230498][ T379] R10: dffffc0000000000 R11: fffffbfff1173f29 R12: ffff8881145d16cc [ 32.238471][ T379] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 32.246438][ T379] FS: 000055558cfac500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 32.255383][ T379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.261971][ T379] CR2: 0000000000000168 CR3: 000000012608c000 CR4: 00000000003526b0 [ 32.269950][ T379] Kernel panic - not syncing: Fatal exception [ 32.276621][ T379] Kernel Offset: disabled [ 32.280953][ T379] Rebooting in 86400 seconds..