Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. 2026/05/14 04:49:51 parsed 1 programs [ 31.788074][ T36] audit: type=1400 audit(1778734191.460:64): avc: denied { node_bind } for pid=302 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 32.951312][ T36] audit: type=1400 audit(1778734192.620:65): avc: denied { mounton } for pid=308 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.952738][ T308] cgroup: Unknown subsys name 'net' [ 32.974291][ T36] audit: type=1400 audit(1778734192.620:66): avc: denied { mount } for pid=308 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.001759][ T36] audit: type=1400 audit(1778734192.650:67): avc: denied { unmount } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.001948][ T308] cgroup: Unknown subsys name 'devices' [ 33.207334][ T308] cgroup: Unknown subsys name 'hugetlb' [ 33.212954][ T308] cgroup: Unknown subsys name 'rlimit' [ 33.412186][ T36] audit: type=1400 audit(1778734193.080:68): avc: denied { setattr } for pid=308 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.435538][ T36] audit: type=1400 audit(1778734193.080:69): avc: denied { create } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.444249][ T313] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.456650][ T36] audit: type=1400 audit(1778734193.080:70): avc: denied { write } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.485103][ T36] audit: type=1400 audit(1778734193.080:71): avc: denied { read } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.492181][ T308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.505589][ T36] audit: type=1400 audit(1778734193.080:72): avc: denied { sys_module } for pid=308 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 33.535221][ T36] audit: type=1400 audit(1778734193.080:73): avc: denied { mounton } for pid=308 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.524969][ T315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.102934][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.110074][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.117320][ T351] bridge_slave_0: entered allmulticast mode [ 35.123964][ T351] bridge_slave_0: entered promiscuous mode [ 35.132447][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.139634][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.146956][ T351] bridge_slave_1: entered allmulticast mode [ 35.153199][ T351] bridge_slave_1: entered promiscuous mode [ 35.191876][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.198986][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.206354][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.213491][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.236287][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.243521][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.253081][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.260278][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.277064][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.284141][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.312245][ T351] veth0_vlan: entered promiscuous mode [ 35.322220][ T351] veth1_macvtap: entered promiscuous mode [ 35.427745][ T46] bridge_slave_1: left allmulticast mode [ 35.433560][ T46] bridge_slave_1: left promiscuous mode [ 35.439733][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.447872][ T46] bridge_slave_0: left allmulticast mode [ 35.456680][ T46] bridge_slave_0: left promiscuous mode [ 35.464064][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.587016][ T46] veth1_macvtap: left promiscuous mode [ 35.592696][ T46] veth0_vlan: left promiscuous mode 2026/05/14 04:49:55 executed programs: 0 [ 35.950672][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.957912][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.965074][ T379] bridge_slave_0: entered allmulticast mode [ 35.971525][ T379] bridge_slave_0: entered promiscuous mode [ 35.978004][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.985127][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.992501][ T379] bridge_slave_1: entered allmulticast mode [ 35.999067][ T379] bridge_slave_1: entered promiscuous mode [ 36.061832][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.068920][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.076580][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.083644][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.110736][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.118188][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.127510][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.134564][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.144285][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.151366][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.178890][ T379] veth0_vlan: entered promiscuous mode [ 36.189844][ T379] veth1_macvtap: entered promiscuous mode [ 36.219458][ T379] ------------[ cut here ]------------ [ 36.224962][ T379] WARNING: CPU: 0 PID: 379 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 36.232980][ T379] Modules linked in: [ 36.237017][ T379] CPU: 0 UID: 0 PID: 379 Comm: syz-executor Not tainted syzkaller #0 b7ac38defd3c8fb977212017ce3462481fa488c7 [ 36.248725][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 36.258842][ T379] RIP: 0010:drop_nlink+0xce/0x110 [ 36.264374][ T379] Code: 04 00 00 be 08 00 00 00 e8 af 15 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 22 8e 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 36.284393][ T379] RSP: 0018:ffffc90000fefc60 EFLAGS: 00010293 [ 36.290598][ T379] RAX: ffffffff81f2357e RBX: ffff88810a725e30 RCX: ffff888114ec8000 [ 36.298893][ T379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.306934][ T379] RBP: ffffc90000fefc88 R08: 0000000000000003 R09: 0000000000000004 [ 36.315050][ T379] R10: dffffc0000000000 R11: fffff520001fdf7c R12: dffffc0000000000 [ 36.323092][ T379] R13: 1ffff110214e4bcf R14: ffff88810a725e78 R15: 0000000000000000 [ 36.331151][ T379] FS: 0000555578892500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 36.340420][ T379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.347205][ T379] CR2: 0000001b34663fff CR3: 0000000114386000 CR4: 00000000003526b0 [ 36.355618][ T379] Call Trace: [ 36.358971][ T379] [ 36.361903][ T379] shmem_rmdir+0x5f/0x90 [ 36.366226][ T379] vfs_rmdir+0x3e3/0x560 [ 36.370576][ T379] incfs_kill_sb+0x109/0x230 [ 36.375180][ T379] deactivate_locked_super+0xd5/0x2a0 [ 36.380723][ T379] deactivate_super+0xb8/0xe0 [ 36.385484][ T379] cleanup_mnt+0x406/0x4a0 [ 36.389943][ T379] __cleanup_mnt+0x1d/0x40 [ 36.394365][ T379] task_work_run+0x1e5/0x260 [ 36.399039][ T379] ? __cfi_task_work_run+0x10/0x10 [ 36.404177][ T379] ? __x64_sys_umount+0x12e/0x180 [ 36.409368][ T379] ? __cfi___x64_sys_umount+0x10/0x10 [ 36.414777][ T379] ? __kasan_check_read+0x15/0x20 [ 36.419844][ T379] resume_user_mode_work+0x35/0x50 [ 36.424972][ T379] syscall_exit_to_user_mode+0x63/0xb0 [ 36.430528][ T379] do_syscall_64+0x63/0xf0 [ 36.435009][ T379] ? clear_bhb_loop+0x50/0xa0 [ 36.439860][ T379] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.445964][ T379] RIP: 0033:0x7f6137f9e097 [ 36.450410][ T379] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 36.470131][ T379] RSP: 002b:00007ffeb5bf8348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 36.478684][ T379] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6137f9e097 [ 36.486724][ T379] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb5bf8400 [ 36.494807][ T379] RBP: 00007ffeb5bf8400 R08: 00007ffeb5bf9400 R09: 00000000ffffffff [ 36.502929][ T379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb5bf9490 [ 36.510957][ T379] R13: 00007f61380321ca R14: 0000000000008d67 R15: 00007ffeb5bf94d0 [ 36.518972][ T379] [ 36.522004][ T379] ---[ end trace 0000000000000000 ]--- [ 36.527625][ T379] ================================================================== [ 36.535719][ T379] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 36.542073][ T379] Write of size 4 at addr 0000000000000168 by task syz-executor/379 [ 36.550052][ T379] [ 36.552371][ T379] CPU: 1 UID: 0 PID: 379 Comm: syz-executor Tainted: G W syzkaller #0 b7ac38defd3c8fb977212017ce3462481fa488c7 [ 36.552392][ T379] Tainted: [W]=WARN [ 36.552397][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 36.552405][ T379] Call Trace: [ 36.552410][ T379] [ 36.552415][ T379] __dump_stack+0x21/0x30 [ 36.552434][ T379] dump_stack_lvl+0x140/0x1c0 [ 36.552451][ T379] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.552468][ T379] print_report+0x3d/0x70 [ 36.552484][ T379] kasan_report+0x162/0x1a0 [ 36.552499][ T379] ? ihold+0x24/0x70 [ 36.552513][ T379] ? _raw_spin_unlock+0x45/0x60 [ 36.552524][ T379] ? ihold+0x24/0x70 [ 36.552537][ T379] kasan_check_range+0x25a/0x2b0 [ 36.552553][ T379] __kasan_check_write+0x18/0x20 [ 36.552565][ T379] ihold+0x24/0x70 [ 36.552577][ T379] vfs_rmdir+0x26a/0x560 [ 36.552593][ T379] incfs_kill_sb+0x109/0x230 [ 36.552606][ T379] deactivate_locked_super+0xd5/0x2a0 [ 36.552623][ T379] deactivate_super+0xb8/0xe0 [ 36.552639][ T379] cleanup_mnt+0x406/0x4a0 [ 36.552653][ T379] __cleanup_mnt+0x1d/0x40 [ 36.552666][ T379] task_work_run+0x1e5/0x260 [ 36.552683][ T379] ? __cfi_task_work_run+0x10/0x10 [ 36.552698][ T379] ? __x64_sys_umount+0x12e/0x180 [ 36.552715][ T379] ? __cfi___x64_sys_umount+0x10/0x10 [ 36.552732][ T379] ? __kasan_check_read+0x15/0x20 [ 36.552744][ T379] resume_user_mode_work+0x35/0x50 [ 36.552755][ T379] syscall_exit_to_user_mode+0x63/0xb0 [ 36.552771][ T379] do_syscall_64+0x63/0xf0 [ 36.552782][ T379] ? clear_bhb_loop+0x50/0xa0 [ 36.552795][ T379] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.552808][ T379] RIP: 0033:0x7f6137f9e097 [ 36.552820][ T379] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 36.552831][ T379] RSP: 002b:00007ffeb5bf8348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 36.552846][ T379] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6137f9e097 [ 36.552855][ T379] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb5bf8400 [ 36.552863][ T379] RBP: 00007ffeb5bf8400 R08: 00007ffeb5bf9400 R09: 00000000ffffffff [ 36.552872][ T379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb5bf9490 [ 36.552881][ T379] R13: 00007f61380321ca R14: 0000000000008d67 R15: 00007ffeb5bf94d0 [ 36.552897][ T379] [ 36.552902][ T379] ================================================================== [ 36.799277][ T379] Disabling lock debugging due to kernel taint [ 36.805585][ T379] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 36.813410][ T379] #PF: supervisor write access in kernel mode [ 36.819468][ T379] #PF: error_code(0x0002) - not-present page [ 36.825438][ T379] PGD 800000010ef01067 P4D 800000010ef01067 PUD 0 [ 36.831946][ T379] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 36.838101][ T379] CPU: 1 UID: 0 PID: 379 Comm: syz-executor Tainted: G B W syzkaller #0 b7ac38defd3c8fb977212017ce3462481fa488c7 [ 36.851311][ T379] Tainted: [B]=BAD_PAGE, [W]=WARN [ 36.856592][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 36.866676][ T379] RIP: 0010:ihold+0x2a/0x70 [ 36.871202][ T379] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 0d 85 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 6c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 1d [ 36.891001][ T379] RSP: 0018:ffffc90000fefca0 EFLAGS: 00010246 [ 36.897076][ T379] RAX: ffff888114ec8000 RBX: 0000000000000000 RCX: ffff888114ec8000 [ 36.905135][ T379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.913320][ T379] RBP: ffffc90000fefcb0 R08: ffffffff88bba947 R09: 1ffffffff1177528 [ 36.921287][ T379] R10: dffffc0000000000 R11: fffffbfff1177529 R12: ffff88810a725e3c [ 36.929252][ T379] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 36.937216][ T379] FS: 0000555578892500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 36.946163][ T379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.952825][ T379] CR2: 0000000000000168 CR3: 0000000114386000 CR4: 00000000003526b0 [ 36.960793][ T379] Call Trace: [ 36.964063][ T379] [ 36.966987][ T379] vfs_rmdir+0x26a/0x560 [ 36.971229][ T379] incfs_kill_sb+0x109/0x230 [ 36.975814][ T379] deactivate_locked_super+0xd5/0x2a0 [ 36.981185][ T379] deactivate_super+0xb8/0xe0 [ 36.985860][ T379] cleanup_mnt+0x406/0x4a0 [ 36.990269][ T379] __cleanup_mnt+0x1d/0x40 [ 36.994679][ T379] task_work_run+0x1e5/0x260 [ 36.999261][ T379] ? __cfi_task_work_run+0x10/0x10 [ 37.004383][ T379] ? __x64_sys_umount+0x12e/0x180 [ 37.009402][ T379] ? __cfi___x64_sys_umount+0x10/0x10 [ 37.014770][ T379] ? __kasan_check_read+0x15/0x20 [ 37.019784][ T379] resume_user_mode_work+0x35/0x50 [ 37.024896][ T379] syscall_exit_to_user_mode+0x63/0xb0 [ 37.030349][ T379] do_syscall_64+0x63/0xf0 [ 37.034756][ T379] ? clear_bhb_loop+0x50/0xa0 [ 37.039424][ T379] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.045306][ T379] RIP: 0033:0x7f6137f9e097 [ 37.049721][ T379] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 37.069318][ T379] RSP: 002b:00007ffeb5bf8348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 37.077726][ T379] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6137f9e097 [ 37.085688][ T379] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb5bf8400 [ 37.093654][ T379] RBP: 00007ffeb5bf8400 R08: 00007ffeb5bf9400 R09: 00000000ffffffff [ 37.101749][ T379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb5bf9490 [ 37.109977][ T379] R13: 00007f61380321ca R14: 0000000000008d67 R15: 00007ffeb5bf94d0 [ 37.118113][ T379] [ 37.121121][ T379] Modules linked in: [ 37.125001][ T379] CR2: 0000000000000168 [ 37.129138][ T379] ---[ end trace 0000000000000000 ]--- [ 37.134607][ T379] RIP: 0010:ihold+0x2a/0x70 [ 37.139106][ T379] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 0d 85 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 6c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 1d [ 37.159050][ T379] RSP: 0018:ffffc90000fefca0 EFLAGS: 00010246 [ 37.165107][ T379] RAX: ffff888114ec8000 RBX: 0000000000000000 RCX: ffff888114ec8000 [ 37.173076][ T379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.181042][ T379] RBP: ffffc90000fefcb0 R08: ffffffff88bba947 R09: 1ffffffff1177528 [ 37.189009][ T379] R10: dffffc0000000000 R11: fffffbfff1177529 R12: ffff88810a725e3c [ 37.197059][ T379] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 37.205114][ T379] FS: 0000555578892500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 37.214136][ T379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.220713][ T379] CR2: 0000000000000168 CR3: 0000000114386000 CR4: 00000000003526b0 [ 37.228691][ T379] Kernel panic - not syncing: Fatal exception [ 37.235074][ T379] Kernel Offset: disabled [ 37.239394][ T379] Rebooting in 86400 seconds..