Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts. 2025/10/13 02:38:53 parsed 1 programs [ 26.688622][ T36] audit: type=1400 audit(1760323133.760:64): avc: denied { node_bind } for pid=290 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 28.238426][ T36] audit: type=1400 audit(1760323135.310:65): avc: denied { mounton } for pid=298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.239733][ T298] cgroup: Unknown subsys name 'net' [ 28.261188][ T36] audit: type=1400 audit(1760323135.310:66): avc: denied { mount } for pid=298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.288465][ T36] audit: type=1400 audit(1760323135.340:67): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.288638][ T298] cgroup: Unknown subsys name 'devices' [ 28.472799][ T298] cgroup: Unknown subsys name 'hugetlb' [ 28.478431][ T298] cgroup: Unknown subsys name 'rlimit' [ 28.662338][ T36] audit: type=1400 audit(1760323135.740:68): avc: denied { setattr } for pid=298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.685554][ T36] audit: type=1400 audit(1760323135.740:69): avc: denied { create } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.706005][ T36] audit: type=1400 audit(1760323135.740:70): avc: denied { write } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.717666][ T300] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.726449][ T36] audit: type=1400 audit(1760323135.740:71): avc: denied { read } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.755186][ T36] audit: type=1400 audit(1760323135.740:72): avc: denied { sys_module } for pid=298 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 28.776239][ T36] audit: type=1400 audit(1760323135.740:73): avc: denied { mounton } for pid=298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.812134][ T298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.708189][ T303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.296408][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.303510][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.310659][ T328] bridge_slave_0: entered allmulticast mode [ 30.316966][ T328] bridge_slave_0: entered promiscuous mode [ 30.323491][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.330773][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.337855][ T328] bridge_slave_1: entered allmulticast mode [ 30.344356][ T328] bridge_slave_1: entered promiscuous mode [ 30.401581][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.408637][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.416010][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.423087][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.442791][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.450131][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.461562][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.468722][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.477580][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.484661][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.510391][ T328] veth0_vlan: entered promiscuous mode [ 30.521662][ T328] veth1_macvtap: entered promiscuous mode [ 30.730245][ T46] bridge_slave_1: left allmulticast mode [ 30.735927][ T46] bridge_slave_1: left promiscuous mode [ 30.750258][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.762959][ T46] bridge_slave_0: left allmulticast mode [ 30.768969][ T46] bridge_slave_0: left promiscuous mode [ 30.774665][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.951439][ T46] veth1_macvtap: left promiscuous mode [ 30.957010][ T46] veth0_vlan: left promiscuous mode 2025/10/13 02:38:58 executed programs: 0 [ 31.344203][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.351322][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.358394][ T372] bridge_slave_0: entered allmulticast mode [ 31.364759][ T372] bridge_slave_0: entered promiscuous mode [ 31.371233][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.378522][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.385639][ T372] bridge_slave_1: entered allmulticast mode [ 31.391920][ T372] bridge_slave_1: entered promiscuous mode [ 31.468316][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.475409][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.482741][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.489906][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.512945][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.522162][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.541480][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.548550][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.556460][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.563528][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.578414][ T372] veth0_vlan: entered promiscuous mode [ 31.589056][ T372] veth1_macvtap: entered promiscuous mode [ 31.621206][ T372] ------------[ cut here ]------------ [ 31.626705][ T372] WARNING: CPU: 0 PID: 372 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 31.634679][ T372] Modules linked in: [ 31.638628][ T372] CPU: 0 UID: 0 PID: 372 Comm: syz-executor Not tainted syzkaller #0 1f5813a52420658c51670c32aa0b3f2b32c06bdf [ 31.650319][ T372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 31.660469][ T372] RIP: 0010:drop_nlink+0xce/0x110 [ 31.665533][ T372] Code: 04 00 00 be 08 00 00 00 e8 6f 51 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 7d a1 03 cc e8 72 e2 97 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 31.685213][ T372] RSP: 0018:ffffc9000116fc60 EFLAGS: 00010293 [ 31.691338][ T372] RAX: ffffffff81ee1d8e RBX: ffff888115bb47e0 RCX: ffff8881266a4c00 [ 31.699344][ T372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.707356][ T372] RBP: ffffc9000116fc88 R08: 0000000000000003 R09: 0000000000000004 [ 31.715395][ T372] R10: dffffc0000000000 R11: fffff5200022df7c R12: dffffc0000000000 [ 31.723417][ T372] R13: 1ffff11022b76905 R14: ffff888115bb4828 R15: 0000000000000000 [ 31.731438][ T372] FS: 00005555923d0500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 31.740433][ T372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.747043][ T372] CR2: 0000001b33f63fff CR3: 000000010afb4000 CR4: 00000000003526b0 [ 31.755066][ T372] Call Trace: [ 31.758359][ T372] [ 31.761358][ T372] shmem_rmdir+0x5f/0x90 [ 31.765639][ T372] vfs_rmdir+0x3dd/0x560 [ 31.769891][ T372] incfs_kill_sb+0x109/0x230 [ 31.774565][ T372] deactivate_locked_super+0xd8/0x2a0 [ 31.779968][ T372] deactivate_super+0xb8/0xe0 [ 31.784713][ T372] cleanup_mnt+0x3f1/0x480 [ 31.789174][ T372] __cleanup_mnt+0x1d/0x40 [ 31.793686][ T372] task_work_run+0x1e0/0x250 [ 31.798307][ T372] ? __cfi_task_work_run+0x10/0x10 [ 31.803486][ T372] ? __x64_sys_umount+0x126/0x170 [ 31.808541][ T372] ? __cfi___x64_sys_umount+0x10/0x10 [ 31.813967][ T372] ? __kasan_check_read+0x15/0x20 [ 31.819029][ T372] resume_user_mode_work+0x36/0x50 [ 31.824209][ T372] syscall_exit_to_user_mode+0x64/0xb0 [ 31.829696][ T372] do_syscall_64+0x64/0xf0 [ 31.834170][ T372] ? clear_bhb_loop+0x50/0xa0 [ 31.838873][ T372] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.844810][ T372] RIP: 0033:0x7fe959b901f7 [ 31.849261][ T372] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 31.868924][ T372] RSP: 002b:00007ffed3d207b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 31.877412][ T372] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe959b901f7 [ 31.885440][ T372] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed3d20870 [ 31.893478][ T372] RBP: 00007ffed3d20870 R08: 0000000000000000 R09: 0000000000000000 [ 31.901559][ T372] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffed3d21900 [ 31.909552][ T372] R13: 00007fe959c11d7d R14: 0000000000007b6c R15: 00007ffed3d21940 [ 31.917576][ T372] [ 31.920643][ T372] ---[ end trace 0000000000000000 ]--- [ 31.926243][ T372] ================================================================== [ 31.934353][ T372] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 31.940609][ T372] Write of size 4 at addr 0000000000000168 by task syz-executor/372 [ 31.948588][ T372] [ 31.950954][ T372] CPU: 1 UID: 0 PID: 372 Comm: syz-executor Tainted: G W syzkaller #0 1f5813a52420658c51670c32aa0b3f2b32c06bdf [ 31.950982][ T372] Tainted: [W]=WARN [ 31.951014][ T372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 31.951025][ T372] Call Trace: [ 31.951030][ T372] [ 31.951037][ T372] __dump_stack+0x21/0x30 [ 31.951063][ T372] dump_stack_lvl+0x10c/0x190 [ 31.951085][ T372] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.951114][ T372] print_report+0x3d/0x70 [ 31.951131][ T372] kasan_report+0x163/0x1a0 [ 31.951151][ T372] ? ihold+0x24/0x70 [ 31.951169][ T372] ? _raw_spin_unlock+0x45/0x60 [ 31.951190][ T372] ? ihold+0x24/0x70 [ 31.951207][ T372] kasan_check_range+0x299/0x2a0 [ 31.951228][ T372] __kasan_check_write+0x18/0x20 [ 31.951252][ T372] ihold+0x24/0x70 [ 31.951269][ T372] vfs_rmdir+0x26a/0x560 [ 31.951290][ T372] incfs_kill_sb+0x109/0x230 [ 31.951315][ T372] deactivate_locked_super+0xd8/0x2a0 [ 31.951337][ T372] deactivate_super+0xb8/0xe0 [ 31.951357][ T372] cleanup_mnt+0x3f1/0x480 [ 31.951376][ T372] __cleanup_mnt+0x1d/0x40 [ 31.951393][ T372] task_work_run+0x1e0/0x250 [ 31.951413][ T372] ? __cfi_task_work_run+0x10/0x10 [ 31.951432][ T372] ? __x64_sys_umount+0x126/0x170 [ 31.951455][ T372] ? __cfi___x64_sys_umount+0x10/0x10 [ 31.951478][ T372] ? __kasan_check_read+0x15/0x20 [ 31.951503][ T372] resume_user_mode_work+0x36/0x50 [ 31.951523][ T372] syscall_exit_to_user_mode+0x64/0xb0 [ 31.951541][ T372] do_syscall_64+0x64/0xf0 [ 31.951562][ T372] ? clear_bhb_loop+0x50/0xa0 [ 31.951581][ T372] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.951598][ T372] RIP: 0033:0x7fe959b901f7 [ 31.951612][ T372] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 31.951626][ T372] RSP: 002b:00007ffed3d207b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 31.951643][ T372] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe959b901f7 [ 31.951654][ T372] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed3d20870 [ 31.951665][ T372] RBP: 00007ffed3d20870 R08: 0000000000000000 R09: 0000000000000000 [ 31.951675][ T372] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffed3d21900 [ 31.951687][ T372] R13: 00007fe959c11d7d R14: 0000000000007b6c R15: 00007ffed3d21940 [ 31.951701][ T372] [ 31.951706][ T372] ================================================================== [ 32.196876][ T372] Disabling lock debugging due to kernel taint [ 32.203143][ T372] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 32.210954][ T372] #PF: supervisor write access in kernel mode [ 32.217014][ T372] #PF: error_code(0x0002) - not-present page [ 32.222988][ T372] PGD 8000000115972067 P4D 8000000115972067 PUD 0 [ 32.229505][ T372] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 32.235572][ T372] CPU: 1 UID: 0 PID: 372 Comm: syz-executor Tainted: G B W syzkaller #0 1f5813a52420658c51670c32aa0b3f2b32c06bdf [ 32.248680][ T372] Tainted: [B]=BAD_PAGE, [W]=WARN [ 32.253742][ T372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 32.263796][ T372] RIP: 0010:ihold+0x2a/0x70 [ 32.268382][ T372] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 5d d9 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c 48 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 6d [ 32.288094][ T372] RSP: 0018:ffffc9000116fca0 EFLAGS: 00010246 [ 32.294173][ T372] RAX: ffff8881266a4c00 RBX: 0000000000000000 RCX: ffff8881266a4c00 [ 32.302146][ T372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.310202][ T372] RBP: ffffc9000116fcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 32.318173][ T372] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff888115bb47ec [ 32.326141][ T372] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 32.334195][ T372] FS: 00005555923d0500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 32.343121][ T372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.349700][ T372] CR2: 0000000000000168 CR3: 000000010afb4000 CR4: 00000000003526b0 [ 32.357668][ T372] Call Trace: [ 32.360971][ T372] [ 32.363901][ T372] vfs_rmdir+0x26a/0x560 [ 32.368150][ T372] incfs_kill_sb+0x109/0x230 [ 32.372766][ T372] deactivate_locked_super+0xd8/0x2a0 [ 32.378158][ T372] deactivate_super+0xb8/0xe0 [ 32.382852][ T372] cleanup_mnt+0x3f1/0x480 [ 32.387271][ T372] __cleanup_mnt+0x1d/0x40 [ 32.391693][ T372] task_work_run+0x1e0/0x250 [ 32.396290][ T372] ? __cfi_task_work_run+0x10/0x10 [ 32.401403][ T372] ? __x64_sys_umount+0x126/0x170 [ 32.406435][ T372] ? __cfi___x64_sys_umount+0x10/0x10 [ 32.411816][ T372] ? __kasan_check_read+0x15/0x20 [ 32.416866][ T372] resume_user_mode_work+0x36/0x50 [ 32.421990][ T372] syscall_exit_to_user_mode+0x64/0xb0 [ 32.427537][ T372] do_syscall_64+0x64/0xf0 [ 32.431958][ T372] ? clear_bhb_loop+0x50/0xa0 [ 32.436634][ T372] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.442526][ T372] RIP: 0033:0x7fe959b901f7 [ 32.446940][ T372] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 32.466543][ T372] RSP: 002b:00007ffed3d207b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 32.474959][ T372] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe959b901f7 [ 32.482927][ T372] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed3d20870 [ 32.490928][ T372] RBP: 00007ffed3d20870 R08: 0000000000000000 R09: 0000000000000000 [ 32.498932][ T372] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffed3d21900 [ 32.506926][ T372] R13: 00007fe959c11d7d R14: 0000000000007b6c R15: 00007ffed3d21940 [ 32.515011][ T372] [ 32.518029][ T372] Modules linked in: [ 32.521933][ T372] CR2: 0000000000000168 [ 32.526085][ T372] ---[ end trace 0000000000000000 ]--- [ 32.531532][ T372] RIP: 0010:ihold+0x2a/0x70 [ 32.536078][ T372] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 5d d9 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c 48 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 6d [ 32.555721][ T372] RSP: 0018:ffffc9000116fca0 EFLAGS: 00010246 [ 32.561818][ T372] RAX: ffff8881266a4c00 RBX: 0000000000000000 RCX: ffff8881266a4c00 [ 32.569797][ T372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.577776][ T372] RBP: ffffc9000116fcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 32.585758][ T372] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff888115bb47ec [ 32.593741][ T372] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 32.601721][ T372] FS: 00005555923d0500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 32.610656][ T372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.617335][ T372] CR2: 0000000000000168 CR3: 000000010afb4000 CR4: 00000000003526b0 [ 32.625344][ T372] Kernel panic - not syncing: Fatal exception [ 32.631633][ T372] Kernel Offset: disabled [ 32.635985][ T372] Rebooting in 86400 seconds..