Warning: Permanently added '10.128.0.23' (ED25519) to the list of known hosts. 2026/07/09 05:07:28 parsed 1 programs 2026/07/09 05:07:28 serving rpc on tcp://35893 [ 23.498834][ T36] audit: type=1400 audit(1783573648.149:64): avc: denied { node_bind } for pid=302 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.475163][ T36] audit: type=1400 audit(1783573649.129:65): avc: denied { mounton } for pid=308 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.476294][ T308] cgroup: Unknown subsys name 'net' [ 24.498016][ T36] audit: type=1400 audit(1783573649.129:66): avc: denied { mount } for pid=308 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.525402][ T36] audit: type=1400 audit(1783573649.159:67): avc: denied { unmount } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.525602][ T308] cgroup: Unknown subsys name 'devices' [ 24.643685][ T308] cgroup: Unknown subsys name 'hugetlb' [ 24.649300][ T308] cgroup: Unknown subsys name 'rlimit' [ 24.748149][ T36] audit: type=1400 audit(1783573649.399:68): avc: denied { setattr } for pid=308 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.771343][ T36] audit: type=1400 audit(1783573649.399:69): avc: denied { create } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.791132][ T312] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.792118][ T36] audit: type=1400 audit(1783573649.399:70): avc: denied { write } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.820809][ T36] audit: type=1400 audit(1783573649.399:71): avc: denied { read } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.823911][ T308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.841228][ T36] audit: type=1400 audit(1783573649.399:72): avc: denied { sys_module } for pid=308 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 24.870715][ T36] audit: type=1400 audit(1783573649.399:73): avc: denied { mounton } for pid=308 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.785045][ T315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.501368][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.508542][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.515677][ T367] bridge_slave_0: entered allmulticast mode [ 26.522356][ T367] bridge_slave_0: entered promiscuous mode [ 26.529158][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.536258][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.543330][ T367] bridge_slave_1: entered allmulticast mode [ 26.549454][ T367] bridge_slave_1: entered promiscuous mode [ 26.597140][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.604231][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.611474][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.618611][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.636688][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.644050][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.653261][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.660316][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.669905][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.676978][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.698596][ T367] veth0_vlan: entered promiscuous mode [ 26.708850][ T367] veth1_macvtap: entered promiscuous mode [ 26.814528][ T61] bridge_slave_1: left allmulticast mode [ 26.820392][ T61] bridge_slave_1: left promiscuous mode [ 26.826246][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.834612][ T61] bridge_slave_0: left allmulticast mode [ 26.840384][ T61] bridge_slave_0: left promiscuous mode [ 26.846304][ T61] bridge0: port 1(bridge_slave_0) entered disabled state 2026/07/09 05:07:31 executed programs: 0 [ 26.960377][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.967558][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.974732][ T378] bridge_slave_0: entered allmulticast mode [ 26.981460][ T378] bridge_slave_0: entered promiscuous mode [ 26.988312][ T61] veth1_macvtap: left promiscuous mode [ 26.993931][ T61] veth0_vlan: left promiscuous mode [ 27.023765][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.030804][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.038129][ T378] bridge_slave_1: entered allmulticast mode [ 27.044587][ T378] bridge_slave_1: entered promiscuous mode [ 27.079409][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.086499][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.093856][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.100884][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.122524][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.130168][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.139536][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.146608][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.155954][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.163017][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.184452][ T378] veth0_vlan: entered promiscuous mode [ 27.195097][ T378] veth1_macvtap: entered promiscuous mode [ 27.221226][ T378] ------------[ cut here ]------------ [ 27.226819][ T378] WARNING: CPU: 0 PID: 378 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 27.234869][ T378] Modules linked in: [ 27.238797][ T378] CPU: 0 UID: 0 PID: 378 Comm: syz-executor Not tainted syzkaller #0 38ce34caa3eafecb4514ac9530ab896457f545a5 [ 27.250666][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 27.260819][ T378] RIP: 0010:drop_nlink+0xce/0x110 [ 27.265895][ T378] Code: 04 00 00 be 08 00 00 00 e8 4f 14 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 08 db b3 03 cc e8 d2 5d 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 27.285537][ T378] RSP: 0018:ffffc9000112fc88 EFLAGS: 00010293 [ 27.291618][ T378] RAX: ffffffff81f213de RBX: ffff888114c3b0c8 RCX: ffff888115d99300 [ 27.299654][ T378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.307700][ T378] RBP: ffffc9000112fcb0 R08: 0000000000000003 R09: 0000000000000004 [ 27.315743][ T378] R10: dffffc0000000000 R11: fffff52000225f80 R12: dffffc0000000000 [ 27.323813][ T378] R13: 1ffff11022987622 R14: ffff888114c3b110 R15: 0000000000000000 [ 27.331837][ T378] FS: 000055558c96f500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 27.340922][ T378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.347663][ T378] CR2: 000055558c992958 CR3: 0000000113c10000 CR4: 00000000003526b0 [ 27.355688][ T378] Call Trace: [ 27.358967][ T378] [ 27.362037][ T378] shmem_rmdir+0x5f/0x90 [ 27.366324][ T378] vfs_rmdir+0x3db/0x560 [ 27.370602][ T378] incfs_kill_sb+0x102/0x220 [ 27.375297][ T378] deactivate_locked_super+0xd2/0x270 [ 27.380771][ T378] deactivate_super+0xb8/0xe0 [ 27.385495][ T378] cleanup_mnt+0x438/0x4d0 [ 27.389918][ T378] __cleanup_mnt+0x1d/0x40 [ 27.394804][ T378] task_work_run+0x1e8/0x260 [ 27.399416][ T378] ? __cfi_task_work_run+0x10/0x10 [ 27.405133][ T378] ? __x64_sys_umount+0x12e/0x180 [ 27.410544][ T378] ? __cfi___x64_sys_umount+0x10/0x10 [ 27.416019][ T378] ? __kasan_check_read+0x15/0x20 [ 27.421068][ T378] resume_user_mode_work+0x35/0x50 [ 27.426415][ T378] syscall_exit_to_user_mode+0x63/0xb0 [ 27.431955][ T378] do_syscall_64+0x63/0xf0 [ 27.436459][ T378] ? clear_bhb_loop+0x50/0xa0 [ 27.441124][ T378] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.447174][ T378] RIP: 0033:0x7efd2359f097 [ 27.451611][ T378] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 27.471491][ T378] RSP: 002b:00007ffdaffd0318 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 27.480059][ T378] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007efd2359f097 [ 27.488133][ T378] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdaffd03d0 [ 27.496323][ T378] RBP: 00007ffdaffd03d0 R08: 00007ffdaffd13d0 R09: 00000000ffffffff [ 27.504344][ T378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdaffd1460 [ 27.512422][ T378] R13: 00007efd236332ca R14: 0000000000006a3b R15: 00007ffdaffd14a0 [ 27.520425][ T378] [ 27.523533][ T378] ---[ end trace 0000000000000000 ]--- [ 27.529818][ T378] ================================================================== [ 27.538173][ T378] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 27.544600][ T378] Write of size 4 at addr 0000000000000168 by task syz-executor/378 [ 27.552568][ T378] [ 27.554892][ T378] CPU: 1 UID: 0 PID: 378 Comm: syz-executor Tainted: G W syzkaller #0 38ce34caa3eafecb4514ac9530ab896457f545a5 [ 27.554915][ T378] Tainted: [W]=WARN [ 27.554918][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 27.554926][ T378] Call Trace: [ 27.554930][ T378] [ 27.554936][ T378] __dump_stack+0x21/0x30 [ 27.554957][ T378] dump_stack_lvl+0x140/0x1c0 [ 27.554971][ T378] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.554985][ T378] print_report+0x3d/0x70 [ 27.554999][ T378] kasan_report+0x162/0x1a0 [ 27.555014][ T378] ? ihold+0x24/0x70 [ 27.555027][ T378] ? ihold+0x24/0x70 [ 27.555037][ T378] kasan_check_range+0x25a/0x2b0 [ 27.555050][ T378] __kasan_check_write+0x18/0x20 [ 27.555060][ T378] ihold+0x24/0x70 [ 27.555071][ T378] vfs_rmdir+0x25c/0x560 [ 27.555086][ T378] incfs_kill_sb+0x102/0x220 [ 27.555098][ T378] deactivate_locked_super+0xd2/0x270 [ 27.555113][ T378] deactivate_super+0xb8/0xe0 [ 27.555126][ T378] cleanup_mnt+0x438/0x4d0 [ 27.555139][ T378] __cleanup_mnt+0x1d/0x40 [ 27.555150][ T378] task_work_run+0x1e8/0x260 [ 27.555165][ T378] ? __cfi_task_work_run+0x10/0x10 [ 27.555177][ T378] ? __x64_sys_umount+0x12e/0x180 [ 27.555192][ T378] ? __cfi___x64_sys_umount+0x10/0x10 [ 27.555206][ T378] ? __kasan_check_read+0x15/0x20 [ 27.555216][ T378] resume_user_mode_work+0x35/0x50 [ 27.555233][ T378] syscall_exit_to_user_mode+0x63/0xb0 [ 27.555249][ T378] do_syscall_64+0x63/0xf0 [ 27.555259][ T378] ? clear_bhb_loop+0x50/0xa0 [ 27.555273][ T378] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.555286][ T378] RIP: 0033:0x7efd2359f097 [ 27.555298][ T378] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 27.555307][ T378] RSP: 002b:00007ffdaffd0318 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 27.555319][ T378] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007efd2359f097 [ 27.555326][ T378] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdaffd03d0 [ 27.555333][ T378] RBP: 00007ffdaffd03d0 R08: 00007ffdaffd13d0 R09: 00000000ffffffff [ 27.555341][ T378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdaffd1460 [ 27.555348][ T378] R13: 00007efd236332ca R14: 0000000000006a3b R15: 00007ffdaffd14a0 [ 27.555356][ T378] [ 27.555360][ T378] ================================================================== [ 27.795559][ T378] Disabling lock debugging due to kernel taint [ 27.801849][ T378] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 27.809750][ T378] #PF: supervisor write access in kernel mode [ 27.815842][ T378] #PF: error_code(0x0002) - not-present page [ 27.821811][ T378] PGD 8000000115d75067 P4D 8000000115d75067 PUD 0 [ 27.828305][ T378] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 27.834360][ T378] CPU: 1 UID: 0 PID: 378 Comm: syz-executor Tainted: G B W syzkaller #0 38ce34caa3eafecb4514ac9530ab896457f545a5 [ 27.847644][ T378] Tainted: [B]=BAD_PAGE, [W]=WARN [ 27.853082][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 27.863125][ T378] RIP: 0010:ihold+0x2a/0x70 [ 27.867625][ T378] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 54 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 0c 0b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 27.887219][ T378] RSP: 0018:ffffc9000112fcc8 EFLAGS: 00010246 [ 27.893277][ T378] RAX: ffff888115d99300 RBX: 0000000000000000 RCX: ffff888115d99300 [ 27.901257][ T378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.909390][ T378] RBP: ffffc9000112fcd8 R08: ffffffff88bb2947 R09: 1ffffffff1176528 [ 27.917351][ T378] R10: dffffc0000000000 R11: fffffbfff1176529 R12: 0000000000000000 [ 27.925309][ T378] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 27.933277][ T378] FS: 000055558c96f500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 27.942195][ T378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.948766][ T378] CR2: 0000000000000168 CR3: 0000000113c10000 CR4: 00000000003526b0 [ 27.956813][ T378] Call Trace: [ 27.960135][ T378] [ 27.963579][ T378] vfs_rmdir+0x25c/0x560 [ 27.967902][ T378] incfs_kill_sb+0x102/0x220 [ 27.972563][ T378] deactivate_locked_super+0xd2/0x270 [ 27.977954][ T378] deactivate_super+0xb8/0xe0 [ 27.982648][ T378] cleanup_mnt+0x438/0x4d0 [ 27.987072][ T378] __cleanup_mnt+0x1d/0x40 [ 27.991478][ T378] task_work_run+0x1e8/0x260 [ 27.996084][ T378] ? __cfi_task_work_run+0x10/0x10 [ 28.001190][ T378] ? __x64_sys_umount+0x12e/0x180 [ 28.006306][ T378] ? __cfi___x64_sys_umount+0x10/0x10 [ 28.011711][ T378] ? __kasan_check_read+0x15/0x20 [ 28.016744][ T378] resume_user_mode_work+0x35/0x50 [ 28.021847][ T378] syscall_exit_to_user_mode+0x63/0xb0 [ 28.027295][ T378] do_syscall_64+0x63/0xf0 [ 28.031702][ T378] ? clear_bhb_loop+0x50/0xa0 [ 28.036388][ T378] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.042288][ T378] RIP: 0033:0x7efd2359f097 [ 28.046789][ T378] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 28.066580][ T378] RSP: 002b:00007ffdaffd0318 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 28.074985][ T378] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007efd2359f097 [ 28.082952][ T378] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdaffd03d0 [ 28.090905][ T378] RBP: 00007ffdaffd03d0 R08: 00007ffdaffd13d0 R09: 00000000ffffffff [ 28.098868][ T378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdaffd1460 [ 28.106826][ T378] R13: 00007efd236332ca R14: 0000000000006a3b R15: 00007ffdaffd14a0 [ 28.114793][ T378] [ 28.117797][ T378] Modules linked in: [ 28.121682][ T378] CR2: 0000000000000168 [ 28.125820][ T378] ---[ end trace 0000000000000000 ]--- [ 28.131265][ T378] RIP: 0010:ihold+0x2a/0x70 [ 28.135763][ T378] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 54 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 0c 0b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 28.155439][ T378] RSP: 0018:ffffc9000112fcc8 EFLAGS: 00010246 [ 28.161492][ T378] RAX: ffff888115d99300 RBX: 0000000000000000 RCX: ffff888115d99300 [ 28.169446][ T378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.177407][ T378] RBP: ffffc9000112fcd8 R08: ffffffff88bb2947 R09: 1ffffffff1176528 [ 28.185368][ T378] R10: dffffc0000000000 R11: fffffbfff1176529 R12: 0000000000000000 [ 28.193328][ T378] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 28.201302][ T378] FS: 000055558c96f500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 28.210252][ T378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.216838][ T378] CR2: 0000000000000168 CR3: 0000000113c10000 CR4: 00000000003526b0 [ 28.224806][ T378] Kernel panic - not syncing: Fatal exception [ 28.231226][ T378] Kernel Offset: disabled [ 28.235659][ T378] Rebooting in 86400 seconds..