Warning: Permanently added '10.128.1.170' (ED25519) to the list of known hosts. 2026/07/11 14:25:26 parsed 1 programs 2026/07/11 14:25:26 serving rpc on tcp://44327 [ 32.570467][ T36] audit: type=1400 audit(1783779926.680:64): avc: denied { node_bind } for pid=302 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 34.131164][ T36] audit: type=1400 audit(1783779928.240:65): avc: denied { mounton } for pid=309 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.136173][ T309] cgroup: Unknown subsys name 'net' [ 34.154792][ T36] audit: type=1400 audit(1783779928.250:66): avc: denied { mount } for pid=309 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.181249][ T36] audit: type=1400 audit(1783779928.270:67): avc: denied { unmount } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.181737][ T309] cgroup: Unknown subsys name 'devices' [ 34.304381][ T309] cgroup: Unknown subsys name 'hugetlb' [ 34.310045][ T309] cgroup: Unknown subsys name 'rlimit' [ 34.438161][ T36] audit: type=1400 audit(1783779928.550:68): avc: denied { setattr } for pid=309 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.461421][ T36] audit: type=1400 audit(1783779928.550:69): avc: denied { create } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.482507][ T36] audit: type=1400 audit(1783779928.550:70): avc: denied { write } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.503181][ T36] audit: type=1400 audit(1783779928.550:71): avc: denied { read } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.523725][ T36] audit: type=1400 audit(1783779928.550:72): avc: denied { sys_module } for pid=309 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 34.525399][ T312] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.545380][ T36] audit: type=1400 audit(1783779928.560:73): avc: denied { mounton } for pid=309 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.577972][ T309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.515032][ T315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.160938][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.168689][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.175859][ T353] bridge_slave_0: entered allmulticast mode [ 36.182260][ T353] bridge_slave_0: entered promiscuous mode [ 36.188739][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.196141][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.203475][ T353] bridge_slave_1: entered allmulticast mode [ 36.209838][ T353] bridge_slave_1: entered promiscuous mode [ 36.271070][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.278196][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.285599][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.292752][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.315337][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.322890][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.332557][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.339640][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.350733][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.357870][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.381768][ T353] veth0_vlan: entered promiscuous mode [ 36.393440][ T353] veth1_macvtap: entered promiscuous mode [ 36.445148][ T45] bridge_slave_1: left allmulticast mode [ 36.450843][ T45] bridge_slave_1: left promiscuous mode [ 36.456928][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.464726][ T45] bridge_slave_0: left allmulticast mode [ 36.470409][ T45] bridge_slave_0: left promiscuous mode [ 36.476463][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.575075][ T45] veth1_macvtap: left promiscuous mode [ 36.580667][ T45] veth0_vlan: left promiscuous mode 2026/07/11 14:25:31 executed programs: 0 [ 37.071921][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.079063][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.086211][ T379] bridge_slave_0: entered allmulticast mode [ 37.092516][ T379] bridge_slave_0: entered promiscuous mode [ 37.098919][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.106030][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.113368][ T379] bridge_slave_1: entered allmulticast mode [ 37.119726][ T379] bridge_slave_1: entered promiscuous mode [ 37.175365][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.182458][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.189722][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.196802][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.217812][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.225291][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.234867][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.241940][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.251609][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.258889][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.284249][ T379] veth0_vlan: entered promiscuous mode [ 37.295666][ T379] veth1_macvtap: entered promiscuous mode [ 37.327983][ T379] ------------[ cut here ]------------ [ 37.333604][ T379] WARNING: CPU: 0 PID: 379 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 37.341549][ T379] Modules linked in: [ 37.345545][ T379] CPU: 0 UID: 0 PID: 379 Comm: syz-executor Not tainted syzkaller #0 7d836c68f7d55d9b8be32a3afed0c3f02dc2df9e [ 37.357231][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.367374][ T379] RIP: 0010:drop_nlink+0xce/0x110 [ 37.372469][ T379] Code: 04 00 00 be 08 00 00 00 e8 4f 14 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c8 da b3 03 cc e8 d2 5d 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 37.392258][ T379] RSP: 0018:ffffc900012cfc88 EFLAGS: 00010293 [ 37.398379][ T379] RAX: ffffffff81f2141e RBX: ffff888115cc8f50 RCX: ffff888125cf2600 [ 37.406430][ T379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.414442][ T379] RBP: ffffc900012cfcb0 R08: 0000000000000003 R09: 0000000000000004 [ 37.422464][ T379] R10: dffffc0000000000 R11: fffff52000259f80 R12: dffffc0000000000 [ 37.430466][ T379] R13: 1ffff11022b991f3 R14: ffff888115cc8f98 R15: 0000000000000000 [ 37.438534][ T379] FS: 000055556bd20500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 37.447564][ T379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.454249][ T379] CR2: 000055556bd43958 CR3: 000000012ee58000 CR4: 00000000003526b0 [ 37.462326][ T379] Call Trace: [ 37.465628][ T379] [ 37.468562][ T379] shmem_rmdir+0x5f/0x90 [ 37.472901][ T379] vfs_rmdir+0x3db/0x560 [ 37.477195][ T379] incfs_kill_sb+0x102/0x220 [ 37.481823][ T379] deactivate_locked_super+0xd2/0x270 [ 37.487285][ T379] deactivate_super+0xb8/0xe0 [ 37.492118][ T379] cleanup_mnt+0x438/0x4d0 [ 37.496575][ T379] __cleanup_mnt+0x1d/0x40 [ 37.501006][ T379] task_work_run+0x1e8/0x260 [ 37.505783][ T379] ? __cfi_task_work_run+0x10/0x10 [ 37.510958][ T379] ? __x64_sys_umount+0x12e/0x180 [ 37.516113][ T379] ? __cfi___x64_sys_umount+0x10/0x10 [ 37.521628][ T379] ? __kasan_check_read+0x15/0x20 [ 37.527094][ T379] resume_user_mode_work+0x35/0x50 [ 37.532351][ T379] syscall_exit_to_user_mode+0x63/0xb0 [ 37.537871][ T379] do_syscall_64+0x63/0xf0 [ 37.542343][ T379] ? clear_bhb_loop+0x50/0xa0 [ 37.547060][ T379] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.553028][ T379] RIP: 0033:0x7fcde699f097 [ 37.557502][ T379] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 37.577201][ T379] RSP: 002b:00007ffcf5658a08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 37.585689][ T379] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fcde699f097 [ 37.593775][ T379] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf5658ac0 [ 37.601966][ T379] RBP: 00007ffcf5658ac0 R08: 00007ffcf5659ac0 R09: 00000000ffffffff [ 37.610043][ T379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf5659b50 [ 37.618085][ T379] R13: 00007fcde6a332ca R14: 00000000000091b4 R15: 00007ffcf5659b90 [ 37.626152][ T379] [ 37.629194][ T379] ---[ end trace 0000000000000000 ]--- [ 37.634991][ T379] ================================================================== [ 37.643152][ T379] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 37.649435][ T379] Write of size 4 at addr 0000000000000168 by task syz-executor/379 [ 37.657420][ T379] [ 37.659755][ T379] CPU: 1 UID: 0 PID: 379 Comm: syz-executor Tainted: G W syzkaller #0 7d836c68f7d55d9b8be32a3afed0c3f02dc2df9e [ 37.659779][ T379] Tainted: [W]=WARN [ 37.659785][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.659795][ T379] Call Trace: [ 37.659801][ T379] [ 37.659808][ T379] __dump_stack+0x21/0x30 [ 37.659834][ T379] dump_stack_lvl+0x140/0x1c0 [ 37.659857][ T379] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.659881][ T379] print_report+0x3d/0x70 [ 37.659903][ T379] kasan_report+0x162/0x1a0 [ 37.659924][ T379] ? ihold+0x24/0x70 [ 37.659943][ T379] ? ihold+0x24/0x70 [ 37.659961][ T379] kasan_check_range+0x25a/0x2b0 [ 37.659982][ T379] __kasan_check_write+0x18/0x20 [ 37.659998][ T379] ihold+0x24/0x70 [ 37.660015][ T379] vfs_rmdir+0x25c/0x560 [ 37.660044][ T379] incfs_kill_sb+0x102/0x220 [ 37.660061][ T379] deactivate_locked_super+0xd2/0x270 [ 37.660084][ T379] deactivate_super+0xb8/0xe0 [ 37.660106][ T379] cleanup_mnt+0x438/0x4d0 [ 37.660126][ T379] __cleanup_mnt+0x1d/0x40 [ 37.660144][ T379] task_work_run+0x1e8/0x260 [ 37.660165][ T379] ? __cfi_task_work_run+0x10/0x10 [ 37.660185][ T379] ? __x64_sys_umount+0x12e/0x180 [ 37.660209][ T379] ? __cfi___x64_sys_umount+0x10/0x10 [ 37.660233][ T379] ? __kasan_check_read+0x15/0x20 [ 37.660249][ T379] resume_user_mode_work+0x35/0x50 [ 37.660273][ T379] syscall_exit_to_user_mode+0x63/0xb0 [ 37.660297][ T379] do_syscall_64+0x63/0xf0 [ 37.660312][ T379] ? clear_bhb_loop+0x50/0xa0 [ 37.660334][ T379] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.660353][ T379] RIP: 0033:0x7fcde699f097 [ 37.660368][ T379] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 37.660383][ T379] RSP: 002b:00007ffcf5658a08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 37.660399][ T379] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fcde699f097 [ 37.660410][ T379] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf5658ac0 [ 37.660422][ T379] RBP: 00007ffcf5658ac0 R08: 00007ffcf5659ac0 R09: 00000000ffffffff [ 37.660433][ T379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf5659b50 [ 37.660443][ T379] R13: 00007fcde6a332ca R14: 00000000000091b4 R15: 00007ffcf5659b90 [ 37.660457][ T379] [ 37.660463][ T379] ================================================================== [ 37.901090][ T379] Disabling lock debugging due to kernel taint [ 37.907543][ T379] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 37.915445][ T379] #PF: supervisor write access in kernel mode [ 37.921527][ T379] #PF: error_code(0x0002) - not-present page [ 37.927517][ T379] PGD 800000010b7dd067 P4D 800000010b7dd067 PUD 0 [ 37.934040][ T379] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 37.940122][ T379] CPU: 0 UID: 0 PID: 379 Comm: syz-executor Tainted: G B W syzkaller #0 7d836c68f7d55d9b8be32a3afed0c3f02dc2df9e [ 37.953237][ T379] Tainted: [B]=BAD_PAGE, [W]=WARN [ 37.958260][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.968346][ T379] RIP: 0010:ihold+0x2a/0x70 [ 37.972896][ T379] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 54 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 0c 0b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 37.992529][ T379] RSP: 0018:ffffc900012cfcc8 EFLAGS: 00010246 [ 37.998614][ T379] RAX: ffff888125cf2600 RBX: 0000000000000000 RCX: ffff888125cf2600 [ 38.006600][ T379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.014586][ T379] RBP: ffffc900012cfcd8 R08: ffffffff88bb2947 R09: 1ffffffff1176528 [ 38.022576][ T379] R10: dffffc0000000000 R11: fffffbfff1176529 R12: 0000000000000000 [ 38.030564][ T379] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 38.038548][ T379] FS: 000055556bd20500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 38.047495][ T379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.054130][ T379] CR2: 0000000000000168 CR3: 000000012ee58000 CR4: 00000000003526b0 [ 38.062129][ T379] Call Trace: [ 38.065445][ T379] [ 38.068390][ T379] vfs_rmdir+0x25c/0x560 [ 38.072658][ T379] incfs_kill_sb+0x102/0x220 [ 38.077261][ T379] deactivate_locked_super+0xd2/0x270 [ 38.082657][ T379] deactivate_super+0xb8/0xe0 [ 38.087358][ T379] cleanup_mnt+0x438/0x4d0 [ 38.091795][ T379] __cleanup_mnt+0x1d/0x40 [ 38.096230][ T379] task_work_run+0x1e8/0x260 [ 38.100838][ T379] ? __cfi_task_work_run+0x10/0x10 [ 38.105970][ T379] ? __x64_sys_umount+0x12e/0x180 [ 38.111028][ T379] ? __cfi___x64_sys_umount+0x10/0x10 [ 38.116437][ T379] ? __kasan_check_read+0x15/0x20 [ 38.121475][ T379] resume_user_mode_work+0x35/0x50 [ 38.126620][ T379] syscall_exit_to_user_mode+0x63/0xb0 [ 38.132148][ T379] do_syscall_64+0x63/0xf0 [ 38.136598][ T379] ? clear_bhb_loop+0x50/0xa0 [ 38.141298][ T379] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.147218][ T379] RIP: 0033:0x7fcde699f097 [ 38.151666][ T379] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 38.171306][ T379] RSP: 002b:00007ffcf5658a08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 38.179740][ T379] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fcde699f097 [ 38.187720][ T379] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf5658ac0 [ 38.195697][ T379] RBP: 00007ffcf5658ac0 R08: 00007ffcf5659ac0 R09: 00000000ffffffff [ 38.203677][ T379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf5659b50 [ 38.211651][ T379] R13: 00007fcde6a332ca R14: 00000000000091b4 R15: 00007ffcf5659b90 [ 38.219640][ T379] [ 38.222667][ T379] Modules linked in: [ 38.226601][ T379] CR2: 0000000000000168 [ 38.230766][ T379] ---[ end trace 0000000000000000 ]--- [ 38.236241][ T379] RIP: 0010:ihold+0x2a/0x70 [ 38.240767][ T379] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 54 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 0c 0b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 38.260393][ T379] RSP: 0018:ffffc900012cfcc8 EFLAGS: 00010246 [ 38.266472][ T379] RAX: ffff888125cf2600 RBX: 0000000000000000 RCX: ffff888125cf2600 [ 38.274451][ T379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.282435][ T379] RBP: ffffc900012cfcd8 R08: ffffffff88bb2947 R09: 1ffffffff1176528 [ 38.290430][ T379] R10: dffffc0000000000 R11: fffffbfff1176529 R12: 0000000000000000 [ 38.298414][ T379] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 38.306397][ T379] FS: 000055556bd20500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 38.315345][ T379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.321935][ T379] CR2: 0000000000000168 CR3: 000000012ee58000 CR4: 00000000003526b0 [ 38.329952][ T379] Kernel panic - not syncing: Fatal exception [ 38.336621][ T379] Kernel Offset: disabled [ 38.340958][ T379] Rebooting in 86400 seconds..