Warning: Permanently added '10.128.1.76' (ED25519) to the list of known hosts. 2026/07/07 02:54:08 parsed 1 programs 2026/07/07 02:54:08 serving rpc on tcp://46319 [ 25.094886][ T36] audit: type=1400 audit(1783392848.260:64): avc: denied { node_bind } for pid=303 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 26.182527][ T36] audit: type=1400 audit(1783392849.340:65): avc: denied { mounton } for pid=309 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.183557][ T309] cgroup: Unknown subsys name 'net' [ 26.205177][ T36] audit: type=1400 audit(1783392849.350:66): avc: denied { mount } for pid=309 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.232467][ T36] audit: type=1400 audit(1783392849.370:67): avc: denied { unmount } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.232747][ T309] cgroup: Unknown subsys name 'devices' [ 26.354449][ T309] cgroup: Unknown subsys name 'hugetlb' [ 26.360065][ T309] cgroup: Unknown subsys name 'rlimit' [ 26.478747][ T36] audit: type=1400 audit(1783392849.640:68): avc: denied { setattr } for pid=309 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.501955][ T36] audit: type=1400 audit(1783392849.640:69): avc: denied { create } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.522361][ T36] audit: type=1400 audit(1783392849.640:70): avc: denied { write } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.542656][ T36] audit: type=1400 audit(1783392849.640:71): avc: denied { read } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.550226][ T312] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.562896][ T36] audit: type=1400 audit(1783392849.640:72): avc: denied { sys_module } for pid=309 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 26.592383][ T36] audit: type=1400 audit(1783392849.640:73): avc: denied { mounton } for pid=309 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.618141][ T309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.586097][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.593233][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.600332][ T316] bridge_slave_0: entered allmulticast mode [ 27.607054][ T316] bridge_slave_0: entered promiscuous mode [ 27.613870][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.620940][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.628043][ T316] bridge_slave_1: entered allmulticast mode [ 27.634250][ T316] bridge_slave_1: entered promiscuous mode [ 27.672216][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.679312][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.686607][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.693650][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.714347][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.721620][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.731050][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.738115][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.753706][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.760742][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.777307][ T316] veth0_vlan: entered promiscuous mode [ 27.788197][ T316] veth1_macvtap: entered promiscuous mode [ 27.811416][ T316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.874083][ T12] bridge_slave_1: left allmulticast mode [ 27.879782][ T12] bridge_slave_1: left promiscuous mode [ 27.886705][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.894617][ T12] bridge_slave_0: left allmulticast mode [ 27.900289][ T12] bridge_slave_0: left promiscuous mode [ 27.906438][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.060544][ T12] veth1_macvtap: left promiscuous mode [ 28.067353][ T12] veth0_vlan: left promiscuous mode 2026/07/07 02:54:11 executed programs: 0 [ 28.857862][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.865014][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.872059][ T376] bridge_slave_0: entered allmulticast mode [ 28.878385][ T376] bridge_slave_0: entered promiscuous mode [ 28.884683][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.891702][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.899361][ T376] bridge_slave_1: entered allmulticast mode [ 28.905567][ T376] bridge_slave_1: entered promiscuous mode [ 28.947410][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.954492][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.961737][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.968785][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.987682][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.995380][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.011283][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.018402][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.027770][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.034846][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.059490][ T376] veth0_vlan: entered promiscuous mode [ 29.069667][ T376] veth1_macvtap: entered promiscuous mode [ 29.101634][ T376] ------------[ cut here ]------------ [ 29.107195][ T376] WARNING: CPU: 1 PID: 376 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 29.115166][ T376] Modules linked in: [ 29.119075][ T376] CPU: 1 UID: 0 PID: 376 Comm: syz-executor Not tainted syzkaller #0 a5ccdbd4bb62a03afa0f731d4ae3beae8d805b16 [ 29.130754][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.140854][ T376] RIP: 0010:drop_nlink+0xce/0x110 [ 29.145942][ T376] Code: 04 00 00 be 08 00 00 00 e8 4f 14 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 5d 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 29.165624][ T376] RSP: 0018:ffffc9000113fc88 EFLAGS: 00010293 [ 29.171706][ T376] RAX: ffffffff81f211fe RBX: ffff888131ac3838 RCX: ffff888124fdb900 [ 29.179717][ T376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.187719][ T376] RBP: ffffc9000113fcb0 R08: 0000000000000003 R09: 0000000000000004 [ 29.195711][ T376] R10: dffffc0000000000 R11: fffff52000227f80 R12: dffffc0000000000 [ 29.203713][ T376] R13: 1ffff11026358710 R14: ffff888131ac3880 R15: 0000000000000000 [ 29.211678][ T376] FS: 00005555665fa500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 29.220636][ T376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.227246][ T376] CR2: 000055556661d958 CR3: 0000000124c20000 CR4: 00000000003526b0 [ 29.235243][ T376] Call Trace: [ 29.238530][ T376] [ 29.241451][ T376] shmem_rmdir+0x5f/0x90 [ 29.245724][ T376] vfs_rmdir+0x3de/0x560 [ 29.250013][ T376] incfs_kill_sb+0x102/0x220 [ 29.254653][ T376] deactivate_locked_super+0xd5/0x270 [ 29.260075][ T376] deactivate_super+0xb8/0xe0 [ 29.264796][ T376] cleanup_mnt+0x438/0x4d0 [ 29.269235][ T376] __cleanup_mnt+0x1d/0x40 [ 29.273674][ T376] task_work_run+0x1e8/0x260 [ 29.278283][ T376] ? __cfi_task_work_run+0x10/0x10 [ 29.283431][ T376] ? __x64_sys_umount+0x12e/0x180 [ 29.288476][ T376] ? __cfi___x64_sys_umount+0x10/0x10 [ 29.293873][ T376] ? __kasan_check_read+0x15/0x20 [ 29.298916][ T376] resume_user_mode_work+0x35/0x50 [ 29.304092][ T376] syscall_exit_to_user_mode+0x63/0xb0 [ 29.309588][ T376] do_syscall_64+0x63/0xf0 [ 29.314034][ T376] ? clear_bhb_loop+0x50/0xa0 [ 29.318727][ T376] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.324640][ T376] RIP: 0033:0x7fb4c859f097 [ 29.329070][ T376] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 29.348702][ T376] RSP: 002b:00007ffdf86f4618 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 29.357172][ T376] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb4c859f097 [ 29.365292][ T376] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf86f46d0 [ 29.373768][ T376] RBP: 00007ffdf86f46d0 R08: 00007ffdf86f56d0 R09: 00000000ffffffff [ 29.381754][ T376] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf86f5760 [ 29.389749][ T376] R13: 00007fb4c86332ca R14: 0000000000007189 R15: 00007ffdf86f57a0 [ 29.397777][ T376] [ 29.400813][ T376] ---[ end trace 0000000000000000 ]--- [ 29.406419][ T376] ================================================================== [ 29.414503][ T376] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 29.420741][ T376] Write of size 4 at addr 0000000000000168 by task syz-executor/376 [ 29.428718][ T376] [ 29.431036][ T376] CPU: 0 UID: 0 PID: 376 Comm: syz-executor Tainted: G W syzkaller #0 a5ccdbd4bb62a03afa0f731d4ae3beae8d805b16 [ 29.431057][ T376] Tainted: [W]=WARN [ 29.431062][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.431070][ T376] Call Trace: [ 29.431074][ T376] [ 29.431079][ T376] __dump_stack+0x21/0x30 [ 29.431098][ T376] dump_stack_lvl+0x140/0x1c0 [ 29.431114][ T376] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.431130][ T376] print_report+0x3d/0x70 [ 29.431146][ T376] kasan_report+0x162/0x1a0 [ 29.431160][ T376] ? ihold+0x24/0x70 [ 29.431173][ T376] ? ihold+0x24/0x70 [ 29.431186][ T376] kasan_check_range+0x25a/0x2b0 [ 29.431201][ T376] __kasan_check_write+0x18/0x20 [ 29.431212][ T376] ihold+0x24/0x70 [ 29.431224][ T376] vfs_rmdir+0x25c/0x560 [ 29.431240][ T376] incfs_kill_sb+0x102/0x220 [ 29.431252][ T376] deactivate_locked_super+0xd5/0x270 [ 29.431268][ T376] deactivate_super+0xb8/0xe0 [ 29.431283][ T376] cleanup_mnt+0x438/0x4d0 [ 29.431297][ T376] __cleanup_mnt+0x1d/0x40 [ 29.431310][ T376] task_work_run+0x1e8/0x260 [ 29.431325][ T376] ? __cfi_task_work_run+0x10/0x10 [ 29.431338][ T376] ? __x64_sys_umount+0x12e/0x180 [ 29.431354][ T376] ? __cfi___x64_sys_umount+0x10/0x10 [ 29.431370][ T376] ? __kasan_check_read+0x15/0x20 [ 29.431381][ T376] resume_user_mode_work+0x35/0x50 [ 29.431399][ T376] syscall_exit_to_user_mode+0x63/0xb0 [ 29.431415][ T376] do_syscall_64+0x63/0xf0 [ 29.431427][ T376] ? clear_bhb_loop+0x50/0xa0 [ 29.431441][ T376] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.431454][ T376] RIP: 0033:0x7fb4c859f097 [ 29.431473][ T376] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 29.431483][ T376] RSP: 002b:00007ffdf86f4618 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 29.431497][ T376] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb4c859f097 [ 29.431505][ T376] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf86f46d0 [ 29.431513][ T376] RBP: 00007ffdf86f46d0 R08: 00007ffdf86f56d0 R09: 00000000ffffffff [ 29.431521][ T376] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf86f5760 [ 29.431529][ T376] R13: 00007fb4c86332ca R14: 0000000000007189 R15: 00007ffdf86f57a0 [ 29.431539][ T376] [ 29.431544][ T376] ================================================================== [ 29.670773][ T376] Disabling lock debugging due to kernel taint [ 29.676986][ T376] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 29.684805][ T376] #PF: supervisor write access in kernel mode [ 29.690862][ T376] #PF: error_code(0x0002) - not-present page [ 29.696849][ T376] PGD 8000000126b78067 P4D 8000000126b78067 PUD 0 [ 29.703352][ T376] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 29.709408][ T376] CPU: 0 UID: 0 PID: 376 Comm: syz-executor Tainted: G B W syzkaller #0 a5ccdbd4bb62a03afa0f731d4ae3beae8d805b16 [ 29.722509][ T376] Tainted: [B]=BAD_PAGE, [W]=WARN [ 29.727533][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.737592][ T376] RIP: 0010:ihold+0x2a/0x70 [ 29.742108][ T376] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 54 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 0c 0b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 29.761716][ T376] RSP: 0018:ffffc9000113fcc8 EFLAGS: 00010246 [ 29.767798][ T376] RAX: ffff888124fdb900 RBX: 0000000000000000 RCX: ffff888124fdb900 [ 29.775787][ T376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.783777][ T376] RBP: ffffc9000113fcd8 R08: ffffffff88bb2947 R09: 1ffffffff1176528 [ 29.791758][ T376] R10: dffffc0000000000 R11: fffffbfff1176529 R12: 0000000000000000 [ 29.799744][ T376] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 29.807718][ T376] FS: 00005555665fa500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 29.816661][ T376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.823246][ T376] CR2: 0000000000000168 CR3: 0000000124c20000 CR4: 00000000003526b0 [ 29.831211][ T376] Call Trace: [ 29.834478][ T376] [ 29.837398][ T376] vfs_rmdir+0x25c/0x560 [ 29.841638][ T376] incfs_kill_sb+0x102/0x220 [ 29.846219][ T376] deactivate_locked_super+0xd5/0x270 [ 29.851584][ T376] deactivate_super+0xb8/0xe0 [ 29.856252][ T376] cleanup_mnt+0x438/0x4d0 [ 29.860660][ T376] __cleanup_mnt+0x1d/0x40 [ 29.865073][ T376] task_work_run+0x1e8/0x260 [ 29.869654][ T376] ? __cfi_task_work_run+0x10/0x10 [ 29.874766][ T376] ? __x64_sys_umount+0x12e/0x180 [ 29.879809][ T376] ? __cfi___x64_sys_umount+0x10/0x10 [ 29.885195][ T376] ? __kasan_check_read+0x15/0x20 [ 29.890215][ T376] resume_user_mode_work+0x35/0x50 [ 29.895323][ T376] syscall_exit_to_user_mode+0x63/0xb0 [ 29.900790][ T376] do_syscall_64+0x63/0xf0 [ 29.905193][ T376] ? clear_bhb_loop+0x50/0xa0 [ 29.909875][ T376] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.915789][ T376] RIP: 0033:0x7fb4c859f097 [ 29.920198][ T376] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 29.939808][ T376] RSP: 002b:00007ffdf86f4618 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 29.948220][ T376] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb4c859f097 [ 29.956183][ T376] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf86f46d0 [ 29.964144][ T376] RBP: 00007ffdf86f46d0 R08: 00007ffdf86f56d0 R09: 00000000ffffffff [ 29.972105][ T376] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf86f5760 [ 29.980069][ T376] R13: 00007fb4c86332ca R14: 0000000000007189 R15: 00007ffdf86f57a0 [ 29.988039][ T376] [ 29.991049][ T376] Modules linked in: [ 29.994932][ T376] CR2: 0000000000000168 [ 29.999068][ T376] ---[ end trace 0000000000000000 ]--- [ 30.004508][ T376] RIP: 0010:ihold+0x2a/0x70 [ 30.009004][ T376] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 54 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 0c 0b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 30.028598][ T376] RSP: 0018:ffffc9000113fcc8 EFLAGS: 00010246 [ 30.034656][ T376] RAX: ffff888124fdb900 RBX: 0000000000000000 RCX: ffff888124fdb900 [ 30.042630][ T376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.050606][ T376] RBP: ffffc9000113fcd8 R08: ffffffff88bb2947 R09: 1ffffffff1176528 [ 30.058566][ T376] R10: dffffc0000000000 R11: fffffbfff1176529 R12: 0000000000000000 [ 30.066538][ T376] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 30.074497][ T376] FS: 00005555665fa500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 30.083413][ T376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.089984][ T376] CR2: 0000000000000168 CR3: 0000000124c20000 CR4: 00000000003526b0 [ 30.097963][ T376] Kernel panic - not syncing: Fatal exception [ 30.104289][ T376] Kernel Offset: disabled [ 30.108607][ T376] Rebooting in 86400 seconds..