Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. 2026/06/16 21:01:29 parsed 1 programs [ 29.688241][ T36] audit: type=1400 audit(1781643689.089:64): avc: denied { node_bind } for pid=302 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 30.662982][ T36] audit: type=1400 audit(1781643690.059:65): avc: denied { mounton } for pid=310 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.664058][ T310] cgroup: Unknown subsys name 'net' [ 30.685711][ T36] audit: type=1400 audit(1781643690.059:66): avc: denied { mount } for pid=310 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.713017][ T36] audit: type=1400 audit(1781643690.089:67): avc: denied { unmount } for pid=310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.713187][ T310] cgroup: Unknown subsys name 'devices' [ 30.839729][ T310] cgroup: Unknown subsys name 'hugetlb' [ 30.845358][ T310] cgroup: Unknown subsys name 'rlimit' [ 30.964613][ T36] audit: type=1400 audit(1781643690.359:68): avc: denied { setattr } for pid=310 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.984069][ T312] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.987994][ T36] audit: type=1400 audit(1781643690.359:69): avc: denied { create } for pid=310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.016871][ T36] audit: type=1400 audit(1781643690.359:70): avc: denied { write } for pid=310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.037236][ T36] audit: type=1400 audit(1781643690.359:71): avc: denied { read } for pid=310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 31.057434][ T36] audit: type=1400 audit(1781643690.359:72): avc: denied { sys_module } for pid=310 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 31.078933][ T36] audit: type=1400 audit(1781643690.359:73): avc: denied { mounton } for pid=310 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.095507][ T310] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.988005][ T317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.376568][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.383736][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.390972][ T345] bridge_slave_0: entered allmulticast mode [ 32.397227][ T345] bridge_slave_0: entered promiscuous mode [ 32.404098][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.411335][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.418424][ T345] bridge_slave_1: entered allmulticast mode [ 32.424569][ T345] bridge_slave_1: entered promiscuous mode [ 32.463277][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.470519][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.477893][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.484927][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.511337][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.518693][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.528202][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.535339][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.545395][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.552484][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.574580][ T345] veth0_vlan: entered promiscuous mode [ 32.587643][ T345] veth1_macvtap: entered promiscuous mode [ 32.639482][ T12] bridge_slave_1: left allmulticast mode [ 32.645303][ T12] bridge_slave_1: left promiscuous mode [ 32.651274][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.660707][ T12] bridge_slave_0: left allmulticast mode [ 32.666373][ T12] bridge_slave_0: left promiscuous mode [ 32.672406][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.765842][ T12] veth1_macvtap: left promiscuous mode [ 32.778084][ T12] veth0_vlan: left promiscuous mode 2026/06/16 21:01:32 executed programs: 0 [ 33.207390][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.215703][ T381] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.222809][ T381] bridge_slave_0: entered allmulticast mode [ 33.229178][ T381] bridge_slave_0: entered promiscuous mode [ 33.235690][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.242838][ T381] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.249975][ T381] bridge_slave_1: entered allmulticast mode [ 33.256203][ T381] bridge_slave_1: entered promiscuous mode [ 33.306001][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.313110][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.320484][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.327508][ T381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.345233][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.352498][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.369283][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.376335][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.384388][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.391444][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.406607][ T381] veth0_vlan: entered promiscuous mode [ 33.416963][ T381] veth1_macvtap: entered promiscuous mode [ 33.442972][ T381] ------------[ cut here ]------------ [ 33.449058][ T381] WARNING: CPU: 0 PID: 381 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 33.456975][ T381] Modules linked in: [ 33.460923][ T381] CPU: 0 UID: 0 PID: 381 Comm: syz-executor Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 33.472717][ T381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.482846][ T381] RIP: 0010:drop_nlink+0xce/0x110 [ 33.488024][ T381] Code: 04 00 00 be 08 00 00 00 e8 6f 06 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 4f 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 33.507752][ T381] RSP: 0018:ffffc90001a9fc60 EFLAGS: 00010293 [ 33.513857][ T381] RAX: ffffffff81f271be RBX: ffff888126ef25a0 RCX: ffff88811586cc00 [ 33.521854][ T381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.529853][ T381] RBP: ffffc90001a9fc88 R08: 0000000000000003 R09: 0000000000000004 [ 33.537853][ T381] R10: dffffc0000000000 R11: fffff52000353f7c R12: dffffc0000000000 [ 33.545826][ T381] R13: 1ffff11024dde4bd R14: ffff888126ef25e8 R15: 0000000000000000 [ 33.553836][ T381] FS: 000055558bfd9500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 33.562806][ T381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.569418][ T381] CR2: 000055558bffc958 CR3: 0000000102f3c000 CR4: 00000000003526b0 [ 33.577395][ T381] Call Trace: [ 33.580706][ T381] [ 33.583645][ T381] shmem_rmdir+0x5f/0x90 [ 33.587928][ T381] vfs_rmdir+0x3e3/0x560 [ 33.592174][ T381] incfs_kill_sb+0x109/0x230 [ 33.596770][ T381] deactivate_locked_super+0xd5/0x2a0 [ 33.602169][ T381] deactivate_super+0xb8/0xe0 [ 33.606852][ T381] cleanup_mnt+0x406/0x4a0 [ 33.611315][ T381] __cleanup_mnt+0x1d/0x40 [ 33.615733][ T381] task_work_run+0x1e5/0x260 [ 33.620438][ T381] ? __cfi_task_work_run+0x10/0x10 [ 33.625552][ T381] ? __x64_sys_umount+0x12e/0x180 [ 33.630634][ T381] ? __cfi___x64_sys_umount+0x10/0x10 [ 33.636008][ T381] ? __kasan_check_read+0x15/0x20 [ 33.641102][ T381] resume_user_mode_work+0x35/0x50 [ 33.646331][ T381] syscall_exit_to_user_mode+0x63/0xb0 [ 33.651903][ T381] do_syscall_64+0x63/0xf0 [ 33.656325][ T381] ? clear_bhb_loop+0x50/0xa0 [ 33.661036][ T381] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.666941][ T381] RIP: 0033:0x7fb53639e097 [ 33.671421][ T381] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 33.691214][ T381] RSP: 002b:00007ffd2c298138 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 33.699685][ T381] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb53639e097 [ 33.707671][ T381] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2c2981f0 [ 33.715678][ T381] RBP: 00007ffd2c2981f0 R08: 00007ffd2c2991f0 R09: 00000000ffffffff [ 33.723733][ T381] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd2c299280 [ 33.731768][ T381] R13: 00007fb5364321ca R14: 000000000000828e R15: 00007ffd2c2992c0 [ 33.739802][ T381] [ 33.742817][ T381] ---[ end trace 0000000000000000 ]--- [ 33.748525][ T381] ================================================================== [ 33.756697][ T381] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 33.763082][ T381] Write of size 4 at addr 0000000000000168 by task syz-executor/381 [ 33.771079][ T381] [ 33.773401][ T381] CPU: 1 UID: 0 PID: 381 Comm: syz-executor Tainted: G W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 33.773421][ T381] Tainted: [W]=WARN [ 33.773425][ T381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.773431][ T381] Call Trace: [ 33.773435][ T381] [ 33.773441][ T381] __dump_stack+0x21/0x30 [ 33.773474][ T381] dump_stack_lvl+0x140/0x1c0 [ 33.773488][ T381] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.773502][ T381] print_report+0x3d/0x70 [ 33.773516][ T381] kasan_report+0x162/0x1a0 [ 33.773530][ T381] ? ihold+0x24/0x70 [ 33.773542][ T381] ? _raw_spin_unlock+0x45/0x60 [ 33.773556][ T381] ? ihold+0x24/0x70 [ 33.773567][ T381] kasan_check_range+0x25a/0x2b0 [ 33.773580][ T381] __kasan_check_write+0x18/0x20 [ 33.773590][ T381] ihold+0x24/0x70 [ 33.773601][ T381] vfs_rmdir+0x26a/0x560 [ 33.773616][ T381] incfs_kill_sb+0x109/0x230 [ 33.773627][ T381] deactivate_locked_super+0xd5/0x2a0 [ 33.773642][ T381] deactivate_super+0xb8/0xe0 [ 33.773655][ T381] cleanup_mnt+0x406/0x4a0 [ 33.773672][ T381] __cleanup_mnt+0x1d/0x40 [ 33.773684][ T381] task_work_run+0x1e5/0x260 [ 33.773698][ T381] ? __cfi_task_work_run+0x10/0x10 [ 33.773710][ T381] ? __x64_sys_umount+0x12e/0x180 [ 33.773720][ T381] ? __cfi___x64_sys_umount+0x10/0x10 [ 33.773729][ T381] ? __kasan_check_read+0x15/0x20 [ 33.773739][ T381] resume_user_mode_work+0x35/0x50 [ 33.773749][ T381] syscall_exit_to_user_mode+0x63/0xb0 [ 33.773761][ T381] do_syscall_64+0x63/0xf0 [ 33.773775][ T381] ? clear_bhb_loop+0x50/0xa0 [ 33.773785][ T381] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.773801][ T381] RIP: 0033:0x7fb53639e097 [ 33.773811][ T381] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 33.773820][ T381] RSP: 002b:00007ffd2c298138 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 33.773832][ T381] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb53639e097 [ 33.773839][ T381] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2c2981f0 [ 33.773846][ T381] RBP: 00007ffd2c2981f0 R08: 00007ffd2c2991f0 R09: 00000000ffffffff [ 33.773853][ T381] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd2c299280 [ 33.773859][ T381] R13: 00007fb5364321ca R14: 000000000000828e R15: 00007ffd2c2992c0 [ 33.773868][ T381] [ 33.773872][ T381] ================================================================== [ 34.019638][ T381] Disabling lock debugging due to kernel taint [ 34.025841][ T381] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 34.033636][ T381] #PF: supervisor write access in kernel mode [ 34.039688][ T381] #PF: error_code(0x0002) - not-present page [ 34.045651][ T381] PGD 8000000116adb067 P4D 8000000116adb067 PUD 0 [ 34.052314][ T381] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 34.058373][ T381] CPU: 1 UID: 0 PID: 381 Comm: syz-executor Tainted: G B W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 34.071551][ T381] Tainted: [B]=BAD_PAGE, [W]=WARN [ 34.076571][ T381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.086661][ T381] RIP: 0010:ihold+0x2a/0x70 [ 34.091166][ T381] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 46 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 34.110764][ T381] RSP: 0018:ffffc90001a9fca0 EFLAGS: 00010246 [ 34.116831][ T381] RAX: ffff88811586cc00 RBX: 0000000000000000 RCX: ffff88811586cc00 [ 34.124795][ T381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.132751][ T381] RBP: ffffc90001a9fcb0 R08: ffffffff88bbe947 R09: 1ffffffff1177d28 [ 34.140707][ T381] R10: dffffc0000000000 R11: fffffbfff1177d29 R12: ffff888126ef25ac [ 34.148692][ T381] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 34.156658][ T381] FS: 000055558bfd9500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 34.165582][ T381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.172237][ T381] CR2: 0000000000000168 CR3: 0000000102f3c000 CR4: 00000000003526b0 [ 34.180200][ T381] Call Trace: [ 34.183465][ T381] [ 34.186379][ T381] vfs_rmdir+0x26a/0x560 [ 34.190613][ T381] incfs_kill_sb+0x109/0x230 [ 34.195203][ T381] deactivate_locked_super+0xd5/0x2a0 [ 34.200566][ T381] deactivate_super+0xb8/0xe0 [ 34.205229][ T381] cleanup_mnt+0x406/0x4a0 [ 34.209646][ T381] __cleanup_mnt+0x1d/0x40 [ 34.214045][ T381] task_work_run+0x1e5/0x260 [ 34.218640][ T381] ? __cfi_task_work_run+0x10/0x10 [ 34.223749][ T381] ? __x64_sys_umount+0x12e/0x180 [ 34.228769][ T381] ? __cfi___x64_sys_umount+0x10/0x10 [ 34.234147][ T381] ? __kasan_check_read+0x15/0x20 [ 34.239157][ T381] resume_user_mode_work+0x35/0x50 [ 34.244693][ T381] syscall_exit_to_user_mode+0x63/0xb0 [ 34.250182][ T381] do_syscall_64+0x63/0xf0 [ 34.254592][ T381] ? clear_bhb_loop+0x50/0xa0 [ 34.259272][ T381] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.265247][ T381] RIP: 0033:0x7fb53639e097 [ 34.269643][ T381] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 34.289507][ T381] RSP: 002b:00007ffd2c298138 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 34.297908][ T381] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb53639e097 [ 34.305867][ T381] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2c2981f0 [ 34.313828][ T381] RBP: 00007ffd2c2981f0 R08: 00007ffd2c2991f0 R09: 00000000ffffffff [ 34.321793][ T381] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd2c299280 [ 34.329749][ T381] R13: 00007fb5364321ca R14: 000000000000828e R15: 00007ffd2c2992c0 [ 34.337709][ T381] [ 34.340732][ T381] Modules linked in: [ 34.344668][ T381] CR2: 0000000000000168 [ 34.348801][ T381] ---[ end trace 0000000000000000 ]--- [ 34.354245][ T381] RIP: 0010:ihold+0x2a/0x70 [ 34.358840][ T381] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 46 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 34.378791][ T381] RSP: 0018:ffffc90001a9fca0 EFLAGS: 00010246 [ 34.384854][ T381] RAX: ffff88811586cc00 RBX: 0000000000000000 RCX: ffff88811586cc00 [ 34.392821][ T381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.400782][ T381] RBP: ffffc90001a9fcb0 R08: ffffffff88bbe947 R09: 1ffffffff1177d28 [ 34.408741][ T381] R10: dffffc0000000000 R11: fffffbfff1177d29 R12: ffff888126ef25ac [ 34.416701][ T381] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 34.424680][ T381] FS: 000055558bfd9500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 34.433594][ T381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.440178][ T381] CR2: 0000000000000168 CR3: 0000000102f3c000 CR4: 00000000003526b0 [ 34.448167][ T381] Kernel panic - not syncing: Fatal exception [ 34.454486][ T381] Kernel Offset: disabled [ 34.458823][ T381] Rebooting in 86400 seconds..