Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. 2026/06/30 23:00:41 parsed 1 programs 2026/06/30 23:00:41 serving rpc on tcp://34597 [ 30.569906][ T36] audit: type=1400 audit(1782860441.250:64): avc: denied { node_bind } for pid=302 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 31.694232][ T308] cgroup: Unknown subsys name 'net' [ 31.699212][ T36] audit: type=1400 audit(1782860442.370:65): avc: denied { mounton } for pid=308 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.722344][ T36] audit: type=1400 audit(1782860442.370:66): avc: denied { mount } for pid=308 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.722565][ T308] cgroup: Unknown subsys name 'devices' [ 31.745057][ T36] audit: type=1400 audit(1782860442.380:67): avc: denied { unmount } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.881157][ T308] cgroup: Unknown subsys name 'hugetlb' [ 31.886821][ T308] cgroup: Unknown subsys name 'rlimit' [ 32.006242][ T36] audit: type=1400 audit(1782860442.680:68): avc: denied { setattr } for pid=308 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.031375][ T36] audit: type=1400 audit(1782860442.680:69): avc: denied { create } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.042517][ T313] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.053884][ T36] audit: type=1400 audit(1782860442.680:70): avc: denied { write } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.074747][ T308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.086180][ T36] audit: type=1400 audit(1782860442.680:71): avc: denied { read } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.117283][ T36] audit: type=1400 audit(1782860442.680:72): avc: denied { sys_module } for pid=308 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 32.138942][ T36] audit: type=1400 audit(1782860442.680:73): avc: denied { mounton } for pid=308 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.148435][ T315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.717863][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.724959][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.732187][ T353] bridge_slave_0: entered allmulticast mode [ 33.738461][ T353] bridge_slave_0: entered promiscuous mode [ 33.744920][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.752476][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.760581][ T353] bridge_slave_1: entered allmulticast mode [ 33.766916][ T353] bridge_slave_1: entered promiscuous mode [ 33.811777][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.818854][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.826467][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.833724][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.853343][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.861403][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.871519][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.878869][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.893449][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.900644][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.925761][ T353] veth0_vlan: entered promiscuous mode [ 33.936139][ T353] veth1_macvtap: entered promiscuous mode [ 34.099274][ T14] bridge_slave_1: left allmulticast mode [ 34.105049][ T14] bridge_slave_1: left promiscuous mode [ 34.111290][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.119485][ T14] bridge_slave_0: left allmulticast mode [ 34.125327][ T14] bridge_slave_0: left promiscuous mode [ 34.130992][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.250729][ T14] veth1_macvtap: left promiscuous mode [ 34.256883][ T14] veth0_vlan: left promiscuous mode 2026/06/30 23:00:45 executed programs: 0 [ 34.592515][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.599670][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.606863][ T379] bridge_slave_0: entered allmulticast mode [ 34.613315][ T379] bridge_slave_0: entered promiscuous mode [ 34.619980][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.627301][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.634511][ T379] bridge_slave_1: entered allmulticast mode [ 34.641339][ T379] bridge_slave_1: entered promiscuous mode [ 34.704704][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.712222][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.719617][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.726848][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.735290][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.742698][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.768746][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.776190][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.786030][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.793214][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.815567][ T379] veth0_vlan: entered promiscuous mode [ 34.825622][ T379] veth1_macvtap: entered promiscuous mode [ 34.855505][ T379] ------------[ cut here ]------------ [ 34.861056][ T379] WARNING: CPU: 0 PID: 379 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 34.869336][ T379] Modules linked in: [ 34.873359][ T379] CPU: 0 UID: 0 PID: 379 Comm: syz-executor Not tainted syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 34.885185][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.895332][ T379] RIP: 0010:drop_nlink+0xce/0x110 [ 34.900499][ T379] Code: 04 00 00 be 08 00 00 00 e8 4f 14 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 5d 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 34.920438][ T379] RSP: 0018:ffffc900011cfc88 EFLAGS: 00010293 [ 34.926527][ T379] RAX: ffffffff81f211fe RBX: ffff888116b31308 RCX: ffff8881150a8000 [ 34.934790][ T379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.943071][ T379] RBP: ffffc900011cfcb0 R08: 0000000000000003 R09: 0000000000000004 [ 34.951204][ T379] R10: dffffc0000000000 R11: fffff52000239f80 R12: dffffc0000000000 [ 34.959242][ T379] R13: 1ffff11022d6626a R14: ffff888116b31350 R15: 0000000000000000 [ 34.967297][ T379] FS: 0000555565947500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 34.976767][ T379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.983708][ T379] CR2: 000055556596a958 CR3: 0000000115b88000 CR4: 00000000003526b0 [ 34.992897][ T379] Call Trace: [ 34.996212][ T379] [ 34.999229][ T379] shmem_rmdir+0x5f/0x90 [ 35.003702][ T379] vfs_rmdir+0x3de/0x560 [ 35.008493][ T379] incfs_kill_sb+0x102/0x220 [ 35.013190][ T379] deactivate_locked_super+0xd5/0x270 [ 35.018798][ T379] deactivate_super+0xb8/0xe0 [ 35.023532][ T379] cleanup_mnt+0x438/0x4d0 [ 35.027984][ T379] __cleanup_mnt+0x1d/0x40 [ 35.032553][ T379] task_work_run+0x1e8/0x260 [ 35.037285][ T379] ? __cfi_task_work_run+0x10/0x10 [ 35.042485][ T379] ? __x64_sys_umount+0x12e/0x180 [ 35.047570][ T379] ? __cfi___x64_sys_umount+0x10/0x10 [ 35.053051][ T379] ? __kasan_check_read+0x15/0x20 [ 35.058169][ T379] resume_user_mode_work+0x35/0x50 [ 35.063488][ T379] syscall_exit_to_user_mode+0x63/0xb0 [ 35.069254][ T379] do_syscall_64+0x63/0xf0 [ 35.073708][ T379] ? clear_bhb_loop+0x50/0xa0 [ 35.078567][ T379] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.084662][ T379] RIP: 0033:0x7f593779e097 [ 35.089161][ T379] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 35.108918][ T379] RSP: 002b:00007ffc46a2fac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 35.118158][ T379] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f593779e097 [ 35.126282][ T379] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc46a2fb80 [ 35.134633][ T379] RBP: 00007ffc46a2fb80 R08: 00007ffc46a30b80 R09: 00000000ffffffff [ 35.142782][ T379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc46a30c10 [ 35.150915][ T379] R13: 00007f59378322ca R14: 0000000000008804 R15: 00007ffc46a30c50 [ 35.158995][ T379] [ 35.162093][ T379] ---[ end trace 0000000000000000 ]--- [ 35.167823][ T379] ================================================================== [ 35.176065][ T379] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 35.182322][ T379] Write of size 4 at addr 0000000000000168 by task syz-executor/379 [ 35.190467][ T379] [ 35.192789][ T379] CPU: 1 UID: 0 PID: 379 Comm: syz-executor Tainted: G W syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 35.192811][ T379] Tainted: [W]=WARN [ 35.192816][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 35.192823][ T379] Call Trace: [ 35.192828][ T379] [ 35.192834][ T379] __dump_stack+0x21/0x30 [ 35.192854][ T379] dump_stack_lvl+0x140/0x1c0 [ 35.192869][ T379] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.192886][ T379] print_report+0x3d/0x70 [ 35.192901][ T379] kasan_report+0x162/0x1a0 [ 35.192916][ T379] ? ihold+0x24/0x70 [ 35.192929][ T379] ? ihold+0x24/0x70 [ 35.192942][ T379] kasan_check_range+0x25a/0x2b0 [ 35.192957][ T379] __kasan_check_write+0x18/0x20 [ 35.192968][ T379] ihold+0x24/0x70 [ 35.192981][ T379] vfs_rmdir+0x25c/0x560 [ 35.192996][ T379] incfs_kill_sb+0x102/0x220 [ 35.193009][ T379] deactivate_locked_super+0xd5/0x270 [ 35.193025][ T379] deactivate_super+0xb8/0xe0 [ 35.193040][ T379] cleanup_mnt+0x438/0x4d0 [ 35.193054][ T379] __cleanup_mnt+0x1d/0x40 [ 35.193067][ T379] task_work_run+0x1e8/0x260 [ 35.193082][ T379] ? __cfi_task_work_run+0x10/0x10 [ 35.193096][ T379] ? __x64_sys_umount+0x12e/0x180 [ 35.193112][ T379] ? __cfi___x64_sys_umount+0x10/0x10 [ 35.193128][ T379] ? __kasan_check_read+0x15/0x20 [ 35.193140][ T379] resume_user_mode_work+0x35/0x50 [ 35.193156][ T379] syscall_exit_to_user_mode+0x63/0xb0 [ 35.193173][ T379] do_syscall_64+0x63/0xf0 [ 35.193184][ T379] ? clear_bhb_loop+0x50/0xa0 [ 35.193198][ T379] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.193212][ T379] RIP: 0033:0x7f593779e097 [ 35.193224][ T379] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 35.193234][ T379] RSP: 002b:00007ffc46a2fac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 35.193248][ T379] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f593779e097 [ 35.193256][ T379] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc46a2fb80 [ 35.193264][ T379] RBP: 00007ffc46a2fb80 R08: 00007ffc46a30b80 R09: 00000000ffffffff [ 35.193272][ T379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc46a30c10 [ 35.193280][ T379] R13: 00007f59378322ca R14: 0000000000008804 R15: 00007ffc46a30c50 [ 35.193290][ T379] [ 35.193294][ T379] ================================================================== [ 35.439956][ T379] Disabling lock debugging due to kernel taint [ 35.446140][ T379] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 35.454379][ T379] #PF: supervisor write access in kernel mode [ 35.460449][ T379] #PF: error_code(0x0002) - not-present page [ 35.466524][ T379] PGD 8000000116949067 P4D 8000000116949067 PUD 0 [ 35.473034][ T379] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 35.479302][ T379] CPU: 1 UID: 0 PID: 379 Comm: syz-executor Tainted: G B W syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 35.492946][ T379] Tainted: [B]=BAD_PAGE, [W]=WARN [ 35.497983][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 35.508672][ T379] RIP: 0010:ihold+0x2a/0x70 [ 35.513235][ T379] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 54 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 0c 0b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 35.533805][ T379] RSP: 0018:ffffc900011cfcc8 EFLAGS: 00010246 [ 35.540234][ T379] RAX: ffff8881150a8000 RBX: 0000000000000000 RCX: ffff8881150a8000 [ 35.548239][ T379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.556222][ T379] RBP: ffffc900011cfcd8 R08: ffffffff88bb2947 R09: 1ffffffff1176528 [ 35.564224][ T379] R10: dffffc0000000000 R11: fffffbfff1176529 R12: 0000000000000000 [ 35.572215][ T379] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 35.580198][ T379] FS: 0000555565947500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 35.589148][ T379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.595814][ T379] CR2: 0000000000000168 CR3: 0000000115b88000 CR4: 00000000003526b0 [ 35.604018][ T379] Call Trace: [ 35.607567][ T379] [ 35.610522][ T379] vfs_rmdir+0x25c/0x560 [ 35.614961][ T379] incfs_kill_sb+0x102/0x220 [ 35.620161][ T379] deactivate_locked_super+0xd5/0x270 [ 35.625657][ T379] deactivate_super+0xb8/0xe0 [ 35.630381][ T379] cleanup_mnt+0x438/0x4d0 [ 35.634830][ T379] __cleanup_mnt+0x1d/0x40 [ 35.639296][ T379] task_work_run+0x1e8/0x260 [ 35.643998][ T379] ? __cfi_task_work_run+0x10/0x10 [ 35.649119][ T379] ? __x64_sys_umount+0x12e/0x180 [ 35.654244][ T379] ? __cfi___x64_sys_umount+0x10/0x10 [ 35.659756][ T379] ? __kasan_check_read+0x15/0x20 [ 35.664909][ T379] resume_user_mode_work+0x35/0x50 [ 35.670122][ T379] syscall_exit_to_user_mode+0x63/0xb0 [ 35.675623][ T379] do_syscall_64+0x63/0xf0 [ 35.680042][ T379] ? clear_bhb_loop+0x50/0xa0 [ 35.684834][ T379] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.690742][ T379] RIP: 0033:0x7f593779e097 [ 35.695166][ T379] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 35.714859][ T379] RSP: 002b:00007ffc46a2fac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 35.723362][ T379] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f593779e097 [ 35.731422][ T379] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc46a2fb80 [ 35.739392][ T379] RBP: 00007ffc46a2fb80 R08: 00007ffc46a30b80 R09: 00000000ffffffff [ 35.747364][ T379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc46a30c10 [ 35.755335][ T379] R13: 00007f59378322ca R14: 0000000000008804 R15: 00007ffc46a30c50 [ 35.763330][ T379] [ 35.767041][ T379] Modules linked in: [ 35.770934][ T379] CR2: 0000000000000168 [ 35.775172][ T379] ---[ end trace 0000000000000000 ]--- [ 35.780710][ T379] RIP: 0010:ihold+0x2a/0x70 [ 35.785221][ T379] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 54 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 0c 0b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 35.804913][ T379] RSP: 0018:ffffc900011cfcc8 EFLAGS: 00010246 [ 35.811340][ T379] RAX: ffff8881150a8000 RBX: 0000000000000000 RCX: ffff8881150a8000 [ 35.819337][ T379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.828471][ T379] RBP: ffffc900011cfcd8 R08: ffffffff88bb2947 R09: 1ffffffff1176528 [ 35.836490][ T379] R10: dffffc0000000000 R11: fffffbfff1176529 R12: 0000000000000000 [ 35.844681][ T379] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 35.852850][ T379] FS: 0000555565947500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 35.861882][ T379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.868922][ T379] CR2: 0000000000000168 CR3: 0000000115b88000 CR4: 00000000003526b0 [ 35.877117][ T379] Kernel panic - not syncing: Fatal exception [ 35.883859][ T379] Kernel Offset: disabled [ 35.888203][ T379] Rebooting in 86400 seconds..