Warning: Permanently added '10.128.1.22' (ED25519) to the list of known hosts.
2026/05/16 14:25:31 parsed 1 programs
[ 21.684877][ T36] audit: type=1400 audit(1778941531.170:64): avc: denied { node_bind } for pid=302 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 22.731350][ T36] audit: type=1400 audit(1778941532.220:65): avc: denied { mounton } for pid=309 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 22.732394][ T309] cgroup: Unknown subsys name 'net'
[ 22.753988][ T36] audit: type=1400 audit(1778941532.220:66): avc: denied { mount } for pid=309 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 22.781377][ T36] audit: type=1400 audit(1778941532.250:67): avc: denied { unmount } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 22.781534][ T309] cgroup: Unknown subsys name 'devices'
[ 22.961209][ T309] cgroup: Unknown subsys name 'hugetlb'
[ 22.966807][ T309] cgroup: Unknown subsys name 'rlimit'
[ 23.145060][ T36] audit: type=1400 audit(1778941532.630:68): avc: denied { setattr } for pid=309 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 23.168234][ T36] audit: type=1400 audit(1778941532.630:69): avc: denied { create } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 23.187061][ T312] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 23.188773][ T36] audit: type=1400 audit(1778941532.630:70): avc: denied { write } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 23.217388][ T36] audit: type=1400 audit(1778941532.630:71): avc: denied { read } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 23.224768][ T309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 23.237675][ T36] audit: type=1400 audit(1778941532.630:72): avc: denied { sys_module } for pid=309 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 23.267207][ T36] audit: type=1400 audit(1778941532.630:73): avc: denied { mounton } for pid=309 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 24.099531][ T315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 24.406982][ T333] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.414054][ T333] bridge0: port 1(bridge_slave_0) entered disabled state
[ 24.421277][ T333] bridge_slave_0: entered allmulticast mode
[ 24.427474][ T333] bridge_slave_0: entered promiscuous mode
[ 24.433844][ T333] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.440913][ T333] bridge0: port 2(bridge_slave_1) entered disabled state
[ 24.447950][ T333] bridge_slave_1: entered allmulticast mode
[ 24.454227][ T333] bridge_slave_1: entered promiscuous mode
[ 24.497460][ T333] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.504516][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 24.511809][ T333] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.518832][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 24.536762][ T327] bridge0: port 1(bridge_slave_0) entered disabled state
[ 24.544012][ T327] bridge0: port 2(bridge_slave_1) entered disabled state
[ 24.553957][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.561015][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 24.571441][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.578469][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 24.600646][ T333] veth0_vlan: entered promiscuous mode
[ 24.611806][ T333] veth1_macvtap: entered promiscuous mode
[ 24.681203][ T13] bridge_slave_1: left allmulticast mode
[ 24.686874][ T13] bridge_slave_1: left promiscuous mode
[ 24.692684][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 24.700319][ T13] bridge_slave_0: left allmulticast mode
[ 24.705956][ T13] bridge_slave_0: left promiscuous mode
[ 24.711629][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 24.826147][ T13] veth1_macvtap: left promiscuous mode
[ 24.839517][ T13] veth0_vlan: left promiscuous mode
2026/05/16 14:25:34 executed programs: 0
[ 25.403739][ T378] bridge0: port 1(bridge_slave_0) entered blocking state
[ 25.410903][ T378] bridge0: port 1(bridge_slave_0) entered disabled state
[ 25.418036][ T378] bridge_slave_0: entered allmulticast mode
[ 25.424387][ T378] bridge_slave_0: entered promiscuous mode
[ 25.430812][ T378] bridge0: port 2(bridge_slave_1) entered blocking state
[ 25.437843][ T378] bridge0: port 2(bridge_slave_1) entered disabled state
[ 25.445085][ T378] bridge_slave_1: entered allmulticast mode
[ 25.451321][ T378] bridge_slave_1: entered promiscuous mode
[ 25.509942][ T327] bridge0: port 1(bridge_slave_0) entered blocking state
[ 25.516979][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 25.531670][ T327] bridge0: port 2(bridge_slave_1) entered blocking state
[ 25.538719][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 25.554528][ T378] veth0_vlan: entered promiscuous mode
[ 25.564283][ T378] veth1_macvtap: entered promiscuous mode
[ 25.592145][ T378] ------------[ cut here ]------------
[ 25.597629][ T378] WARNING: CPU: 0 PID: 378 at fs/inode.c:340 drop_nlink+0xce/0x110
[ 25.605593][ T378] Modules linked in:
[ 25.609532][ T378] CPU: 0 UID: 0 PID: 378 Comm: syz-executor Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066
[ 25.621197][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 25.631288][ T378] RIP: 0010:drop_nlink+0xce/0x110
[ 25.636314][ T378] Code: 04 00 00 be 08 00 00 00 e8 cf 12 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 83 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c
[ 25.655987][ T378] RSP: 0018:ffffc90005b17c60 EFLAGS: 00010293
[ 25.662100][ T378] RAX: ffffffff81f23fae RBX: ffff888116436d10 RCX: ffff88810b3ba600
[ 25.670146][ T378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 25.678117][ T378] RBP: ffffc90005b17c88 R08: 0000000000000003 R09: 0000000000000004
[ 25.686119][ T378] R10: dffffc0000000000 R11: fffff52000b62f7c R12: dffffc0000000000
[ 25.694136][ T378] R13: 1ffff11022c86dab R14: ffff888116436d58 R15: 0000000000000000
[ 25.702137][ T378] FS: 000055558e363500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 25.711099][ T378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 25.717679][ T378] CR2: 000055558e386958 CR3: 0000000113eee000 CR4: 00000000003526b0
[ 25.725674][ T378] Call Trace:
[ 25.728951][ T378]
[ 25.731909][ T378] shmem_rmdir+0x5f/0x90
[ 25.736163][ T378] vfs_rmdir+0x3e0/0x560
[ 25.740425][ T378] incfs_kill_sb+0x109/0x230
[ 25.745018][ T378] deactivate_locked_super+0xd8/0x2a0
[ 25.750410][ T378] deactivate_super+0xb8/0xe0
[ 25.755094][ T378] cleanup_mnt+0x406/0x4a0
[ 25.759547][ T378] __cleanup_mnt+0x1d/0x40
[ 25.763964][ T378] task_work_run+0x1e5/0x260
[ 25.768540][ T378] ? __cfi_task_work_run+0x10/0x10
[ 25.773673][ T378] ? __x64_sys_umount+0x12e/0x180
[ 25.778708][ T378] ? __cfi___x64_sys_umount+0x10/0x10
[ 25.784122][ T378] ? __kasan_check_read+0x15/0x20
[ 25.789149][ T378] resume_user_mode_work+0x35/0x50
[ 25.794298][ T378] syscall_exit_to_user_mode+0x63/0xb0
[ 25.799791][ T378] do_syscall_64+0x63/0xf0
[ 25.804207][ T378] ? clear_bhb_loop+0x50/0xa0
[ 25.808867][ T378] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 25.814779][ T378] RIP: 0033:0x7f09baf9e097
[ 25.819213][ T378] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 25.838868][ T378] RSP: 002b:00007ffccb3e90d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 25.847335][ T378] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f09baf9e097
[ 25.855347][ T378] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccb3e9190
[ 25.863375][ T378] RBP: 00007ffccb3e9190 R08: 00007ffccb3ea190 R09: 00000000ffffffff
[ 25.871369][ T378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccb3ea220
[ 25.879340][ T378] R13: 00007f09bb0321ca R14: 00000000000063e0 R15: 00007ffccb3ea260
[ 25.887337][ T378]
[ 25.890390][ T378] ---[ end trace 0000000000000000 ]---
[ 25.896461][ T378] ==================================================================
[ 25.904543][ T378] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70
[ 25.910774][ T378] Write of size 4 at addr 0000000000000168 by task syz-executor/378
[ 25.918735][ T378]
[ 25.921045][ T378] CPU: 1 UID: 0 PID: 378 Comm: syz-executor Tainted: G W syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066
[ 25.921066][ T378] Tainted: [W]=WARN
[ 25.921070][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 25.921077][ T378] Call Trace:
[ 25.921081][ T378]
[ 25.921087][ T378] __dump_stack+0x21/0x30
[ 25.921107][ T378] dump_stack_lvl+0x140/0x1c0
[ 25.921121][ T378] ? __cfi_dump_stack_lvl+0x10/0x10
[ 25.921137][ T378] print_report+0x3d/0x70
[ 25.921151][ T378] kasan_report+0x162/0x1a0
[ 25.921166][ T378] ? ihold+0x24/0x70
[ 25.921179][ T378] ? _raw_spin_unlock+0x45/0x60
[ 25.921190][ T378] ? ihold+0x24/0x70
[ 25.921202][ T378] kasan_check_range+0x25a/0x2b0
[ 25.921216][ T378] __kasan_check_write+0x18/0x20
[ 25.921226][ T378] ihold+0x24/0x70
[ 25.921242][ T378] vfs_rmdir+0x26a/0x560
[ 25.921257][ T378] incfs_kill_sb+0x109/0x230
[ 25.921269][ T378] deactivate_locked_super+0xd8/0x2a0
[ 25.921284][ T378] deactivate_super+0xb8/0xe0
[ 25.921298][ T378] cleanup_mnt+0x406/0x4a0
[ 25.921312][ T378] __cleanup_mnt+0x1d/0x40
[ 25.921324][ T378] task_work_run+0x1e5/0x260
[ 25.921339][ T378] ? __cfi_task_work_run+0x10/0x10
[ 25.921352][ T378] ? __x64_sys_umount+0x12e/0x180
[ 25.921368][ T378] ? __cfi___x64_sys_umount+0x10/0x10
[ 25.921383][ T378] ? __kasan_check_read+0x15/0x20
[ 25.921394][ T378] resume_user_mode_work+0x35/0x50
[ 25.921405][ T378] syscall_exit_to_user_mode+0x63/0xb0
[ 25.921420][ T378] do_syscall_64+0x63/0xf0
[ 25.921431][ T378] ? clear_bhb_loop+0x50/0xa0
[ 25.921450][ T378] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 25.921463][ T378] RIP: 0033:0x7f09baf9e097
[ 25.921474][ T378] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 25.921484][ T378] RSP: 002b:00007ffccb3e90d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 25.921497][ T378] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f09baf9e097
[ 25.921505][ T378] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccb3e9190
[ 25.921512][ T378] RBP: 00007ffccb3e9190 R08: 00007ffccb3ea190 R09: 00000000ffffffff
[ 25.921520][ T378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccb3ea220
[ 25.921528][ T378] R13: 00007f09bb0321ca R14: 00000000000063e0 R15: 00007ffccb3ea260
[ 25.921537][ T378]
[ 25.921541][ T378] ==================================================================
[ 26.164853][ T378] Disabling lock debugging due to kernel taint
[ 26.171069][ T378] BUG: kernel NULL pointer dereference, address: 0000000000000168
[ 26.178859][ T378] #PF: supervisor write access in kernel mode
[ 26.184899][ T378] #PF: error_code(0x0002) - not-present page
[ 26.190883][ T378] PGD 8000000115e80067 P4D 8000000115e80067 PUD 0
[ 26.197381][ T378] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
[ 26.203451][ T378] CPU: 1 UID: 0 PID: 378 Comm: syz-executor Tainted: G B W syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066
[ 26.216545][ T378] Tainted: [B]=BAD_PAGE, [W]=WARN
[ 26.221544][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 26.231581][ T378] RIP: 0010:ihold+0x2a/0x70
[ 26.236075][ T378] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 7a 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 09 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed
[ 26.255666][ T378] RSP: 0018:ffffc90005b17ca0 EFLAGS: 00010246
[ 26.261720][ T378] RAX: ffff88810b3ba600 RBX: 0000000000000000 RCX: ffff88810b3ba600
[ 26.269673][ T378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 26.277631][ T378] RBP: ffffc90005b17cb0 R08: ffffffff88bba947 R09: 1ffffffff1177528
[ 26.285587][ T378] R10: dffffc0000000000 R11: fffffbfff1177529 R12: ffff888116436d1c
[ 26.293542][ T378] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[ 26.301498][ T378] FS: 000055558e363500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 26.310412][ T378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 26.316982][ T378] CR2: 0000000000000168 CR3: 0000000113eee000 CR4: 00000000003526b0
[ 26.324946][ T378] Call Trace:
[ 26.328214][ T378]
[ 26.331128][ T378] vfs_rmdir+0x26a/0x560
[ 26.335360][ T378] incfs_kill_sb+0x109/0x230
[ 26.339934][ T378] deactivate_locked_super+0xd8/0x2a0
[ 26.345292][ T378] deactivate_super+0xb8/0xe0
[ 26.349952][ T378] cleanup_mnt+0x406/0x4a0
[ 26.354346][ T378] __cleanup_mnt+0x1d/0x40
[ 26.358743][ T378] task_work_run+0x1e5/0x260
[ 26.363320][ T378] ? __cfi_task_work_run+0x10/0x10
[ 26.368415][ T378] ? __x64_sys_umount+0x12e/0x180
[ 26.373428][ T378] ? __cfi___x64_sys_umount+0x10/0x10
[ 26.378791][ T378] ? __kasan_check_read+0x15/0x20
[ 26.383802][ T378] resume_user_mode_work+0x35/0x50
[ 26.388896][ T378] syscall_exit_to_user_mode+0x63/0xb0
[ 26.394342][ T378] do_syscall_64+0x63/0xf0
[ 26.398738][ T378] ? clear_bhb_loop+0x50/0xa0
[ 26.403398][ T378] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 26.409272][ T378] RIP: 0033:0x7f09baf9e097
[ 26.413674][ T378] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 26.433264][ T378] RSP: 002b:00007ffccb3e90d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 26.441667][ T378] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f09baf9e097
[ 26.449631][ T378] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccb3e9190
[ 26.457594][ T378] RBP: 00007ffccb3e9190 R08: 00007ffccb3ea190 R09: 00000000ffffffff
[ 26.465577][ T378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccb3ea220
[ 26.473533][ T378] R13: 00007f09bb0321ca R14: 00000000000063e0 R15: 00007ffccb3ea260
[ 26.481499][ T378]
[ 26.484501][ T378] Modules linked in:
[ 26.488389][ T378] CR2: 0000000000000168
[ 26.492520][ T378] ---[ end trace 0000000000000000 ]---
[ 26.497961][ T378] RIP: 0010:ihold+0x2a/0x70
[ 26.502458][ T378] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 7a 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 09 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed
[ 26.522160][ T378] RSP: 0018:ffffc90005b17ca0 EFLAGS: 00010246
[ 26.528214][ T378] RAX: ffff88810b3ba600 RBX: 0000000000000000 RCX: ffff88810b3ba600
[ 26.536174][ T378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 26.544153][ T378] RBP: ffffc90005b17cb0 R08: ffffffff88bba947 R09: 1ffffffff1177528
[ 26.552114][ T378] R10: dffffc0000000000 R11: fffffbfff1177529 R12: ffff888116436d1c
[ 26.560071][ T378] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[ 26.568023][ T378] FS: 000055558e363500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 26.576940][ T378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 26.583508][ T378] CR2: 0000000000000168 CR3: 0000000113eee000 CR4: 00000000003526b0
[ 26.591467][ T378] Kernel panic - not syncing: Fatal exception
[ 26.597662][ T378] Kernel Offset: disabled
[ 26.601970][ T378] Rebooting in 86400 seconds..