Warning: Permanently added '10.128.1.22' (ED25519) to the list of known hosts.
2026/02/23 15:55:16 parsed 1 programs
[ 26.397837][ T36] audit: type=1400 audit(1771862116.100:64): avc: denied { node_bind } for pid=291 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 27.572518][ T36] audit: type=1400 audit(1771862117.280:65): avc: denied { mounton } for pid=297 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 27.573536][ T297] cgroup: Unknown subsys name 'net'
[ 27.595370][ T36] audit: type=1400 audit(1771862117.280:66): avc: denied { mount } for pid=297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 27.623214][ T36] audit: type=1400 audit(1771862117.310:67): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 27.623419][ T297] cgroup: Unknown subsys name 'devices'
[ 27.802325][ T297] cgroup: Unknown subsys name 'hugetlb'
[ 27.807954][ T297] cgroup: Unknown subsys name 'rlimit'
[ 27.967088][ T36] audit: type=1400 audit(1771862117.670:68): avc: denied { setattr } for pid=297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 27.990313][ T36] audit: type=1400 audit(1771862117.670:69): avc: denied { create } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 28.001533][ T301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 28.010947][ T36] audit: type=1400 audit(1771862117.670:70): avc: denied { write } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 28.039805][ T36] audit: type=1400 audit(1771862117.670:71): avc: denied { read } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 28.060040][ T36] audit: type=1400 audit(1771862117.670:72): avc: denied { sys_module } for pid=297 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 28.069158][ T297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 28.081544][ T36] audit: type=1400 audit(1771862117.670:73): avc: denied { mounton } for pid=297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 29.084825][ T304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 29.835161][ T350] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.842284][ T350] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.849440][ T350] bridge_slave_0: entered allmulticast mode
[ 29.856156][ T350] bridge_slave_0: entered promiscuous mode
[ 29.862649][ T350] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.869732][ T350] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.876881][ T350] bridge_slave_1: entered allmulticast mode
[ 29.883465][ T350] bridge_slave_1: entered promiscuous mode
[ 29.926625][ T350] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.933878][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.941398][ T350] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.948530][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.968031][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.975945][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.985990][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.993095][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 30.003423][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.010614][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 30.034488][ T350] veth0_vlan: entered promiscuous mode
[ 30.045395][ T350] veth1_macvtap: entered promiscuous mode
[ 30.102817][ T13] bridge_slave_1: left allmulticast mode
[ 30.108558][ T13] bridge_slave_1: left promiscuous mode
[ 30.114598][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 30.122678][ T13] bridge_slave_0: left allmulticast mode
[ 30.128537][ T13] bridge_slave_0: left promiscuous mode
[ 30.134590][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 30.283037][ T13] veth1_macvtap: left promiscuous mode
[ 30.288729][ T13] veth0_vlan: left promiscuous mode
2026/02/23 15:55:20 executed programs: 0
[ 30.411622][ T371] bridge0: port 1(bridge_slave_0) entered blocking state
[ 30.418773][ T371] bridge0: port 1(bridge_slave_0) entered disabled state
[ 30.426115][ T371] bridge_slave_0: entered allmulticast mode
[ 30.433030][ T371] bridge_slave_0: entered promiscuous mode
[ 30.439367][ T371] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.446558][ T371] bridge0: port 2(bridge_slave_1) entered disabled state
[ 30.453716][ T371] bridge_slave_1: entered allmulticast mode
[ 30.460180][ T371] bridge_slave_1: entered promiscuous mode
[ 30.513177][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 30.520360][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 30.529850][ T309] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.536915][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 30.561341][ T371] veth0_vlan: entered promiscuous mode
[ 30.575671][ T371] veth1_macvtap: entered promiscuous mode
[ 30.605759][ T371] ------------[ cut here ]------------
[ 30.611317][ T371] WARNING: CPU: 0 PID: 371 at fs/inode.c:340 drop_nlink+0xce/0x110
[ 30.619462][ T371] Modules linked in:
[ 30.623525][ T371] CPU: 0 UID: 0 PID: 371 Comm: syz-executor Not tainted syzkaller #0 f3a946831d5e2592ee08d6703df2b13566dbc460
[ 30.635248][ T371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 30.645375][ T371] RIP: 0010:drop_nlink+0xce/0x110
[ 30.650563][ T371] Code: 04 00 00 be 08 00 00 00 e8 ff 21 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c8 b0 af 03 cc e8 c2 3b 96 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c
[ 30.670505][ T371] RSP: 0018:ffffc90000ebfc60 EFLAGS: 00010293
[ 30.676695][ T371] RAX: ffffffff81f1605e RBX: ffff888110364428 RCX: ffff888114b03900
[ 30.684798][ T371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 30.693042][ T371] RBP: ffffc90000ebfc88 R08: 0000000000000003 R09: 0000000000000004
[ 30.701187][ T371] R10: dffffc0000000000 R11: fffff520001d7f7c R12: dffffc0000000000
[ 30.709282][ T371] R13: 1ffff1102206c88e R14: ffff888110364470 R15: 0000000000000000
[ 30.717324][ T371] FS: 000055558446d500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 30.726310][ T371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.732945][ T371] CR2: 0000555584490948 CR3: 00000001149f6000 CR4: 00000000003526b0
[ 30.740987][ T371] Call Trace:
[ 30.744279][ T371]
[ 30.747292][ T371] shmem_rmdir+0x5f/0x90
[ 30.751652][ T371] vfs_rmdir+0x3e0/0x560
[ 30.755932][ T371] incfs_kill_sb+0x109/0x230
[ 30.760602][ T371] deactivate_locked_super+0xd5/0x2a0
[ 30.766028][ T371] deactivate_super+0xb8/0xe0
[ 30.770950][ T371] cleanup_mnt+0x406/0x4a0
[ 30.775392][ T371] __cleanup_mnt+0x1d/0x40
[ 30.779868][ T371] task_work_run+0x1e5/0x260
[ 30.784507][ T371] ? __cfi_task_work_run+0x10/0x10
[ 30.789667][ T371] ? __x64_sys_umount+0x12e/0x180
[ 30.794746][ T371] ? __cfi___x64_sys_umount+0x10/0x10
[ 30.800183][ T371] ? __kasan_check_read+0x15/0x20
[ 30.805210][ T371] resume_user_mode_work+0x35/0x50
[ 30.810365][ T371] syscall_exit_to_user_mode+0x63/0xb0
[ 30.815841][ T371] do_syscall_64+0x63/0xf0
[ 30.820317][ T371] ? clear_bhb_loop+0x50/0xa0
[ 30.825042][ T371] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 30.831075][ T371] RIP: 0033:0x7fade579d897
[ 30.835514][ T371] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 30.855325][ T371] RSP: 002b:00007ffe31af9418 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 30.863880][ T371] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fade579d897
[ 30.871934][ T371] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe31af94d0
[ 30.879928][ T371] RBP: 00007ffe31af94d0 R08: 00007ffe31afa4d0 R09: 00000000ffffffff
[ 30.888031][ T371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe31afa560
[ 30.896135][ T371] R13: 00007fade5831ef0 R14: 0000000000007776 R15: 00007ffe31afa5a0
[ 30.904180][ T371]
[ 30.907394][ T371] ---[ end trace 0000000000000000 ]---
[ 30.913299][ T371] ==================================================================
[ 30.921387][ T371] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70
[ 30.927669][ T371] Write of size 4 at addr 0000000000000168 by task syz-executor/371
[ 30.935727][ T371]
[ 30.938056][ T371] CPU: 1 UID: 0 PID: 371 Comm: syz-executor Tainted: G W syzkaller #0 f3a946831d5e2592ee08d6703df2b13566dbc460
[ 30.938080][ T371] Tainted: [W]=WARN
[ 30.938084][ T371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 30.938092][ T371] Call Trace:
[ 30.938098][ T371]
[ 30.938105][ T371] __dump_stack+0x21/0x30
[ 30.938126][ T371] dump_stack_lvl+0x140/0x1c0
[ 30.938141][ T371] ? __cfi_dump_stack_lvl+0x10/0x10
[ 30.938157][ T371] print_report+0x3d/0x70
[ 30.938171][ T371] kasan_report+0x162/0x1a0
[ 30.938190][ T371] ? ihold+0x24/0x70
[ 30.938207][ T371] ? _raw_spin_unlock+0x45/0x60
[ 30.938219][ T371] ? ihold+0x24/0x70
[ 30.938236][ T371] kasan_check_range+0x25a/0x2b0
[ 30.938254][ T371] __kasan_check_write+0x18/0x20
[ 30.938268][ T371] ihold+0x24/0x70
[ 30.938284][ T371] vfs_rmdir+0x26a/0x560
[ 30.938297][ T371] incfs_kill_sb+0x109/0x230
[ 30.938312][ T371] deactivate_locked_super+0xd5/0x2a0
[ 30.938325][ T371] deactivate_super+0xb8/0xe0
[ 30.938337][ T371] cleanup_mnt+0x406/0x4a0
[ 30.938354][ T371] __cleanup_mnt+0x1d/0x40
[ 30.938373][ T371] task_work_run+0x1e5/0x260
[ 30.938388][ T371] ? __cfi_task_work_run+0x10/0x10
[ 30.938401][ T371] ? __x64_sys_umount+0x12e/0x180
[ 30.938414][ T371] ? __cfi___x64_sys_umount+0x10/0x10
[ 30.938428][ T371] ? __kasan_check_read+0x15/0x20
[ 30.938442][ T371] resume_user_mode_work+0x35/0x50
[ 30.938458][ T371] syscall_exit_to_user_mode+0x63/0xb0
[ 30.938475][ T371] do_syscall_64+0x63/0xf0
[ 30.938487][ T371] ? clear_bhb_loop+0x50/0xa0
[ 30.938499][ T371] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 30.938518][ T371] RIP: 0033:0x7fade579d897
[ 30.938530][ T371] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 30.938541][ T371] RSP: 002b:00007ffe31af9418 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 30.938557][ T371] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fade579d897
[ 30.938566][ T371] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe31af94d0
[ 30.938574][ T371] RBP: 00007ffe31af94d0 R08: 00007ffe31afa4d0 R09: 00000000ffffffff
[ 30.938583][ T371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe31afa560
[ 30.938591][ T371] R13: 00007fade5831ef0 R14: 0000000000007776 R15: 00007ffe31afa5a0
[ 30.938602][ T371]
[ 30.938606][ T371] ==================================================================
[ 31.185719][ T371] Disabling lock debugging due to kernel taint
[ 31.192059][ T371] BUG: kernel NULL pointer dereference, address: 0000000000000168
[ 31.199896][ T371] #PF: supervisor write access in kernel mode
[ 31.205985][ T371] #PF: error_code(0x0002) - not-present page
[ 31.211960][ T371] PGD 800000011335c067 P4D 800000011335c067 PUD 0
[ 31.218468][ T371] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
[ 31.224525][ T371] CPU: 0 UID: 0 PID: 371 Comm: syz-executor Tainted: G B W syzkaller #0 f3a946831d5e2592ee08d6703df2b13566dbc460
[ 31.237644][ T371] Tainted: [B]=BAD_PAGE, [W]=WARN
[ 31.242662][ T371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 31.253025][ T371] RIP: 0010:ihold+0x2a/0x70
[ 31.257559][ T371] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 ad 32 96 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 bc 18 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 bd
[ 31.277332][ T371] RSP: 0018:ffffc90000ebfca0 EFLAGS: 00010246
[ 31.283409][ T371] RAX: ffff888114b03900 RBX: 0000000000000000 RCX: ffff888114b03900
[ 31.291644][ T371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 31.299703][ T371] RBP: ffffc90000ebfcb0 R08: ffffffff88b8b947 R09: 1ffffffff1171728
[ 31.307685][ T371] R10: dffffc0000000000 R11: fffffbfff1171729 R12: ffff888110364434
[ 31.315747][ T371] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[ 31.323926][ T371] FS: 000055558446d500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 31.332952][ T371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.339584][ T371] CR2: 0000000000000168 CR3: 00000001149f6000 CR4: 00000000003526b0
[ 31.347597][ T371] Call Trace:
[ 31.351058][ T371]
[ 31.353983][ T371] vfs_rmdir+0x26a/0x560
[ 31.358224][ T371] incfs_kill_sb+0x109/0x230
[ 31.362806][ T371] deactivate_locked_super+0xd5/0x2a0
[ 31.368192][ T371] deactivate_super+0xb8/0xe0
[ 31.372878][ T371] cleanup_mnt+0x406/0x4a0
[ 31.377292][ T371] __cleanup_mnt+0x1d/0x40
[ 31.381701][ T371] task_work_run+0x1e5/0x260
[ 31.386280][ T371] ? __cfi_task_work_run+0x10/0x10
[ 31.391470][ T371] ? __x64_sys_umount+0x12e/0x180
[ 31.396572][ T371] ? __cfi___x64_sys_umount+0x10/0x10
[ 31.401949][ T371] ? __kasan_check_read+0x15/0x20
[ 31.406965][ T371] resume_user_mode_work+0x35/0x50
[ 31.412067][ T371] syscall_exit_to_user_mode+0x63/0xb0
[ 31.417521][ T371] do_syscall_64+0x63/0xf0
[ 31.421939][ T371] ? clear_bhb_loop+0x50/0xa0
[ 31.426720][ T371] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 31.432608][ T371] RIP: 0033:0x7fade579d897
[ 31.437020][ T371] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 31.456625][ T371] RSP: 002b:00007ffe31af9418 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 31.465036][ T371] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fade579d897
[ 31.473105][ T371] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe31af94d0
[ 31.481093][ T371] RBP: 00007ffe31af94d0 R08: 00007ffe31afa4d0 R09: 00000000ffffffff
[ 31.489067][ T371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe31afa560
[ 31.497131][ T371] R13: 00007fade5831ef0 R14: 0000000000007776 R15: 00007ffe31afa5a0
[ 31.505193][ T371]
[ 31.508214][ T371] Modules linked in:
[ 31.512103][ T371] CR2: 0000000000000168
[ 31.516264][ T371] ---[ end trace 0000000000000000 ]---
[ 31.521723][ T371] RIP: 0010:ihold+0x2a/0x70
[ 31.526229][ T371] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 ad 32 96 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 bc 18 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 bd
[ 31.546009][ T371] RSP: 0018:ffffc90000ebfca0 EFLAGS: 00010246
[ 31.552094][ T371] RAX: ffff888114b03900 RBX: 0000000000000000 RCX: ffff888114b03900
[ 31.560069][ T371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 31.568230][ T371] RBP: ffffc90000ebfcb0 R08: ffffffff88b8b947 R09: 1ffffffff1171728
[ 31.576206][ T371] R10: dffffc0000000000 R11: fffffbfff1171729 R12: ffff888110364434
[ 31.584175][ T371] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[ 31.592718][ T371] FS: 000055558446d500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 31.601729][ T371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.608407][ T371] CR2: 0000000000000168 CR3: 00000001149f6000 CR4: 00000000003526b0
[ 31.616486][ T371] Kernel panic - not syncing: Fatal exception
[ 31.622727][ T371] Kernel Offset: disabled
[ 31.627046][ T371] Rebooting in 86400 seconds..