cess permissive=1 [ 13.761860][ T36] audit: type=1400 audit(1783766114.160:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. 2026/07/11 10:35:23 parsed 1 programs 2026/07/11 10:35:23 serving rpc on tcp://32897 [ 23.030353][ T36] audit: type=1400 audit(1783766123.430:64): avc: denied { node_bind } for pid=302 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 23.999198][ T36] audit: type=1400 audit(1783766124.400:65): avc: denied { mounton } for pid=308 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.000338][ T308] cgroup: Unknown subsys name 'net' [ 24.021874][ T36] audit: type=1400 audit(1783766124.400:66): avc: denied { mount } for pid=308 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.049243][ T36] audit: type=1400 audit(1783766124.430:67): avc: denied { unmount } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.049452][ T308] cgroup: Unknown subsys name 'devices' [ 24.183015][ T308] cgroup: Unknown subsys name 'hugetlb' [ 24.188634][ T308] cgroup: Unknown subsys name 'rlimit' [ 24.296631][ T36] audit: type=1400 audit(1783766124.700:68): avc: denied { setattr } for pid=308 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.319836][ T36] audit: type=1400 audit(1783766124.700:69): avc: denied { create } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.323076][ T312] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.340366][ T36] audit: type=1400 audit(1783766124.700:70): avc: denied { write } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.369006][ T36] audit: type=1400 audit(1783766124.700:71): avc: denied { read } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.389197][ T36] audit: type=1400 audit(1783766124.700:72): avc: denied { sys_module } for pid=308 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 24.406288][ T308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.410158][ T36] audit: type=1400 audit(1783766124.700:73): avc: denied { mounton } for pid=308 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.313669][ T317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.519607][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.526687][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.533813][ T336] bridge_slave_0: entered allmulticast mode [ 25.540042][ T336] bridge_slave_0: entered promiscuous mode [ 25.546512][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.553565][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.560672][ T336] bridge_slave_1: entered allmulticast mode [ 25.566985][ T336] bridge_slave_1: entered promiscuous mode [ 25.608615][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.615690][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.622976][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.629992][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.651384][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.658616][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.668173][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.675245][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.691135][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.698453][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.719705][ T336] veth0_vlan: entered promiscuous mode [ 25.729727][ T336] veth1_macvtap: entered promiscuous mode [ 25.813671][ T46] bridge_slave_1: left allmulticast mode [ 25.819363][ T46] bridge_slave_1: left promiscuous mode [ 25.825210][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.832950][ T46] bridge_slave_0: left allmulticast mode [ 25.838597][ T46] bridge_slave_0: left promiscuous mode [ 25.844221][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.968653][ T46] veth1_macvtap: left promiscuous mode [ 25.974329][ T46] veth0_vlan: left promiscuous mode 2026/07/11 10:35:26 executed programs: 0 [ 26.595665][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.602803][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.609856][ T379] bridge_slave_0: entered allmulticast mode [ 26.616585][ T379] bridge_slave_0: entered promiscuous mode [ 26.624828][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.631878][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.638909][ T379] bridge_slave_1: entered allmulticast mode [ 26.645202][ T379] bridge_slave_1: entered promiscuous mode [ 26.683009][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.690066][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.697351][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.704388][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.722667][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.729834][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.739240][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.746300][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.755307][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.762402][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.784759][ T379] veth0_vlan: entered promiscuous mode [ 26.795099][ T379] veth1_macvtap: entered promiscuous mode [ 26.823153][ T379] ------------[ cut here ]------------ [ 26.828636][ T379] WARNING: CPU: 1 PID: 379 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 26.836573][ T379] Modules linked in: [ 26.840488][ T379] CPU: 1 UID: 0 PID: 379 Comm: syz-executor Not tainted syzkaller #0 7d836c68f7d55d9b8be32a3afed0c3f02dc2df9e [ 26.852265][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 26.862381][ T379] RIP: 0010:drop_nlink+0xce/0x110 [ 26.867399][ T379] Code: 04 00 00 be 08 00 00 00 e8 4f 14 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c8 da b3 03 cc e8 d2 5d 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 26.887067][ T379] RSP: 0018:ffffc90001abfc88 EFLAGS: 00010293 [ 26.893154][ T379] RAX: ffffffff81f2141e RBX: ffff888116934f50 RCX: ffff888115852600 [ 26.901117][ T379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.909140][ T379] RBP: ffffc90001abfcb0 R08: 0000000000000003 R09: 0000000000000004 [ 26.917225][ T379] R10: dffffc0000000000 R11: fffff52000357f80 R12: dffffc0000000000 [ 26.925329][ T379] R13: 1ffff11022d269f3 R14: ffff888116934f98 R15: 0000000000000000 [ 26.933334][ T379] FS: 0000555572ec6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 26.942282][ T379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.948863][ T379] CR2: 0000555572ee9958 CR3: 000000012ff98000 CR4: 00000000003526b0 [ 26.956886][ T379] Call Trace: [ 26.960164][ T379] [ 26.963115][ T379] shmem_rmdir+0x5f/0x90 [ 26.967366][ T379] vfs_rmdir+0x3db/0x560 [ 26.971689][ T379] incfs_kill_sb+0x102/0x220 [ 26.976283][ T379] deactivate_locked_super+0xd2/0x270 [ 26.981678][ T379] deactivate_super+0xb8/0xe0 [ 26.986356][ T379] cleanup_mnt+0x438/0x4d0 [ 26.990758][ T379] __cleanup_mnt+0x1d/0x40 [ 26.995226][ T379] task_work_run+0x1e8/0x260 [ 26.999855][ T379] ? __cfi_task_work_run+0x10/0x10 [ 27.005007][ T379] ? __x64_sys_umount+0x12e/0x180 [ 27.010039][ T379] ? __cfi___x64_sys_umount+0x10/0x10 [ 27.015442][ T379] ? __kasan_check_read+0x15/0x20 [ 27.020467][ T379] resume_user_mode_work+0x35/0x50 [ 27.025602][ T379] syscall_exit_to_user_mode+0x63/0xb0 [ 27.031067][ T379] do_syscall_64+0x63/0xf0 [ 27.035505][ T379] ? clear_bhb_loop+0x50/0xa0 [ 27.040184][ T379] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.046110][ T379] RIP: 0033:0x7fa44439f097 [ 27.050539][ T379] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 27.070283][ T379] RSP: 002b:00007ffc726e16e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 27.078753][ T379] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa44439f097 [ 27.086761][ T379] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc726e17a0 [ 27.094764][ T379] RBP: 00007ffc726e17a0 R08: 00007ffc726e27a0 R09: 00000000ffffffff [ 27.102751][ T379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc726e2830 [ 27.110713][ T379] R13: 00007fa4444332ca R14: 00000000000068ad R15: 00007ffc726e2870 [ 27.118703][ T379] [ 27.121732][ T379] ---[ end trace 0000000000000000 ]--- [ 27.127260][ T379] ================================================================== [ 27.135331][ T379] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 27.141600][ T379] Write of size 4 at addr 0000000000000168 by task syz-executor/379 [ 27.149554][ T379] [ 27.151861][ T379] CPU: 0 UID: 0 PID: 379 Comm: syz-executor Tainted: G W syzkaller #0 7d836c68f7d55d9b8be32a3afed0c3f02dc2df9e [ 27.151878][ T379] Tainted: [W]=WARN [ 27.151882][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 27.151888][ T379] Call Trace: [ 27.151893][ T379] [ 27.151898][ T379] __dump_stack+0x21/0x30 [ 27.151916][ T379] dump_stack_lvl+0x140/0x1c0 [ 27.151930][ T379] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.151945][ T379] print_report+0x3d/0x70 [ 27.151958][ T379] kasan_report+0x162/0x1a0 [ 27.151972][ T379] ? ihold+0x24/0x70 [ 27.151984][ T379] ? ihold+0x24/0x70 [ 27.151995][ T379] kasan_check_range+0x25a/0x2b0 [ 27.152008][ T379] __kasan_check_write+0x18/0x20 [ 27.152018][ T379] ihold+0x24/0x70 [ 27.152028][ T379] vfs_rmdir+0x25c/0x560 [ 27.152042][ T379] incfs_kill_sb+0x102/0x220 [ 27.152054][ T379] deactivate_locked_super+0xd2/0x270 [ 27.152068][ T379] deactivate_super+0xb8/0xe0 [ 27.152081][ T379] cleanup_mnt+0x438/0x4d0 [ 27.152093][ T379] __cleanup_mnt+0x1d/0x40 [ 27.152104][ T379] task_work_run+0x1e8/0x260 [ 27.152118][ T379] ? __cfi_task_work_run+0x10/0x10 [ 27.152131][ T379] ? __x64_sys_umount+0x12e/0x180 [ 27.152145][ T379] ? __cfi___x64_sys_umount+0x10/0x10 [ 27.152160][ T379] ? __kasan_check_read+0x15/0x20 [ 27.152169][ T379] resume_user_mode_work+0x35/0x50 [ 27.152184][ T379] syscall_exit_to_user_mode+0x63/0xb0 [ 27.152199][ T379] do_syscall_64+0x63/0xf0 [ 27.152209][ T379] ? clear_bhb_loop+0x50/0xa0 [ 27.152222][ T379] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.152234][ T379] RIP: 0033:0x7fa44439f097 [ 27.152245][ T379] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 27.152254][ T379] RSP: 002b:00007ffc726e16e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 27.152265][ T379] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa44439f097 [ 27.152273][ T379] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc726e17a0 [ 27.152279][ T379] RBP: 00007ffc726e17a0 R08: 00007ffc726e27a0 R09: 00000000ffffffff [ 27.152287][ T379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc726e2830 [ 27.152294][ T379] R13: 00007fa4444332ca R14: 00000000000068ad R15: 00007ffc726e2870 [ 27.152302][ T379] [ 27.152306][ T379] ================================================================== [ 27.391555][ T379] Disabling lock debugging due to kernel taint [ 27.397743][ T379] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 27.405526][ T379] #PF: supervisor write access in kernel mode [ 27.411581][ T379] #PF: error_code(0x0002) - not-present page [ 27.417534][ T379] PGD 800000010dfb5067 P4D 800000010dfb5067 PUD 0 [ 27.424023][ T379] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 27.430071][ T379] CPU: 0 UID: 0 PID: 379 Comm: syz-executor Tainted: G B W syzkaller #0 7d836c68f7d55d9b8be32a3afed0c3f02dc2df9e [ 27.443158][ T379] Tainted: [B]=BAD_PAGE, [W]=WARN [ 27.448157][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 27.458192][ T379] RIP: 0010:ihold+0x2a/0x70 [ 27.462686][ T379] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 54 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 0c 0b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 27.482288][ T379] RSP: 0018:ffffc90001abfcc8 EFLAGS: 00010246 [ 27.488338][ T379] RAX: ffff888115852600 RBX: 0000000000000000 RCX: ffff888115852600 [ 27.496301][ T379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.504255][ T379] RBP: ffffc90001abfcd8 R08: ffffffff88bb2947 R09: 1ffffffff1176528 [ 27.512208][ T379] R10: dffffc0000000000 R11: fffffbfff1176529 R12: 0000000000000000 [ 27.520161][ T379] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 27.528133][ T379] FS: 0000555572ec6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 27.537044][ T379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.543606][ T379] CR2: 0000000000000168 CR3: 000000012ff98000 CR4: 00000000003526b0 [ 27.551579][ T379] Call Trace: [ 27.554841][ T379] [ 27.557755][ T379] vfs_rmdir+0x25c/0x560 [ 27.561982][ T379] incfs_kill_sb+0x102/0x220 [ 27.566552][ T379] deactivate_locked_super+0xd2/0x270 [ 27.571927][ T379] deactivate_super+0xb8/0xe0 [ 27.576594][ T379] cleanup_mnt+0x438/0x4d0 [ 27.580997][ T379] __cleanup_mnt+0x1d/0x40 [ 27.585394][ T379] task_work_run+0x1e8/0x260 [ 27.589963][ T379] ? __cfi_task_work_run+0x10/0x10 [ 27.595054][ T379] ? __x64_sys_umount+0x12e/0x180 [ 27.600060][ T379] ? __cfi___x64_sys_umount+0x10/0x10 [ 27.605413][ T379] ? __kasan_check_read+0x15/0x20 [ 27.610418][ T379] resume_user_mode_work+0x35/0x50 [ 27.615514][ T379] syscall_exit_to_user_mode+0x63/0xb0 [ 27.620957][ T379] do_syscall_64+0x63/0xf0 [ 27.625349][ T379] ? clear_bhb_loop+0x50/0xa0 [ 27.630004][ T379] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.635874][ T379] RIP: 0033:0x7fa44439f097 [ 27.640269][ T379] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 27.659854][ T379] RSP: 002b:00007ffc726e16e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 27.668248][ T379] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa44439f097 [ 27.676195][ T379] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc726e17a0 [ 27.684144][ T379] RBP: 00007ffc726e17a0 R08: 00007ffc726e27a0 R09: 00000000ffffffff [ 27.692096][ T379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc726e2830 [ 27.700044][ T379] R13: 00007fa4444332ca R14: 00000000000068ad R15: 00007ffc726e2870 [ 27.708019][ T379] [ 27.711020][ T379] Modules linked in: [ 27.714909][ T379] CR2: 0000000000000168 [ 27.719040][ T379] ---[ end trace 0000000000000000 ]--- [ 27.724484][ T379] RIP: 0010:ihold+0x2a/0x70 [ 27.728973][ T379] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 54 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 0c 0b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 27.748561][ T379] RSP: 0018:ffffc90001abfcc8 EFLAGS: 00010246 [ 27.754614][ T379] RAX: ffff888115852600 RBX: 0000000000000000 RCX: ffff888115852600 [ 27.762567][ T379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.770517][ T379] RBP: ffffc90001abfcd8 R08: ffffffff88bb2947 R09: 1ffffffff1176528 [ 27.778470][ T379] R10: dffffc0000000000 R11: fffffbfff1176529 R12: 0000000000000000 [ 27.786422][ T379] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 27.794375][ T379] FS: 0000555572ec6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 27.803286][ T379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.809852][ T379] CR2: 0000000000000168 CR3: 000000012ff98000 CR4: 00000000003526b0 [ 27.817810][ T379] Kernel panic - not syncing: Fatal exception [ 27.824164][ T379] Kernel Offset: disabled [ 27.828496][ T379] Rebooting in 86400 seconds..