cess permissive=1 [ 13.424458][ T36] audit: type=1400 audit(1785477331.160:63): avc: denied { siginh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.122' (ED25519) to the list of known hosts. 2026/07/31 05:55:40 parsed 1 programs 2026/07/31 05:55:40 serving rpc on tcp://44181 [ 22.785024][ T36] audit: type=1400 audit(1785477340.530:64): avc: denied { node_bind } for pid=302 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 23.851311][ T36] audit: type=1400 audit(1785477341.600:65): avc: denied { mounton } for pid=309 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.852586][ T309] cgroup: Unknown subsys name 'net' [ 23.874170][ T36] audit: type=1400 audit(1785477341.600:66): avc: denied { mount } for pid=309 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.901648][ T36] audit: type=1400 audit(1785477341.630:67): avc: denied { unmount } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.901829][ T309] cgroup: Unknown subsys name 'devices' [ 24.032047][ T309] cgroup: Unknown subsys name 'hugetlb' [ 24.037795][ T309] cgroup: Unknown subsys name 'rlimit' [ 24.137640][ T36] audit: type=1400 audit(1785477341.880:68): avc: denied { setattr } for pid=309 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.160887][ T36] audit: type=1400 audit(1785477341.880:69): avc: denied { create } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.181376][ T36] audit: type=1400 audit(1785477341.880:70): avc: denied { write } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.190957][ T313] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.201838][ T36] audit: type=1400 audit(1785477341.880:71): avc: denied { read } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.230650][ T36] audit: type=1400 audit(1785477341.880:72): avc: denied { sys_module } for pid=309 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 24.252158][ T36] audit: type=1400 audit(1785477341.880:73): avc: denied { mounton } for pid=309 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.281271][ T309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.360658][ T319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.400627][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.407710][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.414990][ T318] bridge_slave_0: entered allmulticast mode [ 25.421444][ T318] bridge_slave_0: entered promiscuous mode [ 25.443867][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.450941][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.457992][ T318] bridge_slave_1: entered allmulticast mode [ 25.464336][ T318] bridge_slave_1: entered promiscuous mode [ 25.570024][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.577200][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.584594][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.591684][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.670786][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.687348][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.740994][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.748204][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.770506][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.777637][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.870678][ T318] veth0_vlan: entered promiscuous mode [ 25.960531][ T318] veth1_macvtap: entered promiscuous mode [ 26.297166][ T340] bridge_slave_1: left allmulticast mode [ 26.303000][ T340] bridge_slave_1: left promiscuous mode [ 26.308701][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.323899][ T340] bridge_slave_0: left allmulticast mode [ 26.329674][ T340] bridge_slave_0: left promiscuous mode [ 26.336309][ T340] bridge0: port 1(bridge_slave_0) entered disabled state 2026/07/31 05:55:44 executed programs: 0 [ 26.477555][ T340] veth1_macvtap: left promiscuous mode [ 26.489144][ T340] veth0_vlan: left promiscuous mode [ 26.658856][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.666100][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.673443][ T380] bridge_slave_0: entered allmulticast mode [ 26.680198][ T380] bridge_slave_0: entered promiscuous mode [ 26.689512][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.696678][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.703773][ T380] bridge_slave_1: entered allmulticast mode [ 26.710310][ T380] bridge_slave_1: entered promiscuous mode [ 26.743313][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.750685][ T382] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.757862][ T382] bridge_slave_0: entered allmulticast mode [ 26.764856][ T382] bridge_slave_0: entered promiscuous mode [ 26.772981][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.780242][ T382] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.787306][ T382] bridge_slave_1: entered allmulticast mode [ 26.793705][ T382] bridge_slave_1: entered promiscuous mode [ 26.799991][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.807050][ T383] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.814202][ T383] bridge_slave_0: entered allmulticast mode [ 26.820565][ T383] bridge_slave_0: entered promiscuous mode [ 26.827031][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.834145][ T383] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.841509][ T383] bridge_slave_1: entered allmulticast mode [ 26.847707][ T383] bridge_slave_1: entered promiscuous mode [ 26.901529][ T385] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.908666][ T385] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.915781][ T385] bridge_slave_0: entered allmulticast mode [ 26.922007][ T385] bridge_slave_0: entered promiscuous mode [ 26.943412][ T385] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.950564][ T385] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.957640][ T385] bridge_slave_1: entered allmulticast mode [ 26.964076][ T385] bridge_slave_1: entered promiscuous mode [ 27.094711][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.101908][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.109535][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.116692][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.128857][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.135946][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.143240][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.150458][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.196839][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.203926][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.211246][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.218645][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.239694][ T385] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.247121][ T385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.254464][ T385] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.261511][ T385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.290236][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.297615][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.305168][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.313164][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.320339][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.327459][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.334907][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.342121][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.371179][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.378397][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.386626][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.393665][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.401722][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.408768][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.416788][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.424668][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.433805][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.440877][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.456944][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.464035][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.472159][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.479228][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.486978][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.494038][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.517517][ T380] veth0_vlan: entered promiscuous mode [ 27.548228][ T380] veth1_macvtap: entered promiscuous mode [ 27.555846][ T385] veth0_vlan: entered promiscuous mode [ 27.569498][ T382] veth0_vlan: entered promiscuous mode [ 27.591412][ T382] veth1_macvtap: entered promiscuous mode [ 27.602695][ T385] veth1_macvtap: entered promiscuous mode [ 27.651293][ T383] veth0_vlan: entered promiscuous mode [ 27.675088][ T383] veth1_macvtap: entered promiscuous mode [ 27.815629][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 27.815647][ T36] audit: type=1400 audit(1785477345.560:105): avc: denied { unmount } for pid=380 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 2026/07/31 05:55:49 executed programs: 101 2026/07/31 05:55:54 executed programs: 228 2026/07/31 05:55:59 executed programs: 354 [ 45.881926][ T46] bridge_slave_1: left allmulticast mode [ 45.887874][ T46] bridge_slave_1: left promiscuous mode [ 45.893728][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.901393][ T46] bridge_slave_0: left allmulticast mode [ 45.907117][ T46] bridge_slave_0: left promiscuous mode [ 45.912921][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.014578][ T2214] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.021887][ T2214] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.029028][ T2214] bridge_slave_0: entered allmulticast mode [ 46.035977][ T2214] bridge_slave_0: entered promiscuous mode [ 46.043272][ T46] veth1_macvtap: left promiscuous mode [ 46.049159][ T46] veth0_vlan: left promiscuous mode [ 46.099404][ T2214] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.106593][ T2214] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.114023][ T2214] bridge_slave_1: entered allmulticast mode [ 46.121932][ T2214] bridge_slave_1: entered promiscuous mode [ 46.188188][ T2214] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.195292][ T2214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.202599][ T2214] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.209841][ T2214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.230339][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.237623][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.251858][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.258935][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.268029][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.275624][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.311777][ T2214] veth0_vlan: entered promiscuous mode [ 46.333800][ T2214] veth1_macvtap: entered promiscuous mode 2026/07/31 05:56:04 executed programs: 478 2026/07/31 05:56:09 executed programs: 603 2026/07/31 05:56:14 executed programs: 730 [ 56.962992][ T3302] ------------[ cut here ]------------ [ 56.968544][ T3302] WARNING: CPU: 1 PID: 3302 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 56.976610][ T3302] Modules linked in: [ 56.980544][ T3302] CPU: 1 UID: 0 PID: 3302 Comm: syz.5.742 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 56.992379][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.002477][ T3302] RIP: 0010:drop_nlink+0xce/0x110 [ 57.007537][ T3302] Code: 04 00 00 be 08 00 00 00 e8 4f 14 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 42 4e 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 57.027564][ T3302] RSP: 0018:ffffc900029c7b28 EFLAGS: 00010293 [ 57.033969][ T3302] RAX: ffffffff81f2237e RBX: ffff88811bac3bf0 RCX: ffff88811aebcc00 [ 57.042034][ T3302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.050257][ T3302] RBP: ffffc900029c7b50 R08: 0000000000000003 R09: 0000000000000004 [ 57.058373][ T3302] R10: dffffc0000000000 R11: fffff52000538f54 R12: dffffc0000000000 [ 57.066486][ T3302] R13: 1ffff11023758787 R14: ffff88811bac3c38 R15: 0000000000000000 [ 57.074518][ T3302] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 57.083616][ T3302] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.090274][ T3302] CR2: 00007ffe73e6bbf0 CR3: 00000001301f2000 CR4: 00000000003526b0 [ 57.098439][ T3302] Call Trace: [ 57.101800][ T3302] [ 57.104831][ T3302] shmem_rmdir+0x5f/0x90 [ 57.109086][ T3302] vfs_rmdir+0x3de/0x560 [ 57.113824][ T3302] incfs_kill_sb+0x102/0x220 [ 57.118451][ T3302] deactivate_locked_super+0xd5/0x270 [ 57.123911][ T3302] deactivate_super+0xb8/0xe0 [ 57.128636][ T3302] cleanup_mnt+0x438/0x4d0 [ 57.133092][ T3302] __cleanup_mnt+0x1d/0x40 [ 57.137533][ T3302] task_work_run+0x1e8/0x260 [ 57.142190][ T3302] ? __cfi_task_work_run+0x10/0x10 [ 57.147437][ T3302] ? free_nsproxy+0x223/0x290 [ 57.152164][ T3302] do_exit+0xa46/0x2850 [ 57.156368][ T3302] ? __se_sys_clock_nanosleep+0x321/0x3b0 [ 57.162162][ T3302] ? __cfi_do_exit+0x10/0x10 [ 57.166789][ T3302] ? __kasan_check_write+0x18/0x20 [ 57.171949][ T3302] ? fpregs_restore_userregs+0x11c/0x260 [ 57.177610][ T3302] __x64_sys_exit+0x44/0x50 [ 57.182679][ T3302] x64_sys_call+0x2eb9/0x2ee0 [ 57.187470][ T3302] do_syscall_64+0x57/0xf0 [ 57.192181][ T3302] ? clear_bhb_loop+0x50/0xa0 [ 57.196896][ T3302] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.202859][ T3302] RIP: 0033:0x7f831dd9e019 [ 57.207335][ T3302] Code: Unable to access opcode bytes at 0x7f831dd9dfef. [ 57.214475][ T3302] RSP: 002b:00007f831ec63fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 57.223214][ T3302] RAX: ffffffffffffffda RBX: 00007f831e025fa0 RCX: 00007f831dd9e019 [ 57.231248][ T3302] RDX: 00007f831ec649c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.239232][ T3302] RBP: 00007f831de3500c R08: 0000000000000000 R09: 0000000000000000 [ 57.247259][ T3302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.255302][ T3302] R13: 00007f831e026038 R14: 00007f831e025fa0 R15: 00007ffe73e6e0c8 [ 57.263494][ T3302] [ 57.266531][ T3302] ---[ end trace 0000000000000000 ]--- [ 57.272137][ T3302] ------------[ cut here ]------------ [ 57.277607][ T3302] WARNING: CPU: 0 PID: 3302 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 57.285618][ T3302] Modules linked in: [ 57.289592][ T3302] CPU: 0 UID: 0 PID: 3302 Comm: syz.5.742 Tainted: G W syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 57.302571][ T3302] Tainted: [W]=WARN [ 57.306388][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.316534][ T3302] RIP: 0010:drop_nlink+0xce/0x110 [ 57.321652][ T3302] Code: 04 00 00 be 08 00 00 00 e8 4f 14 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 42 4e 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 57.341552][ T3302] RSP: 0018:ffffc900029c7b28 EFLAGS: 00010293 [ 57.347759][ T3302] RAX: ffffffff81f2237e RBX: ffff88811ad6a958 RCX: ffff88811aebcc00 [ 57.355918][ T3302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.363998][ T3302] RBP: ffffc900029c7b50 R08: 0000000000000003 R09: 0000000000000004 [ 57.372017][ T3302] R10: dffffc0000000000 R11: fffff52000538f54 R12: dffffc0000000000 [ 57.380033][ T3302] R13: 1ffff110235ad534 R14: ffff88811ad6a9a0 R15: 0000000000000000 [ 57.388018][ T3302] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 57.397003][ T3302] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.403640][ T3302] CR2: 00001c407c6d2000 CR3: 000000010cf2e000 CR4: 00000000003526b0 [ 57.412012][ T3302] Call Trace: [ 57.415324][ T3302] [ 57.418322][ T3302] shmem_rmdir+0x67/0x90 [ 57.422675][ T3302] vfs_rmdir+0x3de/0x560 [ 57.427033][ T3302] incfs_kill_sb+0x102/0x220 [ 57.431844][ T3302] deactivate_locked_super+0xd5/0x270 [ 57.437246][ T3302] deactivate_super+0xb8/0xe0 [ 57.442102][ T3302] cleanup_mnt+0x438/0x4d0 [ 57.446663][ T3302] __cleanup_mnt+0x1d/0x40 [ 57.451266][ T3302] task_work_run+0x1e8/0x260 [ 57.455913][ T3302] ? __cfi_task_work_run+0x10/0x10 [ 57.461126][ T3302] ? free_nsproxy+0x223/0x290 [ 57.465850][ T3302] do_exit+0xa46/0x2850 [ 57.470048][ T3302] ? __se_sys_clock_nanosleep+0x321/0x3b0 [ 57.475797][ T3302] ? __cfi_do_exit+0x10/0x10 [ 57.480521][ T3302] ? __kasan_check_write+0x18/0x20 [ 57.485647][ T3302] ? fpregs_restore_userregs+0x11c/0x260 [ 57.491307][ T3302] __x64_sys_exit+0x44/0x50 [ 57.495832][ T3302] x64_sys_call+0x2eb9/0x2ee0 [ 57.500676][ T3302] do_syscall_64+0x57/0xf0 [ 57.505111][ T3302] ? clear_bhb_loop+0x50/0xa0 [ 57.509855][ T3302] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.515768][ T3302] RIP: 0033:0x7f831dd9e019 [ 57.520213][ T3302] Code: Unable to access opcode bytes at 0x7f831dd9dfef. [ 57.527234][ T3302] RSP: 002b:00007f831ec63fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 57.535767][ T3302] RAX: ffffffffffffffda RBX: 00007f831e025fa0 RCX: 00007f831dd9e019 [ 57.543791][ T3302] RDX: 00007f831ec649c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.551939][ T3302] RBP: 00007f831de3500c R08: 0000000000000000 R09: 0000000000000000 [ 57.560095][ T3302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.568086][ T3302] R13: 00007f831e026038 R14: 00007f831e025fa0 R15: 00007ffe73e6e0c8 [ 57.576118][ T3302] [ 57.579241][ T3302] ---[ end trace 0000000000000000 ]--- [ 57.584964][ T3302] ================================================================== [ 57.593060][ T3302] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 57.599340][ T3302] Write of size 4 at addr 0000000000000168 by task syz.5.742/3302 [ 57.607149][ T3302] [ 57.609713][ T3302] CPU: 1 UID: 0 PID: 3302 Comm: syz.5.742 Tainted: G W syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 57.609740][ T3302] Tainted: [W]=WARN [ 57.609745][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.609753][ T3302] Call Trace: [ 57.609760][ T3302] [ 57.609766][ T3302] __dump_stack+0x21/0x30 [ 57.609790][ T3302] dump_stack_lvl+0x140/0x1c0 [ 57.609806][ T3302] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.609822][ T3302] print_report+0x3d/0x70 [ 57.609838][ T3302] kasan_report+0x162/0x1a0 [ 57.609853][ T3302] ? ihold+0x24/0x70 [ 57.609867][ T3302] ? ihold+0x24/0x70 [ 57.609880][ T3302] kasan_check_range+0x25a/0x2b0 [ 57.609894][ T3302] __kasan_check_write+0x18/0x20 [ 57.609906][ T3302] ihold+0x24/0x70 [ 57.609918][ T3302] vfs_rmdir+0x25c/0x560 [ 57.609934][ T3302] incfs_kill_sb+0x102/0x220 [ 57.609947][ T3302] deactivate_locked_super+0xd5/0x270 [ 57.609964][ T3302] deactivate_super+0xb8/0xe0 [ 57.609978][ T3302] cleanup_mnt+0x438/0x4d0 [ 57.609992][ T3302] __cleanup_mnt+0x1d/0x40 [ 57.610004][ T3302] task_work_run+0x1e8/0x260 [ 57.610020][ T3302] ? __cfi_task_work_run+0x10/0x10 [ 57.610034][ T3302] ? free_nsproxy+0x223/0x290 [ 57.610050][ T3302] do_exit+0xa46/0x2850 [ 57.610066][ T3302] ? __se_sys_clock_nanosleep+0x321/0x3b0 [ 57.610088][ T3302] ? __cfi_do_exit+0x10/0x10 [ 57.610107][ T3302] ? __kasan_check_write+0x18/0x20 [ 57.610122][ T3302] ? fpregs_restore_userregs+0x11c/0x260 [ 57.610141][ T3302] __x64_sys_exit+0x44/0x50 [ 57.610155][ T3302] x64_sys_call+0x2eb9/0x2ee0 [ 57.610169][ T3302] do_syscall_64+0x57/0xf0 [ 57.610183][ T3302] ? clear_bhb_loop+0x50/0xa0 [ 57.610199][ T3302] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.610214][ T3302] RIP: 0033:0x7f831dd9e019 [ 57.610225][ T3302] Code: Unable to access opcode bytes at 0x7f831dd9dfef. [ 57.610231][ T3302] RSP: 002b:00007f831ec63fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 57.610246][ T3302] RAX: ffffffffffffffda RBX: 00007f831e025fa0 RCX: 00007f831dd9e019 [ 57.610255][ T3302] RDX: 00007f831ec649c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.610263][ T3302] RBP: 00007f831de3500c R08: 0000000000000000 R09: 0000000000000000 [ 57.610271][ T3302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.610278][ T3302] R13: 00007f831e026038 R14: 00007f831e025fa0 R15: 00007ffe73e6e0c8 [ 57.610288][ T3302] [ 57.610293][ T3302] ================================================================== [ 57.860145][ T3302] Disabling lock debugging due to kernel taint [ 57.881619][ T3302] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 57.889483][ T3302] #PF: supervisor write access in kernel mode [ 57.895552][ T3302] #PF: error_code(0x0002) - not-present page [ 57.901527][ T3302] PGD 8000000127dd9067 P4D 8000000127dd9067 PUD 0 [ 57.908041][ T3302] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 57.914122][ T3302] CPU: 1 UID: 0 PID: 3302 Comm: syz.5.742 Tainted: G B W syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 57.927162][ T3302] Tainted: [B]=BAD_PAGE, [W]=WARN [ 57.932185][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.942281][ T3302] RIP: 0010:ihold+0x2a/0x70 [ 57.946840][ T3302] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 2d 45 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 0c 0b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 3d [ 57.966474][ T3302] RSP: 0018:ffffc900029c7b68 EFLAGS: 00010246 [ 57.972564][ T3302] RAX: ffff88811aebcc00 RBX: 0000000000000000 RCX: ffff88811aebcc00 [ 57.980561][ T3302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.988579][ T3302] RBP: ffffc900029c7b78 R08: ffffffff88bb3947 R09: 1ffffffff1176728 [ 57.996582][ T3302] R10: dffffc0000000000 R11: fffffbfff1176729 R12: 0000000000000000 [ 58.004561][ T3302] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 58.012532][ T3302] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 58.021544][ T3302] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.028126][ T3302] CR2: 0000000000000168 CR3: 0000000115e86000 CR4: 00000000003526b0 [ 58.036114][ T3302] Call Trace: [ 58.039397][ T3302] [ 58.042324][ T3302] vfs_rmdir+0x25c/0x560 [ 58.046574][ T3302] incfs_kill_sb+0x102/0x220 [ 58.051525][ T3302] deactivate_locked_super+0xd5/0x270 [ 58.056926][ T3302] deactivate_super+0xb8/0xe0 [ 58.061626][ T3302] cleanup_mnt+0x438/0x4d0 [ 58.066065][ T3302] __cleanup_mnt+0x1d/0x40 [ 58.070491][ T3302] task_work_run+0x1e8/0x260 [ 58.075083][ T3302] ? __cfi_task_work_run+0x10/0x10 [ 58.080193][ T3302] ? free_nsproxy+0x223/0x290 [ 58.084883][ T3302] do_exit+0xa46/0x2850 [ 58.089083][ T3302] ? __se_sys_clock_nanosleep+0x321/0x3b0 [ 58.094803][ T3302] ? __cfi_do_exit+0x10/0x10 [ 58.099393][ T3302] ? __kasan_check_write+0x18/0x20 [ 58.104503][ T3302] ? fpregs_restore_userregs+0x11c/0x260 [ 58.110142][ T3302] __x64_sys_exit+0x44/0x50 [ 58.114666][ T3302] x64_sys_call+0x2eb9/0x2ee0 [ 58.119426][ T3302] do_syscall_64+0x57/0xf0 [ 58.123840][ T3302] ? clear_bhb_loop+0x50/0xa0 [ 58.128516][ T3302] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.134407][ T3302] RIP: 0033:0x7f831dd9e019 [ 58.138819][ T3302] Code: Unable to access opcode bytes at 0x7f831dd9dfef. [ 58.145834][ T3302] RSP: 002b:00007f831ec63fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 58.154288][ T3302] RAX: ffffffffffffffda RBX: 00007f831e025fa0 RCX: 00007f831dd9e019 [ 58.162357][ T3302] RDX: 00007f831ec649c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.170361][ T3302] RBP: 00007f831de3500c R08: 0000000000000000 R09: 0000000000000000 [ 58.178340][ T3302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.186491][ T3302] R13: 00007f831e026038 R14: 00007f831e025fa0 R15: 00007ffe73e6e0c8 [ 58.194499][ T3302] [ 58.197514][ T3302] Modules linked in: [ 58.201400][ T3302] CR2: 0000000000000168 [ 58.205632][ T3302] ---[ end trace 0000000000000000 ]--- [ 58.211098][ T3302] RIP: 0010:ihold+0x2a/0x70 [ 58.215624][ T3302] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 2d 45 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 0c 0b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 3d [ 58.235227][ T3302] RSP: 0018:ffffc900029c7b68 EFLAGS: 00010246 [ 58.241293][ T3302] RAX: ffff88811aebcc00 RBX: 0000000000000000 RCX: ffff88811aebcc00 [ 58.249258][ T3302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.257242][ T3302] RBP: ffffc900029c7b78 R08: ffffffff88bb3947 R09: 1ffffffff1176728 [ 58.265211][ T3302] R10: dffffc0000000000 R11: fffffbfff1176729 R12: 0000000000000000 [ 58.273194][ T3302] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 58.281162][ T3302] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 58.290103][ T3302] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.296776][ T3302] CR2: 0000000000000168 CR3: 0000000115e86000 CR4: 00000000003526b0 [ 58.304926][ T3302] Kernel panic - not syncing: Fatal exception [ 58.311387][ T3302] Kernel Offset: disabled [ 58.315733][ T3302] Rebooting in 86400 seconds..