[ 13.137004][ T36] audit: type=1400 audit(1780806755.399:62): avc: denied { rlimitinh } for pid=230 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.139520][ T36] audit: type=1400 audit(1780806755.399:63): avc: denied { siginh } for pid=230 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.36' (ED25519) to the list of known hosts. 2026/06/07 04:32:44 parsed 1 programs [ 22.686432][ T36] audit: type=1400 audit(1780806764.959:64): avc: denied { node_bind } for pid=303 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 23.681155][ T36] audit: type=1400 audit(1780806765.949:65): avc: denied { mounton } for pid=309 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.682434][ T309] cgroup: Unknown subsys name 'net' [ 23.703928][ T36] audit: type=1400 audit(1780806765.949:66): avc: denied { mount } for pid=309 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.731200][ T36] audit: type=1400 audit(1780806765.979:67): avc: denied { unmount } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.731425][ T309] cgroup: Unknown subsys name 'devices' [ 23.856778][ T309] cgroup: Unknown subsys name 'hugetlb' [ 23.862441][ T309] cgroup: Unknown subsys name 'rlimit' [ 23.981996][ T36] audit: type=1400 audit(1780806766.249:68): avc: denied { setattr } for pid=309 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.005280][ T36] audit: type=1400 audit(1780806766.249:69): avc: denied { create } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.013968][ T313] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.025845][ T36] audit: type=1400 audit(1780806766.249:70): avc: denied { write } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.054595][ T36] audit: type=1400 audit(1780806766.249:71): avc: denied { read } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.063259][ T309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.075167][ T36] audit: type=1400 audit(1780806766.249:72): avc: denied { sys_module } for pid=309 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 24.104972][ T36] audit: type=1400 audit(1780806766.249:73): avc: denied { mounton } for pid=309 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.958395][ T316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.315438][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.322764][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.330576][ T334] bridge_slave_0: entered allmulticast mode [ 25.338034][ T334] bridge_slave_0: entered promiscuous mode [ 25.344778][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.351869][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.358996][ T334] bridge_slave_1: entered allmulticast mode [ 25.365440][ T334] bridge_slave_1: entered promiscuous mode [ 25.408856][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.416511][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.423864][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.430911][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.448917][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.456237][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.466079][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.473122][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.482379][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.489448][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.511573][ T334] veth0_vlan: entered promiscuous mode [ 25.521560][ T334] veth1_macvtap: entered promiscuous mode [ 25.566561][ T45] bridge_slave_1: left allmulticast mode [ 25.572253][ T45] bridge_slave_1: left promiscuous mode [ 25.578096][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.586880][ T45] bridge_slave_0: left allmulticast mode [ 25.592550][ T45] bridge_slave_0: left promiscuous mode [ 25.598690][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.742819][ T45] veth1_macvtap: left promiscuous mode [ 25.748766][ T45] veth0_vlan: left promiscuous mode 2026/06/07 04:32:48 executed programs: 0 [ 26.261391][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.268469][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.275779][ T378] bridge_slave_0: entered allmulticast mode [ 26.282086][ T378] bridge_slave_0: entered promiscuous mode [ 26.288673][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.295839][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.302935][ T378] bridge_slave_1: entered allmulticast mode [ 26.309673][ T378] bridge_slave_1: entered promiscuous mode [ 26.359446][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.366537][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.374040][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.381114][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.389550][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.396883][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.418759][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.425827][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.434584][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.441660][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.465348][ T378] veth0_vlan: entered promiscuous mode [ 26.475558][ T378] veth1_macvtap: entered promiscuous mode [ 26.502958][ T378] ------------[ cut here ]------------ [ 26.508528][ T378] WARNING: CPU: 1 PID: 378 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 26.516555][ T378] Modules linked in: [ 26.520477][ T378] CPU: 1 UID: 0 PID: 378 Comm: syz-executor Not tainted syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770 [ 26.532210][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 26.542345][ T378] RIP: 0010:drop_nlink+0xce/0x110 [ 26.547448][ T378] Code: 04 00 00 be 08 00 00 00 e8 7f 12 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 82 69 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 26.567156][ T378] RSP: 0018:ffffc9000100fc60 EFLAGS: 00010293 [ 26.573233][ T378] RAX: ffffffff81f25eae RBX: ffff888116cfc428 RCX: ffff88810cfecc00 [ 26.581260][ T378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.589380][ T378] RBP: ffffc9000100fc88 R08: 0000000000000003 R09: 0000000000000004 [ 26.597398][ T378] R10: dffffc0000000000 R11: fffff52000201f7c R12: dffffc0000000000 [ 26.605415][ T378] R13: 1ffff11022d9f88e R14: ffff888116cfc470 R15: 0000000000000000 [ 26.613395][ T378] FS: 000055558d655500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 26.622342][ T378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.628987][ T378] CR2: 000055558d678958 CR3: 000000010b752000 CR4: 00000000003526b0 [ 26.637016][ T378] Call Trace: [ 26.640297][ T378] [ 26.643212][ T378] shmem_rmdir+0x5f/0x90 [ 26.647486][ T378] vfs_rmdir+0x3e0/0x560 [ 26.651733][ T378] incfs_kill_sb+0x109/0x230 [ 26.656361][ T378] deactivate_locked_super+0xd8/0x2a0 [ 26.661755][ T378] deactivate_super+0xb8/0xe0 [ 26.666471][ T378] cleanup_mnt+0x406/0x4a0 [ 26.670896][ T378] __cleanup_mnt+0x1d/0x40 [ 26.675383][ T378] task_work_run+0x1e5/0x260 [ 26.679988][ T378] ? __cfi_task_work_run+0x10/0x10 [ 26.685143][ T378] ? __x64_sys_umount+0x12e/0x180 [ 26.690168][ T378] ? __cfi___x64_sys_umount+0x10/0x10 [ 26.695584][ T378] ? __kasan_check_read+0x15/0x20 [ 26.700610][ T378] resume_user_mode_work+0x35/0x50 [ 26.705741][ T378] syscall_exit_to_user_mode+0x63/0xb0 [ 26.711208][ T378] do_syscall_64+0x63/0xf0 [ 26.715638][ T378] ? clear_bhb_loop+0x50/0xa0 [ 26.720319][ T378] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.726254][ T378] RIP: 0033:0x7fc0b019e097 [ 26.730706][ T378] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 26.750391][ T378] RSP: 002b:00007fff38b892f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 26.758889][ T378] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc0b019e097 [ 26.766904][ T378] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff38b893b0 [ 26.774934][ T378] RBP: 00007fff38b893b0 R08: 00007fff38b8a3b0 R09: 00000000ffffffff [ 26.783116][ T378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff38b8a440 [ 26.791400][ T378] R13: 00007fc0b02321ca R14: 000000000000676b R15: 00007fff38b8a480 [ 26.799431][ T378] [ 26.802450][ T378] ---[ end trace 0000000000000000 ]--- [ 26.808678][ T378] ================================================================== [ 26.817028][ T378] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 26.823266][ T378] Write of size 4 at addr 0000000000000168 by task syz-executor/378 [ 26.831240][ T378] [ 26.833598][ T378] CPU: 0 UID: 0 PID: 378 Comm: syz-executor Tainted: G W syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770 [ 26.833617][ T378] Tainted: [W]=WARN [ 26.833621][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 26.833627][ T378] Call Trace: [ 26.833631][ T378] [ 26.833637][ T378] __dump_stack+0x21/0x30 [ 26.833656][ T378] dump_stack_lvl+0x140/0x1c0 [ 26.833670][ T378] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.833685][ T378] print_report+0x3d/0x70 [ 26.833698][ T378] kasan_report+0x162/0x1a0 [ 26.833712][ T378] ? ihold+0x24/0x70 [ 26.833724][ T378] ? _raw_spin_unlock+0x45/0x60 [ 26.833735][ T378] ? ihold+0x24/0x70 [ 26.833746][ T378] kasan_check_range+0x25a/0x2b0 [ 26.833759][ T378] __kasan_check_write+0x18/0x20 [ 26.833769][ T378] ihold+0x24/0x70 [ 26.833779][ T378] vfs_rmdir+0x26a/0x560 [ 26.833793][ T378] incfs_kill_sb+0x109/0x230 [ 26.833804][ T378] deactivate_locked_super+0xd8/0x2a0 [ 26.833818][ T378] deactivate_super+0xb8/0xe0 [ 26.833831][ T378] cleanup_mnt+0x406/0x4a0 [ 26.833843][ T378] __cleanup_mnt+0x1d/0x40 [ 26.833854][ T378] task_work_run+0x1e5/0x260 [ 26.833868][ T378] ? __cfi_task_work_run+0x10/0x10 [ 26.833880][ T378] ? __x64_sys_umount+0x12e/0x180 [ 26.833889][ T378] ? __cfi___x64_sys_umount+0x10/0x10 [ 26.833904][ T378] ? __kasan_check_read+0x15/0x20 [ 26.833914][ T378] resume_user_mode_work+0x35/0x50 [ 26.833924][ T378] syscall_exit_to_user_mode+0x63/0xb0 [ 26.833938][ T378] do_syscall_64+0x63/0xf0 [ 26.833948][ T378] ? clear_bhb_loop+0x50/0xa0 [ 26.833961][ T378] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.833973][ T378] RIP: 0033:0x7fc0b019e097 [ 26.833983][ T378] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 26.833991][ T378] RSP: 002b:00007fff38b892f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 26.834003][ T378] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc0b019e097 [ 26.834011][ T378] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff38b893b0 [ 26.834017][ T378] RBP: 00007fff38b893b0 R08: 00007fff38b8a3b0 R09: 00000000ffffffff [ 26.834025][ T378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff38b8a440 [ 26.834031][ T378] R13: 00007fc0b02321ca R14: 000000000000676b R15: 00007fff38b8a480 [ 26.834040][ T378] [ 26.834043][ T378] ================================================================== [ 27.079638][ T378] Disabling lock debugging due to kernel taint [ 27.085918][ T378] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 27.093724][ T378] #PF: supervisor write access in kernel mode [ 27.099813][ T378] #PF: error_code(0x0002) - not-present page [ 27.106132][ T378] PGD 8000000116bb1067 P4D 8000000116bb1067 PUD 0 [ 27.112647][ T378] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 27.118722][ T378] CPU: 0 UID: 0 PID: 378 Comm: syz-executor Tainted: G B W syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770 [ 27.132029][ T378] Tainted: [B]=BAD_PAGE, [W]=WARN [ 27.137223][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 27.147321][ T378] RIP: 0010:ihold+0x2a/0x70 [ 27.151819][ T378] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 6d 60 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 3c 09 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 7d [ 27.171407][ T378] RSP: 0018:ffffc9000100fca0 EFLAGS: 00010246 [ 27.177456][ T378] RAX: ffff88810cfecc00 RBX: 0000000000000000 RCX: ffff88810cfecc00 [ 27.185432][ T378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.193480][ T378] RBP: ffffc9000100fcb0 R08: ffffffff88bbb947 R09: 1ffffffff1177728 [ 27.201462][ T378] R10: dffffc0000000000 R11: fffffbfff1177729 R12: ffff888116cfc434 [ 27.209429][ T378] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 27.217389][ T378] FS: 000055558d655500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 27.226296][ T378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.232862][ T378] CR2: 0000000000000168 CR3: 000000010b752000 CR4: 00000000003526b0 [ 27.240832][ T378] Call Trace: [ 27.244094][ T378] [ 27.247007][ T378] vfs_rmdir+0x26a/0x560 [ 27.251251][ T378] incfs_kill_sb+0x109/0x230 [ 27.255822][ T378] deactivate_locked_super+0xd8/0x2a0 [ 27.261176][ T378] deactivate_super+0xb8/0xe0 [ 27.265830][ T378] cleanup_mnt+0x406/0x4a0 [ 27.270229][ T378] __cleanup_mnt+0x1d/0x40 [ 27.274630][ T378] task_work_run+0x1e5/0x260 [ 27.279200][ T378] ? __cfi_task_work_run+0x10/0x10 [ 27.284285][ T378] ? __x64_sys_umount+0x12e/0x180 [ 27.289519][ T378] ? __cfi___x64_sys_umount+0x10/0x10 [ 27.294884][ T378] ? __kasan_check_read+0x15/0x20 [ 27.299908][ T378] resume_user_mode_work+0x35/0x50 [ 27.305013][ T378] syscall_exit_to_user_mode+0x63/0xb0 [ 27.310489][ T378] do_syscall_64+0x63/0xf0 [ 27.314896][ T378] ? clear_bhb_loop+0x50/0xa0 [ 27.319575][ T378] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.325457][ T378] RIP: 0033:0x7fc0b019e097 [ 27.329867][ T378] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 27.349464][ T378] RSP: 002b:00007fff38b892f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 27.358124][ T378] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc0b019e097 [ 27.366089][ T378] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff38b893b0 [ 27.374066][ T378] RBP: 00007fff38b893b0 R08: 00007fff38b8a3b0 R09: 00000000ffffffff [ 27.382039][ T378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff38b8a440 [ 27.389998][ T378] R13: 00007fc0b02321ca R14: 000000000000676b R15: 00007fff38b8a480 [ 27.398218][ T378] [ 27.401216][ T378] Modules linked in: [ 27.405098][ T378] CR2: 0000000000000168 [ 27.409234][ T378] ---[ end trace 0000000000000000 ]--- [ 27.414700][ T378] RIP: 0010:ihold+0x2a/0x70 [ 27.419211][ T378] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 6d 60 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 3c 09 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 7d [ 27.438807][ T378] RSP: 0018:ffffc9000100fca0 EFLAGS: 00010246 [ 27.444858][ T378] RAX: ffff88810cfecc00 RBX: 0000000000000000 RCX: ffff88810cfecc00 [ 27.452819][ T378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.460780][ T378] RBP: ffffc9000100fcb0 R08: ffffffff88bbb947 R09: 1ffffffff1177728 [ 27.468734][ T378] R10: dffffc0000000000 R11: fffffbfff1177729 R12: ffff888116cfc434 [ 27.476696][ T378] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 27.484668][ T378] FS: 000055558d655500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 27.493609][ T378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.500182][ T378] CR2: 0000000000000168 CR3: 000000010b752000 CR4: 00000000003526b0 [ 27.508146][ T378] Kernel panic - not syncing: Fatal exception [ 27.514493][ T378] Kernel Offset: disabled [ 27.518801][ T378] Rebooting in 86400 seconds..