[ 13.120637][ T36] audit: type=1400 audit(1781767736.940:62): avc: denied { rlimitinh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 13.123567][ T36] audit: type=1400 audit(1781767736.940:63): avc: denied { siginh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.0.74' (ED25519) to the list of known hosts.
2026/06/18 07:29:06 parsed 1 programs
2026/06/18 07:29:06 serving rpc on tcp://38237
[ 23.053657][ T36] audit: type=1400 audit(1781767746.880:64): avc: denied { node_bind } for pid=303 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 24.230410][ T36] audit: type=1400 audit(1781767748.060:65): avc: denied { mounton } for pid=309 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 24.231493][ T309] cgroup: Unknown subsys name 'net'
[ 24.253277][ T36] audit: type=1400 audit(1781767748.060:66): avc: denied { mount } for pid=309 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 24.280958][ T36] audit: type=1400 audit(1781767748.090:67): avc: denied { unmount } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 24.281095][ T309] cgroup: Unknown subsys name 'devices'
[ 24.407085][ T309] cgroup: Unknown subsys name 'hugetlb'
[ 24.412839][ T309] cgroup: Unknown subsys name 'rlimit'
[ 24.511354][ T36] audit: type=1400 audit(1781767748.340:68): avc: denied { setattr } for pid=309 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 24.534563][ T36] audit: type=1400 audit(1781767748.340:69): avc: denied { create } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 24.555084][ T36] audit: type=1400 audit(1781767748.340:70): avc: denied { write } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 24.561077][ T313] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 24.575812][ T36] audit: type=1400 audit(1781767748.340:71): avc: denied { read } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 24.604711][ T36] audit: type=1400 audit(1781767748.340:72): avc: denied { sys_module } for pid=309 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 24.625879][ T36] audit: type=1400 audit(1781767748.340:73): avc: denied { mounton } for pid=309 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 24.645562][ T309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 25.608140][ T316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 26.150538][ T344] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.157718][ T344] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.164802][ T344] bridge_slave_0: entered allmulticast mode
[ 26.171327][ T344] bridge_slave_0: entered promiscuous mode
[ 26.178810][ T344] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.186069][ T344] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.193149][ T344] bridge_slave_1: entered allmulticast mode
[ 26.199576][ T344] bridge_slave_1: entered promiscuous mode
[ 26.241714][ T344] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.248810][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 26.256230][ T344] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.263277][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 26.287710][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.295248][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.304637][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.311728][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 26.328284][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.335366][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 26.353326][ T344] veth0_vlan: entered promiscuous mode
[ 26.364332][ T344] veth1_macvtap: entered promiscuous mode
[ 26.418715][ T46] bridge_slave_1: left allmulticast mode
[ 26.424394][ T46] bridge_slave_1: left promiscuous mode
[ 26.430284][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.437969][ T46] bridge_slave_0: left allmulticast mode
[ 26.443607][ T46] bridge_slave_0: left promiscuous mode
[ 26.449237][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.587991][ T46] veth1_macvtap: left promiscuous mode
[ 26.593575][ T46] veth0_vlan: left promiscuous mode
2026/06/18 07:29:10 executed programs: 0
[ 27.048319][ T378] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.055486][ T378] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.062523][ T378] bridge_slave_0: entered allmulticast mode
[ 27.069626][ T378] bridge_slave_0: entered promiscuous mode
[ 27.076197][ T378] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.083242][ T378] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.090374][ T378] bridge_slave_1: entered allmulticast mode
[ 27.096596][ T378] bridge_slave_1: entered promiscuous mode
[ 27.144435][ T378] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.151510][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.158940][ T378] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.165985][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.184789][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.191994][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.201271][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.208333][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.218232][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.225297][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.248796][ T378] veth0_vlan: entered promiscuous mode
[ 27.261320][ T378] veth1_macvtap: entered promiscuous mode
[ 27.290099][ T378] ------------[ cut here ]------------
[ 27.295610][ T378] WARNING: CPU: 0 PID: 378 at fs/inode.c:340 drop_nlink+0xce/0x110
[ 27.303866][ T378] Modules linked in:
[ 27.307925][ T378] CPU: 0 UID: 0 PID: 378 Comm: syz-executor Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba
[ 27.319605][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 27.329811][ T378] RIP: 0010:drop_nlink+0xce/0x110
[ 27.334986][ T378] Code: 04 00 00 be 08 00 00 00 e8 6f 06 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 4f 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c
[ 27.355027][ T378] RSP: 0018:ffffc90001adfc60 EFLAGS: 00010293
[ 27.361127][ T378] RAX: ffffffff81f271be RBX: ffff888112d0a5a0 RCX: ffff8881154c2600
[ 27.369222][ T378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 27.377777][ T378] RBP: ffffc90001adfc88 R08: 0000000000000003 R09: 0000000000000004
[ 27.385786][ T378] R10: dffffc0000000000 R11: fffff5200035bf7c R12: dffffc0000000000
[ 27.393870][ T378] R13: 1ffff110225a14bd R14: ffff888112d0a5e8 R15: 0000000000000000
[ 27.401937][ T378] FS: 0000555588dff500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 27.410940][ T378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 27.417663][ T378] CR2: 0000555588e22958 CR3: 0000000115618000 CR4: 00000000003526b0
[ 27.425716][ T378] Call Trace:
[ 27.429009][ T378]
[ 27.432178][ T378] shmem_rmdir+0x5f/0x90
[ 27.436487][ T378] vfs_rmdir+0x3e3/0x560
[ 27.440779][ T378] incfs_kill_sb+0x109/0x230
[ 27.445410][ T378] deactivate_locked_super+0xd5/0x2a0
[ 27.450810][ T378] deactivate_super+0xb8/0xe0
[ 27.455625][ T378] cleanup_mnt+0x406/0x4a0
[ 27.460085][ T378] __cleanup_mnt+0x1d/0x40
[ 27.464512][ T378] task_work_run+0x1e5/0x260
[ 27.469216][ T378] ? __cfi_task_work_run+0x10/0x10
[ 27.474359][ T378] ? __x64_sys_umount+0x12e/0x180
[ 27.479449][ T378] ? __cfi___x64_sys_umount+0x10/0x10
[ 27.484841][ T378] ? __kasan_check_read+0x15/0x20
[ 27.489927][ T378] resume_user_mode_work+0x35/0x50
[ 27.495084][ T378] syscall_exit_to_user_mode+0x63/0xb0
[ 27.501173][ T378] do_syscall_64+0x63/0xf0
[ 27.505623][ T378] ? clear_bhb_loop+0x50/0xa0
[ 27.510318][ T378] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 27.516241][ T378] RIP: 0033:0x7f1028b9e097
[ 27.520671][ T378] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 27.540423][ T378] RSP: 002b:00007ffd65c8b2d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 27.548943][ T378] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1028b9e097
[ 27.556991][ T378] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd65c8b390
[ 27.565025][ T378] RBP: 00007ffd65c8b390 R08: 00007ffd65c8c390 R09: 00000000ffffffff
[ 27.573035][ T378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd65c8c420
[ 27.581062][ T378] R13: 00007f1028c321ca R14: 0000000000006a7c R15: 00007ffd65c8c460
[ 27.589082][ T378]
[ 27.592121][ T378] ---[ end trace 0000000000000000 ]---
[ 27.598198][ T378] ==================================================================
[ 27.606284][ T378] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70
[ 27.612532][ T378] Write of size 4 at addr 0000000000000168 by task syz-executor/378
[ 27.620602][ T378]
[ 27.622937][ T378] CPU: 1 UID: 0 PID: 378 Comm: syz-executor Tainted: G W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba
[ 27.622960][ T378] Tainted: [W]=WARN
[ 27.622965][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 27.622973][ T378] Call Trace:
[ 27.622978][ T378]
[ 27.622984][ T378] __dump_stack+0x21/0x30
[ 27.623007][ T378] dump_stack_lvl+0x140/0x1c0
[ 27.623025][ T378] ? __cfi_dump_stack_lvl+0x10/0x10
[ 27.623044][ T378] print_report+0x3d/0x70
[ 27.623060][ T378] kasan_report+0x162/0x1a0
[ 27.623076][ T378] ? ihold+0x24/0x70
[ 27.623091][ T378] ? _raw_spin_unlock+0x45/0x60
[ 27.623108][ T378] ? ihold+0x24/0x70
[ 27.623122][ T378] kasan_check_range+0x25a/0x2b0
[ 27.623138][ T378] __kasan_check_write+0x18/0x20
[ 27.623150][ T378] ihold+0x24/0x70
[ 27.623164][ T378] vfs_rmdir+0x26a/0x560
[ 27.623182][ T378] incfs_kill_sb+0x109/0x230
[ 27.623195][ T378] deactivate_locked_super+0xd5/0x2a0
[ 27.623213][ T378] deactivate_super+0xb8/0xe0
[ 27.623230][ T378] cleanup_mnt+0x406/0x4a0
[ 27.623245][ T378] __cleanup_mnt+0x1d/0x40
[ 27.623259][ T378] task_work_run+0x1e5/0x260
[ 27.623277][ T378] ? __cfi_task_work_run+0x10/0x10
[ 27.623292][ T378] ? __x64_sys_umount+0x12e/0x180
[ 27.623304][ T378] ? __cfi___x64_sys_umount+0x10/0x10
[ 27.623316][ T378] ? __kasan_check_read+0x15/0x20
[ 27.623329][ T378] resume_user_mode_work+0x35/0x50
[ 27.623342][ T378] syscall_exit_to_user_mode+0x63/0xb0
[ 27.623357][ T378] do_syscall_64+0x63/0xf0
[ 27.623374][ T378] ? clear_bhb_loop+0x50/0xa0
[ 27.623387][ T378] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 27.623406][ T378] RIP: 0033:0x7f1028b9e097
[ 27.623418][ T378] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 27.623428][ T378] RSP: 002b:00007ffd65c8b2d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 27.623443][ T378] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1028b9e097
[ 27.623452][ T378] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd65c8b390
[ 27.623460][ T378] RBP: 00007ffd65c8b390 R08: 00007ffd65c8c390 R09: 00000000ffffffff
[ 27.623469][ T378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd65c8c420
[ 27.623477][ T378] R13: 00007f1028c321ca R14: 0000000000006a7c R15: 00007ffd65c8c460
[ 27.623488][ T378]
[ 27.623492][ T378] ==================================================================
[ 27.870281][ T378] Disabling lock debugging due to kernel taint
[ 27.876504][ T378] BUG: kernel NULL pointer dereference, address: 0000000000000168
[ 27.884510][ T378] #PF: supervisor write access in kernel mode
[ 27.890576][ T378] #PF: error_code(0x0002) - not-present page
[ 27.896605][ T378] PGD 8000000113441067 P4D 8000000113441067 PUD 0
[ 27.903131][ T378] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
[ 27.909212][ T378] CPU: 1 UID: 0 PID: 378 Comm: syz-executor Tainted: G B W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba
[ 27.922324][ T378] Tainted: [B]=BAD_PAGE, [W]=WARN
[ 27.927352][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 27.937422][ T378] RIP: 0010:ihold+0x2a/0x70
[ 27.941960][ T378] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 46 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed
[ 27.961829][ T378] RSP: 0018:ffffc90001adfca0 EFLAGS: 00010246
[ 27.967900][ T378] RAX: ffff8881154c2600 RBX: 0000000000000000 RCX: ffff8881154c2600
[ 27.975883][ T378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 27.983846][ T378] RBP: ffffc90001adfcb0 R08: ffffffff88bbe947 R09: 1ffffffff1177d28
[ 27.991907][ T378] R10: dffffc0000000000 R11: fffffbfff1177d29 R12: ffff888112d0a5ac
[ 27.999884][ T378] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[ 28.007857][ T378] FS: 0000555588dff500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 28.017140][ T378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 28.023731][ T378] CR2: 0000000000000168 CR3: 0000000115618000 CR4: 00000000003526b0
[ 28.031700][ T378] Call Trace:
[ 28.034989][ T378]
[ 28.037913][ T378] vfs_rmdir+0x26a/0x560
[ 28.042252][ T378] incfs_kill_sb+0x109/0x230
[ 28.046922][ T378] deactivate_locked_super+0xd5/0x2a0
[ 28.052378][ T378] deactivate_super+0xb8/0xe0
[ 28.057063][ T378] cleanup_mnt+0x406/0x4a0
[ 28.061473][ T378] __cleanup_mnt+0x1d/0x40
[ 28.065881][ T378] task_work_run+0x1e5/0x260
[ 28.070468][ T378] ? __cfi_task_work_run+0x10/0x10
[ 28.075592][ T378] ? __x64_sys_umount+0x12e/0x180
[ 28.080793][ T378] ? __cfi___x64_sys_umount+0x10/0x10
[ 28.086252][ T378] ? __kasan_check_read+0x15/0x20
[ 28.091308][ T378] resume_user_mode_work+0x35/0x50
[ 28.096439][ T378] syscall_exit_to_user_mode+0x63/0xb0
[ 28.101987][ T378] do_syscall_64+0x63/0xf0
[ 28.106404][ T378] ? clear_bhb_loop+0x50/0xa0
[ 28.111078][ T378] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 28.116970][ T378] RIP: 0033:0x7f1028b9e097
[ 28.121381][ T378] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 28.140981][ T378] RSP: 002b:00007ffd65c8b2d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 28.149410][ T378] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1028b9e097
[ 28.157378][ T378] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd65c8b390
[ 28.165357][ T378] RBP: 00007ffd65c8b390 R08: 00007ffd65c8c390 R09: 00000000ffffffff
[ 28.173358][ T378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd65c8c420
[ 28.181333][ T378] R13: 00007f1028c321ca R14: 0000000000006a7c R15: 00007ffd65c8c460
[ 28.189314][ T378]
[ 28.192337][ T378] Modules linked in:
[ 28.196233][ T378] CR2: 0000000000000168
[ 28.200488][ T378] ---[ end trace 0000000000000000 ]---
[ 28.206036][ T378] RIP: 0010:ihold+0x2a/0x70
[ 28.210563][ T378] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 46 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed
[ 28.230355][ T378] RSP: 0018:ffffc90001adfca0 EFLAGS: 00010246
[ 28.236443][ T378] RAX: ffff8881154c2600 RBX: 0000000000000000 RCX: ffff8881154c2600
[ 28.244413][ T378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 28.252477][ T378] RBP: ffffc90001adfcb0 R08: ffffffff88bbe947 R09: 1ffffffff1177d28
[ 28.260530][ T378] R10: dffffc0000000000 R11: fffffbfff1177d29 R12: ffff888112d0a5ac
[ 28.268593][ T378] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[ 28.276566][ T378] FS: 0000555588dff500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 28.285487][ T378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 28.292057][ T378] CR2: 0000000000000168 CR3: 0000000115618000 CR4: 00000000003526b0
[ 28.300028][ T378] Kernel panic - not syncing: Fatal exception
[ 28.306417][ T378] Kernel Offset: disabled
[ 28.310735][ T378] Rebooting in 86400 seconds..