syzkaller syzkaller login: [ 8.810423][ T115] udevd (115) used greatest stack depth: 22888 bytes left [ 15.040871][ T30] audit: type=1400 audit(1784581919.596:59): avc: denied { transition } for pid=223 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.050207][ T30] audit: type=1400 audit(1784581919.596:60): avc: denied { noatsecure } for pid=223 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.058825][ T30] audit: type=1400 audit(1784581919.596:61): avc: denied { write } for pid=223 comm="sh" path="pipe:[13989]" dev="pipefs" ino=13989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 15.078850][ T30] audit: type=1400 audit(1784581919.616:62): avc: denied { rlimitinh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.098803][ T30] audit: type=1400 audit(1784581919.616:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.780836][ T230] sshd-session (230) used greatest stack depth: 22824 bytes left Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. 2026/07/20 21:12:09 parsed 1 programs 2026/07/20 21:12:09 serving rpc on tcp://38237 [ 24.607612][ T30] audit: type=1400 audit(1784581929.166:64): avc: denied { node_bind } for pid=293 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.628813][ T30] audit: type=1400 audit(1784581929.166:65): avc: denied { module_request } for pid=293 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 25.546207][ T30] audit: type=1400 audit(1784581930.106:66): avc: denied { mounton } for pid=299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.549169][ T299] cgroup: Unknown subsys name 'net' [ 25.568937][ T30] audit: type=1400 audit(1784581930.106:67): avc: denied { mount } for pid=299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.596223][ T30] audit: type=1400 audit(1784581930.136:68): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.596634][ T299] cgroup: Unknown subsys name 'devices' [ 25.744372][ T299] cgroup: Unknown subsys name 'hugetlb' [ 25.750035][ T299] cgroup: Unknown subsys name 'rlimit' [ 25.896778][ T30] audit: type=1400 audit(1784581930.456:69): avc: denied { setattr } for pid=299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.920215][ T30] audit: type=1400 audit(1784581930.456:70): avc: denied { create } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.940780][ T30] audit: type=1400 audit(1784581930.456:71): avc: denied { write } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.955299][ T303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.961657][ T30] audit: type=1400 audit(1784581930.456:72): avc: denied { read } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.989829][ T30] audit: type=1400 audit(1784581930.456:73): avc: denied { mounton } for pid=299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.016363][ T299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.495534][ T305] request_module fs-gadgetfs succeeded, but still no fs? [ 27.114964][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.122106][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.130402][ T352] device bridge_slave_0 entered promiscuous mode [ 27.137342][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.144534][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.151860][ T352] device bridge_slave_1 entered promiscuous mode [ 27.191522][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.198663][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.205970][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.213125][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.231087][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.238873][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.246099][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.255446][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.263646][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.270670][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.279326][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.287569][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.294640][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.307080][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.316428][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.329908][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.340992][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.349126][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.356721][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.370907][ T352] device veth0_vlan entered promiscuous mode [ 27.380396][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.389612][ T352] device veth1_macvtap entered promiscuous mode [ 27.405509][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.415229][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.445929][ T352] syz-executor (352) used greatest stack depth: 21024 bytes left 2026/07/20 21:12:12 executed programs: 0 [ 27.712772][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.719840][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.727638][ T367] device bridge_slave_0 entered promiscuous mode [ 27.735005][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.742192][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.749882][ T367] device bridge_slave_1 entered promiscuous mode [ 27.808685][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.816620][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.833729][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.842420][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.850620][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.857688][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.865560][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.873943][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.882151][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.889222][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.897169][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.905216][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.922990][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.932131][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.941893][ T367] device veth0_vlan entered promiscuous mode [ 27.949479][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.964957][ T367] device veth1_macvtap entered promiscuous mode [ 27.971921][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.980317][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.988010][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.997681][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.015905][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.039020][ T374] loop2: detected capacity change from 0 to 1024 [ 28.064215][ T374] EXT4-fs (loop2): Ignoring removed oldalloc option [ 28.070894][ T374] EXT4-fs (loop2): Ignoring removed orlov option [ 28.083932][ T374] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 28.114334][ T374] incfs: ino conflict with backing FS 2 [ 28.120362][ T374] overlayfs: workdir and upperdir must reside under the same mount [ 28.169873][ T379] loop2: detected capacity change from 0 to 1024 [ 28.206138][ T379] EXT4-fs (loop2): Ignoring removed oldalloc option [ 28.215649][ T379] EXT4-fs (loop2): Ignoring removed orlov option [ 28.233430][ T379] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 28.283780][ T379] incfs: ino conflict with backing FS 2 [ 28.289958][ T379] overlayfs: workdir and upperdir must reside under the same mount [ 28.341619][ T383] loop2: detected capacity change from 0 to 1024 [ 28.351521][ T383] EXT4-fs (loop2): Ignoring removed oldalloc option [ 28.358612][ T383] EXT4-fs (loop2): Ignoring removed orlov option [ 28.383640][ T383] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 28.414779][ T383] incfs: ino conflict with backing FS 2 [ 28.420819][ T383] overlayfs: workdir and upperdir must reside under the same mount [ 28.451612][ T387] loop2: detected capacity change from 0 to 1024 [ 28.495190][ T387] EXT4-fs (loop2): Ignoring removed oldalloc option [ 28.505566][ T387] EXT4-fs (loop2): Ignoring removed orlov option [ 28.513518][ T387] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 28.565164][ T387] incfs: ino conflict with backing FS 2 [ 28.571272][ T387] overlayfs: workdir and upperdir must reside under the same mount [ 28.612824][ T391] loop2: detected capacity change from 0 to 1024 [ 28.653594][ T391] EXT4-fs (loop2): Ignoring removed oldalloc option [ 28.661874][ T391] EXT4-fs (loop2): Ignoring removed orlov option [ 28.662731][ T45] device bridge_slave_1 left promiscuous mode [ 28.674464][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.683843][ T391] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 28.689862][ T45] device bridge_slave_0 left promiscuous mode [ 28.711502][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.719747][ T45] device veth1_macvtap left promiscuous mode [ 28.725995][ T45] device veth0_vlan left promiscuous mode [ 28.734546][ T391] incfs: ino conflict with backing FS 2 [ 28.740527][ T391] overlayfs: workdir and upperdir must reside under the same mount [ 28.806553][ T395] loop2: detected capacity change from 0 to 1024 [ 28.814759][ T395] EXT4-fs (loop2): Ignoring removed oldalloc option [ 28.821420][ T395] EXT4-fs (loop2): Ignoring removed orlov option [ 28.843456][ T395] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 28.894455][ T395] incfs: ino conflict with backing FS 2 [ 28.900441][ T395] overlayfs: workdir and upperdir must reside under the same mount [ 28.961565][ T399] loop2: detected capacity change from 0 to 1024 [ 29.023411][ T399] EXT4-fs (loop2): Ignoring removed oldalloc option [ 29.030069][ T399] EXT4-fs (loop2): Ignoring removed orlov option [ 29.043617][ T399] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 29.067406][ T399] incfs: ino conflict with backing FS 2 [ 29.073414][ T399] overlayfs: workdir and upperdir must reside under the same mount [ 29.141843][ T403] loop2: detected capacity change from 0 to 1024 [ 29.192901][ T403] EXT4-fs (loop2): Ignoring removed oldalloc option [ 29.199613][ T403] EXT4-fs (loop2): Ignoring removed orlov option [ 29.214682][ T403] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 29.243986][ T403] incfs: ino conflict with backing FS 2 [ 29.249973][ T403] overlayfs: workdir and upperdir must reside under the same mount [ 29.303006][ T407] loop2: detected capacity change from 0 to 1024 [ 29.345593][ T407] EXT4-fs (loop2): Ignoring removed oldalloc option [ 29.352354][ T407] EXT4-fs (loop2): Ignoring removed orlov option [ 29.363492][ T407] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 29.404531][ T407] incfs: ino conflict with backing FS 2 [ 29.410479][ T407] overlayfs: workdir and upperdir must reside under the same mount [ 29.470588][ T411] loop2: detected capacity change from 0 to 1024 [ 29.552711][ T411] EXT4-fs (loop2): Ignoring removed oldalloc option [ 29.559452][ T411] EXT4-fs (loop2): Ignoring removed orlov option [ 29.573346][ T411] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 29.614144][ T411] incfs: ino conflict with backing FS 2 [ 29.620057][ T411] overlayfs: workdir and upperdir must reside under the same mount [ 29.713129][ T415] EXT4-fs (loop2): Ignoring removed oldalloc option [ 29.719979][ T415] EXT4-fs (loop2): Ignoring removed orlov option [ 29.733279][ T415] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 29.807096][ T418] incfs: ino conflict with backing FS 2 [ 29.813125][ T418] overlayfs: workdir and upperdir must reside under the same mount [ 29.935724][ T420] EXT4-fs (loop2): Ignoring removed oldalloc option [ 29.942431][ T420] EXT4-fs (loop2): Ignoring removed orlov option [ 29.953497][ T420] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 30.027894][ T423] incfs: ino conflict with backing FS 2 [ 30.034034][ T423] overlayfs: workdir and upperdir must reside under the same mount [ 30.165441][ T425] EXT4-fs (loop2): Ignoring removed oldalloc option [ 30.172204][ T425] EXT4-fs (loop2): Ignoring removed orlov option [ 30.183441][ T425] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 30.258026][ T428] incfs: ino conflict with backing FS 2 [ 30.264025][ T428] overlayfs: workdir and upperdir must reside under the same mount [ 30.434998][ T430] EXT4-fs (loop2): Ignoring removed oldalloc option [ 30.441758][ T430] EXT4-fs (loop2): Ignoring removed orlov option [ 30.453310][ T430] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 30.526844][ T433] incfs: ino conflict with backing FS 2 [ 30.532892][ T433] overlayfs: workdir and upperdir must reside under the same mount [ 30.684203][ T435] EXT4-fs (loop2): Ignoring removed oldalloc option [ 30.690915][ T435] EXT4-fs (loop2): Ignoring removed orlov option [ 30.703508][ T435] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 30.776934][ T438] incfs: ino conflict with backing FS 2 [ 30.782911][ T438] overlayfs: workdir and upperdir must reside under the same mount [ 31.143797][ T440] EXT4-fs (loop2): Ignoring removed oldalloc option [ 31.150511][ T440] EXT4-fs (loop2): Ignoring removed orlov option [ 31.163277][ T440] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 31.236835][ T443] incfs: ino conflict with backing FS 2 [ 31.242786][ T443] overlayfs: workdir and upperdir must reside under the same mount [ 31.623915][ T445] EXT4-fs (loop2): Ignoring removed oldalloc option [ 31.630625][ T445] EXT4-fs (loop2): Ignoring removed orlov option [ 31.643337][ T445] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 31.716642][ T448] incfs: ino conflict with backing FS 2 [ 31.722537][ T448] overlayfs: workdir and upperdir must reside under the same mount [ 31.945476][ T450] EXT4-fs (loop2): Ignoring removed oldalloc option [ 31.952137][ T450] EXT4-fs (loop2): Ignoring removed orlov option [ 31.963531][ T450] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 32.037811][ T453] incfs: ino conflict with backing FS 2 [ 32.043825][ T453] overlayfs: workdir and upperdir must reside under the same mount [ 32.184784][ T455] EXT4-fs (loop2): Ignoring removed oldalloc option [ 32.191454][ T455] EXT4-fs (loop2): Ignoring removed orlov option [ 32.203348][ T455] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 32.276795][ T458] incfs: ino conflict with backing FS 2 [ 32.282782][ T458] overlayfs: workdir and upperdir must reside under the same mount [ 32.503940][ T460] EXT4-fs (loop2): Ignoring removed oldalloc option [ 32.510728][ T460] EXT4-fs (loop2): Ignoring removed orlov option [ 32.523369][ T460] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 32.596848][ T463] incfs: ino conflict with backing FS 2 [ 32.602890][ T463] overlayfs: workdir and upperdir must reside under the same mount 2026/07/20 21:12:17 executed programs: 22 [ 32.783524][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 32.783538][ T30] audit: type=1400 audit(1784581937.346:113): avc: denied { write } for pid=293 comm="syz-execprog" path="pipe:[14129]" dev="pipefs" ino=14129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 32.872684][ T465] EXT4-fs (loop2): Ignoring removed oldalloc option [ 32.879436][ T465] EXT4-fs (loop2): Ignoring removed orlov option [ 32.893344][ T465] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 32.967833][ T468] incfs: ino conflict with backing FS 2 [ 32.974174][ T30] audit: type=1400 audit(1784581937.536:114): avc: denied { write } for pid=464 comm="syz.2.37" name="bus" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 32.995857][ T30] audit: type=1400 audit(1784581937.536:115): avc: denied { add_name } for pid=464 comm="syz.2.37" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 32.995865][ T468] general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN [ 32.995886][ T468] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 33.019313][ T30] audit: type=1400 audit(1784581937.536:116): avc: denied { setattr } for pid=464 comm="syz.2.37" name="work" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 33.027614][ T468] CPU: 1 PID: 468 Comm: syz.2.37 Not tainted syzkaller #0 [ 33.027633][ T468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 33.027643][ T468] RIP: 0010:__is_local_mountpoint+0x56/0x1a0 [ 33.036815][ T30] audit: type=1400 audit(1784581937.536:117): avc: denied { create } for pid=464 comm="syz.2.37" name="#1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.057464][ T468] Code: 49 81 c6 30 08 00 00 4c 89 f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 b8 aa f0 ff 4d 8b 36 49 83 c6 18 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 9c aa f0 ff 4d 8b 3e 48 c7 c7 20 80 [ 33.057482][ T468] RSP: 0018:ffffc90002de7868 EFLAGS: 00010206 [ 33.066379][ T30] audit: type=1400 audit(1784581937.536:118): avc: denied { remove_name } for pid=464 comm="syz.2.37" name="#1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 33.074826][ T468] RAX: 0000000000000003 RBX: dffffc0000000000 RCX: ffff888117c213c0 [ 33.074849][ T468] RDX: 0000000000000000 RSI: 0000000000010000 RDI: ffff888111c5a220 [ 33.074860][ T468] RBP: ffffc90002de78a0 R08: ffff88812cc2710f R09: 1ffff11025984e21 [ 33.074874][ T468] R10: dffffc0000000000 R11: ffffed1025984e22 R12: 1ffff11024163a69 [ 33.081678][ T30] audit: type=1400 audit(1784581937.536:119): avc: denied { rename } for pid=464 comm="syz.2.37" name="#1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.100450][ T468] R13: 0000000000010000 R14: 0000000000000018 R15: 1ffff1102238b444 [ 33.100465][ T468] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.100480][ T468] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.120860][ T30] audit: type=1400 audit(1784581937.536:120): avc: denied { unlink } for pid=464 comm="syz.2.37" name="#1" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.126233][ T468] CR2: 0000200000001000 CR3: 000000010dce2000 CR4: 00000000003506a0 [ 33.126250][ T468] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.126260][ T468] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.149369][ T30] audit: type=1400 audit(1784581937.536:121): avc: denied { unlink } for pid=464 comm="syz.2.37" name="#2" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.155905][ T468] Call Trace: [ 33.155912][ T468] [ 33.155918][ T468] vfs_rmdir+0x12d/0x450 [ 33.164531][ T30] audit: type=1400 audit(1784581937.556:122): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 33.171878][ T468] incfs_kill_sb+0xfe/0x210 [ 33.327922][ T468] deactivate_locked_super+0xa0/0x100 [ 33.333321][ T468] deactivate_super+0xaf/0xe0 [ 33.337999][ T468] cleanup_mnt+0x44f/0x500 [ 33.342420][ T468] __cleanup_mnt+0x19/0x20 [ 33.346839][ T468] task_work_run+0x127/0x190 [ 33.351434][ T468] do_exit+0xb70/0x29a0 [ 33.355592][ T468] ? ____kasan_slab_free+0x125/0x160 [ 33.360885][ T468] ? __kasan_slab_free+0x11/0x20 [ 33.365823][ T468] ? __x64_sys_mount+0xbf/0xd0 [ 33.370585][ T468] ? put_task_struct+0x90/0x90 [ 33.375350][ T468] ? __kasan_check_write+0x14/0x20 [ 33.380463][ T468] ? _raw_spin_lock_irq+0x95/0xf0 [ 33.385493][ T468] do_group_exit+0x149/0x310 [ 33.390080][ T468] ? __kasan_check_write+0x14/0x20 [ 33.395200][ T468] ? recalc_sigpending+0x1ac/0x230 [ 33.400340][ T468] get_signal+0x64f/0x1430 [ 33.404762][ T468] arch_do_signal_or_restart+0xe2/0x1100 [ 33.410407][ T468] ? __kasan_slab_free+0x11/0x20 [ 33.415343][ T468] ? slab_free_freelist_hook+0xc2/0x190 [ 33.420893][ T468] ? __se_sys_mount+0x353/0x390 [ 33.425755][ T468] ? get_sigframe_size+0x10/0x10 [ 33.430693][ T468] ? __se_sys_futex+0x135/0x330 [ 33.435545][ T468] exit_to_user_mode_loop+0xa7/0xe0 [ 33.440756][ T468] exit_to_user_mode_prepare+0x87/0xd0 [ 33.446215][ T468] syscall_exit_to_user_mode+0x1a/0x30 [ 33.451683][ T468] do_syscall_64+0x58/0xa0 [ 33.456097][ T468] ? clear_bhb_loop+0x50/0xa0 [ 33.460777][ T468] ? clear_bhb_loop+0x50/0xa0 [ 33.465461][ T468] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.471363][ T468] RIP: 0033:0x7fa572f8ae99 [ 33.475801][ T468] Code: Unable to access opcode bytes at RIP 0x7fa572f8ae6f. [ 33.483174][ T468] RSP: 002b:00007fa572dcb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 33.491604][ T468] RAX: fffffffffffffe00 RBX: 00007fa573213098 RCX: 00007fa572f8ae99 [ 33.499584][ T468] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa573213098 [ 33.507562][ T468] RBP: 00007fa573213090 R08: 0000000000000000 R09: 0000000000000000 [ 33.515539][ T468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.523513][ T468] R13: 00007fa573213128 R14: 00007ffc5a72f3a0 R15: 00007ffc5a72f488 [ 33.531494][ T468] [ 33.534515][ T468] Modules linked in: [ 33.539484][ T468] ---[ end trace e12f95f98f214ec6 ]--- [ 33.545294][ T468] RIP: 0010:__is_local_mountpoint+0x56/0x1a0 [ 33.551615][ T468] Code: 49 81 c6 30 08 00 00 4c 89 f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 b8 aa f0 ff 4d 8b 36 49 83 c6 18 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 9c aa f0 ff 4d 8b 3e 48 c7 c7 20 80 [ 33.571421][ T468] RSP: 0018:ffffc90002de7868 EFLAGS: 00010206 [ 33.577562][ T468] RAX: 0000000000000003 RBX: dffffc0000000000 RCX: ffff888117c213c0 [ 33.585584][ T468] RDX: 0000000000000000 RSI: 0000000000010000 RDI: ffff888111c5a220 [ 33.593573][ T468] RBP: ffffc90002de78a0 R08: ffff88812cc2710f R09: 1ffff11025984e21 [ 33.601548][ T468] R10: dffffc0000000000 R11: ffffed1025984e22 R12: 1ffff11024163a69 [ 33.609576][ T468] R13: 0000000000010000 R14: 0000000000000018 R15: 1ffff1102238b444 [ 33.617588][ T468] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.626575][ T468] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.633199][ T468] CR2: 0000200000001000 CR3: 000000000660f000 CR4: 00000000003506a0 [ 33.641164][ T468] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.649184][ T468] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.657200][ T468] Kernel panic - not syncing: Fatal exception [ 33.663557][ T468] Kernel Offset: disabled [ 33.667887][ T468] Rebooting in 86400 seconds..