[ 13.755000][ T36] audit: type=1400 audit(1757003881.279:62): avc: denied { rlimitinh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.757765][ T36] audit: type=1400 audit(1757003881.279:63): avc: denied { siginh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.210' (ED25519) to the list of known hosts. 2025/09/04 16:38:10 parsed 1 programs [ 22.525511][ T36] audit: type=1400 audit(1757003890.049:64): avc: denied { node_bind } for pid=289 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 23.457149][ T36] audit: type=1400 audit(1757003890.979:65): avc: denied { mounton } for pid=297 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.458160][ T297] cgroup: Unknown subsys name 'net' [ 23.479862][ T36] audit: type=1400 audit(1757003890.979:66): avc: denied { mount } for pid=297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.507179][ T36] audit: type=1400 audit(1757003891.009:67): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.507340][ T297] cgroup: Unknown subsys name 'devices' [ 23.691120][ T297] cgroup: Unknown subsys name 'hugetlb' [ 23.696774][ T297] cgroup: Unknown subsys name 'rlimit' [ 23.875686][ T36] audit: type=1400 audit(1757003891.399:68): avc: denied { setattr } for pid=297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.899081][ T36] audit: type=1400 audit(1757003891.399:69): avc: denied { create } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.919477][ T36] audit: type=1400 audit(1757003891.399:70): avc: denied { write } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.932082][ T299] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.939731][ T36] audit: type=1400 audit(1757003891.399:71): avc: denied { read } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.968434][ T36] audit: type=1400 audit(1757003891.399:72): avc: denied { sys_module } for pid=297 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 23.990013][ T36] audit: type=1400 audit(1757003891.399:73): avc: denied { mounton } for pid=297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.994762][ T297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.866970][ T304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.219519][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.226754][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.234015][ T323] bridge_slave_0: entered allmulticast mode [ 25.240453][ T323] bridge_slave_0: entered promiscuous mode [ 25.246741][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.253851][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.260979][ T323] bridge_slave_1: entered allmulticast mode [ 25.267159][ T323] bridge_slave_1: entered promiscuous mode [ 25.312203][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.319286][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.326572][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.333626][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.357487][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.364823][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.374347][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.381458][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.390429][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.397478][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.420014][ T323] veth0_vlan: entered promiscuous mode [ 25.430008][ T323] veth1_macvtap: entered promiscuous mode [ 25.481433][ T13] bridge_slave_1: left allmulticast mode [ 25.487114][ T13] bridge_slave_1: left promiscuous mode [ 25.492924][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.502032][ T13] bridge_slave_0: left allmulticast mode [ 25.507689][ T13] bridge_slave_0: left promiscuous mode [ 25.513801][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.668468][ T13] veth1_macvtap: left promiscuous mode [ 25.675622][ T13] veth0_vlan: left promiscuous mode 2025/09/04 16:38:13 executed programs: 0 [ 26.140198][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.147271][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.154458][ T370] bridge_slave_0: entered allmulticast mode [ 26.160660][ T370] bridge_slave_0: entered promiscuous mode [ 26.167029][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.174128][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.181206][ T370] bridge_slave_1: entered allmulticast mode [ 26.187545][ T370] bridge_slave_1: entered promiscuous mode [ 26.255954][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.263020][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.270299][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.277413][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.290500][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.299330][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.326938][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.334008][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.344415][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.351469][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.377038][ T370] veth0_vlan: entered promiscuous mode [ 26.387025][ T370] veth1_macvtap: entered promiscuous mode [ 28.146024][ T411] BUG: Bad page state in process syz.2.46 pfn:12f79e [ 28.153073][ T411] page: refcount:0 mapcount:0 mapping:ffff8881241314e8 index:0x0 pfn:0x12f79e [ 28.162011][ T411] aops:v9fs_addr_operations ino:2 dentry name(?):"/" [ 28.163006][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 28.163020][ T36] audit: type=1400 audit(1757003895.689:110): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 28.168789][ T411] flags: 0x4000000000000001(locked|zone=1) [ 28.175332][ T36] audit: type=1400 audit(1757003895.689:111): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 28.199259][ T411] raw: 4000000000000001 dead000000000100 dead000000000122 ffff8881241314e8 [ 28.206510][ T36] audit: type=1400 audit(1757003895.689:112): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 28.225875][ T411] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 28.234673][ T36] audit: type=1400 audit(1757003895.689:113): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 28.255765][ T411] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 28.264759][ T36] audit: type=1400 audit(1757003895.689:114): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 28.285634][ T411] page_owner tracks the page as allocated [ 28.292593][ T36] audit: type=1400 audit(1757003895.689:115): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 28.312747][ T411] page last allocated via order 0, migratetype Movable, gfp_mask 0x141cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_WRITE), pid 411, tgid 411 (syz.2.46), ts 28145749306, free_ts 24216994896 [ 28.318965][ T36] audit: type=1400 audit(1757003895.689:116): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 28.341822][ T411] post_alloc_hook+0x3b9/0x3f0 [ 28.387073][ T411] prep_new_page+0x1c/0x120 [ 28.391657][ T411] get_page_from_freelist+0x48ce/0x4960 [ 28.397262][ T411] __alloc_pages_noprof+0x31f/0x7b0 [ 28.402503][ T411] __folio_alloc_noprof+0x14/0x80 [ 28.407529][ T411] __filemap_get_folio+0x54c/0x9d0 [ 28.412770][ T411] netfs_perform_write+0x4b2/0x1f70 [ 28.417992][ T411] netfs_buffered_write_iter_locked+0xa3/0x1c0 [ 28.424434][ T411] netfs_file_write_iter+0x189/0x440 [ 28.429761][ T411] v9fs_file_write_iter+0xac/0xe0 [ 28.434786][ T411] do_iter_readv_writev+0x4f2/0x6a0 [ 28.440028][ T411] vfs_writev+0x485/0xcf0 [ 28.444365][ T411] __se_sys_pwritev2+0x1ad/0x2b0 [ 28.449416][ T411] __x64_sys_pwritev2+0xc3/0xf0 [ 28.454274][ T411] x64_sys_call+0x2938/0x2ee0 [ 28.459122][ T411] do_syscall_64+0x58/0xf0 [ 28.463630][ T411] page last free pid 297 tgid 297 stack trace: [ 28.469894][ T411] free_unref_folios+0xcfe/0x1680 [ 28.474914][ T411] folios_put_refs+0x4c9/0x5c0 [ 28.479704][ T411] free_pages_and_swap_cache+0x272/0x460 [ 28.485339][ T411] tlb_flush_mmu+0x7ce/0xaf0 [ 28.489970][ T411] tlb_finish_mmu+0xcf/0x1d0 [ 28.494565][ T411] vms_clear_ptes+0x4a6/0x5b0 [ 28.499306][ T411] vms_complete_munmap_vmas+0x1e8/0x6c0 [ 28.504997][ T411] do_vmi_align_munmap+0x507/0x5d0 [ 28.510249][ T411] do_vmi_munmap+0x246/0x2e0 [ 28.514836][ T411] __vm_munmap+0x22b/0x370 [ 28.519279][ T411] __se_sys_munmap+0xc0/0x3a0 [ 28.523951][ T411] __x64_sys_munmap+0x5f/0x80 [ 28.528613][ T411] x64_sys_call+0x9c6/0x2ee0 [ 28.533250][ T411] do_syscall_64+0x58/0xf0 [ 28.537758][ T411] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.543724][ T411] Modules linked in: [ 28.547755][ T411] CPU: 0 UID: 0 PID: 411 Comm: syz.2.46 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 28.547825][ T411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 28.547837][ T411] Call Trace: [ 28.547842][ T411] [ 28.547848][ T411] __dump_stack+0x21/0x30 [ 28.547866][ T411] dump_stack_lvl+0x10c/0x190 [ 28.547878][ T411] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.547891][ T411] ? uncharge_batch+0x287/0x3f0 [ 28.547909][ T411] dump_stack+0x19/0x20 [ 28.547921][ T411] bad_page+0x169/0x1c0 [ 28.547935][ T411] free_page_is_bad_report+0x123/0x1d0 [ 28.547948][ T411] free_unref_page+0xe88/0xee0 [ 28.547960][ T411] ? __cfi_free_unref_page+0x10/0x10 [ 28.547971][ T411] ? trace_raw_output_emulate_vsyscall+0x70/0xe0 [ 28.547982][ T411] __folio_put+0x24f/0x2a0 [ 28.547994][ T411] ? __cfi___folio_put+0x10/0x10 [ 28.548004][ T411] ? __kasan_check_read+0x15/0x20 [ 28.548018][ T411] netfs_perform_write+0x1aae/0x1f70 [ 28.548043][ T411] ? __cfi_netfs_perform_write+0x10/0x10 [ 28.548064][ T411] ? __cfi_downgrade_write+0x10/0x10 [ 28.548078][ T411] ? down_write_killable+0xe9/0x2d0 [ 28.548091][ T411] ? file_update_time+0xa3/0x220 [ 28.548104][ T411] netfs_buffered_write_iter_locked+0xa3/0x1c0 [ 28.548122][ T411] ? netfs_file_write_iter+0x173/0x440 [ 28.548139][ T411] netfs_file_write_iter+0x189/0x440 [ 28.548153][ T411] v9fs_file_write_iter+0xac/0xe0 [ 28.548165][ T411] vfs_write+0x697/0xe80 [ 28.548175][ T411] ? __cfi_v9fs_file_write_iter+0x10/0x10 [ 28.548187][ T411] ? __cfi_vfs_write+0x10/0x10 [ 28.548195][ T411] ? do_futex+0x356/0x500 [ 28.548206][ T411] ? __cfi_do_futex+0x10/0x10 [ 28.548217][ T411] ? kmem_cache_free+0x1c1/0x510 [ 28.548236][ T411] ? __kasan_check_read+0x15/0x20 [ 28.548249][ T411] ksys_write+0x141/0x250 [ 28.548258][ T411] ? __cfi_ksys_write+0x10/0x10 [ 28.548267][ T411] ? __kasan_check_read+0x15/0x20 [ 28.548283][ T411] __x64_sys_write+0x7f/0x90 [ 28.548292][ T411] x64_sys_call+0x271c/0x2ee0 [ 28.548306][ T411] do_syscall_64+0x58/0xf0 [ 28.548319][ T411] ? clear_bhb_loop+0x50/0xa0 [ 28.548331][ T411] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.548341][ T411] RIP: 0033:0x7f0557b8ebe9 [ 28.548355][ T411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 28.548363][ T411] RSP: 002b:00007ffc84424e48 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 28.548375][ T411] RAX: ffffffffffffffda RBX: 00007f0557dc5fa0 RCX: 00007f0557b8ebe9 [ 28.548383][ T411] RDX: 0000000000000018 RSI: 0000200000000380 RDI: 0000000000000007 [ 28.548390][ T411] RBP: 00007f0557c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 28.548396][ T411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.548402][ T411] R13: 00007f0557dc5fa0 R14: 00007f0557dc5fa0 R15: 0000000000000003 [ 28.548409][ T411] [ 28.548413][ T411] Disabling lock debugging due to kernel taint