Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. 2025/09/09 22:31:23 parsed 1 programs [ 23.421962][ T36] audit: type=1400 audit(1757457082.999:64): avc: denied { node_bind } for pid=289 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.335834][ T36] audit: type=1400 audit(1757457083.909:65): avc: denied { mounton } for pid=296 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.336843][ T296] cgroup: Unknown subsys name 'net' [ 24.358528][ T36] audit: type=1400 audit(1757457083.909:66): avc: denied { mount } for pid=296 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.385740][ T36] audit: type=1400 audit(1757457083.939:67): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.385934][ T296] cgroup: Unknown subsys name 'devices' [ 24.550897][ T296] cgroup: Unknown subsys name 'hugetlb' [ 24.556484][ T296] cgroup: Unknown subsys name 'rlimit' [ 24.714293][ T36] audit: type=1400 audit(1757457084.289:68): avc: denied { setattr } for pid=296 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.737442][ T36] audit: type=1400 audit(1757457084.289:69): avc: denied { create } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.749258][ T300] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.757924][ T36] audit: type=1400 audit(1757457084.289:70): avc: denied { write } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.786547][ T36] audit: type=1400 audit(1757457084.289:71): avc: denied { read } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.794170][ T296] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.806696][ T36] audit: type=1400 audit(1757457084.289:72): avc: denied { sys_module } for pid=296 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 24.836307][ T36] audit: type=1400 audit(1757457084.289:73): avc: denied { mounton } for pid=296 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.658101][ T302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.132467][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.139651][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.146697][ T341] bridge_slave_0: entered allmulticast mode [ 26.153153][ T341] bridge_slave_0: entered promiscuous mode [ 26.160003][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.167062][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.174156][ T341] bridge_slave_1: entered allmulticast mode [ 26.180357][ T341] bridge_slave_1: entered promiscuous mode [ 26.235528][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.242600][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.249907][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.256917][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.274307][ T325] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.281617][ T325] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.293485][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.300545][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.310121][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.317134][ T325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.339433][ T341] veth0_vlan: entered promiscuous mode [ 26.348774][ T341] veth1_macvtap: entered promiscuous mode [ 26.401373][ T12] bridge_slave_1: left allmulticast mode [ 26.407042][ T12] bridge_slave_1: left promiscuous mode [ 26.412840][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.420869][ T12] bridge_slave_0: left allmulticast mode [ 26.426514][ T12] bridge_slave_0: left promiscuous mode [ 26.432493][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.581093][ T12] veth1_macvtap: left promiscuous mode [ 26.586640][ T12] veth0_vlan: left promiscuous mode 2025/09/09 22:31:26 executed programs: 0 [ 26.920123][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.927163][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.934238][ T371] bridge_slave_0: entered allmulticast mode [ 26.940409][ T371] bridge_slave_0: entered promiscuous mode [ 26.946573][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.953673][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.961089][ T371] bridge_slave_1: entered allmulticast mode [ 26.967228][ T371] bridge_slave_1: entered promiscuous mode [ 27.004230][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.011278][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.018517][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.025536][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.056663][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.063975][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.076097][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.083165][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.093924][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.100964][ T325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.122207][ T371] veth0_vlan: entered promiscuous mode [ 27.133820][ T371] veth1_macvtap: entered promiscuous mode [ 27.159201][ T381] ================================================================== [ 27.167281][ T381] BUG: KASAN: null-ptr-deref in rwsem_read_trylock+0x7e/0x660 [ 27.174730][ T381] Write of size 8 at addr 0000000000000098 by task syz.2.17/381 [ 27.182335][ T381] [ 27.184644][ T381] CPU: 0 UID: 0 PID: 381 Comm: syz.2.17 Not tainted syzkaller #0 7889a62797c5970a6d86d60f5314b8c2dceacd81 [ 27.184658][ T381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 27.184670][ T381] Call Trace: [ 27.184674][ T381] [ 27.184679][ T381] __dump_stack+0x21/0x30 [ 27.184696][ T381] dump_stack_lvl+0x10c/0x190 [ 27.184708][ T381] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.184721][ T381] ? do_vfs_ioctl+0x1713/0x1e30 [ 27.184733][ T381] print_report+0x3d/0x70 [ 27.184744][ T381] kasan_report+0x163/0x1a0 [ 27.184755][ T381] ? rwsem_read_trylock+0x7e/0x660 [ 27.184769][ T381] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 27.184782][ T381] ? rwsem_read_trylock+0x7e/0x660 [ 27.184794][ T381] kasan_check_range+0x299/0x2a0 [ 27.184805][ T381] __kasan_check_write+0x18/0x20 [ 27.184818][ T381] rwsem_read_trylock+0x7e/0x660 [ 27.184830][ T381] ? downgrade_write+0x440/0x440 [ 27.184842][ T381] ? has_cap_mac_admin+0xd0/0xd0 [ 27.184854][ T381] ? futex_wake+0x5fb/0x900 [ 27.184866][ T381] down_read_killable+0x79/0xf0 [ 27.184878][ T381] ? __cfi_down_read_killable+0x10/0x10 [ 27.184891][ T381] do_pagemap_cmd+0x598/0xc20 [ 27.184904][ T381] ? __cfi_do_pagemap_cmd+0x10/0x10 [ 27.184917][ T381] ? __se_sys_futex+0x28f/0x300 [ 27.184928][ T381] ? bpf_lsm_file_ioctl+0xd/0x20 [ 27.184941][ T381] ? security_file_ioctl+0x34/0xd0 [ 27.184951][ T381] ? __cfi_do_pagemap_cmd+0x10/0x10 [ 27.184963][ T381] __se_sys_ioctl+0x132/0x1b0 [ 27.184974][ T381] __x64_sys_ioctl+0x7f/0xa0 [ 27.184984][ T381] x64_sys_call+0x1878/0x2ee0 [ 27.184998][ T381] do_syscall_64+0x58/0xf0 [ 27.185012][ T381] ? clear_bhb_loop+0x50/0xa0 [ 27.185024][ T381] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.185037][ T381] RIP: 0033:0x7f70fe38ebe9 [ 27.185049][ T381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 27.185058][ T381] RSP: 002b:00007ffd189251d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 27.185072][ T381] RAX: ffffffffffffffda RBX: 00007f70fe5c5fa0 RCX: 00007f70fe38ebe9 [ 27.185080][ T381] RDX: 0000200000000280 RSI: 00000000c0606610 RDI: 0000000000000004 [ 27.185087][ T381] RBP: 00007f70fe411e19 R08: 0000000000000000 R09: 0000000000000000 [ 27.185093][ T381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.185099][ T381] R13: 00007f70fe5c5fa0 R14: 00007f70fe5c5fa0 R15: 0000000000000003 [ 27.185107][ T381] [ 27.185111][ T381] ================================================================== [ 27.436906][ T381] Disabling lock debugging due to kernel taint [ 27.443101][ T381] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 27.450890][ T381] #PF: supervisor write access in kernel mode [ 27.456956][ T381] #PF: error_code(0x0002) - not-present page [ 27.462912][ T381] PGD 800000012b914067 P4D 800000012b914067 PUD 0 [ 27.469395][ T381] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 27.475444][ T381] CPU: 0 UID: 0 PID: 381 Comm: syz.2.17 Tainted: G B syzkaller #0 7889a62797c5970a6d86d60f5314b8c2dceacd81 [ 27.488176][ T381] Tainted: [B]=BAD_PAGE [ 27.492301][ T381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 27.502354][ T381] RIP: 0010:rwsem_read_trylock+0x89/0x660 [ 27.508059][ T381] Code: b8 f1 f1 f1 f1 04 f3 f3 f3 49 89 04 1c c7 44 24 40 00 00 00 00 be 08 00 00 00 e8 42 cb 76 00 41 bd 00 01 00 00 4c 89 7c 24 18 4d 0f c1 2f 49 81 c5 00 01 00 00 4d 89 f7 49 c1 ef 03 41 80 3c [ 27.527643][ T381] RSP: 0018:ffffc90000f1fb20 EFLAGS: 00010246 [ 27.533713][ T381] RAX: ffff8881162e8000 RBX: dffffc0000000000 RCX: ffff8881162e8000 [ 27.541667][ T381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.549620][ T381] RBP: ffffc90000f1fbd0 R08: ffffffff8896f947 R09: 1ffffffff112df28 [ 27.557571][ T381] R10: dffffc0000000000 R11: fffffbfff112df29 R12: 1ffff920001e3f68 [ 27.565523][ T381] R13: 0000000000000100 R14: ffffc90000f1fc00 R15: 0000000000000098 [ 27.573478][ T381] FS: 000055556f718500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 27.582391][ T381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.588959][ T381] CR2: 0000000000000098 CR3: 0000000116b6a000 CR4: 00000000003526b0 [ 27.596909][ T381] Call Trace: [ 27.600168][ T381] [ 27.603080][ T381] ? downgrade_write+0x440/0x440 [ 27.607999][ T381] ? has_cap_mac_admin+0xd0/0xd0 [ 27.612916][ T381] ? futex_wake+0x5fb/0x900 [ 27.617398][ T381] down_read_killable+0x79/0xf0 [ 27.622238][ T381] ? __cfi_down_read_killable+0x10/0x10 [ 27.627762][ T381] do_pagemap_cmd+0x598/0xc20 [ 27.632423][ T381] ? __cfi_do_pagemap_cmd+0x10/0x10 [ 27.637597][ T381] ? __se_sys_futex+0x28f/0x300 [ 27.642426][ T381] ? bpf_lsm_file_ioctl+0xd/0x20 [ 27.647347][ T381] ? security_file_ioctl+0x34/0xd0 [ 27.652435][ T381] ? __cfi_do_pagemap_cmd+0x10/0x10 [ 27.657612][ T381] __se_sys_ioctl+0x132/0x1b0 [ 27.662264][ T381] __x64_sys_ioctl+0x7f/0xa0 [ 27.666829][ T381] x64_sys_call+0x1878/0x2ee0 [ 27.671482][ T381] do_syscall_64+0x58/0xf0 [ 27.675879][ T381] ? clear_bhb_loop+0x50/0xa0 [ 27.680533][ T381] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.686407][ T381] RIP: 0033:0x7f70fe38ebe9 [ 27.690799][ T381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 27.710384][ T381] RSP: 002b:00007ffd189251d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 27.718776][ T381] RAX: ffffffffffffffda RBX: 00007f70fe5c5fa0 RCX: 00007f70fe38ebe9 [ 27.726726][ T381] RDX: 0000200000000280 RSI: 00000000c0606610 RDI: 0000000000000004 [ 27.734674][ T381] RBP: 00007f70fe411e19 R08: 0000000000000000 R09: 0000000000000000 [ 27.742620][ T381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.750567][ T381] R13: 00007f70fe5c5fa0 R14: 00007f70fe5c5fa0 R15: 0000000000000003 [ 27.758517][ T381] [ 27.761517][ T381] Modules linked in: [ 27.765406][ T381] CR2: 0000000000000098 [ 27.769530][ T381] ---[ end trace 0000000000000000 ]--- [ 27.774957][ T381] RIP: 0010:rwsem_read_trylock+0x89/0x660 [ 27.780659][ T381] Code: b8 f1 f1 f1 f1 04 f3 f3 f3 49 89 04 1c c7 44 24 40 00 00 00 00 be 08 00 00 00 e8 42 cb 76 00 41 bd 00 01 00 00 4c 89 7c 24 18 4d 0f c1 2f 49 81 c5 00 01 00 00 4d 89 f7 49 c1 ef 03 41 80 3c [ 27.800240][ T381] RSP: 0018:ffffc90000f1fb20 EFLAGS: 00010246 [ 27.806288][ T381] RAX: ffff8881162e8000 RBX: dffffc0000000000 RCX: ffff8881162e8000 [ 27.814275][ T381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.822227][ T381] RBP: ffffc90000f1fbd0 R08: ffffffff8896f947 R09: 1ffffffff112df28 [ 27.830179][ T381] R10: dffffc0000000000 R11: fffffbfff112df29 R12: 1ffff920001e3f68 [ 27.838129][ T381] R13: 0000000000000100 R14: ffffc90000f1fc00 R15: 0000000000000098 [ 27.846082][ T381] FS: 000055556f718500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 27.854997][ T381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.861585][ T381] CR2: 0000000000000098 CR3: 0000000116b6a000 CR4: 00000000003526b0 [ 27.869538][ T381] Kernel panic - not syncing: Fatal exception [ 27.875784][ T381] Kernel Offset: disabled [ 27.880088][ T381] Rebooting in 86400 seconds..