Warning: Permanently added '10.128.10.28' (ED25519) to the list of known hosts. 2025/08/19 06:07:39 ignoring optional flag "sandboxArg"="0" 2025/08/19 06:07:40 parsed 1 programs [ 53.112065][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 53.112082][ T36] audit: type=1400 audit(1755583661.530:105): avc: denied { unlink } for pid=405 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 53.161745][ T405] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.980435][ T36] audit: type=1400 audit(1755583662.390:106): avc: denied { create } for pid=414 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.125841][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.133019][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.140382][ T424] bridge_slave_0: entered allmulticast mode [ 54.146853][ T424] bridge_slave_0: entered promiscuous mode [ 54.154422][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.161496][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.168544][ T424] bridge_slave_1: entered allmulticast mode [ 54.174812][ T424] bridge_slave_1: entered promiscuous mode [ 54.212512][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.219541][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.226813][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.233850][ T424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.252947][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.260183][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.269483][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.276549][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.285230][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.292288][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.313211][ T424] veth0_vlan: entered promiscuous mode [ 54.322983][ T424] veth1_macvtap: entered promiscuous mode [ 54.366543][ T36] audit: type=1401 audit(1755583662.780:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 54.503331][ T13] bridge_slave_1: left allmulticast mode [ 54.509003][ T13] bridge_slave_1: left promiscuous mode [ 54.521013][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.553835][ T13] bridge_slave_0: left allmulticast mode [ 54.559504][ T13] bridge_slave_0: left promiscuous mode [ 54.574356][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.672222][ T13] veth1_macvtap: left promiscuous mode [ 54.678426][ T13] veth0_vlan: left promiscuous mode 2025/08/19 06:07:43 executed programs: 0 [ 55.109047][ T36] audit: type=1400 audit(1755583663.520:108): avc: denied { write } for pid=397 comm="syz-execprog" path="pipe:[4138]" dev="pipefs" ino=4138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 55.172604][ T476] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.179709][ T476] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.186974][ T476] bridge_slave_0: entered allmulticast mode [ 55.193391][ T476] bridge_slave_0: entered promiscuous mode [ 55.200036][ T476] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.207088][ T476] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.214191][ T476] bridge_slave_1: entered allmulticast mode [ 55.220569][ T476] bridge_slave_1: entered promiscuous mode [ 55.278458][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.285557][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.295364][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.302517][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.328038][ T476] veth0_vlan: entered promiscuous mode [ 55.337678][ T476] veth1_macvtap: entered promiscuous mode [ 55.363490][ T36] audit: type=1400 audit(1755583663.780:109): avc: denied { mounton } for pid=486 comm="syz.2.17" path="/proc/2/task" dev="proc" ino=5362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 55.564119][ T487] ================================================================== [ 55.572213][ T487] BUG: KASAN: null-ptr-deref in rwsem_read_trylock+0x7e/0x660 [ 55.579669][ T487] Write of size 8 at addr 0000000000000098 by task syz.2.17/487 [ 55.587297][ T487] [ 55.589618][ T487] CPU: 0 UID: 0 PID: 487 Comm: syz.2.17 Not tainted syzkaller #0 16c15e702f58cbd713b33c7cc3414edcb874c0a3 [ 55.589634][ T487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 55.589646][ T487] Call Trace: [ 55.589651][ T487] [ 55.589658][ T487] __dump_stack+0x21/0x30 [ 55.589677][ T487] dump_stack_lvl+0x10c/0x190 [ 55.589690][ T487] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.589703][ T487] ? do_vfs_ioctl+0x1713/0x1e30 [ 55.589715][ T487] ? __futex_queue+0x19a/0x340 [ 55.589726][ T487] print_report+0x3d/0x70 [ 55.589737][ T487] kasan_report+0x163/0x1a0 [ 55.589748][ T487] ? rwsem_read_trylock+0x7e/0x660 [ 55.589762][ T487] ? rwsem_read_trylock+0x7e/0x660 [ 55.589775][ T487] kasan_check_range+0x299/0x2a0 [ 55.589786][ T487] __kasan_check_write+0x18/0x20 [ 55.589800][ T487] rwsem_read_trylock+0x7e/0x660 [ 55.589813][ T487] ? downgrade_write+0x440/0x440 [ 55.589825][ T487] ? has_cap_mac_admin+0xd0/0xd0 [ 55.589837][ T487] ? futex_wake+0x63a/0x900 [ 55.589849][ T487] down_read_killable+0x79/0xf0 [ 55.589859][ T487] ? __cfi_down_read_killable+0x10/0x10 [ 55.589870][ T487] do_pagemap_cmd+0x598/0xc20 [ 55.589883][ T487] ? __cfi_do_pagemap_cmd+0x10/0x10 [ 55.589898][ T487] ? bpf_lsm_file_ioctl+0xd/0x20 [ 55.589912][ T487] ? security_file_ioctl+0x34/0xd0 [ 55.589923][ T487] ? __cfi_do_pagemap_cmd+0x10/0x10 [ 55.589936][ T487] __se_sys_ioctl+0x132/0x1b0 [ 55.589947][ T487] __x64_sys_ioctl+0x7f/0xa0 [ 55.589957][ T487] x64_sys_call+0x1878/0x2ee0 [ 55.589976][ T487] do_syscall_64+0x58/0xf0 [ 55.589988][ T487] ? clear_bhb_loop+0x50/0xa0 [ 55.589999][ T487] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.590014][ T487] RIP: 0033:0x7f843ef8eb69 [ 55.590025][ T487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.590034][ T487] RSP: 002b:00007f843fe5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.590052][ T487] RAX: ffffffffffffffda RBX: 00007f843f1b5fa0 RCX: 00007f843ef8eb69 [ 55.590060][ T487] RDX: 0000200000000100 RSI: 00000000c0606610 RDI: 0000000000000004 [ 55.590067][ T487] RBP: 00007f843f011df1 R08: 0000000000000000 R09: 0000000000000000 [ 55.590073][ T487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.590080][ T487] R13: 0000000000000000 R14: 00007f843f1b5fa0 R15: 00007ffe50490e98 [ 55.590089][ T487] [ 55.590093][ T487] ================================================================== [ 55.837144][ T487] Disabling lock debugging due to kernel taint [ 55.843437][ T487] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 55.851249][ T487] #PF: supervisor write access in kernel mode [ 55.857300][ T487] #PF: error_code(0x0002) - not-present page [ 55.863301][ T487] PGD 80000001278a2067 P4D 80000001278a2067 PUD 0 [ 55.869798][ T487] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 55.875850][ T487] CPU: 0 UID: 0 PID: 487 Comm: syz.2.17 Tainted: G B syzkaller #0 16c15e702f58cbd713b33c7cc3414edcb874c0a3 [ 55.888622][ T487] Tainted: [B]=BAD_PAGE [ 55.892767][ T487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 55.902801][ T487] RIP: 0010:rwsem_read_trylock+0x89/0x660 [ 55.908515][ T487] Code: b8 f1 f1 f1 f1 04 f3 f3 f3 49 89 04 1c c7 44 24 40 00 00 00 00 be 08 00 00 00 e8 42 be 76 00 41 bd 00 01 00 00 4c 89 7c 24 18 4d 0f c1 2f 49 81 c5 00 01 00 00 4d 89 f7 49 c1 ef 03 41 80 3c [ 55.928200][ T487] RSP: 0018:ffffc900011ffb20 EFLAGS: 00010246 [ 55.934340][ T487] RAX: ffff88811c9ab900 RBX: dffffc0000000000 RCX: ffff88811c9ab900 [ 55.942396][ T487] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.950367][ T487] RBP: ffffc900011ffbd0 R08: ffffffff8896a947 R09: 1ffffffff112d528 [ 55.958362][ T487] R10: dffffc0000000000 R11: fffffbfff112d529 R12: 1ffff9200023ff68 [ 55.966319][ T487] R13: 0000000000000100 R14: ffffc900011ffc00 R15: 0000000000000098 [ 55.974284][ T487] FS: 00007f843fe5a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 55.983253][ T487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.989829][ T487] CR2: 0000000000000098 CR3: 000000011cf48000 CR4: 00000000003526b0 [ 55.997813][ T487] Call Trace: [ 56.001087][ T487] [ 56.004010][ T487] ? downgrade_write+0x440/0x440 [ 56.008951][ T487] ? has_cap_mac_admin+0xd0/0xd0 [ 56.013872][ T487] ? futex_wake+0x63a/0x900 [ 56.018364][ T487] down_read_killable+0x79/0xf0 [ 56.023205][ T487] ? __cfi_down_read_killable+0x10/0x10 [ 56.028778][ T487] do_pagemap_cmd+0x598/0xc20 [ 56.033458][ T487] ? __cfi_do_pagemap_cmd+0x10/0x10 [ 56.038642][ T487] ? bpf_lsm_file_ioctl+0xd/0x20 [ 56.043568][ T487] ? security_file_ioctl+0x34/0xd0 [ 56.048661][ T487] ? __cfi_do_pagemap_cmd+0x10/0x10 [ 56.053867][ T487] __se_sys_ioctl+0x132/0x1b0 [ 56.058623][ T487] __x64_sys_ioctl+0x7f/0xa0 [ 56.063239][ T487] x64_sys_call+0x1878/0x2ee0 [ 56.067926][ T487] do_syscall_64+0x58/0xf0 [ 56.072325][ T487] ? clear_bhb_loop+0x50/0xa0 [ 56.076990][ T487] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.082875][ T487] RIP: 0033:0x7f843ef8eb69 [ 56.087363][ T487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.106952][ T487] RSP: 002b:00007f843fe5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.115357][ T487] RAX: ffffffffffffffda RBX: 00007f843f1b5fa0 RCX: 00007f843ef8eb69 [ 56.123321][ T487] RDX: 0000200000000100 RSI: 00000000c0606610 RDI: 0000000000000004 [ 56.131279][ T487] RBP: 00007f843f011df1 R08: 0000000000000000 R09: 0000000000000000 [ 56.139244][ T487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.147260][ T487] R13: 0000000000000000 R14: 00007f843f1b5fa0 R15: 00007ffe50490e98 [ 56.155227][ T487] [ 56.158238][ T487] Modules linked in: [ 56.162130][ T487] CR2: 0000000000000098 [ 56.166290][ T487] ---[ end trace 0000000000000000 ]--- [ 56.171739][ T487] RIP: 0010:rwsem_read_trylock+0x89/0x660 [ 56.177555][ T487] Code: b8 f1 f1 f1 f1 04 f3 f3 f3 49 89 04 1c c7 44 24 40 00 00 00 00 be 08 00 00 00 e8 42 be 76 00 41 bd 00 01 00 00 4c 89 7c 24 18 4d 0f c1 2f 49 81 c5 00 01 00 00 4d 89 f7 49 c1 ef 03 41 80 3c [ 56.197234][ T487] RSP: 0018:ffffc900011ffb20 EFLAGS: 00010246 [ 56.203292][ T487] RAX: ffff88811c9ab900 RBX: dffffc0000000000 RCX: ffff88811c9ab900 [ 56.211244][ T487] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.219229][ T487] RBP: ffffc900011ffbd0 R08: ffffffff8896a947 R09: 1ffffffff112d528 [ 56.227264][ T487] R10: dffffc0000000000 R11: fffffbfff112d529 R12: 1ffff9200023ff68 [ 56.235221][ T487] R13: 0000000000000100 R14: ffffc900011ffc00 R15: 0000000000000098 [ 56.243173][ T487] FS: 00007f843fe5a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 56.252080][ T487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.258638][ T487] CR2: 0000000000000098 CR3: 000000011cf48000 CR4: 00000000003526b0 [ 56.266594][ T487] Kernel panic - not syncing: Fatal exception [ 56.272850][ T487] Kernel Offset: disabled [ 56.277154][ T487] Rebooting in 86400 seconds..