[ 6.011791][ T30] audit: type=1400 audit(1783075239.268:58): avc: denied { read } for pid=194 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 13.315133][ T30] audit: type=1400 audit(1783075246.608:59): avc: denied { transition } for pid=223 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.323488][ T30] audit: type=1400 audit(1783075246.608:60): avc: denied { noatsecure } for pid=223 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.331203][ T30] audit: type=1400 audit(1783075246.608:61): avc: denied { write } for pid=223 comm="sh" path="pipe:[13083]" dev="pipefs" ino=13083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 13.347186][ T30] audit: type=1400 audit(1783075246.608:62): avc: denied { rlimitinh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.368286][ T30] audit: type=1400 audit(1783075246.608:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts. 2026/07/03 10:40:56 parsed 1 programs 2026/07/03 10:40:56 serving rpc on tcp://34567 [ 23.182307][ T30] audit: type=1400 audit(1783075256.468:64): avc: denied { node_bind } for pid=293 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 23.203442][ T30] audit: type=1400 audit(1783075256.468:65): avc: denied { module_request } for pid=293 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 23.909818][ T30] audit: type=1400 audit(1783075257.198:66): avc: denied { mounton } for pid=299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.910809][ T299] cgroup: Unknown subsys name 'net' [ 23.932681][ T30] audit: type=1400 audit(1783075257.198:67): avc: denied { mount } for pid=299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.960134][ T30] audit: type=1400 audit(1783075257.238:68): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.960291][ T299] cgroup: Unknown subsys name 'devices' [ 24.106390][ T299] cgroup: Unknown subsys name 'hugetlb' [ 24.112039][ T299] cgroup: Unknown subsys name 'rlimit' [ 24.223346][ T30] audit: type=1400 audit(1783075257.508:69): avc: denied { setattr } for pid=299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.246870][ T30] audit: type=1400 audit(1783075257.508:70): avc: denied { create } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.267411][ T30] audit: type=1400 audit(1783075257.508:71): avc: denied { write } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.273468][ T303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.288086][ T30] audit: type=1400 audit(1783075257.508:72): avc: denied { read } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.317284][ T30] audit: type=1400 audit(1783075257.508:73): avc: denied { mounton } for pid=299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.349015][ T299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.793165][ T305] request_module fs-gadgetfs succeeded, but still no fs? [ 25.170003][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.177125][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.184502][ T335] device bridge_slave_0 entered promiscuous mode [ 25.193027][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.200303][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.207867][ T335] device bridge_slave_1 entered promiscuous mode [ 25.245350][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.252577][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.259939][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.267013][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.289510][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.297817][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.305114][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.314028][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.322538][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.329633][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.338500][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.346740][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.353774][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.366651][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.375593][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.388904][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.399991][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.408372][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.415888][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.423904][ T335] device veth0_vlan entered promiscuous mode [ 25.433576][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.442885][ T335] device veth1_macvtap entered promiscuous mode [ 25.451822][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.461759][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.496302][ T335] syz-executor (335) used greatest stack depth: 21696 bytes left 2026/07/03 10:40:59 executed programs: 0 [ 25.865756][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.872951][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.880786][ T366] device bridge_slave_0 entered promiscuous mode [ 25.887825][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.894970][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.902274][ T366] device bridge_slave_1 entered promiscuous mode [ 25.943624][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.951415][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.958736][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.965784][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.983286][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.991158][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.998660][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.015124][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.023430][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.030532][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.038373][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.046656][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.053856][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.061336][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.070816][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.086797][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.099333][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.107458][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.116037][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.124316][ T366] device veth0_vlan entered promiscuous mode [ 26.133681][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.141856][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.152792][ T366] device veth1_macvtap entered promiscuous mode [ 26.162190][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.169833][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.178339][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.187757][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.196431][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.274276][ T371] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN [ 26.286023][ T371] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 26.294433][ T371] CPU: 1 PID: 371 Comm: syz.2.17 Not tainted syzkaller #0 [ 26.301545][ T371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 26.311596][ T371] RIP: 0010:do_rmdir+0x1fa/0x6b0 [ 26.316813][ T371] Code: ff ff 49 89 c6 48 3d 01 f0 ff ff 72 0d e8 5e b7 b5 ff 45 89 f7 e9 94 00 00 00 4c 89 74 24 20 4d 8d 7e 30 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 77 28 f5 ff 49 83 3f 00 4c 8b 34 [ 26.336410][ T371] RSP: 0018:ffffc90002ba7e20 EFLAGS: 00010203 [ 26.342482][ T371] RAX: 0000000000000008 RBX: 1ffff92000574fcc RCX: ffff8881113c3b40 [ 26.350629][ T371] RDX: 0000000000000000 RSI: 0000000000000003 RDI: ffff8881113c3b40 [ 26.358791][ T371] RBP: ffffc90002ba7ee8 R08: ffff88810d0947cf R09: 1ffff11021a128f9 [ 26.366767][ T371] R10: dffffc0000000000 R11: ffffed1021a128fa R12: 00000000ffffff9c [ 26.374735][ T371] R13: dffffc0000000000 R14: 0000000000000014 R15: 0000000000000044 [ 26.382723][ T371] FS: 00007f7b981266c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 26.391671][ T371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.398250][ T371] CR2: 0000200000001940 CR3: 00000001244b8000 CR4: 00000000003506a0 [ 26.406300][ T371] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.414265][ T371] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.422244][ T371] Call Trace: [ 26.425518][ T371] [ 26.428614][ T371] ? d_delete_notify+0x160/0x160 [ 26.433648][ T371] ? getname_flags+0x205/0x510 [ 26.438433][ T371] __x64_sys_rmdir+0x49/0x50 [ 26.443040][ T371] x64_sys_call+0x25f/0x9a0 [ 26.447658][ T371] do_syscall_64+0x4c/0xa0 [ 26.452158][ T371] ? clear_bhb_loop+0x50/0xa0 [ 26.456842][ T371] ? clear_bhb_loop+0x50/0xa0 [ 26.461528][ T371] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 26.467425][ T371] RIP: 0033:0x7f7b982c4e59 [ 26.471969][ T371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.491615][ T371] RSP: 002b:00007f7b98126028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 26.500050][ T371] RAX: ffffffffffffffda RBX: 00007f7b9854cfa0 RCX: 00007f7b982c4e59 [ 26.508073][ T371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 26.516167][ T371] RBP: 00007f7b9835ae6f R08: 0000000000000000 R09: 0000000000000000 [ 26.524154][ T371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.532136][ T371] R13: 00007f7b9854d038 R14: 00007f7b9854cfa0 R15: 00007fff9739b4e8 [ 26.540119][ T371] [ 26.543138][ T371] Modules linked in: [ 26.550211][ T371] ---[ end trace 63570bd5b5cf0ff2 ]--- [ 26.555753][ T371] RIP: 0010:do_rmdir+0x1fa/0x6b0 [ 26.560730][ T371] Code: ff ff 49 89 c6 48 3d 01 f0 ff ff 72 0d e8 5e b7 b5 ff 45 89 f7 e9 94 00 00 00 4c 89 74 24 20 4d 8d 7e 30 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 77 28 f5 ff 49 83 3f 00 4c 8b 34 [ 26.580936][ T371] RSP: 0018:ffffc90002ba7e20 EFLAGS: 00010203 [ 26.587366][ T371] RAX: 0000000000000008 RBX: 1ffff92000574fcc RCX: ffff8881113c3b40 [ 26.595600][ T371] RDX: 0000000000000000 RSI: 0000000000000003 RDI: ffff8881113c3b40 [ 26.603666][ T371] RBP: ffffc90002ba7ee8 R08: ffff88810d0947cf R09: 1ffff11021a128f9 [ 26.611933][ T371] R10: dffffc0000000000 R11: ffffed1021a128fa R12: 00000000ffffff9c [ 26.620114][ T371] R13: dffffc0000000000 R14: 0000000000000014 R15: 0000000000000044 [ 26.628218][ T371] FS: 00007f7b981266c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 26.637211][ T371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.643862][ T371] CR2: 00007f7b98312540 CR3: 00000001244b8000 CR4: 00000000003506b0 [ 26.652131][ T371] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.660246][ T371] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.668403][ T371] Kernel panic - not syncing: Fatal exception [ 26.674550][ T371] Kernel Offset: disabled [ 26.678866][ T371] Rebooting in 86400 seconds..