pfs_t tclass=dir permissive=1 [ 34.028122][ T30] audit: type=1400 audit(1788592107.336:71): avc: denied { search } for pid=2926 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.619834][ T30] audit: type=1400 audit(1788592108.926:72): avc: denied { transition } for pid=2947 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 35.643339][ T30] audit: type=1400 audit(1788592108.926:73): avc: denied { noatsecure } for pid=2947 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 35.643420][ T30] audit: type=1400 audit(1788592108.926:74): avc: denied { write } for pid=2947 comm="sh" path="pipe:[2530]" dev="pipefs" ino=2530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 35.643482][ T30] audit: type=1400 audit(1788592108.926:75): avc: denied { rlimitinh } for pid=2947 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 40.488423][ T2955] sshd-session (2955) used greatest stack depth: 23704 bytes left Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts. 2026/09/05 07:08:44 parsed 1 programs [ 51.369644][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 51.369700][ T30] audit: type=1400 audit(1788592124.676:77): avc: denied { node_bind } for pid=2980 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 51.382201][ T30] audit: type=1400 audit(1788592124.676:78): avc: denied { module_request } for pid=2980 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 2026/09/05 07:08:44 serving rpc on tcp://38695 [ 53.856469][ T30] audit: type=1400 audit(1788592127.166:79): avc: denied { mounton } for pid=2990 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 53.882573][ T30] audit: type=1400 audit(1788592127.196:80): avc: denied { mount } for pid=2990 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.885862][ T2990] cgroup: Unknown subsys name 'net' [ 53.888183][ T30] audit: type=1400 audit(1788592127.196:81): avc: denied { unmount } for pid=2990 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.034029][ T2990] cgroup: Unknown subsys name 'cpuset' [ 54.043031][ T2990] cgroup: Unknown subsys name 'rlimit' [ 54.212877][ T30] audit: type=1400 audit(1788592127.526:82): avc: denied { setattr } for pid=2990 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.214496][ T30] audit: type=1400 audit(1788592127.526:83): avc: denied { create } for pid=2990 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.214552][ T30] audit: type=1400 audit(1788592127.526:84): avc: denied { write } for pid=2990 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.214892][ T30] audit: type=1400 audit(1788592127.526:85): avc: denied { read } for pid=2990 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.258140][ T30] audit: type=1400 audit(1788592127.566:86): avc: denied { sys_module } for pid=2990 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 54.388783][ T2994] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 54.425157][ T2990] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.252222][ T2996] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.445080][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 56.445167][ T30] audit: type=1400 audit(1788592129.756:110): avc: denied { mount } for pid=3003 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.451087][ T30] audit: type=1400 audit(1788592129.756:111): avc: denied { mounton } for pid=3003 comm="syz-executor" path="/root/syzkaller.DTgwEc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=1507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 57.026742][ T30] audit: type=1400 audit(1788592130.336:112): avc: denied { create } for pid=3014 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 57.050807][ T30] audit: type=1400 audit(1788592130.356:113): avc: denied { sys_admin } for pid=3014 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 57.109423][ T30] audit: type=1400 audit(1788592130.416:114): avc: denied { sys_chroot } for pid=3015 comm="syz-executor" capability=18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 57.395986][ T30] audit: type=1401 audit(1788592130.706:115): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 57.456537][ T30] audit: type=1400 audit(1788592130.766:116): avc: denied { create } for pid=3024 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.998250][ T30] audit: type=1400 audit(1788592134.306:117): avc: denied { create } for pid=3039 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.100600][ T3039] syz-executor (3039) used greatest stack depth: 22104 bytes left [ 70.445739][ T30] audit: type=1400 audit(1788592143.756:118): avc: denied { create } for pid=3504 comm="syz-executor" name="tun" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1 [ 70.451825][ T30] audit: type=1400 audit(1788592143.756:119): avc: denied { setattr } for pid=3504 comm="syz-executor" name="tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1 [ 70.451898][ T30] audit: type=1400 audit(1788592143.756:120): avc: denied { read write } for pid=3504 comm="syz-executor" name="tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1 [ 70.451949][ T30] audit: type=1400 audit(1788592143.756:121): avc: denied { open } for pid=3504 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1 2026/09/05 07:09:04 executed programs: 0 2026/09/05 07:09:16 executed programs: 2 [ 83.453069][ T30] audit: type=1400 audit(1788592156.766:122): avc: denied { read write } for pid=3975 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.453156][ T30] audit: type=1400 audit(1788592156.766:123): avc: denied { open } for pid=3975 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.453205][ T30] audit: type=1400 audit(1788592156.766:124): avc: denied { ioctl } for pid=3975 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.692040][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.843267][ T9] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 83.845383][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.464755][ C0] ================================================================== [ 84.464777][ C0] BUG: KASAN: use-after-free in pn533_acr122_is_rx_frame_valid+0x132/0x150 [ 84.464807][ C0] Read of size 1 at addr ffff88816bd67a8e by task swapper/0/0 [ 84.464826][ C0] [ 84.464835][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(lazy) [ 84.464856][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.464866][ C0] Call Trace: [ 84.464872][ C0] [ 84.464888][ C0] dump_stack_lvl+0x100/0x190 [ 84.464915][ C0] print_report+0x13d/0x4b0 [ 84.464940][ C0] ? __virt_addr_valid+0x239/0x430 [ 84.464968][ C0] ? pn533_acr122_is_rx_frame_valid+0x132/0x150 [ 84.464988][ C0] kasan_report+0xdf/0x1c0 [ 84.465007][ C0] ? pn533_acr122_is_rx_frame_valid+0x132/0x150 [ 84.465030][ C0] pn533_acr122_is_rx_frame_valid+0x132/0x150 [ 84.465050][ C0] pn533_recv_frame+0x1b7/0x6d0 [ 84.465075][ C0] ? pn533_recv_response+0x7c/0x200 [ 84.465094][ C0] __usb_hcd_giveback_urb+0x38e/0x610 [ 84.465114][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 84.465133][ C0] dummy_timer+0xdb2/0x3700 [ 84.465156][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 84.465187][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 84.465204][ C0] ? rcu_is_watching+0x13/0xc0 [ 84.465226][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 84.465253][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 84.465270][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 84.465295][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 84.465318][ C0] handle_softirqs+0x1d9/0x9b0 [ 84.465339][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 84.465359][ C0] ? _raw_spin_unlock+0x28/0x50 [ 84.465396][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 84.465420][ C0] __irq_exit_rcu+0x192/0x210 [ 84.465439][ C0] irq_exit_rcu+0x9/0x30 [ 84.465458][ C0] sysvec_apic_timer_interrupt+0x8f/0xb0 [ 84.465476][ C0] [ 84.465481][ C0] [ 84.465488][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 84.465507][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 84.465527][ C0] Code: bf c3 01 e9 43 fa 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 ff 1e 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 84.465544][ C0] RSP: 0018:ffffffff89607d00 EFLAGS: 00000242 [ 84.465560][ C0] RAX: 000000000009948f RBX: ffffffff8962c940 RCX: ffffffff878789d5 [ 84.465573][ C0] RDX: 0000000000000001 RSI: ffffffff89327d4e RDI: ffffffff87d2a600 [ 84.465584][ C0] RBP: fffffbfff12c5928 R08: 0000000000000001 R09: ffffed103eac673d [ 84.465595][ C0] R10: ffff8881f56339eb R11: 0000000000000001 R12: 0000000000000000 [ 84.465606][ C0] R13: 0000000000000000 R14: 1ffffffff12c0fa4 R15: dffffc0000000000 [ 84.465620][ C0] ? ct_kernel_exit+0x125/0x180 [ 84.465640][ C0] default_idle+0x9/0x10 [ 84.465659][ C0] default_idle_call+0x6c/0xb0 [ 84.465680][ C0] do_idle+0x3ae/0x5b0 [ 84.465704][ C0] ? __pfx_do_idle+0x10/0x10 [ 84.465728][ C0] ? rest_init+0x2bf/0x2e0 [ 84.465751][ C0] cpu_startup_entry+0x4f/0x60 [ 84.465776][ C0] rest_init+0x2d3/0x2e0 [ 84.465798][ C0] ? __pfx_rest_init+0x10/0x10 [ 84.465819][ C0] ? __pfx_acpi_read_bit_register+0x10/0x10 [ 84.465837][ C0] ? lock_acquire+0x1d1/0x380 [ 84.465855][ C0] ? __pfx_kernel_init+0x10/0x10 [ 84.465884][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 84.465902][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 84.465920][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 84.465947][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 84.465973][ C0] start_kernel+0x489/0x490 [ 84.465998][ C0] x86_64_start_reservations+0x24/0x30 [ 84.466022][ C0] x86_64_start_kernel+0x12b/0x130 [ 84.466047][ C0] common_startup_64+0x13e/0x158 [ 84.466072][ C0] [ 84.466079][ C0] [ 84.466083][ C0] The buggy address belongs to the physical page: [ 84.466090][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x16bd67 [ 84.466105][ C0] flags: 0x200000000000000(node=0|zone=2) [ 84.466125][ C0] raw: 0200000000000000 ffffea0005af59c8 ffffea0005af59c8 0000000000000000 [ 84.466140][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 84.466149][ C0] page dumped because: kasan: bad access detected [ 84.466162][ C0] page_owner info is not present (never set?) [ 84.466169][ C0] [ 84.466172][ C0] Memory state around the buggy address: [ 84.466180][ C0] ffff88816bd67980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 84.466192][ C0] ffff88816bd67a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 84.466204][ C0] >ffff88816bd67a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 84.466212][ C0] ^ [ 84.466221][ C0] ffff88816bd67b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 84.466233][ C0] ffff88816bd67b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 84.466241][ C0] ================================================================== [ 84.466251][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 84.961451][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(lazy) [ 84.970605][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.981898][ C0] Call Trace: [ 84.985284][ C0] [ 84.988212][ C0] dump_stack_lvl+0x100/0x190 [ 84.992949][ C0] vpanic+0x553/0x970 [ 84.997022][ C0] ? __pfx_vpanic+0x10/0x10 [ 85.001539][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 85.006602][ C0] ? pn533_acr122_is_rx_frame_valid+0x132/0x150 [ 85.012962][ C0] panic+0xd1/0xe0 [ 85.016708][ C0] ? __pfx_panic+0x10/0x10 [ 85.021180][ C0] ? end_report.part.0+0x23/0x90 [ 85.026272][ C0] ? rcu_is_watching+0x13/0xc0 [ 85.031156][ C0] ? end_report.part.0+0x23/0x90 [ 85.036437][ C0] check_panic_on_warn.cold+0x19/0x34 [ 85.041870][ C0] end_report.part.0+0x3a/0x90 [ 85.046916][ C0] kasan_report.cold+0xe/0x18 [ 85.051719][ C0] ? pn533_acr122_is_rx_frame_valid+0x132/0x150 [ 85.058337][ C0] pn533_acr122_is_rx_frame_valid+0x132/0x150 [ 85.064628][ C0] pn533_recv_frame+0x1b7/0x6d0 [ 85.069510][ C0] ? pn533_recv_response+0x7c/0x200 [ 85.074728][ C0] __usb_hcd_giveback_urb+0x38e/0x610 [ 85.080120][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 85.085370][ C0] dummy_timer+0xdb2/0x3700 [ 85.089935][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 85.095772][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 85.100733][ C0] ? rcu_is_watching+0x13/0xc0 [ 85.105536][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 85.111520][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 85.116490][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 85.121720][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 85.126950][ C0] handle_softirqs+0x1d9/0x9b0 [ 85.131938][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 85.137252][ C0] ? _raw_spin_unlock+0x28/0x50 [ 85.142384][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 85.148216][ C0] __irq_exit_rcu+0x192/0x210 [ 85.152946][ C0] irq_exit_rcu+0x9/0x30 [ 85.157240][ C0] sysvec_apic_timer_interrupt+0x8f/0xb0 [ 85.162882][ C0] [ 85.165819][ C0] [ 85.168753][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 85.174759][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 85.180415][ C0] Code: bf c3 01 e9 43 fa 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 ff 1e 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 85.200142][ C0] RSP: 0018:ffffffff89607d00 EFLAGS: 00000242 [ 85.206337][ C0] RAX: 000000000009948f RBX: ffffffff8962c940 RCX: ffffffff878789d5 [ 85.214415][ C0] RDX: 0000000000000001 RSI: ffffffff89327d4e RDI: ffffffff87d2a600 [ 85.222673][ C0] RBP: fffffbfff12c5928 R08: 0000000000000001 R09: ffffed103eac673d [ 85.230931][ C0] R10: ffff8881f56339eb R11: 0000000000000001 R12: 0000000000000000 [ 85.238929][ C0] R13: 0000000000000000 R14: 1ffffffff12c0fa4 R15: dffffc0000000000 [ 85.247028][ C0] ? ct_kernel_exit+0x125/0x180 [ 85.251918][ C0] default_idle+0x9/0x10 [ 85.256521][ C0] default_idle_call+0x6c/0xb0 [ 85.261405][ C0] do_idle+0x3ae/0x5b0 [ 85.265507][ C0] ? __pfx_do_idle+0x10/0x10 [ 85.270127][ C0] ? rest_init+0x2bf/0x2e0 [ 85.274576][ C0] cpu_startup_entry+0x4f/0x60 [ 85.279374][ C0] rest_init+0x2d3/0x2e0 [ 85.283734][ C0] ? __pfx_rest_init+0x10/0x10 [ 85.288536][ C0] ? __pfx_acpi_read_bit_register+0x10/0x10 [ 85.294530][ C0] ? lock_acquire+0x1d1/0x380 [ 85.299314][ C0] ? __pfx_kernel_init+0x10/0x10 [ 85.304282][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 85.309600][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 85.315389][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 85.320892][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 85.326833][ C0] start_kernel+0x489/0x490 [ 85.331559][ C0] x86_64_start_reservations+0x24/0x30 [ 85.337067][ C0] x86_64_start_kernel+0x12b/0x130 [ 85.342232][ C0] common_startup_64+0x13e/0x158 [ 85.347239][ C0] [ 85.350656][ C0] Kernel Offset: disabled [ 85.354991][ C0] Rebooting in 86400 seconds..