syzkaller syzkaller login: [ 11.283075][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 11.283088][ T28] audit: type=1400 audit(1781429890.124:59): avc: denied { transition } for pid=224 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.286982][ T28] audit: type=1400 audit(1781429890.124:60): avc: denied { noatsecure } for pid=224 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.289702][ T28] audit: type=1400 audit(1781429890.124:61): avc: denied { write } for pid=224 comm="sh" path="pipe:[14511]" dev="pipefs" ino=14511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 11.292709][ T28] audit: type=1400 audit(1781429890.124:62): avc: denied { rlimitinh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.295220][ T28] audit: type=1400 audit(1781429890.124:63): avc: denied { siginh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts. 2026/06/14 09:38:19 parsed 1 programs [ 20.640588][ T28] audit: type=1400 audit(1781429899.484:64): avc: denied { node_bind } for pid=295 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 20.643431][ T28] audit: type=1400 audit(1781429899.484:65): avc: denied { module_request } for pid=295 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 21.376554][ T28] audit: type=1400 audit(1781429900.214:66): avc: denied { mounton } for pid=303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.377601][ T303] cgroup: Unknown subsys name 'net' [ 21.399183][ T28] audit: type=1400 audit(1781429900.214:67): avc: denied { mount } for pid=303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.426443][ T28] audit: type=1400 audit(1781429900.244:68): avc: denied { unmount } for pid=303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.426579][ T303] cgroup: Unknown subsys name 'devices' [ 21.569919][ T303] cgroup: Unknown subsys name 'hugetlb' [ 21.575519][ T303] cgroup: Unknown subsys name 'rlimit' [ 21.712657][ T28] audit: type=1400 audit(1781429900.554:69): avc: denied { setattr } for pid=303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.735844][ T28] audit: type=1400 audit(1781429900.554:70): avc: denied { create } for pid=303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.752009][ T306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.756366][ T28] audit: type=1400 audit(1781429900.554:71): avc: denied { write } for pid=303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.784987][ T28] audit: type=1400 audit(1781429900.554:72): avc: denied { read } for pid=303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.805358][ T28] audit: type=1400 audit(1781429900.554:73): avc: denied { mounton } for pid=303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.806736][ T303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.454500][ T308] request_module fs-gadgetfs succeeded, but still no fs? [ 22.872169][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.879236][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.886526][ T336] device bridge_slave_0 entered promiscuous mode [ 22.893496][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.900579][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.907845][ T336] device bridge_slave_1 entered promiscuous mode [ 22.946685][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.953732][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.961010][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.968044][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.984802][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.992333][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.999673][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.007031][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.016407][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.024591][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.031619][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.040910][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.049169][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.056188][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.067739][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.076814][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.090155][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.101435][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.109461][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.116848][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.125021][ T336] device veth0_vlan entered promiscuous mode [ 23.134291][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.143386][ T336] device veth1_macvtap entered promiscuous mode [ 23.152127][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.162111][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.192252][ T336] syz-executor (336) used greatest stack depth: 21536 bytes left 2026/06/14 09:38:22 executed programs: 0 [ 23.623569][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.630685][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.637949][ T370] device bridge_slave_0 entered promiscuous mode [ 23.644830][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.651887][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.659393][ T370] device bridge_slave_1 entered promiscuous mode [ 23.700235][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.707266][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.714523][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.721552][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.738503][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.746069][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.753377][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.767345][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.775562][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.782591][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.790205][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.798871][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.805894][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.819189][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.827279][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.838646][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.849525][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.857473][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.865135][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.873866][ T370] device veth0_vlan entered promiscuous mode [ 23.883045][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.891264][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.900176][ T370] device veth1_macvtap entered promiscuous mode [ 23.909328][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.917054][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.925524][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.935351][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.943636][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.020820][ T377] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN [ 24.032552][ T377] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 24.040953][ T377] CPU: 1 PID: 377 Comm: syz.2.17 Not tainted syzkaller #0 [ 24.048039][ T377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 24.058071][ T377] RIP: 0010:do_unlinkat+0x288/0x6c0 [ 24.063272][ T377] Code: 44 89 ee e8 9a 4d ae ff 45 31 e4 41 81 fd 00 00 20 00 41 0f 95 c4 41 83 c4 eb e9 bd 00 00 00 49 8d 7e 30 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 4c 8b 7c 24 20 74 05 e8 27 d4 f3 ff 49 8b 46 30 48 [ 24.082857][ T377] RSP: 0018:ffffc900009b7de0 EFLAGS: 00010203 [ 24.088911][ T377] RAX: 0000000000000008 RBX: 1ffff110222a864a RCX: 0000000000000000 [ 24.096856][ T377] RDX: ffff888113a0e540 RSI: 0000000000000000 RDI: 0000000000000046 [ 24.104805][ T377] RBP: ffffc900009b7ed0 R08: ffffc900009b7cc7 R09: 1ffff92000136f98 [ 24.112749][ T377] R10: dffffc0000000000 R11: fffff52000136f99 R12: 0000000000000000 [ 24.120699][ T377] R13: dffffc0000000000 R14: 0000000000000016 R15: 0000000000000000 [ 24.128652][ T377] FS: 00007f0f9600e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 24.137558][ T377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.144117][ T377] CR2: 00007f0f95fecff8 CR3: 000000010d402000 CR4: 00000000003506a0 [ 24.152067][ T377] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.160013][ T377] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.167964][ T377] Call Trace: [ 24.171227][ T377] [ 24.174136][ T377] ? __check_object_size+0x45a/0x600 [ 24.179408][ T377] ? __cfi_do_unlinkat+0x10/0x10 [ 24.184348][ T377] __x64_sys_unlinkat+0xd8/0xf0 [ 24.189176][ T377] x64_sys_call+0x79f/0x9a0 [ 24.193678][ T377] do_syscall_64+0x4c/0xa0 [ 24.198075][ T377] ? clear_bhb_loop+0x30/0x80 [ 24.202724][ T377] ? clear_bhb_loop+0x30/0x80 [ 24.207375][ T377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 24.213259][ T377] RIP: 0033:0x7f0f9519ce59 [ 24.217659][ T377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.237258][ T377] RSP: 002b:00007f0f9600e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 24.245652][ T377] RAX: ffffffffffffffda RBX: 00007f0f95415fa0 RCX: 00007f0f9519ce59 [ 24.253599][ T377] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 24.261550][ T377] RBP: 00007f0f95232d6f R08: 0000000000000000 R09: 0000000000000000 [ 24.269509][ T377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 24.277461][ T377] R13: 00007f0f95416038 R14: 00007f0f95415fa0 R15: 00007ffc4ff97c78 [ 24.285416][ T377] [ 24.288411][ T377] Modules linked in: [ 24.294732][ T377] ---[ end trace 0000000000000000 ]--- [ 24.300395][ T377] RIP: 0010:do_unlinkat+0x288/0x6c0 [ 24.305601][ T377] Code: 44 89 ee e8 9a 4d ae ff 45 31 e4 41 81 fd 00 00 20 00 41 0f 95 c4 41 83 c4 eb e9 bd 00 00 00 49 8d 7e 30 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 4c 8b 7c 24 20 74 05 e8 27 d4 f3 ff 49 8b 46 30 48 [ 24.325420][ T377] RSP: 0018:ffffc900009b7de0 EFLAGS: 00010203 [ 24.331655][ T377] RAX: 0000000000000008 RBX: 1ffff110222a864a RCX: 0000000000000000 [ 24.339849][ T377] RDX: ffff888113a0e540 RSI: 0000000000000000 RDI: 0000000000000046 [ 24.347834][ T377] RBP: ffffc900009b7ed0 R08: ffffc900009b7cc7 R09: 1ffff92000136f98 [ 24.355987][ T377] R10: dffffc0000000000 R11: fffff52000136f99 R12: 0000000000000000 [ 24.364050][ T377] R13: dffffc0000000000 R14: 0000000000000016 R15: 0000000000000000 [ 24.372094][ T377] FS: 00007f0f9600e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 24.381133][ T377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.387710][ T377] CR2: 00007f0f951ea540 CR3: 000000010d402000 CR4: 00000000003506b0 [ 24.395726][ T377] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.403861][ T377] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.411909][ T377] Kernel panic - not syncing: Fatal exception [ 24.418190][ T377] Kernel Offset: disabled [ 24.422498][ T377] Rebooting in 86400 seconds..