syzkaller syzkaller login: [ 13.038762][ T24] kauditd_printk_skb: 48 callbacks suppressed [ 13.038773][ T24] audit: type=1400 audit(1764658632.200:59): avc: denied { transition } for pid=217 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.048255][ T24] audit: type=1400 audit(1764658632.200:60): avc: denied { noatsecure } for pid=217 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.054477][ T24] audit: type=1400 audit(1764658632.200:61): avc: denied { write } for pid=217 comm="sh" path="pipe:[14374]" dev="pipefs" ino=14374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 13.061679][ T24] audit: type=1400 audit(1764658632.200:62): avc: denied { rlimitinh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.067743][ T24] audit: type=1400 audit(1764658632.200:63): avc: denied { siginh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.80' (ED25519) to the list of known hosts. 2025/12/02 06:57:22 parsed 1 programs [ 23.723394][ T24] audit: type=1400 audit(1764658642.880:64): avc: denied { node_bind } for pid=275 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 23.729634][ T24] audit: type=1400 audit(1764658642.880:65): avc: denied { create } for pid=275 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 23.734969][ T24] audit: type=1400 audit(1764658642.880:66): avc: denied { module_request } for pid=275 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 24.533700][ T24] audit: type=1400 audit(1764658643.690:67): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.534999][ T283] cgroup: Unknown subsys name 'net' [ 24.556350][ T24] audit: type=1400 audit(1764658643.690:68): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.583609][ T24] audit: type=1400 audit(1764658643.730:69): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.583792][ T283] cgroup: Unknown subsys name 'devices' [ 24.788082][ T283] cgroup: Unknown subsys name 'hugetlb' [ 24.793758][ T283] cgroup: Unknown subsys name 'rlimit' [ 24.999277][ T24] audit: type=1400 audit(1764658644.160:70): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.022564][ T24] audit: type=1400 audit(1764658644.160:71): avc: denied { create } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.028843][ T286] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.043178][ T24] audit: type=1400 audit(1764658644.160:72): avc: denied { write } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.071749][ T24] audit: type=1400 audit(1764658644.160:73): avc: denied { read } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.100138][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.474439][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 25.485243][ T288] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 25.928458][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.935580][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.943815][ T324] device bridge_slave_0 entered promiscuous mode [ 25.950911][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.958099][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.965341][ T324] device bridge_slave_1 entered promiscuous mode [ 26.002200][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.009334][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.016614][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.023776][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.040985][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.048249][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.055455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.063905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.074297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.082492][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.089522][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.097041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.105122][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.112151][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.123360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.132253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.144657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.155360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.163710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.171459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.179447][ T324] device veth0_vlan entered promiscuous mode [ 26.188591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.197369][ T324] device veth1_macvtap entered promiscuous mode [ 26.205824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.215297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/12/02 06:57:25 executed programs: 0 [ 26.569103][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.576267][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.584194][ T351] device bridge_slave_0 entered promiscuous mode [ 26.591089][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.598223][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.605491][ T351] device bridge_slave_1 entered promiscuous mode [ 26.646205][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.653271][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.660562][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.667599][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.689186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.701553][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.717516][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.730720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.739097][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.746122][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.753651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.762022][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.769050][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.780130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.788069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.799744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.810812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.818874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.826207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.835023][ T351] device veth0_vlan entered promiscuous mode [ 26.845166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.854737][ T351] device veth1_macvtap entered promiscuous mode [ 26.863640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.873278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.945312][ T388] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 26.957147][ T388] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 26.965548][ T388] CPU: 1 PID: 388 Comm: syz.2.17 Not tainted syzkaller #0 [ 26.972632][ T388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 26.982689][ T388] RIP: 0010:do_renameat2+0x471/0xe60 [ 26.987974][ T388] Code: 89 c5 48 3d 01 f0 ff ff 72 0f e8 1a f4 ba ff 4c 8b 64 24 20 e9 6a 03 00 00 4d 89 ec 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 04 84 c0 0f 85 2f 05 00 00 41 8b 5d 00 be 00 00 70 00 [ 27.007576][ T388] RSP: 0018:ffffc90000f57d80 EFLAGS: 00010202 [ 27.013650][ T388] RAX: dffffc0000000000 RBX: 00000000ffffff9c RCX: ffff88810d3b62c0 [ 27.021696][ T388] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88810d3b62c0 [ 27.029745][ T388] RBP: ffffc90000f57f08 R08: dffffc0000000000 R09: ffffed10219ca7e8 [ 27.037703][ T388] R10: ffffed10219ca7e8 R11: 1ffff110219ca7e7 R12: 0000000000000001 [ 27.045659][ T388] R13: 0000000000000008 R14: ffff88811008d500 R15: 0000000000000001 [ 27.053626][ T388] FS: 00007f113eac76c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 27.062561][ T388] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.069127][ T388] CR2: 00007f113eac6f98 CR3: 00000001296fc000 CR4: 00000000003506a0 [ 27.077087][ T388] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.085041][ T388] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.092997][ T388] Call Trace: [ 27.096273][ T388] ? fsnotify_move+0x2a0/0x2a0 [ 27.101017][ T388] ? getname_flags+0x206/0x500 [ 27.105764][ T388] __x64_sys_rename+0x86/0x90 [ 27.110427][ T388] do_syscall_64+0x31/0x40 [ 27.114831][ T388] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.120707][ T388] RIP: 0033:0x7f113ec78749 [ 27.125103][ T388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 27.144686][ T388] RSP: 002b:00007f113eac7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 27.153092][ T388] RAX: ffffffffffffffda RBX: 00007f113eecf090 RCX: 00007f113ec78749 [ 27.161054][ T388] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 27.169011][ T388] RBP: 00007f113ecfcf91 R08: 0000000000000000 R09: 0000000000000000 [ 27.176970][ T388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.184943][ T388] R13: 00007f113eecf128 R14: 00007f113eecf090 R15: 00007fff47f22c68 [ 27.192906][ T388] Modules linked in: [ 27.198487][ T388] ---[ end trace 6a50adaa2040f329 ]--- [ 27.203958][ T388] RIP: 0010:do_renameat2+0x471/0xe60 [ 27.209272][ T388] Code: 89 c5 48 3d 01 f0 ff ff 72 0f e8 1a f4 ba ff 4c 8b 64 24 20 e9 6a 03 00 00 4d 89 ec 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 04 84 c0 0f 85 2f 05 00 00 41 8b 5d 00 be 00 00 70 00 [ 27.229080][ T388] RSP: 0018:ffffc90000f57d80 EFLAGS: 00010202 [ 27.235141][ T388] RAX: dffffc0000000000 RBX: 00000000ffffff9c RCX: ffff88810d3b62c0 [ 27.243315][ T388] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88810d3b62c0 [ 27.251448][ T388] RBP: ffffc90000f57f08 R08: dffffc0000000000 R09: ffffed10219ca7e8 [ 27.259671][ T388] R10: ffffed10219ca7e8 R11: 1ffff110219ca7e7 R12: 0000000000000001 [ 27.267739][ T388] R13: 0000000000000008 R14: ffff88811008d500 R15: 0000000000000001 [ 27.275728][ T388] FS: 00007f113eac76c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 27.284687][ T388] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.291374][ T388] CR2: 00007f113eac7d58 CR3: 00000001296fc000 CR4: 00000000003506b0 [ 27.299356][ T388] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.307329][ T388] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.315300][ T388] Kernel panic - not syncing: Fatal exception [ 27.321603][ T388] Kernel Offset: disabled [ 27.325919][ T388] Rebooting in 86400 seconds..