syzkaller syzkaller login: [ 15.197233][ T24] kauditd_printk_skb: 48 callbacks suppressed [ 15.197243][ T24] audit: type=1400 audit(1784933069.069:59): avc: denied { transition } for pid=231 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.202345][ T24] audit: type=1400 audit(1784933069.069:60): avc: denied { noatsecure } for pid=231 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.205440][ T24] audit: type=1400 audit(1784933069.069:61): avc: denied { write } for pid=231 comm="sh" path="pipe:[14013]" dev="pipefs" ino=14013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 15.209676][ T24] audit: type=1400 audit(1784933069.069:62): avc: denied { rlimitinh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.213219][ T24] audit: type=1400 audit(1784933069.069:63): avc: denied { siginh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. 2026/07/24 22:44:38 parsed 1 programs 2026/07/24 22:44:38 serving rpc on tcp://39773 [ 24.439485][ T24] audit: type=1400 audit(1784933078.309:64): avc: denied { node_bind } for pid=287 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.460322][ T24] audit: type=1400 audit(1784933078.309:65): avc: denied { create } for pid=287 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 24.479922][ T24] audit: type=1400 audit(1784933078.309:66): avc: denied { module_request } for pid=287 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 25.049280][ T24] audit: type=1400 audit(1784933078.919:67): avc: denied { mounton } for pid=293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.050316][ T293] cgroup: Unknown subsys name 'net' [ 25.071930][ T24] audit: type=1400 audit(1784933078.919:68): avc: denied { mount } for pid=293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.099155][ T24] audit: type=1400 audit(1784933078.949:69): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.099470][ T293] cgroup: Unknown subsys name 'devices' [ 25.213169][ T293] cgroup: Unknown subsys name 'hugetlb' [ 25.218802][ T293] cgroup: Unknown subsys name 'rlimit' [ 25.361582][ T24] audit: type=1400 audit(1784933079.239:70): avc: denied { setattr } for pid=293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.384725][ T24] audit: type=1400 audit(1784933079.239:71): avc: denied { create } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.405110][ T24] audit: type=1400 audit(1784933079.239:72): avc: denied { write } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.410553][ T297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.425371][ T24] audit: type=1400 audit(1784933079.239:73): avc: denied { read } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.464823][ T293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.794553][ T299] request_module fs-gadgetfs succeeded, but still no fs? [ 25.804946][ T299] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 26.108994][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.116114][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.123553][ T324] device bridge_slave_0 entered promiscuous mode [ 26.130284][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.137372][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.144647][ T324] device bridge_slave_1 entered promiscuous mode [ 26.177850][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.184908][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.192280][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.199298][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.215058][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.222368][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.229587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.237118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.247026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.255284][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.262321][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.270756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.279197][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.286293][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.297211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.307859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.320033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.331047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.339379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.346993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.355646][ T324] device veth0_vlan entered promiscuous mode [ 26.364835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.374364][ T324] device veth1_macvtap entered promiscuous mode [ 26.385346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.395035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/07/24 22:44:40 executed programs: 0 [ 26.877006][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.884874][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.892297][ T364] device bridge_slave_0 entered promiscuous mode [ 26.899544][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.906764][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.914130][ T364] device bridge_slave_1 entered promiscuous mode [ 26.948315][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.955388][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.962644][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.969670][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.988282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.995850][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.003751][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.015555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.023713][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.030731][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.039108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.047436][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.054503][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.068478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.077553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.089833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.099552][ T7] device bridge_slave_1 left promiscuous mode [ 27.105884][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.113754][ T7] device bridge_slave_0 left promiscuous mode [ 27.119847][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.127735][ T7] device veth1_macvtap left promiscuous mode [ 27.133913][ T7] device veth0_vlan left promiscuous mode [ 27.266680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.274540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.283251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.290701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.298762][ T364] device veth0_vlan entered promiscuous mode [ 27.308210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.316438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.325567][ T364] device veth1_macvtap entered promiscuous mode [ 27.334240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.341928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.350037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.359524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.368301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.388430][ T368] dummy_hcd dummy_hcd.0: remove, state 4 [ 27.394434][ T368] usb usb1: USB disconnect, device number 1 [ 27.402630][ T368] dummy_hcd dummy_hcd.0: stopped [ 27.407590][ T368] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 27.415965][ T368] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 27.427709][ T368] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 27.436102][ T368] CPU: 1 PID: 368 Comm: syz.2.17 Not tainted syzkaller #0 [ 27.443186][ T368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 27.453241][ T368] RIP: 0010:dummy_set_selfpowered+0xbc/0x150 [ 27.459203][ T368] Code: 94 c0 4d 8d b4 c6 f0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0e 64 92 fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 f5 63 92 fe 41 be 78 11 00 00 4d [ 27.478794][ T368] RSP: 0018:ffffc90000c379f0 EFLAGS: 00010246 [ 27.484862][ T368] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 27.492815][ T368] RDX: ffff88810f1c2780 RSI: 0000000000000003 RDI: 0000000000000005 [ 27.500762][ T368] RBP: ffffc90000c37a10 R08: ffff888100059e6f R09: 1ffff1102000b3cd [ 27.508711][ T368] R10: dffffc0000000000 R11: ffffed102000b3ce R12: dffffc0000000000 [ 27.516661][ T368] R13: ffff888111226478 R14: ffff88810b84d180 R15: 0000000000000000 [ 27.524635][ T368] FS: 0000555581413500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 27.533551][ T368] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.540131][ T368] CR2: 0000559db14a61d0 CR3: 000000010f88e000 CR4: 00000000003506a0 [ 27.548120][ T368] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.556092][ T368] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.564040][ T368] Call Trace: [ 27.567310][ T368] ? dummy_wakeup+0x270/0x270 [ 27.571960][ T368] usb_gadget_set_selfpowered+0x6c/0x180 [ 27.577565][ T368] composite_dev_prepare+0x2e7/0x310 [ 27.582820][ T368] configfs_composite_bind+0xb4/0x13a0 [ 27.588250][ T368] ? __kasan_check_write+0x14/0x20 [ 27.593339][ T368] ? os_desc_qw_sign_store+0x140/0x140 [ 27.598792][ T368] udc_bind_to_driver+0x24e/0x6d0 [ 27.603794][ T368] ? mutex_lock+0x92/0xf0 [ 27.608103][ T368] usb_gadget_probe_driver+0x1fc/0x380 [ 27.613547][ T368] gadget_dev_desc_UDC_store+0x217/0x330 [ 27.619243][ T368] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 27.624764][ T368] configfs_write_file+0x320/0x3d0 [ 27.629854][ T368] ? configfs_read_file+0x400/0x400 [ 27.635029][ T368] vfs_write+0x344/0xd70 [ 27.639428][ T368] ? kernel_write+0x3c0/0x3c0 [ 27.644081][ T368] ? futex_exit_release+0x1e0/0x1e0 [ 27.649255][ T368] ? putname+0xfe/0x150 [ 27.653384][ T368] ? do_sys_openat2+0x68e/0x750 [ 27.658210][ T368] ? __kasan_check_read+0x11/0x20 [ 27.663211][ T368] ? __fdget_pos+0x2d9/0x380 [ 27.667799][ T368] ksys_write+0x14a/0x260 [ 27.672104][ T368] ? __ia32_sys_read+0x90/0x90 [ 27.676871][ T368] ? debug_smp_processor_id+0x17/0x20 [ 27.682217][ T368] __x64_sys_write+0x7b/0x90 [ 27.686785][ T368] do_syscall_64+0x31/0x40 [ 27.691178][ T368] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.697073][ T368] RIP: 0033:0x7fb7e6df4e99 [ 27.701467][ T368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.721050][ T368] RSP: 002b:00007fffa963c158 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 27.729442][ T368] RAX: ffffffffffffffda RBX: 00007fb7e707cfa0 RCX: 00007fb7e6df4e99 [ 27.737391][ T368] RDX: 000000000000000c RSI: 0000200000000680 RDI: 0000000000000004 [ 27.745346][ T368] RBP: 00007fb7e6e8aeaf R08: 0000000000000000 R09: 0000000000000000 [ 27.753296][ T368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.761244][ T368] R13: 00007fb7e707cfac R14: 00007fb7e707cfa0 R15: 00007fb7e707cfa0 [ 27.769192][ T368] Modules linked in: [ 27.776177][ T368] ---[ end trace 6810e32a603be0d1 ]--- [ 27.782204][ T368] RIP: 0010:dummy_set_selfpowered+0xbc/0x150 [ 27.788434][ T368] Code: 94 c0 4d 8d b4 c6 f0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0e 64 92 fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 f5 63 92 fe 41 be 78 11 00 00 4d [ 27.808345][ T368] RSP: 0018:ffffc90000c379f0 EFLAGS: 00010246 [ 27.814473][ T368] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 27.822461][ T368] RDX: ffff88810f1c2780 RSI: 0000000000000003 RDI: 0000000000000005 [ 27.830471][ T368] RBP: ffffc90000c37a10 R08: ffff888100059e6f R09: 1ffff1102000b3cd [ 27.838644][ T368] R10: dffffc0000000000 R11: ffffed102000b3ce R12: dffffc0000000000 [ 27.846812][ T368] R13: ffff888111226478 R14: ffff88810b84d180 R15: 0000000000000000 [ 27.854836][ T368] FS: 0000555581413500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 27.863885][ T368] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.870462][ T368] CR2: 0000559db14a61d0 CR3: 000000010f88e000 CR4: 00000000003506a0 [ 27.878614][ T368] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.886768][ T368] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.894834][ T368] Kernel panic - not syncing: Fatal exception [ 27.901131][ T368] Kernel Offset: disabled [ 27.905447][ T368] Rebooting in 86400 seconds..