syzkaller syzkaller login: [ 15.711764][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 15.711775][ T24] audit: type=1400 audit(1785040024.600:59): avc: denied { transition } for pid=218 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.724976][ T24] audit: type=1400 audit(1785040024.600:60): avc: denied { noatsecure } for pid=218 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.735557][ T24] audit: type=1400 audit(1785040024.610:61): avc: denied { write } for pid=218 comm="sh" path="pipe:[1419]" dev="pipefs" ino=1419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 15.761577][ T24] audit: type=1400 audit(1785040024.610:62): avc: denied { rlimitinh } for pid=218 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.780560][ T24] audit: type=1400 audit(1785040024.610:63): avc: denied { siginh } for pid=218 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.186' (ED25519) to the list of known hosts. 2026/07/26 04:27:13 parsed 1 programs 2026/07/26 04:27:13 serving rpc on tcp://44365 [ 25.051055][ T24] audit: type=1400 audit(1785040033.940:64): avc: denied { node_bind } for pid=288 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 25.072174][ T24] audit: type=1400 audit(1785040033.940:65): avc: denied { create } for pid=288 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.091747][ T24] audit: type=1400 audit(1785040033.940:66): avc: denied { module_request } for pid=288 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 25.951893][ T24] audit: type=1400 audit(1785040034.840:67): avc: denied { mounton } for pid=294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.955034][ T294] cgroup: Unknown subsys name 'net' [ 25.974717][ T24] audit: type=1400 audit(1785040034.840:68): avc: denied { mount } for pid=294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.001965][ T24] audit: type=1400 audit(1785040034.870:69): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.002418][ T294] cgroup: Unknown subsys name 'devices' [ 26.111289][ T294] cgroup: Unknown subsys name 'hugetlb' [ 26.116909][ T294] cgroup: Unknown subsys name 'rlimit' [ 26.293293][ T24] audit: type=1400 audit(1785040035.180:70): avc: denied { setattr } for pid=294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.316453][ T24] audit: type=1400 audit(1785040035.180:71): avc: denied { create } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.336933][ T24] audit: type=1400 audit(1785040035.180:72): avc: denied { write } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.353004][ T298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.357341][ T24] audit: type=1400 audit(1785040035.180:73): avc: denied { read } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.396766][ T294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.797505][ T300] request_module fs-gadgetfs succeeded, but still no fs? [ 26.808125][ T300] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 27.426263][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.433389][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.440768][ T354] device bridge_slave_0 entered promiscuous mode [ 27.447537][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.454710][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.462098][ T354] device bridge_slave_1 entered promiscuous mode [ 27.499244][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.506310][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.513598][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.520642][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.537959][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.545556][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.552805][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.561736][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.569956][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.576970][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.585421][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.593629][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.600677][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.612659][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.621816][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.634824][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.645621][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.653770][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.661249][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.669345][ T354] device veth0_vlan entered promiscuous mode [ 27.678958][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.687976][ T354] device veth1_macvtap entered promiscuous mode [ 27.697175][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.712381][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/07/26 04:27:16 executed programs: 0 [ 27.936909][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.944078][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.951494][ T364] device bridge_slave_0 entered promiscuous mode [ 27.963156][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.970248][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.977552][ T364] device bridge_slave_1 entered promiscuous mode [ 28.020646][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.027687][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.035168][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.042205][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.065187][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.072735][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.080132][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.088573][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.097086][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.105419][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.112476][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.121240][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.129502][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.137793][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.144838][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.160748][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.168759][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.177442][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.185553][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.206376][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.215094][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.227528][ T364] device veth0_vlan entered promiscuous mode [ 28.234059][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.242268][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.250481][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.257855][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.269828][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.278052][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.287335][ T364] device veth1_macvtap entered promiscuous mode [ 28.296689][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.305636][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.314334][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.323931][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.332186][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.352819][ T395] dummy_hcd dummy_hcd.0: remove, state 4 [ 28.358496][ T395] usb usb1: USB disconnect, device number 1 [ 28.367210][ T395] dummy_hcd dummy_hcd.0: stopped [ 28.372510][ T395] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 28.381018][ T395] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 28.392740][ T395] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 28.401136][ T395] CPU: 1 PID: 395 Comm: syz.2.17 Not tainted syzkaller #0 [ 28.408225][ T395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 28.418289][ T395] RIP: 0010:dummy_set_selfpowered+0xbc/0x150 [ 28.424293][ T395] Code: 94 c0 4d 8d b4 c6 f0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0e 64 92 fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 f5 63 92 fe 41 be 78 11 00 00 4d [ 28.443888][ T395] RSP: 0018:ffffc90000ca79f0 EFLAGS: 00010246 [ 28.449949][ T395] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 28.457921][ T395] RDX: ffff88810dc78000 RSI: 0000000000000003 RDI: 0000000000000005 [ 28.465887][ T395] RBP: ffffc90000ca7a10 R08: ffff88810005956f R09: 1ffff1102000b2ad [ 28.473865][ T395] R10: dffffc0000000000 R11: ffffed102000b2ae R12: dffffc0000000000 [ 28.481843][ T395] R13: ffff888111478478 R14: ffff888103fa9180 R15: 0000000000000000 [ 28.489818][ T395] FS: 0000555592418500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 28.498748][ T395] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.505320][ T395] CR2: 000055f6b6b89638 CR3: 000000011114b000 CR4: 00000000003506a0 [ 28.513281][ T395] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.521245][ T395] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.529204][ T395] Call Trace: [ 28.532497][ T395] ? dummy_wakeup+0x270/0x270 [ 28.537194][ T395] usb_gadget_set_selfpowered+0x6c/0x180 [ 28.542819][ T395] composite_dev_prepare+0x2e7/0x310 [ 28.548092][ T395] configfs_composite_bind+0xb4/0x13a0 [ 28.553534][ T395] ? __kasan_check_write+0x14/0x20 [ 28.558637][ T395] ? os_desc_qw_sign_store+0x140/0x140 [ 28.564077][ T395] udc_bind_to_driver+0x24e/0x6d0 [ 28.569174][ T395] ? mutex_lock+0x92/0xf0 [ 28.573495][ T395] usb_gadget_probe_driver+0x1fc/0x380 [ 28.578959][ T395] gadget_dev_desc_UDC_store+0x217/0x330 [ 28.584575][ T395] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 28.590101][ T395] configfs_write_file+0x320/0x3d0 [ 28.595202][ T395] ? configfs_read_file+0x400/0x400 [ 28.600400][ T395] vfs_write+0x344/0xd70 [ 28.604629][ T395] ? kernel_write+0x3c0/0x3c0 [ 28.609304][ T395] ? futex_exit_release+0x1e0/0x1e0 [ 28.614491][ T395] ? putname+0xfe/0x150 [ 28.618643][ T395] ? do_sys_openat2+0x68e/0x750 [ 28.623482][ T395] ? __kasan_check_read+0x11/0x20 [ 28.628490][ T395] ? __fdget_pos+0x2d9/0x380 [ 28.633063][ T395] ksys_write+0x14a/0x260 [ 28.637379][ T395] ? __ia32_sys_read+0x90/0x90 [ 28.642133][ T395] ? debug_smp_processor_id+0x17/0x20 [ 28.647490][ T395] __x64_sys_write+0x7b/0x90 [ 28.652066][ T395] do_syscall_64+0x31/0x40 [ 28.656502][ T395] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.662390][ T395] RIP: 0033:0x7f2a25c38e99 [ 28.666796][ T395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.686411][ T395] RSP: 002b:00007ffd119ebd98 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 28.694823][ T395] RAX: ffffffffffffffda RBX: 00007f2a25ec0fa0 RCX: 00007f2a25c38e99 [ 28.702791][ T395] RDX: 000000000000000b RSI: 0000200000000380 RDI: 0000000000000004 [ 28.710763][ T395] RBP: 00007f2a25cceeaf R08: 0000000000000000 R09: 0000000000000000 [ 28.718837][ T395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.726825][ T395] R13: 00007f2a25ec0fac R14: 00007f2a25ec0fa0 R15: 00007f2a25ec0fa0 [ 28.734783][ T395] Modules linked in: [ 28.741763][ T395] ---[ end trace 636e1a5dda69204a ]--- [ 28.747337][ T395] RIP: 0010:dummy_set_selfpowered+0xbc/0x150 [ 28.753479][ T395] Code: 94 c0 4d 8d b4 c6 f0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0e 64 92 fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 f5 63 92 fe 41 be 78 11 00 00 4d [ 28.773440][ T395] RSP: 0018:ffffc90000ca79f0 EFLAGS: 00010246 [ 28.779529][ T395] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 28.787792][ T395] RDX: ffff88810dc78000 RSI: 0000000000000003 RDI: 0000000000000005 [ 28.795961][ T395] RBP: ffffc90000ca7a10 R08: ffff88810005956f R09: 1ffff1102000b2ad [ 28.804079][ T395] R10: dffffc0000000000 R11: ffffed102000b2ae R12: dffffc0000000000 [ 28.812161][ T395] R13: ffff888111478478 R14: ffff888103fa9180 R15: 0000000000000000 [ 28.820455][ T395] FS: 0000555592418500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 28.829418][ T395] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.836059][ T395] CR2: 000055f6b6ba80b0 CR3: 000000011114b000 CR4: 00000000003506b0 [ 28.844091][ T395] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.852130][ T395] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.860142][ T395] Kernel panic - not syncing: Fatal exception [ 28.866523][ T395] Kernel Offset: disabled [ 28.870845][ T395] Rebooting in 86400 seconds..