syzkaller syzkaller login: [ 13.417292][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 13.417312][ T36] audit: type=1400 audit(1777914004.550:59): avc: denied { transition } for pid=230 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.422868][ T36] audit: type=1400 audit(1777914004.550:60): avc: denied { noatsecure } for pid=230 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.426049][ T36] audit: type=1400 audit(1777914004.560:61): avc: denied { write } for pid=230 comm="sh" path="pipe:[3098]" dev="pipefs" ino=3098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 13.429751][ T36] audit: type=1400 audit(1777914004.560:62): avc: denied { rlimitinh } for pid=230 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.432595][ T36] audit: type=1400 audit(1777914004.560:63): avc: denied { siginh } for pid=230 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.76' (ED25519) to the list of known hosts. 2026/05/04 17:00:14 parsed 1 programs [ 23.318387][ T36] audit: type=1400 audit(1777914014.460:64): avc: denied { node_bind } for pid=302 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.467436][ T36] audit: type=1400 audit(1777914015.600:65): avc: denied { mounton } for pid=308 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.468521][ T308] cgroup: Unknown subsys name 'net' [ 24.490700][ T36] audit: type=1400 audit(1777914015.600:66): avc: denied { mount } for pid=308 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.518413][ T36] audit: type=1400 audit(1777914015.630:67): avc: denied { unmount } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.518494][ T308] cgroup: Unknown subsys name 'devices' [ 24.680736][ T308] cgroup: Unknown subsys name 'hugetlb' [ 24.686495][ T308] cgroup: Unknown subsys name 'rlimit' [ 24.826327][ T36] audit: type=1400 audit(1777914015.960:68): avc: denied { setattr } for pid=308 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.850012][ T36] audit: type=1400 audit(1777914015.960:69): avc: denied { create } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.859107][ T312] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.871261][ T36] audit: type=1400 audit(1777914015.960:70): avc: denied { write } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.890730][ T308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.900204][ T36] audit: type=1400 audit(1777914015.960:71): avc: denied { read } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.929358][ T36] audit: type=1400 audit(1777914015.960:72): avc: denied { sys_module } for pid=308 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 24.950568][ T36] audit: type=1400 audit(1777914015.970:73): avc: denied { mounton } for pid=308 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.913913][ T315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.506487][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.513758][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.520942][ T353] bridge_slave_0: entered allmulticast mode [ 26.527614][ T353] bridge_slave_0: entered promiscuous mode [ 26.537423][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.544656][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.551870][ T353] bridge_slave_1: entered allmulticast mode [ 26.558230][ T353] bridge_slave_1: entered promiscuous mode [ 26.605384][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.612516][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.619875][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.627089][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.646505][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.653985][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.663392][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.670571][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.679703][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.686854][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.710935][ T353] veth0_vlan: entered promiscuous mode [ 26.722201][ T353] veth1_macvtap: entered promiscuous mode [ 26.790615][ T13] bridge_slave_1: left allmulticast mode [ 26.796421][ T13] bridge_slave_1: left promiscuous mode [ 26.802240][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.810435][ T13] bridge_slave_0: left allmulticast mode [ 26.816108][ T13] bridge_slave_0: left promiscuous mode [ 26.821880][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.991274][ T13] veth1_macvtap: left promiscuous mode [ 26.997130][ T13] veth0_vlan: left promiscuous mode 2026/05/04 17:00:18 executed programs: 0 [ 27.387359][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.394603][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.401764][ T379] bridge_slave_0: entered allmulticast mode [ 27.407981][ T379] bridge_slave_0: entered promiscuous mode [ 27.414754][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.421876][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.429699][ T379] bridge_slave_1: entered allmulticast mode [ 27.436186][ T379] bridge_slave_1: entered promiscuous mode [ 27.490187][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.497260][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.504672][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.511830][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.540209][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.547495][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.556720][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.563891][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.573837][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.581177][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.609020][ T379] veth0_vlan: entered promiscuous mode [ 27.620623][ T379] veth1_macvtap: entered promiscuous mode [ 27.648602][ T383] ------------[ cut here ]------------ [ 27.654571][ T383] WARNING: CPU: 0 PID: 383 at security/landlock/fs.c:1025 collect_domain_accesses+0x327/0x390 [ 27.665181][ T383] Modules linked in: [ 27.669228][ T383] CPU: 0 UID: 0 PID: 383 Comm: syz.2.17 Not tainted syzkaller #0 2d55ab0d08d30afb2392ba3a535ea3e888ff1e10 [ 27.680944][ T383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 27.691116][ T383] RIP: 0010:collect_domain_accesses+0x327/0x390 [ 27.697574][ T383] Code: 6f c6 72 ff eb 08 e8 28 62 09 ff 41 b4 01 44 89 e0 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0f 38 26 03 cc e8 09 62 09 ff <0f> 0b 45 31 e4 eb cb e8 fd 61 09 ff 0f 0b eb d1 89 d9 80 e1 07 80 [ 27.717794][ T383] RSP: 0018:ffffc90001acfaf0 EFLAGS: 00010293 [ 27.724100][ T383] RAX: ffffffff827e5a97 RBX: ffff88811235dbb0 RCX: ffff88812fb75f00 [ 27.732214][ T383] RDX: 0000000000000000 RSI: 0000000000002004 RDI: ffff88811235dbc8 [ 27.740377][ T383] RBP: ffffc90001acfb30 R08: ffff88812fb75f00 R09: 0000000000000002 [ 27.748507][ T383] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 27.756510][ T383] R13: 0000000000002004 R14: 1ffffffff0e41898 R15: dffffc0000000000 [ 27.765048][ T383] FS: 000055557561b500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 27.774333][ T383] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.781019][ T383] CR2: 00007f1bd21ea4c0 CR3: 0000000116bc2000 CR4: 00000000003526b0 [ 27.789146][ T383] Call Trace: [ 27.792529][ T383] [ 27.795456][ T383] current_check_refer_path+0x8ee/0xd40 [ 27.801177][ T383] ? hook_file_free_security+0xc0/0xc0 [ 27.806754][ T383] hook_path_rename+0x44/0x60 [ 27.811474][ T383] security_path_rename+0x1d8/0x2a0 [ 27.816711][ T383] do_renameat2+0x634/0xc40 [ 27.821282][ T383] ? __cfi_do_renameat2+0x10/0x10 [ 27.826343][ T383] ? strncpy_from_user+0x14d/0x270 [ 27.831536][ T383] ? __kasan_check_write+0x18/0x20 [ 27.836701][ T383] __x64_sys_renameat2+0xdc/0x100 [ 27.841978][ T383] x64_sys_call+0x2e18/0x2ee0 [ 27.846702][ T383] do_syscall_64+0x57/0xf0 [ 27.851161][ T383] ? clear_bhb_loop+0x50/0xa0 [ 27.855885][ T383] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.861849][ T383] RIP: 0033:0x7f1bd219cdd9 [ 27.866287][ T383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.886634][ T383] RSP: 002b:00007fff7b551718 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 27.895153][ T383] RAX: ffffffffffffffda RBX: 00007f1bd2415fa0 RCX: 00007f1bd219cdd9 [ 27.903237][ T383] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000003 [ 27.911270][ T383] RBP: 00007f1bd2232d69 R08: 0000000000000000 R09: 0000000000000000 [ 27.919286][ T383] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 27.927285][ T383] R13: 00007f1bd2415fac R14: 00007f1bd2415fa0 R15: 00007f1bd2415fa0 [ 27.935505][ T383] [ 27.938600][ T383] ---[ end trace 0000000000000000 ]--- [ 28.002674][ T13] bridge_slave_1: left allmulticast mode [ 28.008449][ T13] bridge_slave_1: left promiscuous mode [ 28.014079][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.022089][ T13] bridge_slave_0: left allmulticast mode [ 28.027756][ T13] bridge_slave_0: left promiscuous mode [ 28.033841][ T13] bridge0: port 1(bridge_slave_0) entered disabled state