syzkaller
syzkaller login: [ 15.589015][ T36] kauditd_printk_skb: 26 callbacks suppressed
[ 15.589034][ T36] audit: type=1400 audit(1763038793.000:59): avc: denied { transition } for pid=232 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 15.593463][ T36] audit: type=1400 audit(1763038793.000:60): avc: denied { noatsecure } for pid=232 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 15.596620][ T36] audit: type=1400 audit(1763038793.010:61): avc: denied { write } for pid=232 comm="sh" path="pipe:[2947]" dev="pipefs" ino=2947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 15.599945][ T36] audit: type=1400 audit(1763038793.010:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 15.602715][ T36] audit: type=1400 audit(1763038793.010:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.1.121' (ED25519) to the list of known hosts.
2025/11/13 13:00:02 parsed 1 programs
[ 24.974577][ T36] audit: type=1400 audit(1763038802.390:64): avc: denied { node_bind } for pid=290 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 26.377081][ T36] audit: type=1400 audit(1763038803.790:65): avc: denied { mounton } for pid=298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 26.378376][ T298] cgroup: Unknown subsys name 'net'
[ 26.399819][ T36] audit: type=1400 audit(1763038803.790:66): avc: denied { mount } for pid=298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 26.427067][ T36] audit: type=1400 audit(1763038803.820:67): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 26.427303][ T298] cgroup: Unknown subsys name 'devices'
[ 26.595571][ T298] cgroup: Unknown subsys name 'hugetlb'
[ 26.601440][ T298] cgroup: Unknown subsys name 'rlimit'
[ 26.724103][ T36] audit: type=1400 audit(1763038804.140:68): avc: denied { setattr } for pid=298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 26.747461][ T36] audit: type=1400 audit(1763038804.140:69): avc: denied { create } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 26.768015][ T36] audit: type=1400 audit(1763038804.140:70): avc: denied { write } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 26.770360][ T300] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 26.788582][ T36] audit: type=1400 audit(1763038804.140:71): avc: denied { read } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 26.817137][ T36] audit: type=1400 audit(1763038804.140:72): avc: denied { sys_module } for pid=298 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 26.836275][ T298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 26.838242][ T36] audit: type=1400 audit(1763038804.140:73): avc: denied { mounton } for pid=298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 27.729494][ T302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 27.868321][ T311] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.875525][ T311] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.882652][ T311] bridge_slave_0: entered allmulticast mode
[ 27.889051][ T311] bridge_slave_0: entered promiscuous mode
[ 27.895491][ T311] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.902536][ T311] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.909628][ T311] bridge_slave_1: entered allmulticast mode
[ 27.915900][ T311] bridge_slave_1: entered promiscuous mode
[ 27.967230][ T311] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.974404][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.981709][ T311] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.988778][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.015091][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.022359][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.033798][ T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.040862][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.048629][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.055702][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.079688][ T311] veth0_vlan: entered promiscuous mode
[ 28.089828][ T311] veth1_macvtap: entered promiscuous mode
[ 28.145798][ T13] bridge_slave_1: left allmulticast mode
[ 28.151491][ T13] bridge_slave_1: left promiscuous mode
[ 28.157918][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.165581][ T13] bridge_slave_0: left allmulticast mode
[ 28.171227][ T13] bridge_slave_0: left promiscuous mode
[ 28.176927][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.287147][ T13] veth1_macvtap: left promiscuous mode
[ 28.292739][ T13] veth0_vlan: left promiscuous mode
2025/11/13 13:00:06 executed programs: 0
[ 29.212833][ T370] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.220090][ T370] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.227202][ T370] bridge_slave_0: entered allmulticast mode
[ 29.233497][ T370] bridge_slave_0: entered promiscuous mode
[ 29.245318][ T370] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.252359][ T370] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.259459][ T370] bridge_slave_1: entered allmulticast mode
[ 29.265692][ T370] bridge_slave_1: entered promiscuous mode
[ 29.313432][ T370] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.320492][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.327811][ T370] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.334856][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.357059][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.364593][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.373701][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.380755][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.389393][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.396463][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.420438][ T370] veth0_vlan: entered promiscuous mode
[ 29.430572][ T370] veth1_macvtap: entered promiscuous mode
[ 29.455855][ T381] FAULT_INJECTION: forcing a failure.
[ 29.455855][ T381] name failslab, interval 1, probability 0, space 0, times 1
[ 29.468537][ T381] CPU: 0 UID: 0 PID: 381 Comm: syz.2.17 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[ 29.468570][ T381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 29.468591][ T381] Call Trace:
[ 29.468596][ T381]
[ 29.468602][ T381] __dump_stack+0x21/0x30
[ 29.468633][ T381] dump_stack_lvl+0x10c/0x190
[ 29.468653][ T381] ? __cfi_dump_stack_lvl+0x10/0x10
[ 29.468674][ T381] ? __kasan_check_write+0x18/0x20
[ 29.468699][ T381] ? down_write+0xe9/0x2a0
[ 29.468716][ T381] dump_stack+0x19/0x20
[ 29.468735][ T381] should_fail_ex+0x3d9/0x530
[ 29.468751][ T381] should_failslab+0xac/0x100
[ 29.468767][ T381] __kmalloc_cache_noprof+0x41/0x490
[ 29.468782][ T381] ? cgroup_mkdir+0xb5d/0x1580
[ 29.468797][ T381] cgroup_mkdir+0xb5d/0x1580
[ 29.468811][ T381] ? __cfi_cgroup_mkdir+0x10/0x10
[ 29.468825][ T381] kernfs_iop_mkdir+0x1c2/0x2d0
[ 29.468843][ T381] vfs_mkdir+0x583/0x820
[ 29.468882][ T381] do_mkdirat+0x1bf/0x420
[ 29.468902][ T381] __x64_sys_mkdirat+0x8b/0xa0
[ 29.468922][ T381] x64_sys_call+0x2ba8/0x2ee0
[ 29.468945][ T381] do_syscall_64+0x58/0xf0
[ 29.468969][ T381] ? clear_bhb_loop+0x50/0xa0
[ 29.468987][ T381] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 29.469003][ T381] RIP: 0033:0x7f1cacf8f6c9
[ 29.469019][ T381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 29.469032][ T381] RSP: 002b:00007ffe181e1818 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 29.469052][ T381] RAX: ffffffffffffffda RBX: 00007f1cad1e5fa0 RCX: 00007f1cacf8f6c9
[ 29.469064][ T381] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 29.469075][ T381] RBP: 00007ffe181e1870 R08: 0000000000000000 R09: 0000000000000000
[ 29.469085][ T381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 29.469094][ T381] R13: 00007f1cad1e5fa0 R14: 00007f1cad1e5fa0 R15: 0000000000000003
[ 29.469107][ T381]
[ 29.666589][ T381] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] PREEMPT SMP KASAN PTI
[ 29.679219][ T381] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f]
[ 29.687625][ T381] CPU: 0 UID: 0 PID: 381 Comm: syz.2.17 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[ 29.698896][ T381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 29.708961][ T381] RIP: 0010:cgroup_mkdir+0x1180/0x1580
[ 29.714428][ T381] Code: eb 05 e8 73 44 08 00 4c 89 ef e8 0b 9c 00 00 49 81 fd 01 f0 ff ff 0f 83 b3 fb ff ff 4d 8d b5 08 01 00 00 4c 89 f3 48 c1 eb 03 <42> 80 3c 3b 00 74 08 4c 89 f7 e8 c1 b1 5e 00 49 8b bd 08 01 00 00
[ 29.734033][ T381] RSP: 0018:ffffc90000edfce8 EFLAGS: 00010206
[ 29.740099][ T381] RAX: 48477816fc30cd00 RBX: 0000000000000021 RCX: ffff8881f6e3ae00
[ 29.748062][ T381] RDX: ffff88811324cb00 RSI: ffff88811513c000 RDI: ffff888100042000
[ 29.756031][ T381] RBP: ffffc90000edfd90 R08: ffffffff81eab59b R09: ffffffff8109c4b8
[ 29.764000][ T381] R10: ffffffff858d3538 R11: ffffffff85a0012f R12: ffff88810b7eb5b0
[ 29.771967][ T381] R13: 0000000000000000 R14: 0000000000000108 R15: dffffc0000000000
[ 29.779931][ T381] FS: 0000555586356500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 29.788849][ T381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 29.795427][ T381] CR2: 00007f1cad1e7dac CR3: 000000010bf7e000 CR4: 00000000003526b0
[ 29.803409][ T381] Call Trace:
[ 29.806727][ T381]
[ 29.809690][ T381] ? __cfi_cgroup_mkdir+0x10/0x10
[ 29.814726][ T381] kernfs_iop_mkdir+0x1c2/0x2d0
[ 29.819579][ T381] vfs_mkdir+0x583/0x820
[ 29.823822][ T381] do_mkdirat+0x1bf/0x420
[ 29.828155][ T381] __x64_sys_mkdirat+0x8b/0xa0
[ 29.832918][ T381] x64_sys_call+0x2ba8/0x2ee0
[ 29.837598][ T381] do_syscall_64+0x58/0xf0
[ 29.842036][ T381] ? clear_bhb_loop+0x50/0xa0
[ 29.846737][ T381] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 29.852736][ T381] RIP: 0033:0x7f1cacf8f6c9
[ 29.857143][ T381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 29.876740][ T381] RSP: 002b:00007ffe181e1818 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 29.885150][ T381] RAX: ffffffffffffffda RBX: 00007f1cad1e5fa0 RCX: 00007f1cacf8f6c9
[ 29.893124][ T381] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 29.901105][ T381] RBP: 00007ffe181e1870 R08: 0000000000000000 R09: 0000000000000000
[ 29.909076][ T381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 29.917038][ T381] R13: 00007f1cad1e5fa0 R14: 00007f1cad1e5fa0 R15: 0000000000000003
[ 29.925006][ T381]
[ 29.928019][ T381] Modules linked in:
[ 29.932038][ T381] ---[ end trace 0000000000000000 ]---
[ 29.937595][ T381] RIP: 0010:cgroup_mkdir+0x1180/0x1580
[ 29.943375][ T381] Code: eb 05 e8 73 44 08 00 4c 89 ef e8 0b 9c 00 00 49 81 fd 01 f0 ff ff 0f 83 b3 fb ff ff 4d 8d b5 08 01 00 00 4c 89 f3 48 c1 eb 03 <42> 80 3c 3b 00 74 08 4c 89 f7 e8 c1 b1 5e 00 49 8b bd 08 01 00 00
[ 29.963098][ T381] RSP: 0018:ffffc90000edfce8 EFLAGS: 00010206
[ 29.969192][ T381] RAX: 48477816fc30cd00 RBX: 0000000000000021 RCX: ffff8881f6e3ae00
[ 29.977375][ T381] RDX: ffff88811324cb00 RSI: ffff88811513c000 RDI: ffff888100042000
[ 29.985413][ T381] RBP: ffffc90000edfd90 R08: ffffffff81eab59b R09: ffffffff8109c4b8
[ 29.993493][ T381] R10: ffffffff858d3538 R11: ffffffff85a0012f R12: ffff88810b7eb5b0
[ 30.001488][ T381] R13: 0000000000000000 R14: 0000000000000108 R15: dffffc0000000000
[ 30.009503][ T381] FS: 0000555586356500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 30.018545][ T381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.025170][ T381] CR2: 00007f1cad1e7dac CR3: 000000010bf7e000 CR4: 00000000003526b0
[ 30.033198][ T381] Kernel panic - not syncing: Fatal exception
[ 30.039648][ T381] Kernel Offset: disabled
[ 30.043984][ T381] Rebooting in 86400 seconds..