./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor726056426 <...> syzkaller syzkaller login: [ 13.737189][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 13.737205][ T36] audit: type=1400 audit(1754735535.249:59): avc: denied { transition } for pid=231 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.741397][ T36] audit: type=1400 audit(1754735535.249:60): avc: denied { noatsecure } for pid=231 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.744057][ T36] audit: type=1400 audit(1754735535.259:61): avc: denied { write } for pid=231 comm="sh" path="pipe:[2875]" dev="pipefs" ino=2875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 13.747023][ T36] audit: type=1400 audit(1754735535.259:62): avc: denied { rlimitinh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.749541][ T36] audit: type=1400 audit(1754735535.259:63): avc: denied { siginh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.160' (ED25519) to the list of known hosts. execve("./syz-executor726056426", ["./syz-executor726056426"], 0x7ffe2f35cc40 /* 10 vars */) = 0 brk(NULL) = 0x555578871000 brk(0x555578871d00) = 0x555578871d00 arch_prctl(ARCH_SET_FS, 0x555578871380) = 0 set_tid_address(0x555578871650) = 296 set_robust_list(0x555578871660, 24) = 0 rseq(0x555578871ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor726056426", 4096) = 27 getrandom("\xcc\xff\x6f\xa7\xce\xab\xbe\x17", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555578871d00 brk(0x555578892d00) = 0x555578892d00 brk(0x555578893000) = 0x555578893000 mprotect(0x7f66ac796000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 executing program write(1, "executing program\n", 18) = 18 socket(AF_VSOCK, SOCK_SEQPACKET, 0) = 3 bind(3, {sa_family=AF_VSOCK, svm_cid=VMADDR_CID_ANY, svm_port=0, svm_flags=0}, 16) = 0 listen(3, 0) = 0 socket(AF_VSOCK, SOCK_SEQPACKET, 0) = 4 connect(4, {sa_family=AF_VSOCK, svm_cid=VMADDR_CID_ANY, svm_port=0, svm_flags=0}, 16) = 0 mmap(0x200000000000, 16506880, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 openat(AT_FDCWD, 0x200000000000, O_WRONLY|O_CREAT|O_TRUNC|O_LARGEFILE|O_NOATIME, 000) = 5 ioctl(5, TUNSETIFF, 0x2000000000c0) = 0 write(5, 0x200000000440, 65007) = -1 EIO (Input/output error) setsockopt(4, SOL_SOCKET, SO_ZEROCOPY, 0x200000000180, 8) = 0 [ 24.349350][ T36] audit: type=1400 audit(1754735545.859:64): avc: denied { execmem } for pid=296 comm="syz-executor726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.358129][ T296] ------------[ cut here ]------------ [ 24.374223][ T296] 'send_pkt()' returns 0, but 28244 expected [ 24.380811][ T296] WARNING: CPU: 0 PID: 296 at net/vmw_vsock/virtio_transport_common.c:446 virtio_transport_send_pkt_info+0xe81/0x10c0 [ 24.381346][ T36] audit: type=1400 audit(1754735545.869:65): avc: denied { create } for pid=296 comm="syz-executor726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 24.393171][ T296] Modules linked in: [ 24.412876][ T36] audit: type=1400 audit(1754735545.869:66): avc: denied { bind } for pid=296 comm="syz-executor726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 24.412898][ T36] audit: type=1400 audit(1754735545.869:67): avc: denied { listen } for pid=296 comm="syz-executor726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 24.416768][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor726 Not tainted 6.12.38-syzkaller-gd0c633175c04 #0 79f03ae2e0a264f34f505a942aaa3597bcba712e [ 24.436278][ T36] audit: type=1400 audit(1754735545.869:68): avc: denied { connect } for pid=296 comm="syz-executor726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 24.436298][ T36] audit: type=1400 audit(1754735545.869:69): avc: denied { setopt } for pid=296 comm="syz-executor726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 24.436315][ T36] audit: type=1400 audit(1754735545.869:70): avc: denied { write } for pid=296 comm="syz-executor726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 24.436333][ T36] audit: type=1400 audit(1754735545.889:71): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 24.549675][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 24.559741][ T296] RIP: 0010:virtio_transport_send_pkt_info+0xe81/0x10c0 [ 24.566695][ T296] Code: 0f 09 fc 0f 0b bb f2 ff ff ff eb b5 e8 58 0f 09 fc c6 05 79 d4 46 02 01 48 c7 c7 20 87 79 86 44 89 f6 4c 89 e2 e8 5f 72 87 fb <0f> 0b e9 de fe ff ff e8 33 0f 09 fc 0f 0b e9 c6 f6 ff ff 89 d9 80 [ 24.586305][ T296] RSP: 0018:ffffc9000124f550 EFLAGS: 00010246 [ 24.592388][ T296] RAX: eba1135a8850ec00 RBX: ffffffff87c119b0 RCX: ffff888103740000 [ 24.600379][ T296] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 24.608343][ T296] RBP: ffffc9000124f630 R08: 0000000000000003 R09: 0000000000000004 [ 24.616400][ T296] R10: dffffc0000000000 R11: fffffbfff0e5ef10 R12: 0000000000006e54 [ 24.624378][ T296] R13: 0000000000008d60 R14: 0000000000000000 R15: ffffc9000124f680 [ 24.632358][ T296] FS: 0000555578871380(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 24.641298][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.647867][ T296] CR2: 000020000003f000 CR3: 0000000102f68000 CR4: 00000000003526b0 [ 24.655869][ T296] Call Trace: [ 24.659148][ T296] [ 24.662099][ T296] virtio_transport_seqpacket_enqueue+0x141/0x1c0 [ 24.668515][ T296] ? __cfi_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 24.675470][ T296] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 24.681291][ T296] ? remove_wait_queue+0x132/0x150 [ 24.686394][ T296] vsock_connectible_sendmsg+0xb1a/0x10c0 [ 24.692121][ T296] ? __cfi_vsock_connectible_sendmsg+0x10/0x10 [ 24.698276][ T296] ? __cfi_woken_wake_function+0x10/0x10 [ 24.703910][ T296] ? __kasan_kmalloc+0x96/0xb0 [ 24.708666][ T296] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 24.713952][ T296] ? security_socket_sendmsg+0x33/0xd0 [ 24.719411][ T296] ? __cfi_vsock_connectible_sendmsg+0x10/0x10 [ 24.725570][ T296] ____sys_sendmsg+0xa18/0xa70 [ 24.730350][ T296] ? __sys_sendmsg_sock+0x50/0x50 [ 24.735366][ T296] ? import_iovec+0x81/0xb0 [ 24.739862][ T296] ___sys_sendmsg+0x220/0x2a0 [ 24.744538][ T296] ? __sys_sendmsg+0x280/0x280 [ 24.749282][ T296] ? __kasan_check_read+0x15/0x20 [ 24.754305][ T296] __sys_sendmmsg+0x271/0x470 [ 24.758980][ T296] ? __cfi___sys_sendmmsg+0x10/0x10 [ 24.764187][ T296] ? __kasan_check_write+0x18/0x20 [ 24.769299][ T296] __x64_sys_sendmmsg+0xa4/0xc0 [ 24.774147][ T296] x64_sys_call+0xfec/0x2ee0 [ 24.778764][ T296] do_syscall_64+0x58/0xf0 [ 24.783195][ T296] ? clear_bhb_loop+0x50/0xa0 [ 24.787870][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.793763][ T296] RIP: 0033:0x7f66ac7236e9 [ 24.798181][ T296] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 24.817787][ T296] RSP: 002b:00007ffc873a5be8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 24.826211][ T296] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007f66ac7236e9 [ 24.834189][ T296] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 24.842180][ T296] RBP: 00007f66ac796610 R08: 18001100000ac5f8 R09: 18001100000ac5f8 [ 24.850167][ T296] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000001 [ 24.858128][ T296] R13: 00007ffc873a5db8 R14: 0000000000000001 R15: 0000000000000001 [ 24.866134][ T296] [ 24.869148][ T296] ---[ end trace 0000000000000000 ]---